This is a refreshingly good look at why extensions with both full privileged access and dynamic script + style execution are a really bad idea, greatly weakening the CSP on every site:

How insecure is Avast Secure Browser?

Injecting arbitrary scripts and styles ought to require an extra permission and be selectively allowed on a per-site basis.
RE: floss.social/@alcinnz/11280356…

How insecure is Avast Secure Browser?

Another look into Avast Secure Browser shows a massive attack surface, with some issues mentioned five years ago only partially addressed, all while new ways to attack the browser have been added.

^{Almost Secure}

Tools for collaborative development of documents, code, and more need to be accessible to people with disabilities. Here to help with that is:

Collaboration Tools Accessibility User Requirements w3.org/TR/ctaur/

It's now a complete draft ready for review. Specific questions for review are in e-mail at lists.w3.org/Archives/Public/p…

Please send any comments by 30 September 2024. Thanks!

#AndroidAppRain at apt.izzysoft.de/fdroid today with 9 updated and 2 added apps:

* Calculator: calculator, currency converter, time zones, ..
* Mobile Tile Server: HTTP Server for your local Map Tiles

2 apps have been removed:

* Paisa got to big ( ~90 MB)
* Metadataremover jumped from 10 to 160 MB with the last release (but is still available at F-Droid.org)

Enjoy your #free #Android #apps with the #IzzyOnDroid repo

IzzyOnDroid F-Droid Repository

This is a repository of apps to be used with F-Droid. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).

^{IzzyOnDroid App Repo}

In 2014, Steve Faulkner wrote an article What ARIA does not do. 10 years later, the message is unchanged.

buff.ly/4cJlV7S

#WebDev #WebDevelopment #ARIA #HTML #DigitalAccessibility #Accessibility #A11y

Potkaj se dva a jeden řiká: tak co je novýho?
Druhej: ále, vyšel mi článek.
První: ty seš novinář?
Druhej: ne, mám tasemnici.

Jo, no mně vyšla kniha.
knihydobrovsky.cz/kniha/odejit…

Odejít na jih - Robert R. McCammon

Panovalo pekelné léto a vzduch páchl po hořících dětech…Touto „jednou z nejchytlavějších prvních…

^{www.knihydobrovsky.cz}

Please take this survey about AI/ML and Fedora. We know that this is a sensitive subject, so the Fedora Council spent time putting a survey together to understand what our community thinks about this area of technology.

Last day to take the survey is July 31.

➡️ discussion.fedoraproject.org/t…

#Fedora #Linux #OpenSource

Fedora AI/ML Survey is Live until July 31st

Hello folks, I had posted this to the original discussion thread last week, but to make sure everyone is aware of its existence, I wanted to post it in this section too.

^{Fedora Discussion}

We need your votes! Tell us who you think should win this year's Pants of Thanks Award at #GUADEC2024. Our winner will be announced during the AGM on July 21, starting at 16:00 UTC.
discourse.gnome.org/t/call-for…

#GUADEC #GNOME #Awards

Call for nominations for the 2024 Pants of Thanks award

On behalf of the Board, this is a call for nominations for the Pants of Thanks award. Every year, during the Foundation’s Annual General Meeting (AGM) at GUADEC, we give out the Pants of Thanks award.

^{GNOME Discourse}

Wild blackberries will be ripe soon around here! That means extra yummy calories for my #running ! :) 🤤 🏃

#bloomscrolling

The Matrix.org Foundation joins the FOSS community and advocates of digital sovereignty in calling on the European Commission to sustain its funding for the Next Generation Internet program.

The European Union must keep funding free software: matrix.org/blog/2024/07/17/ngi…

#Advocacy #Policy #EU #FOSS #OpenSource

The European Union must keep funding free software

Matrix, the open protocol for secure decentralised communications

^{Josh Simmons (matrix.org)}

Von wegen technologieoffen: Wie das ZDF berichtet, haben sich Minister Wissing & Staatssekretär Luksic als Lobbyisten für den Kraftstoff HVO100 einspannen lassen. Unterstützern von "HVO100 goes Germany" wurden exklusive Treffen mit Wissing oder Luksic in Aussicht gestellt - gegen saftige Bezahlung.
Luksic übernahm sogar die Schirmherrschaft für die u.a. von Tankstellen - Lobbyverbänden finanzierte Kampagne.

