mastodon - Link to source

Last night Nirav Patel joined @bcantrill and me to talk about @frameworkcomputer, his company that has reimagined the modern laptop as repairable, configurable, robust and awesome. I was excited and Nirav did not disappoint!

Beyond the quality of the product, Framework has built a high quality company with unparalleled transparency. Also we love our laptops!

youtu.be/rGK1Vx8u1Vk


Oxide and Friends 12/4/2023 -- Framework Computer with Nirav Patel

Context: https://mastodon.social/@ahl/111523133364750842Notes: https://github.com/oxidecomputer/oxide-and-friends/blob/master/2023_12_04.md
YouTube
@Bryan Cantrill @Framework
in reply to Matt Campbell

mastodon - Link to source

Matt Campbell

Ah, just got to the bit about the Optima Braille laptop from Orbit Research in the recording. That was pre-announced in March, but as far as I can tell, pricing still hasn't been published. I don't think I'd want one, because I don't actually use Braille that much (that might be different if I was totally blind). But having a device like this that's modular and upgradeable is definitely a big step forward. Here's hoping they ship soon.

mastodon - Link to source

Updating the Performance Inequality Gap series [1] (post soon), but here's a teaser: new CPU charts, by price band. Single-core perf matters for web apps, and I won't sugarcoat; it's grim.

The fastest Androids are half as fast as contemporary iPhones (now 4+ years behind) and volume devices (~$300USD) are 1/5th as fast as iPhones.

Building for iPhones erects walls around wealth and precludes effective access to participation in society for those without means.

[1]: infrequently.org/series/perfor…

A chart of Geekbench 5 multi-core scores across a range of price-points. TL;DR: The Performance Inequality Gap continues to grow, with iOS devices more than 2 years ahead of even the fastest Androids, and more than 5x faster than mid-range Android devices (which constitute most sales).
A chart of Geekbench 5 single-core scores across a range of price-points. The Performance Inequality Gap is largest here, and is accelerating. This matters to the web because single-core perf dominates web page loading and interactivity. The fastest Androids are 4.5 years behind iOS devices, and mid-range Androids remain 1/5th as fast as top-end iOS phones. Low-end Androids? Almost 1/10th as fast as the shiny iPhone in your pocket.

Infrequently Noted

Alex Russell on browsers, standards, and the process of progress.
Infrequently Noted
in reply to Alex Russell

mastodon - Link to source

Glyph

@benschwarz Your broader point is well-taken, but a counterpoint is that this is an instance of the "poverty tax"; low-end android devices are landfill practically out of the box. No security updates and poor durability means that android buyers buy more, worse devices. If one person buys a single iPhone SE over the course of 6 years but their demographic doppelganger buys 4 shitty Androids they have to replace, that does not mean serving Android is serving 4x as many users.
@benschwarz
in reply to Matt Campbell

mastodon - Link to source

Matt Campbell

@glyph @benschwarz And I, for one, don't blame the low-end Android buyers for choosing the less durable option, though the handset makers and carriers might be to blame for not fully informing people about the downsides of the "cheaper" option. Then again, I don't know how many people wouldn't have a smartphone at all if their only option was to save up for an iPhone SE.
@Glyph @benschwarz

mastodon - Link to source

I can finally reveal some research I've been involved with over the past year or so.

We (@redford, @mrtick and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parti
es.

1/4

@mrtick@infosec.exchange in front of an Impuls.
@Michał Kowalczyk @mrtick

reshared this

in reply to q3k @39C3 (📞4Q3K)

mastodon - Link to source

q3k @39C3 (📞4Q3K)

We found that the PLC code actually contained logic that would lock up the train with bogus error codes after some date, or if the train wasn't running for a given time. One version of the controller actually contained GPS coordinates to contain the behaviour to third party workshops.

It was also possible to unlock the trains by pressing a key combination in the cabin controls. None of this was documented.

