US | House Bans WhatsApp on Congressional Staff Devices Over Security Concerns
The U.S. House chief administrative officer has banned WhatsApp from congressional staffers' government devices citing data vulnerability concerns. The cybersecurity office deemed the messaging app "high-risk" due to lack of transparency in data protection, absence of stored data encryption, and potential security risks, according to an email obtained by Axios.
Met Police chief 'shocked' by planned Palestine Action protest in London
Met Police chief 'shocked' by planned Palestine Action protest in London
The force says it cannot legally stop Monday's protest in support of the pro-Palestine group.Jacqueline Howard (BBC News)
‘Never give up nuclear weapons’: what Israel-Iran conflict tells North Korea
How Israel-Iran conflict hardens North Korea’s nuclear resolve
With lessons drawn from Ukraine and now Iran, Pyongyang’s commitment to its ‘irreversible’ nuclear status is firmer than ever, analysts say.Park Chan-kyong (South China Morning Post)
What is the best degoogled tablet for an artist?
cross-posted from: lemmy.world/post/31808224
Please see the cross-post as it is updated.
What is the best degoogled tablet for an artistwhat is the best tablet for iodeOS, GrapheneOS and LineageOS
- with smooth stylus support that is as good as apple pen
- palm rejection
- pressure sensitive stylus
- works well for krita / excalidraw / xournalapp
- latency
- at least 16GB RAM and 256GB storageFor iodeOS, it doesn't seem to support any tablet device officially
- iodéOS official supported devices - iodéFor GrapheneOS, the only choice is google pixel tablet (or maybe pixel fold). However
- pixel tablet have latency issue
- based on Google Pixel Tablet Review - YouTube
- pixel fold does not support stylus
- workaround This Stylus Pen works with the Google Pixel Fold - YouTube
- Can someone share their GrapheneOS pixel tablet experience on krita / excalidraw / xournalapp?For LineageOS
- What tablet+stylus+LineageOS has the best performance?
- What tablet+stylus+LineageOS has the best balance between price and performance?
- Can someone share their stylus experience on krita / excalidraw / xournalapp?Sincere thanks
cross-posted from: lemmy.world/post/31808224
Please see the cross-post as it is updated.
iodéOS official supported devices - iodé
The models below are officially supported by the iodé team. Don’t see your device in the list? Don’t panic! We also support a iodéOS GSI. You can also find here a list of unofficially supported models by the iodé community.iodé
Israel strikes Iran's Evin prison in Tehran
Israel strikes Iran's Evin prison in Tehran
Israel said its carrying out strikes inside Iran with 'unprecedented intensity,' destroying numerous security offices and damaging the gate at Tehran's infamous Evin Prison. DW has the latest.Jon Shelton (Deutsche Welle)
Iyo vs. Io — OpenAI and Jony Ive get sued
Iyo vs. Io — OpenAI and Jony Ive get sued
In May, legendary Apple designer Jony Ive hooked up with OpenAI to announce an unspecified gadget. [WSJ, archive] To promote this complete vaporware, OpenAI released a video of Sam Altman and Ive b…Pivot to AI
US strikes on Iran did not violate international law, NATO’s Rutte says
Map shows where President Barack Obama dropped his 20,000 bombs | The Independent
Outgoing US leader carries out 3,000 more strikes in 2016 than year beforeHarriet Agerholm (The Independent)
Belgium: Activists blockade access to 2 companies they accuse of “complicity with Israeli genocide in Gaza”
The protest started at around 7:45 am on Monday. Protesters blocked the entrance to the Syensqo chemical company in Brussels and OIP Sensor Systems in Tournai (Hainaut Province). OIP Sensor Systems is entirely owned by Elbit, an Israeli arms company.
At Syensqo in Brussels the activists blocked all the access routes to the company and painted the front of the office building red. The company supplies parts for Israeli drones.
"Syensqo knowingly supplies a key component for a weapon known for its use in Israeli war crimes. Syensqo cannot deny its complicity in the ongoing genocide”, the activists said in a statement.
