A litre of petrol should cost no less than £5. I know you'll think I'm a joyless prick for saying that but so be it. The world is literally on fire and we're sharting fossil fuels into the atmosphere like they're free and harmless.
screenshot from a porn video (no visible nudity), kink, help wanted
Sensitive content
I'd really like to get some straps like you see in this video. Does anyone know what I might need to search for?
I've spent over an hour trying various variations of "silicone/rubber/plastic tie-downs/straps/belts/strapping/webbing holes/punched/perforated/screws/screw-down" and haven't had any luck.
Really I'm just looking for long lengths of silicone belts with pre-punched holes.
Fetish Model Charlotte Brooke's Charlotte Fetish... What's Your Fetish?, Girls Bound, Perfect Wife, Rigid Hogtie, Rigid Trainer, Device Bondage, Fetish Model Chgarlotte Brooke, Bondage, Latex, Corsets, Custom Built Device Bondage and more, Come See Y…
When the Jieshuo Screen Reader developer announced the removal of the Tencent Cloud online OCR engine due to contract expiration, many international users
Canada has taken the rare step of not signing onto a multi-country statement that demands Israel stop banning foreign journalists from entering Gaza and that local journalists be protected in the Palestinian territories.
OTTAWA - Canada has taken the rare step of not signing onto a multi-country statement that demands Israel stop banning foreign journalists from entering Gaza and that local journalists be
Tak jsem konečně upravil šifrování disků na svých počítačích. Do teď jsem zamykal heslo root file systému do #tpm2 vlastním scriptem popsaným zde: skorpil.cz/en/project/42/mkini…
To řešení je už 5 let staré a překonané. Ale stále funkční. Dneska už to umí #systemd nativně. Porušil jsem pravidlo "nešťourej do něčeho co funguje" a přenastavil jsem šifrování na všech počítačích. Dneska je to fakt super pohodlné nastavení.
Nechcete nějakou minipřednášku o šifrování disků pomocí TPM2 na #LinuxDays ? Zaměřeno na #Arch, jiné distribuce tolik vyzkoušené nemám. Ona jedna přednáška byla už na tom loňském, tak nevím jestli je to potřeba. 🤷
All my personal and company computers are powered by Arch Linux with encrypted storages. This setup brings an inconvenience of entering two passwords on startup. One unlocks the storage encryption, second logs me to my user account.
Nebo bych mohl na #LinuxDays povykládat o #selfhostingu. Postupně jsem odřízl většinu závislostí na Googlu, a vše si provozuju sám opensource aplikacemi.
I'm preaching to the choir here, and it will never make YouTube change, but can I just say how much I *despise* a shorts carousel now being the top spot of my Subscriptions feed in the YouTube app—and it can't be disabled, even if I tap the dots and say 'don't show this'?
I use freetube (freetubeapp.io/) on desktop and newpipe (newpipe.net/) on mobile as youtube frontends. They really make my youtube experience a lot better!
"When the American empire finally collapses, historians won't be stunned by the greed of the elite; They'll be stunned by the loyalty of the poor. The working class didn't just vote against their own interests. They worshipped the billionaires robbing them. They slashed their own benefits, gutted their own healthcare, and cheered while the rich wrote off private jets as tax deductions. Not because it helped them. But because they were told it would hurt someone else. And that, right there, is how you rig a democracy without ever breaking a single law." - Brian Allen
@Tutanota Do you plan on offering some sort of bridge like protonmail so I can use my normal CLI/TUI email workflows? I’m undecided between you and @startmail
No, this is not planned. Tuta is fully encrypted - not just the emails, but also the calendar and your entire address book (which you can sync to your phone and use it as an encrypted contacts' app). To support external clients, we would need to support IMAP. But this would mean we would have to send the data unencrypted to a third-party client (e.g. Microsoft's Outlook or Apple Mail or Thunderbird), which defies our security promise of quantum-safe end-to-end encryption.
