Skip to main content



"3.1.1 Web pages
We crawl publicly available information using our web crawler, Applebot, and respect the rights of web publishers to opt out […] using standard robots.txt”

"3.1.3 Code
Code data is obtained from license-filtered[1] […] repositories on GitHub. The bulk of the code data covers 14 common programming languages, including: Swift, Python, C, Objective-C, C++, JavaScript, Java, and Go.

[1] MIT, Apache, BSD, CC0, CC-BY, Unlicensed, ISC, and Artistic Licenses.”
mastodon.social/@applemlresear…




The number of CNAs over time (#CVE Numbering Authorities). At 385 right now. Over 20,000 CVEs published in the first half of 2024.

From the "CVE Program and CNA Quarterly Report"

#cve


#trurl 0.14 is here. github.com/curl/trurl/releases…

Works best with libcurl 8.9.0 (and later)



@Jami So is there any more details on how to get SIP calls to work? How do I place a sip call to a number, specifically I'm uising hotvoip.com.
@Jami




I've just been told that Apple are transitioning to cleartext iBoot images. We already knew there wasn't anything naughty in iBoot (decryption keys had been published for some systems/versions, plus it's tiny anyway and doesn't have space for networking stacks or anything like that) but this means that, going forward, the entire AP (main CPU) boot chain for Apple Silicon machines is cleartext, as well as SMC and other aux firmware that was inside iBoot for practical reasons.

The only remaining encrypted component is SEPOS, but it's optional and we don't even load it yet for Asahi Linux. All other system firmware other than iBoot and the embedded SMC/PMU blobs was already plaintext.

That means that there is no place left for evil backdoors to hide in the set of mutable Apple Silicon firmware. All updates Apple publishes going forward can be audited for any weirdness. 🥳

(In practice this doesn't really change much for the already-excellent privacy posture of Apple Silicon systems running Asahi, which have always been way ahead of anything x86 since there's no Intel ME or AMD PSP equivalent full-system-access backdoor capable CPU, but it helps dispel some remaining paranoid hypotheticals about what Apple could potentially do, even if already very unlikely.)

reshared this



«Damit die Attacke gelingt, muss allerdings Python auf dem Zielgerät installiert sein. Daher sind in erster Linie Softwareentwickler und Poweruser anfällig für diese Sicherheitslücke.»
— oder Schüler, die an die Materie "Programmierung" herangeführt werden. Potentiell mögliche Opfer also

#Whatsapp-Sicherheitslücke erlaubt Skript-Ausführung | heise online heise.de/news/Whatsapp-Sicherh… #Bug #MetaPlatforms #Python :python:



I’ve done terrible things for money. Like getting up early to go to work.


Hello Jamers 🙂,

For those who missed it or didn’t have the time to click on the Dev update #10 link, no worries! We've got the highlights for you!

If you're curious and want to dive deeper, here's the link: jami.net/dev-update-10/

#Jami #opensource #P2P #App #PrivacyMatters



Apple Intelligence is rolling out in the 18.1 beta. I thought everyone, even Apple, said it wouldn't drop until early next year?
in reply to Alex Hall

Just as I thought… They are probably far from being ready, but marketing folks had to hype it up to get investors excited. Then, it makes more sense to line this up with the phone release.


Had to change the language part of Siri to English US before Join waitlist would show up for me in Canada. I also changed region to US, not sure if that helped though. Also During install for some reason Samantha was really quiet. They need to preamp it a bit.


OK. To those trying to join the Apple Intelligence waitlist using VoiceOver in iOS 18.1, you may notice that nothing happens when you push the button. This is because Apple wisely coded this as a screen modal, and something does happen, you're just not notified of it. You must explore on the screen, and towards the bottom you'll find a button to "join the waitlist" which you need to press again to confirm your choice. You'll know you have joined because it will say so, that it'll notify you.
in reply to Leo

@Lprazdnik I was a bit surprised at how sparce the Apple Intelligence & Siri settings are currently. I also couldn't find how to compose with it from within the Messages app, nothing has changed there (Same text effects menu, same set of Messaging apps...) so there's for sure something I feel like I'm missing somewhere.
@Leo
in reply to Tamas G

it's possible that some of those features might be rolling out gradually.