2/4

A Selectron CPU831 TCMS/PLC on a workbench, being probed and programmed.
Coordinates of a third-party workshop extracted from PLC, overlaid on a map.
This entry was edited (2 years ago)

reshared this

in reply to q3k @39C3 (📞4Q3K)

mastodon - Link to source

q3k @39C3 (📞4Q3K)

The key unlock was deleted in newer PLC software versions, but the lock logic remained.

After a certain update by NEWAG, the cabin controls would also display scary messages about copyright violations if the HMI detected a subset of conditions that should've engaged the
lock but the train was still operational.

The trains also had a GSM telemetry unit that was broadcasting lock conditions, and in some cases appeared to be able to lock the train remotely.

3/4

A NEWAG Impuls HMI complaining about copyright violation on cabin controls.

reshared this

in reply to q3k @39C3 (📞4Q3K)

mastodon - Link to source

q3k @39C3 (📞4Q3K)

and @mrtick held an unrecorded talk a bout this at OhMyHack in Warsaw - I unfortunately couldn't make it because of Munich snow.

For now this is making the rounds in Polish-speaking sources, but we do have a talk scheduled about this at 37C3, in which we plan to do a deep dive into this and actually publish our findings.

@zaufanatrzeciastrona 's article about this: zaufanatrzeciastrona.pl/post/o…

O trzech takich, co zhakowali prawdziwy pociąg – a nawet 30 pociągów | Zaufana Trzecia Strona

Adam Haertle (Zaufana Trzecia Strona)
@ZaufanaTrzeciaStrona.pl @mrtick

reshared this

mastodon - Link to source

🚩🚩Breaking News🚩🚩

Microsoft Outlook is incorrectly filtering emails sent from tutanota.com addresses as spam. 🚫

Our technical support team has been in contact with them since November 16th and we have not seen any progress in getting this resolved. 🚧

This error only affects the tutanota.com domain.

If you encounter any errors when trying to send emails to any Outlook accounts, please create an alias using one of our other domains as a temporary workaround.

👉 tuta.com/blog/outlook-falsely-…

Microsoft Outlook is filtering all emails from @tutanota.com addresses as spam.

Microsoft Outlook Blocking All Email from @tutanota.com Domain as Spam. Is This Legal?

Users began reporting issues with mail delivery in November 2023 and communication with Microsoft has reached radio silence.
Tutanota

mastodon - Link to source

Implementing the Online Safety Act: Protecting children from online pornography

Ofcom is consulting on guidance on age verification for #porn sites, under the UK’s #OnlineSafetyAct.

I’ll write it up properly later today, but for now, just let me know:

How would you feel about handing over your driving licence/passport, and then turning on your camera for a “liveness” check?


Implementing the Online Safety Act: Protecting children from online pornography

Children are set to be protected from accessing online pornography under new age-check guidance proposed by Ofcom today to help services to comply with online safety laws.
Ofcom
#porn #onlinesafetyact
This entry was edited (2 years ago)

mastodon - Link to source
TalkBack 14.1 comes with image descriptions (which are actually surprisingly accurate from my limited testing), spell check while using the Braille keyboard, automatic scrolling for Braille displays (with a customizable speed), and (most surprisingly to me), new haptics! I'm not convinced I like them yet, just because text elements don't appear to have a vibration, but it actually feels like Voice Assistant or VoiceOver now!

reshared this

writefreely - Link to source

Who Cares Who Delivers Our Notifications?

Android or iPhone — either Google or Apple delivers our messages — surely? You don't accept that?

Time I Learned: there are freedom-respecting phones.


People who do not want to depend on Google or have them control our devices are using android-compatible but not google-controlled phones, a.k.a. “degoogled phones”. We have been asking (ourselves) for several years if we can have google-free push notifications. Thanks to the developers of the UnifiedPush standard, the answer is now, “yes!”

But why?

