mastodon - Link to source

I hope to hear from @Tutanota very soon. Lack of key verification is a major flaw in the technical design of the platform, allowing a malicious Tuta server to read end-to-end encrypted exchanges (both emails and shared calendars).

github.com/tutao/tutanota/issu…

The issue has been opened 6 years ago.

#Security #Privacy #Crypto #Cryptography #Email #FOSS

Message posted on the GitHub issue titled "Manual key verification": "This issue has been opened for more than 6 years now, with no clear roadmap or even real consideration from the Tuta team. I have to say, I am disappointed. You keep saying that "[...] Tuta [is] the most secure email service on the market.", but without key verification, a malicious Tuta server can read the end-to-end encrypted emails and shared calendars exchanged on the platform as there is no way to verify the recipients' public key. As explained by @llebout, "all users of Tutanota must trust Tutanota to not provide forged keys and perform an MITM attack". This is a significant flaw in the technical design of the platform, and it does not seem to bother you. In #198, it can be read that: > We are aware of the issues with verification, new protocol will support verification, the work is underway However, your post-quantum implementation has now landed but still no word on the key verification issue. Could you please stand by what you have said from day 1, that you prioritise security and privacy, and establish a clear roadmap of the work already undertaken or to be done to fix the situation? Thank you"
#foss #email #privacy #cryptography #security #crypto @Tuta
in reply to Skyper 💻🎧☕📖

mastodon - Link to source

Tuta

Thanks for your comment. We agree that key verification is important & we have it on our roadmap. We are working on it already & we want to implement it in a way that works nicely together with key rotation. We enabled post-quantum encryption for new customers by the beginning of the year, now we are in the process of upgrading existing customers & then we will deploy key verification. We already mentioned key verification when releasing post quantum encryption tuta.com/blog/post-quantum-cry….

mastodon - Link to source

Re-reading "The McRib As Arbitrage" in light of the entire no work from home, return to office push, and I find myself genuinly wondering how much labor exists - how many _companies exist_, even - primarily to serve as a utility function for corporate real-estate arbitrage.

I cannot tell you how grotesque this is, the idea that this might be real utility of so many jobs, bullshit or otherwise.

But there are a lot of bullshit jobs out there.

And....

web.archive.org/web/2020030306…

in reply to mhoye

mastodon - Link to source

mhoye

I think I'm going to double down on this.

Companies that are forcing return-to-office aren't doing that to better fulfill their corporate mission. By clinging to antiquated ideas of what management does and what leadership is these companies have allowed themselves to be co-opted into propping up failing corporate real estate arbitrage schemes. That's it, that's the whole story.

theguardian.com/commentisfree/…

This entry was edited (11 months ago)

mastodon - Link to source

1/4 "V lete prešla našimi médiami takmer bez povšimnutia správa, na ktorej ma prekvapili dve veci. Prvou bol samotný obsah správy, druhou bol jej minimálny ohlas vo verejnej debate, nehovoriac o debate politickej.

Tou správou bolo, že podľa oficiálnych údajov Eurostatu sú na Slovensku najnižšie čisté platy v celej Európskej únii…"

~ #IvanMikloš

komentare.sme.sk/c/23384498/po…

#ivanmiklos

mastodon - Link to source

Human composting should be a third option after burial and cremation.

My wife, Tui Davidson, spent her volunteer energy to provide a not-for-profit funeral service for Canberra. Five years later, they are a successful operation.

On Thursday, I was honoured and proud to attend her graduation from a social entrepreneur course called GRIST from Mill House Ventures. Earthly Remains is her human composting initiative and, as well as working with partners to develop the technology, she is lobbying the ACT government to create legislation to allow it, as 13 US states have done.

The GRIST program supported the creation of a short video which explains it better than I can.

She is also looking to collect data about community attitudes and would appreciate your input on a survey found at the website below.

earthlyremains.com.au/

#HumanComposting #environment #climate #cremation #burial #NaturalOrganicReduction #death #canberra

A pile of dirt with some grass on to being held in two hands.
The logo for Earthly Remains Canberra. A sub dawning between two hills.
#environment #climate #death #humancomposting #cremation #burial #naturalorganicreduction #canberra

mastodon - Link to source
This fun little test scene is using #SVG textPath elements to make an arching caterpillar, some bees, and a trail of ants coming out of an anthill. Except all the bugs are made out of #braille that spells out the type of bug it's making up. Using the Braille36 Tiger font and using Unicode Braille Pattern characters for the braille itself to be visifle and embossable. It's really fun reading the braille in a non-standard way around the paper! #Blind #TactileGraphics #BlindSVG
A leaf made out of grey outlines and a stem is in the center of the drawing. On top of the leaf, the braille characters spelling out "caterpillar" are arched mimicking the body posture of a caterpillar inching along. An anthill is at the bottom of the drawing, with a line of braille ants coming out of it and marching down the side and along the ground. Two braille bees are in the upper right and lower right areas of the drawing, flying in different angles.
#blind #braille #svg #tactilegraphics #blindsvg

mastodon - Link to source

Danke #Merz! Der Typ hat echt mal so keine Ahnung von der Realität…

Wie kann ein normaler Arbeitnehmer solche einen Typen bzw. die dazugehörige Partei wählen?
Politik für den Bürger? Fehlanzeige!

Und den Umweltschutz auf der Strecke lassen, ist ein Schlag ins Gesicht der jungen Generationen.

Wer #Merz oder die #CDU wählt, der wählt Rückständigkeit und soziale Kälte

taz.de/!6036751/

Text Shot: Doch kaum verklausuliert macht Merz auch klar: Unter seiner Regierung soll es einen ordnungspolitischen Rechtskurs mit weniger Sozialleistungen und Klimaschutz geben. Merz fordert eine „Agenda 2030“. Ar­beit­neh­me­r:in­nen müssten dazu gebracht werden, „wieder mehr zu leisten, als im Arbeitsvertrag steht“ – nur so könne die Bundesrepublik „Land der industriellen Fertigung“ bleiben. Das gerade erst eingeführte Bürgergeld will Merz genauso abschaffen wie „die überbordende europäische Bürokratie“.
#cdu #merz

mastodon - Link to source

"I say that NVDA changed my life, because only we know how difficult it is to get a job, and companies rarely want to pay for software licenses." - Mykael, Brazil.

Read Mykael's full testimonial at: nvaccess.org/post/mykael-makes…

Helping people achieve independence is our passion at NV Access. Thank you Mykael!

#Independence #Empowerment #Accessibility #NVDA #ScreenReader #NVDAsr

Photograph of user Mykael, seen from the right, sitting at his desk with his laptop in front of him.
#Accessibility #screenreader #nvdasr #nvda #independence #empowerment

mastodon - Link to source

I find myself really irked by the headline here. The problem is not a "simple website bug", the problem is that they wrote thousands of lines of code without ever thinking about what the trust boundaries are, or should be.

This is a massive design flaw. The idea that cars should be controllable from some mothership is bizarre (and not needed for app control - have a digital signature from the mobile device). The idea that cars are enrolled even if the user didn't set up an account is similarly broken. This isn't a "simple website bug" but a massive failure to consider the security implications of features.

⇧