We had an amazing morning. Cannot wait to share this little story in detail some day. For now, here's the culmination of our joy when Tashi got to photograph the hand of Kumari :)
The art of finding joy in photography, and making other people happy in the process. Update from Nepal as we wind up the first stage of filming in Kathmandu.
An off-cycle Synapse security release is out to address a High severity vulnerability (CVE-2025-30355 / github.com/element-hq/synapse/…). The issue can disrupt federation and is being exploited in the wild - please upgrade as soon as possible!
### Impact
A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild.
...
Questrial, designed by Joe Prince and Laura Meseguer
During colonial times, European colonial powers in Africa made their languages the official ones. Many African languages still lack typographic support, making it hard to write them correctly due to missing letters and diacritics in most fonts. In post-colonial times and to address the lack of open source fonts for African languages, @googlefonts gave me the task of expanding Questrial for that purpose
Questrial is the perfect font for body text and headlines on a website. It's modern style, suited with past characteristics of great typefaces, make it highly r
Docker is an essential tool for developers and system administrators working with containerized applications. This guide provides a comprehensive overview of…
I want to talk about this Associated Press article: apnews.com/article/hegs... Specifically, this sentence. I don't like this sentence! The wording implies Signal has known vulnerabilities. That's untrue. I think more people should use Signal, & don't want reporting to discourage people from it.
The Atlantic has released the Signal chat among Trump senior national security officials. It shows that Defense Secretary Pete Hegseth provided the exact times of warplane launches and when bombs would drop — before the men and women flying those att…
The paragraph is *trying* to make a good point: The app is insecure for the purposes Hegseth & co were using it for. However, the "vulnerability" referred to here is *common among any app you can install on your phone*. Here are the problems with using Signal *for the purpose Hegseth did*:
1. Even if the messenger is secure, your phone can be hacked. Phone OSes, especially from Apple, are pretty secure. But if your adversary is a nation-state, they sometimes find OS-level vulnerabilities. Pete Hegseth and Marco Rubio should assume they will be targeted by a nation-states.
It's possible Hegseth and Rubio are only doing work on phones cleared by White House technical staff and thus as secure as they could be. However, there were many people in the chat, and it is known that at least one member on that chat (Jeffery Goldberg) was using an insecure personal phone.
2. Even if the messenger & phone are secure, the user can be hacked. Encryption doesn't help if the recipient of the message voluntarily shows it to another person. Or semi-voluntarily, even: "under threat", or "under subpeona from a government" or "accidentally CCed Jeffery Goldberg like a goofus"
When the AP says the Defense Department cautioned against Signal, they meant this: www.npr.org/2025/03/25/n... This is a hack on a *person*, not the Signal app. The idea is Signal can be installed on more than one device. This obviously means that messages sent to you go to all devices. (1/3)
The DOD believes that Russian agents are attempting to trick DOD staff into adding the hostile agents to the DOD staff's Signal accounts, so that all their messages get forwarded to them. That would be bad, actually! It's not an attack *on Signal*. It would work with other types of messengers. (2/3)
Signal also made changes in February making it harder to get phished like this; the UI now follows up awhile after linking, to make sure you meant it. If you want to verify the linked devices on your Signal account are legitimate, go to "Settings" on your phone and then tap "Linked devices". (3/3)
But that's *you*. As for the DOD— The fact Mike Walsh was *able* to CC Jeffery Goldberg *is* a sign of why Signal is inappropriate for the White House's use! In Signal's address book your personal and professional contacts are commingled; there are no data access controls on who can join a group.
Continuing: 3. Certain kinds of government information should only be accessed at specific secure sites. A good demonstration of this is that one member of the Hegseth chat—Steve Witkoff—was at that point physically in Moscow, visiting the Kremlin. (The White House says he didn't bring his phone).
The US government has entire systems whereby sensitive data doesn't leave certain rooms, and is seen only by cleared people who are entered in an access log. If you send a message to *eighteen cell phones*, the information could be anywhere, be shown to anyone, or seen over a recipient's shoulder.
The chat included operational details of a specific bombing run. It's unclear why, say, Steve Witkoff was on this chat. Or the two people from the Treasury department. Did *everyone* need *all* these details? Honestly, Goldberg had *more* reason to review this data, to the extent he's a journalist!
