The EU Regulation to Prevent and Combat Child Sexual Abuse, first published in May 2022, has become the "most criticized law of all time". Here's how to stop it now!
in the 5 minutes i gave to your call i couldn't find how to help. I looked into the YouTube video (I don't like to be directed to big tech media) but that didn't look like instructions how to take action. What did I miss?
This is not even "450m Europeans." This is basically "the world." When encryption is broken on that side and uploaded to their servers it means people on the other side also have no encryption and their data is just as compromised. Not to mention that if even the one part of the world that tended to get privacy right has become a surveillance state, then there's a pretty much 100% chance other countries outside the EU will fall in line...
From every security hole, no matter how well meant, the criminals will profit most. What is next? Should i leave my backdoor unlocked so that the police can enter more easily when there is a burglar in my home? No, the burglars will profit most of the open door.
I have always considered myself an European but EU is becoming an instrument of mass control. Chat control now and wait for the digital euro from European central bank. And this is going to be probably extended to emails, cloud... We need to find alternatives out of US and out of EU.
stuff like this just makes the people they claim to be aiming for dig further down. It won’t stop them. It will make things unsafe for everyone else, as back doors can be exploited.
Honestly, I think the importance of this is overrated. In country where I voted for EU representatives (Latvia) police can do anything they want anyway. It's not always court-admissible, but that's not really important either, because they can do anything they want with or without courts. Only laws of physics there. Besides, it's such an outdated technology.
Same procedure as last year? Same procedure as every year,. James!
In case "#chatcontrol" will, when in place, help to suppress opposition or critics in case ever forces like AfD or other anti-democratic folks come to power.
Friday's episode of the podcast I do with my wife was a really fun one. Bit of a nostalgia trip, talking about things we collected as kids like Tamagotchis, Furbies and so on. If you haven't checked us out yet, please do. Might be something you enjoy. 51 episodes in and my wife and I talk about all sorts, never political, no sponsors, no ads, hopefully very little wasted time. If you've a mind, please pass it along as well, never know who's out there, who might be looking for something brand new to listen to. onj.me/stroongecast #StroongeCast
For the third time in as many months, some agency is offering me a .com version of the domain I use for personal email because it might "be relevant for my personal or business use". If I'd wanted the .com, I'd have bought it when I got the .me nearly 12 years ago. Domain tarting shouldn't be a thing.
Daughter's gone off to school most cheerful and isn't back until tomorrow for it is sleeping over at a friend's home. I suspect my evening will end yet again with massaging some sort of cream or oil into some part of the wife's body, as she's really feeling the aches and pains at this stage in the pregnancy. Not exactly fun or unusual, but we're plodding on.
Busy day at work and a bit extra afterward, but I should be done by 6 or 6:30 tonight.
Is anyone else noticing the AI music popping up on Spotify and other streaming platforms? I’ll be fucking pissed if my very personal lyrics are stolen from Suno and uploaded without my permission. I’d put them up under my own name, but I have my own album on Spotify, so I can’t do that. And, technically, only the lyrics are mine. The instrumentation and melodies are not always mine. Some of them are, some of them aren’t.
@tardis I don’t mind it so much for commercials and background music. But I write some really deeply personal shit in my lyrics. Unless I’m writing songs about Rosie the HOsie. That was just for funsies.
This lays the groundwork for OMEMO support! Convo will
now automatically generate OMEMO keys when you connect
for the first time.
Options to toggle OMEMO encryption, etc.
Does curl have any measures to reduce the bus factor? Should meetups of curl maintainers even be allowed or is too much at stake if anything happens at the venue?
I get this question fairly often. How would the projects I run manage if I took off? And really, the primary project people think of then is of course curl.
Most commands have an `-O, --output` option to format the output. By default, the output is pretty formatted for humans, but you can output in JSON, XML, or other formats.
With `template` output you can use Jinja templates, either built-in ones (the ones used in the web frontend), or your own; useful to build static HTML pages/sites, or reformat the data the way you want.
Finally, tonight I got the notification that Meta AI is available for my glasses. It feels like I just gained a new pair of glasses with fancy new features, although the glasses are the same. Anyways, I will be wearing them a lot more now I suppose.
Na priči sedím, sedím a sedím. Štipľavú machorku z fajočky kädím. Do okna hľadím, dymím a dymím, aby som nevidel v duši, čo vidím.
V ďaleku pri ohni vojaci sedia. Štipľavú machorku z fajočiek kädia. Všetci sú červení, všetci sú mladí, všetci sú veselí, všetci sú radi: všetci už nakukli z tej strany hája do našich dediniek, do nášho kraja…
Prečo ja na priči sedím a sedím, do okna hľadím, z fajočky kädím?
Petrohrad 26. X. 1917 Janko Jesenský - Zo, zajatia. Zbierka.
myslíš si že ja som niečo vedel? Zo zajatia si musím ešte niečo prečítať... teraz čítam Verše - III. Verše sentimentálne a snažím sa hladať sentiment. I. Piesne (krásne naozaj) a II. Pohľadnice som už prečítal skoro celé.
