gf just got a small envelope box from IKEA handled by Deutsche Post I obviously haven't opened it, but I'm so so curious. what could it be? it feels almost empty. a single screw?
Shouldn't it be a Crown inquiry into the #wagetheft and #exploitation of Canadians in the industry?
If the government is truly aware of the allegations, then they know the allegations go back AT LEAST as far as the Harper government... that means it spans decades... let's hear from every single one of them.
Asking because I wanted to share some code I'd written for a half-arsed, unfinished hobby project with a colleague, but of course it was set to private. (And on Codeberg, which they don't have.)
In this case, clearly state that in README, like in bold, red and what not. Not because "You're bad because you publish unfinished projects" (absolute bull… garbage!), but because otherwise people will open tons of issues like "It doesn't build!", "This function is not working!!" and so on. Don't know about Codeberg though, it's quite a niche platform if I'm not mistaken, but still I would just try to protect myself from those.
Yes, understand your feelings, I had the same before. But when I was in the same situation when I needed help, I did publish unfinished work and added a special heading in Readme, like this is not a ready-to-use product, if you feel comfortable to help developing it, please submit a PR.
@menelion I put it online with a disclaimer, like you suggested!
I do not know much about the screen reader accessibility of Codeberg, but at least the heading levels seem to make sense here (as in, the README title is the H1).
Yepp, looks good! In terms of accessibility, people at Codeberg did a huge work, I remember forgejo when it was identical to Gitea, it was a mess, to be honest. It's still not perfect of course, but it's better. Also… Song Share, an interesting name, what is it about? 😊
@menelion Codeberg seems to be serious about accessibility.
Their ED approached me at the end of last year, asking if I could do some accessibility grant work for them (unfortunately, I couldn't.)
That was following him picking up my name from a ticket on heading levels in issues, which quoted one of my blog articles on using heading level 4 in GitHub issues.
Also, the Song Share project is a thing for myself: I want to share songs I'm listening to, and have a hub with links to that song on multiple (streaming) platforms.
The real underlying issue is that we have no competition in airlines or really most industries. Make it illegal to do an M&A unless the industry has at least 10 options. Anyone with over 10% of the market can't legally ever M&A a competitor.
@purpleidea this has nothing to do with competition and all to do with legislation that is meant to protect the workers (majority of Canadian) with proper enforcement.
If there was proper competition, then losing 10% of capacity wouldn't be a big deal, everyone would migrate to competitors, and the losing airlines would have to pay for those tickets to everyone who had their flight cancelled due to strike.
While I'm not a major fan about it, the idea of forcing workers back to the office has some logic in it, but shouldn't need to have been used if we had real competition. It's needed in industries where a vital service has no alternative, eg: ambulance.
1) Good flight attendants could migrate to better companies.
2) A strike could bankrupt a company if they were that negligent to take care and be fair with their employees.
3) There wouldn't be public pressure to end the strike because customers have other options.
4) Flight attendants _want_ any (possibly bad) deal because they love that job and Air Canada is actually the best employer for that in Canada. They have the routes and perks that others don't!
@purpleidea 1) untrue 2) a strike cause the money spigot to at least dry up if not in reverse. Whatever the position the company is in. Monopoly or not. 3) there is still public pressure because people have their tickets and feel entitled to fly 4) even then, it remains 1). the trope "one can find the same job elsewhere" is false. regardless of the industry.
Once again. The only thing that might have happened had it been Porter would have been the Govt not tripping on section 107....
@purpleidea "competition" is an utterly deranged statement made by capitalists. If what you (generic you) need is competition to start caring about people's rights, then you simply do not care about their rights; you only care about capitalizing over the competition and will continue to "care" until their rights are no longer benefiting you.
@TheEvilSkeleton Not at all. I absolutely think they should be paid for the time they work, but we'd probably never even be in this situation if we had actually anti-monopoly laws.
1) Good flight attendants could migrate to better companies.
2) A strike could bankrupt a company if they were that negligent to take care and be fair with their employees.
