After heartbleed in 2014, there were a lot of calls to abandon OpenSSL and support alternative libraries because it had written itself into a corner full of holes. I didn’t anticipate that 11 years later, there’d be a call to abandon OpenSSL because it’s written itself into a corner of running at 1% the performance of those very same alternative libraries haproxy.com/blog/state-of-ssl-…

Hi everyone on #Fosstodon and the #Fediverse. πŸ‘‹

I've posted a statement on our hub about the events of the past weeks and how we intend on doing better:

hub.fosstodon.org/fosstodon-co…

Tldr: Sorry about what happened, Fosstodon is committed to being a safe and inclusive space, and we're taking measures to ensure this won't happen again.

Please let me know what you think!

I guess it’s a good thing that the genocide in Ukraine has devalued your currency so much that 800,000 rubles isn’t actually that much money.

> By the ruling of the magistrate of judicial district No. 422 of the Tagansky district of Moscow, companies Threema GmbH and Pagebites Inc have been fined 1 million rubles each, and Gultsch & Weiss GbR has been fined 800 thousand rubles.

πŸ‡·πŸ‡Ί interfax.ru/russia/1024302
πŸ‡¬πŸ‡§ translate.kagi.com/translate/i…

Β«Π›ΡŽΠ±ΠΎΠΉ, ΠΊΡ‚ΠΎ Π΄ΡƒΠΌΠ°Π΅Ρ‚, Ρ‡Ρ‚ΠΎ ΠŸΡƒΡ‚ΠΈΠ½ остановится послС Ρ‚Π΅Ρ€Ρ€ΠΈΡ‚ΠΎΡ€ΠΈΠ°Π»ΡŒΠ½Ρ‹Ρ… уступок, просто Π³Π»ΡƒΠΏΒ» β€” Π‘Π°ΠΉΠ΄Π΅Π½ Π΄Π°Π» (theins.ru/news/281137) Π‘ΠΈ-Π±ΠΈ-си ΠΏΠ΅Ρ€Π²ΠΎΠ΅ ΠΈΠ½Ρ‚Π΅Ρ€Π²ΡŒΡŽ послС отставки
