Last night Nirav Patel joined @bcantrill and me to talk about @frameworkcomputer, his company that has reimagined the modern laptop as repairable, configurable, robust and awesome. I was excited and Nirav did not disappoint!

Beyond the quality of the product, Framework has built a high quality company with unparalleled transparency. Also we love our laptops!

youtu.be/rGK1Vx8u1Vk

in reply to Matt Campbell

Ah, just got to the bit about the Optima Braille laptop from Orbit Research in the recording. That was pre-announced in March, but as far as I can tell, pricing still hasn't been published. I don't think I'd want one, because I don't actually use Braille that much (that might be different if I was totally blind). But having a device like this that's modular and upgradeable is definitely a big step forward. Here's hoping they ship soon.

Updating the Performance Inequality Gap series [1] (post soon), but here's a teaser: new CPU charts, by price band. Single-core perf matters for web apps, and I won't sugarcoat; it's grim.

The fastest Androids are half as fast as contemporary iPhones (now 4+ years behind) and volume devices (~$300USD) are 1/5th as fast as iPhones.

Building for iPhones erects walls around wealth and precludes effective access to participation in society for those without means.

[1]: infrequently.org/series/perfor…

in reply to Alex Russell

@benschwarz Your broader point is well-taken, but a counterpoint is that this is an instance of the "poverty tax"; low-end android devices are landfill practically out of the box. No security updates and poor durability means that android buyers buy more, worse devices. If one person buys a single iPhone SE over the course of 6 years but their demographic doppelganger buys 4 shitty Androids they have to replace, that does not mean serving Android is serving 4x as many users.
in reply to Matt Campbell

@glyph @benschwarz And I, for one, don't blame the low-end Android buyers for choosing the less durable option, though the handset makers and carriers might be to blame for not fully informing people about the downsides of the "cheaper" option. Then again, I don't know how many people wouldn't have a smartphone at all if their only option was to save up for an iPhone SE.

I can finally reveal some research I've been involved with over the past year or so.

We (@redford, @mrtick and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parti
es.

1/4

reshared this

in reply to q3k @39C3 (📞4Q3K)

We found that the PLC code actually contained logic that would lock up the train with bogus error codes after some date, or if the train wasn't running for a given time. One version of the controller actually contained GPS coordinates to contain the behaviour to third party workshops.

It was also possible to unlock the trains by pressing a key combination in the cabin controls. None of this was documented.

2/4

This entry was edited (2 years ago)

reshared this

in reply to q3k @39C3 (📞4Q3K)

The key unlock was deleted in newer PLC software versions, but the lock logic remained.

After a certain update by NEWAG, the cabin controls would also display scary messages about copyright violations if the HMI detected a subset of conditions that should've engaged the
lock but the train was still operational.

The trains also had a GSM telemetry unit that was broadcasting lock conditions, and in some cases appeared to be able to lock the train remotely.

3/4

reshared this

in reply to q3k @39C3 (📞4Q3K)

and @mrtick held an unrecorded talk a bout this at OhMyHack in Warsaw - I unfortunately couldn't make it because of Munich snow.

For now this is making the rounds in Polish-speaking sources, but we do have a talk scheduled about this at 37C3, in which we plan to do a deep dive into this and actually publish our findings.

@zaufanatrzeciastrona 's article about this: zaufanatrzeciastrona.pl/post/o…

reshared this

🚩🚩Breaking News🚩🚩

Microsoft Outlook is incorrectly filtering emails sent from tutanota.com addresses as spam. 🚫

Our technical support team has been in contact with them since November 16th and we have not seen any progress in getting this resolved. 🚧

This error only affects the tutanota.com domain.

If you encounter any errors when trying to send emails to any Outlook accounts, please create an alias using one of our other domains as a temporary workaround.

👉 tuta.com/blog/outlook-falsely-…

Implementing the Online Safety Act: Protecting children from online pornography

Ofcom is consulting on guidance on age verification for #porn sites, under the UK’s #OnlineSafetyAct.

I’ll write it up properly later today, but for now, just let me know:

How would you feel about handing over your driving licence/passport, and then turning on your camera for a “liveness” check?

This entry was edited (2 years ago)

TalkBack 14.1 comes with image descriptions (which are actually surprisingly accurate from my limited testing), spell check while using the Braille keyboard, automatic scrolling for Braille displays (with a customizable speed), and (most surprisingly to me), new haptics! I'm not convinced I like them yet, just because text elements don't appear to have a vibration, but it actually feels like Voice Assistant or VoiceOver now!

reshared this

Who Cares Who Delivers Our Notifications?


