A federal appeals court rejects T-Mobile's bid to overturn a $92M fine for illegally sharing customer location data without consent, per a 2024 FCC ruling (Jon Brodkin/Ars Technica)
Microsoft has added COPILOT AI to Excel β but give it a miss if you use the spreadsheet software for numerical calculations or in scenarios with legal regulatory and compliance implications because COPILOT "can give incorrect responses," the company warns. Here's more from @theverge.
Microsoft Excel is testing a new βCOPILOTβ function that lets you use AI to generate summaries, tables, tags, and more based on a group of cells you specify.
someone needs to push and ask the right questions. I thought he was going to do that at the start when he mentioned the price difference between the UK and the US.
@dmills87 I think you had two problems there. First, the audience member, Steve I think he said it was, could have been a little more eloquent, but perhaps he is not experienced in this area. But I think this subject is very much outside Peter White's field of expertise.
we need someone who asks the really hard questions. sight and sound doesn't need to be involved with jaws over here at all. people would be more than happy to get the software from the US.
@dmills87 I couldn't agree more. I accept that there are organisations and perhaps some individuals who do need them, but a lot of us definitely do not and probably know a great deal more about how it works.
@dmills87 In my case I had an issue with JFW causing me issues on a laptop secured with some fairly serious security software. FS refused to help with this and had to go through S&S. Was fobbed off with their support as they just didn't have the answers, they eventually pushed me to FS again and with the help of a senior tech at FS and the security company we got it sorted. Interacting with S&S wasted just over a week.
@andrew @dmills87 I've had this a lot, too. Seriously complex scripting issues where S&S do everything I've already done, eating into the support time the employer had paid for with them. I'm more qualified to script than anyone on their helpdesk, for heavens sake. But they didn't listen.
@cachondo @dmills87 S&S wanted me to get ATW funding to get some scripting to help me with this security software issue as well. That would have been a waste of money, the issue was the security software was blocking the API hooks JFW was using into the applications, so the scripter would have been in the same boat as I was. I am an end user of this endpoint software and don't have any admin access.
2. Vispero is private equity and they purchased FS a few years ago. The PE model is simple. find a good product, extract revenue by hiking prices/changing the model to squeeze the customer, then when customers turn away and company starts loss making, saddle it with its debts and walk away, asset stripping the business as they go. FS is heading for a long walk off a short cliff. @andrew @cachondo @brian_hartgen @dmills87
@bermudianbrit @cachondo @dmills87 I think everyone knows this really. I wish more scripters would work with NVDA and we could then get a real push for making this work in work situations. I do think we will be worse off though without JFW, it will be one less choice.
@andrew @bermudianbrit @dmills87 I have been scritping JAWS since I started using it with Windows 95. It's a system I'm comfortable with and I do miss it with NVDA because I'm less comfortable in Python. I can do addons and modules with a lot more effort than I can do scripts. It's frustrating that I know that technically the NVDA ecosystem is far more powerful, but the training materials of JAWS were there when my mind was flexible enough to soak 'em up.
@cachondo @bermudianbrit @dmills87 Yeah I hear you. I suspect others people are in similar positions. I just can't help feeling we're flogging a dead horse and that will bite us if we don't think ahead somehow. I count myself in this category.
@cachondo @dmills87 This was stopping me from working with clients and there was talk about putting me on the bench while this got sorted. The responses from S&S especially regarding getting a scripter involved caused me serious anxiety and dread to think how anyone not as tech savvy would have coped in this situation. S&S don't get all the blame, as the company I work for were doing their bit to make things difficult as well.
@cachondo @andrew @dmills87 Putting this politely, I don't think they have any scripting talent there. They typically use Blazie to do that work for them. Thankfully, other companies use me, but they use Blazie.
Apart from being a quite senior software engineer with management experience, a specialisation in fintech and card networks, and a talent for reading hundreds of pages of standards and docs and being really pedantic about them - Iβm a jack of all trades, with a silly broad range of experiences, and enjoy novelty and variety.