Экс-ΠΏΡ€Π΅Π·ΠΈΠ΄Π΅Π½Ρ‚ БША Π”ΠΆΠΎ Π‘Π°ΠΉΠ΄Π΅Π½ Π΄Π°Π» ΠΏΠ΅Ρ€Π²ΠΎΠ΅ ΠΈΠ½Ρ‚Π΅Ρ€Π²ΡŒΡŽ с Ρ‚Π΅Ρ… ΠΏΠΎΡ€, ΠΊΠ°ΠΊ Π² январС ΠΏΠΎΠΊΠΈΠ½ΡƒΠ» Π‘Π΅Π»Ρ‹ΠΉ Π΄ΠΎΠΌ. Π’ бСсСдС с Π‘ΠΈ-Π±ΠΈ-си ΠΎΠ½ сравнил ΠΏΠΎΠΏΡ‹Ρ‚ΠΊΠΈ администрации Π’Ρ€Π°ΠΌΠΏΠ° Π·Π°ΡΡ‚Π°Π²ΠΈΡ‚ΡŒ КиСв ΠΏΠΎΠΉΡ‚ΠΈ Π½Π° Ρ‚Π΅Ρ€Ρ€ΠΈΡ‚ΠΎΡ€ΠΈΠ°Π»ΡŒΠ½Ρ‹Π΅ уступки с ΠΏΠΎΠ»ΠΈΡ‚ΠΈΠΊΠΎΠΉ «умиротворСния», ΠΊΠΎΡ‚ΠΎΡ€ΡƒΡŽ ΠΏΡ€Π°Π²ΠΈΡ‚Π΅Π»ΡŒΡΡ‚Π²ΠΎ Π’Π΅Π»ΠΈΠΊΠΎΠ±Ρ€ΠΈΡ‚Π°Π½ΠΈΠΈ Π² 1930-Ρ… Π³ΠΎΠ΄Π°Ρ… Π²Π΅Π»ΠΎ ΠΏΠΎ ΠΎΡ‚Π½ΠΎΡˆΠ΅Π½ΠΈΡŽ ΠΊ Π“ΠΈΡ‚Π»Π΅Ρ€Ρƒ.
По словам Π‘Π°ΠΉΠ΄Π΅Π½Π°, Π’Π»Π°Π΄ΠΈΠΌΠΈΡ€ ΠŸΡƒΡ‚ΠΈΠ½ считаСт всю Π£ΠΊΡ€Π°ΠΈΠ½Ρƒ Ρ‡Π°ΡΡ‚ΡŒΡŽ России, Ρ‚Π°ΠΊ Ρ‡Ρ‚ΠΎ «любой, ΠΊΡ‚ΠΎ Π΄ΡƒΠΌΠ°Π΅Ρ‚, Ρ‡Ρ‚ΠΎ ΠΎΠ½ остановится», Ссли ΠΏΠΎΠ»ΡƒΡ‡ΠΈΡ‚ Ρ‡Π°ΡΡ‚ΡŒ Ρ‚Π΅Ρ€Ρ€ΠΈΡ‚ΠΎΡ€ΠΈΠΈ Π² Ρ€Π°ΠΌΠΊΠ°Ρ… ΠΌΠΈΡ€Π½ΠΎΠ³ΠΎ соглашСния, «просто Π³Π»ΡƒΠΏΒ».
Β«Π― просто Π½Π΅ понимаю, ΠΏΠΎΡ‡Π΅ΠΌΡƒ люди Π΄ΡƒΠΌΠ°ΡŽΡ‚, Ρ‡Ρ‚ΠΎ Ссли ΠΌΡ‹ ΠΏΠΎΠ·Π²ΠΎΠ»ΠΈΠΌ Π΄ΠΈΠΊΡ‚Π°Ρ‚ΠΎΡ€Ρƒ, Π±Π°Π½Π΄ΠΈΡ‚Ρƒ, Π΄ΡƒΠΌΠ°Ρ‚ΡŒ, Ρ‡Ρ‚ΠΎ ΠΎΠ½ ΠΌΠΎΠΆΠ΅Ρ‚ Π·Π°Π±Ρ€Π°Ρ‚ΡŒ Π·Π½Π°Ρ‡ΠΈΡ‚Π΅Π»ΡŒΠ½Ρ‹Π΅ участки Π·Π΅ΠΌΠ»ΠΈ, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ Π΅ΠΌΡƒ Π½Π΅ ΠΏΡ€ΠΈΠ½Π°Π΄Π»Π΅ΠΆΠ°Ρ‚, Ρ‚ΠΎ это Π΅Π³ΠΎ ΡƒΠ΄ΠΎΠ²Π»Π΅Ρ‚Π²ΠΎΡ€ΠΈΡ‚Β», β€” Π΄ΠΎΠ±Π°Π²ΠΈΠ» ΠΏΠΎΠ»ΠΈΡ‚ΠΈΠΊ.
Экс-ΠΏΡ€Π΅Π·ΠΈΠ΄Π΅Π½Ρ‚ рассказал Ρ‚Π°ΠΊΠΆΠ΅, Ρ‡Ρ‚ΠΎ обСспокоСн состояниСм ΠΎΡ‚Π½ΠΎΡˆΠ΅Π½ΠΈΠΉ ΠΌΠ΅ΠΆΠ΄Ρƒ БША ΠΈ Π•Π²Ρ€ΠΎΠΏΠΎΠΉ ΠΈ Ρ‡Ρ‚ΠΎ Ρ€Π°Π·Ρ€ΡƒΡˆΠ΅Π½ΠΈΠ΅ этих ΠΎΡ‚Π½ΠΎΡˆΠ΅Π½ΠΈΠΉ Β«ΠΈΠ·ΠΌΠ΅Π½ΠΈΡ‚ ΡΠΎΠ²Ρ€Π΅ΠΌΠ΅Π½Π½ΡƒΡŽ ΠΈΡΡ‚ΠΎΡ€ΠΈΡŽ ΠΌΠΈΡ€Π°Β».
Π§ΠΈΡ‚Π°Ρ‚ΡŒ Π² России Π±Π΅Π· VPN (storage.googleapis.com/kldscp/…)
ΠŸΠΎΠ΄ΠΏΠΈΡΠ°Ρ‚ΡŒΡΡ Π½Π° The Insider (t.me/theinsider) | Π—Π°Π΄ΠΎΠ½Π°Ρ‚ΠΈΡ‚ΡŒ (donate.theins.ru/en) | ΠΠ°ΠΏΠΈΡΠ°Ρ‚ΡŒ Ρ€Π΅Π΄Π°ΠΊΡ†ΠΈΠΈ (t.me/TheinsiderBox_bot)
in reply to daniel:// stenberg://

