Look, it’s why we did Projekt:ONI 5 yrs. Ago…

If your ISP is compromised how do you stay private?

The FBI knows it’s suddenly a real problem, and they are advising people to use Signal. They know that Signal is not backdoored, and they know that encryption is a Net win for people, especially in these circumstances.

Long term, we need to be looking to solutions like Veilid Framework to deny any adversary from having access to our metadata…

but for now, Use Signal, Use TOR.

nbcnews.com/tech/security/us-o…

U.S. officials urge Americans to use encrypted apps amid cyberattack

Amid an unprecedented cyberattack on telecommunications companies such as AT&T and Verizon, U.S. officials have recommended that Americans use encrypted messaging apps to ensure their communications stay hidden from foreign hackers.

^{Kevin Collier (NBC News)}

Day 4 - #adventOfIOSAccessibility. Important information is often conveyed visually through icons, badges, or progress bars... These details can easily be overlooked. Please make sure they're part of your UI's components' accessibility labels or values for a more inclusive experience.

#365DaysIOSAccessibility

Today's Web Design Update: groups.google.com/a/d.umn.edu/… Subscribe info: d.umn.edu/itss/training/online… #Accessibility #A11y #WebDesign

Featuring @rianrietveld, @aardrian, @federcheese, @fossheim, @mgifford, @onsman, @johnallsopp, @angelikatyborska, @kevinpowell, @theadamsilver, @amberhinds, @MoritzGiessmann, @Kilian, @slightlyoff, @brucelawson, @tink, @Jayhoffmann, @bkardell, @chriscoyier, and more.

Apple Music free scripts are updated. Note these can now only be used within JAWS 2024 or 2025.

New in build 3.

JAWS is now far better at detecting field labels and album information.
This is the final build of the scripts prior to Christmas. hartgen.org/AppleMusicScripts

Exquisite points on WCAG 3 by Deque:

lists.w3.org/Archives/Public/w…

Anyone useing Paperless and can check if this app still works?

apt.izzysoft.de/packages/eu.ba…

It's repo had been archived half a year ago, and the last release was made almost 3 years ago – so it would be good to know if we should still keep it at #IzzyOnDroid or have to remove it as "no longer working".

Thanks for your help!

#callout #FediHelp #HelpNeeded

Did you know that ISO27001 says that "application security requirements should be identified" and include requirements you find in #OWASP #ASVS and #MASVS ? OWASP Cornucopia help you define these requirements. Play the game at copi.owasp.org ? #cybersec #appsec #infosec #threatmodeling #isms

Copi · Play Cornucopia O...

Několik lidí se mě o víkendu ptalo, jestli pořád dělám kroužky pro děti. Nedělám, protože #Ukrajina. Práce pro dnesnaukrajine.cz/ mě sežere tak 3.5 hodiny týdně. To je skoro přesně to, co jsem dříve věnoval kroužkům pro děti.

Můžete si říkat, že se vás válka netýká. Ale týká. A až si budete říkat, že je škoda proč už není akce XY, tak tohle je jeden z možných důvodů.

🎉 🏷️ GET EXCLUSIVE EARLY ACCESS TO TUTA LABELS 🎉 🏷️

1️⃣ Share this post
2️⃣ Tag two friends who would enjoy the security & privacy of Tuta Mail

One luckily person from each of our social channels will get exclusive early access to labels!

Look how pretty Filipino girl group BINI are. They could just make a living with their beautiful faces.

#Philippines #Asian #BINI #Music #PPop #OPM #Mikha #Aiah #Maloi

@pinoy

Dnes som našiel meč.

#Rogule 2024-12-4
🧝 5xp ⛩ 88 👣
streak: 1
🟩🟩🟩🟩⬜
⚔ 👻🦇👻🐺👹
🌰🌰🌰⬜🍄⬜⬜⬜💎

rogule.com

Rogule

A dungeon a day keeps the Balrog away.

