voxpelli

hannobraun, 22 hours ago to random

Hey folks! I want to talk a bit about my financial situation, and how that relates to my work on Fornjot. Thread incoming! (1/x)

zachleat, 2 days ago to 11ty

A blog post about what is likely the biggest @eleventy news in our project’s history — and we need your help!

https://www.zachleat.com/web/independent-sustainable-11ty/

#11ty

SaraSoueidan, 12 days ago to accessibility

Friends! It’s Monday. And this week is Global Accessibility Awareness Day (#GAAD)! You know what that means.

📢 I'm having a GAAD SALE

Starting today, you can get the Practical Accessibility course at 25% OFF 🎁 ⤵️

https://practical-accessibility.today

The sale ends on May 20th. ⏳

#a11y

hanno, 13 days ago to random

Today, 16 years ago, Debian published a security advisory announcing CVE-2008-0166, a severe bug in their OpenSSL package that effectively broke the random number generator and limited the key space to a few ten thousand keys. The vulnerability affected Debian+Ubuntu between 2006 and 2008. In 2007, an email signature system called DKIM was introduced. Is it possible that people configured DKIM in 2007, never changed their key, and are still vulnerable to CVE-2008-0166? https://16years.secvuln.info/

SaraSoueidan, 1 month ago to random

I haven't blogged regularly in a long while (in about 2 years, actually, since the course).

I'm now slowly getting into the flow of things, and I have a lot of ideas for topics to write about. Too many.

So I'm wondering: what kind of topics do you wish I'd write more about?

simme, 1 month ago to random

Looking for a passionate and skilled iOS dev? Look this way! Open to both contracts and employment. I've made iOS apps📱for close to a decade and still enjoy that a lot. Before that I made stuff for the web. 🕸️ I'm open to most things that let me work with great people and build fun stuff! ✨ Love learning new things!

Remote or hybrid-remote in the Gothenburg area.

Some stuff I've worked on lately: https://applaudstud.io
LinkedIn: https://www.linkedin.com/in/simon-ljungberg-5b6a4419/

tantek.com, 1 month ago to random

Last week I participated @W3.org (@w3c) #W3CAC (W3C Advisory Committee¹), #W3CAB (W3C Advisory Board² @ab), and #W3CBoard (Board of the W3C Corporation³) meetings in Hiroshima, Japan.

The AC (Advisory Committee) meeting was two days, followed by two days of AB and Board meetings which started with a half-day joint session (including the #w3CTAG), then separate meetings to focus on their own tasks & discussions.

The W3C Process⁴ describes the twice a year AC (Advisory Committee) Meetings⁵. In addition to members of the AC (one primary and one alternate per W3C Member Organization), the meetings are open to the AB (Advisory Board), the W3C Board, the W3C TAG (W3C Technical Architecture Group⁶ @tag), Working Group⁷ chairs, Chapter⁸ staff, and this time also a W3C Invited Expert designated observer⁹.

The AC currently meets in the Spring on its own and a shorter meeting in the Fall as part of the annual #W3CTPAC (W3C Technical Plenary and Advisory Committee¹⁰ meetings). The existence, dates, and location of the event are public¹¹, however the agenda, minutes, and registrants are generally Member-confidential. Since those individual links have their own access controls, I collected them on a publicly-viewable wiki page for easier discovery & navigation (if you work for a W3C Member Organization¹²):

• https://www.w3.org/wiki/AC/Meetings#2024_Spring

Most of the W3C meeting materials and discussions were also W3C Member-confidential, however many of the presentations are publicly viewable, and a few more may be shared publicly after the fact.

Myself and others at #W3C who believe in pushing for more openness and transparency in standards work, even (or especially) governance of said work, will be doing our best to work with others at W3C to continue shifting our work accordingly.

Aside: I started the #OpenAB project when I was first elected to the AB (Advisory Board) in 2013, documenting it on the publicly viewable W3C Wiki, and updated it with the help of others since: https://www.w3.org/wiki/AB#Open_AB

Like most conferences, I got as much out of side conversations at breaks (AKA hallway track¹³) and meals as I did from scheduled talks and panels.

