Salta al contenuto principale



US | House Bans WhatsApp on Congressional Staff Devices Over Security Concerns


The U.S. House chief administrative officer has banned WhatsApp from congressional staffers' government devices citing data vulnerability concerns. The cybersecurity office deemed the messaging app "high-risk" due to lack of transparency in data protection, absence of stored data encryption, and potential security risks, according to an email obtained by Axios.




What is the best degoogled tablet for an artist?


cross-posted from: lemmy.world/post/31808224

Please see the cross-post as it is updated.

What is the best degoogled tablet for an artist

what is the best tablet for iodeOS, GrapheneOS and LineageOS
- with smooth stylus support that is as good as apple pen
- palm rejection
- pressure sensitive stylus
- works well for krita / excalidraw / xournalapp
- latency
- at least 16GB RAM and 256GB storage


For iodeOS, it doesn't seem to support any tablet device officially
- iodéOS official supported devices - iodé


For GrapheneOS, the only choice is google pixel tablet (or maybe pixel fold). However
- pixel tablet have latency issue
- based on Google Pixel Tablet Review - YouTube
- pixel fold does not support stylus
- workaround This Stylus Pen works with the Google Pixel Fold - YouTube
- Can someone share their GrapheneOS pixel tablet experience on krita / excalidraw / xournalapp?


For LineageOS
- What tablet+stylus+LineageOS has the best performance?
- What tablet+stylus+LineageOS has the best balance between price and performance?
- Can someone share their stylus experience on krita / excalidraw / xournalapp?

Sincere thanks


cross-posted from: lemmy.world/post/31808224

Please see the cross-post as it is updated.


in reply to Stamets

What I don’t get is why lefty Canadians were so against Alberta leaving Canada.

Sounds like a plus to me…



Israel strikes Iran's Evin prison in Tehran




in reply to HiddenLayer555

This meme is funny, but honestly would fit Trump better. He's constantly blowing smoke up his own ass.
in reply to madcaesar

After winning the Nobel peace prize, Obama dropped an average of 30k bombs / year (80 per day) during his presidency, mostly on Muslim countries, 2, 3. In 2016 alone, dropped 26,171 bombs in the Middle East and North Africa, up 3000 from the previous year. The countries bombed include Syria, Iraq, Yemen, Afghanistan, Pakistan, Libya, and Somalia.
Questa voce è stata modificata (2 mesi fa)
Unknown parent

lemmy - Collegamento all'originale
Nakoichi [they/them]
Beautiful lol I hate you


Belgium: Activists blockade access to 2 companies they accuse of “complicity with Israeli genocide in Gaza”


The protest started at around 7:45 am on Monday. Protesters blocked the entrance to the Syensqo chemical company in Brussels and OIP Sensor Systems in Tournai (Hainaut Province). OIP Sensor Systems is entirely owned by Elbit, an Israeli arms company.

At Syensqo in Brussels the activists blocked all the access routes to the company and painted the front of the office building red. The company supplies parts for Israeli drones.

"Syensqo knowingly supplies a key component for a weapon known for its use in Israeli war crimes. Syensqo cannot deny its complicity in the ongoing genocide”, the activists said in a statement.

Meanwhile, in Tournai, activists entered a warehouse used by OIP, where they painted equipment that is being stored inside red.



Unknown parent

lemmy - Collegamento all'originale
Grandwolf319
if you want to force your way into World War 3 this seems like a brilliant idea.


Feels more like a speed run, the actors of this conflict don’t have many days left.

in reply to Ayano

Like vampires, but instead of blood, they suck oil.


in reply to ☆ Yσɠƚԋσʂ ☆

People talking about the effects of closing the straight being bad for multiple countries. Can Iran enforce a sort of selective closing, like the houthis did? Allowing ships as long as they dont trade with the usa? Or maybe only allow countries that dont host usa military bases?
Questa voce è stata modificata (3 mesi fa)
in reply to narwhal

Iran could enforce selective closing very easily because they can shoot across the strait from the coast. It's a mountainous region where Iran has a bunch of missile installations which would be very difficult to dislodge. Iran can also trivially enforce a full closing because the strait is very shallow. All they'd have to do would be to scuttle a couple of corvettes there, and it would be completely impassible. Full closure would be the nuclear option.



