mastodon - Link to source
🕛Z #NowPlaying at the top of the hour, 2 hours of relaxing #NewAge, #ambient, and #meditationmusic on Northern Lights: The New Age Show, #live with Kelly Sapergia. More information is at ksapergia.net/northernlights/. Tune in either by visiting theglobalvoice.info and clicking on the Listen Live link, or go directly to theglobalvoice.info:8443/broad… #TGVRadio #audio #radio 📺🗣️📻🎶🎙️🌌🌈🫣🫰🩵🪬🫶

Welcome to The Global Voice - The Global Voice

The Global Voice brings together an international team of broadcasters, producers and radio journalists to present for you a wide range of entertaining and informative programs.
The Global Voice
#audio #radio #nowplaying #ambient #live #newage #meditationmusic #tgvradio

mastodon - Link to source

"our commitment to an enterprise rooted in respect and inclusion is appropriate and necessary."

Diverse employees and suppliers have fostered

"creativity and innovation in the merchandise and services that we offer,"

- Costco Board.

98% of Costco shareholders agreed with the board.👍🏿

Segregationists denied.

axios.com/2025/01/23/costco-de…

Segregationists are going to test each and every one of you, to see where your heart is at.

If they haven't tested you already, they will test you soon.

Do you know what you are going to say?

reshared this

in reply to Hubert Figuière

hometown - Link to source

Rick Scott 🏳️‍⚧️

uspoli, canpoli, trade

Sensitive content

@Hubert Figuière

glitchsoc - Link to source

"È il principale ipocrita al mondo della libertà di parola": la battaglia di Elon Musk con Wikipedia fa parte della sua guerra alla verità


Elon Musk è arrabbiato con Wikipedia per aver riportato il suo presunto "saluto nazista". Ma i suoi attacchi fanno parte di una lunga e inquietante storia di tentativi di sopprimere informazioni che ritiene scomode

the-independent.com/tech/elon-…

@pirati


The likely reason why Elon Musk is mad at Wikipedia

Elon Musk is angry at Wikipedia for reporting on his alleged ‘Nazi salute’. But his attacks are part of a long and troubling history of trying to suppress information he finds inconvenient, writes Io Dodds
Io Dodds (The Independent)
@Pirati Europei

mastodon - Link to source

For those of you on mastodon social, please be aware that your instance is becoming a real headache for other instances and their admins. mastodon social has attracted/not blocked too many trolls and disinformation bots.

It's up to you whether you stay there, but people are blocking the whole instance to avoid these bad actors.

If you are worried about how to migrate to a new instance, fedi tips is a great help, with instructions on how to do the switch.

If you need help finding an instance that is a good fit for you, there is help for that, too.

fedi.tips/transferring-your-ma…

fedi.tips/which-server-should-…


Transferring your Mastodon account to another server | Fedi.Tips – An Unofficial Guide to Mastodon and the Fediverse

An unofficial guide to using Mastodon and the Fediverse
fedi.tips
in reply to Dale Reardon

pleroma - Link to source

Jason J.G. White

I'm fairly confident it will be Media Transfer Protocol (MTP), which is used widely by Android devices. Linux supports MTP, at least under the GNOME desktop environment, where it's mounted by default. Microsoft Windows supports it by default in File Explorer. However, macOS doesn't and you need to install additional tools that I haven't personally tried but which may work in this case.

glitchsoc - Link to source

Day three of Trump's term and the largest push for surveillance capitalism yet has been made: Project Stargate will be a $500.000.000.000 (500 billion USD) data center used for running a multitude of AIs with the purpose of spying on you.

Larry Ellison, the world's second richest man and CEO of Oracle, one of the main partners of Stargate, said:

“Citizens will be on their best behavior, because we're constantly recording and reporting everything that's going on [...]. We're using A.I. to monitor the video.”


— Larry Ellison, CEO of Oracle on how the company's A.I. systems will be used for in the future [Source: Business Insider]

This is who is in power now. This is the vision they have.