For now, here are the events, slides, and videos which are publicly viewable that provide an interesting glimpse into some of the topics discussed:

• 📄 report: https://www.w3.org/reports/ai-web-impact/
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/engaging-the-members/
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/exploration/
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/OHCHR.pdf
• ▶️ video 5m42s: https://customer-0kix77mxh2zzzae0.cloudflarestream.com/9ad1e01b20d9b15d413f02c0ada3fe34/watch
• ▶️ video 4m16s: https://customer-0kix77mxh2zzzae0.cloudflarestream.com/1bfde2bf614d7535b8a775217a949974/watch
• 🗓 event: https://www.w3.org/events/meetings/13213a52-8159-4af8-b939-38c7880ba266/
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/lt-deepfake/
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/lt-accessing-llms-data/
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/pac-data-sovereignty/ (nice #IndieWeb mention)
• 🖼 slides: https://www.w3.org/2024/Talks/ac-slides/intro-content-credentials.pdf
• 🖼 slides: https://w3c.github.io/adapt/presentations/ac2024/ Warning: the proposed use of .well-known therein is IMO a bad mistake. Unnecessary reinvention (most handled by existing rel values¹⁴), more complex to author (requires sidefiles¹⁵), harder to publish (requires site admin root access), likely to become inaccurate (Ruby’s postulate¹⁶), and fragile (site admins frequently break .well-known for individual pages). A full critique likely requires its own blog post.
• 🗓 event: https://www.w3.org/events/meetings/df0b9dd8-2356-47ec-839d-eadc06da1ca1/

I’ll update this list with additional resources as they are made publicly viewable.

If you work for a W3C Member Organization you can view the full list of resources linked from the Member-confidential agenda: https://www.w3.org/2024/04/AC/ac-agenda.html#monday

References:

¹ https://w3.org/wiki/AC
² https://w3.org/wiki/AB
³ https://w3.org/wiki/Board
⁴ https://www.w3.org/Consortium/Process/
⁵ https://www.w3.org/2023/Process-20231103/#ACMeetings
⁶ https://w3.org/tag
⁷ https://www.w3.org/groups/wg/
⁸ https://chapters.w3.org/
⁹ https://www.w3.org/invited-experts/#ac-observer
¹⁰ https://www.w3.org/wiki/TPAC
¹¹ https://www.w3.org/events/ac/2024/ac-2024/
¹² https://www.w3.org/membership/list/
¹³ https://en.wiktionary.org/wiki/hallway_track
¹⁴ https://microformats.org/wiki/existing-rel-values
¹⁵ https://indieweb.org/sidefile-antipattern
¹⁶ https://intertwingly.net/slides/2004/devcon/68.html

thekenyeung, 1 month ago to fediverse

@Flipboard is deepening its ties to the fediverse, announcing it has onboarded 400 more creators (including me!) plus launched in-app fediverse notifications.

https://techcrunch.com/2024/04/11/flipboard-deepens-its-ties-to-the-open-source-social-web-aka-the-fediverse/

#fediverse #technology

webpro, 1 month ago to random

Do you manage package.json files? Here's something you might not know you actually need (hat tip to the prolific @voxpelli):

https://github.com/voxpelli/node-installed-check

eff, 1 month ago to random

Risk of socially engineered backdoors in critical software seems like an indictment of open-source projects, but it could happen anywhere, EFF’s Molly told @theintercept - in fact, this one was found only due to the project’s open nature.
https://theintercept.com/2024/04/03/linux-hack-xz-utils-backdoor/

w3cdevs, 1 month ago to random

📢 @openwebdocs published its "Impact and Transparency Report 2023":
▶️ https://openwebdocs.org/content/reports/2023/

Notably, OWD both contributed and reviewed the greatest number of pull requests to the @MDN content and browser compat data repos. It also completed the PWA doc rewrite and compat data updates. It joined @w3c WebDX #CommunityGroup (cc @tidoust and @patrickbrosset) to define baseline, and started Web security doc. research, etc., etc.

@dontcallmeDOM (W3C) is a member of OWD's governing committee.

luis_in_brief, 1 month ago to random

I feel like a spammer for showing up so many places in the past 24 hours and saying “yo, the thing you say no one has built: we’ve built it, it’s right here, we’re paying maintainers every month”.