Meanwhile, in Tournai, activists entered a warehouse used by OIP, where they painted equipment that is being stored inside red.
Activists blockade access to 2 companies they accuse of “complicity with Israeli genocide in Gaza” | VRT NWS: news
Activists blocked access to 2 companies with links to Israel on Monday morning. They accuse the companies of complicity in what they describe as “genocidal acts” of the part of Isreal in Gaza.VRT NWS
"Mass layoff" provision in Trump bill sparks alarm: "Deeply concerning"
'Mass Layoff' Provision in Trump Bill Sparks Alarm: 'Deeply Concerning'
"This [bill] would basically give [Trump] carte blanche to refashion the entire federal government," Ben Olinksy told Newsweek.Sophie Clark (Newsweek)
if you want to force your way into World War 3 this seems like a brilliant idea.
Feels more like a speed run, the actors of this conflict don’t have many days left.
A 50,000-Year-Old Block of Ice Paints the Most Chilling Picture of the Future Ever
A 50,000-Year-Old Block of Ice Paints the Most Chilling Picture of the Future Ever
The highest CO2 levels in 50,000 years is still 10 times less than our current anthropogenic climate nightmare.Darren Orf (Popular Mechanics)
Tensor Manipulation Unit (TMU): Reconfigurable, Near-Memory Tensor Manipulation for High-Throughput AI SoC
Tensor Manipulation Unit (TMU): Reconfigurable, Near-Memory Tensor Manipulation for High-Throughput AI SoC
While recent advances in AI SoC design have focused heavily on accelerating tensor computation, the equally critical task of tensor manipulation, centered on high,volume data movement with minimal computation, remains underexplored.arXiv.org
How the Rubin Observatory Will Reinvent Astronomy
How the Rubin Observatory Will Reinvent Astronomy
IEEE Spectrum takes you inside the most advanced sky-mapping instrument ever built—and reveals its stunning first imagesEvan Ackerman (IEEE Spectrum)
How the Rubin Observatory Will Reinvent Astronomy
How the Rubin Observatory Will Reinvent Astronomy
IEEE Spectrum takes you inside the most advanced sky-mapping instrument ever built—and reveals its stunning first imagesEvan Ackerman (IEEE Spectrum)
It's true but I prefer my criticisms without ad hominems
Where's the source for discrediting the statement?
geneva_convenience doesn't like this.
"Can you prove Iran doesn't have nukes? Because Israeli intelligence told me they do!"
geneva_convenience doesn't like this.
Met Police linked to Israel as it gears up for pro-Palestine protests
Met Police linked to Israel as it gears up for pro-Palestine protests
Senior Metropolitan Police officers are regular attendees at a think tank closely tied to Israel’s military and intelligence services and have accepted hospitality from its embassy in London.JOHN McEVOY (Declassified Media ltd)
'There Is No Intel': Trump's Attacks on Iran Were Based on Vibes, Sources Say
Trump’s Attacks on Iran Were Based on ‘No Intel’: Sources
Trump’s decision to strike three Iranian nuclear facilities was not based on new intelligence, administration officials say.Andrew Perez (Rolling Stone)
geneva_convenience likes this.
Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?
As a security-conscious user, I've used NoScript since Firefox's early days, but its restrictive nature has become frustrating. I'm often forced to go unprotected just to access websites with multiple scripts running on different domains, which defeats the purpose of using NoScript and balances security and usability that it once provided.
Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?
by sensitive information I'm referring to
- local machine time
- local machine ram
- local machine operating system + version
- local machine hardware
- Serial Number
- Hardware ID
- UUID
- Windows Device ID
- Windows Product ID
- ...
greatly appreciate any insight
EDIT:
could be possible solution
discuss.grapheneos.org/d/16025…
- ~~LibreJS: GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap.~~
- JShelter: Mitigates potential threats from JavaScript, including fingerprinting, tracking, and data collection. Slightly modifies the results of API calls, differently on different domains, so that the cross-site fingerprint is not stable. Applies security counter-measures that are likely not to break web pages. Allows fine-grained control over the restrictions and counter-measures applied to each domain.
