jrollans.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Site description
These are the voyag... uh, things I post about.
Admin email
jrollans@gmail.com
Admin account
@jrollans@jrollans.com

Search results for tag #opensource

[?]Arint - SEO+KI » 🌐
@Arint@arint.info

[?]Arint - SEO+KI » 🌐
@Arint@arint.info

AodeRelay boosted

[?]omg! ubuntu » 🌐
@omgubuntu@floss.social

Development has ended on the Linux port of Orion browser.

Kagi, the company who made it, says it plans to open source the code this month, but will not be continuing work itself. Users of the Linux beta will get no further updates.

omgubuntu.co.uk/2026/10/orion-

    [?]Conan the Sysadmin » 🤖 🌐
    @conansysadmin@mstdn.social

    Even mechanisms from the time before the oceans drowned Atlantis may be resurrected, although one must carefully consider the consequences. cromwell-intl.com/open-source/

      [?]Truth Matters » 🌐
      @TruthMattersww@sueden.social

      Heute habe ich meinen eigenen SMTP-Relay auf einem kleinen VPS produktiv genommen. Keine Tracking-Pixel, kein externer Maildienst, der Nachrichten kommentarlos „droppt“, und volle Kontrolle über Queue, Logs und Zustellung.
      SPF, DKIM, DMARC und TLS laufen sauber, Thunderbird und iPhone senden direkt über meinen Server – inklusive automatischer Zertifikatserneuerung.
      Ein kleines Stück Infrastruktur selbst zurückgeholt. 😊

        AodeRelay boosted

        [?]Linuxiac » 🌐
        @linuxiac@mastodon.social

        PhotoSuite is a free, open-source image editor for Linux, Windows, and macOS, offering a Photoshop-like workflow and native PSD/PSB support.
        linuxiac.com/photosuite-is-a-f

        PhotoSuite is a free, open-source image editor for Linux, Windows, and macOS, offering a Photoshop-like workflow and native PSD/PSB support.

        Alt...PhotoSuite is a free, open-source image editor for Linux, Windows, and macOS, offering a Photoshop-like workflow and native PSD/PSB support.

          AodeRelay boosted

          [?]zoe :blahaj: [She/her, it/its] » 🌐
          @commanderred@chaos.social

          does anyone have templates for hostile agents.md files? like ones that would completely destroy a device the repo is cloned to.

          asking for a friend ofcs

          :BoostOK:

            [?]Jay 🚩 :runbsd: » 🌐
            @jaypatelani@bsd.network

            Debian is obviously a rock-solid choice for CERN. With their massive software ecosystem and community, it makes total sense why they went that route. But part of me can't help but wonder what a NetBSD-powered Large Hadron Collider would look like! ⚛️

            NetBSD’s hardware portability just seems like a perfect match for lab. Plus, using pkgsrc to manage complex scientific software seamlessly across all those different niche architectures would be incredible to see at that scale.

            Nothing but respect for the Debian rollout, but a sysadmin can dream! 🚩🚀

            @cern


              AodeRelay boosted

              [?]panos :catodon: » 🌐
              @panos@catodon.rocks

              Whatever your opinion on LLM-assisted coding is, this is impressive, and in my opinion super useful. Open source replacements for 7 popular Adobe apps, including Photoshop, written in Rust. They expect to have 100% parity in a month. Over the past 20 years, I've been hearing people complain about the lack of Photoshop in Linux. Well, apparently, here it is. Fully open source and free to use. AI is powering a huge boost for open source software, whether someone wants to accept it or not.

                [?]Open Robotics » 🌐
                @openrobotics@hachyderm.io

                REP-158 has now been approved by both the ROS and Gazebo project management committees (PMCs).

                This enhancement will add OpenUSD to the existing URDF and SDF formats for describing robots & environments.

                Thank you to our community members from Robotech.ai, NVIDIA, and Ekumen for driving this REP to acceptance!

                reps.openrobotics.org/rep-0158

                The Open Robotics logo.

                Alt...The Open Robotics logo.

                  fedicat boosted

                  [?]🏳️‍⚧️ Christin Löhner 🏳️‍🌈 » 🌐
                  @christin@lsbt.me

                  FediSuite 2.0 is live! 🎉

                  Your Fediverse Management Platform

                  If you run several Fediverse accounts, you might know the feeling: an idea is sitting in a note somewhere, a scheduled post is in another tab, and the numbers end up somewhere else again. I wanted to bring it all together.

                  The new takes a post from the first idea to publication. save automatically. In the , you can see scheduled posts by month or week and move them to another time. group posts around a topic or event. Coloured help you stay organised without ever appearing as hashtags.

                  After publishing, the searchable helps you find and reuse your work. You can turn older posts into new drafts, collect evergreen content and spot posts that have become interesting again.

                  compares formats, text lengths, links and more. Hints based on your own data appear while you write, and the shows promising time slots. For Mastodon-compatible accounts, the new shows which accounts interact with your posts, who is new and who keeps coming back. , and stay separate. These are ideas to try, not promises of more reach.

                  There’s a lot of work under the hood, too: access tokens for connected accounts are now stored encrypted, sessions expire, and one-time links have better protection.

                  FediSuite is still open source, free to use, without ads or trackers, and available to self-host. The web app supports more than 20 Fediverse platforms.

                  Give it a try: fedisuite.com/

                  I’d love to hear your thoughts and ideas. And if something isn’t working quite right, please tell me that too. 💜

                    [?]hasamba » 🤖 🌐
                    @hasamba@infosec.exchange

                    ----------------

                    🛠️ Tool
                    ===================

                    Kav is an open-source Android application designed for navigating public transport in Israel. It provides trip planning, live bus tracking, and navigation without ads, user accounts, or analytics.

                    Key Features
                    • Trip planning with step-by-step navigation, including a floating window for tracking when the app is backgrounded.
                    • Live bus tracking via notification shade and Android 16 live updates.
                    • Offline map support. The app fetches a 176MB map on first launch and caches it locally, ensuring no tile server sees user location.
                    • Private search enabled by default to keep location data out of search queries.
                    • Departure boards, favorite places, and local backups to a .kav file.

                    Technical Implementation
                    The app is built for Android 8.0+ and licensed under GPL-3.0. It uses MapLibre and Protomaps for rendering OpenStreetMap data. Transit timetables are derived from the Israel Ministry of Transport's GTFS feed. Trip planning and live positions are sourced from Moovit.

                    Users install the app by downloading the APK from the GitHub releases page. The app includes a self-update mechanism. Developers looking to contribute or build the app locally can utilize the provided script tools/android_toolchain.sh which fetches the required JDK and Android SDK. The timetable data is not included in the repository due to licensing ambiguities from the Ministry of Transport, so builders must run tools/fetch.sh and tools/export_web_bundle.py to generate the necessary regional bundles.

                    Use Cases
                    This tool is primarily for Israeli residents or visitors who want a minimal, privacy-respecting alternative to Moovit. It is suitable for users who prefer offline maps and want to avoid ad-heavy transit applications.

                    Limitations
                    The app is currently distributed outside of standard app stores. While it uses Moovit's data for live positions, it does not replicate Moovit's social features or account-based syncing. Note: haven't tested personally.

                    🔹 tool

                    🔗 Source: github.com/ImNoammm/kav

                      [?]🐈‍⬛David Sommerseth » 🌐
                      @dazo@infosec.exchange

                      Some of team will be in Oct 5 with talks about distributed source/git forges.

                      Join if you can and have an interest!

                      More details: radicle.zulipchat.com/#narrow/

                        AodeRelay boosted

                        [?]9to5Linux » 🌐
                        @9to5linux@floss.social

                        -Based Parrot OS 7.4 Released with AnonSurf 6.0, Updated Images, and Kernel 7.1 9to5linux.com/parrot-os-7-4-re

                        @parrotsec

                        A screenshot of Parrot OS 7.4 with the KDE Plasma desktop environment showing the application menu.

                        Alt...A screenshot of Parrot OS 7.4 with the KDE Plasma desktop environment showing the application menu.

                          [?]Markus Feilner » 🌐
                          @mfeilner@mastodon.social

                          Looking for or people in and . Just visited university of . Very impressive.

                          Outside main entrance

                          Alt...Outside main entrance

                          Inside lots of flags

                          Alt...Inside lots of flags

                          Although it's from 1948 there is nice Arch-itecture...

                          Alt...Although it's from 1948 there is nice Arch-itecture...

                          We are Europe.

                          Alt...We are Europe.

                            AodeRelay boosted

                            [?]Alien BOB » 🌐
                            @alien@fosstodon.org

                            @garpu did you know that the government already hosts the code for their projects on a instance: code.overheid.nl/ - which is also powering our own Forge at forge.slackware.nl/ ?

                              [?]Sebastian Bergmann :phpunit: » 🌐
                              @sebastian@phpc.social

                              Somehow I completely missed this milestone: PHPUnit has now been installed via Composer more than 1,005,280,071 times. 🤯

                              One billion installs. Thank you to everyone who writes tests, reports bugs, sends pull requests, and supports the project. ❤️

                              packagist.org/packages/phpunit

                                AodeRelay boosted

                                [?]9to5Linux » 🌐
                                @9to5linux@floss.social

                                7.2.9, 6.18.55, 6.12.112, 6.6.158, 6.1.189, 5.15.222, and 5.10.271 kernels are now available for download at kernel.org

                                  [?]GamingOnLinux » 🤖 🌐
                                  @gamingonlinux@mastodon.world

                                  [?]GamingOnLinux » 🤖 🌐
                                  @gamingonlinux@mastodon.world

                                  The Wine 11.19 release is now available for this open source Windows compatibility layer, bringing an assortment of new features and fixes.
                                  gamingonlinux.com/2026/10/wine

                                    [?]Marco Mornati :ve: » 🌐
                                    @mmornati@techhub.social

                                    New post: Laya vs Jev, ten days later 🧠⚖️

                                    Ten days ago I benchmarked two "System One" decision models for my LLM router: Jev (TypeSafe, hosted) was usable as-is, Laya (open weights) zero-shot was not. Laya's README says "fine-tune me", so I did, on a 16 GB M4 MacBook.

                                    🔁 Laya 0.3.6 → 0.3.24: 18 releases, but the weights are byte-identical. Same numbers.

                                    🆕 New open rivals on my 80-prompt bench:
                                    • Laya typed-decisions: 71% topic, but never confident → over-provisions everything
                                    • Von 1.3: closest to gold out of the box (48%), but over-confident
                                    • Kev-0.8B: 81% topic, 100% multilingual, very under-confident
                                    Jev 1.13: 89% topic, 72.5% same route as gold, still the only one usable as-is.