3) There wouldn't be public pressure to end the strike because customers have other options.
4) Flight attendants _want_ any (possibly bad) deal because they love that job and Air Canada is actually the best employer for that in Canada. They have the routes and perks that others don't!
The practice is actually industry wide. Also the illusion of "you can just switch jobs" (you can't just), etc.
There are much more competitive industries where wage theft and worker mistreatment is also the daily occurrence. And they may actually have even less leverage because of lack of unions and increased competitiveness.
@purpleidea my post (unintentionally) addresses that—they benefit workers and the "competition" until one company manages to stand out and capitalize, who then stops exercising people's rights because it no longer benefits them.
If anti-monopoly laws are the result of competition, then we should be asking ourselves whether competition caused people to care about workers' rights, or people who already cared about people's rights and actively fought to enforce protection of said rights who did.
Finally in HQ! Since all the versions of "They're Taking The Hobbits To Isengard" here on Youtube are all rips from my medium quality original from my websit...
Ok so calling for the opinion of my fellow home server enthusiasts here, I want to: At minimum host Miniflux, PiHole and Joplin Server with docker or similar system. That are the essentials. If possible, I'm also interested in: GitTea, Home Assistant and and a Media Server for my Audio books. I did a lot of research today, and while a Raspberry Pi seems very suitable for most of that, especially when it comes to Home Assistant I feel like people tend to get a mini PC and co. I've done further research and am going to try out Proxmox in order to see whether that's something I could imagine managing my stuff on a mini PC with, so I could have a VM running Home Assistant OS for example. A mini PC I would consider for example is the Beelink MINI-S12 Pro. I'd greatly appreciate any opinions, about software to make managing easier, the hardware and so on.
Meanwhile you can already get the Beelink Mini S13, which comes with an Intel N150 processor instead of the N100 from previous generation. It should have the same features as the S12. Currently the box is available for €189 on Amazon (use the discount offer).
@radiorobbe Hmm, where do you find the discount though? I used the search on amazon.de and I assume this one is the official? It costs 239 or something like that and I can't find a typical checkbox or similar on the page in order to apply a discount or something like that. amazon.de/Beelink-MINI-S13-Lak…
Flight attendants: Our demands are that we get paid when we work. Management: lol no we don't want to pay you Patty Hadju: the best agreement is an agreement that the parties negotiate themselves. lol 😂😂😉Flight attendants: if you don't pay us for working we're gonna go on strike Patty Hadju: the best agreement is an agreement that the parties negotiate themselves. lol I said it again 😂😂Management: yuo can't go on strike imma lock you out!! (5 minutes after lockout) Hadju: oh no they couldn't negotiate what a surprise lol im ordering you back to work on the same terms as before lol no one could have predicted this 😂😂Flight attendants: fuck off we're on strike Hadju: ???? no you need to go back I said??? Flight attendants: I said fuck off we're on strike arrest me I dare you. We'll see what the courts say about your power to do that. Hadju and management: ????? Management: OKAY LET'S NEGOTIATE (Less than 1 day later) We have negotiated an agreement!! Canadian: the fuck do you mean the flight attendants weren't getting paid when they were on the ground?
it has been known for quite a while but the mass merdia (remember all the Postmerdia owned right-wing pravda, including the Gazette) fail to report on this. It doesn't fit the narrative the oligarchs.
First day on the job was a bizarre combination of deeply familiar (a lateral move within the same organization at Apple) and completely drowning in that feeling of "omg I don't know anything about any of this." On one hand, I said "I don't know" more times than I can count today; but on the other, I got out a tiny accessibility PR on macOS!
Thorium Reader has become even more of a huge cow of a program, because it's now using Electron. Meanwhile, you can get the same experience by using something like Paperback, which was coded by one person and is 2.4 mb, compared to almost 100 mb. There is something to be said about minimal overhead.. Okay, rant done!
@Bruce But at least with Python, there are libraries that you can use to minimize the program footprint. With Electron, you're starting point is 100 megs, so it's already sluggish from the get-go.