Tensor Manipulation Unit (TMU): Reconfigurable, Near-Memory Tensor Manipulation for High-Throughput AI SoC







in reply to geneva_convenience

It's true but I prefer my criticisms without ad hominems

Where's the source for discrediting the statement?

geneva_convenience doesn't like this.

in reply to drolex

"Can you prove Iran doesn't have nukes? Because Israeli intelligence told me they do!"
in reply to Asafum

Fair point. Could be a quote from a relevant expert saying "I think it's bullshit" maybe?

geneva_convenience doesn't like this.





Met Police linked to Israel as it gears up for pro-Palestine protests





in reply to ☆ Yσɠƚԋσʂ ☆

i don't think it should be up to them to dictate how things are going to finish, especially when their enemy is still standing and so far the result of their attacks represented a nuisance at best. if they want to chant victory after achieving "that", things are gonna get even more ridiculous.


Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?


As a security-conscious user, I've used NoScript since Firefox's early days, but its restrictive nature has become frustrating. I'm often forced to go unprotected just to access websites with multiple scripts running on different domains, which defeats the purpose of using NoScript and balances security and usability that it once provided.

Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?

by sensitive information I'm referring to
- local machine time
- local machine ram
- local machine operating system + version
- local machine hardware
- Serial Number
- Hardware ID
- UUID
- Windows Device ID
- Windows Product ID
- ...

greatly appreciate any insight


EDIT:

could be possible solution

discuss.grapheneos.org/d/16025…
- ~~LibreJS: GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap.~~
- JShelter: Mitigates potential threats from JavaScript, including fingerprinting, tracking, and data collection. Slightly modifies the results of API calls, differently on different domains, so that the cross-site fingerprint is not stable. Applies security counter-measures that are likely not to break web pages. Allows fine-grained control over the restrictions and counter-measures applied to each domain.


@bjoern_tantau@swg-empire.de

Most of those things cannot be collected through JavaScript.

Local time can.

RAM can only be approximated to protect user privacy. Edit: And it’s not available on Firefox.

OS+version are already in your browser’s user-agent string that is sent out with every request you make.

Machine hardware cannot be enumerated. JavaScript can try to guess your GPU based on what it can do with WebGL.

There is no way to get a serial number or similar.


To spoof timezone/OS+version/browser+version ... and disable WebGL, use sereneblue.github.io/chameleon…
- lemmy.world/post/31885153

Questa voce è stata modificata (3 mesi fa)
in reply to Holeheadou92984

Harsh question: Do you have a real need to prevent this data from being collected, or are you investigating just for ~~funsies~~ best practice advice? There are a lot of posts like this where people overestimate the threat model they have and insist on needing to block things that are nearly impossible to, or at least have significant tradeoffs like you are dealing with now.

Javascript is also not the only source that sites can use for these pieces of info from your machine. Local time in particular can be estimated by looking up the rough location of your IP address then matching to a time zone.


Anyway.

I would assume you could technically fork localCDN (replaces remote javascript libraries with local copies) and then manually edit the local javascript library copies to remove the calls you are concerned about.

There's also options like uBlock Origin's methods of only whitelisting specific scripts. Much more flexible than NoScript. You can block scripts that are third party and only allow site specific ones fairly easily, without digging deep into the settings.

Bear in mind that your specific combination of installed extensions can also be a unique identifier though.

in reply to wizardbeard

Do you have a real need to prevent this data from being collected


maybe

or are you investigating just for best practice advice?


yes

There are a lot of posts like this where people overestimate the threat model they have and insist on needing to block things that are nearly impossible to, or at least have significant tradeoffs like you are dealing with now


could you explain why it is nealy impossible from only blocking javascript from attaining "local machine operating system + version
"? I don't think this kind of information is relevant for webpage displaying. I dont think webpage will break if we ban js from doing so

I would assume you could technically fork localCDN (replaces remote javascript libraries with local copies) and then manually edit the local javascript library copies to remove the calls you are concerned about.


that could work I guess when I have enough js knowledge

There’s also options like uBlock Origin’s methods of only whitelisting specific scripts. Much more flexible than NoScript. You can block scripts that are third party and only allow site specific ones fairly easily, without digging deep into the settings.


is it possible to adjust uBlock Origin whitelisting and disallow js that retrieve "local machine operating system + version
" from running?

Bear in mind that your specific combination of installed extensions can also be a unique identifier though.


Does this mean website can see all the extensions I installed?

in reply to Holeheadou92984

Some browsers have built in fingerprint resistance techniques you can enable:

support.mozilla.org/en-US/kb/r…

I wouldn't entirely trust it, but enabling this feature in strict mode would tick a few of your listed boxes.