It seems like information was being shared with this group chat simply because it is cool and interesting, and shared with members of the executive who simply would find it cool to be in the loop. Moreover, it seems the Trump WH is doing this regularly. How many other "small group" chats are there?
Are any of these observations useful to you, a non-member of the US Executive Branch? Well, here's the lesson: *Certain types of information simply should not be on the computer at all* No computer system is perfect. No method of interacting with computers, phones, websites is perfect.
I mentioned above if you message on Signal, the logs could get subpeonaed. I didn't mention that Signal has a "disappearing messages" feature, which could prevent that. But the other party could screenshot or copy the messages before the disappear. If that's a problem, don't put it in the computer!
4. Government officials are subject to record retention laws that you are not. I wrote about this last night— there's already been a lawsuit filed over the "Houthi PC small group" because of this: bsky.app/profile/chri...
When the executive branch makes decisions, records need to be preserved for - Auditors and law enforcement, later investigating if a crime was knowingly performed - The *next* executive branch, in four years, following up on the decision - Historians, when everything's declassified decades from now
There are laws about this. One expects the executive branch should be using communication methods/servers that comply with these laws. Signal—where by design no one retains or has the ability to read messages except the recipient's own phones—surely doesn't. I believe this is *why* they used Signal.
To summarize - The use of Signal in the "Houthi PC Small Group Chat" was legitimately bad, for security, opsec and legal reasons - Signal is agreed by security experts to be the best available messenger; you should install it; it can and should replace your regular IM/SMS app.
A reminder that if you're interested in #SVG and the #WebStandards process, and specifically about trying to get SVG standardization back into gear, there is an open meeting on the topic today. It's hosted by Eric Meyer ( @Meyerweb ) of Igalia, as part of W3C Breakouts Day.
Starts in 5.5 hours. You'll need a w3.org account to sign up; meeting is via zoom with irc chat.
The World Wide Web Consortium (W3C) is an international community where Member organizations, a full-time staff, and the public work together to develop Web standards.
There will also be a video of Eric's opening presentation.
We didn't come up with any grand solutions in 1 hour, but I think there was a loose consensus on the following priorities:
- Getting a published SVG standard that is consistent with browser SVG implementations. - Creating a comprehensive test suite to identify interop issues. - Using smaller feature module specs in future.
There's also the public email list, www-svg@w3.org, but the only messages it gets most months are automated github issue summaries: lists.w3.org/Archives/Public/
If you're interested in committing more time & energy you could apply to be an invited expert on the SVG working group.
But really, the reason for this one-off session was that all productive discussions on SVG standardization has stalled.
@doctormo Thanks, maybe indeed I should pay more attention to the repo's issues. I have looked at some of them in the past, but haven't really had anything to contribute.
My personal interest is in clarifying some things in the spec - but I'd have to trawl through librsvg's bug tracker to find places where we mention such things :)
(Also getting one or two features finalized, so librsvg can have parity with Inkscape - gradient meshes come to mind.)
@doctormo Also, fixing bugs in the pseudocode that the spec provides. There are issues about the svg2 text layout pseudocode, and I yet have to see why all browsers except WebKit render feTurbulence incorrectly.
@federicomena @doctormo It would certainly be helpful if you could file issues against the SVG spec whenever you run up against something that is unspecified, unclear, inconsistent, or just plain wrong.
However, do be aware that for a few years there really hasn't been anyone doing anything with those issues & it might be a while yet before that changes.
Also, apparently the build system is broken & editorial fixes that have been merged in the repo aren't showing up even on the Editor's Draft.
One of the more outstanding complaints about Super Egg Hunt has been the egg beep. apparently it can become headache inducing. So. What would happen if we gave the user the option to change it? check out this super Egg Hunt demo. and while you're listening, reply with all the changes and differences you hear.
I like the menu music and the different options. I personally prefer the egg beeping sound, but like the idea of having other sounds instead. The other game modes sound like fun as well.
