WACREN is pleased to announce an open call for piloting #RUMBU - a shared, community-governed #repository platform for Nigerian 🇳🇬 institutions. ‘RUMBU’ aims to bridge the infrastructure gap in Nigeria's research landscape, to foster collaboration, enhance #research visibility, and ensure compliance with global #openscience standards. See details of the call here => wacren.net/en/news/open-call-p…
The Latch Hook Covered Bridge project as of May 12, 2025
It’s a very good thing I purchased all my yarns ahead of time for this latch hook rug project.
And I shall explain.
First, a recap. Here’s the left panel of what will be a three-panel rug. And I’m currently working on the right panel, and here’s where I was the last time I blogged about the project. As I mentioned in the previous blog post, by ordering all my yarn for this project ahead of time, I’ve basically guaranteed I can finish this rug without dealing with Trumpflation or tariffs or supply chain issues. It also guarantees that I can work on this in my idle time. Whatever “idle time” actually means. Ha.
Well, I did get a burst of “idle time” going, and take a lookie at how far I got on this. So what you see here is not only the road and the curb … but you also see the right side of the fence. All the little pickets in the fence. Sweet.
And I have to mention this. Working on this rug is a calming technique for me. If I have to keep dealing with the craziness in the world today, at least I can insulate myself by working on this, so that every time I view it in progress, it’s another step towards peace and relaxation. Working on this rug keeps my blood pressure from hitting TILT.
And trust me, when we’re dealing with Trump and Musk and Kennedy Jr and all the other knuckleheads …
Peter Hellman: ”Ett parti med rötter i nazismen dikterar villkoren för svensk politik. Det är inte förvånande att hoten och trakasserierna ökar.” etc.se/ledarkolumn/vi-har-ett-…
Det hat som tidigare höll sig i skuggorna bär nu slips. Ett parti med rötter i nazismen dikterar villkoren för svensk politik. Det är inte förvånande att hoten och trakasserierna ökar.
Pris dans la toile De l'utopie d'Internet au capitalisme numérique - Sébastien Broca, Seuil, mai 2025
Sortie d'un livre que je n'ai pas encore lu mais que, connaissant son auteur, j'anticipe comme important pour le débat et pour notre propre auto-critique : "comment les idéaux des uns ont servi les interets des autres"
Par une enquête fouillée, le chercheur Sébastien Broca montre comment les contestations critiques ont pu paradoxalement ouvrir la voie aux géants de l'internet. Il est rejoint en deuxième partie par l'artiste Stéphanie Solinas.
@ThierryJoffredo hâte de le lire ! Mood du moment : l’utopie d’Internet (le web) c’est comme Cravirola, une communauté agricole ouverte géniale qui passe par des hauts et des bas puis finit par être parasitée par des tox-dealers qui n’en foutent pas une et vivent au crochet des autres tout en développant un business nocif. Comment rattraper ça ?
Wissenschaftler in den USA haben eine mögliche neue Ursache für das Insektensterben ausgemacht: Der CO2-Ausstoß der Menschheit führt dazu, dass Pflanzen weniger für Insekten wichtige Nährstoffe enthalten. nd-aktuell.de/artikel/1191146.…
@nd.Aktuell Da gabs doch auch im ZDF schon mal eine Sendung dazu. Da wurde mit Pflanzen im Zelt experientiert, wo der C02-Gehalt künstlich auf erwartete Werte in 100 Jahren oder so erhöht wurde... Die Pflanzen wuchsen zwar schneller, aber für die Tiere waren sie weniger wertvoll...
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
side note (and maybe I gave flu and it’s making me more stupid) but what are the arguments for having SSL on brochureware websites that don’t collect private information?
because we used to live in a world where ISPs, open wifi networks (cafes, etc) could intercept your HTTP responses and inject javascript/HTML into your browser to force you to see ads and/or attack you
Thanks everyone for your comments on this. I like this excerpt from doesmysiteneedhttps.com:
"this discussion isn't about PKI. It's the best system we've got for right now. Deal with it and secure your site. Use CAA records to restrict which CAs can issue certificates for your site, then cross your fingers and hope transparency and oversight works (it does, so far)".
