Search
Items tagged with: foss
I've been glued to the @matrix Governing Board nomination form results since it opened 🤩
It's a wonderful feeling, seeing the nominations come in from many different people who care about Matrix and want to help make it better for one another.
Folks have been working toward this open governance for years now, and every day it gets more real!
June 3rd is when our first ever election results will be announced. Then the next phase of hard work begins 🚀
WTF? Is #Tenacity on the #Flatpak store #MALWARE? Apparently it was running in the bg AS IF it was an invincible #Gnome extension so SystemMonitor/htop would NOT see it as a process. But #MissionCenter (also from flatpak store) saw it as it is: an app running on startup! Killing it killed Gnome session! It was also spiking wifi, and was leaking the Gnome gjs service from 4MB RAM to 120MB. Uninstalling fixed the prob
Third party flatpak/snaps should be vetted.
#security #opensource #linux #foss
This week's In-Process is out! Featuring the latest on NVDA 2024.1, add-on updates, the Microsoft FOSS Fund, Philanthropy Australia awards, an Interview with our GTO Gerald, and more! All available now at: https://www.nvaccess.org/post/in-process-22nd-april-2024/
#NVDA #NVDAsr #News #Newsletter #Blog #Awards #Interview #FOSS #Community
In-Process 22nd April 2024
Welcome to the 17th week of 2024! And welcome to In-Process. Let’s jump right in: NVDA 2024.1 A fortnight in, how is NVDA 2024.1 going for you? We’ve had lots of really positive reports! Have…NV Access
We now understand why permissive #licensing is bad for #FOSS.
#Redis taught us why #GPL is important and #MIT, #Apache, #BSD etc allow corporations to enclose and steal our contributions.
#Israel's use of #Lavender for targeting in #Gaza, which may also use the code we donated to the commons, shows that we need to be more restrictive if we want to avoid assisting war crimes and probable #genocide.
I hope some lawyers are on this, and will help us add exclusions to protect from such use.
It's pretty unsavory how everybody talks about #MarketPlaces when it comes to platforms for distributing apps. I guess because of #DMA. But it's important to take a step back once in a while and appreciate that like many other #FOSS platforms #FDroid is not a maket place, it's a #commons.
LibreOffice 24.2: New Features
A look at some of the new features in LibreOffice 24.2, created by our community of volunteers and certified developers.Learn more: https://wiki.documentfoun...YouTube
Crash fixes part 3 - Testing crashes - LibreOffice Development Blog
I have previously discussed fixing crashes in 2 parts (segfaults, aborts). Now I discuss how to test to avoid future regressions.Hossein Nourikhah (LibreOffice Development Blog)
Today more companies are announcing their support of the Valkey community (the group that includes committed developers previously working on the OSS version of the core Redis engine): Aiven, Alibaba Cloud, Chainguard, Heroku, Huawei, Percona, and Verizon.
#OSSummit #OpenSource #FreeSoftware #FOSS #OSS #Redis #Valkey #Community #LinuxFoundation
Valkey Community Announces Release Candidate Amid Growing Support for Open Source Data Store
Valkey community welcomes new partners, including Aiven, Alibaba Cloud, Chainguard, Heroku, Huawei, Percona, and Verizon.The Linux Foundation
Now on stage for the morning #OSSummit keynotes, core team member Madelyn Olson to speak about the new Valkey community effort.
The walk-on music: "We are never ever getting back together" by Taylor Swift. 🤣
Love it!
#OSSummit #OpenSource #FreeSoftware #FOSS #OSS #Redis #Valkey #Community #LinuxFoundation
they forgot the last step
credit: https://twitter.com/crackticker/status/1778852314935140370/#ultramarinelinux #foss #linux #trans #fedora
Microsoft announced their latest round of FOSS fund recipients. We're thrilled to share that @NVAccess are among this quarter's recipients. From: https://github.com/microsoft/foss-fund
"A project of the Microsoft Open Source Programs Office, the FOSS Fund provides up to $10,000 USD in sponsorships to open source projects as selected by Microsoft employees."
Congratulations also to The GNU Compiler Collection, Urllib3, CLAP & MSW.
