@treefit yep, I recommend as well to take a look at that app, and this library that makes it easier to use the realtime API: github.com/webxdc/realtime
Canonical provides Ubuntu Pro with 10 years of enhanced CVE patching, FIPS compliance, CIS and DISA-STIG profiles and enterprise-grade open source software security with a single subscription for open source supply chain provenance.
@ltning basically once the next LTS release is out they start charging you for access to a repo that keeps publishing package security updates
That's my understanding of it anyway
FreeBSD ports tree does break compatibility with old releases when needed, but it doesn't really happen all that often and if you really needed to it's trivial to backport the updates yourself to your branch of the ports tree and get working, updated packages.
Also upgrading between major releases is significantly less disruptive anyway, soooo.... it's not hard to upgrade
We’ve now published the details of the security issues which we addressed in Monday’s coordinated security release of Matrix: read all about Project Hydra at matrix.org/blog/2025/08/projec… and please upgrade your servers and rooms where applicable.
@element any idea of the timeline of the release of the compatible version of element-x in fdroid ? I can see in the metadata the work is done gitlab.com/fdroid/fdroiddata/-… but no build available. Any plans of pushing to an other repo like Izzy @IzzyOnDroid or your own repos like @guardianproject ?
New from 404 Media: ICE added a random person to group chat, exposed highly sensitive details about an active manhunt in real-time. The person says they were added weeks ago, thought they were scam texts until start seeing data lookups etc. Incredible security failure 404media.co/ice-adds-random-pe…
The texts were sent to a group called “Mass Text” and show ICE using DMV and license plate reader data in an attempt to find their target, copies of the messages obtained by 404 Media show.
L’Office québécois de la langue française (OQLF) fait finalement marche arrière dans le dossier du Pub Burgundy Lion, après avoir demandé au propriétaire du restaurant d’ajouter « des éléments en français » à son enseigne.
Our regular Development Digest has some exciting updates on features that are nearing completion, in the case of Exchange email support, and are just starting development, in the case of the long-awaited Conversation View. We're also adjusting Account Hub and tackling the usual maintenance tasks and bug fixes
⚠️ Important headsup if you are on the server mastodon.cloud:
Mastodon.cloud no longer seems to be moderated. Its admin account hasn't posted since Feb 2023, its code of conduct is blank and there are vile racists posting from there. The racists have been reported many times but their accounts are still active.
Because of this, other server admins are starting to block mastodon.cloud completely.
Apple was forced to remove the blood oxygen monitoring two years ago amid a patent dispute, but a software update coming later today will revive the feature. pcmag.com/news/apple-watch-blo…
The standards also allow the bots to make "statements that demean people on the basis of their protected characteristics," such as "black people are dumber than white people."
Shopify CEO Tobi Lutke, Tyler and Cameron Winklevoss, and 80+ fintech and crypto CEOs urge Trump to block US banks from charging fees to access customer data.
ProRail’s war against bicycles is intensifying. After stopping installing bicycle gutters on staircases, they now put up signs to forbid bicycles on escalators (we have been doing that in Rotterdam since 1942, it truly is a lost art)
@oz1sej either there's an open source license screen somewhere in the infotainment listing countless licenses, or there is a mention in documentation somewhere
Interesting. So while they don't support the open source projects they use, at least they mention that they are using them. I assume many more don't even mention it, if their own code is not open source...?
The EU Regulation to Prevent and Combat Child Sexual Abuse, first published in May 2022, has become the "most criticized law of all time". Here's how to stop it now!
I am tired of this tune repeating every two years or so. But I'm angered more. This sort of propositions should be career ending for any politician in a democratic country. Yet, they just keep resurfacing and gaining support
Mail sent. Don't think I ever "contacted my representatives" before. Very uncomfortable. But f'ing Hell! What a shitshow of symbolic policy to allow a nightmare surveillance backdoor 🤬
How many times more were going to repeat this? Them fucking politicians not only waste our money for their salary bit also our time. Those idiots are clearly to fire, I don't wanna pay anymore for those ideas.
People have been rightly condemning what's going on in the US, but leaders other places are not taking it as a warning sign, but rather as an opening to enact similar policies.
We all have to watch out for the totalitarians in power and the global rich that power them!
I love Europe, but this must stop. We were supposed to protect human rights.... . And I strongly believe privacy is one of them. Besides, if we want to get ecological I dont belive using AI to read messeges will have a positive impact.
This is the kind of legislation all Europeans are calling for, of course. That said, we are handing over our lives to US companies, and not happy with that, now we will allow our 27 governments to open the letters in our mailbox.
At present, this is just a "landing page": a nice short name to remember, which will redirect you to the full PuTTY website at the same longer URL where it's always been.
But unlike putty.org or other third-party landing pages, this one is run by us, the actual PuTTY team, and it doesn't have a weird separate agenda of its own.
I intend to move the main PuTTY site over to that domain in the future, and leave just a redirector at the old location. But first I want to get the word out, so that people know which site to trust.
If anyone is still linking to putty.org, here's a place to link to instead. Please spread the word!
So many companies that earn money on open source but gives nothing back.
I often try in companies I work for to advocate that we should either contribute back to open source or donate some to maintainers. Often I'm on the loosing side of the battle.
Some of these companies are part of Automotive Grade Linux (top off my head, Toyota). Does the Linux Foundation, as parent foundation of AGL, contribute financially to Curl?
So that's part of the problem IMO. A Linux Foundation platinum membership costs 500K EUR annually. Some of these companies pay a fee to the LF or similar organizations, yet none of that money goes to fund free and open-source projects.
