Skip Navigation
Attacking UNIX Systems via CUPS, Part I | CUPS Remote Code Execution
  • Oh, hey! Wasn't even a problem for me.

  • Is Google Maps getting worse?
  • Alternatively, download Organic Maps and contribute to OpenStreeMaps and help make the best alternative even better.

    From their page:

    • Detailed offline maps with places that don't exist on other maps, thanks to OpenStreetMap
    • Cycling routes, hiking trails, and walking paths
    • Contour lines, elevation profiles, peaks, and slopes
    • Turn-by-turn walking, cycling, and car navigation with voice guidance and Android Auto
    • Fast offline search on the map
    • Export/import bookmarks in KML/KMZ, import GPX
    • Dark Mode to protect your eyes
    • Countries and regions don't take a lot of space
    • Free and open-source
  • What are your favorite shows and why?
  • Scrubs! [0] [1] [2].

    It had a great 8 season run (the 9th season doesn't exist, ignore those who incorrectly say it does). The show was funny, insightful, great dialogue, characters, serious moments and a great cast. Additionally the music choices in each episode were always top-notch. Note that "a handful of songs were replaced in the versions released to streaming services such as Netflix and Hulu due to licensing issues." [3].

    Lastly, "IGN gave the first season a perfect score of 10. The seven following seasons were rated, respectively, 9, 9, 9, 8, 7.5, 8.3 and 7.5" [4].

    [0] https://www.rottentomatoes.com/tv/scrubs

    [1] https://www.imdb.com/title/tt0285403/

    [2] https://en.wikipedia.org/wiki/Scrubs_(TV_series)

    [3] https://en.wikipedia.org/wiki/Scrubs_(TV_series)#Music

    [4] https://en.wikipedia.org/wiki/Scrubs_(TV_series)#Reception

  • Mozilla has fired Chief Product Officer Steve Teixeira after cancer diagnosis
  • By that simple logic any new browser will be ridiculously behind Firefox. Firefox's code base has been in development for nearly 30 years - https://en.wikipedia.org/wiki/Netscape_Navigator

  • Mozilla has fired Chief Product Officer Steve Teixeira after cancer diagnosis
  • I was excited for it up until I saw what happened. I get the perspective the maintainer might be coming from, but they made a huge deal out of something that shouldn't have been.

  • Mozilla has fired Chief Product Officer Steve Teixeira after cancer diagnosis
  • Sure, but it’s worth asking why the management is so poor

    Could just be incompetence.

    Working in a bigger corp and seeing people continuously fail upwards or get hired into positions where they run around like headless chickens - sometimes the reason is leadership putting people in the wrong role and not holding them accountable because its easy to "fudge metrics" and believe things are going well.

    The strategy I've seen far too often:

    • Deliver a half-working project that is bursting at the seams and requires more work and resources (or introduces a technical debt that most people can't even begin to comprehend).
    • Leadership declares it a success because a long enough train wreck takes time to be noticed when you're near the end of the tracks and the people at the front lines are doing everything they can to avoid it.
    • Find a new job before the shit hits the fan (typically hold off until your RSU's fully vest) and talk about how you implemented X while saving company Y and how successful it was.
    • Leave the place worse off than before.
    • The project/implementation starts showing signs of failure and leadership blames others (because the guy who implemented things is now gone and he did things so well how could it possibly be their fault?)

    Too often I've seen meetings between management not even understanding what their "core issues" are. How do you even make a business better if you don't even understand your pain points?

    It's both fascinating and scary.

  • Mozilla has fired Chief Product Officer Steve Teixeira after cancer diagnosis
  • Hard agree. Apple's ecosystem is primarily completely closed-source. If you abandon them or they abandon you you're left with nothing. At least with open source-based projects like Chrome/Firefox you can fork the code and not have to start from zero against a goliath. Apple would never give its customers that kind of leverage.

