mastodon - Link to source

Welcome to Purism’s Investor Report Fiscal Year End 2023.

In this report we’re going to go through an executive summary, profit and loss statement, balance sheet, and then conclusion.

Executive Summary:

All crowdfunded products have been delivered. This is important because the Librem 5 phone was crowdfunded and we crossed shipping parity where all of the phones have been delivered to all customers.

Access full report here: puri.sm/posts/2023-finance-rep…


2023 Finance Report: Profitable, More Assets than Liabilities, Over $9m in Sales, 50% Margin – Purism

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
Purism SPC

mastodon - Link to source

To jsem neměl dělat, půjčil jsem si manželky eBike 🫢(@centrum_rustu_decin).

První 4km ➡️ a 300 výškových metrů ⬆️ na Sněžník🏔️jezdím na svém bio-kole obvykle okolo 28-30minut 🥵.
S eBikem to dnes bylo 16min.🫢.

A celý okruh (21➡️km/450⬆️m) jezdívám obvykle okolo 1:15-1:20 hod..
S eBikem dnes 52min.😱.

A hlavně “na pohodu” 🥳.
Tak ať mi někdo říká, že je elektrokolo špatně 😜.

#mountainbike #kellysbikes #ebike #jilove #decin #sneznik

#ebike #sneznik #decin #mountainbike #kellysbikes #jilove @Centrum osobního růstu Ústí
in reply to Archos

mastodon - Link to source

Dan Hampl 🇨🇿⚓️

@archos přesně tak. To je ale jen jeden z příkladů.
Stále jsem, pokud mi to tělo dovolovalo, preferoval před běh. V práci nemůžu být daleko (nakládka/vykládka⛴️), doma zase rodina, dům, apd.. Když mám hodinu čas, jdu běhat. Když mám hodiny dvě a víc už se mi vyplatí jít na kolo. Tohle velmi dobře řeší elektrokolo. Člověk ani nesedí tak dlouho na kole (bolavý zadek), tepovka je v lepších zónách, dá se jezdit i častěji (lepší regenerace), apd. apd. apd..
@Archos

mastodon - Link to source
#LibreOffice isn't just a piece of software – it's a worldwide community, working on #UX, #QA, marketing, documentation and translations. And thanks to that community, we now have a Czech version of the LibreOffice Writer Guide 24.2 🥰 blog.documentfoundation.org/bl… #foss #opensource
Guidebook cover of Czech translation of LibreOffice Writer Guide 24.2

Czech translation of LibreOffice Writer Guide 24.2 - The Document Foundation Blog

Zdeněk Crhonek (aka “raal”) from the Czech LibreOffice community writes: The Czech team has finished translating the LibrePffice Writer Guide 24.2. As usual it was a team effort, with translations by Petr Kuběj, Radomír Strnad and Zdeněk Crhonek.
Mike Saunders (The Document Foundation)
#foss #opensource #libreoffice #UX #qa

LibreOffice reshared this.

mastodon - Link to source

Today Tuta Turns Ten! 🥳🎉

Win 10 years of Tuta Legend worth 960€ 🎁

To enter 👇

➡️ Follow @Tutanota
➡️ Like & Boost
➡️ Reply to this post inviting two friends to Tuta

#Contest ends March 28, 2024

Read more on where we started and where we are going: tuta.com/blog/road-to-success

March 2014: The Tutanota web client is launched in public beta. Thousands of users join on the day of the release, and the number of users has been growing ever since. September 2014: All Tutanota clients are published as open source under GPLv3. Android and iOS apps are released. March 2015: We push Tutanota out of beta. July 2015: We enable a Premium option on Tutanota with custom domain support. This soon allows us to grow our service organically. March 2016: One million people are encrypting their emails with Tutanota. April 2016: The translation project of Tutanota is started. Today, more than 30 languages are available. December 2017: Tutanota becomes one of the first encrypted services that enables full-text search on encrypted data. July 2019: We publish the first zero-knowledge calendar, now Tuta Calendar. It is fully end-to-end encrypted, even notifications are encrypted. July 2021: We push the desktop clients for Windows, macOS, and Linux out of beta after an extensive security review. November 2022: We enable offline mode for all Tuta apps on desktop and mobile. December 2022: U2F hardware keys can now be used to protect login data on mobile. November 2023: We rebrand from Tutanota to Tuta, now offering the four-letter-com domain tuta.com for email addresses. March 2023: Tuta launches the world's first post-quantum cryptography for email.