Most of those things cannot be collected through JavaScript.Local time can.
RAM can only be approximated to protect user privacy. Edit: And it’s not available on Firefox.
OS+version are already in your browser’s user-agent string that is sent out with every request you make.
Machine hardware cannot be enumerated. JavaScript can try to guess your GPU based on what it can do with WebGL.
There is no way to get a serial number or similar.
To spoof timezone/OS+version/browser+version ... and disable WebGL, use sereneblue.github.io/chameleon…
- lemmy.world/post/31885153
Vanadium and what to use on desktop - GrapheneOS Discussion Forum
GrapheneOS discussion forumGrapheneOS Discussion Forum
like this
Harsh question: Do you have a real need to prevent this data from being collected, or are you investigating just for ~~funsies~~ best practice advice? There are a lot of posts like this where people overestimate the threat model they have and insist on needing to block things that are nearly impossible to, or at least have significant tradeoffs like you are dealing with now.
Javascript is also not the only source that sites can use for these pieces of info from your machine. Local time in particular can be estimated by looking up the rough location of your IP address then matching to a time zone.
Anyway.
I would assume you could technically fork localCDN (replaces remote javascript libraries with local copies) and then manually edit the local javascript library copies to remove the calls you are concerned about.
There's also options like uBlock Origin's methods of only whitelisting specific scripts. Much more flexible than NoScript. You can block scripts that are third party and only allow site specific ones fairly easily, without digging deep into the settings.
Bear in mind that your specific combination of installed extensions can also be a unique identifier though.
Do you have a real need to prevent this data from being collected
maybe
or are you investigating just for best practice advice?
yes
There are a lot of posts like this where people overestimate the threat model they have and insist on needing to block things that are nearly impossible to, or at least have significant tradeoffs like you are dealing with now
could you explain why it is nealy impossible from only blocking javascript from attaining "local machine operating system + version
"? I don't think this kind of information is relevant for webpage displaying. I dont think webpage will break if we ban js from doing so
I would assume you could technically fork localCDN (replaces remote javascript libraries with local copies) and then manually edit the local javascript library copies to remove the calls you are concerned about.
that could work I guess when I have enough js knowledge
There’s also options like uBlock Origin’s methods of only whitelisting specific scripts. Much more flexible than NoScript. You can block scripts that are third party and only allow site specific ones fairly easily, without digging deep into the settings.
is it possible to adjust uBlock Origin whitelisting and disallow js that retrieve "local machine operating system + version
" from running?
Bear in mind that your specific combination of installed extensions can also be a unique identifier though.
Does this mean website can see all the extensions I installed?
Some browsers have built in fingerprint resistance techniques you can enable:
support.mozilla.org/en-US/kb/r…
I wouldn't entirely trust it, but enabling this feature in strict mode would tick a few of your listed boxes.
Resist Fingerprinting | Firefox Help
Firefox's Advanced Preferences to resist fingerprinting can help prevent websites from uniquely identifying your device but can cause problems. Learn more.support.mozilla.org
Xlibre 25.0 : summer solstice release
like this
don't like this
like this
Just quoting the readme so there's no misinterpretation:
This is an independent project, not at all affiliated with BigTech or any of their subsidiaries or tax evasion tools, nor any political activists groups, state actors, etc. It's explicitly free of any "DEI" or similar discriminatory policies. Anybody who's treating others nicely is welcomed.