@Bruce that's why I use C# (CSharp). It's pleasant to code in, and the app footprint is small. Yes, there is DotNet sitting somewhere in the system, but it's only one copy, not dozens of Chromiums (chromia?), like with Electron apps.
This afternoon I get to serve at a funeral and burial service for a stillborn infant.
Since we do not subscribe to the usual notion of Original Sin, we do not believe that unbaptized infants go to Limbo. Because humans are not born with the guilt of Adam’s sin, we believe an infant can proceed directly to the presence of God.
The hymns at an infant’s funeral are different than those at an adult’s funeral. In some of them, the infant is beseeching Christ to comfort his or her parents.
Perplexity is now crying because their plagiarism machine cannot bypass Cloudflare's firewall. How about you start paying for stealing others' content to train your shity AI?
There is no Legitimate LLM or AI if takes all content without permission and these companies sell their services for money. It is stealing. Plain and simple.
> Maine police officer arrested by ICE agrees to voluntarily leave the country
> Evans’ arrest touched off a dispute between Old Orchard Beach officials and ICE. Police Chief Elise Chard has said the department was notified by federal officials that Evans was legally permitted to work in the country, and that the town submitted information via the Department of Homeland Security’s E-Verify program prior to Evans’ employment. Assistant Secretary of Homeland Security Tricia McLaughlin then accused the town of “reckless reliance” on the department’s E-Verify program.
>> accused the town of “reckless reliance” on the department’s E-Verify program.
"YOU HAVE TO USE E-VERIFY TO MAKE SURE YOU'RE NOT HIRING ILLEGALS!!!!!"
ok, we did, you said it's legal for him to work here
E-Verify doesn't work the way people think it does. It doesn't really verify anything and is often just incorrect to my understanding.
You can feed it a valid SSN that isn't yours -- not even tied to your name -- and it will just say "yes this is a valid SSN". Ok??? This is how most agricultural and construction workers get away with it.
In this case the system probably reported he had a valid SSN. You don't need to be a citizen to have an SSN; if he had a previous work authorization by DHS who issued his SSN.
So he had a valid work visa and a valid SSN issued. But that work visa expired long ago perhaps, and E-Verify doesn't check that. It just checked if the SSN was valid. And it still was. It doesn't magically expire or go inactive when the work visa expires.
Something like that. It's so stupid.
edit: Republicans know it's broken, but if it was fixed it would have destroyed our ability to exploit a lot of cheap labor. So they don't. Well, until Trump. Now they let that angry badger out of the bag and can't put it back in, so it's coming for everyone.
It doesn't matter what they do to the internet, Gen X and Millennials have the skills to bypass and access whatever they want. They were raised doing this.
Boomers: generally tech illiterate
Zoomers & Alpha: can't live without a touch screen, don't even know what a "file" is
I'll be fine. But that doesn't make it any less sad.
@zer0unplanned well the further you go back in time, the fewer people had access to computers... especially ones networked (pre-web / the BBS era, even) so there are always going to be exceptions, butttt......
I have a @Microsoft Outlook email account. Its spam filter grabbed a Windows Insider program email. So email from @Microsoft is considered spam? I find that kind of funny.
Inclusive hiring isn’t just good practice - it’s essential.
Our latest blog post, written by Senior Project Manager Felicity Miners-Jones, shares practical steps for making recruitment truly accessible.
From clear job ads to barrier-free recruitment platforms, these steps help keep the process fair, expand your talent pool, and show a genuine commitment to inclusion: tetralogical.com/blog/2025/08/…
Accessible recruitment is more than a policy - it’s a way to ensure that every candidate can perform at their best, and each role is filled by the person most capable of doing it.
### Summary
A malicious WebSocket server can send a fragmented message (FIN=0) followed by a flood of continuation frames, causing the client (curl) to continuously allocate memory while waiting...
@bortzmeyer yes, but there are multiple signs of AI in there including the fact that the report is bogus, plus the detail that the person doesn't deny using AI and simply pretend I didn't ask...
