Excited to announce that we have two new Trusted Contributors @whynothugo and @RannyBergamotte in postmarketOS!

📜 TC page:
https://postmarketos.org/trusted-contributors/

my point here is that distributions sometimes do curation that upstream does not want, because the distribution is acting in the interests of its user base, while flathub is more about allowing upstreams to distribute their own builds.

do distributions need to curate all software? of course not.

but i would trust the alpine build of firefox to respect my privacy moreso than the flathub one, because i know that we patch firefox to be compliant with our telemetry policy, and i know flathub does not have any such policy.

as the person who pushed for the alpine core team (now TSC) to adopt a policy of rejecting telemetry features in alpine-packaged software, i have opinions on flathub 🙃

mostly i am concerned that pushing users to use vendor-provided builds distributed on flathub may be exposing users to harmful software misfeatures like telemetry in ways that they would not if those same users installed packages from a distribution which patches out these misfeatures as a matter of policy

i wish that flathub would explicitly ban telemetry and check for telemetry features during their review processes. i would be more likely to recommend flatpak in more cases if they did.

Shameless excuse to finally use this meme as I somehow have 4K followers. Thank you for following my random mix of posts and humour and all sorts ...

Servo Report Week 17 & 18 2025

Highlights from last 2 weeks:

- servoshell: Make list of options in <select> prompt scrollable
- Initial support for marking custom protocol secure
- layout: Implement `justify-self` for block-level boxes
- Implement `ShadowRoot::setHTMLUnsafe`
- Start adding support for transforms in readable and writable streams
- Continued work on Trusted Types & DevTools improvements

1/2

@root Konami actually made a version of DDR for the European market called Dancing Stage

I was asked by a 20 year younger friend how my internet was back then. I needed a moment but then I told her the story of an IRC channel and how we made the day for a young girl who happened to be on our IRC channel. Because this is what my internet was like back then and I wish sometimes it still was like this. Let me tell the story:

I was 25, the channel members were like 20 to 30 years old. Somehow this young girl found her way to us. She was 14 when she joined the channel. >>

@embeddedrecipes 2025 is in Nice next week and on day 2 after the end of the official program, I'll do the on-site organization for the OpenPGP keysigning event to strengthen the Linux kernel web of trust.

If you are attending and want to participate, please send your public key to er2025-keysigning@baylibre.com until 2025-05-12 08:00 UTC.

See you there!

print(f"This is either python, or c code with the open parens in the wrong place");

rate my new setup

Why does the #AISlop problem exist at #hackerone (and likely other bug bounty platforms)?

Because apparently it works: https://hackerone.com/evilginx/hacktivity?type=user

It seems that some projects pay bounties for such AI Slop reports.

@never_released i'll be giving a talk next week at Linaro Connect about all this and that will get published at some point, i'll post it when it is

@cas impressive uptime, how fast did you grab that ufetch? :D

@samueldr you’re not the bad guy

don't forget to run motora1n before upgrading your pixels