A possible work-around is bridge, but it's also no real solution (and if you search Reddit, you will find lots of complaints about the mentioned bridge):
* With such a bridge all data, including a search index, would be stored unencrypted in the third party email client. We aim for a solution where all data is always stored securely encrypted.
* Upon sending an email out of the third party email client, the user can't possibly know whether the email is actually going to be send end-to-end encrypted (the client can't show this as a bridge works on a different level). Therefore sending confidential emails via a bridge is essentially impossible...
* IMAP and SMTP are not the most efficient protocols especially when it comes to push notifications or to attachments of emails (which are encoded into the body).
With improving our free desktop clients - tuta.com/blog/desktop-clients-… - we serve you much better than by spending time in developing a bridge. We hope you understand!
Thank you for taking the time to explain! While I don’t fully agree that creating a Bridge is a high privacy/security risk (for myself), I can understand where you’re coming from. One of my concerns is that there’s no way to access my email on Tuta on OpenBSD without a heavy browser, or any machine that I am running TTY-only. I also don’t have a way to perform scheduled backups. Would love to have these features and I think a Bridge might solve both?
This is an INSANE decision by the E.U. “By signing up to mutual recognition of vehicle standards with the U.S., the E.U. has waved the white flag on road safety. This is not a technical detail – it is a political choice that puts trade convenience ahead of saving lives.” This will kill people.
By signing up to mutual recognition of vehicle standards with the United States, the European Union has waved the white flag on road safety. This is not a technical detail – it is a political choice…
retoot this if your retirement plan is essentially based on the idea that civilisation will probably crumble before you reach 65 and money will be meaningless anyway.
Montrealer received a $2,340 fine after police caught them traveling at 196 km/h in a 70 km/h zone along Autoroute 15, near Edouard-Montpetit Boulevard, before 2:45AM Saturday.
The driver neglected to bring their driver’s licence w/ them and was issued another $520 ticket.
In addition to the fine$ the driver will receive 30 demerit points, the vehicle will be impounded for 30 days, and the driver is prohibited from driving for 7 days.
Pretty much not at all. I've listened to audiobook versions of non-fiction books that probably do have references, but they're not mentioned by the narrator. That's for commercial audiobooks. Recordings made specifically for blind people, at least here in the U.S. by the National Library Service talking book program and Recording for the Blind (now Learning Ally), were better about this, at least when I was in high school and college.
hmm, this chart is good but it doesn't really show the best part about the curl man page over time, which is how its organization quality, sectioning, and cross-referencing have improved.
Look, Jeff Atwood, it is difficult to take you seriously when you write authoritatively on a subject you clearly don’t understand.
GDPR doesn’t mandate cookie notices.
Cookie notices are *malicious compliance* by the surveillance-driven adtech industry.
If you’re not tracking people, you do not need a cookie notice, period.
If you’re only using first-party cookies for functional reasons, you do not need a cookie notice, period.
If you’re using third-party cookies to track people – i.e., if you’re sharing their data with others – then *you must have their consent to do so*. Because, otherwise, you are violating their privacy. Even then, the law doesn’t mandate a cookie notice.
How would you conform to EU law without a cookie notice if your aim wasn’t malicious compliance?
You would not track people by default and you would make it so they have to go your site’s settings to turn on third-party tracking if, for some inexplicable reason, they wanted that “feature”.
Boom!
No cookie notice necessary.
What’s that?
But that would destroy your business because your business is founded on the fundamental mechanic of violating people’s privacy?
Good.
Your business doesn’t deserve to exist.
Because the real bullshit here isn’t EU legislation that protects the human right to privacy, it’s the toxic Silicon Valley/Big Tech business model of farming people for data that violates everyone’s privacy and opens the door to technofascism.
Look, EU, it is difficult to take you seriously when you forced all this cookie notification bullshit on us. That feature a) should not exist and b) if it did, should be a BROWSER feature not "every website in the entire world now has to bother everyone forever about this stupid thing" blog.codinghorror.com/breaking…
The Firefox add-in Firesheep caused quite an uproar a few weeks ago, and justifiably so. Here’s how it works:
* Connect to a public, unencrypted WiFi network.