Could have been an honest mistake, but don't you double or even triple check that the memory usage actually increases and additionally check which versions are affected?
I haven't seen an AI take a screenshot of their terminal yet. And Kali on WSL does seem like something an overambitious script kiddy would use. On the other hand, the user definetly types like an LLM, and not answering the direct question is hella suspicious 🤔
Maybe it's a kid who's just asking ChatGPT what to do and say?
does the form require the Mitigation Recommendations and Impact sections, and does itbsuggest 3 bullet points for each? If not, then definitely slop, whether human or AI.
Also, the mitigation recommendations seem very generic and don't demonstrate a beyond-surface-level understanding of the usecase.
like, why do websockets allow fragmentation? Possibly to allow processing messages of unbounded size in a streaming fashion, while allocating only enough memory to hold one fragment.
Which I'm guessing is what curl is already doing.
But the fix suggestions don't mention that possibility.
oh... does an implementation have to support all frame sizes? If so, then to not have a single-frame exhaustion vuln, you'd need to process parts of a single frame in a streaming fashion. It sounds quite difficult to have that work, and then somehow not be able to stream multiple frames in the same way...
@wolf480pl it's super annoying and libcurl's API for websockets thus has a way to pass on partial frames just so that it can do it streaming without using a lot of memory or do some kind of buffering etc. Fragments of frames that are part of messages...
Eh, I voted not slop purely because years ago I almost reported a memory leak against a project but it turned out that GDB was leaking. This *could* be an honest mistake. Basically, I want to believe.
I think I’d want to know how the false positive occurred. “Doesn’t occur on latest master” could imply that it did occur on some other recent version, which seems useful to know about. The only other obvious explanation of course is that it’s slop and they didn’t actually try running it themselves, which seems vastly more likely.
@benjamineskola well, I tried the same version he says he used and it did not reproduce for me on that version - since I also know the code I was actually questioning the report already from the beginning but was open for me missing some mistake of ours
I just can't fathom how you deal with all the slop. I've been following your ongoing battle for a while and, to be honest, I would have given up by now. Thanks for persevering.
I'm surprised they came back and recanted the report. seems really a daft thing to do to submit a serious bug like that without actually using thier own brains. why do they do it??
I voted “not slop” for the benefit of doubt. At least that report was reasonably concise.
Maybe you could require security issue reporters to provide a minimal Dockerfile demonstrating the issue and a screenshot of the output highlighting the failure? (and require output lines to be timestamped in that screenshot)
first thing which weirded me out - long and detailed, from the looks, text. But no mentions of the specific environment (including the version of curl) "used" to "reproduce". Which should be one of the most important details, I suppose.
the report mentioned the --include option but that was renamed (deprecated) in curl 8.10 according to the manual. Outdated information always screams LLM. That was very sus. I would assume someone would read the docs before writing such a report.
Pretty confident an LLM was at least used to create the text. However I think this is a rare case of the user actually bothering to trim the output down so it’s readable.
If the problem were real that would be it, but you mentioned even the version they cited in the comment doesn’t exhibit the problem. For that reason I have to lean toward slop.
Yes, bots being >50% of all traffic is bonkers, but at the same time I'm increasingly becoming convinced that bot defenses are (largely? equally? also?) harmful to the overall ecosystem.
Everything bot detection relies on is basically ossification: TLS fingerprinting, protocol offering and preference, HTTP header presence and ordering, ...
Assuming / enforcing those is overall bad for the web, and all browsers and clients should really grease all of that.
and the ones with the biggest muscles circumvent all of those filters easily anyway while it blocks the low volume little guys that nobody actually wanted to block
@bagder Yeah. I mean, there's _some_ value in trivial defenses to somewhat tone down the noise (akin to e.g., run sshd on a different port than 22, just to avoid the very noisy trivial scanners), but it's never going to be effective against dedicated actors.