                                    🎯 Fine-tuning Laya on my own labels (not Jev's: distilling Jev is against TypeSafe's terms):
                                    • 480 labelled prompts → 1,920 training items
                                    • official Apple Silicon script, MPS
                                    • 41.5 min for 4 epochs, 15.4 GB peak memory
                                    • rule of thumb: ~6 s per labelled prompt

                                    Results:
                                    • topic 59% → 85%
                                    • complexity 45% → 72.5% (= Jev)
                                    • risk 31% → 69% (> Jev)
                                    • but 0% confident answers 🙃 → a temperature fitted on held-out data (T=0.87) fixes it
                                    • same route as gold: 20% → 64% (Jev 72.5%), routed cost $1.28 vs Jev's $1.35

                                    Caveats in the post: same labeller for train and test, tiny groups, and it under-provisions 9 prompts vs 3 for Jev.

                                    🏠 Then the reality check: I replayed 80 real Home Assistant decisions (VMC, shutters, water, watering) through Jev and stock Laya.
                                    • Laya English answers ~0.5 to everything, and cuts 64/80 requests (512-token window; my prompts grew to 1–1.9k tokens with history)
                                    • Laya multilingual says "yes" to almost everything, including "normal" (0.97) to a night-time leak 💧
                                    • Jev in the house: VMC disagreements with the rule went from 100% to 6% once it got history. Half a cent per day.

                                    So the house stays on Jev. The local path is clear though: fine-tune on my own feedback labels, not on Jev's answers.

                                    Full post, commands, outputs and timings (EN/FR/IT):
                                    mornati.net/laya-vs-jev-ten-da

                                    Code & recipe: github.com/mmornati/system-one

                                    Thanks again to everyone who commented on the last Home Assistant post: the "why not a small local model?" question is what pushed me to measure this properly.

                                      [?]Arint - SEO+KI » 🌐
                                      @Arint@arint.info

                                      RT @jaypmo: Viele Leute haben mich gefragt: "Warum machst du deine Kern-Dokumente für das Rechtswesen open source - ist das nicht dein geistiges Eigentum?" Nein. Unsere außergewöhnlichen Anwälte sind unser geistiges Eigentum. Unser massiver Deal-Flow ist unser geistiges Eigentum. Unsere Präzedenzdokumente sind wie eine Programmiersprache: die zugrunde liegende Infrastruktur, die die Arbeit ermöglicht.

                                      mehr auf Arint.info

                                      https://x.com/jaypmo/status/2106080442004697367

                                        [?]:freebsd: :linux: :volvo: » 🌐
                                        @unixviking@social.linux.pizza

                                        Things have been very quiet here over the last few months, for various reasons: summer, vacation, health, and also because I’ve been watching developments around the world.

                                        And, of course, especially what’s been going on in the Fascist States of America. And since the arrival of the dumbest president (not just in the U.S.) of all time—the sexist, racist, fascist, and brainless, uneducated moron with the cognitive development and vocabulary of a five-year-old - Donald Trump -
                                        nothing good has ever come of it. The whole world sees it, except for the Americans. For the most part, they believe the bullshit their president lies about and stirs up.

                                        This is also because the U.S. tech bros like Musk, Zuck, and radical evangelical-fascist leaders like Thiel exploit the president’s intellectual shortcomings for their own agenda. And that agenda is the subjugation of free society under AI-driven tech fascism.

                                        Somehow, despite all my efforts, I was always dependent on US tech to a very small extent. Whether it was Fedora for Linux, Pixel phones for GrapheneOS, or even a few remaining Google services like YouTube. But now that’s over! Even though Fedora worked best out of all the Linux distributions, after much consideration I’ve decided to make a complete and permanent switch to Debian. Partly because I hope that, unlike other distros, Debian won’t integrate AI.

                                        And even if I’m going to upset a lot of Americans right now by picking on their God-sent president—that’s what the whole world (except the U.S.) thinks of Trump. No one takes him seriously; everyone laughs at him. But like a criminal mafioso, he’s blackmailing the free world. Well, he is one, after all.

                                        I hope for the sake of the U.S. and humanity that the country can free itself from the stranglehold of this radical evangelical fascist gang of Republicans and Trump in time, before it’s too late, and that the world will thereby become a better place again.

                                          AodeRelay boosted

                                          [?]DerReparierer » 🌐
                                          @DerReparierer@social.tchncs.de

                                          Hier wird das Internet repariert!

                                          Morgen ist digitaler Unabhängigkeitstag. Viele Freiwillige helfen euch beim Umstieg auf Open-Source Software.

                                          Die Themen sind vielfältig: Messenger, Suchmaschine, Browser, Smartphone, Betriebssystem, Cloud, Passwortverwaltung, Shopping, ....

                                          Heute und die nächsten Tage in ... und vielen weiteren Städten!

                                          Schaut gerne mal vorbei!

                                          Zu den Events:
                                          events.diday.org/

                                          Zu den Anleitungen:
                                          di.day/de

                                          Karte mit Orten der nächsten DI-Days.

                                          Alt...Karte mit Orten der nächsten DI-Days.

                                          AodeRelay boosted

                                          [?]Matthias Mair » 🌐
                                          @matmair@mastodon.social

                                          just blogged: the ecosystem - a first peak at a large and onging data collection effort to better understand the current InvenTree ecosystem. The goal is to have better data on how we can evolve the plugin interface and what foes wrong when building plugins.

                                          mjmair.com/blog/2026/the-inven

                                          At some point this data will also be made avaiable, still looking into the best wy to identify which plugins are intended to be pblic and safe enough to be "advertised".

                                            AodeRelay boosted

                                            [?]Michael Boelen » 🌐
                                            @mboelen@mastodon.social

                                            Got the honors to help testing LittleFedi, an project by @stefano and a very interesting one!

                                            Why? Small, focused, no clutter, simplicity, easy to use. Also, Stefano is a great person and used the feedback he received to make it even better.

                                            If you want to set up your own Fediverse instance, then this might be the one to start (and stay).

                                            So do follow @littlefedi_official and visit the website littlefedi.org/ for more information.

                                            🔁 Spread FOSS and great projects ❤️

                                              [?]iX Magazin » 🌐
                                              @iX_Magazin@social.heise.de

                                              [?]heise online English » 🤖 🌐
                                              @heiseonlineenglish@social.heise.de

                                              Coding Agent Pi: More space in the prompt, less ballast

                                              Pi is an extensible AI coding agent for the terminal. Version 1.0.0 streamlines the coding mode, adds image generation, and starts in fullscreen.

                                              heise.de/en/news/Coding-Agent-

                                              AodeRelay boosted

                                              [?]Solus » 🌐
                                              @getsolus@floss.social

                                              Heya folks! It's sync day, and that means it's time for the weekly Solus roundup! This is a big day for @buddiesofbudgie Budgie Desktop users as 10.10 is now available for everyone!

                                              Read all about it on our forums: discuss.getsol.us/d/13014-week

                                              - Evan

                                                AodeRelay boosted

                                                [?]9to5Linux » 🌐
                                                @9to5linux@floss.social

                                                [?]WineReleaseBot » 🤖 🌐
                                                @WineReleaseBot@mastodon.world

                                                Wine has updated to version wine-11.19. Check it out here: gitlab.winehq.org/wine/wine/-/

                                                  [?]zahntron » 🌐
                                                  @zahntron@mastodon.social

                                                  Been hearing some sketchy things about the ethics going on at and after I just finished my gmail transition. For those in a world, what are you using for email and cloud?

                                                    [?]Arint - SEO+KI » 🌐
                                                    @Arint@arint.info

                                                    RT @Blackwellboy: Hör auf, LLMs auf langweiligen Benchmarks zu testen. Setze sie in eine lebendige Zivilisation.

                                                    mehr auf Arint.info

                                                    https://x.com/Blackwellboy/status/2105850448951578714

                                                    [?]Smart Home Junkie » 🌐
                                                    @smarthomejunkie@mastodon.world

                                                    New video: what's new in the Home Assistant 2026.10 beta. 🏠
                                                    The highlight for me is the Triggered by condition. It's still trigger IDs under the hood, but you no longer type them by hand. You just tick the trigger in an if-then block.
                                                    Also covered: the new OpenStreetMap vector map, card visibility conditions, Modbus in settings, the new AI/MCP settings page and timer presets.
                                                    youtu.be/wWjcx0YK8nw

                                                      [?]c't Magazin » 🌐
                                                      @ct_Magazin@social.heise.de

                                                      Mein Umzug auf einen neuen Passwort-Manager (Open Source)

                                                      Das Passwort-Chaos aufzuräumen, kann überfordern. Passwort-Manager schaffen betriebssystemübergreifend Ordnung und auf Wunsch auch Open Source.

                                                      heise.de/news/Mein-Umzug-auf-e

                                                      [?]Daily CyberSecurity » 🌐
                                                      @DailyCyberSecurity@infosec.exchange

                                                      Discover the Ubuntu 26.10 Beta featuring Linux 7.3, GNOME 51, and a full Rust Coreutils migration. Explore the latest updates before its October launch.

                                                      dailytechnow.com/ubuntu-26-10-

                                                        [?]heise online English » 🤖 🌐
                                                        @heiseonlineenglish@social.heise.de

                                                        Less dependence on AI providers: Eclipse launches Sovereign AI Foundation

                                                        Many organizations use AI models they can neither inspect nor adapt. The Sovereign AI Foundation (SAIF) aims to highlight open-source alternatives.

                                                        heise.de/en/news/Less-dependen

                                                        [?]heise online English » 🤖 🌐
                                                        @heiseonlineenglish@social.heise.de

                                                        Age verification in the Fediverse: How the KIDS Act challenges Mastodon

                                                        The EU’s planned KIDS Act poses technical and organizational challenges for the Fediverse. However, it is unlikely to be the end, as some critics warn.

                                                        heise.de/en/background/Age-ver

                                                          [?]heise Developer » 🌐
                                                          @heisedeveloper@social.heise.de

                                                          Weniger Abhängigkeit von KI-Anbietern: Eclipse startet Sovereign AI Foundation

                                                          Viele Organisationen nutzen KI-Modelle, die sie weder prüfen noch anpassen können. Die Sovereign AI Foundation (SAIF) will Open-Source-Alternativen aufzeigen.

                                                          heise.de/news/Weniger-Abhaengi

                                                          [?]Degrowth or Extinction » 🌐
                                                          @ecosurrealism@jorts.horse

                                                          do not forget how to code. AI wont build illegal apps. You will.

                                                          do not forget how to code. AI wont build illegal apps. You will.

                                                          Alt...do not forget how to code. AI wont build illegal apps. You will.

                                                            [?]iX Magazin » 🌐
                                                            @iX_Magazin@social.heise.de

                                                            Altersverifikation im Fediverse: Wie der KIDS Act Mastodon herausfordert

                                                            Der geplante KIDS Act der EU stellt das Fediverse vor technische und organisatorische Probleme. Es dürfte aber nicht das Ende sein, wie manche Kritiker warnen.

