S ohledem na to, že mi na každej inzerát na #bazoš už reagujou jen boti se nabízí otázka - máme někde federovanej #bazar, kterej by to řešil? Nějakej #marketplace na #fedi by totiž vůbec nebyl od věci, hashtagy jsou imho celkem málo
Samozřejmě bych mohl udělat skupinu, ale to nepovažuju za alternativu opravdovýho bazárku
Až/jestli na to nezapomenu, kouknu, jak je to technicky řešený - myslím, že je na místě něco takovýho nahodit, už je nás tu dost. I kdyby to mělo běžet na mý věčně OOM VPS
tak konečně jsem se to alespoň nějak punkově nachystal, budu rád za testování a připomínky k čemukoliv.
Flohmarkt je takovej hodně dřevní zatím, ale vypadá to, že vývoj jede pomalu kupředu a snad se to bude zlepšovat. Není to úplně hitparáda, ale federovaný to je a co chtít víc? :)
Překlad jsem nakonec na prasáka vystřelil přes Claude a doladil ke svému obrazu. Jen u dost věcí si nejsem jistý, kde je ještě uvidím, takže samozřejmě klidně hlaště chyby či návrhy na úpravy.
no já vím, od té jsem se odpojil, protože to přebíjelo naší vlastní federovanou timeline.
Nic proti witteru nemám, ale podle mě od jisté velikosti instance (do které jsme ale bohužel třeba my pořád nedorostli) je to právě nějaká místní "příchuť" federované timeline, která určí, jaký typ uživatelů která instance přitáhne. Nemůžeme být všichni úplně stejní, mělo by to být alespoň mírně tématické (i já tu naši všeobecnost pojal ironicky jako "fšeobecnost", což znamená, že tak úplně pro každého to stejně nebude... toho catch-all ducha si musí hlídat hlavně největší mastodonczech, což se mu dle zpětné vazby, kterou jsem získal od lidí mimo komunitu, které jsem se snažil nadchnout, rozhodně nedaří...)
@piggo hashtagy si jde subscribnout. podle mě se motáme v kruhu... když to bude mít účet publikující inzeráty a inzeráty budou správně opatřené jedním či více hashtagy, tak stačí, aby na každé instanci ten účet followoval jediný uživatel a inzeráty se budou šířit do světa.
Vlastně co bylo zbytečné bylo zakládat na to vlastní server se zakládáním vlastních uživatelských účtů. Stačilo se domluvit na hahtagové konvenci vkládání inzerátů...
Inzeráty jsou nekontroverzní, pouze při větší objemu hrozí lehký spam (ne každý chce vidět všechny).
Kde by se to bez specializovaného programování neobešlo, by byla třeba double-blind seznamka (zamaskovaná identita by byla odhalena až po oboustranném souhlasu, do té do by člověk komunikovat v podstatě s "bridgem"). Seznamka není jen erotická seznamka, někdy může člověk prostě jen shánět spolujízdu na hory nebo lidi na akce, který je nebezpečný dělat solo (třeba přechod nějakého horského hřebene apod.)
Další specializovaná aplikace, která by podle mě měla fungovat nad existujícími fedi identitami a nenutit si zakládat novou by byl sdílený kalendář akcí - něco mezi Google či Outlook calendářem, plánovačem akcí na NYXu a stačičkým Google Doodle...
Mě ta myšlenka hashtagu přijde skvělá, sám bych to využil, ale na první pohled mám pocit, že to teď nejde. Mám nejradši systémová řešení, takže uvítám, když se vrhnete na codeberg.org/flohmarkt/flohmar… zkusíte najít, jestli už to řeší a případně navrhnete řešení. Nebo mě kopnout, jestli to tam někde je a přehlídl jsem :)
New room versions on the horizon, Element Call turning your phone into a... phone? and your choice out of 536,558 (over half a million!?!) different individual community summit T-shirts - that and so much more happened this week in Matrix! matrix.org/blog/2025/07/11/thi…
* LuCI Mobile: take full control of your OpenWrt router 🛡️
And what a ride with 17 RB runs for the updated apps today. 6 of them needed adjustments to succeed, 2 unfortunately failed (devs are informed of course)…
This is a repository of apps to be used with your F-Droid client. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github, GitLab, Codeberg).
Receiving six or more prescriptions of the drug gabapentin for low back pain is associated with significantly increased risks of developing dementia and mild cognitive impairment (MCI)—29% and 85%, respectively—finds a large medical records study pub…
With the help of local LLM (Google Gemma 3) did a quick'n dirty thing to see what my IP address is in-browser. I know there's plenty out there, but just wanted to see if it could help me create a tiny php script and it did. Provides IP, reverse lookup and user agent. Super-simple.
aha, after a bit of googling I got the answers that you can get only one, either IPV4 or IPV6. That's what caught my eye, it basically does the same for the IP but different ways.