The Register gets the amount completely wrong, as we have paid over 86,000 USD in bug-bounties since 2019.

It's just not that visible on #curl's hackerone page since the payouts are manged by the Internet Bug Bounty since several years.

Update: I sent them a correction and they already updated the article!

#curl
This entry was edited (7 months ago)

❀️ - Trumps Bildungsministerin Linda McMahon erklΓ€rte am Montag in einem Brief, die Bundesregierung werde Harvard keine neuen ZuschΓΌsse gewΓ€hren, da die Hochschule gegen Bundesrecht verstoße und β€žihre gesetzlichen Pflichten, ethischen und treuhΓ€nderischen Aufgaben, Transparenzpflichten und jeglichen Anschein akademischer Strengeβ€œ vernachlΓ€ssige.

Harvard reagierte, überprüfte den Brief auf Rechtschreibfehler und Zeichensetzung und verâffentlichte ihn anschließend in den sozialen Medien:

β˜‘οΈ β˜‘οΈ β˜‘οΈ

This entry was edited (7 months ago)

This year's #LibreOffice Conference will take place in Budapest from 4 - 6 September, and the Call for Papers is now open: blog.documentfoundation.org/bl… #foss #OpenSource

Five years ago I got the chance to write "A book for my library is a book about my library". A #curl #book #review

daniel.haxx.se/blog/2020/05/07…

This is a gruelling summary of all the things wrong with OpenSSL haproxy.com/blog/state-of-ssl-… I've mostly watched this whole thing from the sidelines, but was also affected noting that private key parsing suddenly became 70 times slower. I think they've now improved it to "only" be 10-20 times slower, and there does not seem any effort to work on it any more.

reshared this

New research shows glitter that makes its way into the sea is actively disrupting a crystal-forming process known as biomineralisation, which affects how marine life such as sea urchins, corals and oysters form their shells and skeletons. This mineral formation also contributes to how the ocean helps regulate Earth’s climate by moving carbon through the planet. So the consequences could be far from pretty.
#Glitter #Environment #Oceans #Biodiversity #ClimateEmergency

theconversation.com/glitters-s…

Can WCAG be applied to mobile? Well, sort of… it maps quite well, as long as you carefully assess how each criterion works in the mobile context.

That's what the W3C's Mobile Accessibility Task Force has done, with a group of experts. We've just published our first public working draft of WCAG2Mobile: w3.org/TR/wcag2mobile/

This entry was edited (7 months ago)

RIP Skype (2025)

Died a slow agonising death from years of neglect after being acquired by Microsoft.

Skype joins a growing list of messaging software that has died in the care of Microsoft.

