I'm a bit late to this, but as always, @pluralistic is a crucial and clear voice on the issues we face today.
These anti-jailbreaking laws were designed as a tool of economic extraction, a way to protect American tech companies' sky-high fees and rampant privacy invasions by making it illegal, everywhere, for anyone to alter how these devices work without the manufacturer's permission.
"Introduction to Web Accessibility" is a free course designed for people of all roles and all experience levels, so regardless of your background, there's something you can learn here.
Get a strong foundation in digital accessibility to make your websites and apps work well for people with disabilities, meet international standards, and provide a better user experience for everyone.
"Today, another mad dictator is threatening the world's infrastructure. For the rest of the world to escape dictators' demands, they will have to accelerate their independence from American tech – not just Russian gas."
As you might have come to expect and astute as ever, @pluralistic laying down the facts on American tech subservience.
"It's well past time for a post-American internet. Every device and every service should be designed so that the people who use them have the final say over how they work. Manufacturers' back doors and digital locks that prevent us from updating our devices with software of our choosing were never a good idea. Today, they're a catastrophe."
I'm very sad. My Bi40X won't connect over its stupid HID protocol over Linux and Debian and Bluez and BRLTTY 6.8. I'm so, so sad, I could cry over this. Mostly out of frustration, as it's just a mounting things on Linux that keep me away, so really I wouldn't be crying over it but over all of it. Linux, you thwart me once again. How the heck will I use you as a fulltime OS if it means giving up HID Braille over Bluetooth? Ugh.
I hate repeating myself, but it's these things... Linux on the desktotp just has these issues... Anyhow, have you tried the solution from www.virtualhere.com and does it work for you, if I may ask? Definitely longer range than BT and it looks to the machine like a USB connection.
May I know, how can we fix it? I'd love to learn linux and use it as a primary, as I love free things and transparency is cool because I learn from watching others do things. That's why I like good people because I can use the good things people do as influince when bettering myself or doing something in my life. I love learning and I do it every day, and it's sad that the BRLTTY is broken for you. I hope apart from this though, that you are having a good day, and that you manage to somehow sort out this problem. Are you on I'd presume arch linux? That's how You're on latest BRLTTY unless your not? Maybe you're one of those smart folks who gentoo your way through life? Maybe you're a roling rocker and you prefer solid Debian? I should've used the roling rocker reference for arch, but rock solid, roling rock, yeh. Have a great day, and thanks for sharing this saddening news.
Amazon wants me to verify my identity as a developer for the Amazon appstore, all because of a failed attempt at launching an Amazon Alexa skill a few years ago that I wouldn't personally use myself, because I have no Alexa devices.
"Verification should only take a few minutes. Please have your government-issued ID readily available."
Thunderbird 144 is out now! Exchange support is closer to officially landing, dragging and dropping your folders is easier, and we're adding new ways to keep your email safe!
And what about the migration to the release version for the Flatpak users? Flatpak was the recommended way to install Thunderbird on Linux, but incoherently, there is no info about when it will be possible to switch to the newly recommended release channel when using Flatpak!
@pejiji Right now, the plan is to switch to the Release channel by default on Flatpak next summer, around the same time that the new ESR would come out (June/July). Sorry we haven't communicated more about this, and we'll try and find better ways to get the word out about our Linux packaging updates!
@frankps No, but the work we're doing will help us start work on the Graph API protocol. We'll have upcoming posts that we'll share here all about our upcoming EWS support and future plans!
@frankps This sounds like a bug we're investigating! Do you mind checking out bugzilla.mozilla.org/show_bug.… to see if this matches what's happening? You can comment on/follow the bug if it's a match!
Not quite. We simply can't configure smtp.office365.com with OAUTH2 on Thunderbird Mobile. Thunderbird Desktop for Linux and macOS seem to not have the same problem. Thunderbird Mobile worked last spring when I played with an Android phone.
Now I tried with a Fairphone 4 with latest /e/ OS an ran in to the same problem again.
@frankps Thanks for the update! Is it an educational account? This is a known issue that we are working on in the current beta (14.0b3). Can you see if the Beta app will configure your SMTP correctly? If this is with a non-educational account, can you open a new bug report at github.com/thunderbird/thunder… ?