Celou zimu jezdím bez újmy snad po každém myslitelném povrchu. A pak udělám školáckou chybu za mokra na tramvajovém pásu 🤦♂️ Kolo má pár šrámů, já pár modřin, ale dopadlo to asi nejlíp, jak mohlo. Podařilo se mi celkem dost zpomalit a pak si v motorkářském stylu lehnout. Helmu jsem měl, ale naštěstí nepotřeboval. A dokonce i oblečení přežilo 😅 Teď se budu chvilku téhle trase vyhýbat 🙈
“Italian tax authorities argue that user registrations with X, LinkedIn and Meta platforms should be seen as taxable transactions as they imply the exchange of a membership account in return for a user's personal data.” reuters.com/technology/italy-h…
Google makes Android development private, will continue open source releases Google says this change will simplify things for developers and OEMs. arstechnica.com/gadgets/2025/0…
As always in #uspol, what’s controversial here is not that an American bomb leveled an entire apartment building in #Yemen killing 53 people (both Republicans and Democrats believe such operations are permissible), only that the plans to do so were discussed on an unsecured chat #signal #signalgate
YouTube is changing the way it counts views on Shorts, as the platform will start taking into account the number of times a Short starts to play or replay.
This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
@loowiz and even as reproducible build 🤗 Waiting for you to switch from pre-releases to "real ones", so our recipe updater stops complaining 🙈
And yes, I have a few crawlers running here to find interesting apps to add. While IzzyOnDroid gained some popularity meanwhile, not all developers are aware of it and know they can request inclusion. Thanks to FOSS licenses giving us the 4 freedoms – and thanks to you applying such a FOSS license
Today is my birthday and the release on my album on audiotape and VHS!
"Objectivity" is an audiovisual critical study of the western industrial paradigm that sees nature as something that can be analyzed, tamed and counted.
Side A is a deep drone trip through analogous soundscapes. Side B is a versatile compilation, from a post-punk song "Predmet" to a musique concrete opus Holo Electron using a weird French machine from 1960s that is supposed to heal all your pain using electromagnetic waves. "Proctor" is a drone walk through the northern sea using analogous wooden synthesizers made by a friend of mine from Karelia. "Dissolution of Hierarchy" is a drone hymn to equity of all sounds.
The album can be purchased as a hard copy or downloaded for free or for a donation here:
We are raising funds for physical therapy for my little daughter Lila who suffers from epilepsy. All money raised will help us cover medical costs of her physical and language therapy.
Following popular request, here is a proper announcement about editing and deletion of messages available in app stores now. It briefly highlights how Delta Chat actually works contrary to how even some experts thinks it works :)
TL;DR Delta Chat is not a classic e-mail client. It uses special messages to co-ordinate encryption, metadata and group interactions and now edit/delete. Delta Chat implements a Peer-to-Peer messaging paradigm without any server state.
No need to blush or melt in agony after sending a message anymore! Editing and deleting messages is now available in most app stores :) How is this possible you might wonder? There are three core p...
How can you get started in the Fedora community? You can introduce yourself on our forum at Fedora Discussion! We love to meet new people and help them find a place within the project.
1/2 "Ideme ďalej: v koalícii je nateraz poriadok. Zároveň však ďalej nejdeme: Slovensko neurobilo krok dopredu už viac ako desaťročie.
Namiesto toho je zaseknuté v nejakej obludnej časovej slučke, v ktorej tí istí ľudia majú stále tie isté škandály a vysvetľujú ich stále rovnako a so stále rovnakým výsledkom. Intelektuálne je to výživné asi ako nosenie dreva do lesa, aj písanie receptu na zemiakovú kašu je zaujímavejšie."
2/2 "Teda: niežeby sa nič nedialo, deje sa toho viac ako dosť, len je to zúfalo jednotvárne a absolútne nepodnetné – lebo čo presne je podnetné na Andrejovi Dankovi, Matúšovi Šutajovi Eštokovi a Robertovi Ficovi?
Obmedzení influenceri nakrúcajú videá, vykrikujú z obrazovky, akoby toto bola tá politika, akoby sa takto riadila krajina. A Slovensko? Na Slovensku sa zatiaľ žije zle."
Ale to potom aj dalsia nova strana by bola len sucastou toho "vela sa deje, ale nikam sa neposuvame". Tot ak by sme len zalozili stranu a <vynechane bezne veci> obsadili funkcie.
