Today in 1983, 40 years ago: The ARPANET officially changes to using TCP/IP, the Internet Protocol, effectively creating the Internet.
reshared this
[ENGLISH DUB] Modern Quality of Life Features - Masahiro Sakurai on Creating Games
Original Video: https://www.youtube.com/watch?v=j2BX4yw8Z4YThis video was made for accessibility purposes with limited resources, so apologies for the incons...YouTube
reshared this
theevilchocolatecookie.great-s…
Peter Vágner likes this.
My Hands Up Top 5 according to fb2k playback stats.
5. Sound Artz - Remain of Rain
youtube.com/watch?v=cT9DPHKa02…
4. S3RL feat. Krystal - Tripping on Mushrooms (PerkyStella Radio Cut)
youtube.com/watch?v=hh0gSZQ4yh…
3. Casaris - Yesterday
youtube.com/watch?v=eCknKQBk1-…
2. SNGR - Heaven
youtube.com/watch?v=8oKYe8cat4…
1. Withard & TreBle Dance - Guardians Of Bass
youtube.com/watch?v=W0ypUcE6_y…
Peter Vágner likes this.
Peter Vágner reshared this.
sudo !!
Provede předchozí napsaný příkaz jako sudo. Hodí se pro zapomnětlivce, kteří zapomínají pouštět pacman přes sudo :)
I recently wrote a post detailing the recent #LastPass breach from a #password cracker's perspective, and for the most part it was well-received and widely boosted. However, a good number of people questioned why I recommend ditching LastPass and expressed concern with me recommending people jump ship simply because they suffered a breach. Even more are questioning why I recommend #Bitwarden and #1Password, what advantages they hold over LastPass, and why would I dare recommend yet another cloud-based password manager (because obviously the problem is the entire #cloud, not a particular company.)
So, here are my responses to all of these concerns!
Let me start by saying I used to support LastPass. I recommended it for years and defended it publicly in the media. If you search Google for "jeremi gosney" + "lastpass" you'll find hundreds of articles where I've defended and/or pimped LastPass (including in Consumer Reports magazine). I defended it even in the face of vulnerabilities and breaches, because it had superior UX and still seemed like the best option for the masses despite its glaring flaws. And it still has a somewhat special place in my heart, being the password manager that actually turned me on to password managers. It set the bar for what I required from a password manager, and for a while it was unrivaled.
But things change, and in recent years I found myself unable to defend LastPass. I can't recall if there was a particular straw that broke the camel's back, but I do know that I stopped recommending it in 2017 and fully migrated away from it in 2019. Below is an unordered list of the reasons why I lost all faith in LastPass:
- LastPass's claim of "zero knowledge" is a bald-faced lie. They have about as much knowledge as a password manager can possibly get away with. Every time you login to a site, an event is generated and sent to LastPass for the sole purpose of tracking what sites you are logging into. You can disable telemetry, except disabling it doesn't do anything - it still phones home to LastPass every time you authenticate somewhere. Moreover, nearly everything in your LastPass vault is unencrypted. I think most people envision their vault as a sort of encrypted database where the entire file is protected, but no -- with LastPass, your vault is a plaintext file and only a few select fields are encrypted. The only thing that would be worse is if...
- LastPass uses shit #encryption (or "encraption", as @sc00bz calls it). Padding oracle vulnerabilities, use of ECB mode (leaks information about password length and which passwords in the vault are similar/the same. recently switched to unauthenticated CBC, which isn't much better, plus old entries will still be encrypted with ECB mode), vault key uses AES256 but key is derived from only 128 bits of entropy, encryption key leaked through webui, silent KDF downgrade, KDF hash leaked in log files, they even roll their own version of AES - they essentially commit every "crypto 101" sin. All of these are trivial to identify (and fix!) by anyone with even basic familiarity with cryptography, and it's frankly appalling that an alleged security company whose product hinges on cryptography would have such glaring errors. The only thing that would be worse is if...