  • Mozilla has fired Chief Product Officer Steve Teixeira after cancer diagnosis
  • I agree with you. It's frustrating to see people lump in genuinely good AI/ML work like private on-device translations in attempts to discredit Mozilla. There are good criticisms against them. They've made mistakes. There's zero need to lump in AI/ML.

  • Element X, Call and Server Suite are production ready
  • that's interesting. I had found it fast initially when it was first released. I didn't use it often but when I finally stared using Matrix more often I was bouncing between both and Element X was significantly slower than normal Element so I decided to uninstall just a few weeks ago. I had even tried un/reinstalling to see if it would fix it, but it didn't. Much happier with it now.

  • Element X, Call and Server Suite are production ready
  • I had just uninstalled Element X like two weeks ago because I found it to under perform compared to the normal Element client on Android, in addition to lacking some features. I guess I'll give it another shot.

    Update: WOW this thing feels lightning fast compared to just a few weeks ago. This is great. Not sure about feature completeness, but based on speed I think I'll migrate Element > Element X again. Great job to the team!

  • Has Google Search gotten so much worse in the last couple of weeks?
  • yes. use any of the following, in no particular order:

    • ecosia.org - A non-profit certified B corp that plants trees by serving ads in your search results. Bing search underneath.
    • duckduckgo.com - A privacy friendly search engine. Primarily sourced from Bing but mixes in a few other sources.
    • any SearXNG instance - A self-hostable search front-end to various search engines.
    • marginalia.nu - specifically 'random' - An independent DIY search engine that focuses on non-commercial content, and attempts to show you sites you perhaps weren't aware of in favor of the sort of sites you probably already knew existed.
  • What is your favourite open source software that you discovered in the past year, that you can no longer live without?
  • I really tried making Logseq work for me but even if they added some kind of organization/hierarchy, I still had performance issues with my limited notes (just testing things, didn't want to go all the way in), and various copy/paste drag and drop UX issues that made the experience frustrating.

  • What is your favourite open source software that you discovered in the past year, that you can no longer live without?
  • Notesnook.

    I was previously using Obsidian, which is great! but didn't like that it was closed source. I then went on to try various options [0] but none of them felt "right". I eventually found notesnook and it hit everything I was looking for [1]. It's only gotten better in the last year I started using it and just recently they introduced the ability to host your own sync server, which is one of the requirements it didn't initially make, but was on their roadmap.

    [0] Obsidian, Standard Notes, OneDrive, VSCode with addons, Joplin, Google Keep, Simple Notes, Crypt.ee, CryptPad (more of a collabroation suite, which I actually really like, but it did not fit the bill of a notes app), vim with addons, Logseq, Zettlr, etc.

    [1] Requirements in no particular order:

    • Open source client and server.
    • Cross-platform availability as I use Windows, Linux, Mac, and Android.
    • Cross-platform feature parity.
    • Doesn't fight me over how notes should be taken - looking at Logseq's lack of organization.
    • Easy notes syncing.
    • End-to-end encryption (E2EE). It's about to be 2025, if the tools you're picking up aren't E2EE, you're letting unknown strangers access your data and resell it. It doesn't matter what their privacy policy says as that can always change and/or they can get compromised/compelled to expose your data.
    • Ability to publish notes.
    • Decent UX.
  • Pixel 9 Pro condensation in camera lens
  • I had zero hardware issues with the Pixel 8 before.

  • Pixel 9 Pro condensation in camera lens
  • it was either a hair or dust, its not cracked/there anymore

  • Pixel 9 Pro condensation in camera lens

    Soooo.... I've never had this issue on any other phone before. Is it normal to get condensation inside the camera lense (wide angle and telephoto)?

    it's dried out now, but I can see spots on the inside of the lense now that the water is gone, I can only imagine this getting worse over time, affecting quality. is this worth an RMA?