It doesn't matter which country you're coming from, your political views, your race, your sex, your age, your food menu, whether you wear boots or heels, whether you're furry or fairy, Conan or McKay, comic character, a small furry creature from Alpha Centauri, or just a boring average person. Anybody who's interested in bringing X forward is welcome.
like this
Also the guy got told off by Linus Torvalds for being an anti-vaxxer theregister.com/2021/06/11/lin…
So imo this isn't a project that should be supported
Linus Torvalds tells kernel list poster to 'SHUT THE HELL UP' for saying COVID-19 vaccines create 'new humanoid race'
: 'Any Linux discussion list isn't going to have your idiotic drivel pass uncontested from me'Simon Sharwood (The Register)
like this
don't like this
completely disconnected from the software world ?
like this
If he uses his software work to promote potentially dangerous believes, I don't think the project should be supported or promoted
like this
Tbh, I'm far more concerned by the hostility to this fork.
like this
Hence we can assume that the first DEI entrance is dei-as-implemented-by-xorg-team, which
he obviously doesn't like. Simple assumption, the best would be to ask him.
don't like this
like this
don't like this
Don't worry, it'll be fine. If this file were the only issue with this world, we'd live in a paradise.
What is there to fear? Seriously. Pretending like this has anything to do with fear is the most childishly narcissistic framing possible. Grow up.
Xorg is nearly dead and buried. Nobody actually cares about Xlibre. Notice how the only thing being mentioned is the sidenote that this fork is run by a racist troll whose been kicked for cause from several prominent OSS projects. Literally the only reason XLibre exists is because this individual needed to start his own project because he's worn out his welcome in many others.
And, considering the geopolitical state of affairs at the moment. It's pretty plainly obvious that the only sort of person who is "anti-DEI" are fascists. And the only people making excuses for the fascists are other fascists. So, thanks for letting us know who you are.
This isn't coherent, and even if it was, the burden of stance interpretability is context-dependent.
He is the one with the politically charged README that reads plainly like the thoughtless garbage MAGA types in America put out. I mean cmon man, "[...] we'll make X great again"?
Also your shallow and brainless dismissal of all this criticism coming from his "detractors" (and who would not become a "detractor", after actually investigating his terrible dribble?) is defeated easily by just reading the actual words he said.
As in, for instance, the original source of his garbage antivax posturing that he posted in the linux kernel mailing list: lkml.iu.edu/hypermail/linux/ke… .
These are not alleged opinions, he's just full of shit.
And this isn't even mentioning the fact that Xorg is going to be dead, should be dead, and will continue to die. And good riddance, too! Terrible and borderline unmaintainable.
The argument that choice diversity is good inherently is stupid, too. Wayland is a god damned protocol! There is no reason to have lots of diversity there! It has no tangible benefit.
There are already many different compositors that implement the Wayland protocol, and there are also many 3rd party extensions! Can you think of a single, material benefit to simply having different basic desktop protocols?
like this
Also your shallow and brainless dismissal of all this criticism coming from his “detractors” (and who would not become a > “detractor”, after actually investigating his terrible dribble?) is defeated easily by just reading the actual words he said.
I was merely pointing out that these opinions, whatever they really are, have more publicity from people
criticizing the founder. The best from your point of view would be not to speak about it.
And this isn’t even mentioning the fact that Xorg is going to be dead, should be dead, and will continue to die. And good
riddance, too! Terrible and borderline unmaintainable.
If it were true, all this hatred against the project would be pointless.
The argument that choice diversity is good inherently is stupid, too. Wayland is a god damned protocol! There is no reason > to have lots of diversity there! It has no tangible benefit.
Free software is all about freedom, and diversity means freedom of choice. If you don't agree
with that, you miss the all point.
I was merely pointing out that these opinions, whatever they really are, have more publicity from people criticizing the founder.
Why yes, friend, I will just conveniently pretend that you bringing that up is completely outside the context of whether or not to seriously consider the criticism.
And if you are trying to make a point of whether or not the ideology is seriously impacting the project, you need-only take a casual walk through the issue list, and find (among other evidence) that a suggestion to move to codeberg was criticized for... "DEI". Wow. How technically-focused.
The best from your point of view would be not to speak about it.
You are getting more and more incoherent the more of these replies you churn out. What, precisely from my point of view (which I guess apparently you know very well? the irony...) here implies that "not talking about it" is the best choice? That's absurd.
I find it very important to understand the motivations, technical and ideological, behind a project.
If it were true, all this hatred against the project would be pointless.
