lmao, if I'm reading this right, a check in the xz CMakeLists.txt for whether a certain sandboxing mechanism is supported was disabled by... adding a period before the "void" keyword, making it fail.
The figure most folks want to see is the percentage of home pages that had detected WCAG 2 failures. it is marginally better than 2023 but you will have to read the report.
It is also worth noting that sub domains have been excluded from the scan. The WebAIM team decided the long-term results would be better.
I understand that this has a big impact on #government and #education sites.
This saga will raise the question: how can we reckon with the reality that some laissez-faire FOSS projects will one day become of massive national security import, while still being maintained by hobbyists/enthusiasts?
I don't think it is ultimately a question of "hobbyists/enthusiasts" or not. Basically any developer might go rouge given the right motivation. Getting paid does not make you more trustworthy...
@bagder I did not say this in order to sneak the argument that maintainers need to be paid! I don’t believe that would fix the problem either. I’m saying that I don’t know what would.
Catching up on the detailed background to the xz compromise. This is a good summary (with links to the detail) of the long play here. boehs.org/node/everything-i-kn…
So, Philipp Kern dropped by asking if we could do some #ReproducibleBuilds verifications of recent Debian Security updates, given, well the whole #xz mess... and that our build infrastructure may have run compromised code at some point...
So I did a quick pass at a handful of updates and everything verified ok so far, though I skipped some of the probably more juicy targets such as chromium and firefox:
Jonathan's series on the Essential recorders from Zoom, which have accessibility features, concludes on this Living Blindfully extra with the look at the Zoom H1Essential. This is the smallest member of the family and sells for just $99 USD.
Yesterday after reading and participating in discussions about the xz backdoor, I stepped away to do my usual Friday evening karaoke. I tried to think of an appropriate song. And I thought of one that I had already requested a home-made karaoke track for. It's not a perfect fit, but maybe "Nothing is Ever Enough", by Derek Webb, which was about why he left his band, will resonate with people feeling burnout, from open-source maintenance or otherwise. youtube.com/watch?v=Zc87Jtt2MQ…
Provided to YouTube by The Orchard EnterprisesNothing Is Ever Enough · Derek WebbI See Things Upside Down℗ 2004 Derek W. WebbReleased on: 2004-11-09Music Pu...
OK, here's that phone recording of me singing "Nothing is Ever Enough" by Derek Webb at a karaoke bar (see the thread for context). This is a song I wouldn't do for a large crowd. Luckily, this bar (A&J's Music Room in Wichita, Kansas) starts karaoke early on Fridays, and I did the song while the place was still pretty empty. That also means there's not much noise in the recording. A friend recorded video on my phone, but I'm just posting audio.
The sad part about today's xz/liblzma discovery is that again critical infrastructure was maintained by overworked volunteers without sufficient assistance or support. We, as professional software engineers, or even we, as society, relying on their volunteer work, failed them.
You are new to accessibility, and don’t know where to start? @TetraLogical built this foundation series of articles that provide you overviews on core considerations. This is a great place to start for visual designers, content designers, interaction designers, and developers, or anyone interested in the topic.
Our **foundations** series provides an overview of core accessibility considerations. They are a good starting point for visual designers, content designers, interaction designers, and developers when designing and building accessible products and s…
If you want an AI piper voice of any retro synthesizer, please send me samples that are clean, normalized, do not strip base or speech tambor, and static-free (although any slight noise from the speech chip is acceptable if minimal.) Please try to have it read text like Alice's Adventures in Wonderland: cs.cmu.edu/~rgs/alice-I.html - at a normal understandable speech rate (as Whisper may struggle at faster ones + older speech synths that slur words.) Thanks, boost for any interest :)
Síťové úložiště (NAS) QNAP TS-231P Hlavní vlastnosti: na 2x disk 3,5 palce (nebo 2,5 s redukcí) SATA, HDD nebo SSD procesor Annapurna Labs AL212, 2 jádra, 1,7 G
Ya. I'm finding the EU actions against Facebook baffling. EU, Give us a no ads version. FB, then users have to pay. EU, no. not like that.
EU's hostility towards Meta's "Pay or Okay" model is misguided as the model does not force users to use Meta's platforms and it has been deemed GDPR compliant.
Europe's misguided hostility towards Pay or Okay. Mobile marketing and advertising, freemium monetization strategy, and marketing science. Mobile Dev Memo.
I should acknowledge I'm extremely hostile to advertising in general and personalised advertising specifically. With that out of the way, the view that the pay to avoid personalised advertising is compliant with the GDPR is controversial. The CJEU decision on it wasn't really about it, and it appeared there as an aside (ob iter dicta), it wasn't ratio decidendi for the case. Meta isn't the only entity being chased after for this: there are cases going on regarding the use of similar model by media orgs, which, yes, there are lots using it now. And that's part of the problem as well, 9.99 EUR/month adds up fast.