    30
    Study Ties Climate Crisis to Spread of Valley Fever-Causing Fungus in California
  • and it's only gonna get worse around the world 🤠

  • Search warrants for Signal user data, Santa Clara County
    signal.org Search warrants for Signal user data, Santa Clara County

    Because everything in Signal is end-to-end encrypted by default, the broad set of personal information that is typically easy to retrieve in other apps simply doesn’t exist on Signal’s servers.

    Search warrants for Signal user data, Santa Clara County
    14
    Android 7.6 features
    signalupdateinfo.com Signal for Android v7.6

    Signal news and updates. We post about new and upcoming features to keep you up-to-date with your favorite E2EE messaging app.

    Signal for Android v7.6
    • Group call reactions 🎉
    • Double-tap a message to edit ✍️
    • Link preview images no longer show in the 'Shared Media' section 🏞️
    • Improvements to missed call handling 📞
    • Updated permissions popup UI 🍾
    2
    Memos - Easily capture and share your great thoughts. Open Source and Free forever
    www.usememos.com Memos - Easily capture and share your great thoughts. Open Source and Free forever

    A privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.

    Memos - Easily capture and share your great thoughts. Open Source and Free forever

    cross-posted from: https://lemmy.ml/post/10866175

    > Check out the live demo at https://demo.usememos.com/

    3
    Memos - Easily capture and share your great thoughts. Open Source and Free forever
    www.usememos.com Memos - Easily capture and share your great thoughts. Open Source and Free forever

    A privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.

    Memos - Easily capture and share your great thoughts. Open Source and Free forever

    Check out the live demo at https://demo.usememos.com/

    17
    Merge movies with different resolution on different paths?

    I know this works if I have, for example:

    movies/ - movie1 - 1080p.mkv - movie1 - 2160p.mkv

    but what if I have:

    movies/ - movie1 - 1080p.mkv movies2/ - movie1 - 2160p.mkv

    Because I'm out of space on the driver under "movies". Do I need to have them in the same parent folder?

    3
    Edit Message in Signal

    cross-posted from: https://lemmy.ca/post/6601917

    > > Edit Message > > > Now you can edit a message even after it has been sent! Fix a tpyo, include the missing ingredient in grandma's chocolate chip cookie recipe, or add the punchline to a joke if you hit the send button too quickly. The choice is yours. > > > Messages will always show when they have been edited, and you can tap on the "Edited" indicator to see the full edit history for any edited messages. > > > Update the past in the present to prevent future confusion today! > > Got this today on Signal beta. Editing is one feature I really wanted in Signal. > > Anyone else got it?

    4
    Signal's Meredith Whittaker: AI is fundamentally 'a surveillance technology'
    techcrunch.com Signal's Meredith Whittaker: AI is fundamentally 'a surveillance technology' | TechCrunch

    Why is it that so many companies that rely on monetizing the data of their users seem to be extremely hot on AI? If you ask Signal president Meredith

    Signal's Meredith Whittaker: AI is fundamentally 'a surveillance technology' | TechCrunch

    > Why is it that so many companies that rely on monetizing the data of their users seem to be extremely hot on AI? If you ask Signal president Meredith Whittaker (and I did), she’ll tell you it’s simply because “AI is a surveillance technology.”

    3
    Was thinking of creating a honeypot

    but before I do, I figured I'd ask if anyone's aware of any tools/software that covers my basic needs of setting something basic that may alert me if there are any intruders in the network?

    Needs:

    1. Fake ssh login that can trigger a script so I can take care of the rest.
    2. Fake network share (cifs/samba) that can trigger a script if anything tries to access it.

    Would be great if there are any docker images I can just pull, make some minor edits, and run.

    Thanks!

    18
    Clima: A beautiful, minimal, and fast Android weather app
    codeberg.org clima

    Beautiful, minimal, and fast weather app.

    clima

    Just found this today and thought I'd share.

