in reply to superblindman

Excellent review as always, thank you. When that first leak happened listing the screen reader and audio descriptions my first thought was OK if AD is being addeD, which in games like TLOU was like icing on the cake after the core accessibility was done earlier, then surely this will be accessible. Then I saw the official announcement with no mention of any audio queues and that was when I felt I didn’t have as much optimism as others, and now I wish I wasn’t right. ☹ You raised a very valid point re: usage analitics, it's not something I even thought of but it makes a lot of sense and hopefully won't reverse the progress that was made in this aspect. I would love to know the decision making process here, whether adding any audio queues was even considered, or if someone decided that it was much more worthwhile to contract to Descriptive Video Works to write and narrate the AD, then having a team just hook up the appropriate triggers which probably took a lot less development time but wasn't cheep considering DVW is a very professional company who do an amazing job. I'd be very curious to know how the math works out here as in whether it was cheeper to pay for the AD, or paying engineers, sound designers and QA to work on more audio queues.
in reply to Pitermach

Long post
@pitermach You can send an audio description house a script and a check to generate product to drop into your game, and have your engineers hook up screenreader cues, without having to think much. Creating audio cues and a turn-by-turn assistent for blind people requires design work, and UX research to ensure your designs are headed in the right direction. Seems accessibility did not get that support. Sad.

Chtěli jsme řešit problém, ne vydělat, říká tvůrce nejstarší kryptopeněženky
t.co/2QZVvyJr5M

Me, reading article about poverty.

Article: "[the house] is perfectly livable - it’s very small (think ~900 sqft)"

Me, checking the calculator: 83 sq m

🤔 am I poor, most of the places I lived at were smaller or MUCH smaller (<18 sqm per person). lol

Article: residentcontrarian.com/p/on-th…

This entry was edited (2 years ago)

Hello kids. Sit down by the fire and grandpa will tell you a story.

Once upon a time there was this QUIC presentation done by Jana Iyengar for a small team of HTTP peeps. (in July 2016 in Stockholm)

In this presentation Jana used the image below, as he was a little tired of people proposing calling the new protocol TCP/2.

Later on, when Tatsuhiro started his work on a QUIC library he decided to call it... ng TCP2. In an homage to this.

He likes ng name prefixes. nghttp2 was his first.

in reply to daniel:// stenberg://

@ondrej

Depends on what you think "caring about your users" actually is.

OpenSSL has figured that an OpenSSL-native API, integrated with already existing OpenSSL API, is important, and likewise, it's important to be able to build OpenSSL on quite a lot of platforms with a minimum of dependencies.

BTW, OpenSSL has achieved the client part by now. I'm tempted to contribute a patch that uses this... given personal time.

in reply to Richard Levitte

@levitte @ondrej I don't' think OpenSSL took that decision for its users. I think openssl did it in an attempt to increase its value in the "food chain" or something. Because it would have been super easy and friction free to do both, but OpenSSL explicitly decided to not provide what users asked for for years and instead provide what no users asked for...

But sure, this is just my own personal view. I have no actual insights.

An argument in favor of uncensored large language models: erichartford.com/uncensored-mo…
I think it’s a fair one!
#ai #LLM
#AI #llm
This entry was edited (2 years ago)

I've recently discovered "Ollama" a really simple way to run open source large language models locally on your computer. This field has advanced drastically since the last time I tried it, and there are a ton of options to try out. There is an API so you can integrate this with python or any other programming language and use LLMs in your application, and you can also try this via Terminal. It's extremely easy to get set up. Here's the link. ollama.ai

EL PAÍS USA: Wendy Guevara: ‘Trans people are normal. We love, feel and cry just like everyone else’
#news #GoodNews #TransNews #trans
english.elpais.com/people/2023…

Welcome LoRd_MuldeR as #curl committer 1204: github.com/curl/curl/pull/1213…
#curl

Welcome Carlos Henrique Lima Melara as #curl commiiter 1203: github.com/curl/curl/pull/1212…
#curl

This is a terrifying and sobering write-up by Retool on so many levels. It's about about a recent spear-phishing via SMS attack on employees, followed by voice phishing attack that deepfaked an employee's voice.

Retool said just one of its employees fell for it, which is of course all it takes. Here's the scary part:

"The voice was familiar with the floor plan of the office, coworkers, and internal processes of the company. Throughout the conversation, the employee grew more and more suspicious, but unfortunately did provide the attacker one additional multi-factor authentication (MFA) code.

