@avlcharlie@mastodon.social well, Arduino has spawned a great ecosystem that can easily survive without the founder. It has always been distributed and decentralized. If Qualcomm decides to invest more in open source DIY hardware, they're welcome.
If you have considered applying for GNOME Foundation membership but were discouraged by our asking for a “full name,” we have news: we’ve updated our process and docs to clarify we don’t require members to submit a “legal name.”
As a diverse and global community, we know that the concept of names is far more complex than many realize. What’s important is that your Foundation membership reflects who you are and how people will recognize you in our community—that’s it.
Behind the scenes this required consulting with multiple lawyers specializing in US nonprofits and then updating our own documentation to clarify the requirements. The updated docs are:
If you notice anywhere else documentation could be clarified, please let us know—or even better, submit a merge request with the correction if you are able!
@Atirut great question! Membership is how contributors to GNOME can participate in the operation of the GNOME Foundation itself, including the ability to vote and run in Foundation elections for the board of directors, and to propose referenda.
Members also get a handful of other perks like a gnome.org email address and Matrix account, a hosted blog, access to our hosted video conferencing software, etc. You can read about the benefits here:
A range of benefits are available to GNOME Foundation members. This page provides information on how to access them. For general information on Foundation membership, including how to apply, see fo...
so to answer your question more directly: anyone who contributes to GNOME! Anyone making an impact e.g. through documentation, translations, QA, issue triage, outreach, design, app development, library development, or protocol design is invited to apply for Foundation membership.
On 14 October, the EU Council will vote on the CSA Regulation – legislation that would require email and messaging services to automatically scan private messages. Without cause, without suspicion.
Together with other European tech companies, we've signed an open letter.
Wir: „Alter wir sind gerade mit den BigBrotherAwards beschäftigt.“
Könntet ihr uns nen Gefallen tun und einfach mal eure Abgeordneten anrufen? Wir wissen aus Erfahrung: Das wirkt am besten. Briefpost ist auch nicht schlecht. Aber die muss jetzt schnell raus gehen.
“Why is Bob the barbarian carrying a frying pan?” “Oh, that is the material component for his spell. “ “Barbarians don’t get spells!” “Tell him that! He goes around hitting people in the face with it while yelling “cast iron!””
So Bluesky staff refuses to protect & even actively goes out of its way to suppress trans people & Palestinians but has decided... *checks notes* ... AI slop posters are a protected category
manager asked me if im not considering a sick day tomorrow.. i said no im ok and my childrens need eat and other stupid things. u know its only two days then three off, i can do it im ok but somewhere back of my brain is voice telling me, u stupid asshole 😂
We just merged #18432 which adds a new feature to the curl API: notifications. This is not visible in the curl command line, only for applications using libcurl.
5.15 Million Dollar Settlement in California Web Accessibility Class Action Fashion Nova website barriers sparks lawsuit that should have settled lflegal.com/2025/10/fashion-no…
Digital accessibility is a civil right of disabled people. In the United States and other countries, civil rights are baked into laws mandating accessibility.
Gern teilen: Habe Probleme beim Wechseln meines Profilbildes auf #pixelfed.de - Konkret: Wenn ich mein Konto über Mastodon aufrufe, ist es da. Auf pixel selbst nicht. Lässt sich weder ändern noch hochladen. Wer weiß Abhilfe?
Mit der offiziellen AndroidApp hatte ich bisher noch keine so guten Erfahrungen. Bin momentan mit dieser besser zufrieden: apt.izzysoft.de/packages/com.d… Ob sie aber bei Deinem Problem hilft, weiß ich nicht
Wird das geänderte Bild bei anderen Nutzern angezeigt? Welches PixelFedHandle hast Du?
#Politics America, I'm not pointing fingers here. I'm sure this post will get a lot of responses thatwill point fingers, further making my point. If Republicans and Democrats don't start both recognizing that both sides are Americans and not waring countries, if some kind of ability to work together doesn't happen, the American empire is as doomed as all the empires that came before it.
This is a fantastic graph the likes of which should be hanging on the walls in schools and offices.
We all _know_ that the media coverage is skewed, and it's all understandable, but seeing a graph like this has the power of actually updating your brain a bit.
Je suis sûre que - si vous êtes anglophone - vous aurez bien quelques minutes pour écouter Ursula K. Le Guin vous lire un extrait de son roman "Lavinia" pour votre déjeuner.
A special featuring a recent reading by noted Portland author Ursula K. La Guin. She reads from her new novel, Lavinia, which is based on a secondary character mentioned briefly in Virgil's masterpiece, The Aeneid.
Google's new developer verification requirements starting September 2026 will force ALL Android app developers to register with Google - even those avoiding ...
You can now pre-order Gordon Ramsay's new book - Ultimate Home Cooking - before it's release 29th August 2013. Gordon Ramsay's Ultimate Cookery Course is out...
ja sa stým moc netoto trochu masla sol cierne korenie a na panvicu.. bol oveľa oveľa mastnejší ako ribeye čo bol od šéfkuchára. Z Kauflandu na test druhý krát ho už nekúpim asi.