^Rogule

Thanks AI!

#crochet #knitting #yarn

I could use your help to populate this wiki page with information about how to get #trurl installed in your distros/OS/package system:

github.com/curl/trurl/wiki/Get…

Get trurl for your OS

a command line tool for URL parsing and manipulation. - curl/trurl

^GitHub

This is the screen in a Chevrolet Tracker LTZ 2024 car (Thanks Diego!)

#curl

👀🔎 La scorsa settimana le aziende Big Tech hanno pubblicato i loro primi report su come valutano i rischi sistemici delle loro piattaforme per gli utenti ai sensi del Digital Services Act dell'UE. Ecco cosa abbiamo scoperto finora: 🧵

Il post di People vs BigTech

@Etica Digitale (Feddit)

Il modello di business basato sulla sorveglianza, i sistemi di raccomandazione tossici e le caratteristiche di progettazione che creano dipendenza (il vero modello di business di questi giganti della tecnologia) non sono considerati fonti di rischi sistemici.

Invece, i report si concentrano sul sintomo (comportamento scorretto dell'utente, moderazione inefficace dei contenuti), ignorando la causa principale: una cattiva progettazione della piattaforma.

Ciò nonostante, le prove schiaccianti che questi sistemi causano danni, tra cui la diffusione e l'amplificazione dell'odio, della disinformazione, della divisione e l'invasione della nostra privacy per profilarci e sfruttare le nostre vulnerabilità a scopo di lucro.

Non affrontando i rischi legati alla progettazione della piattaforma e ai modelli di business, le aziende Big Tech hanno ignorato anni di ricerche indipendenti su questo tema, anche da parte dei membri di #PeoplevsBigTech

Le grandi aziende tecnologiche affermano di consultare stakeholder esterni per valutare e mitigare i rischi, ma sembra che nessuna delle +120 organizzazioni in @PeoplevsBigTech, comprese quelle che hanno pubblicato ricerche sui rischi sistemici relativi alle piattaforme di social media, sia stata consultata. La DSA afferma che dovrebbero. Coincidenza?

Ci sono anche lacune nei report, ad esempio Facebook non riesce a spiegare perché identifica alcuni rischi come bassi. Alcuni report non vanno molto oltre ciò che era già di dominio pubblico, con pochissimi dati concreti su metriche ed efficacia.

Sebbene la maggior parte delle aziende Big Tech fornisca informazioni su come mitigano i rischi identificati (alcuni dei quali sono stati suggeriti da gruppi della società civile ed esperti), nessuna di esse fornisce informazioni sull'efficacia di queste misure di mitigazione.

Ad esempio, Facebook cita l'uso di etichette di disinformazione e YouTube evidenzia la funzionalità "Breaking News Shelf" come esempi di misure di mitigazione, ma non ci vengono forniti dettagli significativi sulla loro efficacia.
Abbiamo bisogno di prove che queste misure di mitigazione funzionino (o meno) per poter giudicare se siano efficaci. Finora la ricerca ha dimostrato che le piattaforme dei social media sono progettate per coinvolgere, far infuriare e creare dipendenza, danneggiando la nostra salute mentale. Se ci sono prove del contrario, vogliamo vederle!

Anche la società civile deve essere consultata in modo significativo sui rischi sistemici correlati alle piattaforme dei social media. Avendo pubblicato molte ricerche indipendenti su questo tema, sappiamo una cosa o due sui rischi 😉

Restate sintonizzati per un'analisi più dettagliata dei report nelle prossime settimane 📑 Nel frattempo, potete trovare alcune delle nostre ricerche precedenti relative ai rischi delle piattaforme di social media qui e di seguito:

globalwitness.org/en/campaigns…

panoptykon.org/sites/default/f…

panoptykon.org/sites/default/f…

panoptykon.org/sites/default/f…

en.panoptykon.org/sites/defaul…

Ringraziamo il servizio di The Reader App per l'unroll

New era of slop security reports for open source

sethmlarson.dev/slop-security-…

Yup, you guessed it. It's the LLM-garbage. Again.