β€’ V-Chat (died 1995)
β€’ Comic Chat (laid to rest 1999)
β€’ Netmeeting (met demise 2007)
β€’ Windows Messenger (croaked 2008)
β€’ Meeting Space (expired 2009)
β€’ Office Live Meeting (passed 2011)
β€’ MSN Messenger (gave up ghost 2012)
β€’ Qik (kicked bucket 2016)

*not a complete list.

Skype.
You will be remembered.
In a nostalgic kind of way.
For a while at least.

This entry was edited (7 months ago)

reshared this

πŸ“’ Aktualizace Mastodon instancΓ­!
VΕ‘echny naΕ‘e Mastodon instance byly aktualizovΓ‘ny na verzi v4.3.8 βœ…

πŸ”Ή mamutovo.cz
πŸ”Ή mastodon.arch-linux.cz
πŸ”Ή zpravobot.news
πŸ”§ Pokud narazΓ­te na jakΓ©koli problΓ©my, dejte nΓ‘m vΔ›dΔ›t.
github.com/mastodon/mastodon/r…

Is...is there a Slack integration?

github.com/hotheadhacker/no-as…

How did I vote in the federal election on the weekend? The simple answer? I didn't. Why? Because blind people in Australia still can't vote without a middle man. someone between us and our ballots, filling them in for us.

πŸ—³οΈ Blind and vision impaired Australians still can’t vote independently β€” and that’s not just unfair, it’s undemocratic.
We deserve to vote privately, safely, and with dignity.
It’s time for real, accessible options β€” braille ballots, secure phone voting, equal rights.
✍️ I started a petition to demand change.
Please sign it. Share it. Help us be heard.
πŸ‘‡ change.org/p/let-us-vote-indep…

reshared this

in reply to daniel:// stenberg://

Not performance but security related; here's a CVE from 2019 that remains unfixed. OpenSSL finally acked it in 2024 as "feature request", with no plans to fix: github.com/openssl/openssl/iss… It affects Windows. Forks fixed it throughout the years.

Keynote Announcement: Dr. Richard Stallman

libregraphicsmeeting.org/2025/…

On Wednesday, May 28th at 19:30, Dr. Richard Stallman will deliver a keynote on Free/Libre Software and Freedom in the Digital Society at Libre Graphics Meeting.

See the details in the linked announcement regarding admission to the talk.

I also included a personal note on the decision, as I received mixed feedback.

--Lasse

#LibreGraphicsMeeting #LGM25NBG

in reply to Lasse Fister

@graphicore @halla @celesteh @federicomena @doctormo More practically and usefully: Why put yourself in the situation of β€œpicking a side” on a clearly controversial issue, where multiple orgs have seen enough to officially cut ties, when there are surely many other people who could enjoy a spotlight and benefit the actual topic - without the risk? Why choose to do this? Pragmatically, does the move make sense?
in reply to Matt Wilcox

standing up to bullies and against the injustice they promote through violence nearly always makes sense. that they choose violence to force others to join their character assassination campaigns is already a red flag that you don't wish to be on their side. that they demand swift submission, to deny people a chance to look into the facts, is more evidence that their violent tactics are not means to promote justice. now, of course, being a victim of their violence says nothing about you or anything who stood on their path is innocent; only looking into the facts can accomplish that. which is why they have to stop you so forcefully from seeking facts, isolating their victim and anyone else who defies their violence. it's really ugly, and it takes courage to stand up to them. but for anyone who cares about justice and against censorship and violence, standing up to them is the only move that makes any sense

(there are also plenty people tied up in false beliefs about the victims, induced by violence; whether they're mere victims of falsehoods or accomplices to the campaign of violence hinges on how they respond when called out for the violence they're participating in)

CC: @graphicore@post.lurk.org @lgm@post.lurk.org @halla@kde.social @celesteh@lgbt.io @federicomena@mstdn.mx @doctormo@floss.social

#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 13 updated (ugh, and 13 RB) and 2 added (also RB) apps:

* Screen Lock: quickly toggle the screen on or off with a single tap
* Pulse: redirect outgoing calls to Signal/Telegram/Threema if available

Current RB status: 587 apps (44.8%) covered and RB.

