Es ist es an der Zeit zu prüfen, ob ein die Privatsphäre respektierendes Betriebssystem wie Linux nicht besser zu Ihren Bedürfnissen passt. Linux enthält keine eingebaute Spyware, Linux-Distributionen machen keine Screenshots ohne Zustimmung und Linux verwendet offenen Quellcode, den jeder überprüfen kann.
Sogar Microsoft verwendet Linux - wer hätte das gedacht! 😎
"Between approximately 00:34 and 01:48 (Beijing Time, UTC+8) on August 20, 2025, the Great Firewall of China (GFW) exhibited anomalous behavior by unconditionally injecting forged TCP `RST+ACK` packets to disrupt all connections on TCP port 443"
I don't see it in our logs but then again, we're blocked in China aside from the Military & "elites".
The Great Firewall of China (GFW) conducted a large-scale, unconditional block targeting TCP port 443 on August 20, 2025. This report documents the measurements and analysis we conducted of that event.
Do the military and elites have their own, less-restrictive version of the GFW, or are they just allowed to use a VPN / more proficient with using one?
PSA for anyone else who uses Thunderbird with the Owl add-on to access Exchange or Microsoft 365: If you restart Thunderbird and find that your Exchange account is suddenly gone, it's probably because you were auto-updated to Thunderbird 142. The Owl update that supports Thunderbird 142 is still in review, but in the meantime you can download it directly from the developer here: beonex.com/owl/owl.xpi
You have not experienced a proper embedded Linux system until you've booted a board with a serial connection to your PC for debugging. Better still if the board has an open boot-loader (e.g. u-boot), not the Raspberry Pi closed boot firmware.
I recently bought such a board, which also has a USB serial interface that works with no hassle even on a Windows PC. It's the eval kit for this SoM. Not cheap; maybe I can justify it with a proper project someday. variscite.com/product/system-o…
Variscite VAR-SOM-MX8M-MINI System on Module / Computer on Module based on NXP’s i.MX 8M Mini with up to 1.8GHz Quad-core ARM Cortex-A53 plus 400MHz Cortex-M4 real-time CPU. Contact us.
I'm hoping the boot process for the imx8m SoC is well-documented enough that it would be practical to boot into Redox OS with a Rust boot loader. Rust all the way down the stack.
But for now, I have real work I have to get back to.
Hello Matt, ARM SoC support for Redox OS can improve quickly. U-boot supports UEFI emulation which allows the Redox OS bootloader to run. Our bootloader, kernel, and drivers support some common devicetree devices. I'd love to work on a common ARM device we could all get cheaply and work together on.
@soller I've been looking at various ARM boards, and for now I've settled on the RK3588 SoC because Collabora has been doing a lot of work on getting support for that chip's various features into mainline Linux and u-boot. I just recently bought a Radxa Rock 5B board. I don't yet know how to connect to a serial port on that board for debugging though, or if there's a way to do so with that board.
I'm also now convinced that the very idea of a computer having visual UI in its boot firmware is a relic of a bygone era when computers were scarce. The proper way to customize and debug the boot process of a computer is with another computer.
I believe that my XGS-PON with APC connector fiber transceiver with MAC functions to SFP+ converters are true embedded Linux systems. They certainly run Linux with a Busybox shell, use UBI filesystems, have an A/B flash architecture, provide full serial console access from boot via pins on the SFP+ connector, and they have a 400 MHZ MIPS processor with 512MB of RAM. They're pretty shweet tiny little systems that allow me to spoof my fiber modem to my ISP, so to them it looks like their modem, with all appropriate identifiers, and to me, its a device that I fully control, and the ISP can't reboot it for firmware updates whenever they like, and it acts as a bridge, rather than a routing device, so they can't see my internal network. They just see the single WAN connection of my router.
@adam Nice. Yeah, that qualifies. Didn't mean to gatekeep, was just expressing excitement at watching a system boot over a serial interface for the first time.
I didn't interpret as gatekeeping. I was excited to hear of your embedded Linux adventure, and was excited to share my experiences. Perhaps I shouldn't have suggested if it qualifies or not.