Celebrate with us: Tuta Mail turns ten today!

To date Tuta (formerly Tutanota) has enabled millions of people to leave Gmail and other privacy-intrusive services. Our road to success was not always easy, but incredibly fun!
Tutanota
#contest @Tuta
in reply to Kuketz-Blog 🛡

mastodon - Link to source

Hans-Christoph Steiner

Nice idea to check usesCleartextTraffic, but that particular check isn't worth much since, as the docs say:

> This flag is ignored on Android 7.0 (API level 24) and above if an Android Network Security Config is present.

Sounds like the IzzyOnDroid scanner would not catch `android:usesCleartextTraffic="false"` then in the Network Security Policy, sets `<base-config cleartextTrafficPermitted="true" />`. From what I've seen, most apps use Network Security Policy anyway.

1/

in reply to Hans-Christoph Steiner

mastodon - Link to source

IzzyOnDroid ✅

@eighthave It's true my scanner would currently not catch that special case (thanks for the pointer, will look if I can get that in, too – remember other than F-Droid, I'm only running a "simple binary repo" here) – but at least it was catching loads of the "simple cases" instead of none at all 😉 So good to see this is finally addressed at F-Droid as well. As for "what's missing", you might wish to check … (1/x)
@Hans-Christoph Steiner
in reply to IzzyOnDroid ✅

mastodon - Link to source

IzzyOnDroid ✅

@eighthave (2/3) gitlab.com/fdroid/admin/-/issu… from 12/2022 which, when brought to my attention in 1/2024 immediately triggered the changes from gitlab.com/IzzyOnDroid/repo/-/… discussed here – and the blog article you've asked for in 10/2022 at gitlab.com/fdroid/fdroidserver… – apologies it took me that long to write it though I knew it since 1/2024, but I wanted to check thoroughly before. F-Droid does have those signing block issues as well with reproducible builds (as the two issues point out), so I hope …

additional APK checks (#475) · Issues · IzzyOnDroid / repo · GitLab

A discussion on different topics raised ideas for security improvements, from which it is worth to adopt some additional checks:
GitLab
@Hans-Christoph Steiner
in reply to IzzyOnDroid ✅

mastodon - Link to source

IzzyOnDroid ✅

@eighthave (3/3) you have that focused as well? Be welcome to use the details from issue 475 in my repo (gitlab.com/IzzyOnDroid/repo/-/…) for it.

additional APK checks (#475) · Issues · IzzyOnDroid / repo · GitLab

A discussion on different topics raised ideas for security improvements, from which it is worth to adopt some additional checks:
GitLab
@Hans-Christoph Steiner
in reply to Hans-Christoph Steiner

mastodon - Link to source

IzzyOnDroid ✅

@eighthave "From what I've seen, most apps use Network Security Policy anyway." from what I've noticed, too many do not while simply setting cleartextTraffic to true – which often meant they were not aware of the implications. After I told them (in issues I've opened) they either removed that entirely, or THEN started to use network config, to e.g. pin cleartext to localhost when it was only intended for that.