My opinion is that this is indeed contrary to the GDPR's notion of consent. Specifically, recitals 42 ("Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment"), 43 ("In order to ensure that consent is freely given, consent should not provide a valid legal ground for the processing of personal data in a specific case where there is a clear imbalance between the data subject and the controller"), and art 7.4 ("When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract").
@modulux Leaving aside the legalities for the moment, let's consider this from another perspective. What's the remedy? Are we establishing pricing controls? Are we, in effect, saying that there should be no cost to the user if they choose to have no ads version? What if users truly want the ads version?
I agree the legal questions are messy. So leaving that aside. There's reasonable amounts of evidence that people do not want to be tracked, from surveys, for example. There's also evidence that, even with the consent model, users are not always equipped to understand precisely how far it goes, how intrusive it is or how powerful the inferences that can be made about them are.
If, hypothetically, users wanted the advertising model, why do they have to be given a stick if they don't choose it?
I'm sympathetic to the view that things have costs: operating servers, writing software, paying for bandwidth... this stuff isn't free. Someone has to pay for it. But I'm not convinced that the bargain of exchanging our personal data for it is fair. Just because a business model is economically viable doesn't make it right.
@modulux But that won't be solved unless you outright ban FB or similar ops. I'm pretty sure Spotify tracks as well. I'm not trying to do the whole EU against American companies thing. There's a legitimate case to be made here about business models that track. And, Spotify, for instance, is excluded because it was specifically designed to. My concern here is that , rather than banning a specific practice, this is more about punishment.
Sure, inasmuch as this is just directed at Meta/fb I don't think it is good, though it's also true there's a component of market dominance involved (hence the DMA issues).
But I think this is not just about them. Lots of European consumers and privacy orgs and so on are concerned about the same sort of deal being made by the press. Here in Spain for example, since the data protection circular came into force some time this February, pretty much all digital editions of newspapers went for it, with prices going from 7 EUR up. Personally I'm not as fussed about Meta because I made the other choice (not using it), but when all newspapers take this direction, we need to make it clear if it's legal, and I personally hope it isn't. (So far using f9 on Firefox is a surprisingly effective remedy, but it probably won't last.)
Bohužel instance invidious.cz byla opět zablokována. Koupil jsem novou doménu vhsky.cz, ale nyní všechny instance mají problém, s přehráním videa z YouTube. Tak snad to vývojáři brzo vyřeší a nedopadne invidious jako Nitter 😔
How many people do you know that have lost their messaging history on Whatsapp or Signal, photos etc during mobile phone transitions or breakage or through other shenenigans?
- export "everything" to a file and import it on any of the many different devices
- or just setup a second device through a QR code scan -- which was happily discovered here after an accidental factory reset libranet.de/display/0b6b25a8-2…
En mi opinión lo que sí beneficia a Sumar en este caso es el distrito único. En Galicia por ejemplo Sumar sacó bastantes más votos que Cacicada Ourensana, pero mal repartidos.
El tema de la movilización no sé que pensar. Hay mucha gente que piensa que a mayor movilización mayor posibilidades para la izquierda pero yo nunca vi eso tan claro.
@modulux estoy dispuesto a tragarme mis palabras si encuentras una elección en el estado español en el que una bajada de participación se tradujese en que ganó la izquierda.
No me consta el caso, pero sí casos en que la subida de participación no pareció beneficiar a la izquierda, aunque siempre es difícil distinguir si, con menor participación, habría sido aún peor.
Attached: 1 image
✨Groups by Pixelfed
Imagine if you could bring Facebook Groups to the fediverse, using your Pixelfed account!
Pixelfed Groups will be a separate and optional package that admins can install if desired.
mě tam přijde podivné to, že se to dělá přes pixelfed, protože tam zatím nejde podle mne ani napsat čistě textový příspěvek. Jakože jestli by nebylo lepší ty skupiny vytvořit spíš v mastodonu.
@Erwin_Schroedinger Textový příspěvek tam zatím nejde. Třeba to ještě vyřeší. Já hlavně myslím, že nejdůležitější jsou mobilní aplikace. Uvidíme, třeba to nebude špatná funkce 👍.
1/7 Přes naše území dnes přechází výrazné množství částic ze saharské pouště. Jaká je předpověď? Jak daleko mohou částice v ovzduší cestovat? Co je dálkový transport? Kde v Evropě je to největší problém?
Specializované předpovědi šíření saharského písku/prachu již několik dní avizovaly přechod těchto částic přes naše území. Takto nejnovější předpověď ze dneška na další dny od řecké předpovědní služby, která se na toto téma zaměřuje.