I don't spend any effort talking about in any other respect than telling people that they should likely disregard if for both technical reasons (it cuts out Xwayland, his commits frequently lead to very blatant regressions that are nontrivial, etc.) and ideological (his terrible, awful politics and motivations for making the project, to begin with!)
The reason I replied to your comment is mostly out of idle curiosity and a deepseated longing for genuineness and critical thinking of other people that I have not yet managed to kill (despite its impracticality in the modern age).
Free software is all about freedom, and diversity means freedom of choice. If you don’t agree with that, you miss the all point.
This is all such a massive and disheartening reduction of what software freedom is. I hope that you eventually manage to think less shallowly about this.
Tell me, do you have any particular, material distinction you are making by making a choice between desktop protocols? The desktop protocol is a purely technical thing, and I have not heard a single peep out of you in regards to specifics.
To elaborate, in Xorg, it is a very monolithic beast. It is very convoluted in its purview and carries a lot of preset implementation of its various facets. It contains an entire networking stack for deciding how to communicate windows over a network.
It is significantly less flexible and modular than Wayland, because in Wayland basically everything of significance is decided by the compositor.
This, ironically to your point, actually gives you more choice and freedom in how things work (this is also why tiling window managers love wayland to death, it's pretty easy to just build upon the basic wlroots implementation!). So I have to ask you, frankly, what in the fuck do you think you're actually saying right now?
The issue, in this way, is that you only seem to care about software freedom in the sense of the abstract concept rather than the reality. You seem to think of software freedom in the sense of "I either build and install this package, or I build and install this one", with an all-consuming disregard for the technical aspects of freedom. Which is impractical, and arguably antithetical to the very process of trying to foster software freedom to begin with. As evident by literally everything to do with this situation. My lord.
yes, apparently the development of Xorg is more or less abandoned in favor of wayland
the Xlibre fork seems more active
like this
like this
don't like this
US embassy wants 'every social media username of past five years' for new visas
cross-posted from: lemmy.bestiver.se/post/457134
Comments
US embassy wants 'every social media username of past five years' on new visa applications
The embassy also wants people to set their social media profiles to public.TheJournal.ie
like this
Spurred by US sanctions, China adapts Huawei’s HarmonyOS for microsatellites
Spurred by US sanctions, China adapts Huawei’s HarmonyOS for microsatellites
Chinese suitcase-sized device delivers faster data updates and improved stability using simpler technology, tests show.Ling Xin (South China Morning Post)
like this
Taft-Hartley Act (1947) On this day in 1947, the Taft-Hartley Act became U.S. law after a heavily bipartisan vote, greatly restricting the legal rights of organizing workers during an...
Taft-Hartley Act (1947)
Mon Jun 23, 1947
Image: A massive 1947 union rally in Madison Square Garden. A large sign reads "MR PRESIDENT: VETO THE HARTLEY-TAFT SLAVE-LABOR BILL"
On this day in 1947, the Taft-Hartley Act became U.S. law after a heavily bipartisan vote, greatly restricting the legal rights of organizing workers during an unprecedented wave of strikes after World War II.
The Labor Management Relations Act of 1947, better known as the Taft-Hartley Act, was enacted despite the veto of President Harry S. Truman, with many Democrats defecting from the party line to support the union-busting measure.
The Act was introduced in the aftermath of a major, unprecedented wave of strikes in the aftermath of World War II, from 1945-1946. Strikes were strongly repressed during World War II to not hamper the war effect. When the wartime restrictions ended, millions of workers across the country went on strike.
The Taft-Hartley Act prohibits unions from engaging in "unfair labor practices." Among the practices prohibited by the act are jurisdictional strikes, wildcat strikes, solidarity or political strikes, secondary boycotts, secondary and mass picketing, closed shops, and monetary donations by unions to federal political campaigns. The Act also allowed states to pass right-to-work laws banning union shops.