Понедельник, опять возвращаться к pip...

Выяснила, что при запуске от рута он не использует BuildEnvironment. Вообще. Совсем. Принт, засунутый в __init__ не отработал



If you could speak to the future, what would you want to ask?

Some matters might just be idle curiosity, but others are life and death. If you only got one question, what would you most desperately want to find out?

Well, good news: the future has just gotten in touch.

My first fiction piece for the rebooted OnlySky!

onlys.ky/an-important-message-…

#fiction #future #optimism

This entry was edited (1 month ago)





10 simple security actions that keep you much safer online pcworld.com/article/2405341/10…



New app added to the Accessible Android apps directory: Brave Browser accessible with minor issues accessibleandroid.com/app/brav… #Android #App



#curl 8.9.1 is scheduled to ship on July 31, 2024

Fixing some annoying regressions

#curl


If the SV oligarchs want Lina Khan fired that must mean she is doing a good job.


Within the #disabled community, most of the comments around #AppleVis have been along the lines of: "how can the site continue?" Outside of it, the comments have been more like: "I hope a new resource can spring up to take its place."

I think some (not all) non-disabled people underestimate the amount of effort required to set up a space that is designed, contributed to, and dedicated to people with #disabilities. Persistent examples do not come along very often, and are far more rare than, for example, websites about HTML of which there were probably 200 new ones started today.

in reply to James Scholes

when BCAB was looking to transition into TAVIP, I regret very much not being in a position to throw money at a solution that combined a web portal, maling list infrastructure and first-class accessible app. It could have been a tremendous opportunity to do for the accessibility space what gov.UK has done for access to mainstream web standards.
in reply to Sean Randall

@cachondo Yeah we had big dreams for that, unfortunately never really came to anything. I don't think the people who responded to our RFP got it to be honest, and wonder what we could have done to push the point further.


Almost 48,000 comments, posts, podcasts, and app listings saved from AppleVis so far, with many thousands currently in my backlog. Please consider assisting with the archive efforts here using a tool such as Httrack or Grab-site. AppleVis is an incredible resource that has immense value, and if we can't save the community, we at least need to snapshot what it was--a tremendous treasure trove of tips, insight, and advocacy, that will likely never be matched (although I hope it will, of course.)
in reply to Tristan

It's one thing to shut down because the team has been run ragged and the community has made it, to put it lightly, an inhospitable place to be. It's another thing to discourage archiving of what is an immense resource with the full intention to take it off the web. It could cost dollars to either continue hosting the website in a read-only, archived format or promote archiving by others and the preservation on Archive.org. Instead, we got:
- reddit.com/r/Blind/comments/1e…
- applevis.com/terms
in reply to Tristan

I don't really agree with it, but again, they owe nothing. People's names are on that content and if there are errors, it gets out of date, etc., they may feel they will still be on the line for that if the content still exists. And again, they have to trust that whoever archives it will not modify or use it in a way they would be uncomfortable with. It's sad, yes, but it also is what it is. No one paid for it, so there was no contract and no rights. Gameover.
in reply to Jamie Teh

@jcsteh All true. I've mainly been driving for an internet archive-style dump, in that no single entity would be rehosting the content and making claims to it. It would be a neutral third party, have no costs involved, and would ensure that historical documents existed in some fashion. I think a single entity actively hosting an archive could be really detrimental and I do not blame them for having anxiety about that in the slightest. At the end of the day, they do what they want.
in reply to Tristan

Yeah, it does feel particularly odd that they'd push back on it being archived by archive.org or similar.
in reply to Jamie Teh

@jcsteh I think I missed something. I'm good with archive.org. David is quiet these days, quite understandably, but I can try to get clarification on this.
in reply to Jamie Teh

@jcsteh Specifically the kinds of archives that might show up in Google, are hosted by a single domain or person rather than a nonprofit tasked with doing this, etc, are all problematic. I briefly considered offering to do this but quickly pivoted because I just don't want to be responsible for all of the above reasons.