The additional OTP token shared over the call was critical, because it allowed the attacker to add their own personal device to the employee’s Okta account, which allowed them to produce their own Okta MFA from that point forward. This enabled them to have an active GSuite session on that device. Google recently released the Google Authenticator synchronization feature that syncs MFA codes to the cloud. As Hacker News noted, this is highly insecure, since if your Google account is compromised, so now are your MFA codes.

Unfortunately Google employs dark patterns to convince you to sync your MFA codes to the cloud, and our employee had indeed activated this “feature”. If you install Google Authenticator from the app store directly, and follow the suggested instructions, your MFA codes are by default saved to the cloud. If you want to disable it, there isn’t a clear way to “disable syncing to the cloud”, instead there is just a “unlink Google account” option. In our corporate Google account, there is also no way for an administrator to centrally disable Google Authenticator’s sync “feature”. We will get more into this later."

retool.com/blog/mfa-isnt-mfa/

This entry was edited (2 years ago)

Did you know that a lot of things in #Rust directly implement the `Ord` trait?

For example `Option<T>` where T: Ord

doc.rust-lang.org/std/option/e…

So you can do:

assert_eq(max(Some(0), Some(1)), Some(1))

assert_eq(max(Some(0), None), Some(0))

assert_eq(min(Some(0), None), None)

There are a lot of other things that implement `Ord`:
doc.rust-lang.org/std/cmp/trai…

#RustLang #RustTips #RustTip

If you're familiar with #Auth0 Actions, I'd love your help with this problem I'm having.

community.auth0.com/t/actions-…

in reply to Terence Eden

Can anyone recommend a "Social Sign In" service that *isn't* Auth0?

I want people to be able to log in to my service using Twitter, Facebook, WordPress, GitHub, and - ideally - Mastodon.

Sadly Auth0 is getting buggier and buggier. And they don't support Mastodon logins.

I don't mind if it is a paid-for service. But needs to be reliable and work with Symfony.

(Looking for personal recommendations - I know how to use Google.)

This entry was edited (2 years ago)
in reply to Emmanuele Bassi

@elad I can actually see the use for this in another context (and have considered designing something like it): a timelapse app for artists.

In this context, their “work” is their art, not something imposed by an employer.

It should probably be built into the drawing app or whatever, but I could see the niftiness of a workflow timelapse that captures the various apps you use and whatnot over a long period of time, without having to sit and record an actual video of the entire process.

@elad
in reply to Emmanuele Bassi

@elad yeah, makes sense. So perhaps they're using some old tool for artists that uses screenshots when it really should use the screen share portal. It sounds terrifying at first but I sometimes watch those kinds of timelapses and feel like it would be a neat tool. 😅

But uh, yeah, hacking the Shell or whatever to just *not* give any feedback of a screenshot is the wrong way for them to go about it. 😜

@elad
in reply to Emmanuele Bassi

@cassidy @elad Screen and window capture is useful if you want the entire app view, however some apps provide native canvas or viewport capture for timelapse purposes. For example:

* #Krita: docs.krita.org/en/reference_ma…

There are also a handful of related add-ons for #Blender that can assist since the native screencast feature was removed in 2.8.

in reply to Late Night Owl

@latenightowl @elad the flash is there to notify the user that something is taking a picture of their desktop; there is no other indication, otherwise, because it’s an instantaneous action. Unless you want a confirmation dialog, because that’s how you get a confirmation dialog.

In some countries, phones are legally mandated to have a shutter sound because of people taking pictures without consent; same thing applies here.

Con una participación bajísima (40,6% frente al 52,5% de la primera ronda) la segunda vuelta de las municipales y regionales en #Grecia da un toque de atención a Nueva Democracia, que pierde las alcaldías de Atenas y Salónica y el gobierno regional de Tesalia, región víctima de las terribles inundaciones de septiembre

#política #noticias
efsyn.gr/politiki/408004_doyka…

A friend (@vista_df] told a story of when someone stole a huge amount of copper in Hungary, and man, these photos are brutal.

In the end 150kg of copper cable was stolen, at current-ish rates that is just 200USD, but it cost the provider on the other side 250k+ USD to repair the section of cable.