Yes, we are an academic institution (university) with A licenses. And the upcoming release solves our problem configuring smtp.office365.com. Thank you! When is it planned released?
@frankps Oh so glad the current beta fixes this! We're planning to release 14.0 on November 17, unless there is anything critical we need to fix. Then it takes sometimes up to a few days for the Google Play Store to approve. Once it does, then we gradually roll it out to users!
🌕 How do you communicate during a Moonwalk crisis?
At The Matrix Conference, Aileen (@esa / German Aerospace Center) and Jan-Lucas (@FAU) showed how Element and @matrix enabled real-time crisis communication on a simulated moonwalk at the LUNA Analog Facility.
https://media.ccc.de/v/matrix-conf-2025-81581-texting-through-the-silence-medical-care-over-matrix-with-delay-during-a-simulated-moonwalkTwenty seconds is a ...
RB5009 update: still no luck. I absolutely can't get it to reset and I don't know why. When I connect to it, it says the DHCP server address is 172.16.18.0, which isn't an address I remember typing. I was using 172.16.0.0/12, and wanted DHCP to use 172.18.0.0/16, but I must have mistyped something. I have the netinstaller program and will try that next, but I need the right RouterOS image and I don't know if I need ARM or ARM64. There's a download for all images, but I couldn't find it.
Alright, sweet Fedipeeps. Time to confront this topic again. Oh yes, what topic you ask? Suno V5! I jumped in the game by trying to get it to cover a really amazing violin piece I was shown by my grandmother when visiting Hungary after college. If anything after this, listen to more of her work. Melinda Dumitrescu. Don't let AI ruin things like the talents of an amazing player of actual instruments. Anyway. I tried to cover a song by hers called Magnificat. (youtube.com/watch?v=FzM86As71k…) - Instruments here switch off really nicely, and honestly it's one of the most uplifting 3-minute pieces I've heard in a long time. This is ultimate test for Suno, because the flute, guitar, violin, all play off on each other into a crescendo, and well, you need soul, heart to understand why and what's going on. It requires emotion. How did Suno do? I'm never publishing it, because it's not right, but you can listen for yourself, I told it to make it more Celtic and cover it that way, style influence to 100. That flute player sounds so rookie and only warms up somewhat later. The original is way better, 100%. Suno's geting there but I'm so not impressed with the no heart it has.
Venue clean, all remaining items packed. Good-bye Kaleidoscoop, thanks a lot to all volunteers, the @matrix foundation, our sponsors, our speakers and my friends @thibaultamartin and @HarHarLinks for rocking the #MatrixConf2025.
@b0rk @icing it is a certainly a pile of legacy... things that keep it together. Anything particular you get stuck on that I might be able to help with?
The Royal Swedish Academy of Sciences (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl.
I use curl all over the place, but for quick CLI usage, I had been using HTTPie, for its simple API and pretty output. But, now, they’re even going the way of Postman and adding tons of unnecessary features and AI to their tools. 😮💨
@b0rk @icing oh right. Do this: in the 'cvssource' directory that is a curl source tree: build curl there, using configure or cmake. The website build looks for some artifacts from a "real" curl build, for example the rendered manpage curl.1
@b0rk @icing oh no, you’re maintaining parallel build systems. Are you attempting to migrate away from autotools to CMake (or vice versa), or does curl just build so many places that a complete migration in either direction is impractical-to-impossible?
Huh, somehow never thought of putting curl into scripts inside a directory for documentation instead of postman/insomnia collections. I could also > the response into response files so that I can check them anytime without running the request again.
mh, I have no information on this but Brad Sprengler of grsecurity is a person that's been permanently at war with the Linux kernel community for many years, so I wouldn't really trust anything he posts about the Linux kernel without hearing it from another source. 🤷♀️
This October, the Internet Archive’s Wayback Machine is projected to hit a once-in-a-generation milestone: 1 trillion web pages archived. That’s one trillion memories, moments, and movements—preserved for the public and available to access […]\n
Just received an email from YouTube that they'll soon enable autodubbing on the OctoPrint channel for new and soon also old videos. Hell no, every time I run into this AI shit when watching YouTube I just want to scream, it's THAT bad.
