pleroma - Link to source

I think @stefano convinced me to replace my one minio server with SeaweedFS just because the way you configure the buckets and ACLs is so much simpler for the normal case

it-notes.dragas.net/2025/11/06…


Self-hosting your Mastodon media with SeaweedFS

A practical guide to boosting Mastodon performance by self-hosting your media with SeaweedFS. Configure a fast, S3-compatible storage backend to efficiently handle your instance's files and take full control of your data.
Stefano Marinelli (IT Notes)
@Stefano Marinelli

lemmy - Link to source

GrapheneOS Foundation Announces New ASN (UPDATED: 11-14-2025)

We received an ASN and IPv6 space for GrapheneOS from ARIN: AS40806 and 2602:f4d9::/40.

We've deployed 2 anycast IPv6 networks for our authoritative DNS servers to replace our existing setup: 2602:f4d9::/48 for ns1 and 2602:f4d9:1::/48 for ns2. BGP/RPKI setup is propagating.

We applied for an IPv4 /24 for ns2 via NRPM 4.10 and can apply for one for ns1 after we obtain that one.

Our ns1 network has New Jersey, Miami, Los Angeles, Seattle, Frankfurt and Singapore. Our ns2 network currently has New York, Las Vegas and Bern. We'll be expanding both.

This provides an overview of worldwide latency for our ns1 cluster via the Rage4 anycast service we currently use for IPv4+IPv6 with ns1:

ping6.ping.pe/2a05:b0c4:1::8

Here's ns1 via our own IPv6 /48:

ping6.ping.pe/2602:f4d9::1

Here's ns2 via our own IPv6 /48:

ping6.ping.pe/2602:f4d9:1::1

In the future, we plan to use these 2 anycast networks to provide recursive DNS resolvers as an option for our users. For now, it's only for the authoritative DNS used to provide other GrapheneOS services which is what DNS resolver servers query after the root and TLD servers.

ARIN gave us an IPv4 /24 based on our NRPM 4.10 request in under 24 hours. It's being announced from our ns2 network:

github.com/GrapheneOS/ns1.grap…

It will take a long time to propagate since the RPKI IRR/ROA data gets fetched via timed jobs rather than pushed hop-by-hop like BGP.

It cost us US$50 to register with ARIN as an organization and US$262.50/year paid in advance to become an 3X-Small network. It'll be US$525/year when we get a 2nd IPv4 since we'll get pushed into 2X-Small. 2X-Small covers IPv4 /22, i.e. 4x /24, which we can get via the waitlist.

We've deployed our IPv4 /24 and IPv6 /48 for ns2 in production to replace the IPv4-only anycast tunnel system it relied on before. It has somewhat better latency and significantly better reliability now. We're waiting a bit longer for production deployment of our ns1 IPv6 /48.

We need to choose a host in Singapore with IPv4+IPv6 BGP support to extend ns2 with a location in Asia. Once that's added, it will be good enough for our current needs. The subset of our dedicated/colocated update servers with BGP could be used as extra ns2 locations eventually.

GrapheneOS (@GrapheneOS@grapheneos.social)

GrapheneOS (GrapheneOS Mastodon)
#grapheneos
This entry was edited (1 week ago)

lemmy - Link to source

AOSP 16 QPR1 Released
Android 16 QPR1 is finally being pushed to the Android Open Source Project. This should have happened on 2025-09-03. We migrated to full Android 16 QPR1 kernel code (GPLv2 tarball) and firmware in September. We couldn't migrate userspace to QPR1 without it being pushed to AOSP.

GrapheneOS (@GrapheneOS@grapheneos.social)

GrapheneOS (GrapheneOS Mastodon)
#grapheneos

lemmy - Link to source

Vanadium version 142.0.7444.158.0 released

Changes in version 142.0.7444.158.0:

  • update to Chromium 142.0.7444.158

A full list of changes from the previous release (version 142.0.7444.138.1) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.


Comparing 142.0.7444.138.1...142.0.7444.158.0 · GrapheneOS/Vanadium

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS reposito...
GitHub
#grapheneos

gotosocial - Link to source

If you still think microplastics are irrelevant, they have been recently found in blood, clouds, but even in the breath of dolphins. The more you do to make your life microplastic-free, the better. For you and for the environment. This is not meant to be an endorsement, but rather a reaction to the very sad state of things.

Here's an article about this: ibbi.io/mp

Start by swapping out something that you use daily, for example your water bottle to a fully stainless steel one (including the cap). Yes, there are caps that have a stainless steel coating on the outside, while what goes into the mouth of the bottle is plastic.

Personally, Blockhütte is the only company I found in the EU where this is not the case and the entire bottle is stainless steel, wood and it has a food-grade silicone ring for a better seal.

Microplastics: No Longer a "Maybe"

ibbi.io

Winter blue tardis reshared this.

mastodon - Link to source

I was reading through the two SBOM specifications today (as you do), and noticed that both have fields that impose a "supplier" field on packages.

