A recent security audit of #Conversations_im¹ found that wildcard certificate handling didn’t fully comply with the spec.

Conversations was accepting *.a.example for c.b.a.example, even though wildcards are only meant to match a single label.

This issue has been fixed in version 2.18.0, now live on Google Play.

¹: conversations.im/2025_audit_co…

#XMPP #Jabber

Nicoco reshared this.

Da #NeoOffice (#macOS) eingestellt wurde, #Apache #OpenOffice das letzte Mal 2024 im Blog stehen hatte und #Microsoft zu viel #Holz für sein #Office365 haben möchte, bin ich tatsächlich nun als #OpenOffice.org-#Vetaran [wiki.openoffice.org/wiki/User:…] #privat auf @libreoffice umgestiegen. Als wäre ich nie weg gewesen 🙂

Open Protocols and APIs: The Overlooked Key to Accessibility: stuff.interfree.ca/2025/04/09/open-protocols-and-apis-the.html

Peter Vágner reshared this.

Peter Vágner reshared this.

Are you guys bored? Do you hate America? Do you want literally anything to do? Try fine-tuning an LLM today with Unsloth and Google Colab. You know deep inside yourself this is something you've always wanted to do, and now you have no excuse because it's completely free. unsloth.ai

I'm super excited to have Ben Ritner from KadenceWP joining me live on YouTube tomorrow to talk about building accessible websites with Kadence. Tune in at 3 PM central. #WordPress #a11y #accessibility

youtube.com/live/mHqL02OF7u8

reshared this

Some Mexico news:

President Sheinbaum and her lackeys at the National Human Rights Commission (CNDH - an ostensibly autonomous state institution) are battling with the United Nations over disappearances. The UN says disappearances in Mexico are "generalized and systemic." With no sense of irony, or apparent grasp on reality, the CNDH replied that, "We reject that Mexico is experiencing a crisis of disappearances and more so reject that these are the result of State policy." They then ramble on about foreign meddling making things worse. Apparently 124,000 disappeared since 2006 is something that just happens?

jornada.com.mx/2025/04/07/poli…

In an incident causing widespread indignation, on Saturday afternoon, a poorly built structure collapsed in strong winds at the international AXE Ceremonia Festival in Mexico City, killing two photojournalists. That was at 5:30pm. The show continued until 2am with no interruption.

The festival was to proceed on Sunday and authorities said they would close the venue after the festival ended. In response to outrage over the deaths and refusals by artists, including mi querido Ed Maverick, to perform as if nothing happened, they finally cancelled the remainder of the event.

"It was not an accident, it was negligence," say the journalists' union.

piedepagina.mx/ninguna-pasion-…

#Mexico #CDMX

in reply to Scott Campbell

The Mexican government's battle with reality and the United Nations continued today with the Senate passing a resolution demanding the UN remove Olivier de Frouville from his post as head of the Committee on Enforced Disappearances for daring to propose that disappearances in Mexico occur in a "generalized or systemic manner."

Apparently what forces the State's hand is when some UN functionary says something approximating the truth.

Apparently they can't be bothered with the 124,000 disappeared, the extermination camp discovered in Jalisco last month, or their own vapid promises to take action after the fact.

jornada.com.mx/noticia/2025/04…

#Mexico

How I became a confident disability advocate lifeofablindgirl.com/2025/04/0…

@Friendica Support
I would like to pull some content from Ukraine to my Friendica instance and found the following relay that has all hte relevent Ukrainien Mastodon instances:
relay.social.net.ua/
However, `console relay add relay.social.net.ua/actor` gives me a `couldn't be added`. The reason might be that this is not a yukicmochi relay but based on some other code. Would you be so kind to have a look whether this can be fixed on my end or on theirs and how?
in reply to Michael 🇺🇦

@Michael 🇺🇦 I see that in the Admin Panel, Sites, Message Relay, I can set "Number of languages for the language detection" and "Language Quality" and the description reads as if the relay filters inbound content. However, where do I set the languages for which to filter? There is no setting where I can select which languages I want to receive via the relay. Could it be that currently I only get English from all of my relays as my instance language is English?

So what we need is a) ability to configure the list of language for inbound filtering and b) filtering also, with a separate list of allowed languages per relay, filtering outbound contenct.

Where do I go to create an issue?

As to your other questions: I don't think we need Russian. In Ukraine, choosing Fediverse over mainstream networks is about equivalent to choosing to talk in Ukrainian only :). But generally, it would be good if we could configure a list of languages. As to readonly subscription, that would be a quick fix, but the Fediverse is about interaction, so it would not be a good solution.

The tariffs are about drugs coming across our borders.
The tariffs will go in effect at midnight.
No the tariffs are paused for 90 days.
The tariffs start tomorrow morning.
I’m pausing the tariffs but immediately installing a 10% tariff.
The tariffs will make everything built in America.
China will pay all the tariffs.
There are no tariffs.
The tariffs have been in place this whole time.

It looks like the #OpenSSL QUIC API might be supported in the coming #ngtcp2 1.12.0 release:

github.com/ngtcp2/ngtcp2/pull/…

This could be exciting for #curl users building with #OpenSSL ...

ICE director’s dream: “Squads of trucks rounding up immigrants for deportation the same way that Amazon trucks crisscross American cities delivering packages […] like (Amazon) Prime, but with human beings.” This is pure evil. michiganadvance.com/2025/04/09…

#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 15 updated and 1 added apps:

* JetSpacer: pulls data from multiple NASA APIs and wraps it all in a minimal UI 🛡️

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:

Happy CSS Naked day! Append ?sandbox=broken to any page on seirdy.one to load a page with HTML-only.

More info: seirdy.one/notes/2024/04/09/pa…

view that page in HTML-only mode. (edit: fixed this URL; it should work correctly now)

#CSSNakedDay

This entry was edited (8 months ago)

As part of the History of the Web project, I was interviewed by Brian Kardell @bkardell of @igalia

We talked about my early (pre-W3C) involvement in PNG, CGM, HTML 2; and then some early CSS, SVG and WebFont history @w3c

youtube.com/watch?v=ptXY45HlQ6…