#OpenSource, #FOSS #Free #Software #NVDA #ScreenReader #Accessibility #A11y
GitHub - microsoft/foss-fund: The Microsoft FOSS Fund provides a direct way for Microsoft engineers to participate in the nomination and selection process to help communities and projects they are passionate about. The FOSS Fund provides $10,000 sponsorsh
The Microsoft FOSS Fund provides a direct way for Microsoft engineers to participate in the nomination and selection process to help communities and projects they are passionate about. The FOSS Fun...GitHub
After a stable release of K-9 Mail, our Android team usually spends a couple weeks fixing bugs. The bug hunt takes center stage in this month's #Android progress report, with cketti and Wolf ironing out a BUNCH of them.
https://blog.thunderbird.net/2024/04/thunderbird-for-android-k-9-mail-march-2024-progress-report/
Thunderbird for Android / K-9 Mail: March 2024 Progress Report
It was a busy month! Here's our monthly progress report detailing our work to transform K-9 Mail into Thunderbird for Android.cketti (The Thunderbird Blog)
QA/Dev Report: March 2024 - LibreOffice QA Blog
General Activities LibreOffice 7.6.6 and LibreOffice 24.2.2 were released on March 28 Olivier Hallot (TDF) renamed Fontwork to Text along Path in the UI while updating Help, added Help content for ExportAsFixedFormat VBA method and new Calc functions…x1sc0 (LibreOffice QA Blog)
Insights from the InstallFest 2024 conference in Prague - The Document Foundation Blog
Our Czech community reports back from a recent event… For the third time, the LibreOffice project had its own booth at InstallFest 2024, and here we present our experiences from the event.Mike Saunders (The Document Foundation)
🕘 December 2009: Maybe you were upgrading your computer to the new Windows 7, or checking out Ubuntu 9.10. Perhaps you were pouring all your free time into Valve’s ridiculously fun survival shooter Left 4 Dead 2. And maybe, just maybe, you were eagerly anticipating installing Thunderbird 3.0…
Step back into the Thunderbird Time Machine as Jason looks at what made this such a landmark release!
https://blog.thunderbird.net/2024/04/thunderbird-time-machine-thunderbird-3-0/
#FOSS #Thunderbird #Retro
Thunderbird Time Machine: Was Thunderbird 3.0 Worth The Wait?
After a 2-year development cycle, Thunderbird 3.0 finally released late 2009 with a bunch of new feature milestones. Was it worth the wait?Jason Evangelho (The Thunderbird Blog)
Just bought a #DELL 3190 laptop, new for $150 (11.6" screen, 64GB eMMC). It's fully supported on #Linux, and even if it has a Celeron N4120 CPU and only 4 GB of RAM, it'll work fine with #Mint, or #XFCE (and #Gnome/ #KDE if you don't mind some minor lag). Not opening too many browser tabs will ensure that the swap file won't get used too often.
If you're on a tight budget this is a good option, as it also has great battery life too at 10 hours with Linux.
#linuxmint #ubuntu #opensource #foss
Community Member Monday: Adam Seskunas - The Document Foundation Blog
Tell us a bit about yourself! My name is Adam Seskunas and I currently live in San Diego, California. In my free time I enjoy outdoor activities, hiking, backpacking in the Sierra, rock climbing and surfing with my daughter Sofia.Mike Saunders (The Document Foundation)
Reminder: The Sovereign Tech Fund is asking #FOSS maintainers for input as we design the pilot program for a paid fellowship to support critical digital infrastructure. Help us by sharing this with maintainers you know!
The last day to submit a response is Sunday, 7 April 2024.
More: https://www.sovereigntechfund.de/news/foss-maintainer-fellowship-survey
In-Process is out, featuring all the news on the release of NVDA 2024.1, plus highlights from our trip to CSUN. Do check it out now at: https://www.nvaccess.org/post/in-process-5th-april-2024/
#NVDA #NVDAsr #ScreenReader #Blog #News #FOSS
In-Process 5th April 2024
It’s been a busy few weeks for the team, culminating in the BIG release! Let’s get you up to speed: NVDA 2024.1 The big news of course, is that, yes, NVDA 2024.1 is finally out! I know some of thos…NV Access
"You have to understand, we’re responsible for taxpayer money here. We can’t just make a donation to your open source project."
— a national government who relies on #Matrix when being asked to support it financially
Read more about the problem and some initiatives that are responding to it:
https://matrix.org/blog/2024/04/open-source-publicly-funded-service/
#FreeSoftware #OpenSource #FOSS #FLOSS #funding #xz #sustainability
Open Source Infrastructure must be a publicly funded service.