This entry was edited (10 months ago)

mastodon - Link to source
uspol

Sensitive content

#Accessibility #uspol
This entry was edited (10 months ago)

reshared this

in reply to Zach Bennoui

mastodon - Link to source

Tamas G

re: uspol

Sensitive content

@Zach Bennoui
in reply to Tamas G

mastodon - Link to source

James Scholes

re: uspol

Sensitive content

@Tamas G @Zach Bennoui
in reply to Tamas G

mastodon - Link to source

Curtis Wilcox

re: uspol

Sensitive content

@James Scholes @Tamas G @Zach Bennoui

mastodon - Link to source

Twilio says its adjusted operating margin will reach 21%- 22% in 2027, exceeding est. and up from 16.1% in the most recent quarter; TWLO jumps 11%+ after hours (Jordan Novet/CNBC)

cnbc.com/2025/01/23/twilio-ann…
techmeme.com/250123/p46#a25012…


Twilio stock surges after company issues optimistic 2027 profit forecast

Twilio wants to grow in conversational artificial intelligence while also becoming more profitable.
Jordan Novet (CNBC)

mastodon - Link to source

#AndroidAppRain at apt.izzysoft.de/fdroid today with 19 updated and 1 added apps:

* Remind Me! – Set alarms for a specific date in the future 🛡️

Enjoy your #free #Android #apps with the #IzzyOnDroid repo

And thanks for all your kind words and congratulations to our grant 😍


IzzyOnDroid F-Droid Repository

This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
IzzyOnDroid App Repo
#android #free #apps #AndroidAppRain #izzyondroid

mastodon - Link to source
A calque is a word that has been loaned *and translated* from another language. Some English calques: flea market, potsticker, beer garden, iceberg, refried beans, superman, scapegoat, stormtrooper, killer whale. englishlanguagethoughts.com/20…

Calque or Loanword?

Reading about Anglish yesterday, I realised that one of the most useful methods for proponents of this form of English is creating calques. What’s a calque, I hear you ask?
English-Language Thoughts

mastodon - Link to source
Voor onze veiligheid, vrijheid en welvaart hebben we meer grip & autonomie op onze digitale infrastructuur nodig. Ambities zijn er, maar dat wordt steeds meer zoals ‘wereldvrede’ roepen! Kabinet moet keuzes & een plan maken! Blij dat onze moties voor twee Zeekabels en een AI fabriek zijn aangenomen!

mastodon - Link to source

🐦 "Sans les étourneaux le chant des saisons s'éteint" : Faute d'étourneaux, #ExtinctionRebellion La Rochelle les placarde en tags dans leur ville.

👉 La population d'étourneaux décline depuis les années 70, les individus restant se concentrant dans les villes faute de haies bocagères / refuges et sur-usage de pesticides dans les champs nos campagnes 🌱

#extinctionrebellion

mastodon - Link to source
This post about I/O bound "ruby" apps applies equally well to Python, PHP, JS, or any other high-level backend language. We use tools with poor CPU performance and then self-soothe with fairy tales about things being "I/O bound" or "only a few critical loops being hot" and there is *some* truth to those tropes, but it's important not to let them become thought-terminating clichés about performance. Anyway, it's important reading: byroot.github.io/ruby/performa…

The Mythical IO-Bound Rails App

When the topic of Rails performance comes up, it is commonplace to hear that the database is the bottleneck, so Rails applications are IO-bound anyway, hence Ruby performance doesn’t matter that much, and all you need is a healthy dose of concurrency…
byroot’s blog

mastodon - Link to source

Mark Your Calendars and Join the Party!

We’re less than a week away from our 10th Anniversary Celebration on January 29th from 2:00-4:00pm PST! 🎉

Be part of this milestone event as we unveil our new mascot (a community-chosen favorite!) and celebrate a decade of innovation together. We'll be hearing from team members, both past and present, connecting with our incredible community, and reflecting on how far we’ve come.

We can’t wait to celebrate with you! 🎊

✨ Join the celebration in-app or on Zoom
aira.zoom.us/j/89073345341

Join our Cloud HD Video Meeting

Zoom is the leader in modern enterprise video communications, with an easy, reliable cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems.
Zoom Video

mastodon - Link to source

Some fascinating research out on hacking a Subaru via STARLINK connected vehicle service.