- LastPass has terrible secrets management. Your vault encryption key always resident in memory and never wiped, and not only that, but the entire vault is decrypted once and stored entirely in memory. If that wasn't enough, the vault recovery key and dOTP are stored on each device in plain text and can be read without root/admin access, rendering the master password rather useless. The only thing that would be worse is if...
- LastPass's browser extensions are garbage. Just pure, unadulterated garbage. Tavis Ormandy went on a hunting spree a few years back and found just about every possible bug -- including credential theft and RCE -- present in LastPass's browser extensions. They also render your browser's sandbox mostly ineffective. Again, for an alleged security company, the sheer amount of high and critical severity bugs was beyond unconscionable. All easy to identify, all easy to fix. Their presence can only be explained by apathy and negligence. The only thing that would be worse is if...
- LastPass's API is also garbage. Server-can-attack-client vulns (server can request encryption key from the client, server can instruct client to inject any javascript it wants on every web page, including code to steal plaintext credentials), JWT issues, HTTP verb confusion, account recovery links can be easily forged, the list goes on. Most of these are possibly low-risk, except in the event that LastPass loses control of its servers. The only thing that would be worse is if...
- LastPass has suffered 7 major #security breaches (malicious actors active on the internal network) in the last 10 years. I don't know what the threshold of "number of major breaches users should tolerate before they lose all faith in the service" is, but surely it's less than 7. So all those "this is only an issue if LastPass loses control of its servers" vulns are actually pretty damn plausible. The only thing that would be worse is if...
- LastPass has a history of ignoring security researchers and vuln reports, and does not participate in the infosec community nor the password cracking community. Vuln reports go unacknowledged and unresolved for months, if not years, if not ever. For a while, they even had an incorrect contact listed for their security team. Bugcrowd fields vulns for them now, and most if not all vuln reports are handled directly by Bugcrowd and not by LastPass. If you try to report a vulnerability to LastPass support, they will pretend they do not understand and will not escalate your ticket to the security team. Now, Tavis Ormandy has praised LastPass for their rapid response to vuln reports, but I have a feeling this is simply because it's Tavis / Project Zero reporting them as this is not the experience that most researchers have had.
You see, I'm not simply recommending that users bail on LastPass because of this latest breach. I'm recommending you run as far way as possible from LastPass due to its long history of incompetence, apathy, and negligence. It's abundantly clear that they do not care about their own security, and much less about your security.
So, why do I recommend Bitwarden and 1Password? It's quite simple:
- I personally know the people who architect 1Password and I can attest that not only are they extremely competent and very talented, but they also actively engage with the password cracking community and have a deep, *deep* desire to do everything in the most correct manner possible. Do they still get some things wrong? Sure. But they strive for continuous improvement and sincerely care about security. Also, their secret key feature ensures that if anyone does obtain a copy of your vault, they simply cannot access it with the master password alone, making it uncrackable.
- Bitwarden is 100% open source. I have not done a thorough code review, but I have taken a fairly long glance at the code and I am mostly pleased with what I've seen. I'm less thrilled about it being written in a garbage collected language and there are some tradeoffs that are made there, but overall Bitwarden is a solid product. I also prefer Bitwarden's UX. I've also considered crowdfunding a formal audit of Bitwarden, much in the way the Open Crypto Audit Project raised the funds to properly audit TrueCrypt. The community would greatly benefit from this.
Is the cloud the problem? No. The vast majority of issues LastPass has had have nothing to do with the fact that it is a cloud-based solution. Further, consider the fact that the threat model for a cloud-based password management solution should *start* with the vault being compromised. In fact, if password management is done correctly, I should be able to host my vault anywhere, even openly downloadable (open S3 bucket, unauthenticated HTTPS, etc.) without concern. I wouldn't do that, of course, but the point is the vault should be just that -- a vault, not a lockbox.
I hope this clarifies things! As always, if you found this useful, please boost for reach and give me a follow for more password insights!
reshared this
Keeper vs LastPass: What's the Difference? - Keeper
From price to product offerings, this comprehensive guide takes you through the key differences between the password managers Keeper Security and LastPass.Craig Lurey (Keeper Security)
@KeeperSecurity folks considering Keeper as a password manager should be aware of their litigious history with the security community: techdirt.com/2018/03/09/keeper…
They have a bug bounty now (bugcrowd.com/keepersecurity ) but it does not allow researchers to disclose bugs (see “Disclosure” section) which to me represents a failure to engage with the security community. No amount of acronym certifications will make that ok for such a critical piece of security infrastructure.
