@RosannaSibora @Gina @_elena It's not over yet! Try again @ FOSDEM 2028 :)

everyone is worrying about WordPress now, but check your Roundcube and other PHP webmail software! Peoples entire identity is anchored in mailboxes

@ptrc I heard kdenlive is one of the best right now. But the main disadvantage IMO is they do the rendering on the CPU so it's all super slow

@ptrc There used to be a pretty good editor named Olive, but sadly it died off :/

@justsoup @ska Rather, they value technology for what it can do to serve their own interests and not the best interest of people.
Any advancement just means new ways to profit...

RE: https://mastodon.gamedev.place/@eniko/117462813572878496

I still love tech with all my heart.
The anger and the hate that I have are directed towards humans, who have decided to turn tech into a user-hostile profit-making machine.

The anger we feel about "tech" is really about the discrepancy between what tech could be, inklings of which we have seen at the beginning of the Internet, and what it has become because of, for lack of a better word, capitalism.

So-called "tech bros" generally don't understand tech. They are not good at it. What they understand is exploitation, which they will hide behind flowery and tech-sounding buzzwords. What they do is exploit the labor of people who understand and love tech, in order to exploit everyone else.

I don't like it whenever people say, mostly jokingly, "computers were a mistake". No, computers were a good thing, and we can still do good with them. Do not let tech bros claim "computers". They are ours, not theirs.

@justsoup I hope with all the measures we put in Nura (CoC, etc) that we managed to at least have some Nazis stay away from the project.

It's honestly very nice to see all this diversity too, makes me appreciate the community :)

To me, Nura is not a Linux distribution, it isn't even anything to do with software. It is first and foremost a community of likeminded people who want to see a better future and build each other up for it. The distro just happens to be what ties it all together. That is why I care more about protecting the positive environment than anything technical. I love distro development, but there would be no distro without those who help make it happen.

Nura will not be a Nazi bar.

#NuraEco

The amazing photos that Katja de Waart took at our shared conference with @alpinelinux are now online! 📸

We have two group pictures and many additional photos that were taken (after asking everyone in the frame, our photo policy) during talks and discussion sessions.

https://nextcloud.postmarketos.org/s/t6jXwTAB7qfw9tm

(Video recordings are still being edited, will be published as well when ready.)

#postmarketOSandAlpineLinuxConference2026 #NuraEco #alpinelinux

Need to quickly check your exposure to the compromised CA ? bgp.tools now has a banner that will show if it detects the dire situation.

https://bgp.tools

The real danger is not your browser (who will upgrade quickly), but your VPN Clients, Servers (if you are using badly configured client certs) and software updates that are entirely depending on TLS

$ curl https://q3k.google.com --resolve 'q3k.google.com:443:135.181.235.221'

whoops

(CVE-2026-111943)

The immediate workaround is to yank these roots. That is what we ship on unstable-small and nixos-26.05-small right now.

{
security.pki.caCertificateBlacklist = [
# CVE-2026-111943
"Comodo AAA Services root"
# https://hg-edge.mozilla.org/projects/nss/rev/26d38a0c3fb81e7fb2acedbaf4c42dd21dce0517
"emSign ECC Root CA - G3"
# https://hg-edge.mozilla.org/projects/nss/rev/8159223c48ceeb1273a1915bca95a517294ab0e0
"emSign Root CA - C1"
"emSign ECC Root CA - C3"
];
}

We are shipping an immediate #security update for our CA store. We recommend updating once those evaluations complete and the channels have advanced.

The small channels (#NixOS only) are ongoing and will be finished within the hour. The big channels (#NixOS/#Nixpkgs) will unfortunately take a while longer.

https://hydra.nixos.org/eval/1830475 26.05-small
https://hydra.nixos.org/eval/1830473 unstable-small

#nixos #nixpkgs

why do I get the feeling that FUTO's goal is actually to *weaponize* the entire concept of supporting FOSS projects

like, most people are just going to see a thing that gives FOSS projects the money that is needed to keep said projects going and leave it at that

but then people look deeper and find that it's run by some filthy entities and instead of going after the entities, they go after the people who got the money

who are mostly like everyone else and didn't know

and now you have infighting tearing the project apart in more ways than one

which feels more like what FUTO is trying to accomplish

I sincerely hope that when I come back in a few hours everything isn't still *on fire*

The scandal doesn't end here: this appears to be a structural issue in open source software.

Codeberg, the forge that is "hosted in Europe" according to their homepage, uses a picture of Mount Shasta in Siskiyou County, California, United States

anything looks like magic if you don't understand it

Google Play review times keep getting longer and longer. I've been waiting three weeks for Google to release the latest version of #Conversations_im.

It's not a security-critical release, but what if we ever need to publish something urgently?

Luckily, with reproducible builds, you can now seamlessly switch to the F-Droid version. F-Droid will automatically pick the correct version, and you will just be asked to confirm that F-Droid is now responsible for maintaining updates.

#XMPP #Jabber

#XMPP client @dino is the best messenger! Give it a try! I’d love to see it work well with screen readers like #Orca, so blind and visually impaired people can use it too. #Accessibility #a11y

I designed an interposer PCB to reverse a few more pins of the Nintendo DSi SoC. Together with notes from reverse-engineering the IS-TWL-DEBUGGER, I managed to figure out:
* R03_DEBUG actually exists
* GPIO18x locations
* How the upper 16MB of RAM works (it's another chip select line, not an address line)
* JTAG! yes, this even works on retail chips

yep, it's possible (at least in theory) to attach a JTAG debugger to a retail console. the process is very involved, though (needs BGA rework *and* the use of a bootrom exploit to get code execution early enough to enable JTAG in one of the SCFG I/O registers)

rosaage did all of the BGA rework and actual physical testing (I just designed the interposer PCB), this wouldn't've happened without his help!