That's what I get, it returns the IP address you are actually calling with. I.e., if I'm calling your domain with my IPV6, it returns IPV6, otherwise IPV4. I might be wrong though.
ACCESS-Studie: Versorgung für schwer und schwerstbetroffene Menschen mit ME/CFS verbessern.
Die Studie der Medizinischen Hochschule Hannover (MHH) richtet sich an Menschen mit ME/CFS, die so schwer erkrankt sind, dass sie das Haus nicht mehr verlassen können.
Dabei spielt es keine Rolle, ob ME/CFS sich nach dem Long- bzw. Post-COVID-Syndrom oder nach einem anderen Virusinfekt, z.B. dem Epstein-Barr-Virus, oder anderen Auslösern entwickelt hat.
Die ACCESS-Studie der Medizinischen Hochschule Hannover (MHH) entwickelt Versorgungskonzepte für schwer und schwerstbetroffene ME/CFS-Betroffene – mit Fokus auf Hausbesuche und individuelle Behandlungspläne sowie der Erfassung der Prävalenz.
#VoiceOver experts, I need advice. I've got a component like what is shown here. Semantically, this is one element with a title, a slider to adjust the value, and a text field for manually editing it. I cannot figure out how to allow control of both the slider and text field. When I combine or ignore children and then programmatically set focus on the TextField with a custom accessibilityAction, it does focus, but VoiceOver does not announce the state. #SwiftUI
The Red Hat Containers team, which works on Podman, Buildah, Skopeo, and more, is looking for a Senior QE engineer to work in Brno, CZ. If you're interested, Red Hat would love to talk to you about the position! #podman #opensourceredhat.wd5.myworkdayjobs.com/J…
The Container Tools organization, part of RHEL Engineering, is looking for individuals with a passion for Open Source, automation and helping grow the impact of Red Hat’s Container Tool offerings for our customers and the community.
With the new EU legislation Cyber Resiliency Act (CRA), there are new responsibilities and requirements put on manufacturers of digital products and services in Europe.
Thank you for sharing this! It's likely that we'll be receiving this form soon, too. This helps us "get ahead" and have a template response ready beforehand.
IANAL, but adding a reminder for readers that open source stewards don't have many obligations under the Cyber Resilience Act and maintainers/contributors have zero. This form is likely being sent out to all "suppliers" (in the eyes of the company using the software) regardless of whether they know your obligations or not.
@sethmlarson I suspect more or less everyone that has an open source component in a commercial product or service soon will start getting variations of this...
Maybe? I'm kinda hopeful that we'll go through a period of "learning" where there'll be plenty of unwelcome forms being emailed to maintainers, we'll make a lot of noise, the industry will see that noise, and then people will learn that they are responsible for their open source component security and cold-emailing random people doesn't change that
That seems to be what happened with the SSDF, albeit at a much smaller scale than the CRA (US Gov versus any digital company selling in EU).
I'd say this is an opportunity for #FOSS maintainers to collaborate taking advantage of. These companies that have been fortunate to earn tons of money by using open software without contributing back, can no longed do that if they want to keep doing business in the EU.
What could be a good EU based FOSS interest group to manage this smartly, collect _fees_ to distribute to maintainer of the used software.
those riddiculous requests have been happening quite some time even without CRA. I would respond with a bill and public shaming. Having Said that, it’s probably best to have a static CRA page and SBOMs.
> Are there any vulnerabilities in the latest version which are not disclosed publicly? If yes, when will it be fixed and released? please mention in Remark column.
Probably! The fixes will be released some time after the vulnerabilities are found.
I'm curious: you characterize the EU #CRA as requiring #SBOM's *specifically*. I know the License Compliance Industrial Complex wants it to be true, but I researched this issue for my #FOSDEM 2025 talk… fosdem.org/2025/schedule/event… … & IIUC CRA *doesn't* specify SBOMs specifically. IMO, if the vendor gives the customer complete, Corresponding Source & a 100% @reproducible_builds they've complied with CRA. No one has shown me anything that disproves that.
@bkuhn @reproducible_builds @msw I mention it because that's major thing for lots of manufacturers. If you say you can avoid them I believe you but I think that's beside the point. Many (most?) manufacturers will still do them I bet, insist on them and use them. And the point for me isn't really the SBOM or not, but that manufacturers need control and awareness of the components and dependencies. That's why they will send forms like this.
@bkuhn @msw @lexelas @jeremiah_ hah, I've given up trying to tell what's going to happen but I am an eternal optimist. I'm mostly floating along trying to survive and have fun doing it.
wrote: > I'm mostly floating along trying to survive and have fun doing it.