Android or iPhone — either Google or Apple delivers our messages — surely? You don't accept that?

Time I Learned: there are freedom-respecting phones.


People who do not want to depend on Google or have them control our devices are using android-compatible but not google-controlled phones, a.k.a. “degoogled phones”. We have been asking (ourselves) for several years if we can have google-free push notifications. Thanks to the developers of the UnifiedPush standard, the answer is now, “yes!”

But why?

You've probably heard of the Observer Effect. Partly influenced by hearing that someone is observing my blog from a social psychology angle relating to attitudes among the open source community, but also I was already thinking I should, I've decided to write more about why I write/build/care about the topics I choose. For a start I wrote a “Why Would I Care?” section for my latest post Google-Free Push Messaging for Google-Free Phones. Here, that section is published as an article on its own.

Why Would I Care?


Why would I care how my push notifications reach my phone? What difference does it make to me?

That's a good question. Inside a building that has a good heating, ventilation and air conditioning system, we don't notice the system, we just feel comfortable. With push notification delivery, part of the answer is the same: the system just does its job and our notifications come through. Whether the delivery channel is controlled by Google or by us or by someone else doesn't change that. The immediate, concrete result is the same. So it's not about wanting it to function differently; that's not why I care.

The difference it makes to me is about freedom, privacy, independence, self-agency. I am happy to have the choice to use any particular company's service, but I am not happy to be forced to use them, to have no choice, if I can't leave no matter how bad it gets. What if I don't like Google monitoring my notifications to know what I'm doing? What if I don't like to live in fear of offending them in some way and being cut off from their service and having no replacement option? What if I just don't want to condone their business model by using it, but I still want to be notified when I have messages?

Push notification delivery is one of the many invisible technical services that underpin our online communication systems. These kinds of services are implicitly considered to be part of the public infrastructure, something that we now assume is available to everyone.

When we allow ourselves to become dependent on any particular company's service, and yet do not regulate it as a public service provider, then we subject ourselves to the company's whims, priorities and values, which are different from ours. They will inevitably act against public interests.

Building publicly owned infrastructure based on open standards and freedom software is therefore essential to ensure the independent provision of services aligned with public needs and values.

I am one of the people who feels it is my place to use, promote and build non-proprietary public services, both for my own mental wellbeing and because I believe it is important for society.

It is the same reason why I support: open Ed-Tech, degoogled phones, #matrix, #fediverse, freedom software, open-source hardware, #rightToRepair.

Speaking as one of the people who prefer our devices not to be controlled by and dependent on Google:

What do we want? UnifiedPush!

When do we want it? Now!


I would love to work on any freedom tech project bringing UnifiedPush to a wider audience.


See my other posts tagged... #unifiedPush #degoogled #awesomeFOSS


Follow/Feedback/Contact: RSS feed · Fedi follow this blog: @julian​@wrily.foad.me.uk · use the Cactus Comments box above · matrix me · Fedi follow me · email me · julian.foad.me.ukDonate: via LiberapayAll posts © Julian Foad and licensed CC-BY-ND except quotes, translations, or where stated otherwise


Google-Free Push Messaging for Google-Free Phones


UnifiedPush open-standard push messaging complements degoogled android-compatible phone OS's such as LineageOS.

People who do not want to depend on Google or have them control our devices are using android-compatible but not google-controlled phones, a.k.a. “degoogled phones”. We have been asking for several years if we can have google-free push notifications. Thanks to the developers of UnifiedPush, the answer is now, “yes!”

The open standard UnifiedPush.org has now been created. While not a large number yet, a useful handful of apps already support UnifiedPush, including several matrix and fediverse apps. For its servers and the associated client-side “distributor” component, there are multiple successful implementations deployed.

The current situation is such that anyone can use UnifiedPush on an android-compatible device by installing their choice of UnifiedPush distributor app (which must run in the background), configuring it to connect to their chosen U-P server (compatible with chosen distributor), and then installing any number of U-P-aware apps which will then use it (without needing per-app configuration to do so).

In android-compatible OS ROM projects such as LineageOS, implementing some core support for the UnifiedPush.org standard now seems to me like the right way to go. Exactly what form of support is to be decided.