                                                            heise.de/hintergrund/Altersver

                                                              [?]Arint - SEO+KI » 🌐
                                                              @Arint@arint.info

                                                              RT @thepirateface: Ein Tag nachdem das von Hugging Face verbotene Modell auf Pirate Face live ging:

                                                              mehr auf Arint.info

                                                              https://x.com/thepirateface/status/2105871729747013742

                                                                [?]heise online English » 🤖 🌐
                                                                @heiseonlineenglish@social.heise.de

                                                                Open Source with an expiration date? Siemens changes course on Radioss

                                                                Siemens is ending the OpenRadioss open-source project. The source code is no longer publicly accessible; instead, there is an R&D program.

                                                                heise.de/en/news/Open-Source-w

                                                                  [?]iX Magazin » 🌐
                                                                  @iX_Magazin@social.heise.de

                                                                  [?]Daily CyberSecurity » 🌐
                                                                  @DailyCyberSecurity@infosec.exchange

                                                                  Details and a PoC are public for CVE-2026-85714, a 9.1 Stirling PDF RCE via crafted SQL import. Upgrade to version 2.13.2 now.

                                                                  securityonline.info/stirling-p

                                                                    AodeRelay boosted

                                                                    [?]9to5Linux » 🌐
                                                                    @9to5linux@floss.social

                                                                    Latest 13 “Trixie”#Linux Kernel Update Patches More Than 1300 CVEs 9to5linux.com/latest-debian-13

                                                                    Debian 13 splash screen

                                                                    Alt...Debian 13 splash screen

                                                                      [?]iX Magazin » 🌐
                                                                      @iX_Magazin@social.heise.de

                                                                      Thunderbird für iOS: Die erste Testversion rückt näher

                                                                      Thunderbird gibt Einblicke in die native Entwicklung seiner iOS-App. Der Fokus liegt auf Kontoeinrichtung, Synchronisierung und Grundfunktionen.

                                                                      heise.de/news/Thunderbird-fuer

                                                                        [?]PHP Depend » 🌐
                                                                        @pdepend@phpc.social

                                                                        After years of development PHP Depend 3.0.0 has finally been released! 🎉

                                                                        github.com/pdepend/pdepend/rel

                                                                          [?]Oliver Zehentleitner » 🌐
                                                                          @oliverzehentleitner@burningboard.net

                                                                          What happens when a decision in your repository exists because of a decision in another repository?

                                                                          Follow the link.

                                                                          And then follow the links from there.

                                                                          That's what the new Keep the Why Globe does: it follows explicit reasoning links across repositories, one hop at a time.

                                                                          Each repository stays authoritative for its own reasoning. There is no graph database and no central project-memory service.

                                                                          Git distributes the files. The browser follows the references. The graph appears as a consequence.

                                                                          blog.technopathy.club/the-glob

                                                                          Keep the Why Globe

                                                                          Alt...Keep the Why Globe

                                                                            AodeRelay boosted

                                                                            [?]Sohrab Behdani :freebsd: » 🌐
                                                                            @sohrab@mastodon.bsd.cafe

                                                                            RE: ieji.de/@parchlinux/1173702505

                                                                            One of the things I’m really excited about in Parch Linux is GameHub, our all-in-one tool for managing game launchers and .

                                                                            We’re working on a feature that I think will be especially useful for people who : simply search for a game by title and see how well it runs on your system.

                                                                            Instead of guessing whether a game will work, digging through different compatibility reports, or installing it just to find out, GameHub will give you that information right where you need it.

                                                                            It’s still coming soon, but I’m really looking forward to seeing this become part of the Parch experience.

                                                                            And as always, it’s being built by the community, with and user freedom in mind.

                                                                              AodeRelay boosted

                                                                              [?]Sohrab Behdani :freebsd: » 🌐
                                                                              @sohrab@mastodon.bsd.cafe

                                                                              RE: ieji.de/@parchlinux/1173702298

                                                                              Parch Linux Hyperland has been released by the Parch community, and I’m proud to say that the Parch project in Iran has, at the very least, managed to bring a new generation of young people interested in technology closer to and its philosophy.

                                                                              This entire edition of Parch Linux was developed by young people under the age of 20. And honestly, this is the only Parch edition where, as the main maintainer, I simply acted as a supervisor and didn’t actually write or develop anything myself.

                                                                              Unlike many other distributions that ship with and tend to be highly , Parch takes a different approach. We want to give users a clean and flexible starting point rather than imposing a specific workflow or philosophy on them.

                                                                              We’ve also published our monthly report covering the past month, where you can read more about what the Parch community has been working on.

                                                                              You can find it on the blog. :)

                                                                                [?]Bob the Traveler » 🤖 🌐
                                                                                @bobthetraveler@mastodon.world

                                                                                [?]VSX.is | Digital sovereignty » 🌐
                                                                                @vsx@infosec.exchange

                                                                                Which Extension to Choose for Your Own Domain. And What It Says About You

                                                                                The previous installment ended with the idea that having your own domain is the first step toward being able to leave at any time.

                                                                                vsx.global/own-domain-extensio

                                                                                  AodeRelay boosted

                                                                                  [?]Floccus bookmark sync » 🌐
                                                                                  @floccus@fosstodon.org

                                                                                  Hello dear bookmark syncers! 💙 Curious what's been happening in the Floccus universe? Read the October 2026 Update from Marcel Klehr, the creator of Floccus. Version 5.11 brings a few long awaited goodies and is in roll out right now 🚀 patreon.com/marcelklehr/posts/

                                                                                    [?]Daniel » 🌐
                                                                                    @danielpetrica@infosec.exchange

                                                                                    I am a language school student, so I have enough homework. This time I want to give it out.

                                                                                    1. composer require --dev laravel/doctor
                                                                                    2. php artisan doctor
                                                                                    3. add laraplugins/doctor-health for package health

                                                                                    Check how healthy your dependencies really are.

                                                                                      AodeRelay boosted

                                                                                      [?]Pidgin Instant Messenger » 🌐
                                                                                      @pidgin@fosstodon.org

                                                                                      We just released 3.0 Alpha 3 and are moving to monthly releases going forward! Read the rest in our release announcement!! discourse.imfreedom.org/t/pidg

                                                                                        [?]Dima » 🌐
                                                                                        @dima@dol.social

                                                                                        Another @hackergarten Luzern evening, this time with no shortage of ideas on the flipchart. I missed the opening pitches, so I just went straight for @fitpub again, same as every time.

                                                                                        Found a bug while poking around the public timeline. Reported it to @McPringle he fixed it on the spot, and tomorrow's (today's?) nightly build is where we find out if it actually holds.

                                                                                        A selfie in a meeting room at the CSS ICT Campus in Zug, wearing a cap and sunglasses, with a wall screen behind showing the FitPub app and a laptop open on the table.

                                                                                        Alt...A selfie in a meeting room at the CSS ICT Campus in Zug, wearing a cap and sunglasses, with a wall screen behind showing the FitPub app and a laptop open on the table.

                                                                                        A flipchart titled 'Hackergarten' with a handwritten list of project ideas and their team sizes: FitPub (Java, 5), OpenJDK (Java, 3), Disk Space (Java, 1), E-Mail MCP (Java, 2), Mnemic (Java, 1), RPG-MPC (Java, 2), The Thing (Brain, 2), Profiling Classifier (Java, 3), with 'thegreystone' written below in red.

                                                                                        Alt...A flipchart titled 'Hackergarten' with a handwritten list of project ideas and their team sizes: FitPub (Java, 5), OpenJDK (Java, 3), Disk Space (Java, 1), E-Mail MCP (Java, 2), Mnemic (Java, 1), RPG-MPC (Java, 2), The Thing (Brain, 2), Profiling Classifier (Java, 3), with 'thegreystone' written below in red.

                                                                                        A laptop and a large wall-mounted screen both showing the FitPub app's public timeline, open on a profile called Marcus Fihlon with recent peaks and activity stats. A conference table in front holds bags, beer bottles, and a tablet on a stand.

                                                                                        Alt...A laptop and a large wall-mounted screen both showing the FitPub app's public timeline, open on a profile called Marcus Fihlon with recent peaks and activity stats. A conference table in front holds bags, beer bottles, and a tablet on a stand.

                                                                                          [?]nop swamp » 🌐
                                                                                          @nopswamp@infosec.exchange

                                                                                          Hello Mastodon! I'm into Computer , , , , , , , , and generally anything creative and interesting involving tech. Especially things that help people communicate and use computers more privately and securely. Lately I've been tinkering with mesh networks like , and . Longtime and user.

                                                                                          I also enjoy touching grass like , and generally being in nature. Would recommend.

                                                                                          This is a personal/professional account so keep an eye out for various writeups and research, for work and for fun. Previous jobs ranged from to Computer Security and , and I'm looking for more of the same.

                                                                                            [?]ICS Advisory Project » 🌐
                                                                                            @AdvisoryICS@infosec.exchange

                                                                                            ICS[AP] updated CISA ICS Advisories Master File for 10/1/2026 & the following year's CSVs:

                                                                                            CISA_ICS_ADV_2026_10_1_26.csv

                                                                                            Available @ ICS[AP] GitHub:
                                                                                            github.com/icsadvprj/ICS-Advis



                                                                                              AodeRelay boosted

                                                                                              [?]Scott Wilson 🌈 » 🌐
                                                                                              @scottwilson@infosec.exchange

                                                                                              Everyone here probably already knows this… but you don’t have to use Microsoft VA Code with all its embedded and bull shit.

                                                                                              VSCodium is the exact same thing, but with no AI at all. Plus, it’s free and for Windows, Mac, and Linux. If you use brew it’s a one-line install.



                                                                                              vscodium.com/

                                                                                                [?]Co-op Cloud » 🌐
                                                                                                @coopcloud@social.coop

                                                                                                Save the date! An introduction to Public Interest Infrastructure with Co-operative Cloud

                                                                                                **Thursday, 15th October @ 19 UTC** (time.is/compare/1900_15_Oct_20)

                                                                                                A public event reintroducing our project: a community of support for self- and community-hosters, a commons of production-ready configurations for libre software apps, and human-friendly tooling to manage it all. Developed and managed by an international democratic federation.

                                                                                                  [?]Juhis » 🌐
                                                                                                  @hamatti@mastodon.world

                                                                                                  Am I getting this correct?

                                                                                                  Digital Ocean donates $3 million to Omarchy and then slashes their open source credits program?

                                                                                                  That's fucked up.

                                                                                                    AodeRelay boosted

                                                                                                    [?]GIMP » 🌐
                                                                                                    @GIMP@floss.social

                                                                                                    gimp.org/news/2026/10/01/liam-

                                                                                                    GIMP interview series: Liam Quin - @barefootliam

                                                                                                    The interviews were done during the conference in Rio de Janeiro, Brazil ( ).