I'm admittedly slightly envious. Such comments remind me in my deepest & truest heart, I'd rather be a FOSS developer again than a FOSS policy wonk who is constantly too busy at that to code.
I felt morally obligated to work on policy so FOSS developers could have fun while I did all the horrible work. Then it became a career.
The experience taught me it's possible to be *too* altruistic sometimes.😆
I think that the money-value of SBOMs (as an "information good", i.e. a digital artifact that you produce and sell) isn't particularly high.
What people want is an assurance that you are implementing, and promise to perform in the future, secure software development processes that include supply chain risk management tools and methods.
SBOMs might be something that can be produced as a side effect (i.e., "evidence of performance")...
@bkuhn @reproducible_builds @msw @lexelas I said as much directly to the NTIA years ago. Reproducible builds are far better for securing the software supply chain AND License Compliance.
Did you ever hear back from these people? I got one today that's similar to the point where I suspect it's from the same company, and I similarly pointed out that I wasn't their vendor and quoted my contracting rates. But I'm curious whether anyone is likely to bite or whether this is just a fire-and-forget exercise.
@cjwatson they did get back but of course never signed up nor paid for anything so I did not answer any questions. They were also unpleasant enough to ask me to respond to the questions while they worked out the contract details, which now looks like a blatant second attempt to the get answers for free. Emerson is the company I had contact with.
If you ask the new Grok 4 for opinions on controversial questions, it will sometimes run a search to find out Elon Musk’s stance before providing you with an answer! simonwillison.net/2025/Jul/11/…
If you ask the new Grok 4 for opinions on controversial questions, it will sometimes run a search to find out Elon Musk’s stance before providing you with an answer. …
You can now get push notifications using Reddit's webapp over @unifiedpush in browsers that support it. (IronFox and soon Fennec) #Reddit #deGoogle #UnifiedPush
In the latest State of the Thunder, we're introducing our new head of Community Programs and answering your questions about the upcoming Thunderbird Pro suite!
We've also been listening to your feedback, and each video now includes a detailed summary, along with our usual chapter breakdown and resources, to make it easier to get the information you need!
I'd love to have an easy way to drop my signature into emails I'm responding to, in case I get pulled into a conversation chain and need to add my credentials.
The way I'm doing it now is to create a new email and copy and paste it into the reply. A bit tedious, especially when Outlook makes it easy to do.
@cynical13 Thanks for the link, and it's only been a few month since it was posted, so hopefully it will get more comments and votes, including from people reading your comment!
Well y'all, I might have to go back to Windows. With Fedora 42, and Orca 48.6, I cannot use Google Docs well at all on Google Chrome, and on Firefox, the outline view which I use to navigate through many, many headings in a document I need for work, isn't usable at all. I can arrow up and down all I want, but nothing speaks.
Дослушала трилогию «Медвежий угол» Фредерика Бакмана в озвучке Михаила Хрусталёва. Про маленький городок на севере, в котором каждый живёт хоккеем.
Всё повествование построено на американских горках, примитивных, но неизменно выводящих тебя на радость и печаль. Поворотами вроде «он вернулся!» или «её больше нет».
Но я с удовольствием на этих горках покаталась, я знаю, что они бесхитростные, но мне приятно проживать эти эмоции светлой грусти, щемящей радости.
+ глубокий разбор хоккея в маленьком городке, как институции. Как он влияет на всех и каждого, какие проблемы и возможности приносит. Тренеры, воспитанники, их родители, социальное расслоение, жизнь после хоккейной карьеры и другое
Не могу назвать книгу превосходной или даже лучшей у Бакмана («Бабушка просила кланяться и передать, что просит прощения» и «Тревожные люди» на порядок сильнее)
Но я получила большое удовольствие, слушая эту трилогию. Может, она кому-то из вас тоже его доставит
Это не слушал, ибо не интересуюсь спортом особо (мягко говоря), но «Бабушка…» и «Вторая жизнь Уве» (а, ещё «Здесь была Бритт-Мари») классные. «Тревожные люди» стоят в очереди.
@menelion я тоже вообще не интересуюсь спортом. Эту книгу выбрала, когда сильно болела и могла разве что что-то слушать. Выбрала по причине «о, Бакман, добрые штуки пишет»)
Но кстати сейчас захотелось впервые в жизни сходить посмотреть хоккей!
Obracím se na vás s prosbou. Našel by se někdo, komu se doma válí starý kompaktní foťák, něco jako na obrázku? Potřeboval bych ideálně celkem 4 na dětský tábor. Stačí, když bude fungovat a fotky nebudou úplně mizerné.
Toot jsem smazal a změnil jeho viditelnost, teď lze i boostnout.
If Privacy and Security Matter—Invest in the Librem 5, Powered by PureOS (Debian Linux- Open Source).