Tidelift isn’t perfect but it is real and targeting exactly these kinds of problems.

https://social.coop/

berto, 1 month ago to random

This is big: one of the xz-utils / liblzma upstream maintainers added malicious code to the last couple of releases. This is the person who actually publishes and signs the tarballs. If you are using liblzma 5.6.0 or 5.6.1 make sure to update your packages asap and consider reinstalling the OS or recreating the container.

https://www.openwall.com/lists/oss-security/2024/03/29/4

raito, 1 month ago to NixOS French

#NixOS In the context of https://www.openwall.com/lists/oss-security/2024/03/29/4 -- the security community of nixpkgs looked into the vulnerability and preliminary analyses seems to indicate that NixOS is unaffected (stable doesn't have it, unstable has supposedly the affected version). Please take this initial report with a salt of grain.
A revert has been sent: https://github.com/NixOS/nixpkgs/pull/300028 -- consider pulling it if you can eat the mass rebuild.

blaine, 1 month ago to random

I'm not sure if it's new or if I'm just really bad at paying attention, but I just learned about it and I'm so excited about #fedify: https://unstable.fedify.dev/

I think systems that are shaped like fedify are one of the key things needed to really open experimentation and exploration of the possibilities that the fediverse affords.

viktor, 2 months ago to Redis

3 serious forks of #Redis to watch:

#KeyDB

Mutli-threaded fork of Redis based on Redis 6.
BSD 3 Clause license.
Owned by Snapchat.
https://github.com/Snapchat/KeyDB

#Redict

Recent fork by one person based on the last open source version of Redis 7.2.4.
On Codeberg.
LGPL 3.0 license.
https://codeberg.org/redict/redict

PlaceholderKV (searching for name)

Started by former Redis contributor(s) and AWS employees.
BSD 3 Clause license.
https://github.com/placeholderkv/placeholderkv

Boosts appreciated 🙏

#opensource #oss #foss #gpl

0xjessel, 2 months ago to random

as everyone is trying out fediverse, today is a good reminder that threads support rel=me link verification -- another open web standard we adopted last year.

this is useful right now because you can't see fediverse replies to your posts on threads yet. so if you use a mastodon alt account to reply to your threads posts, setting this up proves you are the owner of the mastodon and threads account.

see post below on how to set this up:

RE: https://www.threads.net/@0xjessel/post/Cvu7-42PVpC

baldur, 2 months ago to random

I’ll let you in on a secret: I love sporadically updated weblogs. I subscribe to over 1200 feeds and most of them are sporadic or even technically “inactive”. Months often pass between updates

It means that every post published was important to the writer

Back in the days of snail mail, letters that began with “It’s been a while since I last wrote to you” were the ones people cherished the most

You don’t need to post every day or even every week to have a blog that matters

jensimmons, 2 months ago (edited 2 months ago) to random

Are you excited for WebXR support in Apple Vision Pro? In Safari 17.4 we added a newtransient-pointer input mode, so you can create a WebXR experience that works with the interaction model of visionOS.

https://webkit.org/blog/15162/introducing-natural-input-for-webxr-in-apple-vision-pro/

SaraSoueidan, 2 months ago to random

✨ I'm excited to announce that I'm joining @cssdayconf again to give a talk about my favorite front-end topics: accessibility and CSS (and more 😉)

cssday.nl/2024#speakers 👀

June 6–7th inshallah, Amsterdam 🛶

simme, 2 months ago to random

Hey fam! 👋🏻

I'm looking for a new job. Open to both contracts and employment. I've made iOS apps📱for close to a decade and still enjoy that a lot. Before that I made stuff for the web. 🕸️ I'm open to most things that let me work with great people and build fun stuff! ✨ Love learning new things!

Remote or hybrid-remote in the Gothenburg area.

Some stuff I've worked on lately: https://applaudstud.io
LinkedIn: https://www.linkedin.com/in/simon-ljungberg-5b6a4419/
Unmaintained blog: https://www.iamsim.me

capyloon, 2 months ago to random

Looks like https://nlnet.nl/mobifree/ could be a good way for EU contributors to get some funding!