On the completely impossible situation of blocking the Tor .onion TLD to avoid leaks, but at the same time not block it to make users able to do what they want.
their will be other softwares than cURL which follow their RFC, I suggest oniux to add an option (or do it by default) to start a socks proxy listening on its namespaced interface and inform the child processs of it via *PROXY* env vars. cURL will handle this smoothly…
This is the kind of thing I deal with at work in the corporate world almost daily. Some group wants something to be a certain way, and they convince upper management to create a company wide rule for them that forces everyone to comply. Then later they realize their silly rule causes them trouble, and they show up at my door asking me personally to violate the company policy that they got implemented. I ignore them vigorously. It is funny to see this same thing play out in the wild.
So we’re half-way through the Month of LibreOffice, May 2025. And already, 216 contributors have won cool LibreOffice sticker packs! Details on how to claim them will be provided at the end of the month, but if you don’t see your name (or username) o…
Co-founder Italo Vignoli shares insights on the tech, the community, and what’s next for LibreOffice. LibreOffice is a powerful open source office suite that supports all platforms: Windows, Mac, and... Read More
Dear #Letsencrypt, you helped secure millions and millions of servers, not just web servers. But your announcement at letsencrypt.org/2025/05/14/end… about ending Ending TLS Client Authentication Certificate Support in 2026 because Google changes their requirements would result in your certificates becoming a possible risk for ensuring SMTP traffic. Please think again. Please.
Let’s Encrypt will no longer include the “TLS Client Authentication” Extended Key Usage (EKU) in our certificates beginning in 2026. Most users who use Let’s Encrypt to secure websites won’t be affected and won’t need to take any action.
Incredible (but predictable) : #Microsoft has blocked the International Criminal Court's access (#ICC) to its services on the orders of the #Trump mafia.
Read that carefully : an international organisation that has no presence in the United States and no US legal rights has had its work tools blocked simply because it disagrees with the Trump administration. 🚩
In a recent educational trick, curl contributor James Fuller submitted a pull-request to the project in which he suggested a larger cleanup of a set of scripts.
Great writeup and reminder about how easy it is to be tricked by the simple stuff. Using homoglyphs like these is relatively common in phishing emails, but we may not bee good enough at looking for them elsewhere.
I have made GitHub aware of how I consider this a flaw in their site and an attack surface they are not helping much to combat. We will have to see how they respond.
Just opened a ticket to implement this on company level. I suppose that this is also a threat wenn people copy/pase code into our main production system 🫣
That reminds me of the case where a colleague had issues applying a log4j mitigation back in 2021. System wouldn't start because the command line was wrong. The recommendation he followed was nicely formatted and used a ‐ instead of -.
@elmuerte for curl we nowadays check for and warn if a unicode double-quote is found where a normal ascii double-quote was probably intended. Because so many people copy and past command lines from webpages that use unicode double-quotes...
YEah, the whole theory was weird from the start. I just knew it'd be faster internet. That's all I needed to know. Had covid twice and it was far worse than 5G. 😆
In this video, I showcase the work-in-progress redesign of Libervia’s web frontend. You'll see the new chat and blog pages, and a quick demo of available features. I hope to make an alpha release soon.
Today, Maxine Williams, Meta’s VP of Accessibility and Engagement, is recognizing Global Accessibility Awareness Day by showcasing our efforts to advance accessibility and building products that serve everyone.
New from 404 Media: Flock, the license plate reader company that has cameras all across the U.S., is now building a massive people lookup tool using hacked data. The plan is to "jump from LPR to person." Won't require a warrant. This is according to leak we obtained.
Flock, which has license plate readers (LPRs) all around the country, wants police to be able to “jump from LPR to person,” according to leaked audio obtained by 404 Media.
🎧 New Echo Tips Podcast Alert! 🎧 This week, David dives deep into the Library of Congress's "My Talking Books" Alexa skill for print disabilities. Get the inside scoop on what works, what could be better, and how it stacks up against similar services. From clunky controls to brilliant potential, we cover everything. creators.spotify.com/pod/show/… #Alexa #a11y
In this week's omnibus episode of the Echo Tips Podcast, host David Ward provides an in-depth, yet constructively critical, review of the Library of Congress's "My Talking Books" Alexa skill for individuals with print disabilities.
It’s Global Accessibility Awareness Day. AI is moving fast—but can it really make everything accessible? Or are we ignoring the basics? I wrote about this on Substack, including a new idea: Vibe Coding—building software with empathy, not just code. Read & join the convo: taylorarndt.substack.com/p/hap… #GAAD #Accessibility #AI #VibeCoding #Inclusion
I am honored to share that I’ve been nominated for an Emmy as host of PBS’s Serving Up Science - a series funded by the National Science Foundation.
This recognition is a testament to what federal science funding & public media can achieve when we invest in #science, education & evidence-based storytelling.
And it’s a reminder that curiosity matters & there is value in making science understandable & available to all.
If this resonates with you, I hope you’ll support science agencies & PBS.
I wrote about Great Replacement Grok and the growing number of ways that AI systems are working against their own users. It's the age of adversarial AI: platformer.news/grok-white-gen…
Innosearch AI and National Federation of the Blind Announce Strategic Partnership to Advance Digital Accessibility for Blind and Low-Vision Communities | AT-Newswire at-newswire.com/innosearch-ai-…
Innosearch AI and the National Federation of the Blind have formed a strategic partnership to make online shopping and digital services more accessible for blind and low-vision users. Plans include co-developed platform enhancements, user training, a checkout round-up donation, and a $10 welcome credit.
"Still masking?" Here's why one health professor hasn't stopped.
Sean Mullen, PhD, used to take risks. He trained in martial arts, traveled frequently, and lived a high-intensity lifestyle. But as research on the long-term effects of COVID-19 emerged, his priorities shifted.