Matrix, the open protocol for secure decentralised communicationsMatthew Hodgson (matrix.org)
Open source infrastructure *must* be a publicly funded service, and funders need to support maintenance – not just new feature development 📣
This is on our minds this week in the wake of the #xz news, and as we continue to seek funding to support #Matrix.
Read the latest from project lead, @matthew: https://matrix.org/blog/2024/04/open-source-publicly-funded-service/
#OpenSource #FOSS #OpenStandards
Open Source Infrastructure must be a publicly funded service.
Matrix, the open protocol for secure decentralised communicationsMatthew Hodgson (matrix.org)
German state moving 30,000 PCs to LibreOffice - The Document Foundation Blog
Following a successful pilot project, the northern German federal state of Schleswig-Holstein has decided to move from Microsoft Windows and Microsoft Office to Linux and LibreOffice (and other free and open source software) on the 30,000 PCs used in…Mike Saunders (The Document Foundation)
Tomorrow's the official start of #30DayFOSSChallenge! We've got a few people chatting in the #matrix already: https://matrix.to/#/#30DayFOSSChallenge:mozilla.org
Feel free to join us. Don't know what I'm talking about? Look here: https://nullarch.com/30DayFOSSChallenge.html
#foss #floss #opensource #freeculture #degoogle #indieweb
Matrix - Decentralised and secure communication
You're invited to talk on Matrix. If you don't already have a client this link will help you pick one, and join the conversation. If you already have one, this link will help you join the conversationmatrix.to
Have you seen @nextcloud AI Assistant 2.0?
You can now chat about your own documents and data, use GPU acceleration, transcribe audio with Whisper, use your own LLMs, and a ton more integrations and new features.
All #open-source 😀
Boosts appreciated 🙏
https://nextcloud.com/blog/nextcloud-releases-assistant-2-0-and-pushes-ai-as-a-service/
#AI #mastodon #Linux #Foss #OSS
Nextcloud releases Assistant 2.0 and pushes AI-as-a-Service - Nextcloud
A major update to the Nextcloud AI Assistant 2.0, plus the news we work with several big hosting providers like IONOS and OVHcloud to bring AI-as-a-Service options to you!Jos Poortvliet (Nextcloud)
LibreOffice project and community recap: March 2024 - The Document Foundation Blog
Here’s our summary of updates, events and activities in the LibreOffice project in the last four weeks – click the links to learn more… We started March by announcing the new Board of Directors at The Document Foundation, the non-profit entity behind…Mike Saunders (The Document Foundation)
Put yourself in Jia Tan's shoes, the malicious contributor to the xz backdoor...
It's been, what, two... three?... years since you started this campaign. You've had the entire support of your team and of your chain of command.
Your coders created a complex and sublime backdoor. A secure! backdoor that only you and your team could connect to. Heck it can even be deleted remotely. This is clean code. A responsible hack that doesn't open up the backdoor for others to hijack.
You spend years on your long con - your social engineering skills are at the top of the game. You've ingratiated yourself painstakingly into multiple teams. Finally it all pays off and you're ready to go!
You succeed multiple times in getting your backdoor inserted in all the major Linux distributions!!! Now its just a matter of weeks before it makes it to production and stable releases!
This is the culmination of years of labor and planning and of a massive team and budget.
You did good.
This will get you promoted. Esteemed by your colleagues and leadership alike. Your spouse and kids will understsnd why you haven't been at home lately and why you've spent all those late nights at the office.
It's finally going to pay off.
But what's this?! Some rando poking around in their box running a pre-release unstable version of linux has found everything?!?! It's all being ripped down?! And on a Friday before a western holiday weekend?!?!
Fuck. Fuck. FUCK!!!
Three years for nothing!!! My wife is going to leave me! I missed my kid's recital for this!!! They'll hate me because I told them it was worth it. Daddy will be able to play with you again once Daddy finishes this last bit of work. But it was all for nothing!!!
Leadership took a big risk on me and my team but I kept assuring them it would pay off!
It would be one thing if another nation state found it and stopped it. But one random dude poking his nose where it shouldn't belong?! Ohhh fuck, I'm going to be fired. We're going to lose our budget. My team is going to be fired. I've let down everyone that ever believed in me and supported me and relied on me!
Oh fuck!!!