I don’t know why I am recently having thoughts along the lines of “what will happen to our iPhones, Pixels, Mac/Windows computers 20 or 30 years from now?”, or “What would happen if native-instruments, iLok licensing, Github, etc, servers stopped working one day? :) Least worried about Github though… :)
For NI, nothing much unless you moved computers and needed to reauthenticate. I don't think they phone home after registration though I could of course be wrong.
@kepi @The_ERROR U mě je blbé, že musím používat jednu německou aplikaci v práci. Do ní musím zapisovat všechno a třeba do Commerzbank se bez aplikace photoTan nedostanu. Musím být rád, že mi zatím všechno funguje na GrapheneOS. Dva telefony jsem chvíli zkoušel, ale nakonec jsem raději nainstaloval na GrapheneOS Google Play.
the Hunt brothers tried to corner the silver market and managed to acquire a third of it but when they couldn't get loans anymore and the exchange halted silver futures contracts it's not like they could just sit on their silver and only sell what they needed to cover their loan repayments. They couldn't sell it fast enough obviously and they weren't going to stop mining it. So it all spiraled and crashed.
TLDR They'll mine silver faster than you can buy it, it's not that scarce
Oooooh I meant it's for trapping Mormons because they're so attracted to silver haha I see the confusion, and no it's not a common phrase or anything. I know @barrett likes silver too and he's in Mormon country. I bet he has some inside knowledge of their plans for all this silver 😂
@feld Interesting story but nothing new really in the world of money con men, I mean Wall Street. I'm missing the Morman trap reference though. What's that?
The city of Montreal has given its employees a rulebook for dealing with English-speaking citizens, with step-by-step instructions that spell out when, and how, service in English is allowed.
The city of Montreal has given its employees a rulebook for dealing with English-speaking citizens, with step-by-step instructions that spell out when, and how, service in English is allowed.
Thinking about the attack on certain popular npm packages that made news today, it occurs to me that my favorite language's package manager (Rust's Cargo) is far too much like npm for comfort. Proponents and creators of languages with no standard language package manager (especially C and the various C alternatives other than Rust) are posting their takes.
But I still like Rust and don't want to give it up; C and the other C alternatives don't have nearly as good a story when it comes to memory safety. So that leaves me with no good answer to the kind of problem that has been brought to light (again) by today's attack, except, I guess, to just be more selective about what dependencies we add, and be a little more willing to write straightforward though possibly tedious code ourselves rather than adding a dependency that could become a liability.
My current thought is that while the cargo package manager per se wasn't a mistake, the central crates.io registry might have been. Maybe we should normalize pulling packages directly from git, and especially from the package owner's own domain rather than a centralized host like GitHub. So packages owned by the Rust project (e.g. hashbrown and libc) would come from git.rust-lang.org, tokio packages from git.tokio.rs, Windows API bindings from git.microsoft.com, etc.
I don't think that particularly changes the outcomes, at least as soon as you have signed package infrastructure. github.com/rust-lang/rfcs/pull… and it instead just makes any signing efforts harder to deploy.
This RFC was co-authored by Walter Pearce (@walterhpearce) and Josh Triplett (@joshtriplett).
Here, we propose the alternative adoption and implementation of The Update Framework for providing the ...
That's essentially how Go's package management started. Module names are essentially URLs of a git repo, or of a website that has some special metadata pointing at the repo.
It had a few problems:
1. If a popular project with frequent CI builds used you as a dependency, your code host will get hammered. 2. You might not be able to rebuild your project if the hosting for a dependency is offline. 3. You might not be able to transfer ownership of a module without also changing its name (e.g. if it was published in the Github personal namespace of the original author).
The first two problems were solved by introducing a module proxy run by Google. Instead of hitting the upstream directly, you download a zip file of the module source from the proxy. That version is only retrieved from upstream once, and can persist even if the code host goes away.
@jamesh I don't like the Google proxy solution because it depends on big tech's largess, as does crates.io. I think the Zig Software Foundation has the right idea here, limiting their hosting responsibility to their own releases and delegating even that to mirrors as much as possible. ziglang.org/news/migrate-to-se… I just wish I liked Zig's approach to memory safety more, but Rust has spoiled me there.
You can set an environment variable to have the toolchain bypass the module proxy and clone things from git directly. You then run into the reliability problems in CI, where each job usually starts with none of the dependencies available.
You can also also point the toolchain at a different module proxy, and there are a few open source implementations (e.g. Athens). Frustratingly you can't run the same proxy as Google, since they built it on top of internal infrastructure and haven't released the source.
this would make everything worse. Without a central authority to filter malware, users would search the open web for random packages with zero possibility for community-wide mitigation. Every lapsed developer vanity domain, every failed startup, would immediately result in mass compromise.
If there is a problem with crates/npm/pypi, it’s that the abstraction of a “package” obscures the trust relationship with the org that produced it. It’s too hard to audit those relationships.