To clarify, I didn't mean to gatekeep; I was mostly just excited at watching a boot sequence starting from u-boot SPL over a serial interface for the first time. Yeah, I know, it's nothing new, but somewhat to my embarrassment, it was new to me.
Interestingly, though the eval board itself is powered by a 12V DC adapter and not USB power, the USB serial interface is powered by the host; the device remains present on the host PC even if I cut board power.
Now I just need to get sighted help to locate the boot selector switch so I can have the proper fearless tinkering experience on this board by booting from microSD rather than eMMC (which is currently pre-loaded with the vendor's Yocto demo image).
The other thing I noticed while playing with the Yocto image last night is that when I play audio through headphones, it's lacking bass. I couldn' find the proper ALSA mixer control to fix that, if there is one. I hope it's some kind of configuration issue and not inherent to the hardware, or that if it _is_ a hardware issue, it's an issue with the carrier board and not the SoM. Whatever project I ultimately do with this board will definitely involve audio.
On the bright side, the built-in DAC is capable of a healthy volume with minimal hiss and no other noise that I've heard so far. True to the advertising for the WM8904 DAC that this SoM is using, there's no clicking when powering the DAC up and down.
"Fittingly, the 1,350-person Translation Bureau is leading the way in the federal government in experimenting with AI. It is developing the first project under Ottawa’s AI strategy meant to serve as a showpiece for what government can do with technology: a self-serve automated #translation tool for civil servants.
If the government is serious, the Bureau should set itself on a mission to all but put itself out of business, and to drastically cut the amount Ottawa spends on its services to fulfill its Official Languages Act obligations. If the translation profession is largely disappearing, so too should government spending and employment in the area, showing that AI could deliver meaningful cost savings and operating efficiencies."
I'd rather see a self-serve tax filing system, instead of a "must pay oligarchs a fee and give them all your confidential and sensitive data to do mandatory filings with the Government"
I guess the priorities are NOT Canadian.
I would hope the OQLF would object, but then I'm a dreamer here.
@hub The OQLF can’t do anything about it. It’s a provincial organization. It has no business getting involved in how Ottawa runs the federal government.
@bougiewonderland but if a menu has the wrong font size, yeah they unleash the wrath.
I would expect that they would have jurisdiction in objecting about the way the federal Govt want to communicate in French with the Province of Québec.
As I said, I'm a dreamer. I dreamer of a world that is functional.
But again I don't hope. The moron in charge here probably has been advised to not miss out on the opportunity to get rid of workers for some AI garbage is was bribed about.
#NextCloud really drove me angry. They simply choose to ignore accessibility concerns in favor of so-called "security". It's absolutely none of their business to protect users from viruses and trojans, and saying that "We can't allow one-press copy public link because a script can call this API" is total BS, because in this case any attacker script has access to every file on that PC! Great job, NextCloud, great job. Whenever someone tells me once more about "giving up big corporations", I'll point them to this issue. And yes, I really hope someone sues them because their #desktop client is a total accessibility nightmare. github.com/nextcloud/desktop/i… #OpenSource #Accessibility
Hi, The public share link has been removed with the 3.15 client version. Could it be possible to bring back this feature ? Below, a screen from a right click on a folder/file with the 3.14.3 client...
Пиздец ебалаи. По такой их логике можно вообще зарубить всё что угодно. Но понятно что это просто ответ на отъебись. Молодцы, желаю им всяческих провалов в бизнесе.
@Yinshi ага. Ну типа вот ссылка, там секьюрити рекомендация, это же кто угодно может скриптом запросить апишку! Блядь, а ничего что кто угодно в этом случае может ко всем, сука, файлам доступиться?
Почитал комменты, посмотрел репо. Это ещё и клиент на Qt для полного счастья. Вопросы про accessibility отпали сами собой, можно примерно представить что там происходит и каково этим пользоваться, причём всем без исключения юзерам.
This is one of many examples of why I use a specific 2.x version for all clients and refuse to update. They’re creating security problems by breaking the client in different creative ways every update.
Mind you, I have zero complaints about the server and web sides. It’s **just** the desktop client which is regressive and broken.