Xlibre 25.0 : summer solstice release


a lot of improvements in security, libs, abi, ...
Questa voce è stata modificata (3 mesi fa)

don't like this

in reply to chimay

There's a fork of Xorg server??
in reply to pastermil

Yeah very recently, by a guy who says it is explicitly anti "DEI" in the readme and thinks there is some kind of conspirancy by IBM to kill Xorg
in reply to Kwdg

Just quoting the readme so there's no misinterpretation:

This is an independent project, not at all affiliated with BigTech or any of their subsidiaries or tax evasion tools, nor any political activists groups, state actors, etc. It's explicitly free of any "DEI" or similar discriminatory policies. Anybody who's treating others nicely is welcomed.
It doesn't matter which country you're coming from, your political views, your race, your sex, your age, your food menu, whether you wear boots or heels, whether you're furry or fairy, Conan or McKay, comic character, a small furry creature from Alpha Centauri, or just a boring average person. Anybody who's interested in bringing X forward is welcome.
in reply to Leny

Also the guy got told off by Linus Torvalds for being an anti-vaxxer theregister.com/2021/06/11/lin…

So imo this isn't a project that should be supported

don't like this

in reply to Kwdg

So, you comdemn all the project because its founder just happened to have an opinion you don't like about a topic
completely disconnected from the software world ?
Questa voce è stata modificata (3 mesi fa)
in reply to chimay

The anti DEI stuff is in the project readme and the anti vax bullshit was on the lkml. So I think the auther can not keep his 'opinions' and politics out of his projects.
If he uses his software work to promote potentially dangerous believes, I don't think the project should be supported or promoted
in reply to Kwdg

So far, his alleged opinions are more spread out by his detractors than by himself. Imo, this project brings more diversity of choice in the foss world, and that's a good thing. I have nothing against wayland, but a de facto monopoly is never desirable.
Tbh, I'm far more concerned by the hostility to this fork.
in reply to chimay

His opinion is literally on the frontpage of his project on github, there is nothing 'alleged' about it. I don't think the project can be separated from his opinions
in reply to Kwdg

The readme seems to contradict itself, the second part of Leny's quote looks like real DEI.
Hence we can assume that the first DEI entrance is dei-as-implemented-by-xorg-team, which
he obviously doesn't like. Simple assumption, the best would be to ask him.

don't like this

in reply to chimay

Found the useful idiot. You're willfully ignoring the racist dogwhistles. That either makes you a supporter or a fellow traveler. Either way, you're complicit and not innocent.

don't like this

in reply to wakko

You're all wrong, it's only that you seem to fear a readme almost no user will ever read.
Don't worry, it'll be fine. If this file were the only issue with this world, we'd live in a paradise.
Questa voce è stata modificata (3 mesi fa)
in reply to chimay

What is there to fear? Seriously. Pretending like this has anything to do with fear is the most childishly narcissistic framing possible. Grow up.

Xorg is nearly dead and buried. Nobody actually cares about Xlibre. Notice how the only thing being mentioned is the sidenote that this fork is run by a racist troll whose been kicked for cause from several prominent OSS projects. Literally the only reason XLibre exists is because this individual needed to start his own project because he's worn out his welcome in many others.

And, considering the geopolitical state of affairs at the moment. It's pretty plainly obvious that the only sort of person who is "anti-DEI" are fascists. And the only people making excuses for the fascists are other fascists. So, thanks for letting us know who you are.

in reply to chimay

This isn't coherent, and even if it was, the burden of stance interpretability is context-dependent.

He is the one with the politically charged README that reads plainly like the thoughtless garbage MAGA types in America put out. I mean cmon man, "[...] we'll make X great again"?

Also your shallow and brainless dismissal of all this criticism coming from his "detractors" (and who would not become a "detractor", after actually investigating his terrible dribble?) is defeated easily by just reading the actual words he said.

As in, for instance, the original source of his garbage antivax posturing that he posted in the linux kernel mailing list: lkml.iu.edu/hypermail/linux/ke… .

These are not alleged opinions, he's just full of shit.

And this isn't even mentioning the fact that Xorg is going to be dead, should be dead, and will continue to die. And good riddance, too! Terrible and borderline unmaintainable.

The argument that choice diversity is good inherently is stupid, too. Wayland is a god damned protocol! There is no reason to have lots of diversity there! It has no tangible benefit.