Want a photographer? Bartender? VJ for your party? Help organising an event? Need to win an argument about Mastercard rules?
Something else entirely, where a background in tech, music and/or events might come in handy? Hit me up and Iβll see what I can do.
(Iβm happy to help out nonprofits, clubs and others doing good/interesting things, but who donβt have very deep pockets, for a more affordable price. I started out maintaining a WordPress site for my dadβs choir, and Iβm happy to do it for yours too.)
**Talk:** Building UIs for Everyone: Accessibility as a Frontend Responsibility
**Speaker:** Kushal Kumar Nerella
**Abstract:**
Kushal will share some of t
Curious about our progress on Thunderbird Pro? Our latest update, direct from Managing Director Ryan Sipes, keeps you in the know - and lets you know how to stay updated:
I find it interesting that you want to operate Thundermail in Germany. How will you ensure to comply with the GDPR, when both MZLA Technologies and Mozilla Foundation as US-based entities can both be forced via CLOUD Act to violate the GDPR?
great update, thank you! I didn't see any mentions about OS or platform availability though, did I miss them?
I'd love to hear details about how Android fits into these plans since many launches like this often tend to either exclude mobile platforms at launch or restrict the feature set. Is that the plan with Thundermail?
@perksofbeingben Hey there! Thundermail will work with all apps on all platforms, mobile and desktop. Send and Appointment will take a bit longer to come to mobile, as those are more desktop-oriented for now.
@perksofbeingben You're welcome! Whenever we get closer to this integration would be when we'd need beta testers, and we'll definitely put out a call on our blog and share it here!
Masking tape, the 1st adhesive tape, was invented in 1925 by 3M employee Richard Gurley Drew who noticed frustrated auto painters using butcherβs paper and glue to mask cars for painting then popular 2-tone paint jobs and stripes.
On my way to work there are a couple of train stations that have orange tiles with uranium glazing, no dangerous amounts but easily detectable with a geiger counter.
Hey, something that regularly bums me out is that #Lego continues to make Harry Potter products. Lego brings me a lot of comfort, but their complicity in JK Rowling's hate campaign sours that significantly.
As a trans person, it makes me feel kinda helpless and invisible.
So I'd appreciate it if y'all could help me boost this petition across the fediverse, and share it around with group chats, and other socials if you're on them!
Not necessarily because I expect Lego to listen to a change.org petition, but because it would give me a lot more hope and faith in people if the voices saying "Hey, it's really messed up that Lego is doing this" were a lot louder than they are now.
(Alt-text: a change.org petition called "LEGO: End your relationship with JK Rowling and the Harry Potter franchise.") chng.it/mgvbH5qw5h
The "Conversations" screen (which shows a list of open chats) has always been the main screen of #Conversations_im, following the behavior of Signal, WhatsApp, and Google's Messages (SMS) app. However, after sign-up, users were taken to the "New Chat" screen (which lists all contacts and group chats) on the premise that they have no chats yet and would likely want to start one. This may have confused first-time users about which screen is the main one.
βActivists who disrupt the flow of weapons to a genocidal regime may violate petty criminal statutes, but they uphold a far greater law and a more profound human imperative: to protect a people and culture from annihilation,β she wrote. aljazeera.com/news/2025/8/18/uβ¦
Plasticine Action is a group of like-minded artists and concerned citizens, who want to be vocal against the rise in AI generated animation and art, and raise awareness of how AI is being used in an increasingly authoritarian manner.
@srtcd424 yeah, when I was at high school (2000-2004), we programmed a screen that was identical to the Novell Netware login screen that was used to authenticate on school computers. It loaded first, the user typed in their credentials, it gave them an error message "try again" and then it loaded the genuine login screen. That's how we got credentials of most users at the school. Not sure if I should be proud or ashamed of it, but it definitely boosted confidence in our IT skills. π
Shouldn't it be a Crown inquiry into the #wagetheft and #exploitation of Canadians in the industry?
If the government is truly aware of the allegations, then they know the allegations go back AT LEAST as far as the Harper government... that means it spans decades... let's hear from every single one of them.
