Can someone with an HN account get some eyes on this project: r.lily-is.land/infra/lilybuild ? It might actually get an influx of support if people know it exists.
You can run Gitlab CI jobs from Gitea/Forgejo using Podman instead of Docker.
So you don't have to suffer with the Github Actions junk...
#Catima 2.41.5 is out!
Catima is a simple Android app to store event tickets/plane tickets/store discount codes and more in.
Version 2.41.5 is the last iteration of the barcode encoding feature. It removes automatic encoding in favour of deciding encoding once on adding a card (extracted from pkpass files, otherwise ISO-8859-1) and then sticking with that. It also fixes some other bugs.
github.com/CatimaLoyalty/Andro…
Coming soon to an app store near you!
#IzzyOnDroid #FDroid #GitHub #GooglePlay
Release 2.41.5 · CatimaLoyalty/Android
Fix list widget sometimes opening wrong card Fix several bugs with shortcut handling Fix About activity not using pure black title bar in OLED mode Fully remove automatic barcode encoding detection...GitHub
I'M BEGGING - ICE will track you with your phone
THERE IS A WAY TO NULLIFY AND STOP IT. Please read.
No promotions, no affiliation, not sponsored. I just use this service myself - they have no idea who I am. Please, I'm saying this to protect people I'm not benefiting from this post.
ICE with Webloc is able to scan entire neighborhoods and obtain mobile phone service data. On of the most critical pieces of information they log is your IMSI. Its like your car's VIN number, it identifies that device uniquely, and is the identifier the cell tower sees when your phone connects to it.
Now your IMSI and its location is logged, and cataloged to track your location over time; where you work, hangout, live, etc.
YOU NEED TO ROTATE YOUR IMSI TO MAKE THE DATA USELESS, and rotate it often.
My cell service provider does this automatically every 24 hrs. I only know of 1 cell provider that does it = Cape.co. There are other privacy focused providers, but they focus on minimal data collection (Cape does that too) and other security practices first.
Cape:
- Rotates your IMSI every 24 hours (or you can refresh it manually)
- Prevents man-in-the-middle attacks and Stringrays with Enhanced Signal detection. If the cell tower your phone attempts to connect to does not match to a known CAPE middle core, it will not connect. It also alerts in the app when suspicious connections are attempted and automatically blocks them.
- Collects 0 PII - not even your billing info. They known the phone number they are servicing and that's it - not your name, address, DOB, nothing. If they receive legal demand to hand over your data they cannot, as they don't know who you are and never logged it in the first place.
Normally I'd include a coupon here, but to show you I'm extremely serious, I'm not going to include it. If you really want $10 off for life you can find a coupon somewhere, and they have a promotion rn, but I will not directly benefit from this post.
FUCK ICE AND THE FASCIST HELLSCAPE.
that is all. Visit: Cape.co
Minnesota is really putting the facts of the 'opposition' party on show.
Walz says "I'm gonna deploy the National Guard," but actually deployed the state troopers to protect the Gestapo.
Now Frey's up on stage saying that MPD is just too busy protecting the economy to deal with crimes against humanity, so all protesters should go home. Because MPD won't protect them.
This is not opposition; it's collaboration and gaslighting.
imap: skip literals inside quoted strings by calm329 · Pull Request #20322 · curl/curl
The IMAP response parser would incorrectly detect {size} literals inside quoted strings, causing protocol desynchronization. For example, a server response like: * 1 FETCH (BODY[HEADER] "Subje...GitHub
It seems that py/cryptography's thoughts about OpenSSL (cryptography.io/en/latest/stat…) are doing the rounds at the moment.
I've not touched OpenSSL directly in a long time. In fact, it appears that the 10-year anniversary of that (imperialviolet.org/2015/10/17/…) passed by a few months ago!
So I've no direct comments on the piece but, a long time ago, I was in the position where I was landing changes in both OpenSSL and NSS (Mozilla's TLS library). OpenSSL was somewhat famous for having bad code. And, indeed, if you looked at it back then the functions were full of single-letter variable names with pointer arithmetic everywhere and context-free, somewhat scary comments. It wasn't outside the norm for 1990s C code, but I understand why people recoiled.
