got laid off in the big dropbox layoffs today.

if anybody is looking for a staff-level engineer who loves mentoring and who is an expert in web security, email security, TLS/PKI, key and secrets management, and general defense security stuff, please feel free to hit me up.

Received my yearly rejection from @Rustnationuk yesterday. This time I was sure my talk will get shortlisted since IMO it's a very interesting topic but I guess it's not as interesting as other submissions. 🤷‍♂️

Before you ask, my submission was titled "Profiler-drive optimizations: how I optimized away 94% CPU from zbus".

PSA

Thanks to the GNOME Infrastructure team's ongoing improvements, the GJS API Docs (gjs-docs.gnome.org) are being migrated to new infrastructure.

There may be some slight downtime, but it will be back up very shortly! Sorry for any inconvenience!

#GNOME #GJS #GNOMEShell #GNOMEExtensions

Fighting Fascism. #vote #DemocracyIsOnTheBallot

BREAKING

Former Republican California Gov. Arnold Schwarzenegger endorsed Vice President Harris

#ArnoldSchwarzenegger #Trump #politics #electionday #elections2024

Is there a good source of free/paid generic HTML/CSS themes for tasks like apps/blogs that aren't tied to a given SSG/framework?

Specifically, if I as a blind person want to put together a decent-looking prototype for something in whatever framework I happen to be working with, I'd like to grab something with a simple set of pages/stylesheets and carve them up for whatever templating engine that framework uses. I know these sometimes exist for individual setups like Hugo, but it's harder to work backwards from a framework-specific theme to something more generic. Should also be friendly for editing by hand since the first thing I'll do is separate the layout from the content.

I think I'd prefer Bootstrap for CSS, or something a bit less semantically dense than Tailwind, which always sounds like alphabet soup to me.

Víte co to je #jokgu? Je to sport příbuzný s #nohejbal, který vznikl paralelně v Jižní Korei. Hraje se 4v4 s menším míčem a nesmí se hrát za sítí ani blokovat. Další porovnaní a reportáž z návštěvy českých hráčů u Jihokorejců najdete tady:

youtu.be/nFFTKXX7TYc

JOKGU FESTIVAL 2024

Dokument z Jižný Korey z ČESKÉ TELEVIZE

^YouTube

So many companies implementing PassKey so wrong that it’s mind boggling. What’s so hard to just ask for PassKey and not use it as a second factor?

It is a secure token, it doesn’t really need entering username+password and PassKey. I’ve even seen PassKey + TOTP on top (PayPal).

I am almost wondering that it is not incompetence but the corporate minds want the PassKeys to go away by making them hard to use.

Actually don't even get me started on "transandrophobia."

I have entire _rants_ about the latter part of that word.

MacOS 15.1 brings a nice handful of bug fixes to Apple’s audio system, which will benefit users of all of our products. See this post for full details, then update your Mac to 15.1.

weblog.rogueamoeba.com/2024/10…

I am told that this solution is currently only for low vision users at this time. I have not investigated this.

Delta introduces flight map for flyers with visual impairment: Travel Weekly travelweekly.com/Travel-News/A…

Is it considerate or is it passive aggressive to reply with alt text when the original poster neither wrote any nor asked for any?

[boost if you're so inclined]

• considerate (0 votes)
• passive aggressive (0 votes)
• some other thing (0 votes)

@Codeberg @fdroidorg

So you say that it is now safe to trigger an #app #update on #codeberg and fetching the source code won't fail anymore at #frdoid ?

Just about to publish a new version of #imagepipe .

phoronix covers my work on OpenPaX, a patch to restore userspace W^X and some other common sense functionality from PaX: phoronix.com/news/Edera-OpenPa…

this patch is the cornerstone of the new “alpine hardened” project, which is intended to produce a spin of alpine which is similar to the old grsecurity days of alpine.

OpenPaX Announced As "Open-Source Alternative To GrSecurity" With Free Kernel Patch

Enterprise security firm Edera today is announcing OpenPaX that they promoted in their advance press notice as a 'new open-source alternative to GrSecurity.

^{www.phoronix.com}

Devastating scenes of piled-up cars in #Valencia, #Spain today after yesterday’s historic flooding. A year’s worth of rain fell in a few hours with a peak of 500mm.

#weather #wx #ClimateChange

🔥 Release Time 🔥

📨 Quick Actions for Email Notifications
🎉 Calendar Updates to Celebrate Birthdays!
🎨 Tinted Colors on iOS
📱 Import vCard Contacts on Mobile

Check out all improvements: tuta.com/.../release-actions-n…

If you want to mug a software engineer, ask them if a static code analysis tool should consider `if time.time() > 0:` to be considered the same as `if True:`

Then, while they're writing a 40,000 word blog post on the topic, hit them on the head and take their wallet.

Re last: I thought I was done with shitty machine-learning #AltText but nope.
'Description: Photo by 9to5Mac on October 30, 2024. May be an image of 1 person, box, dental floss, bar soap, thermostat and text.'

I'm pretty sure this is in relation to #Airpods actually, not dental floss but there we go.

This courtesy of @9to5mac.

Today, JAWS version 2025 has been released.
All our products are compatible with JAWS 2025, even J-Say, the update for which has just been released.
So targets have been met and in some cases exceeded.

Within the next few days, we will be contacting people who have a J-Say SMA and providing them with their upgrades.
However, the vast majority of people who have J-Say have acquired it through a Distributor. So in most cases, it is the Distributor who would let you know that the upgrade is available.

If you think you do have a current SMA, your best course of action is to send to us your JAWS serial number so it can be checked. We may then be able to provide it to you faster.

Quickly hitting peak frustration with Thunderbird's accessibility issues. Are there any other good accessible local or web-based email clients?

Don't suggest Gmail, I don't trust Google not to torch my account and nuke my data because some AI somewhere had a bad day.

Also note that I've used Thunderbird for over a decade, I've done all the usual config changes but the updates continue to break accessibility in new and innovative ways. It's not me, it's them, and I can't just not read some messages anymore because Thunderbird can't do accessibility testing right.