Involving the OS ROM


Some ways an OS like LineageOS could usefully be involved to improve the UnifiedPush experience are:

  • ensuring the U-P distributor app has a convenient way to be installed and permitted to run in the background, free from restrictions, because getting this right is critical and if the user installs the distributor manually it can be tricky to get right; (investigate: would it need to be a system app, or some kind of whitelisting (ugh), or be split into a system component and a user component, or what?)
  • providing a convenient way to let the user (or the OS distribution provider) configure the distributor's U-P server address: perhaps rather than using an ad-hoc UI provided by the distributor app, it could integrate with “accounts” settings.
  • potentially providing a system settings UI for monitoring the U-P connections and which apps are using them.

Thoughts on the role of microG. The purpose of microG as best I understand is to provide Google compatible APIs to apps which expect Google services. Underneath these APIs, it provides access to a mixture of actual Google services, alternative real services, and fake services. As far as I know it does not so far provide any non-Google APIs, and yet for push notifications the provision of UnifiedPush APIs might be a good fit for fulfilling its overall purpose as a compatibility layer. Or perhaps not, perhaps that is out of scope and should be in LineageOS or another add-on layer instead. I'm sure the folks involved will work out what is best.

Constraints, FCM Fallback, non-Android


Unlike the situation with some other google APIs, it is important to note that an OS compatibility layer such as microG cannot automatically divert the connections made by apps built using Google's FCM, to use U-P instead. The apps must be modified.

However, the inverse is possible: a UnifiedPush aware app can automatically “fall back” to using Google's FCM if U-P support is absent and FCM support is present. See details of the Embedded FCM Distributor in UnifiedPush documentation.

Non-Android devices can use UnifiedPush too, including Linux phones such as PinePhone and Purism Librem. The UnifiedPush D-Bus spec may be relevant. (On locked-down proprietary devices such as Apple's it is unlikely to be possible, nor to make much sense: FAQ.)

Packaging a UnifiedPush Distributor


A U-P distributor app could be built in to an OS or subsystem like microG but there is a significant down-side to that: it would support only one type, or at most a fixed small number of types, of U-P server. Choosing a distributor type is more of a whole OS packaging decision. In cases where the whole OS is related to a service provider of some kind (so not like LineageOS, but perhaps like Murena/Calyx/Graphene etc.), the service provider might choose to run a U-P server for their users and have their distributor automatically connect to it (with user consent/opt-in/opt-out). In the more generic/self-hosted case (like LineageOS) it makes more sense to leave it to the user to install their preferred U-P distributor.

I would love to see distributors of google-free phones, such as Murena, support google-free push notifications. I posted a brief sketch of a UnifiedPush Plan for Murena /e/-OS on their forum, without attempting to go into details of integrating the U-P distributor into the ROM.

History


A rough time line of UnifiedPush development. (From light research and having followed it through its development.)


Conclusion


Whatever the specifics of how any android-compatible OS ROM project might choose to proceed with google-free push support, the solution space enabled by UnifiedPush now exists. Speaking as one of the people who prefer our devices not to be controlled by and dependent on Google:

What do we want? UnifiedPush!

When do we want it? Now!


See my other posts tagged... #unifiedPush #degoogled #awesomeFOSS


Follow/Feedback/Contact: RSS feed · Fedi follow this blog: @[url=https://social.jsts.xyz/users/8mflxtuvnp]Julian[/url]​@wrily.foad.me.uk · use the Cactus Comments box above · matrix me · Fedi follow me · email me · julian.foad.me.ukDonate: via LiberapayAll posts © Julian Foad and licensed CC-BY-ND except quotes, translations, or where stated otherwise


In a matter of a couple of weeks, Android accessibility has witnessed a dramatic boost from almost 0 access to picture descriptions to a wide range of options.
1. TalkBack 14.1 can describe images. Though, IMO, not as accurately as VoiceOver, it works well, and its auto-text extraction is awesome.
2. As you know, Seeing AI is now on Android along with its AI-oriented goodies.
3. @bemyeyes Be My AI just became available on Android. It's not yet capable of receiving pictures from other apps, but guess, hopefully, it will be added soon.
4. Since we're handling Google, I don't know when, but Lookout's AI capabilities, currently limited to users in the USA, will expand to other regions.

reshared this

New app added to the Accessible Apps directory by Amir: Dictionary.com Premium. Accessible with a few unlabeled buttons. Download the number one dictionary app with English language learning tools and word games built for every level of learner. accessibleandroid.com/app/dict… #Android #App

So I've been working with GTK4/Libadwaita in Python (in Flatpak), and I'm trying to get notifications to work.