My pet peeve in @thunderbird: I often want to save attachments, but then also look at them. I’d love to have an accessible way to open the attachment I just saved, like in #Firefox’s download menu or the popup Element offers. Currently, I need to navigate the whole path twice, once in #Thunderbird’s save dialog, and then again in my file manager.
This would be a great thing to submit at our official feedback site, Mozilla Connect (connect.mozilla.org) where the community can upvote and comment on suggestions, if it hasn't already been suggested already!
Finally, working for a communication company has gotten me something useful. Apart from a reliable income, of course, which is part of a job I guess.
a 4K Apple TV, access to NOW Entertainment, NOW Cinema, Netflix Standard and discovery+ Entertainment with Internet access for £32 per month. it would have been £25 if I'd stuck with the Netflix with adverts which seems quite a good price really!
Netflix was costing me £12 alone, and our previous broadband was £35 by itself. We'd occasionally have a month of Now when there was a new series or particular film coming our way, so I think overall we've saved money.
We've been using a Fire stick for the last 5 years or so. I hope all the apps are usable on Apple; but I imagine they're pretty good. I might keep the fire stick and hook it up to some sort of audio source for blindy TV in the bedroom until we can get one put up properly.
@dmills87 What do you get via EE and what do you get via Virgin? I thought Virgin did a device similar to Sky in that they're using streaming services rather than cable. I'm in a London flat so can only get either Hyperoptic or Virgin.
@andrew @dmills87 I've only had a brief look at the EE app on Apple TV, but it does seem to be trying to make an IPTV-based version of the Freeview EPG, from what I can tell. it gives channels numbers (1 for BBC1, 3 for ITV1 etc). I think they've tried to craft the app to appeal to those coming from a traditional free-to-air service.
The remote is a custom EE job with a TV guide button and traditional up/down buttons for channel, as well as volume, so you can scroll through them live, just as you used to do with an older aerial service.
@dmills87 it does, VoiceOver seems to support all page elements, as applevis would say. It's a bit worse than the firestick in some ways because with only the EE remote there's no way I've yet found to reread the screen. I can't control VoiceOver's ducking level or verbosity, but that's not really EE's problem.
@dmills87 Thanks for the explanation. Have you checked out audio description yet? I'd be interested to hear how the custom remote works with VoiceOver. Do you get a standard Apple TV remote in there as well?
@andrew There's no standard remote, just the EE one. It works fine to control VoiceOver for the most part; I can triple press the back button to toggle VO and the d-pad and other keys seem responsive enough.
Audio-description is selectable on all of the channels within the EE app, which includes live broadcasts of all the free-to-air channels and those in my paid-for package, sky cinema and so on. I don't know how it works with catchup, although if I go through the Now app and watch a channel live through there I don't get the audio-description.
Sean if there is any way you could write a quick review of this it would be really useful. A lot of blind folks are trying to find a way to get live Freeview TV without an aerial and with working audio description.
@andrew I just switched to EE broadband as of yesterday away from sky, seems to be lots of perks for doing so, not sure if TV is part of that or whether I'd have to get that separately. Still, we have Sky Q here so can live with that.
@FreakyFwoof @andrew No benefit if you've already got Sky, I think. We've not had any paid TV apar from subscription services for quite some time, but even our over-the-air service wasn't working due to a dodgy aerial. So for less than I was paying for netflix alone thanks to the colleague discount I get their big entertainment package and an apple Tv out of them
@FreakyFwoof @andrew It's a separate thing. They'll prob give you a discount if you wait long enough. I'm always being offered it as a mobile customer. Sticking with sky Q at the minute as I like being able to record.
@klittle667 @FreakyFwoof @andrew I don't know what the prices are like by comparison because I only see my discounts. And I've yet to determine whether if I replay a movie or something the audio-description follows through. it works on all the channels in the EE app even when they're part of Sky, but if I play them through now there's no description. If I restart a live playing program from the bbc, for example, it just moves out to iPlayer, so I presume that's the pattern across the board: the EE app itself for live TV and all the other apps for their on-demand content.