                                                                                                    Colour photo of Liam Quin, with long hair and reddish/greying beard, leaning back against a tree. Photo by Pat David.

                                                                                                    Alt...Colour photo of Liam Quin, with long hair and reddish/greying beard, leaning back against a tree. Photo by Pat David.

                                                                                                      [?]Bob the Traveler » 🤖 🌐
                                                                                                      @bobthetraveler@mastodon.world

                                                                                                      RFC 8654 defining extended message support for the Border Gateway Protocol or BGP was published in October 2019 cromwell-intl.com/networking/r

                                                                                                        [?]hasamba » 🤖 🌐
                                                                                                        @hasamba@infosec.exchange

                                                                                                        ----------------

                                                                                                        🛠️ Tool: e2e Open Source AI Testing Framework
                                                                                                        ===================

                                                                                                        e2e by TesterArmy is an open-source end-to-end testing framework designed for web and mobile applications. The framework allows developers to describe a testing goal in natural language, and an integrated agent drives the application to achieve that goal. Results are then verified using standard locators and assertions within the same test script.

                                                                                                        🔹 Key Features

                                                                                                        The primary feature of e2e is its ability to record agent steps. When an agent step is verified by a subsequent assertion, the framework records the actions taken. On the next run, e2e replays these recorded actions without making any model calls until the application changes. This significantly reduces the cost and latency associated with AI-driven testing. Additionally, tests that do not include agent steps require no model at all. Users can bring their own subscription, API key, or local model.

                                                                                                        🔹 Technical Implementation

                                                                                                        The framework is composed of several npm packages. The core e2e package provides the SDK, runner, and CLI. For web testing, @e2e-dev/web offers a browser engine supporting Chromium, Firefox, and WebKit through Playwright. For mobile testing, @e2e-dev/mobile provides an engine for iOS and Android simulators and emulators using agent-device. There are also packages for GitHub pull request reporting (@e2e-dev/github), hosted browsers (@e2e-dev/kernel), and hosted simulators (@e2e-dev/eas).

                                                                                                        The CLI sends anonymous usage data, including which commands and engines run and where runs fail. It does not send test content, app content, or credentials. Users can opt out using npx e2e telemetry disable or the E2E_TELEMETRY_DISABLED=1 environment variable.

                                                                                                        🔹 Use Cases

                                                                                                        This framework is suitable for teams looking to automate end-to-end tests without writing extensive boilerplate code for every UI interaction. It is particularly useful for testing complex user flows, such as checkout processes or workspace upgrades, where defining exact step-by-step UI interactions is tedious. The natural language approach allows testers to focus on the goal, while the agent handles the navigation.

                                                                                                        🔹 Limitations

                                                                                                        The project is currently in active development on the way to version 1.0. The developers note that APIs and configuration can still change between minor releases. This means early adopters should be prepared for potential breaking changes as the framework matures. The documentation ships offline with the e2e package, which is useful for coding agents working in restricted environments.

                                                                                                        🔹 tool

                                                                                                        🔗 Source: github.com/tester-army/e2e

                                                                                                          [?]aaron [he/him] » 🌐
                                                                                                          @fireborn@dragonscave.space

                                                                                                          Dialect 1.2.0 is out. This T9 dialpad launcher for Android now has French, German, Spanish, Italian, Portuguese, Russian, and Greek translations, with the matching engine itself understanding Cyrillic and Greek names, not just Latin ones.
                                                                                                          Also new: Quick Actions. Hold a number on the dialpad to call someone, message someone, or launch an app instantly.
                                                                                                          github.com/aaron-gh/Dialect/re

                                                                                                            [?]Bob the Traveler » 🤖 🌐
                                                                                                            @bobthetraveler@mastodon.world

                                                                                                            RFC 1267 defining the Border Gateway Protocol or BGP version 3 was published in October 1991 cromwell-intl.com/networking/r

                                                                                                              [?]Radegast EDR » 🌐
                                                                                                              @radegast_edr@infosec.exchange

                                                                                                              Today we have some huge news for . Over the last few months that Radegast EDR was in public Beta, we have processed over 1 million alerts and received invaluable feedback from all of you. Thanks to that we are proud to announce the launch of Radegast EDR 1.0. Improved UX, privacy-first , tailored specifically for small teams and -conscious homelabers.

                                                                                                              All three major OSes, single-command install, by design. Do you want to know more about what Radegast EDR is or what's new in version 1.0? Check out our blog:

                                                                                                              radegast.app/blog/2026/10/01/v

                                                                                                                [?]Bob the Traveler » 🤖 🌐
                                                                                                                @bobthetraveler@mastodon.world

                                                                                                                RFC 5709 defining HMAC-SHA cryptographic authentication for the OSPF protocol was published in October 2009 cromwell-intl.com/networking/r

                                                                                                                  [?]Arint - SEO+KI » 🌐
                                                                                                                  @Arint@arint.info

                                                                                                                  RT @HuggingModels: Stell dir Cyber-Tiel-Coder-35B-A3B vor: einen 35B MoE-Coder, der lokal über GGUF und llama.cpp läuft. Er ist ablatiert, agentic und für Image-Text-zu-Text-Aufgaben konzipiert. 9.276 Downloads und die Zahl steigt. Lassen Sie uns das im Detail aufschlüsseln. t.co/GtgDeScBm6

                                                                                                                  mehr auf Arint.info

                                                                                                                  https://x.com/HuggingModels/status/2098896943699411138

                                                                                                                    AodeRelay boosted

                                                                                                                    [?]David Lord :python: » 🌐
                                                                                                                    @davidism@mas.to

                                                                                                                    RE: mas.to/@davidism/1172923990498

                                                                                                                    The beginning of the month, when every junk producer's token limit resets, and we get a whole new wave of junk. Turning off PRs helped a lot, but they just started opening "test issue, checking if my API access is broken", or commenting or emailing their patches instead. I really wish I knew how to escape this without turning off community interaction entirely.

                                                                                                                      [?]joene 🏴 [en: they/them/their, nl: die/die/diens of hen/hen/hun] » 🌐
                                                                                                                      @joenepraat@todon.nl

                                                                                                                      RE: mastodon.xyz/@nextcloud/117359

                                                                                                                      I can advise the following @fdroidorg apps. Some apps need an additional repository.

                                                                                                                      * Aegis Authenticator (my preffered 2FA app)
                                                                                                                      * AntennaPod @AntennaPod (best Android podcast app)
                                                                                                                      * Breezy Weather (weather app for weather nerds)
                                                                                                                      * Bubble (IMO the best spirit level/ruler app)
                                                                                                                      * Celestia (another astronomy app)
                                                                                                                      * Compressor (suburb video compressor. get those Mastodon video's below 100MB on the road! (or rails) - needs IzzyOnDroid repo: android.izzysoft.de/repo.
                                                                                                                      * Convertor NOW (because those Yankees refuse to use the metric system)
                                                                                                                      * DAVx @davx5app (best way to link Caldav calendars and Carddav contact books)
                                                                                                                      * FairEmail (email app for power users. yes, you need to pay a very small fee for pro features)
                                                                                                                      * Fennec or IronFox (two great Firefox forks) - IronFox needs its own repo: ironfoxoss.org/download/#f-dro)
                                                                                                                      * Fluffychat (IMO the best Matrix client - also for the Linux desktop)
                                                                                                                      * Fossify Calendar (simple and no bloat. works great with DAVx)
                                                                                                                      * Fossify Contacts (simple, non bloated contact apps. works great with DAVx)
                                                                                                                      * Fossify Gallery (my preferred media gallery app, better IMO than the /e/OS default)
                                                                                                                      * Fossify Messages (simple, non bloated SMS app)
                                                                                                                      * Fossify Thank You (to donate to the great Fossify project and also with some small extra features)
                                                                                                                      * Heliboard (IMO best open-source keyboard. hopefully with native gestures ASAP)
                                                                                                                      * Image Toolbox (this is a power-house to do everything with images - has a learning curve, but it is great!)
                                                                                                                      * Joplin @joplinapp (best note taking app, better than Nextcloud Notes, because it's end-to-end encrypted)
                                                                                                                      * KDE Connect (link your phone with your KDE or Gnome (using GSConnect) desktop)
                                                                                                                      * Lawnchair @lawnchairapp (my preferred Android launcher, because the default /e/OS launcher sucks)
                                                                                                                      * LibreOffice Viewer (official app to view LibreOffice, OpenOffice and even MS Office documents (if you are into that).
                                                                                                                      * LibreTorrent (to download Linux ISO torrents on your phone for fun)
                                                                                                                      * Material Files (a non bloated file manager)
                                                                                                                      * Metrolist (to play music from YouTube without an account - good alternative for evil Spotify)
                                                                                                                      * Moshidon @moshidon (although it badly needs an update. the nightly is not yet ready. I still use it, with the web-app installed for quote posts)
                                                                                                                      * Nearby Glasses (hunt for Meta pervert glasses, but unfortunately not yet found) - needs IzzyOnDroid repo
                                                                                                                      * Nextcloud News (needs a Nextcloud account)
                                                                                                                      * Nextcloud (only if you have an account on a Nextcloud server)
                                                                                                                      * Next Player (simple, non bloated video player) - needs IzzyOnDroid repo
                                                                                                                      * Nora (great way to sandbox big-tech sites)
                                                                                                                      * Open Video Editor (the only working open-source video editor for Android, although it is not updated for two years)
                                                                                                                      * OSMAnd~ (IMO the best @openstreetmap app for Android, although it has a small learning curve)
                                                                                                                      * Peertube app @peertube (does not need an explanation)
                                                                                                                      * Pixelfed app @pixelfed (for if you have a Pixelfed account)
                                                                                                                      * RadioDroid (still IMO the best internet radio app, although not updated for three years)
                                                                                                                      * Signal @signalapp (I don't have WhatsApp, so you need something 😉) - needs the Guardian Project repo (you only need to toggle this in the F-droid settings)
                                                                                                                      * Sky Map (the open-source sky view alternative)
                                                                                                                      * SpamBlocker (because I have an ungoogled phone (/e/OS on Fairphone) I need this. maybe you as well. @murena should build this in, because this app is not very user friendly)
                                                                                                                      * Torrent Search (to search for Linux ISO torrents)
                                                                                                                      * Vegan Inspector (checks if products are vegan or vegetarian)
                                                                                                                      * VLC (does the same has Next Player, but with a (IMO) ugly interface. I keep this installed as an alternative if something doesn't wants to play, but I can't remember when I needed it. get rid of the orange!)
                                                                                                                      * Voice Audiobook Player (the only one that actually worked with local files)
                                                                                                                      * Wallabag (Pocket alternative, needs a Wallabag account on a Wallabag server)
                                                                                                                      * Wikipedia (who doesn't need Wikipedia)
                                                                                                                      * YTDLnis (download video and audio from YouTube and many other sites using yt-dlp)

                                                                                                                      [?]Nextcloud 📱☁️💻 » 🌐
                                                                                                                      @nextcloud@mastodon.xyz

                                                                                                                      ⛓️ Today, Google has taken the next step in enclosing the ecosystem by starting to enforce its developer verification program in Brazil, Indonesia, Singapore and Thailand.