There are already many different compositors that implement the Wayland protocol, and there are also many 3rd party extensions! Can you think of a single, material benefit to simply having different basic desktop protocols?

Questa voce è stata modificata (3 mesi fa)
in reply to solardirus

Also your shallow and brainless dismissal of all this criticism coming from his “detractors” (and who would not become a > “detractor”, after actually investigating his terrible dribble?) is defeated easily by just reading the actual words he said.


I was merely pointing out that these opinions, whatever they really are, have more publicity from people
criticizing the founder. The best from your point of view would be not to speak about it.

And this isn’t even mentioning the fact that Xorg is going to be dead, should be dead, and will continue to die. And good
riddance, too! Terrible and borderline unmaintainable.


If it were true, all this hatred against the project would be pointless.

The argument that choice diversity is good inherently is stupid, too. Wayland is a god damned protocol! There is no reason > to have lots of diversity there! It has no tangible benefit.


Free software is all about freedom, and diversity means freedom of choice. If you don't agree
with that, you miss the all point.

in reply to chimay

I was merely pointing out that these opinions, whatever they really are, have more publicity from people criticizing the founder.


Why yes, friend, I will just conveniently pretend that you bringing that up is completely outside the context of whether or not to seriously consider the criticism.

And if you are trying to make a point of whether or not the ideology is seriously impacting the project, you need-only take a casual walk through the issue list, and find (among other evidence) that a suggestion to move to codeberg was criticized for... "DEI". Wow. How technically-focused.

The best from your point of view would be not to speak about it.


You are getting more and more incoherent the more of these replies you churn out. What, precisely from my point of view (which I guess apparently you know very well? the irony...) here implies that "not talking about it" is the best choice? That's absurd.

I find it very important to understand the motivations, technical and ideological, behind a project.

If it were true, all this hatred against the project would be pointless.


I don't spend any effort talking about in any other respect than telling people that they should likely disregard if for both technical reasons (it cuts out Xwayland, his commits frequently lead to very blatant regressions that are nontrivial, etc.) and ideological (his terrible, awful politics and motivations for making the project, to begin with!)

The reason I replied to your comment is mostly out of idle curiosity and a deepseated longing for genuineness and critical thinking of other people that I have not yet managed to kill (despite its impracticality in the modern age).

Free software is all about freedom, and diversity means freedom of choice. If you don’t agree with that, you miss the all point.


This is all such a massive and disheartening reduction of what software freedom is. I hope that you eventually manage to think less shallowly about this.

Tell me, do you have any particular, material distinction you are making by making a choice between desktop protocols? The desktop protocol is a purely technical thing, and I have not heard a single peep out of you in regards to specifics.

To elaborate, in Xorg, it is a very monolithic beast. It is very convoluted in its purview and carries a lot of preset implementation of its various facets. It contains an entire networking stack for deciding how to communicate windows over a network.

It is significantly less flexible and modular than Wayland, because in Wayland basically everything of significance is decided by the compositor.

This, ironically to your point, actually gives you more choice and freedom in how things work (this is also why tiling window managers love wayland to death, it's pretty easy to just build upon the basic wlroots implementation!). So I have to ask you, frankly, what in the fuck do you think you're actually saying right now?

The issue, in this way, is that you only seem to care about software freedom in the sense of the abstract concept rather than the reality. You seem to think of software freedom in the sense of "I either build and install this package, or I build and install this one", with an all-consuming disregard for the technical aspects of freedom. Which is impractical, and arguably antithetical to the very process of trying to foster software freedom to begin with. As evident by literally everything to do with this situation. My lord.

Questa voce è stata modificata (3 mesi fa)
in reply to pastermil

yes, apparently the development of Xorg is more or less abandoned in favor of wayland

the Xlibre fork seems more active

in reply to pastermil

A really shitty one. (As in, completely removes Xwayland, and results in obvious regressions.)
Questa voce è stata modificata (3 mesi fa)

don't like this


in reply to cyrano

My US visa officer: what do you mean you did not have 'social' media accounts in 5 years? No, these weird sites don't count. Underground terrorist? Straight to gulag.
Questa voce è stata modificata (3 mesi fa)





Taft-Hartley Act (1947) On this day in 1947, the Taft-Hartley Act became U.S. law after a heavily bipartisan vote, greatly restricting the legal rights of organizing workers during an...