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:

in reply to Purism

#Meta couldn't respect our privacy even if it wanted: The politicians will start crying that it needs to spy on us in the name of safety, if we complain they make up bizarre stories about threats to children caused by the internet till they get their way. Corrupt corporations are a huge issue but secondary, the primary problem it all stems from is government and authority being out of control.
#meta
in reply to Purism

#Meta couldn't respect our privacy even if it wanted: The government will start crying that it needs to spy on us in the name of safety, if we complain they make up bizarre stories about threats to children caused by the internet till they get their way. Corrupt corporations are a huge issue but secondary, the primary problem it all stems from is politicians and authority being out of control.
#meta

So I was browsing the Internet today, and so I found some weird script someone made for Linux which takes a screenshot and describes it with Gemini. As usual, read the script before running it and all that, I obviously wasn't the one who created it because I don't code, so I cannot answer any questions about it or make new features or anything like that. But yeah I mean it's also AI, so don't use it, and Linux will obviously be filled with slop because of this awful person who added A11yAI to Linux, but yeah here it is:

dropbox.com/scl/fi/qy49ewvvj0g…

#ai #blind #linux

[New blog post]

Are CSS Carousels accessible? sarasoueidan.com/blog/css-caro…

In this post, I share some important insights from examining the accessibility of CSS-only carousels that use new features introduced in the #CSS Overflow Module Level 5 spec.

#a11y

#a11y #css
This entry was edited (7 months ago)

This #AI travel guide to Europe has at least been a useful educational tool for my youngest.. though possibly not in the way intended.
#NeverTrustTheAI
telescoper.blog/2025/05/06/an-…

PeerTube have updated their official app, you can now sign in with a PeerTube account πŸ₯³

Unfortunately Apple & Google are being crap:

:apple_old_logo: Apple App Store users can only sign in on the built-in server list, Apple won't allow manually adding servers

:Playstore: Google Play users can manually add unlisted servers

:fdroid: F-Droid users get a *much* wider server list and can add servers manually

You can avoid app store problems by using PeerTube's web app: fedi.tips/how-to-install-web-a…

Looking for a new laptop that runs Linux out of the box? Get a ThinkPad!

Lenovo has been offering ThinkPads with Fedora and @ubuntu preinstalled for a few years now. The more people who shop for these devices, the more attention they can give to this business!

Here's an article of someone discovering Lenovo's Linux program: news.itsfoss.com/lenovo-cuts-w…

#Fedora #Lenovo #ThinkPad #Linux #OpenSource

reshared this

I just discovered the amazing Evertop project by @cobble2stone @ericjenott! Evertop is a portable PC that emulates an IBM XT with an 80186 processor and 1MB RAM, running DOS, Minix, and other old 1980s operating systems, including Windows up to version 3.0. Powered by a low-power microcontroller and an e-ink display, it can run for hundreds or even thousands of hours on a single charge, thanks to its built-in solar panel and extreme power-saving measures. It's loaded with built-in peripherals like a keyboard, PS/2 ports, graphics support, audio output, serial ports, USB, Ethernet, WiFi, and LoRA radio. Charging options include a solar panel, DC input, and micro USB. It features a detachable keyboard, optional hibernate, and power shutoff. Storage is via SD card, and it's powered by an Espressif ESP32 microcontroller. Compatibility includes almost all IBM PC/XT compatible DOS software from the 1980s and early 90s. There's also a minimal version, "Evertop Min," which reduces weight and cost by removing some features. I'd love to see a model with a Raspberry Pi Zero for more productivity-focused tasks. Let's see if someone is already working on something similar! #Evertop #RetroComputing #PortablePC #OpenSource #DIY #TechInnovation #Emulation #OffGridComputing #ESP32 #RaspberryPi #Minimalism #Productivity #EInk #solar #solarpanel #Typewriter
⇧