In today’s hyper-connected world, protecting your data, privacy, and security isn’t optional—it’s essential.
The Librem 5 features hardware kill switches that give you full control over the device—including the OS, apps, camera, microphone, Wi-Fi, internet, and cellular connectivity.
Invest in privacy, security, and freedom here: puri.sm/
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy, freedom, and security
🎶 Entends-tu chanter les esprits de la montagne ? Peux-tu peindre en mille couleurs l'air du vent ? Peux-tu peindre en mille couleurs l'air du vent ? 🎶
Découvrez la chanson "L'air du vent" extraite du film Disney Pocahontas !Ouvrez la description pour voir les paroles.Toutes les musiques de #Pocahontas :http...
Serge Gainsbourg – Je suis venu te dire que je m'en vais.
Je suis venu te dire que je m'en vais. Tes sanglots longs n'y pourront rien changer. Comme dit si bien Verlaine : « Au vent mauvais », Je suis venu te dire que je m'en vais.
🎶 Il eut fallu voir le coq, et sa cuiserie et son croc Il s'est mis dans la chaudière, comme un vilain pot-au-feu Il est parti vent arrière, a péri au feu de Dieu .
Allons les gars, gai, gai Allons les gars, gaiement ! Allons les gars, gai, gai Allons les gars, gaiement ! 🎶
Provided to YouTube by PIASLe corsaire le grand coureur · Les NaufragésLes chansons phares℗ STUDIO de la LOGE/BONDAGEReleased on: 1996-01-01Composer: Traditi...
🎶 C’était une chouette maison où j’entendais, la nuit, Les camions fous du vent rugir au-d’ssus d’mon lit Et l’lendemain, je regardais la cavalerie charger Crinières blanches à l’assaut des rochers 🎶
🎶 The wind was a torrent of darkness among the gusty trees The moon was a ghostly galleon tossed upon the cloudy seas The road was a ribbon of moonlight over the purple moor And the highwayman came riding Riding, riding The highwayman came riding, up to the old inn-door 🎶
Listen now on your favorite streaming service. Powered by Songlink/Odesli, an on-demand, customizable smart link service to help you share songs, albums, podcasts and more.
"Prince Igor" is a song inspired by the Polovtsian Dances of Borodin's opera Prince Igor. The main vocals are performed by Warren G, the Russian refrain by S...
Ok, this redone version of the song "Prince Igor" contains only the Russian chorus with Sissel, apart from the end when Warren G raps a bit... And again I've...
Les Fatals Picards - Noir(s) Album : Coming OutSur une idée d'un ami, Martin, que je ne nommerai pas, une petite vidéo "clip" "diapo" (en gros, des images qu...
🎶 Ils ont pas l’air d’aimer ces airs, qu’on chante à la lune Alors on s’étale, via les ondes partout où y a du bitume Invasion des neurones, une phrase par catapulte Lourd à la pesée, et à chaque fois l’impact est rude On chevauche à cru, comme ces fiers mongols fils du vent Pas pour la réput', un éphémère vit plus longtemps 🎶
IAM – Intro "Pharaon reviens" (ou plutôt : Ministère égyptien de la culture et de l'orientation nationale – Son et lumière "Ici est né l'histoire" narré par Georges Delerue)
🎙️ Vous êtes à un instant ou le rideau de la nuit va s'entrouvrir sur la scène où s'est jouée le drame d'une civilisation Les personnages sont en place Depuis l'aube de l'histoire Entêtés contre le sable et le vent Et la voix du désert a traversé les siècles 🎙️
Provided to YouTube by Universal Music GroupLe renard · Tri YannLe Meilleur De Tri Yann℗ 1990 Mercury Music GroupReleased on: 1996-01-01Associated Performer,...
🎶 Marie-Jeanne-Gabrielle Entre la mer et le ciel Battu par tous les vents Au raz de l’océan Ton pays S'est endormi Sur de belles légendes Illuminant son histoire Gravées dans la mémoire Des femmes qui attendent Les marins d’île de Sein 🎶
Provided to YouTube by TuneCoreMarie-Jeanne-Gabrielle · Louis CAPARTPremières Chansons (L'Intégrale de "Marie-Jeanne-Gabrielle" à "Berlin)℗ 2010 LOUIS CAPART...
🎶 De la fraîche fontaine au troisième des cavaliers, Korydwen dans sa bouche de l’ève claire a versé. - Tu es jeune et tes yeux sont de jade émaillé, de quel pays viens-tu sur ta pourpre haquenée?
- D’où je viens sept moulins tournent dans les vents salés, qui font ma barbe rose comme rose du rosier. On me nomme Le Rouge à Kenholl où je suis né. Au Pardon de Sainte Anne, je m’en viens pour te mener! 🎶
Une histoire dans la tradition des gwerziou de Basse-Bretagne. La " gwerz " est un chant à caractère historique ou légendaire, les deux étant souvent mêlés d...