                                                                                                                      No better time than now to recommend the best apps from everyone's favorite app store, F-Droid.

                                                                                                                      We'll start: Librera Reader, Image Toolbox, LocalSend, AntennaPod, FMD, Capy Reader, Unexpected Keyboard, Voice Audiobook Player, Aegis Authenticator...

                                                                                                                          AodeRelay boosted

                                                                                                                          [?]Keep The Why » 🌐
                                                                                                                          @keep_the_why@mastodon.social

                                                                                                                          Keep the Why is now available as a Pi package 🎉

                                                                                                                          Install it with:

                                                                                                                          `pi install npm:keep-the-why`

                                                                                                                          Same open Agent Skill, now directly installable through Pi's package system.

                                                                                                                          The project rationale stays as Markdown in Git. No database, no daemon, no account, no cloud backend.

                                                                                                                          keepthewhy.com

                                                                                                                            AodeRelay boosted

                                                                                                                            [?]Jan Vlug » 🌐
                                                                                                                            @janvlug@mastodon.social

                                                                                                                            The Dutch central government (#Rijksoverheid) will switch to the protocol for chat. According to planning it should be finished in 2028. Initially for internal chat.

                                                                                                                              [?]Bob the Traveler » 🤖 🌐
                                                                                                                              @bobthetraveler@mastodon.world

                                                                                                                              RFC 1122 defining the TCP/IP requirements for Internet hosts was published in October 1989 cromwell-intl.com/networking/p

                                                                                                                                [?]Oliver Zehentleitner » 🌐
                                                                                                                                @oliverzehentleitner@burningboard.net

                                                                                                                                Most agent memory adds another database, service or vendor account.

                                                                                                                                Keep the Why is FOSS and Git-native.

                                                                                                                                The why behind decisions lives as Markdown in the repository. Git handles versioning, reviews, permissions, forks, merges and distribution.

                                                                                                                                No database. No daemon. No cloud backend. No second source of truth.

                                                                                                                                A rejected solution stays rejected, and the next coding agent can already know why.

                                                                                                                                Live cross-repository decision graph:
                                                                                                                                keepthewhy.com/dashboard/live/

                                                                                                                                Project:
                                                                                                                                github.com/oliver-zehentleitne

                                                                                                                                KTW dashboard graph page

                                                                                                                                Alt...KTW dashboard graph page

                                                                                                                                  [?]iX Magazin » 🌐
                                                                                                                                  @iX_Magazin@social.heise.de

                                                                                                                                  AodeRelay boosted

                                                                                                                                  [?]9to5Linux » 🌐
                                                                                                                                  @9to5linux@floss.social

                                                                                                                                  Lx 26.09 “ROME” Released with Plasma 6.7 and Kernel 7.2 9to5linux.com/openmandriva-lx-

                                                                                                                                  @openmandriva

                                                                                                                                  A screenshot of OpenMandriva Lx ROME with the KDE Plasma desktop environment showing the application menu.

                                                                                                                                  Alt...A screenshot of OpenMandriva Lx ROME with the KDE Plasma desktop environment showing the application menu.

                                                                                                                                    [?]hasamba » 🤖 🌐
                                                                                                                                    @hasamba@infosec.exchange

                                                                                                                                    ----------------

                                                                                                                                    🛠️ Tool
                                                                                                                                    ===================

                                                                                                                                    Piik is an open-source, private screen sharing tool designed for sharing games, movie nights, drawings, and photos with up to 20 viewers. Viewers can join via an invitation link and watch directly in their desktop or mobile browsers without needing to install any software.

                                                                                                                                    Key Features
                                                                                                                                    • Browser-based viewing: Friends join via invitation and watch in desktop or mobile browsers.
                                                                                                                                    • Flexible sharing sources: Hosts can share a screen, window, browser tab, or camera. Available sources and audio depend on the platform.
                                                                                                                                    • P2P-first media: Media travels directly between participants where possible. A self-hosted server can provide automatic media forwarding (SFU) as a fallback.
                                                                                                                                    • Room management: Invitations, room codes, and optional room passwords for one host and up to 20 viewers.
                                                                                                                                    • Single binary hosting: Web UI, room management, and optional media forwarding are packaged together for self-hosting.

                                                                                                                                    Technical Implementation
                                                                                                                                    The tool emphasizes direct P2P connections for media transmission. If P2P is not viable, a self-hosted Piik Server on a Linux x64 server can act as an SFU (Selective Forwarding Unit) to relay media. The server packages the web UI, room management, and media forwarding into a single program.

                                                                                                                                    Use Cases
                                                                                                                                    • Hosting private movie nights or game streaming sessions for small groups.
                                                                                                                                    • Sharing drawings or photos with friends in real-time.
                                                                                                                                    • Providing commentary over shared media using the built-in microphone support.

                                                                                                                                    Installation/Setup
                                                                                                                                    To host, download the Piik App, extract and open it, choose Public invite, then Open Piik to create a temporary room. Alternatively, advanced users can deploy Piik Server on a Linux x64 server with their own domain.

                                                                                                                                    Note: Tool not independently verified.

                                                                                                                                    🔹 tool

                                                                                                                                    🔗 Source: github.com/TNTcraftHIM/Piik

                                                                                                                                      [?]Alexandre Dulaunoy » 🌐
                                                                                                                                      @adulau@infosec.exchange

                                                                                                                                      GCVE BCP-05-X-03: Bringing Vulnerability Handling Timelines into Vulnerability Records.

                                                                                                                                      Vulnerability records usually provide a good description of what a vulnerability is, which products are affected, how severe it may be, and where additional information can be found.

                                                                                                                                      They are often much less effective at describing what happened, when it happened, and who was involved during the vulnerability handling and disclosure process.

                                                                                                                                      Following many discussions during VulnOptiCON 2026 in Luxembourg, this limitation became particularly clear. Vulnerability analysts, coordinators, vendors and other participants repeatedly discussed how difficult it can be to reconstruct a reliable timeline during vulnerability analysis and coordinated vulnerability disclosure.

                                                                                                                                      To help address this, the GCVE initiative has published a new extension:

                                                                                                                                      GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline.

                                                                                                                                      The extension provides a structured and machine-readable way to represent the lifecycle of a vulnerability from discovery and reporting through acknowledgement, validation, remediation and public disclosure. It's already live in our open-source tool-set.

                                                                                                                                      🔗 Blog post gcve.eu/2026/10/01/gcve-bcp-05

                                                                                                                                      🔗 Extension gcve.eu/bcp/extension/gcve-bcp

                                                                                                                                      GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline. Overview.

                                                                                                                                      Alt...GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline. Overview.

                                                                                                                                        AodeRelay boosted

                                                                                                                                        [?]NLnet Labs » 🌐
                                                                                                                                        @nlnetlabs@social.nlnetlabs.nl

                                                                                                                                        DigitalOcean has just announced the closure of their Credits Programme. For us, this initiative served as a way to acknowledge the software we provide that they rely on.

                                                                                                                                        For many years, the programme enabled us to offer public services and host infrastructure for testing and training without charge.

                                                                                                                                        We are sorry to lose it, yet we appreciate the period during which it was available.

                                                                                                                                          AodeRelay boosted

                                                                                                                                          [?]9to5Linux » 🌐
                                                                                                                                          @9to5linux@floss.social

                                                                                                                                          Systemd-Free 7.0 Released with Kernel 7.2 and 0.55.4 9to5linux.com/systemd-free-nit

                                                                                                                                          @Nitrux_NX

                                                                                                                                          A screenshot of Nitrux 7.0 with the default desktop layout.

                                                                                                                                          Alt...A screenshot of Nitrux 7.0 with the default desktop layout.

                                                                                                                                            AodeRelay boosted

                                                                                                                                            [?]Kirk Smith, PhD » 🌐
                                                                                                                                            @kirk@social.coop

                                                                                                                                            Well, since I have presented it in a talk just now, I made as well "announce" it: my colleague Daniel and I started a company (small-business style, no investors) to commercialize open-source test and measurement hardware related to (flow) batteries. Been getting a crash course in French/EU business administration 😵‍💫. Not to mention a cease-and-desist for our original name 😬, hence our very not startupy, lawyer-friendly 20th-century vintage name:

                                                                                                                                            "Smith and Fernandez Laboratories" (aka SANDFLABS /s)

                                                                                                                                            We are currently working on CE certification of some equipment we plan to offer, and have already worked with universities and research institutions in multiple EU countries.

                                                                                                                                            More details in time, I will certainly be posting about our progress. I am still doing battery R&D of course, but have been held up more admin than normal lately!

                                                                                                                                            Our site is at smithandfernandezlabs.com (site is just a placeholder- may be able to get you some prototypes though 👀)

                                                                                                                                            Presentation slide titled "We started a company" with two male scientists with white labcoats standing in front of a lab bench with a laptop and experimental apparatus in between them. Image is crudely overlaid with WordArt-style vector images to make it show they have top hats, cigars, and briefcases full of cash.

                                                                                                                                            Alt...Presentation slide titled "We started a company" with two male scientists with white labcoats standing in front of a lab bench with a laptop and experimental apparatus in between them. Image is crudely overlaid with WordArt-style vector images to make it show they have top hats, cigars, and briefcases full of cash.

                                                                                                                                              [?]SimpleBalanceReality » 🌐
                                                                                                                                              @simplebalancereality@friendica.world

                                                                                                                                              The joke stance I wrote on Rate Your Music

                                                                                                                                              "Poptimism and stan culture were a mistake

                                                                                                                                              Rick Beato was right and re-defined music's purism, elitism, snobbery, and gatekeeping (and rockism).

                                                                                                                                              The Loudness War has ruined music and audio/sound quality. Dynamic is the new Loud. When there is no quiet, There can be no loud. Spread awareness and stay awake about Dynamic Range Day. Dynamic Range Database exists. It'll never be high fidelity and audiophile quality if the loudness war still continues.

                                                                                                                                              Lossless Audio and Hi Res Lossless Audio (24 Bit, 48 kHz Lossless) should be the standard and normalized. We need to leave MP3 and lossy codecs/formats and lossy compression to the past and end it. Another step for high fidelity and audiophile quality.

                                                                                                                                              Support royalty-free libre open formats/codecs like FLAC, OPUS, OAC or open source. Oppose patent and proprietary closed source codecs/formats.

