**Talk:** Building UIs for Everyone: Accessibility as a Frontend Responsibility
**Speaker:** Kushal Kumar Nerella
**Abstract:**
Kushal will share some of t
Curious about our progress on Thunderbird Pro? Our latest update, direct from Managing Director Ryan Sipes, keeps you in the know - and lets you know how to stay updated:
I find it interesting that you want to operate Thundermail in Germany. How will you ensure to comply with the GDPR, when both MZLA Technologies and Mozilla Foundation as US-based entities can both be forced via CLOUD Act to violate the GDPR?
great update, thank you! I didn't see any mentions about OS or platform availability though, did I miss them?
I'd love to hear details about how Android fits into these plans since many launches like this often tend to either exclude mobile platforms at launch or restrict the feature set. Is that the plan with Thundermail?
@perksofbeingben Hey there! Thundermail will work with all apps on all platforms, mobile and desktop. Send and Appointment will take a bit longer to come to mobile, as those are more desktop-oriented for now.
@perksofbeingben You're welcome! Whenever we get closer to this integration would be when we'd need beta testers, and we'll definitely put out a call on our blog and share it here!
Masking tape, the 1st adhesive tape, was invented in 1925 by 3M employee Richard Gurley Drew who noticed frustrated auto painters using butcher’s paper and glue to mask cars for painting then popular 2-tone paint jobs and stripes.
On my way to work there are a couple of train stations that have orange tiles with uranium glazing, no dangerous amounts but easily detectable with a geiger counter.
Hey, something that regularly bums me out is that #Lego continues to make Harry Potter products. Lego brings me a lot of comfort, but their complicity in JK Rowling's hate campaign sours that significantly.
As a trans person, it makes me feel kinda helpless and invisible.
So I'd appreciate it if y'all could help me boost this petition across the fediverse, and share it around with group chats, and other socials if you're on them!
Not necessarily because I expect Lego to listen to a change.org petition, but because it would give me a lot more hope and faith in people if the voices saying "Hey, it's really messed up that Lego is doing this" were a lot louder than they are now.
(Alt-text: a change.org petition called "LEGO: End your relationship with JK Rowling and the Harry Potter franchise.") chng.it/mgvbH5qw5h
The "Conversations" screen (which shows a list of open chats) has always been the main screen of #Conversations_im, following the behavior of Signal, WhatsApp, and Google's Messages (SMS) app. However, after sign-up, users were taken to the "New Chat" screen (which lists all contacts and group chats) on the premise that they have no chats yet and would likely want to start one. This may have confused first-time users about which screen is the main one.
“Activists who disrupt the flow of weapons to a genocidal regime may violate petty criminal statutes, but they uphold a far greater law and a more profound human imperative: to protect a people and culture from annihilation,” she wrote. aljazeera.com/news/2025/8/18/u…
Plasticine Action is a group of like-minded artists and concerned citizens, who want to be vocal against the rise in AI generated animation and art, and raise awareness of how AI is being used in an increasingly authoritarian manner.
MÚPI MERCH | KÓD: MIKYR5 🚀 https://mikyr.shopJeště více MÚPI contentu najdeš na našem HeroHero ❤️ Díky za podporu 👉 https://herohero.co/mikyrInstagram Miký...
@srtcd424 yeah, when I was at high school (2000-2004), we programmed a screen that was identical to the Novell Netware login screen that was used to authenticate on school computers. It loaded first, the user typed in their credentials, it gave them an error message "try again" and then it loaded the genuine login screen. That's how we got credentials of most users at the school. Not sure if I should be proud or ashamed of it, but it definitely boosted confidence in our IT skills. 🙂
Shouldn't it be a Crown inquiry into the #wagetheft and #exploitation of Canadians in the industry?
If the government is truly aware of the allegations, then they know the allegations go back AT LEAST as far as the Harper government... that means it spans decades... let's hear from every single one of them.
Finally in HQ! Since all the versions of "They're Taking The Hobbits To Isengard" here on Youtube are all rips from my medium quality original from my websit...
Perplexity is now crying because their plagiarism machine cannot bypass Cloudflare's firewall. How about you start paying for stealing others' content to train your shity AI?
There is no Legitimate LLM or AI if takes all content without permission and these companies sell their services for money. It is stealing. Plain and simple.
Inclusive hiring isn’t just good practice - it’s essential.
Our latest blog post, written by Senior Project Manager Felicity Miners-Jones, shares practical steps for making recruitment truly accessible.
From clear job ads to barrier-free recruitment platforms, these steps help keep the process fair, expand your talent pool, and show a genuine commitment to inclusion: tetralogical.com/blog/2025/08/…
Accessible recruitment is more than a policy - it’s a way to ensure that every candidate can perform at their best, and each role is filled by the person most capable of doing it.
### Summary
A malicious WebSocket server can send a fragmented message (FIN=0) followed by a flood of continuation frames, causing the client (curl) to continuously allocate memory while waiting...