Full slides (non english): docplayer.hu/3052585-Tavkozles…

Despite I tested a lot of LTE-Modems for ModemManager and NetworkManager. I never knew what did happen behind it.
#ipv6

here Aleksander Morgado explains it
modemmanager.org/docs/modemman…

#ipv6

#XMPP + #Google Summer of Code 2023

Yesterday our #GSoC Organisation Administrator Edward presented the work of our contributors hrxi on @dino and ISD on #Moxxy (@PapaTutuWawa) at the Google #Mentor #Summit 2023!

xmpp.org/2023/10/the-xmpp-news…

#GSoC2023 #interoperability #standards
#federation #jabber #chat

reshared this

Hey, remember that you can join #WritingTreat during #NaNoWriMo this year again. That's when we really kicked it off last year. Oh and, ofc the rest of the month for NaNo-prep. No one is required to follow NanoWrimo "rules or goals"

We're a twice-weekly writing group, with few option for video or voice chat. We're ND friendly, and try to focus once or twice during a two hours slot. 😅
We are actively working to be an anti-racist space, and filled with queer and trans people.

There will be space for additional sessions during the month, but that requires more people to host. And even if you only want to offer to host once session during the whole month, that could really help the community!

Feel free to ask me or @ljwrites for an invite to the matrix chat room as well!

And wiki info is here (we try to keep this updated)
wiki.writeout.ink/writingtreat…
You can Check out our other hosts from under the hashtag too.

#WritingCommunity

This entry was edited (2 years ago)

Using Firefox Nightly and love HTTPS? Our great student worker Malte landed bugzilla.mozilla.org/show_bug.… yesterday! If you set the pref `dom.security.https_first_schemeless` to `true`, then all URLs typed into the address bar without a URL scheme will first try HTTPS (with a fallback to HTTP). Typing HTTP explicitly (e.g., for a local router that does not have a certificate) is still going to work.
Your feedback is highly appreciated, while we are working towards enabling it by default.
This entry was edited (2 years ago)
Unknown parent

mastodon - Link to source

Frederik Braun �

@Bubu right, the difference is exactly as you described. Only mode has the drawback that it might break websites with specific cross-site expected behavior. The benefit of this (weaker) protection is that we can mainstream it with ideally zero repercussions for the average end user.
TLDR: we’re slicing HTTPS Only Mode into smaller chunks in order to balance usability and security improvements.

Incoherent game accessibility ramblings, mostly about Forza
Having a lot of fun with Forza Motorsport right now and that once again made me realize that there are people out there who actually care. I'm pretty sure none of this was actually necessary to do, but whether it was PR or employees that actually care or both, the fact is that even while it's not perfect, this is a huge, huge step in blind gaming. This is incredibly fun, even if it's ridiculously difficult and has a very steep learning curve. I'm not actually sure when I felt like this for the last time. I've played the last of us but somehow I feel like this is even bigger. I imagine that implementing blind accessibility into the last of us was less work than getting a fast paced racing game playable, but I'm also sure that one might not have happened without the other. And I'm pretty sure that this wasn't some kind of business incentive either. I can't imagine that adding blind assist features to Forza would be the thing that made or broke the games sales, and I can't imagine that outside of a pretty niche player base, anyone would care if Forza did have these features or not. But it does. And I'm very grateful for it. This is actually incredible. Very, very difficult and hard, but incredible. I wouldn't fault anybody for getting frustrated and giving up - hell I got frustrated too. But then I close the game, step away for a few hours, and find myself opening it again and trying again. The amount of settings you can tweak to get the most out of the accessibility features that are there is actually quite surprising and by all the gods I want this trend to continue. I can even play fucking multiplayer with other people! Sighted friends if I wanted! How friggin' cool is that shit?
So yeah. Are there things that could be improved? Of course. When isn't there? There's always room for improvement. But considering where we came from, basically a game where you held and released one button with the previous Forza, to this? This is amazing. I can only imagine what they could do if this accessibility mindset continued. And I really hope it does. And not just for racing games. For all games. Sorry now I'm seriously just rambling.

reshared this

149th episode of the Blind Android Users podcast has landed on your favorite podcatcher of choice. This episode features Samsung OneUI (Connected devices) and unboxing of Pixel 8 Pro accessibleandroid.com/podcast #Android #accessibility #podcast