    ---

    Features:

    ✅ Beautiful, minimal UI ✅ 8-day forecast ✅ Imperial units support ✅ Dark and light themes ✅ No ads or trackers

    40
    Not everything is secret in encrypted apps like iMessage and WhatsApp
    www.washingtonpost.com Not everything is secret in encrypted apps like iMessage and WhatsApp

    Read this to find out if Apple, Google, or your phone company might be able to see everything in your family group chat. Spoiler alert: Yeah, maybe!

    One feature of apps such as iMessage and WhatsApp is that your texts or voice calls are scrambled and private from everyone.

    With end-to-end encrypted technology, no one but you and the intended recipients can know what you wrote or said — not hackers, the app companies or the police.

    Except, not everything is end-to-end encrypted in end-to-end encrypted apps.

    That could mean what you type in chats are saved on company computers that corporations such as Apple or your phone provider could read. Details such as the timestamps of every text to your boyfriend might not be under lock and key, either.

    That’s not necessarily bad. Each end-to-end encryption choice has trade-offs. More privacy and security could also make it harder for you to use an app, or can shield activity of terrorists and child predators.

    The mess I’m describing — end-to-end encryption but with certain exceptions — may be a healthy balance of your privacy and our safety.

    The problem is it’s confusing to know what is encrypted and secret in communications apps, what is not and why it might matter to you.

    To illuminate the nuances, I broke down five questions about end-to-end encryption for five communications apps.

    Is the content of every message automatically end-to-end encrypted?

    • WhatsApp: Yes

    • Apple’s Messages: No

    • Messages by Google: No

    • Meta Messenger: No

    • Signal: Yes

    The biggest encryption caveat is for the built-in texting apps on iPhones and most Android phones in the United States. Those are Apple’s Messages app, also known as iMessage, and the Messages by Google app.

    If you use Apple’s app, texts that you send and receive are only end-to-end encrypted if everyone else in the chat is using that app.

    If the text you see is in blue, the contents of messages are end-to-end encrypted for everyone in the chat.

    Even if Apple wanted to read your texts, it doesn’t have a key to unscramble those messages. (There’s a caveat in the next section about backup copies.)

    But the dreaded green bubbles are Apple’s warning. If you’re in a group chat with three people using Apple’s chat app and one person on an Android phone, no one’s texts are end-to-end encrypted.

    Each of your mobile phone providers might save every word of your communications. Those companies could, in theory, read your messages, lose them to thieves or hand them over to police with valid legal orders.

    Google’s chat app has the same encryption loophole. (For most people in the United States, Messages by Google is the standard texting app on Android phones.)

    Your texts in Google’s chat app are only end-to-end encrypted if everyone else is using that app.

    Google shows if your texts are end-to-end encrypted with signs such as a lock icon under texts and another on the send button.

    Are backup copies of your messages automatically encrypted, with no option for the app company to unscramble them?

    • WhatsApp: Yes

    • Apple’s Messages: No

    • Messages by Google: Yes*

    • Meta Messenger: No

    • Signal: Yes

    WhatsApp and Signal don’t let you save copies of your texts or call logs to the app makers’ computers.

    That means they don’t have saved message copies in a cloud that crooks could break into.

    But if you buy a new phone and forget your password, WhatsApp and Signal can’t really help you transfer all your old texts.

    If you back up copies from Apple’s chat app and Meta Messenger, the companies have the keys to unscramble what’s written in encrypted chat copies. Again, these unscrambled text copies can help in criminal investigations or they could be stolen or misused.

    Apple recently introduced a choice to fully end-to-end encrypt backup copies of iCloud accounts, which means not even Apple could unlock your scrambled backup texts.

    If you pick that option, Apple can’t help recover your chats if you forget your account password.

    This risk is why Apple makes this feature a pain to turn on, and requires you to list a plan B if you forget your password, such as a personal contact who knows your decryption code.

    WhatsApp has an option to save backup copies of your messages to Apple’s or Google’s cloud. WhatsApp doesn’t save those backups.