Opened gitlab.com/IzzyOnDroid/repo/-/… to keep an eye on it, though. Thanks for the pointer!


check for cleartextTraffic in network config as well? (#524) · Issues · IzzyOnDroid / repo · GitLab

As pointed out by @eighthave our manifest check for android:usesCleartextTraffic (from...
GitLab
@Hans-Christoph Steiner
in reply to Hans-Christoph Steiner

mastodon - Link to source

IzzyOnDroid ✅

@eighthave Just to make sure, Hans: You are aware that

1) Issuebot currently only runs on RFP (it's disabled for MRs since last summer "for reasons"), and that

2) iod-scan-apk.php was not run for at least half a year as (I guess) the location of the APK file is not passed to it via the environment variable with the APKs you pull for the (other) "Scan APK" module? I've pointed that out multiple times in the past already, but I'm not sure whether it "registered". @setiathome @kuketzblog

@Kuketz-Blog 🛡 @Hans-Christoph Steiner
in reply to captain notgull

gotosocial - Link to source

modulux

As someone who somewhat resents async because it almost feels like learning another language on top of the rust I knew and liked, and because I found myself compelled to use it due to certain crates adopting it, I think this makes a pretty good argument on why async isn't just a waste of programmer time and a complexity saving throw.

The things I'm trying to write are not performance-starved in a way that depends on async to solve. I like high performance, this is part (but only part!) of the reason I like and choose rust, but the performance argument isn't always valid for going with async.

The semantic argument is better, and while I still don't enjoy the mental effort involved, at least I can see the point of it. Thanks!

glitchsoc - Link to source

The fork of Firefox, Floorp, is going closed-source. Because the lead dev was annoyed that some people were forking it. :blob_nervous:
blog.ablaze.one/4125/2024-03-1…

Edit: It seems they've backtracked, and instead (re)released their code under a "CC BY-NC-SA 4.0 Deed (Attribution-NonCommercial-ShareAlike 4.0 International)" license.
reddit.com/r/browsers/comments…
Thanks @blobcat for letting me know

#Floorp #Firefox


Preparing for a New Beginning for Floorp

Header Image by @CutterKnife_ Hello Floorp users, As some of you in the Reddit a
すらーぷの妖精 (ABlog)
#firefox #floorp @blobcat
This entry was edited (1 year ago)

akkoma - Link to source

New bookmark: Firefox bug 1886557: Make JIT Spraying implausible.

This could be the biggest leap forward in years when it comes to SpiderMonkey catching up to V8 and JSC’s JIT hardening. So far, I’ve been telling security-conscious Firefox users to disable the JIT compiler, and to use Chromium when JIT is necessary; maybe I won’t have to in a few years’ time.

Originally posted on seirdy.one: See Original (POSSE). #browsers #firefox #security


My bookmarks

Links from around the web, curated and annotated by Rohan Kumar.
Seirdy’s Home
#firefox #security #browsers

akkoma - Link to source

Update, 5 months later: after Hashicorp, the next company on the chopping block for dev mindshare is Redis. redict.io/

You know what to do.
RE: pleroma.envs.net/objects/ace65…

Redict

Redict Redict is a distributed key/value store (a remote dictionary, if you will). Redict is an independent fork of Redis®1 OSS 7.2.4 licensed under the Lesser GNU General Public license (LGPL-3.0-only). Redict is not affiliated with Redis®.
redict.io

Seirdy

2023-10-16 22:35:59



“What does it say for the future of open source, if foundations will just take it and give it a home. That is tragic for open source innovation. I will tell you, if that were to happen, there’ll be no more open source companies in Silicon Valley.”

—Dave McJannet, CEO of Hashicorp


Together, we can realize his dream. Which company should we replace next? 💪



HashiCorp CEO predicts OSS-free Silicon Valley unless...

Says Linux Foundation's OpenTofu adoption "tragic"
Joe Fay (The Stack)

akkoma - Link to source
“What does it say for the future of open source, if foundations will just take it and give it a home. That is tragic for open source innovation. I will tell you, if that were to happen, there’ll be no more open source companies in Silicon Valley.”

—Dave McJannet, CEO of Hashicorp


Together, we can realize his dream. Which company should we replace next? 💪


HashiCorp CEO predicts OSS-free Silicon Valley unless...