1. Every browser needs to, by default, be set to allow "strictly necessary cookies" only. 2. Every site that wants to serve EU users must honour this setting. 3. Impose massive fines on sites that don't do this or that choose to interpret "strictly necessary only" in "creative" ways.
So that anybody who does not want other cookies has to do exactly nothing to achieve that.
@rozeboosje and invest the money from the fines in privacy respecting FOSS solutions to replace the non-sovereign software the EU runs for its own services. Win-win(-win, for www) 😉 @aral
Look, EU, it is difficult to take you seriously when you forced all this cookie notification bullshit on us. That feature a) should not exist and b) if it did, should be a BROWSER feature not "every website in the entire world now has to bother everyone forever about this stupid thing" blog.codinghorror.com/breaking…
The Firefox add-in Firesheep caused quite an uproar a few weeks ago, and justifiably so. Here’s how it works:
* Connect to a public, unencrypted WiFi network.
That's a myth perpetrated by adtech industry. There is no EU obligation to spam cookie notices. There's an obligation not to track without explicit consent, and everyone illegally uses the cookie nag popups as a basis for claiming consent (which it's not). A legitimate, non malicious site has no need for cookie nags. Ever.
Moreover there *was* a browser feature to set it globally and all the assholes running websites refused to honor it and instead used your setting as an additional fingerprinting bit to track you.
True, but my point remains. This shitty experience we're collectively having here this isn't "the EU forcing cookie notification on people", it's "the malicious compliance of companies that profit from user tracking."
Every company that shows you an cookie popup has made the choice to put a few fractions of pennies of possible future profit ahead of your experience.
Cookies can give businesses insight into their users’ online activity. Unforunately they are subject to both the GDPR and the ePrivacy Directive, making compliance difficult.
@javier Websites that don't use cookies are not involved. Neither are websites that only use cookies that are _required_ for the website to function, e.g. session tokens.
It's only when you'd like to use cookies to track users and deliver personalized ads that you have to deal with this stuff.
It's a choice.
Most websites simply don't choose the privacy-friendly option.
@scy @javier one of the big problems nobody talks about: tech is largely only explained by entities who have no incentive to explain it *well*.
Google, Meta, large ad networks are all like "stupid EU makes us do Cookie banner".
While the actual regulation is actually pretty good. The regulation is basically "don't fuck around with user data. But if you do, you at least need to tell the user".
for those who just want to browse the catalog: until fixed, you can use apt.izzysoft.de/fdroid/?repo=m… (should images not load, it's because they would be loaded from f-droid.org. If you reload the page, another mirror should be picked for those, and images should show up again. A little lottery: you might hit a slow mirror then 🙈 But you can browse the catalog.)
keďže mám stále prístup do EduPage by to mohlo znamenať že ma zatiaľ nevyhodili a zajtra by som mal ísť do školy.. ešte stále ma môžu vyhodiť keď tam prídem
škola sa nám ozvala že prax bude započítaná iba tomu kto absolvoval prax v ich zazmluvnených servisoch... viete koľko z nás bolo v ich servise? nula. ja mám pocit že si to vymysleli/nám to povedali až teraz.
Day 1284. I am in the heaviest battle of Pokrovsk, Donetsk, East Ukraine.
This is my combat gear and my weapon. It does not shoot, but it delivers A LOT of pain to Russian invaders. With this weapon, they have nowhere to hide.
I am Ukrainian Soldier. That’s what I go through 🧵
Greetings all. I was really excited about the new music mix feature in Spotify for premium user’s. Unfortunately my excitement was short lived. This feature is not accessible and as Spotify have demonstrated time and time again, they do not care about accessibility. What really frustrates me with Spotify is when you try and lodge an accessibility bug with Spotify support, they have no idea what you are referring to and they always tell you to go and write on their community forums which also are not that accessible. I have given up on Spotify as a company and will no longer pay for Spotify premium. Accessibility has been a problem for years with Spotify so I will stick with Apple Music. Their support for those interested is now chat based via a website and although it is accessible, it’s a pain to get started with support. Very disappointed with Spotify as a company.