You've probably heard of the Observer Effect. Partly influenced by hearing that someone is observing my blog from a social psychology angle relating to attitudes among the open source community, but also I was already thinking I should, I've decided to write more about why I write/build/care about the topics I choose. For a start I wrote a “Why Would I Care?” section for my latest post Google-Free Push Messaging for Google-Free Phones. Here, that section is published as an article on its own.

Why Would I Care?


Why would I care how my push notifications reach my phone? What difference does it make to me?

That's a good question. Inside a building that has a good heating, ventilation and air conditioning system, we don't notice the system, we just feel comfortable. With push notification delivery, part of the answer is the same: the system just does its job and our notifications come through. Whether the delivery channel is controlled by Google or by us or by someone else doesn't change that. The immediate, concrete result is the same. So it's not about wanting it to function differently; that's not why I care.

The difference it makes to me is about freedom, privacy, independence, self-agency. I am happy to have the choice to use any particular company's service, but I am not happy to be forced to use them, to have no choice, if I can't leave no matter how bad it gets. What if I don't like Google monitoring my notifications to know what I'm doing? What if I don't like to live in fear of offending them in some way and being cut off from their service and having no replacement option? What if I just don't want to condone their business model by using it, but I still want to be notified when I have messages?

Push notification delivery is one of the many invisible technical services that underpin our online communication systems. These kinds of services are implicitly considered to be part of the public infrastructure, something that we now assume is available to everyone.

When we allow ourselves to become dependent on any particular company's service, and yet do not regulate it as a public service provider, then we subject ourselves to the company's whims, priorities and values, which are different from ours. They will inevitably act against public interests.

Building publicly owned infrastructure based on open standards and freedom software is therefore essential to ensure the independent provision of services aligned with public needs and values.

I am one of the people who feels it is my place to use, promote and build non-proprietary public services, both for my own mental wellbeing and because I believe it is important for society.

It is the same reason why I support: open Ed-Tech, degoogled phones, #matrix, #fediverse, freedom software, open-source hardware, #rightToRepair.

Speaking as one of the people who prefer our devices not to be controlled by and dependent on Google:

What do we want? UnifiedPush!

When do we want it? Now!


I would love to work on any freedom tech project bringing UnifiedPush to a wider audience.

See my other posts tagged... #unifiedPush #degoogled #awesomeFOSS

Follow/Feedback/Contact: RSS feed · Fedi follow this blog: @julian​@wrily.foad.me.uk · use the Cactus Comments box above · matrix me · Fedi follow me · email me · julian.foad.me.ukDonate: via LiberapayAll posts © Julian Foad and licensed CC-BY-ND except quotes, translations, or where stated otherwise


awesomeFOSS — julian

awesomeFOSS posts on julian
julian

julian

2023-12-04 12:42:55


Google-Free Push Messaging for Google-Free Phones


UnifiedPush open-standard push messaging complements degoogled android-compatible phone OS's such as LineageOS.

People who do not want to depend on Google or have them control our devices are using android-compatible but not google-controlled phones, a.k.a. “degoogled phones”. We have been asking for several years if we can have google-free push notifications. Thanks to the developers of UnifiedPush, the answer is now, “yes!”

The open standard UnifiedPush.org has now been created. While not a large number yet, a useful handful of apps already support UnifiedPush, including several matrix and fediverse apps. For its servers and the associated client-side “distributor” component, there are multiple successful implementations deployed.

The current situation is such that anyone can use UnifiedPush on an android-compatible device by installing their choice of UnifiedPush distributor app (which must run in the background), configuring it to connect to their chosen U-P server (compatible with chosen distributor), and then installing any number of U-P-aware apps which will then use it (without needing per-app configuration to do so).

In android-compatible OS ROM projects such as LineageOS, implementing some core support for the UnifiedPush.org standard now seems to me like the right way to go. Exactly what form of support is to be decided.