Do you all feel that there is enough integrity in browser trusted root certificate stores to still provide robust defence against the content / malware injection threat?
Also - have these kinds of injection attacks ceased now, and is SSL the reason for this?
> Do you all feel that there is enough integrity in browser trusted root certificate stores to still provide robust defence against the content / malware injection threat?
It's the best we can do with what we've got to work with. All we can hope is that the bad actors get caught from the Certificate Transparency Logs and are swiftly removed from all root certificate stores as their punishment.
Thanks again to everyone who contributed to this thread. So this is what I'm hearing:
HTTPS still matters, even for static or non-interactive sites: • Mitigates content injection: Many ISPs and network operators have historically injected ads, tracking scripts, or even malware into unencrypted traffic. HTTPS prevents this by ensuring the integrity of the response between server and browser. • Defends against surveillance and manipulation: Examples of DNS hijacking, Gmail session spoofing, and targeted malware campaigns (e.g. FinFly), all made possible through unencrypted channels. HTTPS helps block these classes of attacks. • Removes network-level ambiguity: On public or hostile networks (e.g. hotel WiFi), HTTPS is the only realistic protection against on-path attackers modifying or observing content in transit. • Accessible and frictionless today: With Let’s Encrypt etc deployment is largely automated and cost-free for most use cases. • Normalizes secure transport: Widespread adoption means sensitive or at-risk traffic doesn’t stand out. Universal encryption helps everyone by minimizing soft targets.
On the other hand:
The CA model is a systemic weakness: Certificate Authorities remain a centralized point of failure. Trust is implicit and broad, and mechanisms like Certificate Transparency offer only partial mitigation. • Operational complexity remains an issue: Some tooling (e.g. Certbot) is complex and prescriptive, and certain practices (like root-required processes) can introduce risk or confusion for small deployments. • HTTPS doesn’t secure everything: It encrypts transport, but does not protect against compromised endpoints, malicious JavaScript, or bad site logic. • Trust shifts to browser vendors: Efforts like DNS-over-HTTPS, cert pinning, and HSTS move the locus of trust from networks to browsers — trading one set of risks for another.
Yes to basically all of this, but I would suggest that trust in browsers over networks is demonstrably better, where those browsers' source code is available. With networks there are as many chances for something to be wrong as there are networks, and each network's problems are only visible and addressable by a small group. For browsers, anyone who can see the source can evaluate it, giving a much wider opportunity to spot misconfiguration and error, and it only needs correction in one place for everyone to receive the benefit.
@charlvdwalt the content of the website doesn’t matter because the content is whatever an attacker wants it to be if you aren’t using SSL. Your brochureware is now malware.
@charlvdwalt SSL is super important and all, but that statement is awfully FUD-y. The odds of somebody actually doing that are vanishingly small, but you make it sound like their site can be replaced by anyone any time
regimes have used it as an attack vector, and so did several democracies too. ISPs have used it to inject ads. Encryption isn't only about privacy, it's critical to ensure that the contents of a message you received haven't been tampered with.
@gabrielesvelto @iagox86 @charlvdwalt The regimes most of us need to worry about all have their own CA or several they can get to do their bidding with some kind of "national security letter".
@iagox86 @charlvdwalt No, it was actually a really big issue which is why Google incentivized it. ISPs were injecting ads into random webpages, law enforcement and intelligence agencies made frequent use of it, and it was also a massive privacy risk. Almost every service provider has deep packet inspection and can/will monitor everything you do.
@iagox86 @charlvdwalt I remember a Dan Kaminsky talk about how residential ISPs were starting to inject ads into cleartext websites. This would have been maybe 2007 or so.
Imagine if the legal climate then was as it is today. SSL would be illegal. Felony disregard of business model and all (h/t @pluralistic).
@todb @iagox86 @charlvdwalt @pluralistic I remember phone interviewing with some company that was doing injections as part of "web acceleration". I did not follow up once i learned that aspect.
