mastodon - Link to source

Great to see you're adopting some of the #security features we've implemented earlier this year at #IzzyOnDroid @fdroidorg! Maybe you want to check our documentation on them?

android.izzysoft.de/articles/n…

* it's SIGNING blocks, not FROSTING blocks
* MEITUAN is about payload, not metadata
* there's no fixed number of blocks as your code assumes (gitlab.com/fdroid/fdroidserver…)

The article you link to (bi-zone.medium.com/easter-egg-…) tells you the same :wink:

screenshot from the merge request adding checks for signing blocks, calling them "frosting blocks", the Meituan Payload block "metadata", and the frosting block "Google metadata"
screenshot from an issue comment to developers, describing the DEPENDENCY_INFO_BLOCK as "frosting block"

Easter Egg in APK Files: What Is Frosting - BI.ZONE - Medium

A file structure is a whole fascinating world with its own history, mysteries and a home-grown circus of freaks, where workarounds are applied liberally. If you dig deeper into it, you can discover…
BI.ZONE (Medium)
#security #izzyondroid @F-Droid
in reply to IzzyOnDroid ✅

mastodon - Link to source

IzzyOnDroid ✅

Only what you call "Google metadata" (0x2146444E) is the Google Play Frosting Block, neither the DEPENDENCY_INFO_BLOCK (0x504b4453) nor the MEITUAN_APK_CHANNEL_BLOCK (0x71777777) are. And Meituan calls their block Payload themselves:

github.com/search?q=repo%3AMei…

screenshot from code by Meituan, clearly addressing their block with a "PayloadWriter"

GitHub

GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.
GitHub
in reply to IzzyOnDroid ✅

glitchsoc - Link to source

Fay 🏳️‍🌈

My Android APK signing block payload PoC from Feb 2023 can use either a custom block or hide the payload in the verity padding block.

The IzzyOnDroid scanner will catch either variant, but the F-Droid scanner will miss both.

github.com/obfusk/sigblock-cod…


GitHub - obfusk/sigblock-code-poc: android apk signing block payload poc

android apk signing block payload poc. Contribute to obfusk/sigblock-code-poc development by creating an account on GitHub.
GitHub

mastodon - Link to source

Inspired by this post by @glyph: mastodon.social/@glyph/1134377…

Thank you @nolan for all of your work on the Pinafore client for Mastodon, and for continuing to operate this instance.

Glyph (@glyph@mastodon.social)

One of the folks who reached out even specifically mentioned that they were using https://github.com/glyph/pomodouroboros for the first time, and it was helping them be productive. And speaking of mental health, that helped more than anything.
Mastodon
@Nolan Lawson @Glyph

Jamie Teh reshared this.

in reply to Evan Prodromou

mastodon - Link to source

Garrett LeSage

You wouldn't believe the hoops I had to jump through to vote by mail from overseas this year.

I wouldn't be surprised if the turnout from us abroad is much lower due to all of the mischief.

Extra mess:

The GA portal had errors and it linked to another site for the mailing address… which was unreachable.

Then there were two different mailing addresses.

I wouldn't have been able to mail in my ballot if I didn't have chat history and Archive.org (which was even down later).

mastodon - Link to source

Please complete our online Blind Voters Survey, so that your experiences, whether positive or negative, can be documented.

There are three versions of the survey depending on how you voted:

In-person: surveymonkey.com/r/VDJGSS8

Absentee: surveymonkey.com/r/VYYJDXT

Spanish Language survey (including both in-person and absentee voting options): surveymonkey.com/r/7J3G7FH


Encuesta de votantes ciegos 2024

Take this survey powered by surveymonkey.com. Create your own surveys for free.
www.surveymonkey.com

mastodon - Link to source

Hey würde jemand Lust verspüren sich beim Betrieb eines deutschen #panoramax Servers einzubringen? Streetview Photos unter CC und für OSM :blobcat_winking:
community.openstreetmap.org/t/…

#selfhosting #openstreetmap #fossgis #gistribe #datenschutz #photografie


Deutscher Panoramax Server?

Wenn es um das Problem des Hostens der Bilder geht könnte man vielleicht gucken, dass man die Bilder einfach auf Wikimedia Commons speichert und Panoramax nur als Viewer für die auf den Wikimedia Servern liegenden Fotos nutzt.
OpenStreetMap Community Forum
#datenschutz #selfhosting #openstreetmap #fossgis #PANORAMAX #gistribe #photografie

mastodon - Link to source

Hoy @elmundotoday está que lo tira!