    For Messages by Google, the company says chats backed up to the company’s computers are automatically encrypted – as long as your Android phone has a screen that you need to unlock with a password or another method.

    Google gets an asterisk because it says it cannot unscramble your backup texts in its cloud. But it can for attachments like photos.

    Meta Messenger has been testing an option for people to turn on fully end-to-end encrypted backups.

    Does the app save your account details in a way it can access?

    • WhatsApp: Yes

    • Apple’s Messages: Yes

    • Messages by Google: Yes

    • Meta Messenger: Yes

    • Signal: Yes*

    Most end-to-end encrypted apps save some “metadata,” or details about you or what you do with the app. They can retrieve the metadata if necessary.

    The app companies aren’t necessarily specific about which metadata they save and can unlock. This information can make you less private– and it can help in criminal prosecutions.

    WhatsApp, for example, may have your general physical location when you use the app and the names of your group chats. Under legal orders, WhatsApp has the ability to log the phone numbers your number communicates with.

    WhatsApp says these details can help identify spammers and aid in investigations of potential criminal activity including people who share images of child sexual abuse.

    Signal is a yes with an asterisk because it doesn’t save much the app can retrieve – just a phone number used to set up an account and the last time the account connected to Signal.

    Are disappearing messages an option?

    • WhatsApp: Yes

    • Apple’s Messages: No

    • Messages by Google: No

    • Meta Messenger: Yes

    • Signal: Yes

    Even with end-to-end encrypted texts, someone on the receiving end could leak them or turn them into the police.

    For extra privacy, WhatsApp, Meta Messenger, and Signal have an option to set texts to automatically delete in as little as 24 hours from the phones of everyone in a chat.

    This isn’t ironclad, either. Someone could take a photo of your messages before they disappear.

    Does the app use the Signal protocol?

    • WhatsApp: Yes

    • Apple’s Messages: No

    • Messages by Google: Yes

    • Meta Messenger: Yes

    • Signal: Yes

    The Signal protocol is considered a gold standard. No one yet has found holes in the end-to-end encryption technology.

    Read more:

    8
    Demo of the new QR code design
    community.signalusers.org New QR code design

    Nice, Username QR codes You can change the color of the background… and the QR code, probably to help with readability…

    New QR code design

    A preview of what's coming! Very excited for this update.

    0
    Text formatting is coming to Signal

    I personally would have preferred markdown support, but this is a long overdue and welcome improvement.

    0
    Setting up a media server with docker, Jellyfin, Deluge, Sonarr and Radarr
    agatsyasingh.wordpress.com Setting up a media server with docker, Jellyfin, Deluge, Sonarr and Radarr

    Hey,if you’re a data hoarder like me, or are someone who just wishes to have a neat way to showcase your media, then this post might be of use to you.To begin with, I’ll offer a concise…

    Setting up a media server with docker, Jellyfin, Deluge, Sonarr and Radarr
    0
    What is Secure? An Analysis of Popular Messaging Apps
    techpolicy.press What is Secure? An Analysis of Popular Messaging Apps

    Results of a technical, design, and policy analysis of encrypted apps from Signal, Telegram, Google, Apple, and Meta.

    What is Secure? An Analysis of Popular Messaging Apps

    Wanted to share this article/research paper. I haven't had a chance to read it, but interested to hear people's thoughts. Will have to catch up after work.

    0
    Excited for the updated Jellyfin admin dashboard
    fosstodon.org thornbill :jellyfin: :tux: (@thornbill@fosstodon.org)

    Attached: 1 image Here is a little teaser of some new functionality coming to the #Jellyfin admin dashboard... a complete overhaul of the activity log! The biggest new feature is the ability to view all the available activity log entries instead of being limited to only 100 entries in the last 24 h...

    thornbill  :jellyfin: :tux: (@thornbill@fosstodon.org)
    0
    KLISHDFSDF ᗪᗩᗰᑎ @lemmy.ml
    Posts 20
    Comments 443