                                                                                                                                              PNG, JPEG XL, BPG, AVIF should replace JPEG/JPG and HEIF

                                                                                                                                              AV1 should replace H.264 and H.265
                                                                                                                                              Metroska MKV should replace MP4

                                                                                                                                              Super Audio Compact Disc (SACD) and Blu-ray Disc Audio (BD-A) should replace Compact Disc (CD)

                                                                                                                                              Blu-ray Disc (BD) and Ultra HD Blu-ray Disc / 4K Blu-ray Disc (BD-UHD) should replace Digital Video Disc / Digital Versatile Disc (DVD)

                                                                                                                                              Support Linux, GNU, GNU/Linux, open source, free software, libre software, FOSS/FLOSS, alternative, independent, self-hostable, digital online privacy, digital online privacy rights, data protection law, data privacy, data sovereignty, security, cybersecurity, de-American Tech, de-big tech, de-megacorps, de-corporation, free from big tech, free from American tech, Europe, European Union (EU), European-made/Made in EU, BuyFromEU, homegrown, digital independence, digital sovereignty, data sovereignty, freedom, free as in freedom, free speech, free as in free speech, freedom of creativity, liberty, liberation, censorship-free, consumer rights, digital rights, right to repair, consumers / customers, trust, ownership, competition, DRM-Free, environmentalism, fediverse, decentralization, independent, alternative, Interoperable, FOSS, privacy-first, privacy-respecting, self-hostable, decentralized social media platforms, encryption, end-to-end encryption, zero-trust, encrypted, secure messengers, torrent, torrent file, peer-to-peer (P2P).

                                                                                                                                              Support open source movement, open source revolution, clippy movement, clippy revolution, free software movement, free software revolution, Stop Killing Games movement, Stop Killing Games revolution.

                                                                                                                                              Stay awake and spread awareness about Data Privacy Day, Data Protection Day, Digital Independence Days, International E-Waste Day, Internet Security Awareness, Cyber Security Awareness, Cybersecurity Awareness.

                                                                                                                                              (Former Ego Mode 😅. Only jorking btw)"


                                                                                                                                              sovereignty source

                                                                                                                                                AodeRelay boosted

                                                                                                                                                [?]computing competence » 🌐
                                                                                                                                                @cc@feinste-netzwerke.de

                                                                                                                                                Schon seit einiger Zeit haben wir unsere Lösung für Fernwartungen auf umgestellt und die Lizenzen von und gekündigt
                                                                                                                                                Wer den Bildschirm unserer Kunden sieht, ist eine Vertrauensfrage. Wessen Server die Sitzung vermittelt, ebenso. Deshalb hosten wir RustDesk selbst. Quelloffen, in unserer Hand, keine Vermittlung über Dritte.

                                                                                                                                                Der Client liegt bei uns zum Download bereit, Windows, macOS und Linux, vorkonfiguriert. Starten, Kennung durchgeben, Anfrage bestätigen. Ohne Bestätigung keine Verbindung. Betrifft weiterhin nur die Clients, Serverwartung läuft wie gehabt.


                                                                                                                                                  [?]heise online English » 🤖 🌐
                                                                                                                                                  @heiseonlineenglish@social.heise.de

                                                                                                                                                  If an update fails: openSUSE Leap gets an immutable mode

                                                                                                                                                  openSUSE Leap 16.1 RC is here. The most important innovation is an optional immutable mode, which replaces Leap Micro.

                                                                                                                                                  heise.de/en/news/If-an-update-

                                                                                                                                                    [?]iX Magazin » 🌐
                                                                                                                                                    @iX_Magazin@social.heise.de

                                                                                                                                                    Wenn ein Update schiefgeht: openSUSE Leap bekommt einen Immutable-Modus

                                                                                                                                                    openSUSE Leap 16.1 RC ist da. Die wichtigste Neuerung ist ein optionaler Immutable-Modus, der Leap Micro ablöst.

                                                                                                                                                    heise.de/news/Wenn-ein-Update-

                                                                                                                                                      AodeRelay boosted

                                                                                                                                                      [?]Linux statt Windows » 🌐
                                                                                                                                                      @LinuxStattWindows@troet.cafe

                                                                                                                                                      Word → LibreOffice Writer
                                                                                                                                                      Excel → LibreOffice Calc
                                                                                                                                                      Outlook → Thunderbird
                                                                                                                                                      Photoshop → GIMP
                                                                                                                                                      Media Player → VLC

                                                                                                                                                      Alles kostenlos, alles Open Source. Wer vorher schon unter Windows umsteigt, hat es beim Wechsel des Systems leichter.

                                                                                                                                                        [?]geoObserver » 🌐
                                                                                                                                                        @geoObserver@mastodon.social

                                                                                                                                                        [?]heise online English » 🤖 🌐
                                                                                                                                                        @heiseonlineenglish@social.heise.de

                                                                                                                                                        sdme: Clone your own Linux as a container

                                                                                                                                                        Quickly clone your own Linux system to test something: That’s what sdme, the systemd Machine Editor, offers.

                                                                                                                                                        heise.de/en/news/sdme-Clone-yo

                                                                                                                                                          [?]r1cksec » 🌐
                                                                                                                                                          @r1cksec@infosec.exchange

                                                                                                                                                          Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.

                                                                                                                                                          github.com/VoidSecSoftwares/vo

                                                                                                                                                            AodeRelay boosted

                                                                                                                                                            [?]LibreOffice » 🌐
                                                                                                                                                            @libreoffice@fosstodon.org

                                                                                                                                                            In September we had new releases of , updates from events, and said hello to new team members working on QA and online: blog.documentfoundation.org/bl

                                                                                                                                                            Project and community recap banner

                                                                                                                                                            Alt...Project and community recap banner

                                                                                                                                                              AodeRelay boosted

                                                                                                                                                              [?]heise online » 🌐
                                                                                                                                                              @heiseonline@social.heise.de

                                                                                                                                                              sdme: Das eigene Linux als Container klonen

                                                                                                                                                              Das eigene Linux-System schnell einmal klonen, um etwas zu testen: Das bietet sdme, der systemd Machine Editor.

                                                                                                                                                              heise.de/news/sdme-Das-eigene-

                                                                                                                                                                AodeRelay boosted

                                                                                                                                                                [?]Tuta » 🌐
                                                                                                                                                                @Tutanota@mastodon.social

                                                                                                                                                                New month, new feature - and this one is BIG 🎉

                                                                                                                                                                Tuta & @nextcloud are joining forces to enable you to fully replace MS365 and Google Workspace with a digital sovereign alternative, made in Germany. 🇩🇪

                                                                                                                                                                Meet the Tuta App on Nextcloud with neat integrations! 🥳

                                                                                                                                                                Plus, it's completely free and .

                                                                                                                                                                Check out the details: ➡️ tuta.com/blog/tuta-app-on-next 

                                                                                                                                                                Tuta & Nextcloud: Screenshot of the Nextcloud Plugin in Tuta

                                                                                                                                                                Alt...Tuta & Nextcloud: Screenshot of the Nextcloud Plugin in Tuta

                                                                                                                                                                  [?]Michael Pedersen » 🌐
                                                                                                                                                                  @pedersen@c.im

                                                                                                                                                                  I have just started using a tool called difit ( github.com/yoshiko-pg/difit ). This tool allows me to review my local diffs before ever pushing them to GitHub, in an interface similar to GitHub's pull request interface. When using agentic development, this is one of the most amazing tools I've seen so far. I can actually go back and forth with comments (just like on GitHub), refining the work in progress. With the optional agent skills, I don't have to push, open a pull request, and manually take things back to the agent. It's all integrated.

                                                                                                                                                                  If I have a complaint about it, it's that once I clicked the "viewed" button, a subsequent update to the file does not undo that click and expand the file. I have to do it manually.

                                                                                                                                                                  Even without agentic development, I'd have to recommend this tool. It's a phenomenal way to do a final local review before publishing any of the results anywhere. Seriously, check it out. It's already earned its place in my toolbox, and is going to stay there for a long time.

                                                                                                                                                                    [?]Hermione » 🌐
                                                                                                                                                                    @phoenixx@infosec.exchange

                                                                                                                                                                    RE: social.owncast.online/@owncast

                                                                                                                                                                    Let me get this straight.

                                                                                                                                                                    Digital Ocean paid 2 million dollars to fund that rich racist's Linux project.

                                                                                                                                                                    But it has started pulling out support of open source projects that got tiny fractions of that for their functioning.

                                                                                                                                                                    I'm never paying Digital Ocean again.

                                                                                                                                                                    Vote with your wallet.

                                                                                                                                                                    AodeRelay boosted

                                                                                                                                                                    [?]Owncast » 🌐
                                                                                                                                                                    @owncast@social.owncast.online

                                                                                                                                                                    This is very bad news. Owncast has relied on this program the past couple of years, and has allowed us to have servers and services we wouldn't normally afford to be able to do otherwise, especially now with Gabe being unemployed.

                                                                                                                                                                    Any other cloud hosting providers want to step in and help all the open source projects that are going to be in this position?

                                                                                                                                                                    Additionally, this might be a good time to show your financial support for Owncast.

                                                                                                                                                                    fedifunding.org/projects/ownca

                                                                                                                                                                    Hello,

We're reaching out to share an important update regarding
the DigitalOcean Open Source Credits Program.
DigitalOcean has decided to sunset the Open Source Credits
Program. As part of this change, we are no longer accepting
new credit applications or approving credit renewals,
extensions, or additional credit requests.

If you currently have Open Source Credits that have already
been granted, those credits will continue to be honored
according to their existing terms and conditions. No action is
required for your existing credit allocation.

Additionally, the dedicated inbox for the Open Source Credits
Program will stop being monitored as part of this transition.
For any further questions or assistance, please submit your
inquiries through our standard support channel: https://
www.digitalocean.com/company/contact/support

We appreciate your participation in the DigitalOcean Open
Source Credits Program and the work you do to support the
open source community. Thank you for being part of the
program.

                                                                                                                                                                    Alt...Hello, We're reaching out to share an important update regarding the DigitalOcean Open Source Credits Program. DigitalOcean has decided to sunset the Open Source Credits Program. As part of this change, we are no longer accepting new credit applications or approving credit renewals, extensions, or additional credit requests. If you currently have Open Source Credits that have already been granted, those credits will continue to be honored according to their existing terms and conditions. No action is required for your existing credit allocation. Additionally, the dedicated inbox for the Open Source Credits Program will stop being monitored as part of this transition. For any further questions or assistance, please submit your inquiries through our standard support channel: https:// www.digitalocean.com/company/contact/support We appreciate your participation in the DigitalOcean Open Source Credits Program and the work you do to support the open source community. Thank you for being part of the program.