New era of slop security reports for open source

I'm on the security report triage team for CPython, pip, urllib3, Requests, and a handful of other open source projects. I'm also in a trusted position such that I get "tagged in" to other open sou...

^{sethmlarson.dev}

Today's DecRecs is this site which lists speculative fiction in translation (into English), and I'm linking you to this page which lists SF in translation available for free, categorized by year:

sfintranslation.com/?page_id=2…
And here is SF in translation categorized by original language (if it's freely available to be read, the link will be included after the title):
sfintranslation.com/?page_id=1…
#DecRecs

Sensitive content Reveal/hide

For some reason, there were several Alsatian chefs in Singapore where I grew up, so I often had tarte flambée / flammkuchen / flammekueche

It’s just something that brings me joy and comfort. Whenever I can I make it. I can make it. I can do it in 30 min, from dough to thing in my mouth!

#Food #Cooking

Basic Galactic Astrogation, or: How To Talk About Directions In Space

* north (up, towards the zenith, north generally the direction of the earth's north pole, but adjusted to be perpendicular with the galactic plane)
* south (down, towards the nadir, opposite of north)

* coreward (pointing from Sol towards Sag A)
* rimward (opposite of coreward)

* leading (left if viewed from clockwise spin which is convention for some reason, south facing north, bottom up; right if viewed with counterclockwise spin, top down. also sometimes called spinward)
* trailing (right if viewed from clockwise spin, left if viewed from counterclockwise spin. opposite of leading)

FBI releases PSA warning about all the ways that cybercriminals are using AI to commit fraud on a larger scale and to increase the success of their scams. The advisory warns about deepfaked videos and voice calls, as well as AI generated profile images to impersonate people.

Among their recommendations:

-Create a secret word or phrase with your family to verify their identity.

-Look for subtle imperfections in images and videos, such as distorted hands or feet, unrealistic teeth or eyes, indistinct or irregular faces, unrealistic accessories such as glasses or jewelry, inaccurate shadows, watermarks, lag time, voice matching, and unrealistic movements.

-Listen closely to the tone and word choice to distinguish between a legitimate phone call from a loved one and an AI-generated vocal cloning.

-If possible, limit online content of your image or voice, make social media accounts private, and limit followers to people you know to minimize fraudsters' capabilities to use generative AI software to create fraudulent identities for social engineering.

-Verify the identity of the person calling you by hanging up the phone, researching the contact of the bank or organization purporting to call you, and call the phone number directly.

-Never share sensitive information with people you have met only online or over the phone.

-Do not send money, gift cards, cryptocurrency, or other assets to people you do not know or have met only online or over the phone.

ic3.gov/PSA/2024/PSA241203

From the Freedom Scientific Blog: Join Us for Our December 2024 Training Events

blog.freedomscientific.com/joi…

Join Us for Our December 2024 Training Events

The Freedom Scientific training team offers ongoing opportunities for you to join us in live training sessions and advance your skills. We’re excited to announce our jam-packed December training sc…

^{Freedom Scientific Blog}

Trump tariff threat: Ambassador 'hopes' Canada can escape

ctvnews.ca/politics/trump-maki…

Trump making 'joke' about Canada becoming 51st state is 'reassuring': Ambassador Hillman

Canada’s ambassador to the U.S. insists it’s a good sign U.S. president-elect Donald Trump feels 'comfortable' joking with Canadian officials, including Prime Minister Justin Trudeau.

^CTVNews

"Right Wing President backs down"

It can happen, it is not inevitable.

theguardian.com/world/2024/dec…

#SouthKorea

South Korea’s president lifts martial law in the face of united opposition

Rightwing president backs down after most serious challenge to country’s democracy since 1980s

^{Amy Hawkins (The Guardian)}