swiley @swiley@qoto.org

We *really* need to establish signing commits with a verified key as common practice in software development.

For some critical projects it should probably even be a strict requirement for collaboration 🤔

(for some it already is, but it's still the exception, not the rule)

The board voted unanimously to post the following statement on the FSF website: While our primary mission is freedom for software users, we want to be clear, the FSF board unanimously condemns misogyny, racism,and other bigotry as well as defamation, intimidation, and unfair attacks on free thought and speech.

one more time for the people in the back.

until end users have un-gated full control over their software, commit access = domination over end users.

3rd party dependencies = giving strangers domination over end users.

> user cannot replace the bulb
why don't we make all the carbon tax chimps go after people for shit like this.

why are there lamps with unreplacable bulbs this is the lowest hanging fruit god damn it aaaaa.

RT @braam_martijn

Made a list of GTK apps I've build for the PinePhone/Tab. blog.brixit.nl/apps/ Do I hold the record now for most linux phone apps?

The pine64.org domain belongs to all members of the PINE64 community. Got a PINE64 project going? Did you write a #PinePhone app or hacked new functionality into #PinebookPro? You're welcome to share your ideas on our blog. Reach out to a mod in the chats or forum.

#TIL China has a national standard, SM9, on Identity-Based Cryptography. IBC is a cool cryptosystem, there's a math connection between your public key and your name (username, domain name, etc), so everyone can use your name as the public key without any authorities or key servers, nevertheless its traditional form has a huge technical limitation - it requires a Key Generation Center to generate your private keys. "All your key are belong to us!"

There's an RFC draft to include it in TLS, and see how the backdoor is justified... Man-in-the-Middle attacks can be detected by forensic analysis, are you kidding me?

To be fair, the CA PKI system has the same backdoor - in both systems the authorities can pretend to be anyone, if you use the key strictly for signing, not encryption, arguably IBC is not worse than PKI.

But at least a CA leaves an auditable record if you enforce Certificate Transparency requirements. Meanwhile IBC KGC can do the same without leaving a trace. #cryptography

RT @gjdijkman

Using @gentoo on a @thepine64 pinephone is great so part two of the blog is now live stealthgun.tweakblogs.net/bl… because lets make it a usable phone, part one has had some improvements aswell. It also includes building Anbox! I will continue updating the blogs.

Clouds on #Mars

i'm not sure what the authorized job someone who is "cancelled" is allowed to work, so i'm just reinterpreting calling for someone to be cancelled to be identical to calling for their death.

If vaccinated old people can go to the pub this summer but their soon-to-be jobless kids can’t I’m convinced there’s going to be widespread riots. When furlough ends things are going to get tense.

Good ol' Biden, making the world hate us once again. Say what you will about Trump but it was nice having 1/3 the usual military deployed and engaging in peace talks with the enemies way better strategy than a policy of "we refuse to come to the negotiating table" and then bomb them instead.

Open network of #ESP32 Ground Stations to receive and operate #LoRa satellites

https://tinygs.com/

@tengumatingpress As of today, all Plan 9 and Inferno versions are under the MIT license. Whole bunch of interesting third-party development for it (notably treason, so you can play videos on it), kernel continues receiving work, and Inferno just had a 64-bit version released a few days ago. Cool stuff needless to say

ah yes. when they send celebrities to tell you don't ask questions just obey you know something is l e g i t.