Says Linux Foundation's OpenTofu adoption "tragic"
Joe Fay (The Stack)
This entry was edited (2 years ago)

mastodon - Link to source
Suno v3 is now here. You can create “radio-quality” songs using AI, or even ask Copilot for it mspoweruser.com/suno-v3-is-now…

Suno v3 is now here. You can create "radio-quality" songs using AI, or even ask Copilot for it - MSPoweruser

Suno v3, the latest text-to-songs model, is now here. Just announced today, the model is said to be able to create "radio-quality music."
Rafly Gilang (MSPoweruser)

mastodon - Link to source
Newswire: Tek Talk of 3/25/24 at 8pm Eastern welcomes Amos Miller, Glidance Founder and CEO, to discuss Glide, the first self-guided mobility aid designed to help individuals with sight loss navigate the world with ease groups.io/g/tech-vi/message/66…

Newswire: Tek Talk of 3/25/24 at 8pm Eastern welcomes Amos Miller, Glidance Founder and CEO, to discuss Glide, the first self-guided mobility aid designed to help individuals with sight loss navigate the world with ease

groups.io

mastodon - Link to source

🇺🇸 I've told you about additional APK checks having been implemented at the #IzzySoftRepo in January. Now finally I found the time to complete the article explaining the details, so you might wish to take a look at "Ramping up security: additional APK checks are in place with the IzzyOnDroid repo":

android.izzysoft.de/articles/n…

Edit: Tags:

#security #Android #apps


Ramping up security: additional APK checks are in place with the IzzyOnDroid repo

With the library scanner in place for multiple years, it was about time to establish some additional APK checks with the IzzyOnDroid F-Droid repository.
IzzyOnDroid
#android #apps #security #IzzySoftRepo
This entry was edited (1 year ago)
in reply to IzzyOnDroid ✅

mastodon - Link to source

IzzyOnDroid ✅

🇩🇪 Ich habe ja schon erwähnt, dass im Januar für das #IzzySoftRepo zusätzliche APK-Checks implementiert wurden. Jetzt habe ich es endlich geschafft, auch den zugehörigen Blog-Artikel fertig zu stellen.

Vielleicht interessiert es Euch ja, einen Blick auf Details und Hintergründe zu werfen? Ihr finden den Artikel "Zusätzliche APK-Checks im IzzyOnDroid Repo" hier:

android.izzysoft.de/articles/n…

#security #Android #apps


Zusätzliche APK-Checks im IzzyOnDroid Repo

Nachdem der Library-Scanner nun seit mehreren Jahren im IzzyOnDroid Repo im Einsatz ist war es an der Zeit, einige zusätzliche APK-Prüfungen zu etablieren.
IzzyOnDroid
#android #apps #security #IzzySoftRepo

IzzyOnDroid ✅ reshared this.

Unknown parent

mastodon - Link to source

IzzyOnDroid ✅

@SlimSocial Schaust Du in den Artikel bei Mike (kuketz-blog.de/android-apps-au…), da ist dieser Teil mit abgedeckt. Und richtig, F-Droid macht den Großteil *dieser* Checks nicht.

Android-Apps auf dem Seziertisch: Eine vertiefte Betrachtung

Technische Prüfungen bewerten Sicherheit und Konfiguration von Android-Apps, doch insbesondere die Prüfung von Signaturblöcken muss verbessert werden.
www.kuketz-blog.de

mastodon - Link to source

The third edition of David Kingsbury’s popular free digital book, “The Windows Screen Reader Primer: All the Basics and More,” is coming soon! Author David Kingsbury, an Assistive Technology Instructor here at the Carroll Center, wrote this comprehensive resource to help JAWS, NVDA, and Windows Narrator users work more effectively with the most important PC applications—like Microsoft Office, email clients, and web browsers.

Join author David Kingsbury via Zoom on Thursday, April 4 at 7:30 pm ET to find out what’s new in this edition, hear a few tips and tricks, and ask your questions. Save your seat here: lnkd.in/e7ct_C8B

#Windows #Jaws #NVDA #Narrator #blind

LinkedIn

This link will take you to a page that’s not on LinkedIn
lnkd.in
#blind #Windows #nvda #jaws #narrator
⇧