Keeper Security’s bug bounty program | Bugcrowd
Learn more about Keeper Security’s bug bounty program powered by Bugcrowd, the leader in crowdsourced security solutions.Bugcrowd
Closing the series with my top 5 tracks of the harder styles. 🙂
5. Groove Coverage - Monsters in My Head (Quickdrop x Axel Oliver Remix)
youtube.com/watch?v=ZCiOlJ3X6D…
4. Basskiller, Rocco & Giorno - Stay Away
youtube.com/watch?v=sirX_BavJJ…
3. Wildstylez - Hero
youtube.com/watch?v=kqagTSV75i…
2. Tokyo Machine & Weird Genius feat. LIGHTS - Last Summer (Gammer Remix)
youtube.com/watch?v=XUgn_G7URe…
1. The Pitcher - Play
youtube.com/watch?v=x2dBbzuAa7…
#Hardstyle #HardDance # UKHardcore #Music2022
Tokyo Machine & Weird Genius - Last Summer (feat. Lights) (Gammer Remix) [Monstercat Release]
Tokyo Machine & Weird Genius - Last Summer (feat. Lights) is out now on all platforms: https://monster.cat/lastsummertheremixesGet new music weekly - subscri...YouTube
Peter Vágner likes this.
Peter Vágner reshared this.
r/tvPlus - For all screen reader users out there, subtitles are now read in tv.apple.com
0 votes and 0 comments so far on Redditreddit
reshared this
Okay, so let's summarise 2022 in music. These were my Top 3 most-listened Female-fronted Symphonic Metal tracks of the year:
3. Blackbriar - Crimson Faces
youtube.com/watch?v=9zOVTkAMY9…
2. Battle Beast - Eye Of The Storm
youtube.com/watch?v=C7Z-IP2onY…
1. Visions Of Atlantis - Clocks / Melancholy Angel
youtube.com/watch?v=2ZBhE3HOwY…
youtube.com/watch?v=9RH8rVt4Z8…
#SymphonicMetal #Female-Fronted #music2022
Peter Vágner likes this.
Peter Vágner reshared this.
Visions Of Atlantis - Clocks / Melancholy Angel
GitHub - mathialo/bython: Python with braces. Because python is awesome, but whitespace is awful.
Python with braces. Because python is awesome, but whitespace is awful. - GitHub - mathialo/bython: Python with braces. Because python is awesome, but whitespace is awful.GitHub
Peter Vágner reshared this.
MIDI download: artscene.textfiles.com/music/m….
reshared this
Peter Vágner reshared this.
LOL. Element iOS will send .heic garbage that no one else can view. Not the web app. Not the Electron shit.
But it always convert JPEG to PNG, because that's surely unreadable.
Peter Vágner reshared this.
Hello #Fediverse! #Pinetta is a decentralized FOSS social pinboard in the style of Pinterest. After a month of planning, we've settled on a basic game plan and are opening up our @Codeberg repo for contributions from devs and designers!
We'll be working on a prototype that uses #Python and #Django to get the basic functionality working. We'll also be hosting weekly sharing sessions on #CommunityBuilding principles to develop our Code of Conduct and a larger framework for community wellness. 🥳
Peter Vágner reshared this.
This one might be known to some of you as the news has reached quite some peak in media outlets worldwide. Accessible Christmas was an app developed to let blind people enjoy the Christmas lights of Madrit through a geolocation-based audiodescription experience. The great thing about it was, you could also access these descriptions wherever you were. Many blind people do not have the privilege of worldwide mobility so bringing bits of the world closer to them is what I call an extension of accessible tourism. Describing the world you experience through textual blogs, social media postings, audio recordings and sharing interesting highlights of life in different countries is what you can do next year to make others travel even if they physically can't. If you're the one unable to travel, here are a couple of things that help me personally when I wish I could be elsewhere but can't:
1. Play a random radio station in a language you understand nothing of or find the music that you like coming from somewhere obscure or far away. I enjoy checking out local charts in other countries just to see how different languages fit into the music trends of today.