🎶 Mille neuf cent seize, mardi 15 février, et je suis sans nouvelles depuis le 20 janvier. Le temps me pèse et ta mère est alitée ; ton cousin Charles-Émile est à Nantes, blessé. Le vent t'emporte dans une boîte à biscuits du savon dentifrice et un gâteau de riz, des cigarettes et un peu de vrai café, mes pensées, mes "je t'aime" et des Pailles d'or brisées. 🎶
Provided to YouTube by Universal Music GroupLes pailles d'or brisées · Tri YannDouble Best Of Tri Yann℗ 1990 Mercury Music GroupReleased on: 2011-01-01Record...
🎶 Battu de vent, flottant bastion Battu devant, flots, tourbillons Battu, battant sang pavillon Soleil levant, noir sans rayons Noirs l'eau, le feu, la terre Noirs de feu les deux airs Le vent, la brume aussi 🎶
Provided to YouTube by Universal Music GroupLe soleil est noir · Tri YannLe Meilleur De Tri Yann℗ 1978 Mercury Music GroupReleased on: 1996-01-01Recording Ar...
Making a difference for kids in school, enables them to make a difference as adults in their community. Does your school have a student who could benefit from a screen reader? And a budget which could benefit from it being FREE? We have the solution!
Hey everyone, #Linux Access appears to be live! This is a really fantastic resource for beginning Blind Linux users! linuxaccess.org/ #Accessibility #A11y
Welcome to Linux Access This is your central hub for all things related to accessibility on Linux.
Here you’ll find articles, tips, and resources written by the community to help make Linux more usable for everyone.
not particularly impressed so far. Only 1 of their articles are datestamped appropriately, there's an encoding error with an apostrophe on the homepage and there's no indication of who's running the show.
will do. Nothing against Hugo as a platform, but as a hub for those new to the OS, readers aren't going to care either. Hope it picks up momentum and becomes useful, though.
I have been a long time Plasma Mobile contributor, but I have always had a keen interest in having Linux on my TV! I have noticed that in the past few months, the Plasma Bigscreen project has had some interest from people wanting to contribute, but t…
it is emotionally satisfying to see maintainers remind corporations that legal compliance in their own products and services is and always was their own responsibility and not that of Some Random Person In Nebraska
@musevg @otto Yeah they're just repurposing some boilerplate questionnaire. It's not ISO27001 either - there's no vendors in that standard. Only suppliers. Maybe TISAX or something?
@musevg @skyr right, because *they* (the commercial companies) are manufacturers that have those responsibilities. Even when they use Open Source components.
@skyr Yes, there's a ton of exceptions from CRA regulations for FLOSS projects. But they don't excempt commercial companies from their CRA duties when incorporating FLOSS in their products. See Recital 34.
I just wonder, as they explicitly mention libcurl "Version 7.87.0"... Say you would give them an answer, will they use this version until end of all times (because it's the one they assessed), or will they bother you again for every update? 🤔
@fubaroque in this case I actually hope that they feel pressured to get "official" answers before that date as it might increase my chances of getting them to pay for my answers.
I would love to see that questionary (with or without senders' company name) and your answers. You could have the opportunity here to start some kind of best practice for FLOSS projects with publishing all such questionaries+answers in some /cra directory on the curl website.
Maybe that's also an option for your support contract pricing model: Support contract with right to publish questionary+answers… normal price Contract with questionary+answers hidden… double price?
Send them a friendly reply and attach a proposal for an agreement. Include you estimate on how long it will take to prepare a response, and your current hourly rate.
@mitsunee That costs money. Would send them polite reply saying that it is opensource, info is available in README file and all support is best effort. Then would say that if they want more formal support including just providing answers to those my hourly rate is…
@lars and reading the questions they aren't doing any due diligence with their OSS dependencies otherwise they'd be able to answer these questions themselves...
This reeks of Accenture if you ask me – not the company itself but their folks within that org you mentioned. Doesn't make it better in any way though. *sigh*
Based on github.blog/open-source/mainta… you are at most a "steward" under the CRA and would have rather minimal requirement. This questionnaire definitely goes beyond that.
Having said that, the questions are extremely weaseley. "Is appropriate cybersecurity testing in place" can easily be answered with yes if no testing is mandated for you as a steward, but it sure is not what the asker expects...
The EU Cyber Resilience Act will introduce new cybersecurity requirements for software released in the EU. Learn what it means for your open source projects and what GitHub is doing to ensure the law will be a net win for open source maintainers.
I remember as part of the preparations for Year 2000 compliance my then firm sent something similar to our local sandwich supplier. Much embarrassment and a few apologies.