@nopatience as they list and show curl's license on their screens and in their documentation of course they know about it. They use it. They rely on it. It's just that they don't have to pay so they don't.
How many Open Source projects are you currently funding?
If the answer is zero, you're not taking good care of your business. If you're on the board of a company where that answer is zero, you're not doing your job.
(Curl has the benefit that it gets to announce itself in some cases; there are typically hundreds or thousands of other F/OSS components in use that don't. All face sustainability concerns.)
@9v1rt 1. curl doesn't "announce itself" 2. these companies use libcurl, it's as "hidden" in the mix as anything else. 3. I don't claim that curl is unique, it just happens to be my baby
Seven years ago I wrote about how a hundred million cars were running curl and as I brought up this blog post in a discussion recently, I came to reflect over how the world might have changed since. Is curl perhaps used in more cars now? Yes it is.
I suspect this may be similar to slide 2, but do you have a list of car companies who've submitted patches or positive support requests? (not just "make it work plz")
@nopatience True, but I don't think that changes much when it comes to the perception of libcurl just being taken for granted. (Unfortunately!)
And there is the elephant in the room: the license. Since I'm not a developer (I don't even work in IT) I'm only occasionally contributing a few patches here or there to FOSS projects but I'm always a bit puzzled when I encounter a project under a MIT-type license.
@hambier @nopatience switching to GPL would just mean that it would not be used in all those places. It would not make anyone pay. That only works with dual-license setups and that's an entirely separate deal and one I'm not a big fan of, even if it makes good business
Unfortunately this is very common. Software libraries but also things like OpenStreetMap. "Well, it does not cost any money, we'll take this!" Nobody in the companies thinks about the people behind the projects. Literally nobody!
But when there is a critical bug, everybody cries and demands (!) a quick fix from the creators! (log4j anybody?)
If you've got Ford on there, you can probably add Lincoln. Also you've got a bunch of Stellantis brands on there - there's a fair chance they might use the same software in their US brands too (Chrysler, Dodge, Jeep, Ram).
dumb question: if you want to get paid for major commercial use, why don't you just change the license in the next release? You're making it available for free but you literally don't have to, if you don't want to, right?
isn't this the general case independent of exact industry? Even if excluding "accidental" usage, because someone is using a *nix computer with scripts.
I wish there was an open-source license that had an ‘if you are a company with over $<X> revenue, then you owe <Y>% of it to the project’ type of clause.
Wouldn't that mostly fix the problem? Is there such a license available now? #openSource
[ Addendum: I'm still compelled by this idea. But, here is an important differing point of view: thenewstack.io/open-source-is-… ]
I have to be misunderstanding open-source, thought it just meant the source was openly available for use, modification, and redistribution as long as it is licensed the same. Does the problem have to do with modification & redistribution? I need to learn more.
Introduction Open source doesn’t just mean access to the source code. The distribution terms of open source software must comply with the following criteria: 1. Free Redistribution The license shall…
I love open source. I was part of a team that made open source motion control, and many of the 3D printers you can buy today use our ideas (or code, even).
I think one of the hardest parts of open source is how, when you do get sponsored and sell support, the sponsor now essentially gets control over the project, and gets upset if you don’t yield to it. Worse if you have few sponsors.
On a lighter note: thank you for your work and great project!
I think this is wonderful, so thanks for shining a light on it.
Assuming good faith: I wouldn't be surprised if some/most/all of these companies don't even know this fact. Making it visible could be very beneficial. Hopefully for you, but possibly also for the wider FLOSS ecosystem.
Bit sad/surprised to see several suggestions to make the software less/non-free instead of 'anger' towards those companies in their failure to make FLOSS (more) sustainable.
Without naming names, I had an open source partner tell us that while their stuff is used by some of the biggest corporations on the planet, my 100-person company is the only one who has given anything back.
I’m sorry but, as “selfish” and unfair as it may be from these compagnies to benefit from all this free work without ever giving back, isn’t that the whole point of the software license chosen ?
Curl and libcurl are true Open Source/Free Software and meet all definitions as such. It means that you are free to modify and redistribute all contents of the curl distributed archives. You may also freely use curl and libcurl in your commercial projects.
The whole point of those licenses always has been to allow capitalists to profit from the free work of thousands of “free software” enthusiasts, and that’s probably one of the main reasons why so many “big” projects (which are almost all funded by businesses, directly or indirectly) push very permissive licenses as much as they can under the pretext of “freedom”. 😬
While I feel for you and it is clearly unfair that your (excellent) work is used everywhere without much (if any) payment for it, to me it looks like this goes far beyond the “selfishness” of a few big businesses, and is a systemic problem that cannot be solved without questioning capitalism itself, and the fact that the “free software” community accepts and even embraces it so broadly. 😕
Nabízím aktivní dovolenou! Na týdenní tábor s postiženými potřebuju ještě jednoho asistenta či asistentku. Nepotřebujete žádnou kvalifikaci, jen ochotu pomáhat. Odjíždíme teď v sobotu, návrat příští sobotu. Je to super užitečná služba, aby si pečující rodiče mohli aspoň jednou za rok na týden odpočinout. Ale hlavně je to velká zábava. Jestli máte zájem nebo to aspoň zvažujete, ozvěte se mi do DM nebo na Signal (viz profil). Za sdílení díky! napivodobelce.cz
treefit
in reply to taye • • •GitHub - ArcaneCircle/filesync: p2p file sharing webxdc app
GitHubadb
in reply to treefit • • •github.com/webxdc/realtime
GitHub - webxdc/realtime: High level real-time and presence API for webxdc apps
GitHub