"On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK connected vehicle service that gave us unrestricted targeted access to all vehicles and customer accounts in the United States, Canada, and Japan.

Using the access provided by the vulnerability, an attacker who only knew the victim’s last name and ZIP code, email address, phone number, or license plate could have done the following:

Remotely start, stop, lock, unlock, and retrieve the current location of any vehicle.

Retrieve any vehicle’s complete location history from the past year, accurate to within 5 meters and updated each time the engine starts.

Query and retrieve the personally identifiable information (PII) of any customer, including emergency contacts, authorized users, physical address, billing information (e.g., last 4 digits of credit card, excluding full card number), and vehicle PIN.

Access miscellaneous user data including support call history, previous owners, odometer reading, sales history, and more.

After reporting the vulnerability, the affected system was patched within 24 hours and never exploited maliciously."

samcurry.net/hacking-subaru#in…

#cars #security #subaru @starlink


Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel

On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK admin panel that gave us unrestricted access to all vehicles and customer accounts in the United States, Canada, and Japan.
samcurry.net
#security #cars #subaru

mastodon - Link to source

Signal is a secure messenger, but there are interesting alternatives, such as @matrix , @session , @delta , @simplex or XMPP …

➡️ matrix.org

➡️ getsession.org

➡️ delta.chat

➡️ simplex.chat

➡️ xmpp.org

If you’d like to learn more about these options, have a look at the responses to this toot.

#matrix #session #signal #XMPP #messenger #decentralized #tech #technology #OpenSource #FOSS #WhatsApp #security #InfoSec #data #safety


Session | Send Messages, Not Metadata. | Private Messenger

Session is a private messenger that aims to remove any chance of metadata collection by routing all messages through an onion routing network.
Session
#xmpp #foss #matrix #opensource #infosec #signal #whatsapp #technology #security #messenger #decentralized #tech #data #session #Safety @The Matrix.org Foundation @Delta Chat (39c3) @Session @SimpleX Chat
This entry was edited (10 months ago)

mastodon - Link to source

Lest we forget the lessons of the XZ Utils backdoor, which was nearly a year ago now, I'll repost @ariadne's post about what we can learn from it: ariadne.space/2024/04/02/the-x…

I was thinking about this today because I happened to look at the transitive dependencies of a program that uses libxml2, and noticed that Debian's build of libxml2 depends on liblzma (the library in XZ Utils where the backdoor was inserted).

The XZ Utils backdoor is a symptom of a larger problem

On March 29th, Andres Freund dropped a bombshell on the oss-security mailing list: recent XZ Utils source code tarball releases made by Jia Tan were released with a backdoor.
ariadne.space
@Ariadne Conill 🐰
in reply to Matt Campbell

mastodon - Link to source

Matt Campbell

Then again, if a library is built with all unnecessary features and transitive dependencies eliminated, then depending on the library and the transitive dependencies, perhaps a lot of security updates become irrelevant.

Thinking about all this as I consider whether to build ffmpeg from source with minimal features. Perhaps ffmpeg is one of the worst offenders when it comes to "junk drawer" libraries as discussed in the article.

in reply to Josh Simmons

mastodon - Link to source

Matt Campbell

@dotstdy True. Still, the fact that a typical distro build of ffmpeg has lots of dependencies linked as shared libraries, even though one typically uses very few of them, means that someone could repeat an XZ-style attack via any one of them. If we don't at least modify our processes to avoid a repeat of the same kind of attack, then we've learned nothing.
@Josh Simmons
in reply to Matt Campbell

mastodon - Link to source

Glyph

@dotstdy I think ffmpeg lives in a different part of the ecosystem than openssh; specifically, the part where the code is big and complicated enough that you ought to be leaning hard into sandboxing and privilege reduction to limit its blast radius rather than trying to reduce its binary footprint (because even in the best possible case, the binary footprint is going to be huge, as josh points out)
@Josh Simmons
in reply to Matt Campbell

mastodon - Link to source

Josh Simmons

"one typically uses very few of them" isn't really true though, you'll use different codecs for different media, and fundamentally that requires a wide range of support libraries. furthermore, the xz backdoor was interesting due to *which* process it injected into - the openssh daemon. unless you start linking ffmpeg into openssh you don't have anything close to the same threat model.
in reply to Matt Campbell

mastodon - Link to source

Ariadne Conill 🐰

if that is your takeaway i think you missed the point.

