We’ve now published the details of the security issues which we addressed in Monday’s coordinated security release of Matrix: read all about Project Hydra at matrix.org/blog/2025/08/projec… and please upgrade your servers and rooms where applicable.
@element any idea of the timeline of the release of the compatible version of element-x in fdroid ? I can see in the metadata the work is done gitlab.com/fdroid/fdroiddata/-… but no build available. Any plans of pushing to an other repo like Izzy @IzzyOnDroid or your own repos like @guardianproject ?
New from 404 Media: ICE added a random person to group chat, exposed highly sensitive details about an active manhunt in real-time. The person says they were added weeks ago, thought they were scam texts until start seeing data lookups etc. Incredible security failure 404media.co/ice-adds-random-pe…
The texts were sent to a group called “Mass Text” and show ICE using DMV and license plate reader data in an attempt to find their target, copies of the messages obtained by 404 Media show.
L’Office québécois de la langue française (OQLF) fait finalement marche arrière dans le dossier du Pub Burgundy Lion, après avoir demandé au propriétaire du restaurant d’ajouter « des éléments en français » à son enseigne.
Our regular Development Digest has some exciting updates on features that are nearing completion, in the case of Exchange email support, and are just starting development, in the case of the long-awaited Conversation View. We're also adjusting Account Hub and tackling the usual maintenance tasks and bug fixes
⚠️ Important headsup if you are on the server mastodon.cloud:
Mastodon.cloud no longer seems to be moderated. Its admin account hasn't posted since Feb 2023, its code of conduct is blank and there are vile racists posting from there. The racists have been reported many times but their accounts are still active.
Because of this, other server admins are starting to block mastodon.cloud completely.
Apple was forced to remove the blood oxygen monitoring two years ago amid a patent dispute, but a software update coming later today will revive the feature. pcmag.com/news/apple-watch-blo…
The standards also allow the bots to make "statements that demean people on the basis of their protected characteristics," such as "black people are dumber than white people."
Shopify CEO Tobi Lutke, Tyler and Cameron Winklevoss, and 80+ fintech and crypto CEOs urge Trump to block US banks from charging fees to access customer data.
Debianites in 5 continents around the world are preparing to celebrate Debian's 32nd birthday next Saturday. Check the list in the link to find an event near you or organize one yourself and add it to the wiki: wiki.debian.org/DebianDay/2025 #debian #debianDay
ProRail’s war against bicycles is intensifying. After stopping installing bicycle gutters on staircases, they now put up signs to forbid bicycles on escalators (we have been doing that in Rotterdam since 1942, it truly is a lost art)
@oz1sej either there's an open source license screen somewhere in the infotainment listing countless licenses, or there is a mention in documentation somewhere
Interesting. So while they don't support the open source projects they use, at least they mention that they are using them. I assume many more don't even mention it, if their own code is not open source...?
The EU Regulation to Prevent and Combat Child Sexual Abuse, first published in May 2022, has become the "most criticized law of all time". Here's how to stop it now!
I am tired of this tune repeating every two years or so. But I'm angered more. This sort of propositions should be career ending for any politician in a democratic country. Yet, they just keep resurfacing and gaining support
Mail sent. Don't think I ever "contacted my representatives" before. Very uncomfortable. But f'ing Hell! What a shitshow of symbolic policy to allow a nightmare surveillance backdoor 🤬
How many times more were going to repeat this? Them fucking politicians not only waste our money for their salary bit also our time. Those idiots are clearly to fire, I don't wanna pay anymore for those ideas.
People have been rightly condemning what's going on in the US, but leaders other places are not taking it as a warning sign, but rather as an opening to enact similar policies.
We all have to watch out for the totalitarians in power and the global rich that power them!
I love Europe, but this must stop. We were supposed to protect human rights.... . And I strongly believe privacy is one of them. Besides, if we want to get ecological I dont belive using AI to read messeges will have a positive impact.
This is the kind of legislation all Europeans are calling for, of course. That said, we are handing over our lives to US companies, and not happy with that, now we will allow our 27 governments to open the letters in our mailbox.
At present, this is just a "landing page": a nice short name to remember, which will redirect you to the full PuTTY website at the same longer URL where it's always been.
But unlike putty.org or other third-party landing pages, this one is run by us, the actual PuTTY team, and it doesn't have a weird separate agenda of its own.
I intend to move the main PuTTY site over to that domain in the future, and leave just a redirector at the old location. But first I want to get the word out, so that people know which site to trust.
If anyone is still linking to putty.org, here's a place to link to instead. Please spread the word!
So many companies that earn money on open source but gives nothing back.
I often try in companies I work for to advocate that we should either contribute back to open source or donate some to maintainers. Often I'm on the loosing side of the battle.
Some of these companies are part of Automotive Grade Linux (top off my head, Toyota). Does the Linux Foundation, as parent foundation of AGL, contribute financially to Curl?
So that's part of the problem IMO. A Linux Foundation platinum membership costs 500K EUR annually. Some of these companies pay a fee to the LF or similar organizations, yet none of that money goes to fund free and open-source projects.