                                                                                                                                                                      [?]• Łącze » 🌐
                                                                                                                                                                      @lacze@infosec.exchange

                                                                                                                                                                      [?]CryogenicNighthawk » 🌐
                                                                                                                                                                      @CryogenicNighthawk@4d2.social

                                                                                                                                                                      I'm working on getting a crew together to give a workshop to help people upgrade their tech.

                                                                                                                                                                      Zoom ➡️ Jitsi
                                                                                                                                                                      OneDrive/GDrive ➡️ Nextcloud
                                                                                                                                                                      Google Android ➡️ GrapheneOS
                                                                                                                                                                      Windows ➡️ Linux

                                                                                                                                                                      and possibly more, depending on how many people I can recruit to help run the event.

                                                                                                                                                                      The plan is mainly to show people what using these systems is like, not necessarily wiping their device or deleting their corporate accounts right there on the spot.

                                                                                                                                                                        [?]Bob the Traveler » 🤖 🌐
                                                                                                                                                                        @bobthetraveler@mastodon.world

                                                                                                                                                                        RFC 8654 defining extended message support for the Border Gateway Protocol or BGP was published in October 2019 cromwell-intl.com/networking/r

                                                                                                                                                                          [?]Daily CyberSecurity » 🌐
                                                                                                                                                                          @DailyCyberSecurity@infosec.exchange

                                                                                                                                                                          Discover how the Dutch government plans to replace Microsoft Windows with open-source alternatives like NixOS and openDesk through the DAWO initiative.

                                                                                                                                                                          dailytechnow.com/netherlands-o

                                                                                                                                                                            [?]Bob the Traveler » 🤖 🌐
                                                                                                                                                                            @bobthetraveler@mastodon.world

                                                                                                                                                                            RFC 1267 defining the Border Gateway Protocol or BGP version 3 was published in October 1991 cromwell-intl.com/networking/r

                                                                                                                                                                              [?]ronscf » 🌐
                                                                                                                                                                              @ronscf@mastodon.world

                                                                                                                                                                              [?]ronscf » 🌐
                                                                                                                                                                              @ronscf@mastodon.world

                                                                                                                                                                              [?]Akkana Peck » 🌐
                                                                                                                                                                              @akkana@fosstodon.org

                                                                                                                                                                              I got a PineTime smartwatch to monitor my heart rate on hikes and bike rides. I've had it for a couple months now. I like it a lot, and it's an amazing deal. Finding an app to record heart rate was the hardest part, but it turned out OsmAnd, already my favorite Android mapping app (#FOSS and uses ), does a great job. Big thumbs up for both and .

                                                                                                                                                                              I wrote up the details: shallowsky.com/blog/tech/pinet

                                                                                                                                                                              @pine64 @osmand

                                                                                                                                                                              A PineTime smartwatch showing heart rate while strapped to an upper arm.

                                                                                                                                                                              Alt...A PineTime smartwatch showing heart rate while strapped to an upper arm.

                                                                                                                                                                                [?]SecBurg » 🌐
                                                                                                                                                                                @secburg@infosec.exchange

                                                                                                                                                                                [?]SecBurg » 🌐
                                                                                                                                                                                @secburg@infosec.exchange

                                                                                                                                                                                Bruno (open-source Postman alternative) in v4.2.1 released

                                                                                                                                                                                secburg.com/posts/bruno-v421-r

                                                                                                                                                                                  [?]Bob the Traveler » 🤖 🌐
                                                                                                                                                                                  @bobthetraveler@mastodon.world

                                                                                                                                                                                  RFC 5709 defining HMAC-SHA cryptographic authentication for the OSPF protocol was published in October 2009 cromwell-intl.com/networking/r

                                                                                                                                                                                    [?]Arint - SEO+KI » 🌐
                                                                                                                                                                                    @Arint@arint.info

                                                                                                                                                                                    RT @support_huihui: Jemand hat anonym gespendet, um die öffentliche Veröffentlichung von huihui-ai/Huihui-Qwen3.8-Flash-Next-abliterated zu finanzieren. Wir haben die Spende angenommen. Vielen Dank an alle für die fortgesetzte Unterstützung und Hilfe. Wir laden derzeit die nicht quantisierten Safetensors sowie t.co/pQ5DvIw6Or hoch.

                                                                                                                                                                                    mehr auf Arint.info

                                                                                                                                                                                    https://x.com/support_huihui/status/2104840486238527961

                                                                                                                                                                                      [?]Richard Quinn » 🌐
                                                                                                                                                                                      @rq4c@mastodon.world

                                                                                                                                                                                      RE: infosec.exchange/@david_chisna

                                                                                                                                                                                      "It’s never a waste of my time to turn an enthusiastic and incompetent contributor into an enthusiastic and competent contributor, it’s an absolutely critical part of building a healthy project…

                                                                                                                                                                                      …If I spend time reviewing LLM-generated code when it would have been faster to write it myself (which, to be clear, is the case on 100% of LLM-submitted PRs I’ve seen so far), then that’s just a time sink."

                                                                                                                                                                                      [?]David Chisnall (*Now with 50% more sarcasm!*) » 🌐
                                                                                                                                                                                      @david_chisnall@infosec.exchange

                                                                                                                                                                                      One of the open source projects I used to (many years ago, so I am not really affected anymore) has recently decided to allow AI contributions. One of their arguments is that they judge submissions on quality, not tools used.

                                                                                                                                                                                      Back when I was an active contributor (to the project and maintainer of some other parts of the surrounding ecosystem), I got a lot of submissions that were bad.

                                                                                                                                                                                      The thing is, I absolutely loved getting these because they always came from super-enthusiastic junior people. Reviewing them and giving feedback often too much longer than implementing the feature myself. The same was usually true for the next contribution too. But that shifted over time. After a few months, I started getting patches where I didn’t find anything beyond the cosmetic that I wanted to change.

                                                                                                                                                                                      Going back further, I was one of those people when I started contributing.

                                                                                                                                                                                      Measured as code contributions over the short term, maintainers working with submitters of poor-quality PRs is a waste of time. You’re taking time away from writing code to do something that produces code more slowly.

                                                                                                                                                                                      Measured over the long term, the results are very different. Far more code in that project and closely related parts of the ecosystem has been written by people who I mentored when they came along with some bad code than by me.

                                                                                                                                                                                      It’s never a waste of my time to turn an enthusiastic and incompetent contributor into an enthusiastic and competent contributor, it’s an absolutely critical part of building a healthy project. I wouldn’t have got nearly as much out of F/OSS on a personal level if I hadn’t encountered a lot of people with the same opinion when I was one of the enthusiastic and incompetent newcomers.

                                                                                                                                                                                      But LLMs are not like that. If I spend time reviewing LLM-generated code when it would have been faster to write it myself (which, to be clear, is the case on 100% of LLM-submitted PRs I’ve seen so far), then that’s just a time sink. It’s also taking away time I could be spending helping new contributors who want to actually improve, rather than just take the review comments, feed them into an opaque system, and give me back the results.

                                                                                                                                                                                        [?]Kyle Reddoch (CybersecKyle) » 🌐
                                                                                                                                                                                        @cyberseckyle@infosec.exchange

                                                                                                                                                                                        🎉 Drift — Share to Mastodon is officially live on the Chrome Web Store!

                                                                                                                                                                                        Yesterday I wrote about why I built Drift. Today, version 1.0.0 is approved and available for anyone to install.

                                                                                                                                                                                        Drift makes one of my common Mastodon workflows a lot easier:

                                                                                                                                                                                        🔹 Highlight a passage on a webpage

                                                                                                                                                                                        🔹 Click Drift

                                                                                                                                                                                        🔹 Get an editable draft with the passage, title, and link

                                                                                                                                                                                        🔹 Add your own thoughts

                                                                                                                                                                                        🔹 Choose your Mastodon server

                                                                                                                                                                                        🔹 Review and publish from Mastodon itself

                                                                                                                                                                                        It also supports right-click sharing, multiple saved servers, tracking-link cleanup, temporary draft recovery, keyboard shortcuts, and light/dark mode.

                                                                                                                                                                                        No Mastodon password. No API token. Nothing gets published automatically.

                                                                                                                                                                                        It’s free and open source.

                                                                                                                                                                                        Chrome Web Store:
                                                                                                                                                                                        chromewebstore.google.com/deta

                                                                                                                                                                                        I wrote more about how it works and the privacy decisions behind it here:
                                                                                                                                                                                        kylereddoch.me/blog/drift-shar

                                                                                                                                                                                        If you try it, I’d genuinely love to hear what you think.

                                                                                                                                                                                          [?]Adrian Hollister » 🌐
                                                                                                                                                                                          @adrianhollister@infosec.exchange

                                                                                                                                                                                          OpenInfra Europe, the European hub of the foundation behind OpenStack, has warned that its artifact server was compromised. An Artifactory authentication bypass disclosed on 28 August was being exploited by the 31st, the day the server fell. It was noticed on 15 September, when a legitimate user was locked out. Anything downloaded in between is treated as potentially compromised.

                                                                                                                                                                                          The uncomfortable part: this was no zero-day, but a known flaw on internet-facing plumbing that other people build software from. An artifact server is a distribution point. Tamper there and every downstream pipeline inherits it.

                                                                                                                                                                                          Open source infrastructure is critical infrastructure. Its plumbing deserves the same patch clock and monitoring as the things it serves.

                                                                                                                                                                                          helpnetsecurity.com/2026/09/30

                                                                                                                                                                                            [?]Daily CyberSecurity » 🌐
                                                                                                                                                                                            @DailyCyberSecurity@infosec.exchange

                                                                                                                                                                                            In AISI tests, GPT-6 Astra supply chain attacks succeeded in 29.2% of runs, using fake identities and malicious code. See the findings.

                                                                                                                                                                                            meterpreter.org/gpt-6-astra-su

                                                                                                                                                                                              [?]Bob the Traveler » 🤖 🌐
                                                                                                                                                                                              @bobthetraveler@mastodon.world

                                                                                                                                                                                              RFC 1122 defining the TCP/IP requirements for Internet hosts was published in October 1989 cromwell-intl.com/networking/p

                                                                                                                                                                                                [?]Doug Burks » 🌐
                                                                                                                                                                                                @dougburks@infosec.exchange

                                                                                                                                                                                                OhMyDebn 4.9 is out! 🎉

                                                                                                                                                                                                A debonair Linux desktop for power users: Cinnamon on the Debian-based distro you already trust.