the point is that application authors shouldn’t pull in junk drawer libraries for a few convenience functions, not that we should build multiple copies of the same library to support different apps.

or more directly to the point, the person who originated the patch all the linux distributions were using to integrate systemd’s readiness notifications and openssh should have just included a reimplementation of sd_notify(), which is a fairly trivial function to write.

in reply to Matt Campbell

mastodon - Link to source

equi

(self-plug:) here's how removing a junk drawer libraries looks like: github.com/FRRouting/frr/pull/…

I also think we should maybe move the "modularize and use dlopen() a bit more" slider a bit further out; and maybe there's room there for DX improvement as well (dlopen/dlsym are… clunky…). If the decision to include features can be made by installing packages, Debian doesn't _need_ to do "just the features required", it's the end user doing that with more and smaller packages.


remove libsystemd-dev external dependency & --enable-systemd switch by eqvinox · Pull Request #8508 · FRRouting/frr

Turns out the amount of code from libsystemd that is relevant to us is... almost nonexisting. To the point of it being simpler to just open-code our own notification function & looking at env...
GitHub
in reply to Matt Campbell

mastodon - Link to source

TheConstructor (he/him)

I like Gentoo for the fact, that you can decide if you want certain features, and can there by decide against certain dependencies. It's not perfect or complete, but it can remove the burden of updating everything by hand, and minimises the number of library copies. Not sure this will help you right now, but if you want to try something later, it may be interesting

mastodon - Link to source
Arrow Lake's had three months of Windows and BIOS updates to fix its performance, and my testing shows in some games, it's worse
pcgamer.com/hardware/processor…

Arrow Lake's had three months of Windows and BIOS updates to fix its performance, and my testing shows in some games, it's worse

I thought fixes were supposed to improve things.
Nick Evanson (PC Gamer)
This entry was edited (10 months ago)

mastodon - Link to source

In a community assembly, the Indigenous Ayuujk residents of Mogoñe Viejo, Oaxaca, decided to rebuild a resistance encampment on the path of the neoliberal Interoceanic Corridor megaproject in the northern part of the Isthmus of Tehuantepec.

avispa.org/pueblos-indigenas-d…

#Mexico #Oaxaca #Indigenous


Pueblos indígenas deciden retomar campamento contra Corredor Interoceánico; autoridades intensifican persecución - Avispa Midia

Existen procesos penales contra 24 personas defensoras del territorio quienes denuncian afectaciones por las obras del Corredor Interoceánico
Aldo Santiago (Avispa Midia)
#indigenous #méxico #oaxaca

pixelfed - Link to source

On Wednesday night I managed to capture Comet 2024 G3 ATLAS again

jamesbarfoote.co.nz/blog/captu…

#comet #space #g3atlas #g3comet #astronomy #landscape #newzealand #nz #aotearoa #newzealandphotography #wellingtonnz #wellington #astrophotography

Capturing a Comet

I set out to capture an image of the 2024 G3 ATLAS comet. It was an amazing experience seeing it with my own eyes. Capturing a Comet is not something that I've done before so I wanted to share my experience and what I learned along the way
James Barfoote
#astronomy #space #astrophotography #landscape #newzealand #nz #aotearoa #comet #wellington #wellingtonnz #newzealandphotography #g3atlas #g3comet

mastodon - Link to source

Happy 7th anniversary of becoming an official W3C standard, ActivityPub!

w3.org/news/2018/activitypub-i…

We're creating something truly special here with the fediverse, and I am so thankful for everyone who contributes to it, whether with your time, money, or just by sharing your thoughts, your creations, your silly little jokes. Keep it up!