Couldn't help but think of @https://hachyderm.io/@Di4na's blog post softwaremaxims.com/blog/not-a-… and how it's literally in the standards now 🤦

I am not a supplier

For the past few years, we have seen a lot of discussions around the concept of the Software Supply Chain. These discussions started around the time of LeftPad and escalated with multiple incidents in the past few years.
Thomas Depierre
@https
in reply to daniel:// stenberg://

gotosocial - Link to source

MTRNord

To me FOSS/FLOSS/Name-your-open-source-whatever is basically someone planting a plant in a public garden for anyone to pick tomatoes from it. So who is the supplier there? The one planting or the one distributing it or the shop owner selling it in their tomato soup?

That's at least my personal simplification of this thought. I am also aware this is not a perfect metaphor. Furthermore, I guess I am coming more from an individual small-project POV rather than something as largely used as curl, linux kernel or similar projects.

mastodon - Link to source

I hate that I can basically recycle my posts about Chat Control every month or so. These lobbyists are extremely motivated.

Let's show them that we are
even more motivated than them to protect privacy rights, human rights, and democracy! ✊🔒

You know what you have to do:
👉 fightchatcontrol.eu/

• Recent news:
"Just before a decisive meeting in Brussels, digital rights expert and former Member of the European Parliament Dr. Patrick Breyer is sounding the alarm. Using a “deceptive sleight of hand,” a mandatory and expanded Chat Control is being pushed through the back door, in a form even more intrusive than the originally rejected plan. The legislative package could be greenlit tomorrow in a closed-door EU working group session."

#ChatControl #Privacy #HumanRights #DigitalRights #Democracy #EUpol


CHAT CONTROL 2.0 THROUGH THE BACK DOOR – Breyer warns: "The EU is playing us for fools – now they’re scanning our texts and banning teens!"

Patrick Breyer
#privacy #HumanRights #democracy #chatcontrol #digitalrights #eupol

reshared this

mastodon - Link to source

> In contrast, if you infuse saline down an occluded vessel, you push the blood through the myocardial vasculature and replace it with fluid containing no oxygen. That is a recipe for cardiac arrest because the myocardium is very sensitive to short periods of ischaemia. I like all cardiologists have done it occasionally inadvertently and caused ventricular fibrillation (fortunately always successfully defibrillated in my patients).

I feel better about crashing production now

This entry was edited (1 week ago)

mastodon - Link to source
@NVAccess I would like to suggest including Paperback as one of the recommended accessible eBook readers in an upcoming In-Process issue. It would be a great option for users who want to read NVDA’s training and help materials, as well as other text content.
Without exaggeration, Paperback is currently the most accessible and user-friendly book reader available for screen reader users.
paperback.dev/
@TheQuinbox

Home – Paperback

paperback.dev
@Quin @NV Access

mastodon - Link to source

People who want to make the web accessible need to understand the many different ways that people with disabilities use the web. This W3C resource offers a good introduction to how disabled people navigate the web, and barriers they commonly encounter.

w3.org/WAI/people-use-web/


How People with Disabilities Use the Web

Introduces how people with disabilities, including people with age-related impairments, use the Web.
W3C Web Accessibility Initiative (WAI) (Web Accessibility Initiative (WAI))

mastodon - Link to source

I'm building a new PC (for work, productivity and some gaming) and this is my current configuration:
- CPU: AMD Ryzen 7 9700X
- CPU cooler: Be quiet! Dark Rock Pro 5
- Motherboard: MSI MAG B850 TOMAHAWK MAX WIFI
- GPU: SAPPHIRE NITRO+ AMD Radeon RX 9060 XT GAMING OC 16G
- Memory: Kingston FURY 64GB KIT DDR5 6000MHz CL36 Beast EXPO
- SSD: WD_BLACK SN7100 2TB
- Case: Be quiet! PURE BASE 501 Airflow Window Black
- Power supply: Be quiet! PURE POWER 13 M 750W

Opinions? I haven't built a PC in the last 10 years, so I would appreciate advice from more experienced PC builders.

#pcbuild #buildingpc #computer #pc

#computer #pc #pcbuild #buildingpc
in reply to eudoxos

mastodon - Link to source

Jiří Eischmann

Mimochodem neměl bys využití pro ten starý stolní počítač (čtyřjádrový Xeon, Raden RX 570, 16 GB RAM, 512 GB SATA2 disk, QHD monitor)? Pořád to je perfektně fungující a výkonnostně víc než dostačující počítač. Doteď na něm pracuju a hraju. Rád bych ho daroval. Při nejhorším ho odvezu do té sbírky Mironetu, ale raději bych ho daroval adresněji.
This entry was edited (1 week ago)
in reply to Jiří Eischmann

mastodon - Link to source

eudoxos

Nápad bohu6el úplně nemám. Kdybych byl poblíž, tak bych si ho třeba vzal, ale na posílání do Prahy už je to dost velké. Mironet: nemám zkušenost, podle webu vypadá, že to mají zmáknuté — tedy až na Windows (to už je snad nějaká porucha, že Mironet, s jejich děsivou historií s BSA, instaluje sw of Microsoftu). Nebo se poptat v okolí, kamarádi kamarádů, co potřebují stroj pro děti trochu na práci a trochu na hraní, nebo tak něco si představuju...
⇧