I hope to hear from @Tutanota very soon. Lack of key verification is a major flaw in the technical design of the platform, allowing a malicious Tuta server to read end-to-end encrypted exchanges (both emails and shared calendars).
github.com/tutao/tutanota/issu…
The issue has been opened 6 years ago.
#Security #Privacy #Crypto #Cryptography #Email #FOSS
![Message posted on the GitHub issue titled "Manual key verification":
"This issue has been opened for more than 6 years now, with no clear roadmap or even real consideration from the Tuta team. I have to say, I am disappointed.
You keep saying that "[...] Tuta [is] the most secure email service on the market.", but without key verification, a malicious Tuta server can read the end-to-end encrypted emails and shared calendars exchanged on the platform as there is no way to verify the recipients' public key. As explained by @llebout, "all users of Tutanota must trust Tutanota to not provide forged keys and perform an MITM attack". This is a significant flaw in the technical design of the platform, and it does not seem to bother you.
In #198, it can be read that:
> We are aware of the issues with verification, new protocol will support verification, the work is underway
However, your post-quantum implementation has now landed but still no word on the key verification issue.
Could you please stand by what you have said from day 1, that you prioritise security and privacy, and establish a clear roadmap of the work already undertaken or to be done to fix the situation?
Thank you"](https://fedi.ml/photo/preview/640/595249 "Message posted on the GitHub issue titled \"Manual key verification\":
\"This issue has been opened for more than 6 years now, with no clear roadmap or even real consideration from the Tuta team. I have to say, I am disappointed.
You keep saying that \"[...] Tuta [is] the most secure email service on the market.\", but without key verification, a malicious Tuta server can read the end-to-end encrypted emails and shared calendars exchanged on the platform as there is no way to verify the recipients' public key. As explained by @llebout, \"all users of Tutanota must trust Tutanota to not provide forged keys and perform an MITM attack\". This is a significant flaw in the technical design of the platform, and it does not seem to bother you.
In #198, it can be read that:
> We are aware of the issues with verification, new protocol will support verification, the work is underway
However, your post-quantum implementation has now landed but still no word on the key verification issue.
Could you please stand by what you have said from day 1, that you prioritise security and privacy, and establish a clear roadmap of the work already undertaken or to be done to fix the situation?
Thank you\"")
Next version of Upscaler will have the option to scale images between 2x and 4x :)
gitlab.gnome.org/World/Upscale…
#GNOME #GTK4 #libadwaita #FOSS #Upscaler #Upscale #OpenSource #OSS #FreeSoftware
The application deadline for the GNOME Foundation’s Executive Director role has been extended to October 15! We encourage every qualified applicant to apply, even if you don’t meet every requirement.
Position details and how to apply: foundation.gnome.org/careers/
#OpenSource #Leadership #GNOME #TechCareers #FOSS
NGI Assure, the program aimed at improving trust in our digital society, successfully concluded after its 4 year run.
[1]152 teams contributed to a more trustworthy & secure internet with their Free and Open Source projects. Thank you all!
We've made a book showcasing all the projects which you can download from the link below. There are also paper copies, so ask for those when you see us IRL.
[2][1] nlnet.nl/news/2024/20240919-NG…
[2] nlnet.nl/media/NGIAssure-bookl…
(1/2)
In der Anwendung von freier, offener und wirtschaftlich fair betriebener Software sehen die Lukis eine praktische Verbindung zur #Freiheit des Evangeliums und vieler Narrative biblischer Texte.
Das war auch an diesem @luki@kirche.social Wochenende im Theologischen Seminar Herborn wieder zu spüren.
Ganz praktisch ging es z.B. um #GNUTaler, /e/OS, digitales in Kirchengemeinden, #Grist, #Matrix und Bots, #DeltaChat, #ElementX und die Server-Admin bei @hostsharing@geno.social
Die Location war ünrigens einzigartig 
#FediKirche #digtialeKirche #selbstbestimmtDigital#Linux #FOSS #OpenSource
From a Mailing List:
As some of you may already know, System76 is working on their new Linux graphical interface, the COSMIC desktop. They have created a form with some questions related to accessibility. If anyone is interested in participating in the survey, please access the address below:
docs.google.com/forms/d/e/1FAI…
#accessibility #Linux #foss #orca #blind
🪞 Introducing Mirror Hall, an app to turn any Linux devices into a second wireless monitor!
We use semi-custom P2P screen sharing optimized for low latency. Only Mutter-based DEs are currently supported as *senders*, whereas all DEs work as receivers.
This is our first unstable release, sp please be kind and report issues. If you are an #ARM user, we would love your help testing the gstreamer pipeline on new phones!
notes.nokun.eu/post/2024-09-22…
#linux #opensource #foss #gnome #apps #gstreamer
Our In-Process blog is out! This week, we feature NVDA 2024.3.1, Mykael making it happen in Brazil, RACQ's Road Ahead article, NVDA 2024.4 Beta 4 and Which reference is right for me?
Read it all here: nvaccess.org/post/in-process-2…
#NVDA #NVDAsr #ScreenReader #Accessibility #Blog #News #Newsletter #FOSS
Annnnd the air quality monitoring array has been deployed at #MatrixConf! Can you guess which room the BarCamp is starting in? 😂
Tomorrow will be the real test of the venue's ventilation, as we're expecting about 4x the attendees that we have today.
We take the #HealthAndSafety of our community seriously and are requiring masks indoors this year. The data we collect will help us calibrate our approach with this venue when we return!