2. Try to find recordings of places on sites like Freesound or Soundcloud; close your eyes and imagine.
3. Read travel blogs, watch or listen to content on the Internet of others travelling where descriptions are abundant; research how topics that interest you are managed elsewhere.
4. Try to find penpals, somebody to exchange occasional packages with and simply make friends; if that's possible, try to find a local language conversation group, groups for people who have moved to your city etc. meet, ask questions but most of all, listen!
5. Maybe one day make your own advent calendar.
coolblindtech.com/this-app-all…
#Accessibility #Blind AdventCalendar #Spain #Travel #Tourism
This app allows blind people to enjoy Christmas lights - COOL BLIND TECH
The Human Language and Accessibility Technologies (HULAT) research group at the Universidad Carlos III de Madrid (UC3M) has developed and validated a mobile application that allows people with visual impairments to enjoy Christmas lights in the city …Nelson Régo (COOL BLIND TECH)
reshared this
In The #Netherlands, #teletext is still a big tradition. Public broadcaster NOS upkeeps the service for three national television stations with news, sports, weather, travel, program information, and subtitles for every show.
This, and a cute 'Merry Christmas' graphic every year!
twtr.plus/users/nos/statuses/1…
reshared this
Q. Why do mathematicians confuse Halloween and Christmas?
A. Because 31 Oct = 25 Dec.
Happy Christmas.
reshared this
Zuzanka is an app made by Zatoichi, a Warsaw-based startup with one of my blind friends as a tester and head consultant. It reads out the expiry dates on products so it's perfect to run through everything in your fridge before Christmas to see whether your supplies are still safe to be consumed. Once you start it, it will beep continuously to tell you it is ready. Then, once something that it may consider to be a date is found in the camera, it will start beeping faster until it finally recognizes and speaks the date outloud. There is a handy tutorial added telling you where expiry dates are commonly found on different products. The app gives you a 24-hour trial period and a handful of subscription options which I believe should be affordable. There is a lifetime license option too capped at around 30 €.
The AI models for this app have been predominantly trained on products found in Polish supermarkets and I was successful using it on a pack of German Balsen chocolate biscuits so it is interesting to see whether this could work in other countries.
apps.apple.com/pl/app/zuzanka/…
#Accessibility #Blind #AdventCalendar #Poland #Mobile #Startup #Shopping
reshared this
All good things come in threes and as it happens, one of the things I did yesterday was taking part in the Clubhouse meeting of the Czech blind community where 2022 was summed up and different good things that happened in terms of assistive technology were named.
One of the solutions somebody pointed out was the ability to operate an ATM using the banking app of Ceska Sporitelna, one of the leading Czech banks.
Developed with the Covid pandemic in mind, the feature happened to also benefit blind users. The way it works is, every ATM supporting the feature displays a QR code on its screen by default. The user scans it using the dedicated feature in the Sporitelna app, confirms whether the ATM number detected is the same as the one written on the machine itself and once the connection is made, all of the operation: defining the amount of money to be withdrawn, confirmation, authorization etc. is being handled using the app. The money comes out, the operation is successful and everyone is happy.
The number of the machine can be verified either through the list of nearby machines in the app or via an accessible spreadsheet that either the bank or the community have put together, I'm not sure.
#Accessibility #Blind #AdventCalendar #CzechRepublic #Banking
Peter Vágner reshared this.
Playing with Phanpy, a fancy new Mastodon web client by @cheeaun.
Sooo much better than the default web app, let's please all copy this layout as the new model for native apps 🙏
reshared this
It is a bit of shameless promo as yours truely is one of the hosts so I hope you don't mind me and we look forward to the feedback.
In our pilot, we go over the current campaigns and initiatives the EBU is involved in, we find out about the expectations and fears of blind people regarding Connected and Autonomous Vehicles and we finish off with our correspondent's section where we go to Italy to check what is new for blind people there.
