How the CNA thing is working out for #curl
daniel.haxx.se/blog/2025/04/24…
Do you remember how curl became a CNA early last year? I was reminded that I had not really gotten back to this topic and explained to you, my dear readers, how it is and how it has worked out. This curl-being-a-CNA thing I mean.daniel.haxx.se
uint_hash, Curl_uint_hash_init and others are used in the file. Regression of 657aae7.GitHub
The Seeing Assistant Go app supports the spatial orientation of blind and visually impaired people. It provides information about the surroundings using synthetic speech, sounds, vibrations and pointing in the direction of the top of the phone.App Store
reshared this
[This time around, #Trump isn’t just separating & jailing #immigrants, he’s separating & jailing families who are long time residents.]
THE #IMMIGRANT FAMILIES JAILED IN #TEXAS
#Children have long been put in migrant #detention if they were apprehended at the #border. Today, lawyers have found, #families are being removed from stable lives in the #UnitedStates.
#immigration #law #TheCrueltyIsThePoint #EthnicCleansing
newyorker.com/news/the-lede/th…
Now up to 363 university/academic signers -- more than 60 added in the last few hours.
Still silence from Dartmouth, Stanford, and the entire state of Texas.
"We must oppose undue government intrusion in the lives of those who learn, live, and work on our campuses."
FBI: Americans aged 60 and older reported losing almost $3 billion to crypto fraud last year. In total, Americans reported being scammed out of around $9.3 billion via crypto, out of a total $16.6 billion in total reported Internet crime losses that year.
ic3.gov/AnnualReport/Reports/2…
Pro-natalists aren’t actually interested in making motherhood easier by offering things like affordable childcare. So what is their aim?Moira Donegan (The Guardian)
“the pro-natalist movement...is not really interested in making parenting easier or less burdensome for women. It is not interested in making children more affordable, or making them healthier.”
“It is not interested in making pregnancy safer, or in making childrearing less damaging to women’s careers.
“It is not interested in these because all of these pursuits are in fact antithetical to the movement’s real agenda”
theguardian.com/commentisfree/…
Pro-natalists aren’t actually interested in making motherhood easier by offering things like affordable childcare. So what is their aim?Moira Donegan (The Guardian)
Pro-natalists' agenda “is to encourage primarily white births, to enforce regressive, highly hierarchal and stratified social roles, to push women out of the public sphere and to narrow women’s prospects for social, professional and intellectual life to little more than pregnancy, childbirth, childrearing and housekeeping”
“Despite the extreme anti-woman bigotry and regressive gender politics...American liberals have been hesitant to combat the right’s embrace” of it.
theguardian.com/commentisfree/…
Pro-natalists aren’t actually interested in making motherhood easier by offering things like affordable childcare. So what is their aim?Moira Donegan (The Guardian)
“women should be able, free and encouraged to live lives that do not conform to regressive notions of women’s proper roles as wives and mothers, that they should be free to invent themselves on their own terms – including as permanently childless adults. This is not, as the pro-natalists would have it, an abandonment of their biological duty – and it is not, as their liberal sympathizers would say, an example of cultural decadence.”
theguardian.com/commentisfree/…
Pro-natalists aren’t actually interested in making motherhood easier by offering things like affordable childcare. So what is their aim?Moira Donegan (The Guardian)
I invented this DIY book lamp to introduce children to electronics. I use it in STEM education, but it turns out to be a fun project for adults too.Volt, Paper, Scissors!
Attached: 1 image Apple and Meta furious at EU over fines totaling €700 million EU fines Apple €500M and Meta €200M in first Digital Markets Act penalties. https://arstechnica.Mastodon
It would be awesome if the voters in Carleton fired Pierre PoiLIEvre!
Conservative Leader Pierre Poilievre is at risk of losing Carleton riding as the party scrambles to send in volunteers to save the seat he has held since 2004... theglobeandmail.com/politics/a… #ABC #cdnpoli #polcan #elxn45
The Conservative Leader is in dead heat with Liberal candidate Bruce Fanjoy in Ottawa-Carleton, sources sayRobert Fife (The Globe and Mail)
That would be awesome if he lost his seat!
Pierre PoiLIEvre is in trouble in the riding of Carleton... thestar.com/politics/federal/c… #ABC #cdnpoli #polcan #elxn45
Today Melissa Lewis over on BlueSky pointed out that the font used in the infamous "You wouldn't steal a car" anti-piracy campaign was actually designed by Just van Rossum, whose brother, Guido, created the Python programming language (bsky.app/profile/melissa.news/post/3ln7hx5rhcj2v)
She also pointed out that the font had been cloned and released illegally for free under the name "XBAND Rough". Naturally, it would be hilarious if the anti-piracy campaign actually turned out to have used this pirated font, so I went sleuthing and quickly found a PDF from the campaign site with the font embedded (web.archive.org/web/20051223202935/http://www.piracyisacrime.com:80/press/pdfs/150605_8PP_brochure.pdf).
So I chucked it into FontForge and yep, turns out the campaign used a pirated font the entire time!
reshared this
Meta today announced that it is rolling out a new live translation feature to all Ray-Ban Meta glasses users, providing wide access to functionality...Juli Clover (MacRumors.com)
FYI Air Canada violated the provincial Consumer Protection Act!
Québec Court of Appeal is ordering Air Canada to pay passengers more than $10M in damages in a class-action lawsuit that alleged passengers were charged higher amounts than the ticket price advertised: cbc.ca/news/canada/montreal/ai… #baitandswitch #cdnpoli #polcan #polQC #QCpoli #assnat
The Web Applications Working Group published UI Events KeyboardEvent key Values and UI Events KeyboardEvent code Values:as W3C Recommendations.
key Values defines the key attribute values that must be used for KeyboardEvent’s key attribute. The code value contains information about the key event that can be used to identify the physical key being pressed by the user.