#fediverse #activitypub #standards #OpenWeb #anniversary


ActivityPub is now a W3C Recommendation

The World Wide Web Consortium (W3C) is an international community where Member organizations, a full-time staff, and the public work together to develop Web standards.
W3C
#activitypub #fediverse #standards #openweb #anniversary

mastodon - Link to source
The Proliferation of Frivolous ADA Website Compliance Lawsuits: A Defense Perspective
lexology.com/library/detail.as…

The Proliferation of Frivolous ADA Website Compliance Lawsuits: A Defense Perspective

In recent years, an alarming trend has emerged in the legal landscape: the filing of mass lawsuits alleging violations of the Americans with…
Katie Fillmore (Michael Best & Friedrich LLP)

mastodon - Link to source
Report: Microsoft to Launch Smaller Surface Pro and Laptop Models With Snapdragon Chips this Spring thurrott.com/mobile/316214/rep…

Report: Microsoft to Launch Smaller Surface Pro and Laptop Models With Snapdragon Chips this Spring

Microsoft may be getting ready to launch smaller Qualcomm-powered versions of its most popular Surface devices, the Surface Pro and Surface Laptop.
Laurent Giret (Thurrott.com)

mastodon - Link to source

Najväčšou hrozbou pre #Slovensko je Robert #Fico

V jeho príbehu je logická diera. Nedokáže vysvetliť, v čom sú demonštrácie proti nášmu ústavnému zriadeniu, keď na nich ľudia žiadajú, aby sme neodchádzali z Európskej únie a NATO, aby sme nepodporovali vojnových zločincov.

Premiér, prezident aj vedenie parlamentu hovoria, že na Slovensku je ohrozená demokracia a republike hrozí prevrat. Snažia sa vyvolať zdanie, že je to vážne a že majú dôkazy. Akurát ich nechcú ukázať.

dennikn.sk/4425058/najvacsou-h…


Najväčšou hrozbou pre Slovensko je Robert Fico

Matúš Kostolný (Denník N)
#slovensko #fico
in reply to Peter Hanecak

mastodon - Link to source

Ľuboš Moščovič

Tieto ich dnešné výpoty stačí interpretovať oveľa jednoduchšie. Pripusťme, že majú úplnú pravdu. Ale ak by ju mali, tak sa dá veľmi ľahko a logicky predpokladať, že práve teraz OČTK a kľudne aj NAKA (či ako to teraz premenovali) vykopáva dvere súbežne na viacerých miestach, robí prehliadky a zatýkačky.
Pretože to by v prípade, že nekecajú, muselo nastať, ináč by tie ich včerajšie a dnešné tančeky značne komplikovali, ba až ohrozovali prácu zodpovedných orgánov.

No a keďže zatiaľ takú správu nikde nevidím, tak jediný logický uzáver je, že sú to iba politické blúznenia a priznanie sa k zneužívaniu SIS na politické manipulácie.

mastodon - Link to source

🇬🇧 After running #IzzyOnDroid on my own for over 10 years, we became a small team over a year ago. All done in our spare time, no grants.

That finally changed this week.

We're excited that we're one of seven projects being accepted for the NGI #Mobifree grant! 🥳

Finally we will be able to focus on some more things on our wish list that we've wanted to do for the community for a long time. Stay tuned, we'll update you with details later!

nlnet.nl/project/IzzyOnDroid/

NLnet; IzzyOnDroid

nlnet.nl
#izzyondroid #mobifree

hometown - Link to source

A hacker developed an "infinite maze" to trap web-crawlers/scrapers from AI companies

basically, if the server code detects that a web crawler from an AI firm is trying to scrape the site ...

... the code begins spinning up an infinite, nesting warren of new sham pages, filled with random text

so the crawler gets stuck crawling and scraping endless and meaningless pages

404media.co/email/7a39d947-4a4…


Developer Creates Infinite Maze That Traps AI Training Bots

"Nepenthes generates random links that always point back to itself - the crawler downloads those new links. Nepenthes happily just returns more and more lists of links pointing back to itself."
Jason Koebler (404 Media)
⇧