#xz #backdoor #xzBackDoor #cve #cve20243094 #infosec #hacking #FOSS
Wishing everyone a great time at Gnome 46 Release Party by Volunteers starting today in Offline in #Berlin, #Germany
https://foss.events/2024/03-30-gnome-46-release-party.html
@gnome
#gnome46 #foss #floss #freesoftware #opensource #events #europe #gnome
I think a LOT of people are missing the fact that we got LUCKY with this malicious backdoor.
The backdoor was created by an Insider Threat - by a developer / maintainer of various linux packages. The backdoor was apparently pushed back on March 8th (I believe) and MADE IT PAST all QA checks.
Let me state that again. Any quality assurance, security checks, etc., failed to catch this.
This was so far upstream, it had already gotten into the major Linux distributions. It made it into Debian pre-release, Fedora rolling, OpenSUSE rolling, Kali rolling, etc.
This is an example of Supply Chain Security that CISOs love to talk and freak out about. This is an example of an Insider Threat that is the boogey man of corporate infosec.
A couple more weeks, and it would have been in many major distributions without any of us knowing about it.
The ONLY reason we know about it is because @AndresFreundTec got curious about login issues and some benchmarking checks that had nothing to do with security and ran the issue down and stumbled upon a nasty mess that was trying to remain hidden.
It was luck.
That's it. We got lucky this time.
So this begs the question. Did the malicious insider backdoor anything else? Are they working with anyone else who might have access to other upstream packages? If the QA checks failed to find this specific backdoor by this specific malicious actor, what other intentional backdoors have they missed?
And before anyone goes and blames Linux (as a platform or as a concept), if this had happened (if it HAS happened!!!) in Windows, Apple, iOS, etc.... we would not (or will not) know about it. It was only because all these systems are open source that Andres was able to go back and look through the code himself.
Massive props and kudos and all the thank yours to Andres, those who helped him, to all the Linux teams jumping on this to fix it, and to all the folks on high alert just before this Easter weekend.
I imagine (hope) that once this gets cleaned up, there will be many fruitful discussions around why this passed all checks and what can be changed to prevent it from happening again.
(I also hope they run down any and all packages this person had the signing key for....)
Results from our survey of LibreOffice localisation tooling and workflows - The Document Foundation Blog
LibreOffice’s localisation community translates the software’s user interface, along with its documentation and websites.Mike Saunders (The Document Foundation)
Am I late for the Xenia bandwagon?
#furry #furryart #anthro #anthroart #linux #xenialinux #transrights #foss
Joint release of LibreOffice 24.2.2 Community and LibreOffice 7.6.6 Community - The Document Foundation Blog
Berlin, 28 March 2024 – Today the Document Foundation releases LibreOffice 24.2.2 Community [1] and LibreOffice 7.6.Italo Vignoli (The Document Foundation)
There is a good discount on the #FOSS conference in #Zagreb in May - why don't you combine your thrust for knowledge with a nice trip.
https://www.dorscluc.org/2024/03/hop-into-dors-cluc-2024-with-our-exclusive-easter-discount/
I most probably will be there speaking about #heavymetal #thunderbird and maybe #osm.
Hop into DORS/CLUC 2024 with Our Exclusive Easter Discount! - DORS/CLUC
As the spring season unfolds, bringing with it a sense of renewal and growth, we at DORS/CLUC 2024 are excited to share some exhilarating news with our esteemed community.andrei (DORS/CLUC)
💡 The last Wednesday of March can only mean one thing...
Today we celebrate open standards: The ability for everyone to work and communicate using free software.
If you're using paid software that confines you see if any of the alternatives on my list of #opensource software can make life easier for you:
https://ethicalrevolution.co.uk/opt-open-source/
Includes (but not limited to) @cryptpad @thegoodcloud @piefedadmin @libreoffice @thunderbird @Tutanota @protonprivacy @plausible @GIMP @inkscape @session @signalapp @delta @efoundation @MattermostFR @element
Any I've missed, let me know!
@dff
#FOSS #DFF #DFD #decentralize
Opt Open-Source - Ethical Revolution
Join me in taking step O, “Opt Opensource”, in the A-Z of steps to a better world: transparency, quality, reliability, flexibility +low cost.Sam (Ethical Revolution)
Czech translation of LibreOffice Writer Guide 24.2 - The Document Foundation Blog
Zdeněk Crhonek (aka “raal”) from the Czech LibreOffice community writes: The Czech team has finished translating the LibrePffice Writer Guide 24.2. As usual it was a team effort, with translations by Petr Kuběj, Radomír Strnad and Zdeněk Crhonek.Mike Saunders (The Document Foundation)