At Twitter, prior to the 2020 election, we anticipated that deceptively altering media (e.g., deepfakes) was going to be a potential issue. We developed policies on this as well as updates to the UI to indicate such deceptively manipulated media. We worried about bad actors, even people in power operating in bad faith, but obviously never anticipated the prospect of someone buying the whole platform to be that bad actor.


Your security, your control. PureBoot isn't affected by UEFI key leaks. No central signing keys means no central point of failure. #PrivacyMatters #PureBoot @pureos
puri.sm/posts/purisms-pureboot…


Important Apple-focused accessibility site to shut down (Link) sixcolors.com/link/2024/07/imp…


And here's what it didn't need to say. Lol! The person is looking down, and you
can see part of their face, including a gray mustache and beard. In the background, there is a wall clock showing the time as 10:10, a window with partially
open blinds, and some pipes running along the ceiling.
in reply to Martin in Toronto

my t-shirt this morning:
The picture shows a person standing near an open door with sunlight streaming in. The person is wearing a dark-colored T-shirt with a graphic of an owl holding a red coffee mug. The text on the T-shirt reads: "That's What I Do, I Read Books, I Drink Coffee, and I Know Things." The background includes a wooden fence and some outdoor elements, with a clear blue sky visible through the glass door.


UK Politics

Sensitive content

in reply to the magnificent rhys

UK Politics

Sensitive content

in reply to the magnificent rhys

UK Politics

Sensitive content



@storm do you remember the stuff you had to do to get games and the like to work with #Quickemu and #Windows 10?
in reply to Hunter Jozwiak

There was something I had to do with gpu drivers I think it was. I had problems getting Doom working, and I did find a solution. I'll check into it, finding the solution was harder than implementing it.


President Biden Announces Bold Plan to Reform the Supreme Court and Ensure No President Is Above the Law.
1. Constitutional amendment - No Immunity for Crimes a Former President Committed in Office
2. Term Limits for Supreme Court Justices of 18 years, with new appointments every 2 years
3. Binding Code of Conduct for the Supreme Court

This will require Congress to pass appropriate bills.

whitehouse.gov/briefing-room/s…
Opinion piece behind paywall at washingtonpost.com/opinions/20…
1/n

This entry was edited (1 month ago)


Sources: HPE is expected to secure unconditional EU approval for its $14B acquisition of Juniper Networks; the EC is scheduled to decide on the deal by Aug. 1 (Foo Yun Chee/Reuters)

reuters.com/markets/deals/hewl…
techmeme.com/240729/p5#a240729…



Everyone talks about model collapse to discredit AI LLMs, but this story’s point at the end is the most important. Retaining human data into a model eliminated most problems. I’m still very, extremely bullish on the future of #AI in our workflows. The AI you see today is the worst you’ll ever use the rest of your life. axios.com/newsletters/axios-ai…
#AI


A US court rules that US border agents must get a warrant before searching the electronic devices of Americans and international travelers crossing the border (Zack Whittaker/TechCrunch)

techcrunch.com/2024/07/29/us-b…
techmeme.com/240729/p8#a240729…



During the Berlin XMPP sprint, some XMPP developers worked on message formatting. Previously, formatting was done using simple markup (e.g. *bold*), which sometimes leads to unintended formatting and is limited in functionality. We now decided to transmit formatting information outside of the normal text, with optional fallback to markup for legacy clients. We worked on improving the specification and on support in three different clients, including @dino.

#dino #xmpp

This entry was edited (1 month ago)

reshared this

in reply to fiaxh

oh, nice, looks like I will have to add support in slidge soon then. :o)


New, by me: A federal district court in New York ruled that U.S. border agents must obtain a warrant before searching the electronic devices of Americans and international travelers crossing the U.S. border.

The judge warned that had they ruled in the government's favor, this ruling could have be used to target political opponents, who "would only need to travel once through an international airport for the government to gain unfettered access" to their devices.

More: techcrunch.com/2024/07/29/us-b…