@ClickyMcTicker Would Indiegogo/Kickstarter/*insert sponsorship feature of version-control system here* be in the realm of possibility? Figure there would be quite a bit of contributions, even among non-AT users who simply want what could no doubt be a significantly more resource-efficient client.
@jackf723 @ClickyMcTicker Yes, I'm thinking about it, however it's a little bit scary, I've never done that before. Will need to assess costs and probably go for it, yes.
You probably know about threads and most likely header of pthreads, but have you ever used pthread_cancel()? Well, I had not before last week and it was a little bit of a journey.
End-to-end encryption (E2EE) is important. However, on self-hosted or otherwise trusted servers, the client-to-server transport layer presents a much larger attack surface. It’s the first hurdle an adversary must overcome before they can attack E2EE.
That’s why #Conversations_im includes advanced MITM detection called Channel Binding. Turn it on today!
It’s optional for now because not all servers support it. Talk to your admins.
Neither @matrix nor @delta offer comparable protection.
@blindcoder Running Prosody 0.13.1, when enabling that feature Conversations can no longer connect. Maybe a module needs to be enabled first or something!?
Let's consider how deltachat, in its default mode of operations, works.
What is the purpose of Channel Binding ? It seems to me to be mitm-resistance, but considering that in deltachat, contrary to Conversations, the user doesn't even know their password I don't see how they're going to be phished on a scam website. The only way to connect from another client is starting from an already legit one that will consciously share credentials. The app, like conversations, doesn't make typos when calling the server, so if mitm didn't happen through mistyping the address it happens behind TLS, so it's the same for Conversations.
What happens in the case of a mitm ? In deltachat chats are not mitm-able: the only thing a mitm box will see is gpg-encrypted emails. Recall that in its default setting email addresses are pseudonymous (i.e they have no human meaning and it is expected that one person will use many addresses) so what a mitm will see is that some random address sent some other random address something, and the date. The real mitm that can have an impact is one that can intercept the qr code, or the link it contains, out of band. Nothing can be intercepted in-band. Note that this is true even in the non-default way of using deltachat, with your own account on another server, as long as you use deltachat. In Conversations, because the server is important, they will be able to do everything the user can do: see/set presence, change omemo keys, publish/subscribe, read and send unencrypted stanzas. The only thing they won't be able to do is to read the content of encrypted content, but they will still see who sent it in which room.
Deltachat massively downgraded the importance of server to the point they are just relays of content. It is parting ways with the 80's and 90's era of a server capable of doing everything and clients only ordering them to; xmpp hasn't. The result of a mitm is catastrophic in that mindset, but for a more p2p app it's more of an inconvenience.
So, no, deltachat doesn't implement channel binding, but contrary to others including Conversations deltachat actually doesn't need to. So that's ok.
It's a bit disingenuous to talk down on other libre and decentralized messengers, especially when xmpp in its current design and deployment is arguably worse on the security aspect, not talking about the metadata aspect that the xmpp world still hasn't heard of somehow. They are not the enemy, Whatsapp and Messenger are. (note: this is also valid for delta fans)
(I might have made some mistakes, feel free to tell me) @matrix @delta
@rakoo they can still collect the messages tho, then seize your device and with the private key they can then decrypt all messages, even with this new feature of XMPP this is still true if the VPS provider gives access to the server to your enemy, the more secure way out of this attack vector is forward secrecy, with what @daniel announced you should avoid the problem if the VPS is out of the jurisdiction of your enemy tho
oh there are many ways that attackers can do what they want, but that's an endless discussion. What I'm looking at is the claim that one is better than the other: if we look at the threat models, and the consequences inside that threat model, it's not necessarily true and as a larger point it is not useful to talk down at each other when we should be collaborating more and learning from the experiences of the others as well.
I am not too deep in the topic, but aren't most sites with proper certificates safe against MITM? is this announcement about self-hosted servers with self-signed certificates or is it MITM-ing such an easy thing to do by anyone providing you a wifi? ex. can then the same happen to any website the victim opens inside such a compromised network?
I've got two XMPP accounts, one at Conversations the other on another server. If I activate it, do you know it it will just be ignored or "break" something when it comes to the other server.