Involving the OS ROM


Some ways an OS like LineageOS could usefully be involved to improve the UnifiedPush experience are:

  • ensuring the U-P distributor app has a convenient way to be installed and permitted to run in the background, free from restrictions, because getting this right is critical and if the user installs the distributor manually it can be tricky to get right; (investigate: would it need to be a system app, or some kind of whitelisting (ugh), or be split into a system component and a user component, or what?)
  • providing a convenient way to let the user (or the OS distribution provider) configure the distributor's U-P server address: perhaps rather than using an ad-hoc UI provided by the distributor app, it could integrate with “accounts” settings.
  • potentially providing a system settings UI for monitoring the U-P connections and which apps are using them.

Thoughts on the role of microG. The purpose of microG as best I understand is to provide Google compatible APIs to apps which expect Google services. Underneath these APIs, it provides access to a mixture of actual Google services, alternative real services, and fake services. As far as I know it does not so far provide any non-Google APIs, and yet for push notifications the provision of UnifiedPush APIs might be a good fit for fulfilling its overall purpose as a compatibility layer. Or perhaps not, perhaps that is out of scope and should be in LineageOS or another add-on layer instead. I'm sure the folks involved will work out what is best.

Constraints, FCM Fallback, non-Android


Unlike the situation with some other google APIs, it is important to note that an OS compatibility layer such as microG cannot automatically divert the connections made by apps built using Google's FCM, to use U-P instead. The apps must be modified.

However, the inverse is possible: a UnifiedPush aware app can automatically “fall back” to using Google's FCM if U-P support is absent and FCM support is present. See details of the Embedded FCM Distributor in UnifiedPush documentation.

Non-Android devices can use UnifiedPush too, including Linux phones such as PinePhone and Purism Librem. The UnifiedPush D-Bus spec may be relevant. (On locked-down proprietary devices such as Apple's it is unlikely to be possible, nor to make much sense: FAQ.)

Packaging a UnifiedPush Distributor


A U-P distributor app could be built in to an OS or subsystem like microG but there is a significant down-side to that: it would support only one type, or at most a fixed small number of types, of U-P server. Choosing a distributor type is more of a whole OS packaging decision. In cases where the whole OS is related to a service provider of some kind (so not like LineageOS, but perhaps like Murena/Calyx/Graphene etc.), the service provider might choose to run a U-P server for their users and have their distributor automatically connect to it (with user consent/opt-in/opt-out). In the more generic/self-hosted case (like LineageOS) it makes more sense to leave it to the user to install their preferred U-P distributor.

I would love to see distributors of google-free phones, such as Murena, support google-free push notifications. I posted a brief sketch of a UnifiedPush Plan for Murena /e/-OS on their forum, without attempting to go into details of integrating the U-P distributor into the ROM.

History


A rough time line of UnifiedPush development. (From light research and having followed it through its development.)


Conclusion


Whatever the specifics of how any android-compatible OS ROM project might choose to proceed with google-free push support, the solution space enabled by UnifiedPush now exists. Speaking as one of the people who prefer our devices not to be controlled by and dependent on Google:

What do we want? UnifiedPush!

When do we want it? Now!

See my other posts tagged... #unifiedPush #degoogled #awesomeFOSS

Follow/Feedback/Contact: RSS feed · Fedi follow this blog: @[url=https://social.jsts.xyz/users/8mflxtuvnp]Julian[/url]​@wrily.foad.me.uk · use the Cactus Comments box above · matrix me · Fedi follow me · email me · julian.foad.me.ukDonate: via LiberapayAll posts © Julian Foad and licensed CC-BY-ND except quotes, translations, or where stated otherwise



nextpush-android

Android application
Codeberg.org

#matrix #fediverse #UnifiedPush #righttorepair #degoogled #awesomeFOSS

mastodon - Link to source
In a matter of a couple of weeks, Android accessibility has witnessed a dramatic boost from almost 0 access to picture descriptions to a wide range of options.
1. TalkBack 14.1 can describe images. Though, IMO, not as accurately as VoiceOver, it works well, and its auto-text extraction is awesome.
2. As you know, Seeing AI is now on Android along with its AI-oriented goodies.
3. @bemyeyes Be My AI just became available on Android. It's not yet capable of receiving pictures from other apps, but guess, hopefully, it will be added soon.
4. Since we're handling Google, I don't know when, but Lookout's AI capabilities, currently limited to users in the USA, will expand to other regions.
@Be My Eyes

reshared this

mastodon - Link to source
New app added to the Accessible Apps directory by Amir: Dictionary.com Premium. Accessible with a few unlabeled buttons. Download the number one dictionary app with English language learning tools and word games built for every level of learner. accessibleandroid.com/app/dict… #Android #App