Thankfully, there's a way to opt-out, and I just did that. And if you upload stuff to YouTube, for the love of all that is holy, PLEASE disable that too!
That something like that ever ended up as a feature just tells you a lot about the product manager there.
Only someone who doesn't watch stuff in several languages - because they only speak one - can come up with the idea to force AI voices per default on everyone else.
I haven't yet found a way to opt out of that shit on the consumer side, but using patched and third party apps helps... (and also helps with some other bits of the whole enshittifying experience)
As many have already pointed out the outage at Amazon Web Services & its impact have shown the extent of dependence (for internet services) on a small number of companies.
As in other markets (national & global) oligopoly is the defining characteristic of this market;
while effective monopolies are rare, oligopolies are so common that one might want to call the current period the 'age of Oligopolistic Capitalism'.
That this has significant social costs is pretty clear!
The irony here is that the internet as a whole is massively resilient and it's only through the imposition of cloud monopolies that we've built in points of failure.
As a developer, I love solving problems. But when I leaned into accessibility, I discovered a new appreciation for the elegance of HTML. All the layers of backend and frontend engineering are...
It took about a month, but the box running FX Radio has hard crashed again. Kernel panic or something else, I don't know yet.
I guess it's time to move it to a more robust host, which I don't currently have. I'll try to debug it when I can get that machine back online (requires manual intervention, because stupid me didn't install a remote switch).
For context, FX Radio is currently running on an old Intel NUC5i3RYH from 2015, which has been upgraded with a 2TB SSD, most of which is used, and 16GB of RAM, running Debian Bookworm. I may just buy another MiniPC to replace it, and stick the current SSD in there... unless the SSD is the problem, in which... yeah. New one of those, too, I guess.
The last version of FX Radio ran on a Raspberry Pi 3 model B Plus with an external USB hard drive connected to it. While it did work, Liquidsoap crashed every couple of days. This time, Liquidsoap is pretty stable, but the machine itself falls over every now and then.
The box has been rebooted, and ... uh... it isn't coming back online.
Righty then. That's a possibly dead project for a couple of months, until I can get down there to do something about it. This also takes @NoiseBox offline.
...
or not. The machine is visible to me again, several minutes later. Let's do some debugging. WOOHOO!
OK... FX Radio is back online. Unfortunately, previous kernel panic or whatever was not logged, so I have fixed logging. Hopefully, next time it crashes, I can better understand what's going on.
bych řekl ať to uděláš z patentového drátu (je v něm dost uhlíku aby šel zakalit ale je vyžíhaný abys ho mohl naohýbat a až potom ho necháš zakalit) ale zase když je v tom dost uhlíku aby to šlo zakalit tak se to blbě svařuje :D No potom se pochlub co jsi stvořil.
@FoxVK budem to "konzultovať" na praxi, keď sa tam konečne vyberiem (čo počítam že bude budúci týždeň). Čo som si tak všimol v škole sú radi za aktivitu. Díky (pamätám si to len som bol mimo vtedy)
Way too many bytes in one basket makes for one very big single point of failure. This is the cost of an absurdly hyper-centralised fast-food-like data center culture.
Signal++ down, sucks, but it's seeing fundamentals like banks & public sector services break that stings most.
But hey, maybe this is what it tales to push more govs to actual #datasovereignty, investing in locally owned data centers or building out their team & hosting on-prem
"The list includes McDonald's, DisneyPlus, Snapchat, Signal, Roblox, Verizon, Fortnite, Venmo, Perplexity, Hulu, Duolingo, Perplexity, Reddit and Coinbase. Even Amazon.com was offline at one point, and some users have also reported that their Alexa smart speakers and Ring doorbells had stopped working.
Banks and even some government websites have been affected"
Disappointing to see nothing on Signal's blog as to the mass outage due to their dependence on AWS. Solely very specific social accounts. Their AWS use for serverside has not been a secret, but it would be good to have a detailed, transparent description of how far this relationship goes, if they have plans to add more resilience, decentering.