PS. Thanks for a great app! Been using XMPP since early Jabber days, Conversations is my favourite client for it.
is this already available on @snikket_im ? I guess so, given #snikket uses #prosody under the hood, but I'd love to know whether something needs to be done manually on the server side.
@daniel: Thanks for your work! Several days ago, I have added this link at the top of SCRAM SASL State of Play Informations: github.com/scram-sasl/info/iss…. Safety is priceless.
Welcome, this page informs you about the security, all SCRAM variants and Channel Binding (-PLUS variants) too. Like I inform all the World since a long time: SCRAM and Channel Binding are here for...
Dnes jsme šli na prochajdu kolem jezera Medard. V roce 2000 zde byla ukončena těžba hnědého uhlí. Byla to jen černá díra u Sokolova. Je to největším uměle vytvořené jezero u nás.
"Probably the only person in the whole of Sweden whose code is used by all people in the world using a computer / smartphone / ATM / etc ... every day. His contribution to the world is so large that it is impossible to understand the breadth.
Provided to YouTube by The Orchard EnterprisesEn Droppe Citron · TorssonEn Svensk Tiger℗ 1989 Rim och reson musikproduktionReleased on: 1989-03-30Producer: T...
At the moment, the AI chatbot never remembers me, so I can ask it the same questions over and over and enjoy its non-judgmental replies. The Online Safety Act, though well-intentioned, will change all that, writes Coco Khan
Canada privacy laws are so much weaker than Europe, and they say they could protect European data.
And I clearly see ZERO action taken by the Microsoft addict Government of Canada, that have been funnelling hundreds of millions to Microsoft tax shelter for decades.
Je note dans la presse de ce matin un article assez long sur le Bar'atteint et surtout son videur, au coin de de la rue de Wasselonne et de la rue de Molsheim. #DNA #Strasbourg À 4 h au Bar’atteint à Strasbourg avec Mahamat, par ici la sortie ! dna.fr/culture-loisirs/2025/08…
Two years ago I installed a UV sterilizer in my ductwork; since then the family has enjoyed basically one case of something non-COVID (we tested, so best we know it was really not covid) and zero cases of in-house transmission of anything.
If you have the means to add this to your environment, I strongly recommend it.
(I haven't used/tested them, so cannot vouch for them, but they're there.)
UV sterilization definitely works - medical settings use the hell out of it - and the tech (especially in that magical 222nm sweet spot) is getting more and more affordable and accessible all the time.
Nukit Lanterns are available worldwide*, with free Shipping and Handling. Continuous protection from airborne pathogens using eye and skin safe, 222nm Far-UVC Effective- Kills viruses, bacteria, and mold in the air and on surfaces within seconds.
One thing that I want to mention, true in 2023 and just as true in 2025: the number of corporations I’ve seen making a point to say that their HVAC systems have been upgraded, that they’ve been working to make collaboration safe in their spaces during this whole RTO push, has been zero. It has been exactly zero.
Compared to the cost of a single employee getting sick this shit is basically free. It is cheaper than toilet paper or soda. But somehow.
for decades there are been people trying to convince the Govt to stop funneling money to Microsoft for everything, which is basically direct into the US and instead use open source tech that Canadian (suppliers) could provide.
Instead they all gamed procurement to make sure these proprietary vendor could continue to bribe...
Správci hesel jsou také jen software. A zvlášť ti, kteří mají rozšíření do browseru nebo jsou dokonce celí nebo jejich klientská část implementovaní jako rozšíření, představují riziko. Jak velké ukazuje práce výzkumníka z ČR Marka Tótha, který na #DEFCON33 prezentoval díry v mnoha velmi používaných správcích hesel. #kybez
I described a new attack technique that I used against 11 password managers. The result was that stored data of tens of millions of users could be at risk.
> As an aside, I think we should seriously be considering moving off of GitHub, not committing ourselves more. The hosting is fine. The free CI is fine. Everything else is increasing problematic.