Taft-Hartley Act (1947)

Mon Jun 23, 1947


Image

Image: A massive 1947 union rally in Madison Square Garden. A large sign reads "MR PRESIDENT: VETO THE HARTLEY-TAFT SLAVE-LABOR BILL"


On this day in 1947, the Taft-Hartley Act became U.S. law after a heavily bipartisan vote, greatly restricting the legal rights of organizing workers during an unprecedented wave of strikes after World War II.

The Labor Management Relations Act of 1947, better known as the Taft-Hartley Act, was enacted despite the veto of President Harry S. Truman, with many Democrats defecting from the party line to support the union-busting measure.

The Act was introduced in the aftermath of a major, unprecedented wave of strikes in the aftermath of World War II, from 1945-1946. Strikes were strongly repressed during World War II to not hamper the war effect. When the wartime restrictions ended, millions of workers across the country went on strike.

The Taft-Hartley Act prohibits unions from engaging in "unfair labor practices." Among the practices prohibited by the act are jurisdictional strikes, wildcat strikes, solidarity or political strikes, secondary boycotts, secondary and mass picketing, closed shops, and monetary donations by unions to federal political campaigns. The Act also allowed states to pass right-to-work laws banning union shops.

A pamphlet supporting a third, progressive party, published in 1948, had this to say on the vote:

"Every scheme of the lobbyists to fleece the public became law in the 80th Congress. And every constructive proposal to benefit the common people gathered dust in committee pigeonholes. The bi-partisan bloc, the Republocratic cabal which ruled Congress and made a mockery of President Roosevelt's economic bill of rights, also wrecked the Roosevelt foreign policy. A new foreign policy was developed. This policy was still gilded with the good words of democracy. But its Holy Grail was oil...

The Democratic administration carries the ball for Wall Street's foreign policy. And the Republican party carries the ball for Wall Street's domestic policy. Of course the roles are sometimes interchangeable...

On occasion President Truman still likes to lay an occasional verbal wreath on the grave of the New Deal. But the hard facts of roll call votes show that Democrats are voting more and more like Republicans. If the Republican Taft-Hartley bill became law over the President's veto, it was because many of the Democrats allied themselves to the Republicans."


in reply to roig

It’s funny how people act as if there was such a time when “American Democracy” really was a great thing.

It’s always been elite coded and elite controlled.




What happened to the chapters? There are only two chapters.


in reply to almost1337

You should also stop using Tachiyomi they got a DCMA request and shut down a while back. Move to Mihon, a fork of Tachiyomi.

github.com/mihonapp/mihon





Berlin: proposal to remove 30 km/h zones because air quality improved, thanks to 30 km/h zones


The absurdity of the proposal is already in the title, and shows how motonormativity is spread all over the world.

Berlin has a very good public transit system, and a few 30 km/h zones cannot be that bad.

I would love to hear opinions from someone who lives there!

crossposted from: mastodon.uno/users/rivoluzione…


Non solo in Italia: a Berlino vogliono togliere le zone 30, perché l'aria è migliorata, grazie alle zone 30.

L'assurdità della proposta è tutta nel titolo, e dimostra quanto la #motonormatività sia diffusa. #Berlino, una città con #trasportoPubblico davvero eccellente, può concedersi tranquillamente zone dove la velocità non la fa da padrone.

#citta30 #zone30 @energia

rbb24.de/politik/beitrag/2025/…


Questa voce è stata modificata (3 mesi fa)
in reply to lgsp@feddit.it

Yep sounds absurd. As I unterstand it the problem is that you need a reason for 30 km/h zones. The reason was the air quality which is now better so there is no reason anymore.
Some zones may be kept because the streets are used by school kids.

I think this is still absurd and good 30 km/h zones with synced traffic lights can yield a good traffic flow.

in reply to Ekpu

The fact that they have improved air quality is not sufficient reason? Do they think air quality is like painting a house, that it only has to be done every couple of years?
Unknown parent

lemmy - Collegamento all'originale
Scrollone
I wonder why conservatives are so retarded, in each country.


Wildlife crossing


Repost, but an article came up about one in California .

I've seen a few rewilding campaigns in my community (Northeastern US) take shape over the last few years, and it makes me have a little hope. What with everything, all the time, I like when good news slips through.

in reply to Plum

Apparently they’re trialiang cheaper underground ones for insects amphibians and small mammals, and the results are pretty good.

in reply to Derpenheim

Looks pretty bad but a little less brutal than the swiss one