Dear #Android #App #Developers, as it still happens far too often (no naming, no shaming! 💩 happens to everyone of us) a reminder to take good care of your #signing keys – and also take precautions for the case that your keystore might get lost. Please take a look at: f-droid.org/2023/09/03/reprodu… where I outline this topic.

Thanks!

#security

in reply to S1m

@S1m Key rotation does no longer work at F-Droid.org, but it does at IzzyOnDroid (as we implemented the suggested patches instead of accepting their implementation of the "POC fix" back then). If Key rotation is used, no notifications are needed; IIRC, Android handles that (we have only 1 such app yet). And establishing RB here does not require it either, as we only ship the APKs signed by their resp. devs to begin with (RB runs on a "parallel track" here).
@S1m
in reply to S1m

@S1m I have my doubts towards the former (that would mean rolling back their implementation, at least in parts, and using the suggested patches instead, which they rejected. The argument was that f-droid.org itself does not need key rotation, IIRC.). And as long as we still use fdroidserver, the only way we can notify is via the inlined per-release changelogs (aka "Fastlane changelogs"), which is what we do.
@S1m
in reply to S1m

@S1m which needs to be implemented serverside (fdroidserver writing the index) AND clientside (to show it). Without the index itself supporting it, there's nothing the clients can do. So: gitlab.com/fdroid/fdroidserver… ? gitlab.com/fdroid/fdroidclient… ? Does not look like this will happen.
@S1m
in reply to IzzyOnDroid ✅

@S1m the f-droid client doesn't handle key rotation. I think neo store and droid-ify allow disabling the key fingerprint check allowing android to handle the rotation but all clients will by default consider the key incompatible and not offer an update as the index format itself does not support key rotation even when generated using an implementation that doesn't flat out reject all APKs with rotated keys like fdroidserver does
@S1m

ondertussen is niemand nog verbaasd.
Buienradar verkoopt de locatie gegevens van zijn gebruikers.
bnr.nl/nieuws/tech-innovatie/1…

Volkswagen is dan weer slecht beveiligd... al even verontrustend.

Did you know that you can add and use "ephemeral profiles" where all messages get deleted after a set time? The "auto-delete from device" will keep your profile clean. It's a one sided ephemerality that you decide about, not your chat partners. Good for coordinating things without digital traces and where only "the current day" or "week" is important but not all the past history. Saved messages stay, though, until you explicitely delete them. #ephemeral #deltachat
This entry was edited (10 months ago)

Hi @Tutanota

I want you to know that your CAPTCHA is inaccessible for disabled people:
- blind people can't see the clock;
- visually impaired people may not be able to see it correctly too;
- dyscalculic people (like me!!) have difficulties reading a clock (moreover when all numbers are not written on it)!

I think this @w3c documentation should interest you to fix it: w3.org/TR/turingtest/

I hope you will do something so that everyone can use your services. Thanks.

#accessibility #a11y

This entry was edited (10 months ago)

Update: Thanks @pitermach showing a great demo that it's actually Mist World Upsampling to 48 in this demo, not NVDA downsampling to 16!
I stitched together an audio file showing you how bad it is at ignoring the setting of -1 as the output. Instead #NVDASR tries to be too smart, enumerate the list and gather which you have set as your sound mapper output, and explicitly call that sound device when passing to the TTS outputs.
I updated this to add a little more at the end and show how Mist World treats audio output switching properly, that I now know is not proper.
Good night, Mastodon. This really ruined my weekend at first, until that amazing demo in my mentions by @pitermach clarified things. :)
Update: People are asking, "how can I tell?" Listen for the sharpness of S's and other consonants. If you have the ear you'll notice.
This entry was edited (10 months ago)

BBC's Doctor Who Classic channel has changed it's handle name, so the old links won't work.

Here's the current working link:

youtube.com/@ClassicDoctorWho/…

It's a strange mix of serials that they've decided to post so far.

If you are new to "Classic Who", I'd recommend checking out Genesis of the Daleks, or Day of the Daleks.

If you want to check out some under-rated serials, maybe check out Warriors of the Deep or Underworld.

#DoctorWho

AI and Podcasting Real Talk with Sean Preece #TechnicallyWorking #podcastTechnically Working: AI and Podcasting Real Talk with Sean Preece (1h32m) castro.fm/episode/zayA0F

My new opinion piece at Scientific American has just been published.