Párkrát už jsem si takhle dělala rib eye a bylo to dobré .... hlavně ten česnek a čerstvé bylinky to hezky doladí ... a to máslo taky .... ještě bych to ráda zkusila s nějakou lepší flákotou od dobrého řezníka a ne ze supermaketu
Aha .... od Archose ? ... jako kousek to byl hezký .... od pohledu dost mramorovaný 👍 Já přemýšlým že si objednám něco tady .... terrys.cz/?gad_source=1&gad_ca…
Od začátku se toho změnilo hodně, ale jedno zůstává - jsme skupina nadšenců, gurmánů i profesionálů, pro které je kvalita, chuť a Vaše spokojenost na prvním místě.
Myslím že jsou docela známí u gourmetů .... evidentně dělají hlavně do hovězího ... Jo a pak mám pokušení zkusit ještě jeden shop .... ti jsou taky vynikající co jsem tak slyšela emifood.cz/eshop/
TIL that you can turn off "link shortening" in the Google App, which produces very short share.google followed by a very long tracking code. It's in the "other settings" of that app. After turning it off, the sharing starts to work norm... Oh wait! 😲 #dontbeevil cc @bert_hubert
I wonder if we should have #GPL 4 that would cover machine learning. Something like "if this code is used to train an LLM, then the code produced by the LLM must be released under the same license". I know there are many challenges, such as effective enforcement, but if this issue remains unaddressed, I believe LLMs may become a way to evade license virality.
I kind of agree, but at the same time, we aren't actually enforcing the copyright laws we already have, because OpenAI isn't actually open, and in fact, is worth so much money that lawmakers are kind of letting them do whatever they want.
It's really about corruption, and not a lack of laws or GPL version IMHO.
I don't agree. We need to train LLM on something legally and open source will benefit from it aswell. And is big difference between using code directly and thru LLM.
The main problem with LLM is that they are using unlicensed documents to train (eg books)
@fersman How will GPL software benefit from it? If people can generate code by AI and release it under any license, why would they release it under a copyleft license? Some will, but many won't because it's a complication for them.
This would not help? Either training LLM is a copyright-protected use of a work (in which case you don't need any new license), or it is not (e.g. it is classified as fair use) and any attached license has no effect.
@mormegil Yes, it's true. If the court rules that it is fair use, then any license clause won't help. But at the moment it isn't really decided, being more explicit about what the author of the code wishes in this regard may help. 🤷♂️
I've heard from several lawyers that output from LLMs is not copyrightable at all because it is not the result of "creative work". Would love to see the first court decision on this.
@mirek that is very curious, i'm wondering how familiar the lawyers were with the actual technology.
i don't use llms too much, so i'm not familiar myself -- but to me it looks like some creative work goes into writing the prompt?
i don't use these tools too much, but just a few days ago i ended up using one and it turned out that a good way to avoid shit output is feeding in pseudocode or commanding it to make the very same sort of edits as one would otherwise make manually. it'd be surprised if someone considered this not a creative process?
@lkundrak @mirek Yeah, I think it's very rare that the AI generated code is used as is. You usually have to "vibe-tune" it, correct it manually and I think it's very much creative work.
Copyright licenses are not a magic spell. If LLMs are adjudicated to be derivative works of their inputs, no additional license is needed; existing GPL (or indeed, even Apache or MIT, given the lack of license text reproduction in LLM output) is fine. If LLMs are adjudicated to be fair use, no additional license will help.
Focusing on licensing is fighting the last war. Public communications and movement-building is what is needed now.
Given that there are new people to fedi, if you are interested in chinese webnovels and chinese dramas, this account sometimes organize watch parties and read alongs!
Currently, we are doing a Panguan readalong, details in this post:
It's Panguan Read Along week 6!
For the week of October 5-October 11, read chapters 26-30
Post your thoughts/reactions using the hashtag #PGReadAlong then tag surf and interact with others who are also reading!
Rules:
- Read at the pace you are c…
LibreOffice turned 15 years old in September! We also had our annual conference, an update to the software, guidebook translations, news about migrations from Microsoft Office to LibreOffice, and more: blog.documentfoundation.org/bl… #foss #OpenSource #freesoftware
Here’s our summary of updates, events and activities in the LibreOffice project in the last four weeks – click the links to learn more… At the start of the month, the LibreOffice Conference 2025 took place in Budapest, Hungary.
I assume, libcurl will also be used on memory-constrained devices which may run any number of requests per power cycle (for example, IoT devices etc). Thus, even 500 bytes per connection can amount to a significant problem in the long run.
