FSCast 247, an interview with Oleg Shevkun, and Mohammed Laachir discusses our new AI features – Freedom Scientific Blog groups.io/g/tech-vi/message/74…
We're thrilled to share details about our fellowship pilot program. Launching in Q4 2024, this new initiative aims to address a critical challenge in the open source ecosystem: supporting the dedicated individuals who keep our digital infrastructure running.
The DebConf24 day 5 has ended, stay tuned tomorrow Friday 2, August 10:00 AM (KST) (01:00 UTC). The schedule for the day is https://debconf24.debconf.org/schedule/?block=13 .
I come from a business / digital background, so digital accessibility has always been big on my radar. When I started in science a few years back, I was very surprised to see that arXiv - a service that allows scientists to put their pre-prints (papers before peer review) was not accessible.
This meant that all science papers that were open access (away from journal subscriptions) were only available as PDFs - which means people with digital accessibility needs could not access them.
Access to science should be open to everyone (the pandemic showed us how important this is), and whilst there is a need for papers to undergo the formal peer-review process, that does not mean we can't adhere to global digital accessibility standards.
So, I am extremely glad to see that arXiv is now moving toward digital accessibility, with its second accessibility forum in Sept. 2024. They've also been moving to make papers in HTML format (instead of PDFs only) which adheres to these standards.
If you are interested in accessibility and science, you might consider attending this forum. It's free to all and only requires remote participation.
TBH, arXiv is the only service of its kind that gives us access to the LaTeX source code of the papers they host, and that is incredibly helpful from an accessibility perspective.
@miki yeah but many different types of audiences use arXiv, not just scientists or people who have training in LaTeX. Teachers, students, early career researchers, journalists, etc. all all different users of the service.
I'm not saying better accessibility shouldn't be implemented, merely that it's one accessibility option that they already offer while nobody else does.
Opinión | Negarse a reconocer la facultad constitucional exclusiva del CNE ha sido la marca de fábrica de Machado, a través de la ONG Súmate (de su propiedad), que ha pretendido erigirse en autoridad electoral paralela. Por Clodovaldo Hernández. elsaltodiario.com/analisis/den…
La oposición venezolana no reconoce la autoridad del Consejo Nacional Electoral, que certificó el triunfo de Maduro, y dice que su candidato consiguió más de siete millones de votos.
Faith No More - "Epic" (Official Music Video) from the album 'The Real Thing' (1989)🔔 Subscribe to UPROXX Indie Mixtape and ring the bell to turn on notific...
The final talks of the day in #DebConf24 are at 05:00 PM (KST) ( 08:00 UTC): 'Using Data for Community Growth' in Bada, 'T2Linux: Linux on 2017~2020 Intel Macs with T2 Security Chip' in Somin, and the LXQt Team BoF in Pado and the loong64 port BoF in CEO (no streaming for the both) debconf24.debconf.org/schedule…micronews.debian.org/2024/1722… #debian
The final talks of the day in #DebConf24 are at 05:00 PM (KST) ( 08:00 UTC): 'Using Data for Community Growth' in Bada, 'T2Linux: Linux on 2017~2020 Intel Macs with T2 Security Chip' in Somin, and the LXQt Team BoF in Pado and the loong64 port BoF in…
Lidl má nyní ve slevě zajímavé "městské" elektrokolo CRIVIT X.2 All Black, které má řemen místo řetězu a 360Wh akumulátor v sedlovce. Aktuální cena je 24 999 Kč. #kolo #elektrokololidl.cz/p/crivit-mestske-elekt…
Já bych do kola z Lidlu nešel, někde byla recenze na bike. Všechno staré komponenty a po několika km začalo kolo vrzat a rozpadat se. To už raději Decathlon.
@archos Je to Lidl, co čekat. Já třeba docela rád používám jejich nářadí Parkside. Protože tohle nářadí se s dnešní kvalitou výroby sice rozpadne po pár letech, ale úplně stejně se rozpadne i nářadí mnohem slavnějších značek, přičemž Parkside stojí polovinu. Není to ekologické vyhazovat věci takto brzy a kupovat něco nového, ale co nadělám. Nicméně tento přístup bych fakt neaplikoval na kolo, kdy při nehodě může jít o zdraví a klidně i o život.