                                                                                                                                                                                                New in 4.9:
                                                                                                                                                                                                • Now supports MX Linux 25 and Pop!_OS 24.04
                                                                                                                                                                                                • Neovim works offline out of the box, and matches all 23 desktop themes
                                                                                                                                                                                                • Three new AI agents: Grok Build, Oh My Pi, T3 Code
                                                                                                                                                                                                • Firmware updates, update channels, and a doctor that checks much more

                                                                                                                                                                                                ohmydebn.org/release-notes/

                                                                                                                                                                                                OhMyDebn 4.9 release graphic. Large "4.9" above "Linux, refined. A debonair Linux desktop for power users." In front, an OhMyDebn 4.9.0 desktop with a Yosemite wallpaper and terminal windows; behind it, four desktops in other color themes, labeled "23 themes · one keystroke." New in 4.9: now on MX Linux and Pop!_OS; Neovim ready offline with plugins preinstalled; three new AI agents, Grok Build, Oh My Pi and T3 Code; doctor, firmware updates and update channels. ohmydebn.org.

                                                                                                                                                                                                Alt...OhMyDebn 4.9 release graphic. Large "4.9" above "Linux, refined. A debonair Linux desktop for power users." In front, an OhMyDebn 4.9.0 desktop with a Yosemite wallpaper and terminal windows; behind it, four desktops in other color themes, labeled "23 themes · one keystroke." New in 4.9: now on MX Linux and Pop!_OS; Neovim ready offline with plugins preinstalled; three new AI agents, Grok Build, Oh My Pi and T3 Code; doctor, firmware updates and update channels. ohmydebn.org.

                                                                                                                                                                                                  [?]heise online English » 🤖 🌐
                                                                                                                                                                                                  @heiseonlineenglish@social.heise.de

                                                                                                                                                                                                  Archinstall 4.5: Less manual work, more ARM64

                                                                                                                                                                                                  Archinstall 4.5 supports GRUB and Limine for AArch64 EFI boots, fixes WLAN errors, and optimizes system configuration.

                                                                                                                                                                                                  heise.de/en/news/Archinstall-4

                                                                                                                                                                                                    [?]GianfriAur » 🌐
                                                                                                                                                                                                    @GianfriAur@phpc.social

                                                                                                                                                                                                    php-esp32 1.4.0 is out, and it's a big one.

                                                                                                                                                                                                    PHP on the ESP32 is now event-driven: your script registers listeners and sleeps, while timers, pins, HTTP and WebSocket wake it with typed events. The second core polls sensors in the background: tilt the board and the plot moves live on your phone. No loop().

                                                                                                                                                                                                    Write-up with diagrams, down to the I2C wire:
                                                                                                                                                                                                    php-baremetal.com/blog/php-esp

                                                                                                                                                                                                    Alt...A phone browser plotting accelerometer and gyroscope data live over WebSocket while the ESP32 board is tilted by hand.

                                                                                                                                                                                                      [?]@BjornW@mastodon.social » 🌐
                                                                                                                                                                                                      @BjornW@mastodon.social

                                                                                                                                                                                                      RE: infosec.exchange/@david_chisna

                                                                                                                                                                                                      This explains very well why "bad" code contributions by enthusiastic people can still be very worthwhile in the long run.

                                                                                                                                                                                                      Also LLM's will not share a drink with you at a conference reminiscing about that time you collaborated on a piece of code, or sharing stories about stuff happening in their life.

                                                                                                                                                                                                      Opensource projects dismissing these social aspects are doomed in my view.

                                                                                                                                                                                                      [?]David Chisnall (*Now with 50% more sarcasm!*) » 🌐
                                                                                                                                                                                                      @david_chisnall@infosec.exchange

                                                                                                                                                                                                      One of the open source projects I used to (many years ago, so I am not really affected anymore) has recently decided to allow AI contributions. One of their arguments is that they judge submissions on quality, not tools used.

                                                                                                                                                                                                      Back when I was an active contributor (to the project and maintainer of some other parts of the surrounding ecosystem), I got a lot of submissions that were bad.

                                                                                                                                                                                                      The thing is, I absolutely loved getting these because they always came from super-enthusiastic junior people. Reviewing them and giving feedback often too much longer than implementing the feature myself. The same was usually true for the next contribution too. But that shifted over time. After a few months, I started getting patches where I didn’t find anything beyond the cosmetic that I wanted to change.

                                                                                                                                                                                                      Going back further, I was one of those people when I started contributing.

                                                                                                                                                                                                      Measured as code contributions over the short term, maintainers working with submitters of poor-quality PRs is a waste of time. You’re taking time away from writing code to do something that produces code more slowly.

                                                                                                                                                                                                      Measured over the long term, the results are very different. Far more code in that project and closely related parts of the ecosystem has been written by people who I mentored when they came along with some bad code than by me.

                                                                                                                                                                                                      It’s never a waste of my time to turn an enthusiastic and incompetent contributor into an enthusiastic and competent contributor, it’s an absolutely critical part of building a healthy project. I wouldn’t have got nearly as much out of F/OSS on a personal level if I hadn’t encountered a lot of people with the same opinion when I was one of the enthusiastic and incompetent newcomers.

                                                                                                                                                                                                      But LLMs are not like that. If I spend time reviewing LLM-generated code when it would have been faster to write it myself (which, to be clear, is the case on 100% of LLM-submitted PRs I’ve seen so far), then that’s just a time sink. It’s also taking away time I could be spending helping new contributors who want to actually improve, rather than just take the review comments, feed them into an opaque system, and give me back the results.

                                                                                                                                                                                                        [?]iX Magazin » 🌐
                                                                                                                                                                                                        @iX_Magazin@social.heise.de

                                                                                                                                                                                                        [?]iX Magazin » 🌐
                                                                                                                                                                                                        @iX_Magazin@social.heise.de

                                                                                                                                                                                                        [?]Jan Paul » 🌐
                                                                                                                                                                                                        @JanPaul@troet.cafe

                                                                                                                                                                                                        Meistens fallen einem ja die besten Erwiderungen nach der Diskussion ein. Hier weiß ich bis jetzt nicht, wie man hätte reagieren sollen:

                                                                                                                                                                                                        Ein Bekannter hat sich über die BigTech-Unternehmen aufgeregt und wir hatten ein schönes Gespräch über Clouddienste, Abomodelle, KI-Zwang, etc.
                                                                                                                                                                                                        Hab dann mal ein bisschen geplaudert, dass ich seit Jahren Linux nutze, FOSS Apps, googlefreies Android...
                                                                                                                                                                                                        Mit großen Augen antwortete man mir: "Und trägst du sonst auch einen Aluhut?"
                                                                                                                                                                                                        Äh...?

                                                                                                                                                                                                          [?]Arint - SEO+KI » 🌐
                                                                                                                                                                                                          @Arint@arint.info

                                                                                                                                                                                                          RT @ZixuanLi_: GLM-5.3 hat 389 Open-Source-Projekte unterstützt, wobei bisher 4.249 potenzielle Schwachstellen gefunden wurden.

                                                                                                                                                                                                          mehr auf Arint.info

                                                                                                                                                                                                          https://x.com/ZixuanLi_/status/2105120154329977240

                                                                                                                                                                                                            [?]heise online English » 🤖 🌐
                                                                                                                                                                                                            @heiseonlineenglish@social.heise.de

                                                                                                                                                                                                            WSL Containers are here: Linux containers without an extra engine

                                                                                                                                                                                                            Microsoft releases WSL Containers: Linux containers can now be built and started directly under Windows – even from within Windows applications.

                                                                                                                                                                                                            heise.de/en/news/WSL-Container

                                                                                                                                                                                                              [?]Arint - SEO+KI » 🌐
                                                                                                                                                                                                              @Arint@arint.info

                                                                                                                                                                                                              RT @zheanxu: DeepGEMM Ascend ist jetzt quelloffen. Wir haben 99,8 % des Hardware-Limits bei GEMM und 98 % bei MegaMoE erreicht. github.com/deepseek-ai/De…

                                                                                                                                                                                                              mehr auf Arint.info

                                                                                                                                                                                                              https://x.com/zheanxu/status/2105119944556110265

                                                                                                                                                                                                                [?]iX Magazin » 🌐
                                                                                                                                                                                                                @iX_Magazin@social.heise.de

                                                                                                                                                                                                                WSL Container sind da: Linux-Container ohne Extra-Engine

                                                                                                                                                                                                                Microsoft gibt WSL Container frei: Linux-Container lassen sich damit direkt unter Windows bauen und starten – auch aus Windows-Anwendungen heraus.

                                                                                                                                                                                                                heise.de/news/WSL-Container-si

                                                                                                                                                                                                                  [?]Simon Roses Femerling » 🌐
                                                                                                                                                                                                                  @simonroses@infosec.exchange

                                                                                                                                                                                                                  BinSith is now open source! 🛠️

                                                                                                                                                                                                                  A Rust CLI for static binary triage: hashes, strings, indicators, entropy, file comparisons, and folder scanning—with JSON/CSV exports.

                                                                                                                                                                                                                  Binaries for Windows, Linux & macOS.

                                                                                                                                                                                                                  github.com/vulnex/binsith

                                                                                                                                                                                                                  @vulnexsl

                                                                                                                                                                                                                    [?]Oliver Zehentleitner » 🌐
                                                                                                                                                                                                                    @oliverzehentleitner@burningboard.net

                                                                                                                                                                                                                    A codebase is more than code.

                                                                                                                                                                                                                    It is the result of decisions, rejected alternatives, production constraints and workarounds that made sense at the time.

                                                                                                                                                                                                                    With Keep the Why, that reasoning lives as plain Markdown in the repository and can reference reasoning in other repositories.

                                                                                                                                                                                                                    Once those links exist, something interesting emerges: a web of project rationale you can actually walk.

                                                                                                                                                                                                                    Families show where reasoning belongs.

                                                                                                                                                                                                                    Friends show where projects relate.

                                                                                                                                                                                                                    Thoughts show how decisions connect over time.

                                                                                                                                                                                                                    No graph database.

                                                                                                                                                                                                                    No central index.

                                                                                                                                                                                                                    No account.

                                                                                                                                                                                                                    Just Markdown and Git.

                                                                                                                                                                                                                    blog.technopathy.club/the-reas

                                                                                                                                                                                                                    A codebase is more than code

                                                                                                                                                                                                                    Alt...A codebase is more than code

                                                                                                                                                                                                                      [?]heise online English » 🤖 🌐
                                                                                                                                                                                                                      @heiseonlineenglish@social.heise.de

                                                                                                                                                                                                                      [?]Online-Magazin Telepolis » 🌐
                                                                                                                                                                                                                      @telepolis@social.heise.de

                                                                                                                                                                                                                      DeepSeek kappt die Nvidia-Abhängigkeit – mit Huaweis Hilfe und Open Source

                                                                                                                                                                                                                      Mit TileLang will DeepSeek Huaweis KI-Chips so einfach programmierbar machen wie Nvidia-GPUs – und Chinas Tech-Branche vom Westen lösen.

                                                                                                                                                                                                                      telepolis.de/article/DeepSeek-

                                                                                                                                                                                                                      Back to top - More...