@darrell73 As far as I know, Spotify has no equivalent of Apple Music's Classical app, or of competitors such as Idagio. That rules out Spotify for me.
Is there any ARM64 SoC that can boot to Linux without either requiring a DRAM controller initialization/training blob or punting the whole boot process to a second processor running wholly closed firmware? That second one rules out Raspberry Pi (for personal projects). I'd grudgingly accept ARM Trusted Firmware persistently running in the background if the SoC's branch/fork of that is fully open-source. But I still don't like how much code has to run before you get to the OS kernel.
I'd say, SoC yes, SBC definitely not. And SoC is really just Qualcomm as they're the ones MS partnered with. For a bit of time folks did try to get WOA on R-pi 4 and 5 working, however you lack a lot of drivers for basic things such as Wi-FI, HDMI Audio, so virtualized as sad as it is for now on most 3rd-party boards will be needed. There's a lot based on the RK3588 which are getting popular but they would also have the same faits as the Pi in terms of hardware drivers needed to get it native boot.
I found what seems to be the ideal 32-bit Linux-capable ARM platform in terms of boot transparency and simplicity: the Microchip (formerly Atmel) SAMA5 platform, based on a Cortex-A5 core (I think it's always a single core) and LPDDR2 DRAM (up to 512 MB in the boards I've seen). The official boot loader, at91bootstrap3, is MIT-licensed, including DRAM initialization code. It can chain to u-boot, load a Linux kernel directly, or load an arbitrary bare-metal program.
The SAMA5 platform really does have the least bad boot process I've found in any recent-ish (though only 32-bit) Linux-capable ARM SoC. According to the SAMA5D2 series datasheet (ww1.microchip.com/downloads/ae…), it has a 64 KB boot ROM. In standard (non-secure) mode, that ROM reads the second-stage boot loader from a boot.bin file on an SD/MMC device's FAT partition. That's practically perfect IMO. And the boot.bin in the buildroot config I tried is 14 KB. That loads u-boot which is ~400 KB.
And like I said, that second-stage boot loader (boot.bin) can apparently be configured to skip u-boot and go straight to Linux or some other bare-metal program.
The datasheet does mention a secure boot mode, for which documentation is only available under NDA. Not ideal, but I don't want secure boot anyway.
BTW, I ended up not ordering a Raspberry Pi Pico-based microcontroller board like I was thinking about doing last weekend. A SAMA5 board, if I can get one with an audio DAC and headphone jack built-in or as an add-on, would split the difference between a microcontroller and an application processor, as the SAMA5 platform explicitly advertises bare-metal support with sample code.
Curious, would you mind sharing links with good material on how the Raspberry Pi boot process works? I am working with RPI 4B specifically, so I suppose if the resources are specific, then that's what I'd be looking for. Thanks much. I hope your adventure goes well.
What I dislike about the Pi's boot process is that it runs on a whole other processor (the VideoCore) that's running its own embedded OS. In the Pi 4B, that processor's firmware/OS is split between the built-in EEPROM and a file you have to put on your SD card. In the Pi 5, it's all in EEPROM, so probably out of sight, out of mind for most people, but I know it's still there.
Thanks for the link and explanation of the other coprocessor with its own OS on it. I knew the RPI had an EEPROM, but didn't look into it hard enough to find out that it was so advanced. I guess my thinking was it was something to address and control some of the specialized stuff on the board. Good to know stuff for sure. Thanks.
I wish the creators of the Raspberry Pi had been working at Atmel rather than Broadcom. A wildly popular hobbyist SBC with built-in audio DAC and headphone jack based on the SAMA5 SoC family would have been perfect!
Frustratingly, there _was_ a SAMA5 evaluation kit with built-in audio DAC and headphone jack, but it's now discontinued. Presumably not enough demand for that particular combination.