@minimax Jj přesně, nářadí z Lidlu ok, ale kolo má vydržet trochu delší dobu. No a to už vůbec nemluvím o servisu. Těch se myslím moc v ČR nenajde, co to kolo budou chtít servisovat. @xcabal05
@archos @minimax Dobré vědět, já se v kolech prakticky nevyznám. Cca 15 let mám crossové kolo Apache Indian 🚲, ale posledních 5 let nějak nebyl čas na něm víc jezdit a podle toho taky vypadá... Ale svět kol už je dnes asi trochu jinde.
On zrovna nedávno testoval kolo z Lidlu Trail Hunter. Tak proto jsem to psal, jsou to vyhozené peníze. A fakt to nikdo nebude chtít servisovat. @minimax
* Do you want to improve your skills with NVDA? * Are you looking to become an NVDA Certified Expert? * Would you like to become familiar with the NVDA add-on store?
If you answered "Yes" to any of these, then the latest update to "Basic Training for NVDA" is for you!
The official training material for NVDA covering concepts from getting started up to browsing the web and using object navigation (eBook, English language). Last revised: July 2024.
@startrek2024 Thanks for asking! The NVDA Certified Expert exam is an online exam which is free for anyone to sit: certification.nvaccess.org/ Once you pass, you have the option to purchase the certification. That gets you listed on that same page, and it gets you a printable certificate - plus the fee helps us continue to provide NVDA itself free to anyone who can use it.
thank you so much for posting this. Is the certification process also covered in the training materials? I didn’t see that particular section in the description on the website.
@morganlynn1992 There is a mention of it in the back of the module, but they are not intrinsically linked - IE we created the training material first and it is designed to teach you what you need to know to be efficient with NVDA. Then we created the certification - and although it is based on the concepts presented in Basic Training, it is not required - ie you could pass the exam based on what is in the user guide and other places
Next slot this afternoon at 03:30 PM (KST) ( 06:30 UTC) : 'Debian@Toradex - or how we use Debian containers in an embedded system' in Bada, 'Debian and new EU cybersecurity-related regulation' about one of the most important challenges for Debian and Free Software, in Somin and the Debian Contributors BoF in Pado #debian #debconf24 #busan #korea #debiankoreamicronews.debian.org/2024/1722… #debian
Next slot this afternoon at 03:30 PM (KST) ( 06:30 UTC) : 'Debian@Toradex - or how we use Debian containers in an embedded system' in Bada, 'Debian and new EU cybersecurity-related regulation' about one of the most important challenges for Debian and…
I haven't played board games in years. Mostly do to being super too blind, but also because people stare at their phones and I am the only young existing human in this company here that doesn't stare as much.
I learned about secure software development on the job, but like ethical computing (which I've talked about before), this should also be included in formal education. Because of the current threat models, topics like security by design and zero-trust frameworks are critical when developing Internet systems. linuxfoundation.org/press/linu…
After lunch break at 02:30 PM (KST) (05:30 UTC), 'a plan to support source code indexing on debuginfod.d.n' is exposed in Somin, while the 'New Members BoF' starts in Pado. and a workshop 'Mastering Disk Imaging and Cloning with Clonezilla: A Practical Lab' in CEO (not streamed). The talk 'Linux Containers with AppArmor Policy Namespaces' begins in Bada at 03:00 PM (KST) (06:00 UTC) #debian #debconf24 #busan #koreamicronews.debian.org/2024/1722… #debian
Guest blog editor, Colin Hughes, a former BBC producer, highlights Apple’s commitment to empowering users reliant on hands-free dictation, and those with atypical speech.
@lanodan @cwebber @drazisil I wanna make a WebSub suite called “Sbubby” and make the subscriber, publisher, and hub called “subsub”, “pubpub”, and “hubhub” respectively.Then the README will say “Th...
More often than not these days I use the ChatGPt app on my phone to find things out, instead of the browser to search. Quite simply I find it easier and more efficient to have a conversation than type on a touch screen device.
With Apple Intelligence set to inject Siri with ChatGPt capabilities, the conversational UI is about to undergo another evolution - but this time I'm wondering if and how it'll change the way I use my screen reader too? apple.com/uk/apple-intelligenc…
Attached: 1 image
Say hello to iStat Menus 7! What’s new? Everything. iStat Menus 7 is a full reboot, sporting an all-new design with hundreds of big and small improvements. https://bjango.com/mac/istatmenus/
If you're a blind person wanting to learn a language, I recommend reading Florian Beijers' article about it here. florianbeijers.xyz/on-language… @zersiax
After two years of studying both languages in tandem, the Dutch school system generally has you pick one of them to continue on with. Mostly due to the problems outlined above, I was forced to stick with Latin even though I enjoyed Greek a lot more.