@moonfaced "if an attacker can trigger an arbitrarily high number of connections" sounds like a separate and quite important issue that is larger than any memory leak IMO
There may exist a connection frequency threshold sufficient to mitigate DoS attacks by limiting memory usage per active connection. However, memory leaks could accumulate over time, causing even low connection frequencies to result in substantial overall memory consumption.
amateur’s take: Is it „leak“ as in valgrind would tell you that you lost that final pointer to some memory? It could be a pre-stage to a security issue, but not per se. Was it a pointer to sensitive data you were supposed to memzero()?
i think from a philosophical standpoint the library ideally never leaks as only the application can make this decision if and how much is ok - but then if it is documented well it's kinda the applications decision to use the lib or not
since a memory leak alone can't reveal any information to an attacker, it can't be a security problem. It is, however, a potential DoS vulnerability, which isn't nearly as severe.
For even as small as 500 bytes, I would argue that it qualifies as a potential Denial of Service issue, since this could still cause problems in a program which makes many connections, and is running on a container/microcontroller with only a small amount of memory allocated.
It probably wouldn't get a very high severity rating or anything but I'd argue that it at least qualifies for a score.
IMO any memory leak should be eliminated, but I wouldn't really call it a security concern, may cause a crash in very niche situations, but probably not really a remotely practical DoS if it's such a small leak.
By itself, not a security problem, in my opinion. If someone embeds libcurl in a server side service, then it could cause a denial of service issue or result in unexpected reboots.
So my current perspective is that it's a possible ingredient for a security issue, but not a security issue in itself.
It's a security problem if the application crashing or the system running out of resources is one. So, on that condition, the correct answer is "0 bytes" (not offered) or "never". The results so far seem to bear that out.
strongly depends on your usecase. Many would say RCE is a security issue but not if your product is called lambda and you're AWS. On the other hand if you have curl embedded in a physical access system that fetches authorization via network and you only have a few kilobytes of RAM, then suddenly 1kB of RAM usage turns into a DoS. Similarly I'd consider my phone fairly secure but for a state actor it's easy to extract my pin (out of me). It all depends on your scenario.
I see the audience is very split on “at even the smallest size” and “never”. This is a question I can’t really answer by poll, because (unlike a remote code execution flaw) whether a slow bleed of resources until the system falls over constitutes a security flaw is very use-case dependent. If a device is low-resource but important (embedded controllers), even a tiny leak left dripping can escalate to a security incident. But in a big web server that’s probably already restarting everything on a cron timer, it’s just a nuisance.
@0xabad1dea agreed. It is really back to the old mantra of: since we don't know how its used, we can't really say if it is a security problem but it *might* be one... and a line needs to be drawn somewhere...
@0xabad1dea agreed; the line must be drawn on security problems.
However, I'd argue that it's still needs to be fixed at some priority. Is it a security concern? Unless it's leaking sensitive data, nah. But long uptime ESP32's and similar could conceivably experience A Problem.
What Problem? <shrug!> Maybe they just stop showing the weather. Maybe somebody ignored the "NOT FOR LIFE CRITICAL" labels on everything. But not a security problem.
Security use the CIA model, Confidentiality, Integrity and Availability. This is not a threat to either C or I, but Availability may be impacted over time, leading to a Denial of Service situation. Thus the size of the memory leak is not relevant, the precense is enough to call it a security problem.
Also, will the systems overall react correctly in a situation with limited resources?
So many stories of suffering in Africa are told by others; so few by the people living them. 'The World Was In Our Hands', an oral history of people living through the Boko Haram conflict, aims to correct this. @hrb has the review. continent.substack.com/p/revie…
So many stories of suffering in Africa are told by others; so few by the people living them. An oral history of people living through the Boko Haram conflict aims to correct this.
As of now, I am no longer the author of more than half the lines added to the #curl repository. The "others" have overtaken me. I have now added less than half the lines.
Statistically, I think that means you'll be responsible for fewer bugs as well! Though, as the project leader, you still get all the blame for the bad stuff while everyone else gets the praise for the good stuff. 😅
Very cool accomplishment and a testament to your investment in mentorship and scaling yourself. Our egos often make it difficult to achieve what you have, so I think you deserve a lot of kudos for it. 💖
But I'll still ask you to fix my Internet-connected toaster... 😜
@bagder Yeah, I suspect the stats are odd because those countries are pretty low traffic so a small number of modern computers probably skew their stats. Looking at yesterday's stats for DPRK, the main client we saw was an iPhone running iOS 18.5 & using Chrome. There's a couple of Macs, a Windows machine and a couple of Android phones and that's about it. This is all assuming no GeoIP errors & ignoring VPN usage with out-of-country exits of course...
Hubert Figuière
in reply to concretedog • • •Bonkers
in reply to Hubert Figuière • • •@hub
Nah, it's alright.
nerdculture.de/@bonkers/115333…
Bonkers (@bonkers@nerdculture.de)
NerdCultureHubert Figuière
in reply to Bonkers • • •Bonkers
in reply to Hubert Figuière • • •