I haven’t the motivation to answer your questions so I’ve had my LLM complie these responses for your records. Should you require a considered, articulate, Human response, then contact me to make commercial arrangements. U til then, I hope the following is sufficient:
Is Secure Software Development Lifecycle followed for developing this component?
Absolutely. We follow the Secure Software Development Lifecycle of the Ancient Order of the Keyboard Knights, wherein bugs are ritually exorcised by moonlight. Our threat model includes gremlins, entropy, and the eventual heat death of the universe.
2. Do you provide regular security updates for “libcurl”?
Yes, on every second Tuesday that coincides with a solar flare. Security updates are broadcast via carrier pigeon to subscribers of our psychic mailing list. You’re on that, right?
3. Is there any discontinuation/End of life for the latest version of “libcurl” in near future?
Yes. Support will cease five minutes after you read this sentence. Any continued use past that is on you, your shareholders, and possibly your descendants.
4. Do you have Long Term support for “libcurl”?
Yes. LTS extends until the next time someone rage-quits after reading corporate compliance forms. Estimated duration: ∞ ± a nervous breakdown.
5. Is appropriate cybersecurity testing followed? If yes, is any specific standard for testing used?
We use the highly regarded YOLO/420 framework, which relies on vibes, sarcasm, and staring very hard at the code until it either confesses or crashes.
6. Are there any vulnerabilities in the latest version which are not disclosed publicly?
We don’t disclose them publicly. We disclose them secretly during developer sleep cycles. If you’re not picking them up, maybe update your firmware.
7. Is the vulnerability handling procedure available for “libcurl”?
Yes. It involves screaming into a GitHub issue tracker and then sacrificing a merge request under a new moon. Full documentation is encrypted into the Fibonacci sequence.
8. Do you comply with EU-CRA requirements?
We comply with a CRA—the Cosmic Randomness Accord—which governs the behavior of open-source electrons. The EU one, nobody knows but it sounds tedious.
9. Do you provide proof of conformity regarding adherence to EU-CRA?
Yes, we have a 1:1 scale interpretive dance reenactment available on VHS. Please provide your own tape and CRT for viewing and legal review.
⸻
Let me know if you want versions that walk the line closer to plausible deniability or should be translated into bureaucratic doublespeak.
suggested answer to question 3: "if I keep being pestered with idle questions by commercial entities who pay nothing whatsoever for the service I provide, all support will end forthwith."
I'm happy to answer in more detail for £100/hour, but the answers may turn out to be the same.
But in seriousness, it is more...
"No, this is free software, but as such you can fork it, take it on in to your own s/w dev team, and have them answer all those questions if you need for this."
I "love" the scare quotes and inconsistent font on every mention of "libcurl", just in case there was any doubt that this is a low-effort copy-paste job...
"Please review the source code and decide for yourself". Or you could send them a contract and availabilities, which may or may not be before that deadline.
Is Secure Software Development Lifecycle followed for developing this component?
ANSWER: The answer to this question will cost 100000 Euro to answer.
Do you provide regular security updates for “libcurl” ?
ANSWER: The answer to this question will cost 100000 Euro to answer.
Is there any discontinuation/End of life for the latest version of “libcurl” in near future?
ANSWER: The answer to this question will cost 100000 Euro to answer.
Do you have Long Term support for “libcurl”? If yes, please mention the version in Remark column
ANSWER: The answer to this question will cost 100000 Euro to answer.
Is appropriate cybersecurity testing followed? If yes, is any specific standard for testing used?
ANSWER: The answer to this question will cost 100000 Euro to answer.
Are there any vulnerabilities in the latest version which are not disclosed publicly? If yes, when will it be fixed and released? please mention in Remark column.
ANSWER: The answer to this question will cost 100000 Euro to answer.
Is the vulnerability handing procedure available for “libcurl”? if yes mention the procedure in the Remark column.
ANSWER: The answer to this question will cost 100000 Euro to answer.
Do you comply with EU-CRA requirements?
ANSWER: The answer to this question will cost 100000 Euro to answer.
Do you provide proof of conformity regarding adherence to EU-CRA? If yes, please mention details in Remark column
ANSWER: The answer to this question will cost 100000 Euro to answer.
NOTE: Paying for 1 question does not guarantee answering other questions. Payment is due upon request in full.
"Depends on what you pay me on a monthly basis for my support towards your company, fulfilling all you cyber needs regarding libcurl. Read the license agreement. Please find all further information on our website."
And if they use your software within their products, then they should already know all the answers if they had done their job right.
"As these questions can only be answered during an annual support contract, I would advise that in the interim that your usage of libcurl is halted immediately as these security questions cannot be responded to"
I wonder how much panic there would be in their dev team ...