Their server side code is OSS yes, but just for audit purposes. To use it you'd need to rebuild the client apps, pointed to your instance.
With Signal proving to have no failure tolerance server side, we have effectively seen Amazon could switch off Signal. Not that they would necessarily do that, but it is an extraordinary power to hold, even a lever to wield.
I'm not slighting Signal here. I use it in my work. Family, friends all use it. Folk invested trust, & depend on it.
Signal have popularised E2EE chat, brought it to the masses (spurred Meta to Double Ratchet WhatsApp). A huge contrib
zaujímavé ako dlho vydržalo naše priateľstvo, spoznali sme na stránke o Androide XDA Developers kde sme flašovali kernels and custom roms, riadne dávno tvl
It is available free from 'ISO/IEC 40500:2025 - Information technology — W3C Web Content Accessibility Guidelines (WCAG) 2.2' at iso.org/standard/91029.html
Introduces the Web Content Accessibility Guidelines (WCAG) international standard, including WCAG 2.0, WCAG 2.1, and WCAG 2.2. WCAG documents explain how to make web content more accessible to people with disabilities.
Does anybody know how to get cyclepath to play properly? When I play the game, it acts like it's speedhacked or something. everything comes at me abnormaly fast
@talon Yeah. It seems to happen on all my machines, at least the windows ones. Imagine if you were to enable a cheat engine speedhack, that's how it plays. Note that I don't have cheat engine. But It's like that, really really fast. I even tried ajusting my keyboard delay settings but no luck
This makes sense, you only mention what's distinctive about a person.
If there's a news report about domestic violence, the report won't emphasize that the couple had no kids, was not religious, was not famous, or that neither of the participants had any mental illness. If the couple has nine kids, are scientologists, are well-known celebrities and the man is known to have addiction issues, all of those will appear in the news report.
If a German commits a crime in Germany, there's no need to say that a German committed the crime, that is implied. If it's a foreigner doing it, that's something distinctive about the situation.
It's true that it causes people to draw the wrong conclusions though, just as news reporting on plane crashes and nuclear disasters causes people to have the wrong ideas about the safety of aviation and nuclear reactors.
@GLaDTheresCake Nobody mentioned skin color here, this discussion is about German vs. foreigner. At least here (Poland), that info is usually available in police reports, and doesn't have to be implied from skin color.
@miki @GLaDTheresCake Unlike over here in america.. jeeez I wish we would get over it already! This country (america) is so racist and has continued to be since it was created 😿
@em_and_future_cats @GLaDTheresCake I don't know what you're refering to specifically, but America is actually a lot more transparent about crime (to its detriment).
Whereas in Europe, a lot of information is withheld for privacy reasons, in the US, any somewhat competent reporter can access most police reports in their entirety, including mugshots and unredacted names of the accused, which they're allowed to publish *before* that person is convicted by a jurry of their peers.
@miki @GLaDTheresCake True… I think what I’m referring to is frequently you hear a report over here talking about a crime they will *very often* say what their skin color or ethnicity is. I’ve noticed that when the person is “white” they (reporters) often just refer to their age and gender … that’s what I think I was trying to get at … however this is just what I’ve observed and could be skewed just in the observation.
## Summary:
Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy() in the handshake process. The vulnerability is located at lib/ws.c:1287 where...
@piggo @alefunguju strncpy() is almost never the right answer and is more often than not rather leading to bad code, to the extent that we ban that function in curl since a while back
If the target buffer fits the data we copy to it, there is no point in using strncpy. Period.
while it's kinda funny to watch clueless AI users get dunked on, this must be a real pain to deal with. I remember your blog posts on slop bounty reports, and I have a bad feeling they're not going anywhere.
just said "hell yeah!" out loud, in public, when I saw your reply to "I'll be more careful next time"
I'm not a programmer but can vaguely read it and I'm looking through that code snippet and thinking "but isn't this...working entirely as its meant to?". Also, step 4? Perfect slop right there.
@_aD this time it took me about five seconds to dismiss the report. It didn't feel or smell right and a quick glance on the pointed out code immediately confirmed that to me...
Horen, Zien & Zwijgen
in reply to Koen Hufkens, PhD • • •