It seems a bit previous to open a ticket. That will only be closed pending a discussion here. Q: is there a list of PyPI Trusted Publishers available anywhere? As far as I can see, is it only GitHub? It’s not clear to me that it’s actually possible …
@captainepoch I've done that many times as well. Usually it then helps to apply the patch in a local branch and use diff and your regular editor to dig into it.
The git project itself for example still does this.
@icing @SimmerVigor It be very nice if there was some kind of reference server for connect UDP. Maybe a server that only enable UDP towards a small set of IP/UDP/port numbers, maybe each running a test QUIC site.
I would love testing my own implementation of CONNECT UDP with that.
@icing @SimmerVigor By the way, my own implementation is a bit more modest -- about 700 lines of code and 750 lines of test. But on the client side, I only support QUIC itself as the client, and I have not coded the "QUIC aware" part yet.
Adventurous summer trip to Kyrgyzstan, day 7: after passing the glacier we came to endless plateau, 3850 m in elevation. Nothing is here, just grass, muds, small lakes and creeks full of clear water. Not even one person. Just wolves, chamois and birds.
Dobrodružná letní cesta po Kyrgyzstánu, den 7.: po překonání ledovce jsme se dostali do oblasti nekonečných plání ve výšce 3850 m až kamsi k hřebenům na čínské hranici. Není tu nic, žádní lidé ani stopy po nich. Jen vlci, kamzíci a ptáci.
A hearty "fuck you and the horse you rode in on" to every grifting parasite who sold the idea to grieving parents that this might help one single person in any way.
Jim Acosta, the former CNN chief White House correspondent who now hosts an independent show on YouTube, has interviewed an AI-generated avatar of Parkland shooting victim Joaquin Oliver.
Is there a bubble of sewists that use vintage machines?
I've just restored my grandma's old Singer 66 from around 1935 back to function.
I learned sewing as a teenager, then did a bit of it in my early 20ies but mostly gave up after that - my machine was a very cheap one from a discounter and I couldn't really make it cooperate
With my old beauty I just love how meditative treadling is and I can see myself taking up #sewing again
While Premier François Legault hopes to give his government new momentum by reshuffling his cabinet, fewer than one in four Quebecers believe this game of musical chairs will have a real impact.
Google launches its first magnetic wireless charging accessories under the Pixelsnap brand; the Pixel 10 phones are compatible with Qi2 and MagSafe accessories (Andrew Liszewski/The Verge)
Google removes support for physical SIM cards on the Pixel 10 series in the US, relying solely on eSIM; Apple removed it with the iPhone 14 series in the US (Ben Schoon/9to5Google)
Google unveils $130 Pixel Buds 2A with a Tensor A1 chip, Gemini features, seven hours of battery life with ANC, and a replaceable battery, available October 9 (Victoria Song/The Verge)
Google unveils the $999 Pixel 10 Pro and $1,199 10 Pro XL, with 6.3" and 6.8" OLED displays, Tensor G5 chips, Zoned UFS storage, available on August 28 (Ben Schoon/9to5Google)
Google unveils the $799 Pixel 10, featuring a new Tensor G5 chip, 6.3" OLED display, Gorilla Glass Victus 2, and Qi2 support, available on August 28 (Ben Schoon/9to5Google)
)
StenPett / St Midium
in reply to Tuta • • •Aaron
in reply to Tuta • • •Goldmaster
in reply to Tuta • • •kali
in reply to Tuta • • •Due Pazzi In Caravan
in reply to Tuta • • •Arturo Serrano 🇨🇴🤖👽🧙🦄
in reply to Tuta • • •MutuallyPrecautionary
in reply to Tuta • • •Tuta
in reply to MutuallyPrecautionary • • •Stefan Hetzel
in reply to Tuta • • •Dominik
in reply to Tuta • • •Es ist es an der Zeit zu prüfen, ob ein die Privatsphäre respektierendes Betriebssystem wie Linux nicht besser zu Ihren Bedürfnissen passt. Linux enthält keine eingebaute Spyware, Linux-Distributionen machen keine Screenshots ohne Zustimmung und Linux verwendet offenen Quellcode, den jeder überprüfen kann.
Sogar Microsoft verwendet Linux - wer hätte das gedacht! 😎