If you have suggestions of topics that should be brought up in future episodes, feel free to share.
euroblind.org/publications-and…
#Accessibility #Blind #Podcast #Europe #CAVs #AutonomousVehicles #Disability #Inclusion
The EBU Podcasts | European Blind Union
Ebu has created podcasts on topics related to our communitywww.euroblind.org
reshared this
Peter Vágner likes this.
494175 - Make and controls keyboard navigable
RESOLVED (jteh) in Toolkit - Video/Audio Controls. Last updated 2021-10-06.bugzilla.mozilla.org
FYI, I just found this out and maybe it will interest others -
You can get "A Christmas Carol" narrated by LeVar Burton for free on Apple Books at the moment. 
He does an excellent job! 🎄
books.apple.com/us/audiobook/a…
#levarburton #christmas #audiobooks #startrek #readingrainbow
Peter Vágner reshared this.
NV Access is pleased to announce that version 2022.3.3 of NVDA, the free screen reader for Microsoft Windows, is now available for download. We encourage all users to upgrade to this version. For more info & to download this patch release, please go to: nvaccess.org/post/nvda-2022-3-…
And while I'm here - 2022.4 Beta 4 is also now available which includes the same fixes: nvaccess.org/post/nvda-2022-4b…
NVDA 2022.3.3 Released
NV Access is pleased to announce that version 2022.3.3 of NVDA, the free screen reader for Microsoft Windows, is now available for download. We encourage all users to upgrade to this version. Pleas…NV Access
Peter Vágner reshared this.
reshared this
40% #Linux usage in 2022‽ Up from 25% in previous years.
Impressive stat for "primary OS" among developers in the #StackOverflow survey for 2022.
Sources in @jgarr's blog: justingarrison.com/blog/year-o…
🧵 Some elements of analysis in this thread.
Peter Vágner reshared this.
Peter Vágner likes this.
reshared this
Cache the World: Turbo Charging Firefox #A11y Performance and Maintainability: jantrid.net/2022/12/22/Cache-t…
Cache the World: Turbo Charging Firefox Accessibility Performance and Maintainability | Jantrid
The Firefox accessibility engine is responsible for providing assistive technologies like screen readers with the information they need to access web page co...www.jantrid.net
Peter Vágner likes this.
Peter Vágner reshared this.
How we’re making Firefox accessible and delightful for everyone: blog.mozilla.org/en/products/f…
How we’re making Firefox accessible and delightful for everyone
This International Day of Persons with Disabilities, I want to share how Mozilla is working to make Firefox accessible for everyone.Kristina Bravo (The Mozilla Blog)
Peter Vágner reshared this.
Clickup
Peter Vágner reshared this.
👉️ mariushosting.com/how-to-insta…
How to Install Castopod on Your Synology NAS
Trustworthy expert guide to your Synology NAS.Marius Hosting
Peter Vágner reshared this.
Join the LibreOffice Team as a Developer focusing on RTL/CTL languages, full-time, remote (m/f/d) - The Document Foundation Blog
Note: this is one of two Developer positions currently available – the other focuses on accessibility The Document Foundation (TDF) is the non-profit entity behind the world’s leading free and open-source office suite, LibreOffice.Mike Saunders (The Document Foundation)
reshared this
Spent the last few days upgrading my game to #Bevy 0.9. Also put together "official" releases of a few of my custom plugins:
- bevy_tts: Easily add text-to-speech. Works just about everywhere, though mobile testing has been a bit lacking.
- bevy_synthizer: Binaural/spatial audio via Synthizer.
- bevy_full_throttle: Automatically enable CPU performance profiles so players on battery don't complain. Windows-only, help with other platforms welcome.
Planning on opening another account somewhere for game dev promotion soon, which is where most of this will go. But for now I thought I'd drop it here, particularly as all of these are MIT/Apache-licensed.
like this
reshared this
This, for example, is "meowmeow".
And uh... if it sounds rough or like some things don't fit together, that's... because it's unfinished.
But it's been sitting here for years and I don't know what to do with it.