A pamphlet supporting a third, progressive party, published in 1948, had this to say on the vote:
"Every scheme of the lobbyists to fleece the public became law in the 80th Congress. And every constructive proposal to benefit the common people gathered dust in committee pigeonholes. The bi-partisan bloc, the Republocratic cabal which ruled Congress and made a mockery of President Roosevelt's economic bill of rights, also wrecked the Roosevelt foreign policy. A new foreign policy was developed. This policy was still gilded with the good words of democracy. But its Holy Grail was oil...
The Democratic administration carries the ball for Wall Street's foreign policy. And the Republican party carries the ball for Wall Street's domestic policy. Of course the roles are sometimes interchangeable...
On occasion President Truman still likes to lay an occasional verbal wreath on the grave of the New Deal. But the hard facts of roll call votes show that Democrats are voting more and more like Republicans. If the Republican Taft-Hartley bill became law over the President's veto, it was because many of the Democrats allied themselves to the Republicans."
- Date: 1947-06-23
- Learn More: jacobinmag.com, www.counterpunch.org.
- Tags: #Labor.
- Source: www.apeoplescalendar.org
How Many Democrats Voted for Taft-Hartley? - CounterPunch.org
An Anti-Labor Day That Lives in InfamyAlexander Cockburn (CounterPunch.org)
It’s funny how people act as if there was such a time when “American Democracy” really was a great thing.
It’s always been elite coded and elite controlled.
What happened to the chapters? There are only two chapters.
One-Punch Man (Webcomic) - MangaDex
Follows the life of an average part-time hero who manages to win every battle with a single punch. This ability frustrates him as he no longer feels the thrill of fighting a tough opponent, which leads him to question his past desire of becoming stro…MangaDex
like this
You should also stop using Tachiyomi they got a DCMA request and shut down a while back. Move to Mihon, a fork of Tachiyomi.
GitHub - mihonapp/mihon: Free and open source manga reader for Android
Free and open source manga reader for Android. Contribute to mihonapp/mihon development by creating an account on GitHub.GitHub
‘Not for you’: Israeli shelters exclude Palestinians as bombs rain down
‘Not for you’: Israeli shelters exclude Palestinians as bombs rain down
Shelters are a lifeline in Israel from Iranian attacks, but Palestinian citizens of the country have been locked out.Al Jazeera
Berlin: proposal to remove 30 km/h zones because air quality improved, thanks to 30 km/h zones
The absurdity of the proposal is already in the title, and shows how motonormativity is spread all over the world.
Berlin has a very good public transit system, and a few 30 km/h zones cannot be that bad.
I would love to hear opinions from someone who lives there!
crossposted from: mastodon.uno/users/rivoluzione…
Tempo 30 steht auf Dutzenden Hauptstraßen wieder zur Debatte
Auf Dutzenden Berliner Hauptstraßen wurde wegen schlechter Luftqualität Tempo 30 eingeführt. CDU-Verkehrssenatorin Bonde will dies zurückdrehen. Die SPD befürchtet negative Auswirkungen für Schüler und fordert erst eine ausführliche Prüfung.www.rbb24.de
like this
Feddit Un'istanza italiana Lemmy reshared this.
Yep sounds absurd. As I unterstand it the problem is that you need a reason for 30 km/h zones. The reason was the air quality which is now better so there is no reason anymore.
Some zones may be kept because the streets are used by school kids.
I think this is still absurd and good 30 km/h zones with synced traffic lights can yield a good traffic flow.
Wildlife crossing
Repost, but an article came up about one in California .
I've seen a few rewilding campaigns in my community (Northeastern US) take shape over the last few years, and it makes me have a little hope. What with everything, all the time, I like when good news slips through.
World’s Largest Wildlife Bridge Spanning 10 Lanes of 101 Freeway Is Nearly Complete
With physical construction done, the project moves to the planting stage. The one-acre habitat bridge will connect long-isolated wildlife areas of the Santa Monica Mountains.Beverly Braga (The Drive)
FundMECFS
in reply to Stamets • • •What I don’t get is why lefty Canadians were so against Alberta leaving Canada.
Sounds like a plus to me…