@glyph But what if we add TOFU POP MONK (blog.glyph.im/2011/04/calling-…)? OK, I'm a bit of a Glyph fanboy, but I remembered the acronym even without the memable images or videos.
this article was very much of its time, predating Let’s Encrypt, and somewhat failed to appreciate the operational difficulties of running a certificate authority;)
@glyph In the specific context of package management without a centralized registry though, maybe TOFU POP MONK could still work. The POP part, if I understood it correctly, would defend against the domain squatting risk you raised.
the big problem with a system like this is, for lack of a better term, the password reset problem. People, even people in big serious corporate environments, lose their credential material all the time. They have to be able to recover somehow. The MONK bit might provide some way to do this with social proof, but my back-of-the-napkin sketch level of design can’t realistically cope with that constraint.
yeah they can criticize all that want but the alternative seems to be "walled garden" and "just download the package from it's own website". Whereas technically the same bullshit could happen to the Arch repos but only AUR has ever been effectively poisoned afaik
If you've been planning on registering any domain names September 11th is coming up soon and I promise if you register then you'll never forget to renew it
I anticpate retirement to be semi-employment, with some steady clients. Maintaining their systems, patching, upgrading etc. I see myself on retainer, and working on stuff as it comes up. Should be fun.
Is it ok for people on the ActivityPub network to speak negatively about other distributed social networks?
#EvanPoll #poll
[ ] Yes
[ ] Yes, but...
[ ] No, but...
[ ] No
@feld @SlicerDicer I don't know if you've been in a grow room (doo dee do) but they're hot (and humid). If you're not in a place where it's legal to grow, IR is Often used (from the air) to find homes with Super Hot Spots.
The fun part Slicer is that it would seem they're STUPID easy to steal. (?!?)
Aside: When I was in Uni, every year they'd put sodium bulbs in the lamp posts over three or four bridges, and about two weeks after the quarter started, they would all disappear. A-MA-Zing.
On this day in 1966, Star Trek first beamed into living rooms across America. None of us could have imagined then the journey it would set us on. And not just the cast and crew, but the millions of fans who would find hope, inspiration, and community in its vision of the future.
Over the decades, I’ve been humbled and grateful for the love you’ve shown, not only to me, but to the ideals of Star Trek itself: diversity, unity, and the belief that together, humanity can boldly go where none have gone before. Thank you for your unwavering support and for keeping this dream alive all these years. Live long and prosper, always.
The French government fall was caused by a horseshoe vote: The left and the extreme-right voted against confidence. The left because they are the biggest parliamentary group, the extreme-right because the PM wasn't fascist enough (this include some "Republicans").
* Network Switch: enables you to toggle between 4G and 5G network modes 🛡️ * Screenlite Web Kiosk: a simple Android kiosk browser app that displays web content in full-screen mode 🛡️
This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
BUT: can we remove the default prefix "Copy of" or make it user configurable, please.
#dobréRáno
Danie
in reply to Tuta • • •I looked into the YouTube video (I don't like to be directed to big tech media) but that didn't look like instructions how to take action.
What did I miss?
Nazo
in reply to Tuta • • •This is not even "450m Europeans." This is basically "the world." When encryption is broken on that side and uploaded to their servers it means people on the other side also have no encryption and their data is just as compromised. Not to mention that if even the one part of the world that tended to get privacy right has become a surveillance state, then there's a pretty much 100% chance other countries outside the EU will fall in line...
This affects the whole world.
Pol
in reply to Tuta • • •canleaf08 ⌘ ✅
in reply to Tuta • • •Sanjay Naker UK
in reply to Tuta • • •Quantum
in reply to Tuta • • •Jessie Kirk • 🏳️⚧️ 🇪🇺 • 🇺🇦 🇵🇸
in reply to Tuta • • •Yet another Josh
in reply to Tuta • • •We'll keep seeing this garbage submitted every few years, again and again.
We see similar in the USA as well.
The real answer is that we need to develop overlays on ALL our chats that introduce steganography. Hide our real discussions in plain sight.
Its only time till they get this garbage passed in some form. So might as well assume they'll see it all, and shift the fight to a different level.
DigitalDigger
in reply to Tuta • • •Carolyn
in reply to Tuta • • •Matija Šuklje
in reply to Tuta • • •, wait a minute, when did #Slovenia change from opposing to undecided?
Do we need to push (again)?
Tuta
in reply to Matija Šuklje • • •Matija Šuklje
in reply to Tuta • • •Matija Šuklje
in reply to Tuta • • •CosmicCactus
in reply to Tuta • • •Besides, it's such an outdated technology.
Ben
in reply to Tuta • • •Tuta
in reply to Ben • • •steppl
in reply to Tuta • • •Same procedure as last year?
Same procedure as every year,. James!
In case "#chatcontrol" will, when in place, help to suppress opposition or critics in case ever forces like AfD or other anti-democratic folks come to power.
vandorb12
in reply to Tuta • • •