@FreakyFwoof @andrew That's standard. Now TV never has, and probably never will, have description. Sky really don't seem to care. HBO / max or what ever they're calling it is supposed to be launching in the UK next year though so sky might lose some of its appeal to me then. Especially if we get the AD content that the US has.
@klittle667 @FreakyFwoof @andrew it just seems silly when Now is owned by sky and uses the same library of content. Same for all the terrestrial channels not doing description on their web players, of course.
@klittle667 @FreakyFwoof Interesting you can possibly get this through a mobile contract wonder if they would do that without the broadband though as I can't get EE broadband in this flat.
@andrew @klittle667 @FreakyFwoof I don't know if the tv box would recognise a mobile data connection as theirs in the same way they do home broadband. There's no technical reason not to, of course, but I don't know if it's a thing they do.
@klittle667 @FreakyFwoof On Sky Stream we get AD on live channels including some of the Sky content. We only get AD from the on-demand using apps like Netflix, IPlayer, ITV X etc. I haven't got it working through the Sky interface or on Sky content.
@andrew @klittle667 @FreakyFwoof I think EE will work out broadly the same then: I would expect that if I try playing something that was described but is no longer live, it will pass out to whichever app it originated from. so I'd get AD from the BBC, ITV, 4 and 5, but not any of the Now stuff (which has the kids channels, sky cinema etc).
@andrew Be good to get the word out about it as an option. How about it, @doubletap. Fancy another chat? I can even bring the TV box and do some live demoing.
Having used both Apple TV and Firestick I think Apple TV has the better interface. Neither is as good as Chromecast however, which works through the phone. I take it you have EE on a discount?
So the Fire stick is out and the Apple TV is in. I never thought I'd find a feature on an old Android fork better than TVOS, but a button on the remote to get the screen reader to read more info is useful. I have my speech so high rate, waiting for the delay to read makes it feel sluggish. I've not found a convenient way to adjust verbosity either - hearing where I am in a grid is irritating every single time but the VoiceOver settings seem scant.
I think the remote I have is bespoke, though; it has a button for the EE app's TV guide and no touch area that I can work out.
I'm not sure how I feel about the usefulness of the guide yet; having channel numbers is a nod to terrestrial broadcasting but there's no number pad on the remote, so it's a bit clunky. Also I haven't yet explored the watchlist, but presume scrolling to future shows would be potentially useful.
Having a button for the Apple TV app just feels like marketing overkill. we've bought a few things From apple but they're by no means our primary. The button really should let you pick a favourite app.
SO mixed thoughts: the responsiveness of VoiceOver is great and the app store seems very rich.
I pretend that I go away for my holidays. I don't. I take time off work and stay home with a pile of books. I like home, that's why I live here. I know people expect you to want to travel but I can't be bothered. Why go to abroad when there are heatwaves here?
If the current Government want to save face and do a backflip they should table legislation to remove section 107 that was put in by PC Brian "GST" Mulroney.
'cause the minister of labour now just talking about free labour while it was part of the problem all along show they are either ignorant / incompetent or really anti worker.
WestJet, Air Transat, Porter workers: you have our support.
The politicians assume #Canadians will have forgotten all about this in a month. We have in the past. Just like we historically do not require they publish and act on their "investigation" in corporate malfeasance - like required unpaid work.
#AirCanada, OTOH, is facing a class-action lawsuit because, as they always do, they mistreated passengers whose flights were cancelled, violating the law passed the *last* time they did this.
"YOU HAVE TO USE E-VERIFY TO MAKE SURE YOU'RE NOT HIRING ILLEGALS!!!!!"
ok, we did, you said it's legal for him to work here
witchy Alba 🌸
in reply to kitten • • •kitten
in reply to witchy Alba 🌸 • • •sorry, gf
it's to the name of our common gf tho
witchy Alba 🌸
in reply to kitten • • •kitten
in reply to witchy Alba 🌸 • • •oh
then I guess it's your screw
witchy Alba 🌸
in reply to kitten • • •