So why not.
Peter Vágner likes this.
Peter Vágner reshared this.
This is...absolutely gorgeous...I accidentally fell asleep listening to this on loop (Tusky automatically loops audio) and had a very nice nap. Having woken up again I am hearing more of the details I missed and very much admiring your work!
You just caused me to dedicate the rest of my day to going through my own musical compositions (many of which are unfinished/fragments) and try to properly catalog them and get more of them finished/written out/typeset! My stuff is a mess between multiple binders and my computer and it needs reorganization badly, not to mention my yet-to-be -realized desire to make myself a website to share my works with others. Thank you so, SO much for kicking me into action. 
As for what you posted, I found that what you already have almost loops as-is! Alternatively, I could imagine some contrasting section following this, that has other chords, maybe dominated by the dominant (i.e. the V chord, or here, B major) and progressions that lead to it. That could also make for a transition that can loop back to the beginning. My only other suggestion is that I feel the A-sharp (around 00:17 and similar instances) doesn't really fit.
Sidenote: I love the key of E major and this reminds me I have a whole neo-Baroque-style suite to finish up that's in this key.
The way it works is by detecting a Bluetooth beacon near a supported elevator using the dedicated app and calling the elevator almost as if we pressed the physical button. We can then choose the floor where we want to go and, once we board the elevator, notify the app about it and wait until we reach the destination. We will be notified about the arrival through a notification in the app. The developers have even thought of Siri support so you can set shortcuts for favourite elevator +floor combinations. The solution is presented within the following session of the Zeroconf conference in Vienna:
youtube.com/watch?v=_PcPk3BcUL…
#Accessibility #Blind #AdventCalendar #BuildEnvironment #Spain
ZeroCon22: Zero Project`s Shark Tank
Welcome to #ZeroCon22 - The Zero Project Conference 2022 on Accessibility!Five high-tech start-ups pitch to experienced investors, who question their potenti...YouTube
reshared this
Sistema acústico para invidentes modelo PASBLUE - TACSE
[:es]El modelo PASBLUE es una óptica LED de 200x200 mm que integra, junto a un peatón verde, un sistema acústico de ayuda a invidentes. Esta solución se puede instalar en cualquier modelo de semáforo al ir integrada en la misma óptica.TACSE
Have a recording of a ticket machine that speaks three languages: French, English and German. Upon pressing a dedicated button above the card read we activate the speech component. Everything that is displayed on screen is read back to us. On starting, the machine greets us in the language of our choice, tells us to insert our travel pass if we have one and reads the minimum and maximum amounts for card and cash payments. The upper part of the touchscreen acts as a navi pad with the left corner taking us to the previous option and the right one to the next. In the lower part, the left corner is "Cancel", while the right is "Confirm". This way we can choose our desired ticket, the preferred payment method and complete our transaction.
The recording is a montage of different clips from the machine indicating a chosen ticket in English, through its welcome message in French and German with the latter going through some ticket options, coming back to the full welcome message in English. The recording is peppered with occasional Polish from me as it was originally recorded for our Polish podcast. It was taken using the built-in mikes of my Motorola One smartphone. Now that I listen back, it sounds kinda condensed.
#Accessibility #Blind #AdventCalendar #France #Metz #PublicTransport #Audio #recording #FieldRecording
reshared this
Development guides for librsvg and at-spi2-core - viruta.org/development-guides.…
Guías de desarrollo para librsvg y at-spi2-core - viruta.org/development-guides-…
Peter Vágner reshared this.
@hpj Yeah, I'm finding it extremely useful!
I also get a kick out of seeing it auto-published from the CI. Still have scars from doing rsync in janky scripts, I guess.
Mikołaj Hołysz
in reply to The Evil Chocolate Cookie move • • •The Evil Chocolate Cookie move
in reply to Mikołaj Hołysz • • •The Evil Chocolate Cookie move
in reply to Mikołaj Hołysz • • •Mikołaj Hołysz
in reply to The Evil Chocolate Cookie move • • •The Evil Chocolate Cookie move
in reply to Mikołaj Hołysz • • •