In contrast, if you looked at NSS code, it looked good! Consistent formatting (before clang-format), good naming, good comments.
But NSS had a PKCS#11 abstraction layer and, even after years, I never could understand how the control flow worked there. I would have to single-step in gdb every time to figure out where an operation grounded out into actual code. I was reminded of that when reading py/cryptography's descriptions of OpenSSL 3.0.
I had a pet theory at the time that, because OpenSSL was repulsive on the surface, it inhibited people enough that they couldn't add much deeper complexity. But NSS, with its invitingly clean-looking code, was understandable and then people had enough capacity left over to add deeper complexity.
There might be something to it, although you shouldn't discount the fact that entities who are willing to fund cryptography libraries often have demands that are contrary to clean code. Things like FIPS compliance and compatibility with a zoo of different accelerators and bespoke needs.
So rather it might have been that old OpenSSL was old OpenSSL because it was mostly unfunded. That meant that it looked pretty ragged, but also there weren't so many demands in tension with good design.
NSS was funded by interests that really cared about PKCS#11 compatibility so that you could use a super-expensive, certified-everything HSM with it. When OpenSSL got shocked into switching to a higher-funding model, that brought lots of those same sorts of competing interests, and then the incentives pointed towards adding slow, impenetrable layers of abstraction all over.
So @lwn is currently under the heaviest scraper attack seen yet. It is a DDOS attack involving tens of thousands of addresses, and that is affecting the responsiveness of the site, unfortunately.
There are many things I would like to do with my time. Defending LWN from AI shitheads is rather far from the top of that list. I *really* don't want to put obstacles between LWN and its readers, but it may come to that.
(Another grumpy day, sorry)
RT: bsd.network/users/sizeofvoid/s…
Rafael Sadowski (@sizeofvoid@bsd.network)
Attached: 1 image Kudos to Robert Nagy (robert@). Without much fuss, he committed OpenWV and enabled Widevine support in Chromium. Now we can all enjoy Netflix, Disney+, and other DRM content on #OpenBSD. https://marc.BSD Network
I use this all the time on the RNIB Talking Book site. It makes browsing tables of search results much easier and it's a service we use quite a lot. Quoting Freedom Scientific / Vispero: JAWS Feature Spotlight: Smart Navigation
Want a faster, more intuitive way to move through web pages, PDFs, and HTML content? Smart Navigation helps you browse more efficiently by letting you navigate by controls, tables, or both, so you can focus on the information that matters.
In this archived 20 Minute Tech Tips episode, you’ll learn what Smart Navigation is, why it matters, how to enable it, and how to switch modes on the fly.
Listen now: freedomscientifictraining.libs…
#JAWS #ScreenReader
image: JAWS Feature Spotlight, Smart Navigation. Dark blue shark fin with wavy line along the bottom of image. @freedomscientific
Freedom Scientific Training Podcast: 20 Minute Tech Tips: Unlocking JAWS Smart Navigation
In this episode, Freedom Scientific trainer Ron Miller dives deep into JAWS Smart Navigation, a powerful feature designed to make navigating web pages, PDFs, and HTML documents more intuitive.freedomscientifictraining.libsyn.com
RE: climatejustice.social/@termina…
I’m now officially moving from “the cloud is just someone else’s computer“ to “the cloud is just a landlord for your data”
Very poignantly put @terminaltilt
Many times during my career, I have heard that #Linux has no chance on the #desktop unless some corporation picks it up and prepares it for the masses. #ChromeOS was given as an example.
I think it is safe to say today that all those small Linux vendors and communities have beaten #Google with its Chrome OS.
Desktop Operating System Market Share Worldwide | Statcounter Global Stats
This graph shows the market share of desktop operating systems worldwide based on over 5 billion monthly page views.StatCounter Global Stats


Bubu
in reply to ellie • • •illegal pride flag 🤔
> Nach § 124 OWiG ist das „unbefugte“ Verwenden dieser Symbole eine Ordnungswidrigkeit. Diese wird jedoch, insbesondere im Umfeld von Sportveranstaltungen, meist nicht geahndet.
de.wikipedia.org/wiki/Bundessc…
deutsches Wappen
Autoren der Wikimedia-Projekte (Wikimedia Foundation, Inc.)