"Our refusal to aggressively cut greenhouse-gas emissions isn’t a problem for some distant uncertain future; it has become our present-day reality. It is time to disavow climate denial and accelerate building disaster resilience in our cities and homes.'

scientificamerican.com/article…

A Survey of 'Know Your Rights' Resources for Immigrants and Their Families

'Know your rights' resources help communities prepare for escalating immigration enforcement activity. I reviewed dozens of these resources and identified 7 common themes.

austinkocher.substack.com/p/a-…

TIL big specialized forums have started backdating millions of LLM-generated posts. Now you cannot be sure a reply from 2009 on some forum for physics or maps or flower or drill enthusiasts haven't been machine-generated and totally wrong.

hallofdreams.org/posts/physics…

This Microwave Conversion Kit from the Canberra Blind Society (Australia) converts microwaves that are less than 5 years old in to a Talking Microwave for folks that are blind or low vision.
The page also has recommendations on which microwaves may work best.
I've not tried having this done myself as I'm quite happy with my tactile buttons on my standard microwave, but its an option.
$230 or so plus having an appliance technician install the kit for you.

eflc.org.au/product/microwave-…

reshared this

Even completely headless, command line #linux doesn't prioritize #accessibility in any way. Today I had to reinstall an entire #debian system from scratch because a drive listed in my /etc/fstab died. That makes #systemd boot into emergency mode, where you get no SSH, no network, no sound, and no screen reader. There is no quick way to force it to try and boot even though drive 7 of 11 has died, and it could absolutely bring up SSH and the network to let me fix it if it wanted to, just like sysvinit used to do. You can't even force systemd to add SSH and the network to emergency mode because of circular dependencies. nofail will only continue the boot if the drive doesn't exist, but if the filesystem has issues...emergency mode for you. In short: if your drive dies on Linux, fuck you. Be able to see, or reinstall your entire system, because nobody in Linuxland gives a shit about #a11y or your needs.
in reply to 🇨🇦Samuel Proulx🇨🇦

@Samuel Proulx @tuban_muzuru Hmmm, I am really really surprised the situation is as bad on your side. I do have a little different experience however I like your points related to inaccessible emergency shell access.
I am using single arch linux install from like 2012. Each time I get a new laptop I'll just boot off of live Arch Linux USB by looking up the boot menu keyboard shortcut in the manual of that laptop and OCR the screen once to find out which option is my USB device I have just connected. Every laptop I have used since 2012 had a sound working on the live media with included speakup.
When fully booted into the live USB I connect to the network prefferably via ethernet and use rsync to transfer my install into place regenerating initramfs at the end and adding linux kernel with its efi stub into the uefi partition to boot also setting uefi boot order by using efibootmgr.
I know I am not doing encryption since there is no accessible UI to enroll my own KSK into the bios or at least I don't know about it but I am otherwise used to do all of this on my own with no sighted help. And of course this is my primary system of choice. On those few additions that I broke something during an upgrade I have booted off the live medium again, chrooted into my broken system, fixed it and continued as normal. I must say I very much like this setup that I don't have to reinstall.

#TIL There is a solution called @yunohost. It's kind of an environment that allows you to install lots of apps. And my main insight was: there are LOTS of open-source web apps for everything. If I have enough time, I will definitely test many of them and document their #accessibility. I do remember struggling with some of them definitely, but some (like #NextCloud and #Miniflux) are decent. Here is their catalog: apps.yunohost.org/catalog

North Dakota Sued the Interior Department at Least Five Times Under Gov. Doug Burgum. Now He’s Set to Run the Agency.

The state was hostile to Interior Department policies during the Biden administration. A review of its lawsuits under Burgum reveals an aggressively pro-fossil fuel agenda.

propublica.org/article/doug-bu…

#News #NorthDakota #Government #FossilFuels #Energy #Oil #Gas #Climate

How Hitler Dismantled a Democracy in 53 Days. “In one of the most astonishing political transformations in the history of democracy, Hitler set about destroying a constitutional republic through constitutional means.” theatlantic.com/ideas/archive/…

🕹️ Title: The Battle for Wesnoth
🦊️ What's: A libre high fantasy TBS game
🏡️ wesnoth.org
🐣️ github.com/wesnoth
🦉️ fosstodon.org/@wesnoth
🔖 #LinuxGaming #ShareYourGames #Flagship #Strategy #Wargame
📦️ #Libre #Arch #RPM #Deb #Flatpak
📖 Our entry: 🛒️Homeless

🥁️ Update: 1.19.8
⚗️ Consistent version 🦍️
📌️ Changes: github.com/wesnoth/wesnoth/blo…
🦣️ From: 🛜️ github.com/wesnoth/wesnoth/rel…

🏝️ youtube.com/embed/4Ebww6utt9I
🎲️ youtube.com/embed/zEXjOg6fQhY?…
🎲️[fr] youtube.com/embed/?list=PLAn12…

Tech's core regulatory proposition is "it's not a crime if we do it with an app." It's not an unlicensed taxi if we do it with an app. It's not an illegal hotel room if we do it with an app. It's not an unregistered security if we do it with an app. It's not wage theft if we do it with an app.

--

If you'd like an essay-formatted version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

pluralistic.net/2025/01/25/pot…

1/

È vero che Bluesky batte Mastodon come numero di utenti, però guardate qui. Ieri pomeriggio @andreabettini ha postato una bellissima foto della Terra su entrambi i social, e ha ricevuto 20 condivisioni su Mastodon contro le 11 di Bluesky (dove ha anche più follower).

Ditelo agli influencer, da queste parti siamo più attivi! 😉