Notices by deutrino (deutrino@mstdn.io), page 5

Why is software created using taxpayers’ money not released as Free Software?

* Tax savings: Similar applications don't have to be programmed from scratch every time.

* Collaboration: Major projects can share expertise and costs.

* Serving the public: Applications paid by the public should be available for everyone.

* Fostering innovation: With transparent processes, others don't have to reinvent the wheel.

#democracy #democratic #politics #freesoftware

https://publiccode.eu/

I published some fixes in 2.10.2
This release embeds a feature to send me crash reports by email (default: disabled) #Fedilab

More about this release: https://framagit.org/tom79/fedilab/-/tags/2.10.2

So the government of Kazakhstan is MITM'ing all SSL'ed traffic https://lobste.rs/s/uqj8nq/mitm_on_all_https_traffic_kazakhstan#c_0boxyk

The way they are doing this is by adding a Certificate Authority (CA) that allows them to snoop all traffic.

This is, by the way, why SSL is criticized as being "only as secure as the weakest CA in your system". Here it's deliberate, but that's a problem in general.

It would be better if the internet were modeled off of something like Tor .onion services, where you *know* you have a secure path, because the address is literally the fingerprint of the server. "But how can I make sense of which site is which?" You guessed it, petnames https://github.com/cwebber/rebooting-the-web-of-trust-spring2018/blob/petnames/draft-documents/making-dids-invisible-with-petnames.md

And, bookmarks *are* petnames, with a minor UI tweak https://www.w3.org/2005/Security/usability-ws/papers/02-hp-petname/

The DNS + SSL CA model puts users at risk. I hope we can move past it.

"There is no amount of regulation, transparency, or oversight that will fix the dangers inherent in widespread face surveillance. Only a full ban — a federal ban, covering the use of facial recognition by government agencies, in public places, and in public contracts with private entities — can prevent our nightmares from becoming reality." https://www.buzzfeednews.com/article/evangreer/dont-regulate-facial-recognition-ban-it
.onion: https://bfnews3u2ox4m4ty.onion/article/evangreer/dont-regulate-facial-recognition-ban-it

Founders jumping ship is a great sign and definitely means a startup is succeeding, right? https://www.businessinsider.com/npm-cofounder-laurie-voss-resigns-2019-6

The Raspberry Pi 4 needs a fan, here's why and how you can add one https://www.jeffgeerling.com/blog/2019/raspberry-pi-4-needs-fan-heres-why-and-how-you-can-add-one

Wow, so Kazakhstan is now systematically subverting HTTPS encryption? Crazy times...

https://bugzilla.mozilla.org/show_bug.cgi?id=1567114

If you're doing any "fun" weekend projects for personal ops, and would like to share with the masses, #libreops is a great hashtag to follow and toot under.

Be as descriptive or vague as you like, who knows maybe you'll inspire someone else to explore the wild and wooly world of libreops - operations in the open.

ideas:

- building a SBC powered home appliance
- Drudgery work like syncing backups
- Patching systems (you are patching them, aren't you?)
- poking a remote unit thats gone AWOL

Unfortunately, the jwz threading algorithm can't be literally applied to Mastodon threads without doing a status_context API call for each message, which is too expensive (no References field on posts, only In-Reply-To). But it's also the case that you can trust the information you *do* have in a way that you can't with email, which simplifies things. Will probably play with this at lunch or this evening.

Other brutaldon ponderings.

Planned features to add: poll creation, cross-account actions, thread display of thread pages.

Performance: I'm assuming that the main slowness is waiting on API calls. But what if I'm wrong? I should profile it.

Moving development to https://git.carcosa.net/jmcbray/brutaldon/. Not all the issues got imported from github correctly.

Finally: Alpine Linux, i3wm and a physical keyboard on a mobile phone. The keyboard may be a bit worn down, but the n900 is still going strong like it’s 2009 💖

Trending tags:
#hotgirlpisswedding
#npkweddingprotestparty
#anhbongdachatluongcao
#keonhanh
#meditacao
#gaymergala

Finally, the fediverse icon mosaic is finished - and I love the result :blobheartcat:

#art #mastoart #fediverse #inkscape

Idea for a project:

boring crypto-toolkit: A set of simple usable programs for various crypto tasks like: encrypting a file, securely sending a file between computers, simple encrypted chat