I keep getting this error: "gi.repository.GLib.GError: g-io-error-quark: Error calling StartServiceByName for org.freedesktop.Notifications: Timeout was reached (24)"

Am I missing Flatpak overrides? (Docs seem to say no docs.flatpak.org/en/latest/por… )

Am I doing this wrong? (Code at github.com/TheKrafter/Grouping… )

#AskFedi #GTK4 #Python #LibAdwaita #gnome #Programming

Who makes #LibreOffice? Hundreds of people around the world – volunteers, developers in the ecosystem, and more. Robert Cabane here is part of our Quality Assurance (QA) project – and you can join it too: blog.documentfoundation.org/bl… #foss #OpenSource

LibreOffice reshared this.

Let's Encrypt will issue new intermediate certs in Q1/2024: groups.google.com/a/mozilla.or…

Make sure your LE cert deployment logic includes serving the right intermediates that ACME should hand you, not just that same old LE intermediate you got years ago. Otherwise, there'll be breakage...

#x509 #pki #LetsEncrypt

reshared this

Mi barrio tiene aceras estrechas en la mayoría de calles. Pues en vez de facilitar la accesibilidad, a la concejala del distrito y funcionarios del área les parece estupendo bloquear un cruce de esta manera: con un parquímetro de dos metros que hace que por la acera no quepa nadie y para cruzar haya que salir a la calzada. No es que no quepan carritos de bebe, carros de la compra o sillas de ruedas. Es que de normal, para pasar he tenido que salir de la acera. Urbanismo Carapolla Style.

Be My Eyes CEO Mike Buckley Talks OpenAI Boardroom Saga, ‘Life-Changing’ Tech, More forbes.com/sites/stevenaquino/…

Média zaregistrovala pirátské téma posledních týdnu. V lednu si strana zvolí nové vedení - nominace běží. V sobotu oznámila kandidaturu na předsedkyni Markéta Gregorová, čímž volba získala novou dynamiku.

#Enko Obhajoba postu předsedy Pirátské strany nebude pro ministra Ivana Bartoše jen formalita. Bude proti němu kandidovat europoslankyně Markéta Gregorová, která zastupuje silné stranické křídlo kritiků pirátského vládního angažmá. #PirátiCF24 #PiratiRP

Odemykám🔓denikn.cz/1299691/bartose-vyzv…

I'm looking for jobs again! I'm open to jobs in the Rust programming language. 🦀

I have >1 year of professional working experience in Rust / axum / tokio. ~3 years of Rust programming experience in total.

CV: docs.google.com/document/d/e/2…

TYPE: Full time or contract

LOCATION: I'm based in Malaysia.

REMOTE: Yes, and open to relocation (not US).

#rustlang #rustjobs

in reply to dango🍡

It's so weird that people like politicians and media act as if creating jobs is the function of the economy or like, a function of the economy (whereas in reality all the pressure in the economy is to minimize employment as much as possible). I guess we have to pretend this or else having a society side ideology that work is how you morally earn the right to live would just be totally intellectually untenable?
This entry was edited (2 years ago)

Brenda Lee's "Rockin' Around the Christmas Tree" is No. 1 on the Billboard Hot 100 — 65 years after it was released. This breaks the record for the longest wait from a song's release to its hitting the top spot. Billboard takes a look at how much airplay it's getting, the history of the song, and the 65th anniversary celebrations, including its first video and Lee's new TikTok account.

flip.it/fEcnpI

#Music #HolidayMusic #BrendaLee #BillboardHot100

Calling all AppleVis users! 🎉 It's time to celebrate the best apps and games of the year with the AppleVis Golden Apples Awards! 🏆

We're thrilled to announce that voting is now open. ✨ Cast your vote for the Apple App and Game that most impressed you in 2023. These nominees were chosen by our community for their exceptional accessibility and impact. 🤝

Whether you've already discovered your favorites or are eager to explore the nominees, we encourage you to join the fun and vote! 🗳️ Every voice counts in recognizing the developers who are making a difference.

applevis.com/blog/cast-your-vo…

ChatGPT will provide more detailed and accurate responses if you pretend to tip it, according to a new study windowscentral.com/software-ap…