My company is working through various regulations like this. Unlike whatever drone "kindly" sent you that request, we're working through all of that ourselves. We are certainly not dashing off smug little emails to Torvalds et. al.
Reading through your posts about CRA, I think there is a chance for a CRUde awakening for these companies.
A reality check even, about how open source actually works. Including having to read the licenses and realizing they use it, for free, on their own risk.
Leaving the eat the risk, get a support contract or stop using.
So after the initial drama, this could be a good thing for open source in the long run.
Not gonna lie, I looked up the Fortune 500 list by revenue out of sheer curiosity. There's a surprising number of companies with around $17 billion USD revenue, so that doesn't out them.
I (at webmaster@chiark) have had several vaguely like this (maybe pre-CRA) about PuTTY. I am typically much much ruder to them than @simontatham or the actual PuTTY team are
Such ridiculous entitlement. "THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED..." It's not even fine print. Might be worth copying the license to a CRA statement in the codebase?
Come meet the Bookshare team at @nationsblind Convention! Visit Booth D14 and learn about our partnership with NFB. First time members can join Bookshare for 30% off our annual membership, and existing members can renew for 20% off. Sign up or renew today!
@DavidGoldfield Sorry not to see #Bookshare at #ACB25 this year. Also sorry to see many exhibitors leave #ACB25 after only a few days. I guess that’s what happens when both conventions are during the same week.
@Thumper1964 Not me. I was at the @BlazieTech booth right up to closing on July 9. It was a quieter day but we still had a steady stream of visitors. I don't think we had any during the last hour.
Celeste Liddle | Kumanjayi Walker was killed by a racist cop. But our media and courts are more focused on white victims. The inquest into the killing of Kumanjayi Walker found the officer who shot him three times was racist. But the justice system and me
Sensitive content
crikey.com.au/2025/07/11/kuman… QUOTE BEGINS Like a lot of other Aboriginal people across the country, I tuned in on Monday to hear the findings and recommendations of the coronial inquest into the death in custody of Kumanjayi Walker.
For so many reasons, I felt it was important to do so. The findings of Justice Elisabeth Armitage had been a long time coming, and the fact she was delivering them in the town of Yuendumu, face-to-face with the still-grieving family and community members, demonstrated both the importance and the sensitivity of these findings.
And they were so very important. Justice Armitage found that constable Zachary Rolfe — the arresting police officer who shot Kumanjayi Walker three times — was racist, had demonstrated racist attitudes on a number of occasions, had a history of using excessive force on Aboriginal men, and had proudly shared his violent arrest footage with others. She also could not rule out that Rolfe’s racism played a part in his chosen actions on that fateful day.
Armitage additionally found that Walker’s death was avoidable, and that Rolfe had contravened an already-agreed-upon arrest plan that had been negotiated between community members and his senior office because he had a problem with authority (and particularly women in authority) and a thirst for bravado.
Justice Armitage didn’t leave it there though. She also stated that Rolfe was not a “one bad apple” scenario. Indeed, she found racism is a systemic problem within the NT Police, permeating its operations and workplace cultures, and therefore Rolfe was a part of a much bigger problem.
In many ways, Justice Armitage’s findings were unsurprising to anyone who has been following this case. The community of Yuendumu have, since that horrific day, been consistent in stating that they believed racism was very much a factor in how Walker died, and indeed, in their experiences of policing in general in their community. They have been calling for change for a very long time, including requesting that police not carry guns in their community.
What’s more, after delivering a conciliatory speech at the 2024 Garma Festival, the then NT Police commissioner Michael Murphy (who I acknowledge has since resigned due to a mismanagement of a conflict of interest) was essentially set upon by the NT Police Association and ended up resigning his membership, so scared were they of undertaking even a modicum of introspection.
NT prisons are filled with Aboriginal people. Seven years ago, Aboriginal kids made up 100% of the detainees in juvenile detention, and that situation has not really changed for the better since. I will not forget watching the horrors enacted on Aboriginal children at Don Dale any time soon.
Yet the findings of the inquest seemed to escape the notice of the Australian media and public, particularly as the guilty verdict for Erin Patterson — a woman who murdered three in-laws, and nearly killed a fourth, using poisonous mushrooms — was handed down a couple of hours later. It was hard not to feel cynical.
The life of an Aboriginal teenager, taken by a poisonous and violent man in a poisonous and violent system, was of little interest to a nation gripped by a “true crime saga” involving respectable victims and one calculating woman. This is not to diminish the incredible pain that the family and communities of Heather Wilkinson, and Gail and Don Patterson have been going through, and the immense relief they must have felt when the verdict was handed down. Rather, it’s a commentary on a system that cares little for “less worthy victims”, particularly if they are troubled, Aboriginal teenage men from an out-of-sight community.