@nopatience as they list and show curl's license on their screens and in their documentation of course they know about it. They use it. They rely on it. It's just that they don't have to pay so they don't.
How many Open Source projects are you currently funding?
If the answer is zero, you're not taking good care of your business. If you're on the board of a company where that answer is zero, you're not doing your job.
(Curl has the benefit that it gets to announce itself in some cases; there are typically hundreds or thousands of other F/OSS components in use that don't. All face sustainability concerns.)
@9v1rt 1. curl doesn't "announce itself" 2. these companies use libcurl, it's as "hidden" in the mix as anything else. 3. I don't claim that curl is unique, it just happens to be my baby
Seven years ago I wrote about how a hundred million cars were running curl and as I brought up this blog post in a discussion recently, I came to reflect over how the world might have changed since. Is curl perhaps used in more cars now? Yes it is.
I suspect this may be similar to slide 2, but do you have a list of car companies who've submitted patches or positive support requests? (not just "make it work plz")
@nopatience True, but I don't think that changes much when it comes to the perception of libcurl just being taken for granted. (Unfortunately!)
And there is the elephant in the room: the license. Since I'm not a developer (I don't even work in IT) I'm only occasionally contributing a few patches here or there to FOSS projects but I'm always a bit puzzled when I encounter a project under a MIT-type license.
@hambier @nopatience switching to GPL would just mean that it would not be used in all those places. It would not make anyone pay. That only works with dual-license setups and that's an entirely separate deal and one I'm not a big fan of, even if it makes good business
Unfortunately this is very common. Software libraries but also things like OpenStreetMap. "Well, it does not cost any money, we'll take this!" Nobody in the companies thinks about the people behind the projects. Literally nobody!
But when there is a critical bug, everybody cries and demands (!) a quick fix from the creators! (log4j anybody?)
If you've got Ford on there, you can probably add Lincoln. Also you've got a bunch of Stellantis brands on there - there's a fair chance they might use the same software in their US brands too (Chrysler, Dodge, Jeep, Ram).
dumb question: if you want to get paid for major commercial use, why don't you just change the license in the next release? You're making it available for free but you literally don't have to, if you don't want to, right?
isn't this the general case independent of exact industry? Even if excluding "accidental" usage, because someone is using a *nix computer with scripts.
I wish there was an open-source license that had an ‘if you are a company with over $<X> revenue, then you owe <Y>% of it to the project’ type of clause.
Wouldn't that mostly fix the problem? Is there such a license available now? #openSource
[ Addendum: I'm still compelled by this idea. But, here is an important differing point of view: thenewstack.io/open-source-is-… ]
I have to be misunderstanding open-source, thought it just meant the source was openly available for use, modification, and redistribution as long as it is licensed the same. Does the problem have to do with modification & redistribution? I need to learn more.
Introduction Open source doesn’t just mean access to the source code. The distribution terms of open source software must comply with the following criteria: 1. Free Redistribution The license shall…
I love open source. I was part of a team that made open source motion control, and many of the 3D printers you can buy today use our ideas (or code, even).
I think one of the hardest parts of open source is how, when you do get sponsored and sell support, the sponsor now essentially gets control over the project, and gets upset if you don’t yield to it. Worse if you have few sponsors.
On a lighter note: thank you for your work and great project!
I think this is wonderful, so thanks for shining a light on it.
Assuming good faith: I wouldn't be surprised if some/most/all of these companies don't even know this fact. Making it visible could be very beneficial. Hopefully for you, but possibly also for the wider FLOSS ecosystem.
Bit sad/surprised to see several suggestions to make the software less/non-free instead of 'anger' towards those companies in their failure to make FLOSS (more) sustainable.
Without naming names, I had an open source partner tell us that while their stuff is used by some of the biggest corporations on the planet, my 100-person company is the only one who has given anything back.
I’m sorry but, as “selfish” and unfair as it may be from these compagnies to benefit from all this free work without ever giving back, isn’t that the whole point of the software license chosen ?
Curl and libcurl are true Open Source/Free Software and meet all definitions as such. It means that you are free to modify and redistribute all contents of the curl distributed archives. You may also freely use curl and libcurl in your commercial projects.
The whole point of those licenses always has been to allow capitalists to profit from the free work of thousands of “free software” enthusiasts, and that’s probably one of the main reasons why so many “big” projects (which are almost all funded by businesses, directly or indirectly) push very permissive licenses as much as they can under the pretext of “freedom”. 😬
While I feel for you and it is clearly unfair that your (excellent) work is used everywhere without much (if any) payment for it, to me it looks like this goes far beyond the “selfishness” of a few big businesses, and is a systemic problem that cannot be solved without questioning capitalism itself, and the fact that the “free software” community accepts and even embraces it so broadly. 😕
Nabízím aktivní dovolenou! Na týdenní tábor s postiženými potřebuju ještě jednoho asistenta či asistentku. Nepotřebujete žádnou kvalifikaci, jen ochotu pomáhat. Odjíždíme teď v sobotu, návrat příští sobotu. Je to super užitečná služba, aby si pečující rodiče mohli aspoň jednou za rok na týden odpočinout. Ale hlavně je to velká zábava. Jestli máte zájem nebo to aspoň zvažujete, ozvěte se mi do DM nebo na Signal (viz profil). Za sdílení díky! napivodobelce.cz
Last week, British foreign minister David Lammy went fishing with US Vice President JD Vance at his retreat in the English countryside. Now, he could be fined for doing so.