@bortzmeyer yes, but there are multiple signs of AI in there including the fact that the report is bogus, plus the detail that the person doesn't deny using AI and simply pretend I didn't ask...
Could have been an honest mistake, but don't you double or even triple check that the memory usage actually increases and additionally check which versions are affected?
I haven't seen an AI take a screenshot of their terminal yet. And Kali on WSL does seem like something an overambitious script kiddy would use. On the other hand, the user definetly types like an LLM, and not answering the direct question is hella suspicious 🤔
Maybe it's a kid who's just asking ChatGPT what to do and say?
does the form require the Mitigation Recommendations and Impact sections, and does itbsuggest 3 bullet points for each? If not, then definitely slop, whether human or AI.
Also, the mitigation recommendations seem very generic and don't demonstrate a beyond-surface-level understanding of the usecase.
like, why do websockets allow fragmentation? Possibly to allow processing messages of unbounded size in a streaming fashion, while allocating only enough memory to hold one fragment.
Which I'm guessing is what curl is already doing.
But the fix suggestions don't mention that possibility.
oh... does an implementation have to support all frame sizes? If so, then to not have a single-frame exhaustion vuln, you'd need to process parts of a single frame in a streaming fashion. It sounds quite difficult to have that work, and then somehow not be able to stream multiple frames in the same way...
@wolf480pl it's super annoying and libcurl's API for websockets thus has a way to pass on partial frames just so that it can do it streaming without using a lot of memory or do some kind of buffering etc. Fragments of frames that are part of messages...
Eh, I voted not slop purely because years ago I almost reported a memory leak against a project but it turned out that GDB was leaking. This *could* be an honest mistake. Basically, I want to believe.
I think I’d want to know how the false positive occurred. “Doesn’t occur on latest master” could imply that it did occur on some other recent version, which seems useful to know about. The only other obvious explanation of course is that it’s slop and they didn’t actually try running it themselves, which seems vastly more likely.
@benjamineskola well, I tried the same version he says he used and it did not reproduce for me on that version - since I also know the code I was actually questioning the report already from the beginning but was open for me missing some mistake of ours
I just can't fathom how you deal with all the slop. I've been following your ongoing battle for a while and, to be honest, I would have given up by now. Thanks for persevering.
I'm surprised they came back and recanted the report. seems really a daft thing to do to submit a serious bug like that without actually using thier own brains. why do they do it??
I voted “not slop” for the benefit of doubt. At least that report was reasonably concise.
Maybe you could require security issue reporters to provide a minimal Dockerfile demonstrating the issue and a screenshot of the output highlighting the failure? (and require output lines to be timestamped in that screenshot)
first thing which weirded me out - long and detailed, from the looks, text. But no mentions of the specific environment (including the version of curl) "used" to "reproduce". Which should be one of the most important details, I suppose.
the report mentioned the --include option but that was renamed (deprecated) in curl 8.10 according to the manual. Outdated information always screams LLM. That was very sus. I would assume someone would read the docs before writing such a report.
Pretty confident an LLM was at least used to create the text. However I think this is a rare case of the user actually bothering to trim the output down so it’s readable.
If the problem were real that would be it, but you mentioned even the version they cited in the comment doesn’t exhibit the problem. For that reason I have to lean toward slop.
➡️ Jsem namočený v pár projektech a dva se sešly do rozhovoru s mojí maličkosti. O AI, jak jinak. Tak si to přečtěte ve V zrcadle AI: S Danielem Dočekalem o tom, že AI je jen jiný Google, který vypadá sofistikovaněji.
I really struggle with the way these videos are done, the speech patterns feel really odd. is there a name for that? They sort of ... play in the next segment almost before the previous one has finished? Am I making any sort of sense?
@cachondo I call it the old school Andrew Huang effect. He doesn't do it nearly as much these days, but for me, he was the one that did it the most back in the day and I utterly loathe it.
@cachondo I know some youngsters have short attention spans, but that's no excuse: I don't think I'll ever get used to little bits of speech being edited together like that;
@frog67 @cachondo Some podcast apps have features to remove silence between sentences automatically. We probably should start advocating for something opposite, insert natural pauses between sentences.
@Scott @jakobrosin @frog67 @cachondo @BorrisInABox Just wanted to join in and tell you all how I hate such videos! Just can't stand them. It's not ASMR of course (which is absolute nightmare for me), but quite close.
@menelion @Scott @jakobrosin @frog67 @cachondo @BorrisInABox I get it. I definitely get it. That's why my silly demo was tongue-in-cheek and pointless. It's actually physically uncomfortable for me to listen to that kind of thing for too long. Makes me feel like I can't breathe. It's weird.
@Scott @jakobrosin @frog67 @cachondo @BorrisInABox That was much too nice. You did not bombard us with enough words per second! And you call yourself a Youtuber? Ugh.