Also that was after working at AOL and learning their image compression was actually not bad... as long as you didn't dial all the settings down to their lowest values (as they did). So would have been sometime after 2004
- adds dependency on CA - requires one more thing to work, ie be kept updated, to request new certs regularly - locks out old devices that don't support the crypto-flavor-of-the-month - the above adds friction, which makes Cloudflare et al more attractive to not have to bother, leading to increased mono culture
Encryption by default has removed a whole category of not just attacks, but scummy business practices. A little inconvenience to administrators is not even worth talking about.
Your comment reads exactly like a politician arguing for stripping worker protections or safety regulations because they inconvenience employers.
It’s tone deaf, deliberately ignorant, and dismissive of people who get to not be taken advantage of easily due to these measures.
In practice I've had more problems with broken https cert setups blocking me from pages that I've tried to access that I've had with ISP-injected ads. But I don't live in the US where that is/was legal, so YMMV I suppose.
And the fact that Letsencrypt and Cloudflare are used by such a large percentages of websites is a huge problem, IMHO. We need fewer single-points-of-failure, not more.
@mikaeleiman @slotos I would argue you see less of the latter issue because enough sites use SSL that it's not worth the effort for the ISP to set up an advertisement injection. Prevention tends to reduce the chances of a problem occuring.
@nuintari @todb @iagox86 @charlvdwalt @pluralistic Frontier (formerly Verizon's west coast network) rewrote Google search results via DNS hijacking to add referral codes to Amazon, etc, and may or may not have added their own ads. Pre SSL, of course. I had a reproducible test case that ran via cron at home so we could see when they turned it off and on.
The irony that this page isn't HTTPS and I can't change it to HTTPS, and searches from the main website drop it down to HTTP as well isn't lost on me...
(I can only guess they have a different host for their older articles that doesn't support SSL).
@azonenberg @nuintari @todb @iagox86 @charlvdwalt @pluralistic another example I can think of is that as recently as the late 10s, there was still the issue of cell vendors inserting mobile subscribers’ MSISDNs (or similar tracking ref) using HTTP transproxies for all non-HTTPS traffic - I recall this with at least one of the big US networks, and Vodacom in ZA also did something like it. probably many others worldwide if you dig around
@azonenberg @nuintari @todb @iagox86 @charlvdwalt @pluralistic it was a very big thing on public WiFi hotspots. It would break a lot of websites cos the advertising code would just jam new HTML elements in, shitty JavaScript, conflicting versions with what the page authors used... It was a nightmare
Il Samsung Galaxy Z Flip FE potrebbe montare il chip Exynos 2400. Un benchmark svela dettagli sul SoC e la strategia per un pieghevole più accessibile.
The Romanian fascist candidate shared a post on his blog, where he addresses those who will not vote for him directly. He tells them that he will "deal with each one of them", individually, after he becomes president.
Amid the uncertainty, a range of people across the internet blasted the supposed plan, slamming it as "indefensible," "incredibly illegal," and "comically corrupt." Some critics pointed out that the reporting comes after the Trump Organization, the Saudi partner DarGlobal, and a company owned by the Qatari government last month reached a deal to build a luxury golf resort in Qatar.
Robert Kiyosaki, author of Rich Dad Poor Dad, has renewed his warning against fiat currency, urging Americans to move away from what he calls “fake money” and instead invest in Bitcoin (CRYPTO:BTC), gold, and silver.
“Welcome to the era of ‘hostage politics’, where Labour is apparently your only hope.”
“There is contempt here. Instead of changes to the tax system, and a commitment to thinking differently about an economic paradigm that has reached an undeniable dead end, Labour looks at the rising wave of populist politics and decides to tell voters that populism is the problem, not the world that created it.”
First it was the Conservatives and now Reform. The only thing the government has to offer is that it’s the least worst option, says Guardian columnist Nesrine Malik
[repost Legalna Aborcja] Nie mamy wątpliwości, że napis na tym transparencie to prawda. @abotakprzychodnia powstała właśnie po to by pomagać - bez względu na powód, bez oceniania - po to by każda osoba, która potrzebuje aborcji otrzymała wsparcie.