Desokupa se ofrece a desahuciar a Joe Biden de la Casa Blanca

elmundotoday.com/2024/11/desok…


Desokupa se ofrece a desahuciar a Joe Biden de la Casa Blanca

Daniel Esteve, responsable de Desokupa, ha celebrado hoy la victoria de Donald Trump y ha anunciado que se desplazará mañana mismo a Estados Unidos para poner a disposición del partido republicano los servicios de su empresa, que tiene «mucha experie…
www.elmundotoday.com
@El Mundo Today

mastodon - Link to source

That's why we publish all our apps on @fdroidorg ❤️

🔒 Get the new calendar app now! 🔒
👉 tuta.com/blog/tuta-calendar-fd…

#FOSS #OpenSource #Encryption #Security #Calendar

Man saying We Love Open Source

New Tuta Calendar app is now on F-Droid! | Tuta

Encrypted, open source, zero strings to Google – introducing the Tuta Calendar.
Tuta
#foss #opensource #encryption #security #calendar @F-Droid
This entry was edited (1 year ago)

mastodon - Link to source

Important links.

Passport renewal (online): travel.state.gov/content/trave…
Passport application (in person): travel.state.gov/content/trave…
Passport renewal (by mail, needed if changing name or gender marker): travel.state.gov/content/trave…
Passport gender marker changes: travel.state.gov/content/trave…

Stay safe. Please boost!


Renew my Passport Online

This page includes information about our online passport renewal system, and instructions to complete your application.
travel.state.gov

mastodon - Link to source
Dneska se mi poprvé v životě stalo, že ukazatel teploty chladící kapaliny motoru byl mimo normu. Tomu autu jsem po cestě z práce dával ještě jak nikdy. Tak moc jsem spěchal domů. Až jsem si řekl hmm. Dobře. Tak zapnu topení na plno, ať to zchladím. Po příjezdu domů jsem zjistil, že se ta ručička sekla a po opětovném otočení klíče už byl ukazatel v normě. Nelze se divit, že se to seklo. Možná to na tom místě bylo poprvé v životě.
in reply to 𝕆𝕥𝕥𝕠 𝕧𝕠𝕟 𝕎𝕖𝕟𝕜𝕠𝕗𝕗 🐾🐐🐇🐔

mastodon - Link to source

Archos

@OttovonWenkoff Tu měl kolega, jezdili jsem na šachtu do práce. Bylo to kolem 20 km. V zimě to začalo topit, když jsem z auta vystupoval :-))) @fabia_man
@𝕆𝕥𝕥𝕠 𝕧𝕠𝕟 𝕎𝕖𝕟𝕜𝕠𝕗𝕗 🐾🐐🐇🐔 @Robin Bedrunka 🐞
in reply to 𝕆𝕥𝕥𝕠 𝕧𝕠𝕟 𝕎𝕖𝕟𝕜𝕠𝕗𝕗 🐾🐐🐇🐔

mastodon - Link to source

GuloGulo

@OttovonWenkoff @archos jj a na chatu to 1 nedala, tak táta couval.
Ale 100vka byla naše druhé auto, předtím 6V Trabant (prosím ne 6 válců ale voltů). Táta měl ještě za svobodná Octavii co prý měla ještě části ze dřeva, v té mě vezl z porodnice.
@Archos @𝕆𝕥𝕥𝕠 𝕧𝕠𝕟 𝕎𝕖𝕟𝕜𝕠𝕗𝕗 🐾🐐🐇🐔

mastodon - Link to source

Note to USA folks, ❗trans folks especially❗.

A passport is:
- Fundamentally useful
- A federal ID
- Recognized in most state/local level contexts
- *You can change your gender marker on it through pure self ID, with nothing medical required*. "X" is an option. travel.state.gov/content/trave…
- Normally 4-6 weeks to process (faster if u pay extra); that means if you apply for one this week, you easily get it before Jan 20.
- Lasts 10 years

Perhaps apply for one (or renew it, to reset yr 10 years) soon.


Selecting your Gender Marker

Information about how to select a new gender marker on your U.S. passport.
travel.state.gov
This entry was edited (1 year ago)

mastodon - Link to source

#MovieThread V: Definitely Not The Final Frontier, Chapter Eleven — November Edition

From 2020 to 2023 I watched 1492 movies. This year so far, I've watched another 388, for a total of 1880 movies.

Numbers still check out.

This month:
* 1945 Best Picture nominees
* Actually starting Elaine May.
* Probably some Star Trek.

:beepboopone: Previous thread: beepboop.one/@Alexis/113238083…

Alex Daily! (@Alexis@beepboop.one)

#MovieThread V: Definitely Not The Final Frontier, Chapter Ten — October Edition From 2020 to 2023 I watched 1492 movies. This year so far, I've watched another 356, for a total of 1848 movies. Numbers still check out. This month: * 1944.
Beep Boop One
#MovieThread

mastodon - Link to source

Don’t expect Chrome to support keyboard-operable scrolling regions until (maybe) version 132 (anchor link):
adrianroselli.com/2022/06/keyb…

Only 14 versions past its target release!

#accessibility #a11y


Keyboard-Only Scrolling Areas

I have spent a few years banging on about ensuring scrolling areas on a page are accessible to keyboard-only users.
Adrian Roselli
#a11y #Accessibility
⇧