What’s more, despite these findings and recommendations by Justice Armitage, the family of Kumanjayi Walker will never be able to access justice like this. Rolfe has already fronted court, and a jury without Aboriginal representation has already acquitted him of murder, manslaughter, and even committing a violent act causing death, on the basis of self-defence. Rolfe is out there in the world, at one point trying to book lucrative keynote addresses via his agent, and talking crap about appealing the findings of the inquest.
Out in Yuendumu, it seems community members are feeling some relief that what they have been saying for years has finally been validated, while also feeling cynical that the recommendations will be implemented or make much difference, and concurrently knowing that avenues for justice for Walker’s death are all but closed, despite these findings. It’s a lot to grapple with for a community that is again grieving the death of another young man at the hands of police.
According to reports I have read, Kumanjayi White had not even technically committed a crime (by leaving the store without paying), yet plain-clothed police took it upon themselves to wrestle him to the ground in an aisle with force so violent it allegedly ended his life. White’s death is also being treated as a death in custody, yet I have to wonder, given the circumstances, why it isn’t being straight-up investigated as murder or manslaughter? Will justice be denied for White, just like it was for Walker? How are community members supposed to heal and build positive relationships with these authorities when their vulnerable young men keep on ending up dead?
Meanwhile, more than three decades down the track, the recommendations of the Royal Commission into Aboriginal Deaths in Custody continue to gather dust on a shelf of a parliamentary library. Former NT chief minister Michael Gunner spoke big in 2019 about “consequences flowing” from the inquest, yet due to numerous delays as a result of legal processes, he was no longer around to make sure those consequences happened. Current Chief Minister Lia Finocchiaro, on the other hand, has said nothing at all about the inquest findings, preferring instead to focus on imprisoning more Aboriginal kids at younger ages. Truly, how could anyone hope for better for their families and communities when political reform is so non-existent?
At the end of the day, it should not be too much to ask that Aboriginal lives matter. Yet, as the justice system, the political system, the media class, and broader society keep on demonstrating to us, it appears it is.
100K. One hundred thousand. That's a lot of #Catima users! And happy users, it seems, looking at that 4.5 star rating ❤️
Just, wow, I never expected my little hobby app to reach 100K active users, and that's just on #GooglePlay, still excluding other app stores like #IzzyOnDroid, #FDroid, direct downloads from #GitHub and sketchy app piracy sites (please don't use that last one, for your own safety 😅)!
I used it to store the QRs for my train tickets recently. This way I didn't have to use the official train app. It was very quick to get them out and I had all the info needed written with them. Thank you. 🙏
I love it for some barcodes, so does a family member, but most of my giftcards don't work with just the barcode (they need pin as well) so I have to use physical versions.
@Skivling Putting the PIN in the note field in Catima so you can easily read it is not an option? Or do you mean NFC cards, the type you have to physically hold to a scanner (like credit cards)?
@petko Yup exactly. I don't know about F-Droid, but I have a vague idea of the amount of users on IzzyOnDroid. May be able to share those stats soon enough ;)
Sadly, Tuta is not an option for me because I prefer using regular e-mail clients on desktop, and Tuta doesn't have an SMTP bridge AFAIK.
Currently looking into self-hosting my e-mail, and I just found out that I can move my e-mail wholesale from Gmail to any provider that has IMAP, so I'm one step closer to fully deGoogling myself.
Everything else is done, I've been using Firefox-based browsers for a while, and everything else is self-hosted 😃
are we getting time zone support in Tuta Calendar yet please? Been waiting an age for this core calendar feature and to not miss my travel connections!
Thanks. It just it's been logged as an issue/request for a few years on Reddit, and there was a response about a year ago saying Tuta were working on things to make this happen. So was hoping the feature might be coming soon.
Marcus Mendes reports for 9to5 Mac on a project from Apple and Columbia University aimed at using artificial intelligence to make navigation and street-crossing more accessible to the Blind and low vision.
![A screenshot of a push notification form Reddit.com through the IronFox Webbrowser.
'[Redacted] commented in "this is a test"
Jetzt fällt mir nichts lustiges mehr ein törööö'](https://fedi.ml/photo/preview/640/685478 "A screenshot of a push notification form Reddit.com through the IronFox Webbrowser.
'[Redacted] commented in \"this is a test\"
Jetzt fällt mir nichts lustiges mehr ein törööö'")
Giant
in reply to daniel:// stenberg:// • • •bjb
in reply to daniel:// stenberg:// • • •Suggested extra alt text:
Image description:
Black and white photograph of Daniel receiving a medal from the King of Sweden.
(Could go into details about how photo looks)
Super-imposed is text saying
(Existing alt text)
Deven Phillips
in reply to daniel:// stenberg:// • • •