Finally in HQ! Since all the versions of "They're Taking The Hobbits To Isengard" here on Youtube are all rips from my medium quality original from my websit...
Perplexity is now crying because their plagiarism machine cannot bypass Cloudflare's firewall. How about you start paying for stealing others' content to train your shity AI?
There is no Legitimate LLM or AI if takes all content without permission and these companies sell their services for money. It is stealing. Plain and simple.
Inclusive hiring isnβt just good practice - itβs essential.
Our latest blog post, written by Senior Project Manager Felicity Miners-Jones, shares practical steps for making recruitment truly accessible.
From clear job ads to barrier-free recruitment platforms, these steps help keep the process fair, expand your talent pool, and show a genuine commitment to inclusion: tetralogical.com/blog/2025/08/β¦
Accessible recruitment is more than a policy - itβs a way to ensure that every candidate can perform at their best, and each role is filled by the person most capable of doing it.
### Summary
A malicious WebSocket server can send a fragmented message (FIN=0) followed by a flood of continuation frames, causing the client (curl) to continuously allocate memory while waiting...
@bortzmeyer yes, but there are multiple signs of AI in there including the fact that the report is bogus, plus the detail that the person doesn't deny using AI and simply pretend I didn't ask...
Could have been an honest mistake, but don't you double or even triple check that the memory usage actually increases and additionally check which versions are affected?
I haven't seen an AI take a screenshot of their terminal yet. And Kali on WSL does seem like something an overambitious script kiddy would use. On the other hand, the user definetly types like an LLM, and not answering the direct question is hella suspicious π€
Maybe it's a kid who's just asking ChatGPT what to do and say?
does the form require the Mitigation Recommendations and Impact sections, and does itbsuggest 3 bullet points for each? If not, then definitely slop, whether human or AI.
Also, the mitigation recommendations seem very generic and don't demonstrate a beyond-surface-level understanding of the usecase.
like, why do websockets allow fragmentation? Possibly to allow processing messages of unbounded size in a streaming fashion, while allocating only enough memory to hold one fragment.
Which I'm guessing is what curl is already doing.
But the fix suggestions don't mention that possibility.
oh... does an implementation have to support all frame sizes? If so, then to not have a single-frame exhaustion vuln, you'd need to process parts of a single frame in a streaming fashion. It sounds quite difficult to have that work, and then somehow not be able to stream multiple frames in the same way...
@wolf480pl it's super annoying and libcurl's API for websockets thus has a way to pass on partial frames just so that it can do it streaming without using a lot of memory or do some kind of buffering etc. Fragments of frames that are part of messages...
Eh, I voted not slop purely because years ago I almost reported a memory leak against a project but it turned out that GDB was leaking. This *could* be an honest mistake. Basically, I want to believe.
I think Iβd want to know how the false positive occurred. βDoesnβt occur on latest masterβ could imply that it did occur on some other recent version, which seems useful to know about. The only other obvious explanation of course is that itβs slop and they didnβt actually try running it themselves, which seems vastly more likely.
@benjamineskola well, I tried the same version he says he used and it did not reproduce for me on that version - since I also know the code I was actually questioning the report already from the beginning but was open for me missing some mistake of ours
I just can't fathom how you deal with all the slop. I've been following your ongoing battle for a while and, to be honest, I would have given up by now. Thanks for persevering.
I'm surprised they came back and recanted the report. seems really a daft thing to do to submit a serious bug like that without actually using thier own brains. why do they do it??
I voted βnot slopβ for the benefit of doubt. At least that report was reasonably concise.
Maybe you could require security issue reporters to provide a minimal Dockerfile demonstrating the issue and a screenshot of the output highlighting the failure? (and require output lines to be timestamped in that screenshot)
first thing which weirded me out - long and detailed, from the looks, text. But no mentions of the specific environment (including the version of curl) "used" to "reproduce". Which should be one of the most important details, I suppose.
the report mentioned the --include option but that was renamed (deprecated) in curl 8.10 according to the manual. Outdated information always screams LLM. That was very sus. I would assume someone would read the docs before writing such a report.