Dictionary.com Premium - Accessible Android

Unlike most dictionaries for Android, navigating through the definition area is pleasantly doable with Dictionary.com Premium, and words aren't displayed as
Accessible Android
#android #app

mastodon - Link to source

So I've been working with GTK4/Libadwaita in Python (in Flatpak), and I'm trying to get notifications to work.

I keep getting this error: "gi.repository.GLib.GError: g-io-error-quark: Error calling StartServiceByName for org.freedesktop.Notifications: Timeout was reached (24)"

Am I missing Flatpak overrides? (Docs seem to say no docs.flatpak.org/en/latest/por… )

Am I doing this wrong? (Code at github.com/TheKrafter/Grouping… )

#AskFedi #GTK4 #Python #LibAdwaita #gnome #Programming

Portal support in GTK — Flatpak documentation

docs.flatpak.org
#askfedi #gnome #programming #python #libadwaita #GTK4

mastodon - Link to source
Who makes #LibreOffice? Hundreds of people around the world – volunteers, developers in the ecosystem, and more. Robert Cabane here is part of our Quality Assurance (QA) project – and you can join it too: blog.documentfoundation.org/bl… #foss #OpenSource
Photo of Robert Cabane

LibreOffice community interview: Robert Cabane, QA project - The Document Foundation Blog

Today we’re talking to Robert Cabane, who helps out in LibreOffice’s Quality Assurance (QA) community: Tell us a bit about yourself! I’m now retired (aged 71), living in Bordeaux, France.
Mike Saunders (The Document Foundation)
#foss #opensource #libreoffice

LibreOffice reshared this.

mastodon - Link to source

Let's Encrypt will issue new intermediate certs in Q1/2024: groups.google.com/a/mozilla.or…

Make sure your LE cert deployment logic includes serving the right intermediates that ACME should hand you, not just that same old LE intermediate you got years ago. Otherwise, there'll be breakage...

#x509 #pki #LetsEncrypt

Let's Encrypt New Intermediate Certificates

groups.google.com
#letsencrypt #pki #x509

reshared this

mastodon - Link to source
Mi barrio tiene aceras estrechas en la mayoría de calles. Pues en vez de facilitar la accesibilidad, a la concejala del distrito y funcionarios del área les parece estupendo bloquear un cruce de esta manera: con un parquímetro de dos metros que hace que por la acera no quepa nadie y para cruzar haya que salir a la calzada. No es que no quepan carritos de bebe, carros de la compra o sillas de ruedas. Es que de normal, para pasar he tenido que salir de la acera. Urbanismo Carapolla Style.
Foto de una esquina del barrio de Bellas Vistas, en Tetuán (Madrid) en cuya acera han plantado un parquímetro bloqueando el paso. Urbanismo Carapolla Style

mastodon - Link to source
Be My Eyes CEO Mike Buckley Talks OpenAI Boardroom Saga, ‘Life-Changing’ Tech, More forbes.com/sites/stevenaquino/…

Be My Eyes CEO Mike Buckley Talks OpenAI Boardroom Saga, ‘Life-Changing’ Tech, More

Many companies like to talk the talk regarding accessibility, but there are precious few that actually walk the walk too; OpenAI, Buckley said, is one of those companies.
Steven Aquino (Forbes)

mastodon - Link to source

Média zaregistrovala pirátské téma posledních týdnu. V lednu si strana zvolí nové vedení - nominace běží. V sobotu oznámila kandidaturu na předsedkyni Markéta Gregorová, čímž volba získala novou dynamiku.