Italian app developer Bending Spoons has bought file-sharing platform WeTransfer, the companies said in a joint statement on Wednesday, as the Milan-based tech company presses ahead with a string of deals for software firms.
Announcing Android Reproducible Builds at IzzyOnDroid with rbtlog
IzzyOnDroid is the largest 3rd-party F-Droid-compatible repository of open source Android apps [...] It provides [...] additional security and transparency via multiple custom scans and checks.
rbtlog is a Reproducible Builds transparency log for Android APKs. [...] It allows anyone to easily run a rebuilder for any apps available from a git repository with release tags plus accompanying APKs built and signed by the developer.
We are pleased to announce "Reproducible Builds, special client support and more in our repo": a collaboration between various independent interoperable projects: the IzzyOnDroid team, 3rd-party clients Droid-ify & Neo Store, and rbtlog (part of my collection of tools for Android Reproducible Builds) to bring Reproducible Builds to IzzyOnDroid and the wider Android ecosystem.
video description: an quadruped animal-like drone sits perched on Odd_Jayy’s shoulder, then is in their arms and nestling their chest. the drone excitedly “looks” up as Odd_Jayy cuddles it.
some kind of simple things: You could have the script that makes your tar bal prove that there are no binaries using "file" etc... (and if there are, refuse to make the tar file) ... and ship said script in the archive as well as part of it running (so that it makes sure it itself is signed later)
The only thing that comes to mind is reproducible builds are only useful to detect injection if someone actually tries to reproduce the builds. Bystander effect says no one likely is, so adding a separate (perhaps GitHub Actions?) build to confirm an identical tarball SHA would remove the possibility that your own environment is compromised.
Have multiple maintainers/community members sign the tarballs. As things stand now the confidentiality of your lone key stands between a modified tarball being published and potentially not caught for a while. That modified tarball will not match git but users pretty much never compare the tarball to git. When the other maintainers/community members sign for the release they can compare the tarball to git and use their signature to assert that the tarball matches git. Users that do verify signatures will notice if only one signature is there or if all the signatures don't match and it will start being investigated, potentially reducing the scope/timeframe of the compromise.
I helped design the Subversion project's release process and the project does this. Releases require a certain number of votes/signatures and the release announcement has a list of who signed and the fingerprints for their keys. You can see that project documentation for the signing here: subversion.apache.org/docs/com… You can see an example of a release announcement which is made on the announce mailing list and is mirrored here: lists.apache.org/thread/gcbmxz…
Subversion doesn't produce official builds but if they did and had reproducible builds then builds could be reproduced and folks verifying that the builds match the tarball/git could provide signatures for them as well. Which would help resolve @sethmlarson's point about reproducible builds not being helpful unless someone is trying to reproduce them.
@BenReser @sethmlarson ah right, thanks. I did not really *forget* that though, we just have opted to not go that far - because I have considered the extra security we get with extra signers is so small and the extra work and complexity to do it, notable. But yeah, that's an option.
What about readable and *documented* code? Reading a short explanation what a certain method/function does is IMHO easier and faster done than examining the corresponding code.
To make binary blobs (secret keys) stored in the repo transparent,
here are the scripts that can generate those.
code signature script sourced from:
https://gist.github.com/vszakats/7ef9e86506f5add...
I think the review of commit messages (and rewrite if need be) should be there too. That’s part of making sure a commit message does not hide the intent of the change. (Or change more than it describes)
Katie Ledecky who just won another gold medal and is one of the GOATs, has POTS (Postural Orthostatic Tachycardia Syndrome), which causes a fast heart rate, dizziness, and fatigue. For years she didn't speak about the condition as she didn’t want it to shape the media narrative.
For nearly a decade, Olympic swimmer Katie Ledecky has lived with postural orthostatic tachycardia syndrome, or POTS. Here’s how she manages its symptoms.
Matt Campbell
in reply to David Goldfield • • •David Goldfield
in reply to Matt Campbell • • •