Pretty confident an LLM was at least used to create the text. However I think this is a rare case of the user actually bothering to trim the output down so itβs readable.
If the problem were real that would be it, but you mentioned even the version they cited in the comment doesnβt exhibit the problem. For that reason I have to lean toward slop.
β‘οΈ Jsem namoΔenΓ½ v pΓ‘r projektech a dva se seΕ‘ly do rozhovoru s mojΓ maliΔkosti. O AI, jak jinak. Tak si to pΕeΔtΔte ve V zrcadle AI: S Danielem DoΔekalem o tom, ΕΎe AI je jen jinΓ½ Google, kterΓ½ vypadΓ‘ sofistikovanΔji.
I really struggle with the way these videos are done, the speech patterns feel really odd. is there a name for that? They sort of ... play in the next segment almost before the previous one has finished? Am I making any sort of sense?
@cachondo I call it the old school Andrew Huang effect. He doesn't do it nearly as much these days, but for me, he was the one that did it the most back in the day and I utterly loathe it.
@cachondo I know some youngsters have short attention spans, but that's no excuse: I don't think I'll ever get used to little bits of speech being edited together like that;
@frog67 @cachondo Some podcast apps have features to remove silence between sentences automatically. We probably should start advocating for something opposite, insert natural pauses between sentences.
@Scott @jakobrosin @frog67 @cachondo @BorrisInABox Just wanted to join in and tell you all how I hate such videos! Just can't stand them. It's not ASMR of course (which is absolute nightmare for me), but quite close.
@menelion @Scott @jakobrosin @frog67 @cachondo @BorrisInABox I get it. I definitely get it. That's why my silly demo was tongue-in-cheek and pointless. It's actually physically uncomfortable for me to listen to that kind of thing for too long. Makes me feel like I can't breathe. It's weird.
@Scott @jakobrosin @frog67 @cachondo @BorrisInABox That was much too nice. You did not bombard us with enough words per second! And you call yourself a Youtuber? Ugh.
No, you only let sharp cuts happen when you're about to go into a stupid joke that has been rehashed 1,246,744 times on your channel, and everyone is expected to know what it is. Either that, or just pause for 10 seconds and play the sound of a cricket.
@cachondo Yeah it just sounds like bad editing but it's done deliberate. I really wonder why. Does the waveform look prettier on the timeline for some reason?
As the leading provider of accessibility training, Digital Access Training is proud to offer on-demand courses that make it easy for you to learn at your own time and convenience.
Trochu mi tu pΕekΓ‘ΕΎel kousek boku a byl akorΓ‘t Δas ho zpracovat. V jΓ‘dru mΓ‘ krΓ‘snΓ½ch 92 stupΕΕ― a pod sebou dubovΓ½ hobliny... To tooterΓ½ prostΔ nemΕ―ΕΎe dopadnout Ε‘patnΔ! π€€ A vy se taky neodbΓ½vejte, bando. #dobrouchut !
i have seen a few people arguing for xslt recently; weird proposition! - libs have a cost (browser download size, update work, integration, security risk) - xslt 1.0 is not good. okmij.org/ftp/papers/SXSLT-tal⦠- nobody uses it. (or rather, 0.001% of page-loads use it.) - regardless of your pov on xml, xml web documents are entirely a lost cause; the web is html, and html is not xml. - there are so many better alternatives! even a simple page with a script tag can do a better job!
The specific use case I've seen people arguing for is using XSLT to transform an RSS or Atom feed into HTML. For that, a page with a script isn't an option. And the argument seems to be framed as Google not caring about a thing that's important to some in the indie web community, namely RSS. It doesn't help that Google killed off Reader.
Mark Shane Hayden
in reply to feld • • •It's gonna take awhile for me to get used to seeing so many grocery prices in the US being consistently higher than they are here in Canada.
Like...AVOCADOS FFS they travel PAST 'Murica to get here and they're still a bit cheaper here?
feld
in reply to Mark Shane Hayden • • •