We're a nonprofit exposing the negative effects of persuasive technology and social media and empowering people to take action. Discover The Social Dilemma, our podcast, course, and more.
I’m happy to announce that the next major upgrade, Mona 7, is now available on TestFlight for everyone to try. Check out new features like posting with Live Photos and Genmoji, extra translation options, and automatic alt text creation. “Liquid Glass” will also be supported soon. Can’t wait to hear your feedback! testflight.apple.com/join/t1Ky…
Beta testing of Mona 7 with “Liquid Glass” is now available on iOS and iPadOS 26 Beta. An update for macOS 26 will be available later this month. Can’t wait to hear your thoughts! testflight.apple.com/join/t1Ky…
Mona Beta now supports automatic alt text creation via Apple Intelligence on iOS, iPadOS, and macOS 26, as an opt-in feature. Automatic alt text creation ensures that your pictures are always accessible to people with visual impairments. You can install or update the app via TestFlight: testflight.apple.com/join/t1Ky…
As some of you know I'm working implementing some of my work with the #Bookface scheme for "Frio" into a new theme based on "Vier" but incorporating some things from Frio and some new things too.
One of those things is a new icon set because Friendica's icons are looking pretty dated. You may have noticed just about everything these days has shifted to open, line icons. So I settled on Phosphor Icons because they're a really nice, free, open source set under an MIT license. I'm also using Lexend for my main font. It's scientifically designed to improve readability, looks modern, and it's based on one of my favorite old project fonts, Quicksand. Incidentally it was only after making these choices I found out Sharkey is already using this combo, so it may look familiar to some of you already.
Rather than copy ALL of the templates into the new theme to edit the icon class names, I put together a stylesheet that automatically replaces the old Font Awesome 3 and Fork Awesome 1.2 (which is based on Font Awesome 4/5) with Phosphor icons. Except for the cases where Phosphor doesn't have a viable alternative (mostly Brand and Accessibility icons). That alone really wakes things up to a modern look!
While I want this new theme to feel more light and airy, I'm leaning toward mostly using the "Phosphor-Bold" variant as the "Regular" set has pretty thin lines and looks too light next to text in the Lexend font. You can seem that in the Post Menu comparison up above. I've also considered just using the "Fill" variant for drop-down menus. If you look at Facebook they use open, line icons where they are by themselves, bolder or filled versions in circle buttons, and filled icons in drop-down menus. I may do something similar, I'm not sure. Though I like the look of the "Phosphor-Bold" in the drop-down menu. It's heavy enough to look like it goes with the Lexend text next to it, but not too heavy, which is the feel I get from the "Phosphor-Fill" icons.
As for the "Action Buttons" you use to interact with posts, for those I'm leaning toward using "Phosphor-Regular" for those but if I do probably "Phosphor-Fill" for the rollover effect as a color change on rollover is hard to see with the thinner line width. "Active" buttons (ones you've already clicked before on that post) would be in your personal choice "Accent" color. You'll notice no little engagement counts on them either. Too many people have found them overly distracting or visually cluttering so I'm not going to do that in this new theme.
There's still no room on narrow mobile screens in portrait for the button labels, but here are the screencaps of the font weight and rollover options:
I'm sticking with the icon font instead of switching to SVG sprites because Vier uses icon fonts already and it's simply easier to retrofit it with the Phosphor Icons font.
I was initially just going to adapt the Bookface look to a new stylesheet for Vier. But it quickly became apparent to do some of the things I want I need to alter the structure of the theme not just the appearance. "Vier" is an old theme but it's proven more stable than Frio, uses fewer resources, and it loads and renders faster. Mostly because it doesn't have any frameworks or add any new JS or jQuery. "Frio" is a Bootstrap theme and has some other frameworks/libraries and is quite complex and code-heavy. For building a new theme I had to decide if I was sticking with Frio and was going to try and strip all that out or if I should just base on Vier since it already didn't have any of that in it.
As I said, what I'm making is more of a blend of Vier and Frio layout and features, but I'm also not going to add any frameworks or libraries or jQuery, though there may be a little vanilla JS just to make things work. And custom backend code to implement some things via hooks that aren't in the Friendica core.
The working theme name is BookLook though that could change.
The Work-In-Progress theme is not yet to a point where I'm posting code or sharing it for testing. It's been slow going and there's still LOTS to do! I don't have a timeline on when this will be ready for that or completed. But I finally reached the milestone (or maybe it's a millstone?) of swapping out the icons and would appreciate any thoughts you might have about the direction I'm going with it.
Arthur Lutz
in reply to The Matrix.org Foundation • • •bot: Update Element X to 25.08.2 (202508024) (!25827) · Merge requests · F-Droid / Data · GitLab
GitLab