Read more at:
w3.org/news/2025/ui-events-key…
The Web Applications Working Group published UI Events KeyboardEvent key Values and UI Events KeyboardEvent code Values as W3C Recommendations.W3C
I know Chrome is the browser everybody loves to hate, but I think most would agree this would be very bad.
Canadians now labelling American food with a “T” in a black triangle symbol if it’s impacted by tariffs.
#food #tariffs #FascistAmeriKKKa #fascism #GreedyBastards #politics
Question to people doing electronics and other fields using very small units: do you use the name "thou" or "mil" for the unit representing 1⁄1000 inch?
Considering adding this in unit list in @GIMP. Wikipedia seems to say that Thou is more common globally (but North America) and it looks like @FreeCAD (a good reference!) uses "Thou" too.
Yet a reporter insists that "mil" is more common and that "thou" wouldn't be understood by engineers.
So which is it? 😄
Updated #curl bug bounty stats, six years in:
520 reports
78 confirmed security vulnerabilities
104 "informative" reports, bugs that weren't vulnerabilities
11 marked as "AI slop"
The rest were just different kinds of not applicable. Some more crazy than others.
The latest confirmed curl vulnerability (CVE-2025-0725) was reported 90 days ago.
There is currently zero issues in our queue.
The ride is coming to an end. The experiment is done. We tried, but we admit defeat. Four years ago we started adding support for an alternative HTTP backend in curl. It would use a library written in rust, called hyper.daniel.haxx.se
Boom, Movim 0.30.1 is out! ✨
In this new release you'll find a new avatar and banner configuration panel, animated GIF support in the picture proxy and some more improvements in the internal color palette management 🎨
Movim is also now supports the XEP-0392: Consistent Color Generation that allows you to have the same default color for your contacts between all the XMPP clients ☺️!
And as always bug fixes and improvements 😌
The complete release note on our blog: mov.im/community/pubsub.movim.…
Following last month's 0.30 Encke important upgrade here is the first bug-fix release! What's…mov.im
Before 8.13.0, it was not possible to generate them as it required calling the compiled binary, but this has been fixed. Forwarding the patch from https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=...GitHub
Whose Streets? Our Streets! is an exhibition of photos of protests in NYC taken from 1980 to 2000 by dozens of photographers.kottke.org
Any accessibility additions is a win for everyone!
Valve announces accessibility tags for Steam - Can I Play That?
caniplaythat.com/2025/04/23/va…
#Valve #Accessibility #Steam #PC #Gaming
Valve announced that accessibility tags are coming to game listings on Steam, making it easier to find games matching players' needs.Marijn / ActiveB1t (Can I Play That?)
PureOS Crimson Progress Update 🚀
Since July 2024, we’ve built a strong foundation—now climbing the stack!
March highlights:
• Faster USB charging
• Smoother touchscreen
• Speedier storage access
PureOS developer Sebastian Krzyszkowiak tackled major package updates, syncing key components from Debian Bookworm and patching PureOS-specific enhancements for devices like the Librem 5.
First alpha release coming soon. Stay tuned.
🔗 Learn More Here: puri.sm/posts/pureos-crimson-d…
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.Purism SPC
#AndroidAppRain at apt.izzysoft.de/fdroid today with 15 updated and 1 added apps:
* Calculator: calculator, unit converter, time converter, currency converter… 🛡️
4 #Magisk modules were updated at apt.izzysoft.de/magisk
Enjoy your #free #Android #apps with the #IzzyOnDroid repo 
This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).IzzyOnDroid App Repo
@Ryok141 I'm a random person. So there's that. Heh.The Dragon's Cave
What's wrong with people spamming the local timeline today? actually it's not just today. A block of tens of posts from the same person posting or reposting articles isn't fun or something people look forward to seeing.The Dragon's Cave
My @thunderbird regularly marks some S/MIME-signed mails with:
"Digital Signature is not valid!"
#TIL the reason: these mails are signed with sha1-algorithm which is considered insecure since TB 115.
There is a config to accept such signatures, see blog.thunderbird.net/2023/10/t…
However, I think the error message:
"There are unknown problems with this digital signature." is suboptimal.
Seems like an easy issue to fix, but on the other hand I was not even able to finde the appropriate repo. 😬
A change was made in Thunderbird 115.0 that rejects the use of the SHA-1 algorithm in digital signatures of S/MIME emails.Kai Engert (The Thunderbird Blog)
SHA1 is only part of the problem. The bigger part is, that the error messages is so vague. There should be a way to view the certificate so people can at least find out themselves why it might be invalid.
Also discussed here: reddit.com/r/Thunderbird/comme…
Enhanced step count algorithm axedRajesh Pandey (Android Police)
This is bullshit from someone who doesn't treat LLMs as tools. If you want them to interpret your asks and respond in a certain way, put that context in the system prompt and stop wasting tokens.
Saying "You act as though I always say please" is just as effective as actually saying it. Saying you want bullet points, or headed paragraphs, or responses without visual references, or whatever is even better. Not valuing politeness from a computer is even better than all of that.
I get asked a lot what's in my gigging template, so here's a demo of just that. Sorry it's so long, got a bit carried away.
Download: onj.me/media/Onj's%20Gigging%2…
Carlos Mogas da Silva
in reply to daniel:// stenberg:// • • •