#PHPledge #PublicHealthPledge #AQI #COVID #OpenSource #FOSS
Wishing everyone a great time at The #Matrix #Conference by The Matrix.org Foundation starting today in Mitosis LAB in #Berlin, #Germany
foss.events/2024/09-19-the-mat…
#TheMatrixConference #TheMatrix.orgFoundation #foss #floss #freesoftware #opensource #events #europe
We love hearing wonderful success stories from our users. This week, we are very pleased to present to you Mykael, who is busy making it happen in Brazil!
nvaccess.org/post/mykael-makes…
Thanks Mykael! Would you like to share how you are using NVDA with us? We'd love to hear from you! Please do drop us a line at info@nvaccess.org
#NVDA #NVDAsr #ScreenReader #Accessibility #Employment #Software #FOSS #Success #GoodNews
NVDA 2024.4 Beta 4 is now available for download & testing.
Changes introduced in Beta 4:
- Fixed the visual layout of NVDA’s Braille Settings page.
- Fixed an issue causing text not related to shortcut keys to appear in the Commands Quick Reference.
- Updates to translations.
Full information and download at: nvaccess.org/post/nvda-2024-4b…
#NVDA #NVDAsr #FOSS #PreRelease #Software #Beta #ScreenReader #Accessibility
For those on the beta channel, NVDA 2024.4 Beta 3 is available for testing. LibLouis has been updated fixing issues in Spanish and adding new Thai and Greek tables. There are also updates to NVDA translations. Read the full info and download at: nvaccess.org/post/nvda-2024-4b… (Note that Beta 2 released last week included the add-on update check fix included in 2024.3.1 today).
NV Access is pleased to announce that version 2024.3.1 of NVDA, the free screen reader for Microsoft Windows, is now available for download. We encourage all users to upgrade to this version.
This is a patch release to fix a bug with the automatic add-on update notification. When automatically checking for add-on updates, NVDA no longer freezes on poor connections.
Full details and download at: nvaccess.org/post/nvda-2024-3-…
#NVDA #NVDAsr #ScreenReader #Patch #BugFix #FOSS #New
Our In-Process blog is out. Today we have a reminder of NVDA 2024.3, info on NVDA 2024.4 and our Beta / RC program, details of the upcoming SPEVI conference 2025 and a walkthrough of creating a portable copy and the highly anticipated change to the process which now creates a folder for you.
Read now at: nvaccess.org/post/in-process-5…
#NVDA #NVDAsr #ScreenReader #FOSS #Portability #Portable #Bea #PreRelease #News #Blog #Newsletter
Oh, thank goodness not having a fully functional screen reader isn’t a blocker for Fedora 41. We wouldn’t want them to miss their 10th anniversary of shipping an operating system without a fully functional screen reader, after all.
ar.al/2024/06/23/fedora-has-be…
#Fedora #RedHat #IBM #a11y #accessibility #screenReader #orca #linux #openSource #FOSS #ableism masto.ai/@phoronix/11307885166…
Some updates on my #Libervia work:
- Kicked off #email #gateway project (nlnet.nl/project/EmailXMPPgate…) using IMAP/STMP. Basic gateway should be coming soon.
- Preparing next major release: web frontend design & internal improvements in progress. The release will be *huge*.
- Started new desktop frontend; more details to follow.
- Aiming to resume blogging and weekly videos this week, if time allows.
- Targeting a Libervia-based service by the end of the year.
NVDA 2024.4 Beta 2 is now available. Changes from Beta 1:
- The stability of NVDA’s Poedit support has been improved with the side effect that the minimum required version of Poedit is now version 3.5.
- NVDA is no longer as sluggish when arrowing up & down through large files in VS Code.
- NVDA no longer freezes while checking for add-on updates.
- Updates to translations.
Please go to nvaccess.org/post/nvda-2024-4b… for the full what's new & to download.
#NVDA #NVDAsr #Beta #FOSS #ScreenReader
NVDA 2024.4 Beta 1 is now available for download and testing. For anyone who is interested in trying out what the next version of NVDA has to offer before it is officially released, we welcome you to download the beta and provide feedback using our issue reporting process.
This release includes a number of improvements in Microsoft Office, braille, and document formatting.
For full information and to download, go to: nvaccess.org/post/nvda-2024-4b…
#NVDA #NVDAsr #ScreenReader #Beta #FOSS #PreRelease
Our Taiwanese community reports back from a recent event: The LibreOffice Asia Conference 2024 was held in Taipei from 2 – 8 August. This conference was suspended for several years due to the pandemic and was relaunched in Indonesia last year.Mike Saunders (The Document Foundation)
Schedule, talks and talk submissions for LibreOffice Conference 2024events.documentfoundation.org
I really like the idea of, instead of collaborating on a document via (for example) Google's servers and Google Docs, being able to have collaborators' computers talk to each other directly and share edits that way.
I really hope that "local-first" gains at least the sort of steam the FOSS movement has — as I've seen people comment, FOSS doesn't help if your computation is happening on someone else's computer.
Today we’re talking to Gladys David, who is helping out in LibreOffice’s Quality Assurance (QA) project… Hi! My name is gladys, I’m 41 years old and I’m French.Mike Saunders (The Document Foundation)
The book is released on time for the new LibreOffice 24.8 release. The community members of the LibreOffice documentation team are happy to announce the immediate availability of the Getting Started Guide 24.Olivier Hallot (The Document Foundation)
New major release! #LibreOffice 24.8 is the private, free office suite which includes:
✅ Handy "Quick find" deck in the Sidebar
✅ New spreadsheet functions, including XLOOKUP
✅ Better presentation templates
...plus many other new features, fixes and compatibility improvements. Find out more and download it: blog.documentfoundation.org/bl… #foss #opensource #news
The new major release provides a wealth of new features, plus a large number of interoperability improvements Berlin, 22 August 2024 – LibreOffice 24.Italo Vignoli (The Document Foundation)
