Mastodawn

1. #OptGreen - End of Windows 10 (Nicole)
2. #Python for KDE Applications (Nicolas)
3. Emulating User Actions with the Python-based Tool KdeGuiTest (Oreoluwa)

* When: Thu. 26 June. 19-21h30 (CEST)
* Where: Ecosia, Gerichtstrasse 23, #Berlin
* Link: https://www.meetup.com/pyladies-berlin/events/307804604/

@berlin_pyladies @kde

#PyLadiesBerlin #KDEEco #KDE #FOSS #FreeSoftware #OpenSource #Win10 #EndOf10

DS Agent Jun 14

Orca 🌻 | 🎀 | 🪁 | 🏴🏳️‍⚧️Feb 19

公民实验室审计了一下 #小红书的 app 。
发现他们在用明文 http 传递用户发布的内容。
意味着，你连接的 WiFi 热点管理员（比如星巴克）、中国电信、国安国保、入侵网络的攻击者、NSA 不但知道你在刷小红书，还知道你在看的是哪条帖子。
https://citizenlab.ca/2025/02/network-security-issues-in-rednote/
https://www.eff.org/deeplinks/2025/02/crimson-memo-analyzing-privacy-impact-xianghongshu-aka-red-note

5202年了啊，爷，还明文http，你小红书是真的牛逼

RE: https://mastodon.social/users/eff/statuses/114027750205976229

Network Security Issues in RedNote - The Citizen Lab

Our first network security analysis of the popular Chinese social media platform, RedNote, revealed numerous issues with the Android and iOS versions of the app. Most notably, we found that both the Android and iOS versions of RedNote fetch viewed images and videos without any encryption, which enables network eavesdroppers to learn exactly what content users are browsing. We also found a vulnerability in the Android version that enables network attackers to learn the contents of files on users’ devices. We disclosed the vulnerability issues to RedNote, and its vendors NEXTDATA, and MobTech, but did not receive a response from any party. This report underscores the importance of using well-supported encryption implementations, such as transport layer security (TLS). We recommend that users who are highly concerned about network surveillance from any party refrain from using RedNote until these security issues are resolved.

The Citizen Lab

DS Agent Jun 14

CDN🫐Jun 14

现在站在你面前的是：Matrix 大会员！

matrix.org 免费用户将受到一定限制（主要体现在媒体使用方面），付费用户则可享受无限制服务。

在今年夏季推出，首先向新用户开放（即首先向新注册的账户施加限制），随后向现有账户推广

订阅状态管理在 matrix.org 认证服务中管理，通过matrix协议中的实例通知功能（MSC4286）发送相关通知，与大部分客户端兼容

Matrix基金会个人会员将免费获得大会员（60$/年起）

如果盈利，所有利润将直接投入到Trust & Safety等matrix生态系统项目

为什么要有大会员？因为基金会约50%的支出与matrix.org homeserver相关（其中20%用于服务器基础设施，20%用于信任与安全方面的审核工作）。而其收入（捐款和会员费）仅能覆盖50%的支出，因此急需弥补资金缺口。

有限的服务总比没有好，文章如是说道

https://matrix.org/blog/2025/06/funding-homeserver-premium/

Introducing premium accounts to fund the matrix.org homeserver

Matrix, the open protocol for secure decentralised communications

DS Agent Jun 4

今天看了EFF的一篇文章，发现原来美国也有符合美国特色的“交管12123”🤣

DS Agent Jun 4

"Your identity belongs to you, and — just as with your physical identity card — your mobile driver’s license doesn’t need to tell anyone where you went or what you did there. "

“你的身份信息只属于你自己，就像实体卡一样，你的电子版驾照不应该将你的位置和行为分享给任何人。”

https://statescoop.com/no-phone-home-mobile-drivers-license-privacy/

Privacy advocates are worried about mobile driver’s licenses

Dozens of privacy advocates, along with top digital rights groups, have signed onto a campaign to remove the surveillance capabilities native to mobile driver’s license technology.

StateScoop

DS Agent Jun 4

🧃シメジシミュレーション Jun 3