#Enko Obhajoba postu předsedy Pirátské strany nebude pro ministra Ivana Bartoše jen formalita. Bude proti němu kandidovat europoslankyně Markéta Gregorová, která zastupuje silné stranické křídlo kritiků pirátského vládního angažmá. #PirátiCF24 #PiratiRP

Odemykám🔓denikn.cz/1299691/bartose-vyzv…


Bartoše vyzve europoslankyně Gregorová. Do souboje o vedení Pirátů ji vysílají kritici účasti na vládě

Lednová obhajoba postu předsedy Pirátské strany nebude pro ministra místního rozvoje Ivana Bartoše jen formalita. Bude proti němu kandidovat europoslankyně Markéta Gregorová, která zastupuje silné stranické křídlo kritiků pirátského vládního angažmá.
Kateřina Frouzová (Deník N)
#enko #piraticf24 #piratirp

mastodon - Link to source

I'm looking for jobs again! I'm open to jobs in the Rust programming language. 🦀

I have >1 year of professional working experience in Rust / axum / tokio. ~3 years of Rust programming experience in total.

CV: docs.google.com/document/d/e/2…

TYPE: Full time or contract

LOCATION: I'm based in Malaysia.

REMOTE: Yes, and open to relocation (not US).

#rustlang #rustjobs

CV - Teoh Han Hui

docs.google.com
#RustLang #rustjobs
in reply to dango🍡

mastodon - Link to source

mcc

It's so weird that people like politicians and media act as if creating jobs is the function of the economy or like, a function of the economy (whereas in reality all the pressure in the economy is to minimize employment as much as possible). I guess we have to pretend this or else having a society side ideology that work is how you morally earn the right to live would just be totally intellectually untenable?
This entry was edited (2 years ago)

mastodon - Link to source

Brenda Lee's "Rockin' Around the Christmas Tree" is No. 1 on the Billboard Hot 100 — 65 years after it was released. This breaks the record for the longest wait from a song's release to its hitting the top spot. Billboard takes a look at how much airplay it's getting, the history of the song, and the 65th anniversary celebrations, including its first video and Lee's new TikTok account.

flip.it/fEcnpI

#Music #HolidayMusic #BrendaLee #BillboardHot100


Brenda Lee’s ‘Rockin’ Around the Christmas Tree’ Tops Hot 100

Lee leads for the first time since 1960, with only the third holiday No. 1 in the chart’s history.
Gary Trust (Billboard)
#music #holidaymusic #brendalee #billboardhot100

mastodon - Link to source

Calling all AppleVis users! 🎉 It's time to celebrate the best apps and games of the year with the AppleVis Golden Apples Awards! 🏆

We're thrilled to announce that voting is now open. ✨ Cast your vote for the Apple App and Game that most impressed you in 2023. These nominees were chosen by our community for their exceptional accessibility and impact. 🤝

Whether you've already discovered your favorites or are eager to explore the nominees, we encourage you to join the fun and vote! 🗳️ Every voice counts in recognizing the developers who are making a difference.

applevis.com/blog/cast-your-vo…

Cast Your Votes Now for the AppleVis Golden Apples of 2023 | AppleVis

We are pleased to announce that voting for the AppleVis Golden Apple Awards of 2023 is now open. Launched in 2012, the AppleVis Golden Apples is an opportunity for blind and low vision users of Apple products to recognize and acknowledge the hard wor…
www.applevis.com

mastodon - Link to source
ChatGPT will provide more detailed and accurate responses if you pretend to tip it, according to a new study windowscentral.com/software-ap…

ChatGPT will provide more detailed and accurate responses if you pretend to tip it, according to a new study

ChatGPT might furnish you with better, more detailed, and accurate responses to queries if there's an incentive for it.
Kevin Okemwa (Windows Central)
⇧