Wir fordern schonungslose Aufklärung!
vcd.org/service/presse/pressem…

#verbrenneraus #efuels

The simplicity of Dutch public transport tariff sometimes leads to illogical pricing.

For instance this 30-minute-long tram ride is cheaper with a tourist ticket for € 3.40 than when paid as you go with a transport or payment card.

I wish Dutch cities learned to implement price caps, which are common in virtually all other countries.

Hello Hello Jamers 🙂

For those who didn't have the time or energy to click on the Dev update #9 link, we've got you covered!

Here's the link, if you want to know more: jami.net/dev-update-9/

#Jami #opensource #P2P #App #PrivacyMatters

Long before #Rosetta & 67P/C-G, there was Comet Shoemaker-Levy 9 & its devastating 1994 encounter with Jupiter.

I was privileged to be part of the team that made & released the very first images of Fragment A impacting at ~20:15 UTC on 16 July, 30 years ago last night, as seen from Calar Alto in Spain.

The brightness of the impact plume was a huge surprise & the following week saw intense astronomical, media, & public engagement.

#Astronomy #Astrodon #SpaceScience #PlanetaryProtection

Yemen says a ship has repaired the subsea AAE-1 cable, linking Asia and Europe, in the Red Sea, and remains in the water to repair the Seacom and EIG cables (Bloomberg)

bloomberg.com/news/articles/20…
techmeme.com/240717/p18#a24071…

Yemen says a ship has repaired the subsea AAE-1 cable, linking Asia and Europe, in the Red Sea, and remains in the water to repair the Seacom and EIG cables

From Bloomberg. View the full context on Techmeme.

^Techmeme

Meta is already using it’s user’s data in the USA, But its brazen attempt to use EU user data and introduce Meta AI won’t pass! 🙅 🧐

Read more here 👉👉tuta.com/blog/noyb-privacy-win…

#MetaAi #Meta #AI #NYOB #Privacyrights #gdpr #GDPR #AI #Tuta #privacy

After reading an article on the average news site, there are usually links to articles of dubious quality that are often salacious clickbait. These are usually Taboola ads.

It is thus a huge surprise to hear that Apple plans to run ads from them in its News and Stocks apps.

9to5mac.com/2024/07/16/apple-t…

The Basics of Legibility
A Short Guide for Non-Typographers

nubero.ch/blog/011/

#typography #legibility

Nuberodesign: Agentur für Grafikdesign, Animation, Videoproduktion und Usability in Winterthur

^Nuberodesign

For the Nation of Gondwana festival this weekend, me and Nicl worked on a 3D printed tactile map. Made me wonder if there are any standards in this direction, like what shape would a toilet have and all that. If anyone has some pointers, please let us know!

This was first drawn in inkscape and then later extruded layer by layer in openscad2.

printed at @xHain_hackspace @xhain3dlab #NationOfGondwana #NationOfGondwana2024

One of the best devices I used last week was not even electronic. It works with your smartphone, but it doesn't have a battery.

I am a huge fan of the Dot Card as it lets you share your contact information without the need to give out business cards. I think the interface could be a bit more user friendly, but it is still a fantastic device.

Check it out at dot.cards

dot. | Create your dot.Profile today

Create your dot.profile here. Start networking in seconds. The fastest way to share your contact info.

^dot.cards

🚚 apkeep — инструмент командной строки для скачивания APK из различных источников.

github.com/EFForg/apkeep#readm…

Для поиска приложений используются их идентификаторы. Например, у Telegram `org.telegram.messenger`. Он находится в ссылках: play.google.com/store/apps/det… и f-droid.org/packages/org.teleg….

Скачать приложение (в данном случае Firefox) из источника по умолчанию в текущую папку: `apkeep -a org.mozilla.firefox .`

Источник по умолчанию — APKPure (apkpure.com). Это зеркало Google Play, которое не требует авторизации. Для скачивания напрямую с Google Play нужен логин, но это нарушает условия пользования, за что Google вправе заблокировать ваш аккаунт.

Параметр -d указывает источник: `f-droid` [1], `huawei-app-gallery`. Список версий: --list-versions. Скачать определённую версию: идентификатор@версия.

📥 Скачать apkeep для Windows, Linux, Android:
GitHub: github.com/EFForg/apkeep/relea…
Cargo: `cargo install apkeep`
Termux (Android): `pkg install apkeep`

[1] github.com/EFForg/apkeep/blob/…

#android