Yup. Still. Because the pandemic didn’t end—it just got rebranded. We’re still dealing with an airborne, immune-damaging virus that doesn’t care if you’re over it. I wear an N95 or better everywhere I go. In the lab. In the classroom. On Zoom calls that turn into in-person meetups. I mask because it aligns with who I am now."
by Sean Mullen, PhD “Clowns to the left of me, jokers to the right…” That line plays in my head more often than it should—especially when I’m the only one walking into a conference ballroom, faculty meeting, or classroom wearing an N95.
Introducing Access Ableton, a new podcast created and hosted by me to help screen reader users get the most out of Ableton Live. Each week, we'll talk about a different aspect of producing music in Live, starting with the basics and going from there. After we cover all the major features, we'll move on to a more relaxed show where I discuss news, production techniques, and whatever else comes to mind as it relates to creating music in a DAW. If that sounds good to you, feel free to subscribe wherever you get your podcasts. The fun starts June 1.
@threlm4280 I have been getting tempted to get a Mac strictly for audio. I really despised using my Komplete on Windows because every time an update happened, my audio would take a dump. True or not Mac is more stable with audio production?
@EdenLinnea @threlm4280 I would say yeah, Windows is getting better and there isn't a huge difference between them AFAIK, but I find for the most part Mac just works when it comes to audio.
@threlm4280 Well, Windows inconsistency is why I quit making music. I got fed up with getting things fixed and then everything going to Hell when it forced an update. Now to decide between a MacBook Pro and Studio.
Of course, because nothing makes us safer and shows how we are saving or spending taxpayer money responsibly than buying a brand new luxury airplane for no needed reason.
Thanks to Michael for all of the time he put into this great resource, which is totally free to all, so go download your copy! Third edition of Personal Power: Getting The Most from iOS as a Totally Blind User | AppleVis applevis.com/guides/third-edit…
I'm happy to release the third edition of: Personal Power: Getting The Most from iOS as a Totally Blind User This book, freely available to all, was written to help totally blind people use iPhones competently and make the most of their capabilities …
Hi, Insiders! I’m Clint Covington, Group Product Manager for E+D Accessibility. To celebrate Global Accessibility Awareness Day, I’d love to share some of the biggest updates and features we’ve launched in the past year to make Microsoft 365 apps and…
The United States is turning into a very dangerous place. What protects a country is security reports from intelligence experts. But a new report revealed that Venezuela is most likely not controlling the TDA gang in the US.
It is an important conclusions based on facts. But also a conclusion, which Trump did not like, because if the US is not “under attack”, he cannot invoke the Alien Enemies Act. So the Trump administration decided to fire the intelligence experts.
John Brennan, Former CIA Director join Nicolle Wallace on Deadline White House with reaction to Director of National Intelligence Tulsi Gabbard, firing two i...
This Global Accessibility Awareness Day we'd like to shout out to our translators! NVDA has been translated into over 55 languages to provide access to technology for blind and vision impaired people around the world. Recently we spoke with Harun in Türkiye, who shared how access, in his own language, has helped him: nvaccess.org/post/harun-fast-l…
Tor has introduced this new cool tool they call oniux. On the page announcing it they show off a #curl command line that hasn't worked for two years... since curl nowadays refuses to resolve .onion names like RFC 7686 says.
Introducing oniux: Kernel-level Tor isolation for any Linux app. This torsocks alternative uses namespaces to isolate Linux applications over the Tor network and eliminate data leaks.
I did this The Tor Project just announced this very cool tool called oniux: oniux is a tool that utilizes various Linux namespaces(7) in order to isolate an arbitrary application over the Tor netwo...
On one hand you have people setting up LANs that have all their outbound traffic sent through Tor, and are supposed to work with any tor-unaware device.
On the other hand, saying "the LAN you're in is behind Tor" is exactly what an attacker would say to induce user devices to leak onion lookups...
Suggestion to formalize environment variable name ALLOW_DOT_ONION (or other) to be set to toggle and enable DNS lookup of the .onion TLD where an application otherwise would...
blocking special name resolution in the applications, without defined way to indicate when such resolution should be safe, were asking for this exact problem. Tor expected only whole applications to be onion enabled, not VPN-like behaviour. Perhaps special option in resolv.conf could enable passing onion names to DNS servers specified there. Local resolvers often block it properly anyway. Ideally it should have separate nsswitch module and not using common DNS plugin.
it seems to me this RFC cannot work with network or system level .onion support and should be replaced.
I think applications need API to query system resolver, whether DNS is handled by localhost or trusted resolver. And if .onion names are considered a special handled domain. I think we lack both on Linux now.
This RFC assumes only per-application support can be safe. Applications should query the OS support and enable it if indicated. But resolver related apis are ancient already.
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
!["One of my favourite aspects of [NVDA] was that its entire interface was localised... I was surprised by its small size and very fast operation. Isn't this a wonderful thing? Take it anywhere and just connect".
-
Harun
Türkiye
(Black text on white with NV Access logo top and purple sunburst designs in the background)](https://fedi.ml/photo/preview/640/668382 "\"One of my favourite aspects of [NVDA] was that its entire interface was localised... I was surprised by its small size and very fast operation. Isn't this a wonderful thing? Take it anywhere and just connect\".
-
Harun
Türkiye
(Black text on white with NV Access logo top and purple sunburst designs in the background)")
Landry MINOZA
in reply to daniel:// stenberg:// • • •Troed Sångberg
in reply to daniel:// stenberg:// • • •tonnydourado
in reply to daniel:// stenberg:// • • •Wouter
in reply to daniel:// stenberg:// • • •Christen Lofland
in reply to daniel:// stenberg:// • • •