linux-game-manager
Storm Dragon pushed changes to the master branch of the linux-game-manager project Reorganized how addons are found and added when loading games. As a side affect, fixed a major bug with the way the latest version of the game is loaded.

The July 2024 Reproducible Builds project report is out!

* Reproducible Builds Summit 2024 in Hamburg in September
* "Pulling Linux up by its bootstraps" in LWN by @setupminimal
* Idempotent Rebuilds
* AROMA: Automatic Reproduction of Maven Artifacts
* Android R-B at IzzyOnDroid @IzzyOnDroid
* And much more!

reproducible-builds.org/report…

This entry was edited (1 year ago)

I just had to share this one!

Notable is a user-friendly tool designed for managing and editing your personal wiki.
It is a single executable that embeds feather.wiki, a versatile, lightweight and accessible wiki tool.
I created this as a quick solution when I couldn't find a local personal-wiki tool that fit my needs.

Find Notable here:
github.com/mush42/notable

#TechTips

reshared this

I believe the APH Braille Plus might have been one of the most innovative mobile devices for our community when it was released in 2007. But 17 years later, how does this device hold up? My latest video explores this, and the answer may surprise you. youtube.com/watch?v=R6Pt5iAOin…
in reply to Calum

@scottishwildcat @hbons these are Apache chilli peppers, so: sun, and not watered a lot. They are also self-pollinating, so you need to brush the flowers when they open up. This plant has lasted two seasons, and it's very low maintenance, which is great because I can kill anything that is green either by obsessing on it too much, or by forgetting it exists the second I leave the room.
in reply to Emmanuele Bassi

This former professional chili farmer/breeder is proud of you guys. If you ever get inspired and have a sunny window or can move a plant in and out for freezing weather, try one of the C. pubescens varieties. These are very hot, high altitude varieties that produce all year and like coastal environments. Here in the PNW they can produce all winter if they don't freeze. They produce fruit in cooler weather than C. annum.

They are colloquially known as "manzano" or "rocoto" and you'll know you've gotten the right thing if the seeds are black. Cuttings from your local chilihead will work too.

Unknown parent

glitchsoc - Link to source

drakulix

@matt Yeah I hate, that it is waaay to easy to override PATH, LD_PRELOAD/LIBRARY_PATH, etc and protecting against that is annoyingly difficult.

We never put a socket with these protocols on the filesystem, but that doesn’t mean much, when you don’t know what you are executing. And running the shell-components without the users environment has the potential to break a lot of valid use-cases unfortunately…

Doctor Who stories: How The Enemy of the World became a forgotten classic blog.lovarzi.co.uk/doctor-who-…
in reply to Mark W. Alexander

Thank you for sharing this Salon article on collective denialism. It touches so many subjects including Olympic athletes competing with covid, Taylor Swift superspreader concerts, surveillance of cases and deaths, how covid is not a cold or flu but a multisystemic disease that leads to disability in kids and adults, economic fallout, vaccination, and finally MASKING for mitigation. Superb article that needs a wider audience.
salon.com/2024/08/10/noah-lyle…
#Covid #CovidIsNotOver #MaskUp
in reply to ronny

@ronny
Je tam hrozně čistá voda. Máme to hned za barákem. Parádní místo 👍
vary.rozhlas.cz/medard-je-nejv…

A great article from Awful Announcing, and I totally agree NBC finally, finally figured out the Olympics.
How NBC found the golden touch for the 2024 Paris Olympics
awfulannouncing.com/olympics/n…

Something in @pluralistic’s @defcon talk has been sitting with me all day. To summarise badly:

Tech workers were looked after when it was a scarce skill. The layoffs make it clear it isn’t as scarce anymore.

As the saying goes - the future is here just not evenly distributed.

Abused amazon delivery/warehouse workers are the tech worker future.

The only defense is to unionise.

Update: A recording of the talk is now out defcon.social/@defcon/11314983…

This entry was edited (1 year ago)

Yesterday, I learned from a friend that the software running the Evo E10 daizy book reader/digital recorder for the blind is based on, of all things, OpenWRT. Wait... what?
Of course, you won't find that in any of the documentation. This friend only found out because he decided to telnet to the IP address associated with the E10 on his network.
Also, the official website for this thing has an abundance of fantastic English.
vin-vision.com/html/daisy_play…
This entry was edited (1 year ago)

reshared this

✍️ Napsala jsem pro @enkocz článek o tom, čemu se věnujeme ve vzdělávacím spolku Aignos. ❤️🔓 Odemčený text najdete tady: denikn.cz/1487838/myslite-ze-b…

It's called quishing when a criminal gets you on the hook via a QR code and you hand over personal information such as credit card details, passwords and your home address.

There are many hooks in our everyday environment today.

QR codes are found in hotels, gas stations, museums, restaurants, medical centers and many other places you trust. It takes a second for a criminal to cover a QR code with his own sticker. How would you tell the difference?

Via the fake QR code you are guided through a flow that feels like what you expect. It's just controlled by someone with nefarious intent.

The German magazine Auto Motor Sport reported earlier this week about how this affects gas stations. per.ax/autoqr

Imagine scanning a QR code at a charging station to start charging your electric car. You enter your credit card details and press start. But the charging doesn’t start. Because you just gave your card details to a criminal who put their own QR code sticker on the charging station.

A clever criminal will perhaps display an error message on the web page and redirect you to the real supplier, enabling you to start charging for real. In which case you may not even notice that money is being covertly withdrawn from your account until much later... or blame the charging supplier who is completely unaware...

But of course it doesn't just affect charging stations. It can happen anywhere.

Queuing systems at sampling locations increasingly rely on QR codes here in Sweden. Let's say a criminal covers this code with their own. You will arrive at a page that asks if you want to join the queue or pay the patient fee of 50 kronor in advance. You may know that you do not have to pay a patient fee. But does everyone know that? Maybe some will bite and pay.

If you join the queue, you will be directed to the correct queue. So not much to react to. And if you have paid the 50 kronor, you will then also be led to the correct queue.

The fake QR code can therefore go undetected for a long time.

As a company, do you know if someone perhaps has already covered your code and is quietly using it to create intermediate flows that steal personal data, or money? Do you have routines to check this? In some places, fake QR codes may live on year in and year out. Like a dripping data leak.

QR codes are in many cases a really, really bad idea from a security and privacy perspective. And it can be a real setback for your brand if people are duped on your premises. Or on your products.

So, do you encourage people to scan, or do you warn?

If I see a QR code in everyday life, I also see many ways to intercept and abuse it.

How did this vulnerability appear just about everywhere? It's as if QR codes have completely gone under the radar of security departments.

I will restructure this post for my blog/newsletter later, but didn't want to wait with my warning, after seeing the clear example from charging stations.