The bare-metal SDK for the SAMA5 family and some other SoC's (github.com/atmelcorp/atmel-sof…) even include audio examples, with configurations for the discontinued eval kit.
I'm talking about this eval kit: microchip.com/en-us/developmen… It basically had everything except WiFi, including audio codec, USB, Ethernet, and even HDMI. And apparently the SAMA5D4 SoC does have video decode (probably a proprietary driver for that). DigiKey knows about that eval kit, but lists it as obsolete, and provides a coipy of this document explaining why: mm.digikey.com/Volume0/opasdat… But the newer, lower-cost SAMA5D4-Xplained board doesn't have audio!
@thejpster Looks promising. The non-OS BSP you linked even includes an MP3 player example, apparently running on bare metal. On the Linux side, they have a buildroot BSP. Looking at that now.
@thejpster Hmm, looking at the number and size of the .bin files in the output from the MA35 buildroot build, it's aesthetically not any more satisfying than any of the other non-Raspberry Pi ARM64 boards I've seen. The SAMA5 platform I mentioned elsewhere on the thread is much more appealing, especially if I can cut out u-boot entirely, as it seems the Atmel boot loader allows. I just have to figure out how to add a DAC and headphone jack to one of the off-the-shelf eval boards.
Note that #Quicksy users won’t be able to opt out of TLS 1.3.
If you are sending files to Quicksy users (via HTTP Upload), make sure your HTTP server supports 1.3; otherwise Quicksy users won’t be able to receive the file.
The #Conversations_im update that requires TLS 1.3 is currently rolling out.
Apparently, judging by the bug reports coming in, a good number of servers do not support TLS 1.3 yet.
Please upgrade your servers and/or check their configurations. 🙏
Users can opt out via a setting in the Security section of the app, but this setting will likely go away in 1-2 years. The only correct move here is to fix your servers. Also, check the HTTP servers used by HTTP Upload.
glad I saw this toot. It made me able to use my self-hosted @prosodyim again. Before, I had just turned off the server connection to fix it at a later time, especially since I didn't know what caused it. I just checked the validity of the cert and didn't find any issues.
It would be great if the error message in the app would indicate the cause. "TLS negotiation failed (TLS v1.3 not supported by server)"
@SimJoSt @prosodyim I agree that this would be a better error message. I originally planned to do that but then somehow wasn't able to differentiate between 'general certificate problem' from 'protocol too old'. I'll take another look to see if this can be improved.
I may have underestimated the number of servers effected by this.
unfortunate, that you cannot discern the specific error easily, but good that you are already thinking about it. I'm grateful :) It surprised me that my @prosodyim setup didn't support TLS v1.3 already. Checking the docs it is not mentioned at all and I will have to figure out how to enable it, if it is supported at all.
well, unfortunatelly, there is not only "good number of servers do not support TLS 1.3 yet", but also there are some countries that has gorernment-ruled DPI hardware deployed country-wide and that blocks TLS 1.3. If you're lucky, it can be "time to time" or "some specific things", but if you're not - it can be total breakage of any TLS1.3 conenctions.
So, users from such coutires won't be able to have secure communications at all: from the one side there is government pushing, from the other — such a decisions 🤷
Ayer estuve con mi hija en el acuario de Veracruz, y por contestar correctamente una pregunta sobre manatíes, me dejaron darle de comer a un manatí.
Entre tres manatíes, se empacaron una hielera completa de verduritas y manzanas en unos minutos. Para darles, había manzana, pepino, calabacita y jitomate. Según yo, lo que más les gustó es el jitomate.
Pueden mover los pliegues que tienen debajo de las fosas nasales; ahí se les da de comer y ellos llevan la verdura a su boca. Son adorables.
por dios, nunca vi um manati então imaginava que eram menores... Mas en portugues lo llamamos también "peixe-boi", entonces deve ser mismo grande como un buey!
Bubu
in reply to Misofist • • •Sensitive content