"If the attacker instead can just sneak the code directly into a release archive then it won’t appear in git, it won’t get tested and it won’t get easily noticed by team members!"
I really consider this xz situation a testament to the resilience of the open source community, and distros in particular. The damage did happen, but it was discovered rather quickly, despite how ridiculously sophisticated the attacker was, and the fallout was really contained to just "run an update asap". It didn't even land in most systems thanks to the stabilization process. It can't and won't linger for years like log4j did.
@mid_kid I tend to agree. Sure, ideally we as an ecosystem should detect these things faster, but one of the most advanced backdoor operation attempts ever, was mostly thwarted.
the attack was on sshd users via library, so your paragraph on dependencies applies to the thing as whole, too:
---
Added after the initial post. Lots of people have mentioned that curl can get built with many dependencies and maybe one of those would be an easier or better target. Maybe they are, but they are products of their own individual projects and an attack on those projects/products would not be an attack on curl or backdoor in curl by my way of looking at it.
@bamboombibbitybop yeah, they clearly identified a weak link in the chain and attacked it - successfully. An attack against sshd without attacking the ssh project. Quite clever really.
Do you remember #AntennaPodEcho from last year? It was a lot of fun thinking about the data we could show and implementing the screens that calculate and display your personal statistics! It's early on in the year, but it's time to start working on this year's Echo. Are you a (hobby) designer or Android developer, and interested in contributing to this cool gimmick? We're looking for you! Chip in on the forum and let us know 👇 forum.antennapod.org/t/prepari…
Yes, it’s a bit early: the end of the year is still 9 months out. But time flies and before you know it, it’s time to release an updated version of AntennaPod Echo! We were very happy with how it looked and with our users’ responses.
I liked it too. But only saw it because of the social media posts...I deactivated the start page on the left bar and therefore not saw it automatically... Would be a thing too consider as well!
We did consider it but our current position is that it might be too invasive for our average user, and we're rather safe than sorry. If it's something you would really like, or can think of another way to bring Echo to your attention with your use case, don't hesitate to create a request on forum.antennapod.org or via github.com/AntennaPod/AntennaP… @twojays
@redhathacker maybe something like a in app banner on top to made it visible and to know where to find it. And then you have a button to dismiss it or to activate it explicitly in the left bar maybe...instead of the start part...
@twojays We have discussed adding it to more/all screens (in addition to 'Home') but it would mean additional maintenance work in all screens for a block that shows only a few weeks per year. For now our idea is to add it also to the Subscriptions and/or Statistics screen only. But the side menu might be a nice option as well indeed. @redhathacker
@M We did consider but decided against it as it would defeat the purpose of having something special, for everyone at the same time. Basic statistics are available as usual via the Subscriptions screen (using the 📊 button in the top bar).
❇️ Artist: #DavidZinn in City: #AnnArbor USA 🇺🇸 2024 - Title: 🔴 "Ronan and Pete are definitely not up to anything, but they would like to know if you have a compass they could borrow." 🧭 🟡 "Ronan und Pete haben definitiv nichts vor, aber sie würden gerne wissen, ob Du einen Kompass hast, den sie sich ausleihen könnten." #StreetArt #Art #Chalkart #Urbanart #SidewalkChalk #Artist #Compass #Underground #Navigation #GoodMorning !☕🥐
Hmmm, if you were wondering how fast does the information move in our brain via neurons, here is an interesting article that noodles on some of these topics: khanacademy.org/test-prep/mcat…). Why couldn’t computers be that smart?
Od začátku vědecké fáze mise Vesmírného dalekohledu Jamese Webba uplynulo již dvacet jedna měsíců. Za tu dobu si tento přístroj vybudoval pevnou pozici mezi nejdůležitějšími astronomickými observatořemi současnosti, nejen kosmickými, ale obecně mezi …
This is a repository of apps to be used with F-Droid. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
Hi!
I was working through your tutorial in the beginning of my journey to port something to be able to run in wasi-sdk. This PR should fix a minor copy/paste error and update some of the error mess...
Figured out it’s possible to combine my bookshelf speakers with my laptop speakers using a tool called qpwgraph. I now have a four speaker setup. It rules.
Attached: 1 image
Steve Martin is a comic genius. Here’s a ‘personalised’ letter he used to send out to fans. That flip at the end is perfection.
#SteveMartin #comedy #letters
In case you missed it, you can use Mastodon's "Lists" feature to create themed mini-timelines with accounts you select. You can then hide these accounts from your main timeline if you want, so that it isn't so crowded.
daniel:// stenberg://
in reply to Nadim Kobeissi • • •Nadim Kobeissi
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Nadim Kobeissi • • •