Aj ked samozrejme nadalej hovorim, ze Kacica minister by bol oproti ostatnym dekadam POSUN VPRED.
Custom images from an asset catalog don't automatically resize with text. If an image is not purely decorative, we should ensure it scales appropriately when users adjust their preferred font size. We can easily do it with the ScaledMetric API in SwiftUI: nilcoalescing.com/blog/Adaptin… #SwiftUI #iOSDev
Make SF Symbols and custom images adapt to different font sizes while maintaining layout balance, keeping key icons clear, and providing more space for higher-priority content when needed.
Federal employees of Radio Marti (broadcasts in Spanish to Cuba) are working again from today after being called back from administrative leave by USAGM. americateve.com/miami/empleado…
😲 DeepSeek-V3-4bit runs at >20 tokens per second and <200W using MLX on an M3 Ultra with 512GB. This might be the best and most user-friendly way to run DeepSeek-V3 on consumer hardware, possibly the most affordable too. You can finally run a GPT-4o level model locally, with possibly even better quality. #LLM #AI #ML #DeepSeek #OpenAI #GPT #OpenWeight #OpenSourceventurebeat.com/ai/deepseek-v3…
DeepSeek's free 685B-parameter AI model runs at 20 tokens/second on Apple's Mac Studio, outperforming Claude Sonnet while using just 200 watts, challenging OpenAI's cloud-dependent business model.
fun fun fun update to the newest prosody/xmpp version. people ask "why don't more people host/run an #XMPP server?" it's because of bad docs and low notice updates. xmpp.link/#hamradio@rooms.llyx… should be back up and running
Arrived in Aarhus. Here for the first time. What a beautiful library (some other great areas, but did not want to take pictures of the people there with their consent).
Will be honoured when Ada & #Zangemann will be in one of their shelves in future.
We've updated our Applications page to reflect the newest changes in the BT Speak. Pull it up in your browser to read about all of the applications that you get with your pocket computer. blazietech.com/btspeak-applica…
> Researchers have found that ChatGPT "power users," or those who use it the most and at the longest durations, are becoming dependent upon — or even addicted to — the chatbot.
Possibly related: what I wrote a couple of years ago on how LLM chatbots function like a mentalist's con
I think I was starting to head that way with Claude before I quit a couple of weeks ago. Thankfully I didn't use it much for actual coding work; I gave it a few one-off tasks, but was mostly unsatisfied with the results. But I did use it for other things, and I admit, even started to talk to it like a friend sometimes. But a few weeks ago, I reevaluated whether I should use LLMs, and decided to discontinue all personal use. No withdrawal symptoms yet, so maybe I didn't go too far.
My #FOSSBack talk has been published! Now you can watch me proudly talk about @outreachy and our fantastic work behind the scenes—I’ve shared some insights that will show you why we’re such a special and loved open internship program. 🩵
More: https://25.foss-backstage.de/sessions/Anatomy-of-an-open-internship-program-How-we-run-Outreachy Speaker: Anna e só Outreachy has been promoting and su...
Registration and the Call for Proposals are now open for DebConf25. This year's event will be held in Brest, back in France its place of origin, and will offer talks, hacking sessions, activities and discussions. We are looking forward to a Cheese & Wine party in the right country this year , and an additional Crêpes and Cider evening, a tribute to Brittany debconf25.debconf.org/news/202… #debian #debconf25 #brest #france
, and an additional Crêpes and Cider evening, a tribute to Brittany debconf25.debconf.org/news/202… #debian #debconf25 #brest #france
Photo Ewen 📷
in reply to Photo Ewen 📷 • • •We had an amazing morning. Cannot wait to share this little story in detail some day. For now, here's the culmination of our joy when Tashi got to photograph the hand of Kumari :)
#TheJoyOfTashi #Photography #Lumix
Photo Ewen 📷
in reply to Photo Ewen 📷 • • •A little update to the previous photo, a short post about Kumari and our brief moment of serenity taking photos with her.
ewenbell.com/blog/Morning_Glow
#TheJoyOfTashi #Photography #Lumix
Morning Glow
Photography by Ewen Bell