Powstała w tym miejscu, pod Sejmem, bo politycy i polityczki od lat udawali, że aborcji nie ma zakłamując rzeczywistość. Antyaborcyjne prawo jakie mamy w Polsce skonstruowane jest tak, by osoby, które aborcje robią zostawały z tym doświadczeniem same, wpędzane w poczucie wstydu, winy i strachu.
Ponad 130 osób dziennie robi aborcje tylko ze wsparciem #aborcjabezgranic, a 250-300 to liczba aborcji robionych w Polsce każdego dnia. 1 na 3 kobiety w Polsce ma doświadczenie aborcji. (CBOS, Doświadczenia aborcyjne Polek)
Prawo antyaborcyjne po wyborach z 2023 roku miało się zmienić, a jest coraz gorzej. Organizacje, które każdego dnia zapewniają dostęp do aborcji (wyręczając w tym państwo) nie otrzymują żadnego wsparcia od rządu. Stosunek osób u władzy do aborcji widać wyraźnie po tym co od dwóch miesięcy dzieje się pod @abotakprzychodnia - politycy i polityczki znów myślą, że jeśli odwrócą głowę to aborcja zniknie.
A aborcja jest. Nie wystarczy zamknąć oczu, by przestała być potrzebna, odwrócić głowy, by kobiety przestały ją robić. Aborcja jest, bo jest potrzebna kobietom, aby czuły się bezpieczne, aby mogły decydować o swoim życiu i o życiu swojej rodziny. Aborcja to doświadczenie wielu z nas, slogan wyborczy.
@abotakprzychodnia @aborcyjnydream dziękujemy, że jesteście! Trudniej nam jest pomoc Wam na miejscu, na Wiejskiej, ale wspieramy każdego dnia!
Im bardziej oni próbują zakazać aborcji, tym bardziej my wystawiamy ją do słońca. Dlatego idziemy o krok dalej i OTWIERAMY PIERWSZY W POLSCE STACJONARNY LOKAL! Zostań jego ambasadorką!
Myanmar's shadow government said an airstrike by the ruling junta had killed at least 17 students and injured 20 others at a school in an opposition-controlled area on Monday, despite a ceasefire being in place after a devastating earthquake.
The image shows a top-down view of a kitchen scene with various items arranged on a dark gray surface. In the center, there is a metal strainer with a white cloth placed over it, positioned on a glass bowl. A clear plastic bottle with a red ring near the neck is pouring a liquid onto the cloth. To the left, there is a halved lemon and a whole lemon, along with a small bowl of white granulated sugar. To the right, there are metal measuring spoons, a small bowl of white powder, and two corks. The background includes a white and black checkered cloth. The scene suggests a process involving straining a liquid, possibly related to making lemonade or another citrus-based beverage.
Provided by @altbot, generated privately and locally using Ovis2-8B
📢 The #UK government is being taken to the High Court by Palestinian #humanrights group Al-Haq over its role in exporting F-35 fighter jet components used by Israel in #gaza
The UK government is being taken to the High Court by Palestinian human rights group Al-Haq over its role in exporting F-35 fighter jet components used by "Israel" in Gaza.
From Studio Ghibli-inspired illustrations to doll “starter packs,” an explosion of AI-generated images in recent weeks has sparked a fresh wave of concern among artists.
O líder da IL está disponível para a governação se “for para mudar Portugal”, frisando que o partido vai exigir a liberalização do mercado ferroviário, baixar o IVA da construção e o IRS.
Dal 15 al 19 maggio il #MIM sarà presente al Salone del Libro di Torino! Nello spazio espositivo del MIM, presso il padiglione Oval, saranno realizzate attività informative per i docenti, gli studenti e le famiglie con un programma di oltre 40 eventi…
Dal 15 al 19 maggio il #MIM sarà presente al Salone del Libro di Torino!
Nello spazio espositivo del MIM, presso il padiglione Oval, saranno realizzate attività informative per i docenti, gli studenti e le famiglie con un programma di oltre 40 eventi…
irelephant [he/him]🍭
in reply to nuko147 • • •If i go to sleep early I just lie awake for ages.
Instead I'm just trying to get up early enough, the amount of sleep I get be damned.