No, you only let sharp cuts happen when you're about to go into a stupid joke that has been rehashed 1,246,744 times on your channel, and everyone is expected to know what it is. Either that, or just pause for 10 seconds and play the sound of a cricket.
@cachondo Yeah it just sounds like bad editing but it's done deliberate. I really wonder why. Does the waveform look prettier on the timeline for some reason?
As the leading provider of accessibility training, Digital Access Training is proud to offer on-demand courses that make it easy for you to learn at your own time and convenience.
Trochu mi tu překážel kousek boku a byl akorát čas ho zpracovat. V jádru má krásných 92 stupňů a pod sebou dubový hobliny... To tooterý prostě nemůže dopadnout špatně! 🤤 A vy se taky neodbývejte, bando. #dobrouchut !
i have seen a few people arguing for xslt recently; weird proposition! - libs have a cost (browser download size, update work, integration, security risk) - xslt 1.0 is not good. okmij.org/ftp/papers/SXSLT-tal… - nobody uses it. (or rather, 0.001% of page-loads use it.) - regardless of your pov on xml, xml web documents are entirely a lost cause; the web is html, and html is not xml. - there are so many better alternatives! even a simple page with a script tag can do a better job!
The specific use case I've seen people arguing for is using XSLT to transform an RSS or Atom feed into HTML. For that, a page with a script isn't an option. And the argument seems to be framed as Google not caring about a thing that's important to some in the indie web community, namely RSS. It doesn't help that Google killed off Reader.
This PR adds Encrypted Client Hello (ECH) functionality to apache2, when using OpenSSL for TLS.
Notes:
ECH is not yet part of an OpenSSL release. We'd hope ECH will be part of OpenSSL 4.0 in A...
To je ještě dobrý. Jednu za mnou došli borci, kteří nám zdili plot: "pane, malá vám kreslí kamenem po autě." A taky že jo, dvouletá dcera si řekla, že by autíčku slušely obrázky. 🙈
Úplně stejný zážitek, dorostenec zdobil kapotu kolečky 🙈 Na druhou stranu, je to vidět, jen když se auto umeje, takže mi to v následujících letech ušetřilo nějakou práci 😂
It's still in early version I think, so doubtless it will improve. I'm very impressed at the speed with which you can just flick through a book's chapters, though.
I'm sure an MRU is on the agenda. I'd quite like it to keep your documents open when I come back to it, given it's already got support for multiple tabs.
also it needs to know if it's already open, at the moment you can open multiple copies of the app, where I guess you want a second click from explorer to add the tab of the file to your current session, maybe.
And it will encourage more people to seek out alternatives, including #AutonomiDweb
This can't be censored and is end to end encrypted so you don't need a VPN.
Using dweb you can publish websites to Autonomi and view them in a standard browser. This includes dynamic apps storing and fetching data directly on Autonomi.
This will give vulnerable people, including children access to vital information and safe spaces.
flohmarkt.adminforge.de/~fExpl… Vielleicht möchte ja jemand ein wenig basteln. Bestimmt sind sie auch für andere Dinge verwendbar. Funktionieren noch tadellos.
sftp_download_stat, sftp_upload_init, sftp_quote_stat, sftp_readdir will translate LIBSSH2_ERROR_EAGAIN to CURLE_OK and set *block to TRUE, but outer loop do not check *block, result in busy loop
@stepan Co si budeme... otevírá to celou Pandořinu skříňku věcí, které by najednou nebyly legální. Ale technicky nezdatní legislativci nebo soudci dokážou napáchat hodně škody.
Otázka je, zda jde víc o technologii nebo o společenskou dohodu, která vychází z toho, že tohle vždycky šlo. Je možné, že je to spíš to druhé a že tahle věc, kterou jiná média nebo způsoby nakupování apod. nenabízejí, padne, protože překáží těm, kdo dnes mají nebo chtějí peníze. Stejně jako nemůžeš měnit a ovlivnit to, co ti zobrazuje appka Rohlíku v mobilu, nebudeš to moci ovlivnit ani na webu. Jedno je jisté - kdyby někdo vymyslel web včera, tak to rozhodně nejde.
Techassi
in reply to Thunderbird: Free Your Inbox • • •Felix
in reply to Thunderbird: Free Your Inbox • • •Ben
in reply to Thunderbird: Free Your Inbox • • •great update, thank you! I didn't see any mentions about OS or platform availability though, did I miss them?
I'd love to hear details about how Android fits into these plans since many launches like this often tend to either exclude mobile platforms at launch or restrict the feature set. Is that the plan with Thundermail?
Thunderbird: Free Your Inbox
in reply to Ben • • •Ben
in reply to Thunderbird: Free Your Inbox • • •Thunderbird: Free Your Inbox
in reply to Ben • • •Jean-Baptiste
in reply to Thunderbird: Free Your Inbox • • •All except AI is welcome !
I'm not sure engineering and hosting are the same job for qn organisation, but why not. All the best!