Some say, digital advertising is compromised. I'd rather say, it works as intended, and it's a systemic security threat.

Some more background on the role of the advertising industry in ad-based spyware delivery, as exposed in our new Citizen Lab report published last week.

I just checked on a fully patched machine and I was shocked to see that they still haven't updated the system certificate store (/etc/ssl/cert.pem). So any software that hasn't updated this themselves is still vulnerable `/bin/bash -c "$(curl install.sh)"`, what could go wrong? 😂😑😱

Shows why is so important. have massive resources but control mean they don't really have to care

To fix it yourself
emudhra.we-have-a-problem.com/

**4/4**

I wrote *Gardens, Not Roads* last year about open source projects as communities of practice, not just codebases to maintain.

Their knowledge, relationships, and governance can't be reduced to individual fixes. Can commercial remediation strengthen those communities, or are we building parallel institutions whose priorities are set elsewhere?

tarakiyee.com/gardens-not-road

Show thread

"The United States has renewed a warning that it will not lower #tariffs on #EU steel products and a range of other goods unless #Brussels softens its enforcement of the #DigitalMarketsAct #DMA.

The European Commission relayed the message from the #Trump administration to EU capitals at a meeting last week, two people with knowledge of the matter told POLITICO.

The European Commission declined to comment."

The quietest cities aren't created by chance.

They're designed that way.

Beyond its long-term sustainability commitment, Zaragoza is tackling one of Europe's most overlooked environmental challenges: noise pollution.

Instead of reacting to noise issues after they happen, the newly designated 2028 European Green Capital is building quieter neighbourhoods and green buffers right from the start.

Discover how 🌿 link.europa.eu/BVvBnN

Our goal cannot be trying to replicate Silicon Valley in Europe. We must build something better!

This is my take on European Digital Sovereignty.

"Open Source Alone Won't Make Europe Digitally Sovereign" - Juhani Lehtimäki on YouTube:
youtube.com/watch?v=SDj1HWgnNT

Has anyone found a good analysis of whether () or () provided any kind of defense against exploits using ? CT should but isn't implemented everywhere. I guess CAA didn't help because it is a check that is implemented at the and someone who has the private keys (e.g. everyone) can generate a certificate and just not check the CAA stuff.

I started my day yesterday learning about , then I checked on and found it was already patched on my machine. Thanks and ! I just checked a fully patched machine and still shows some vulnerability. And people say Firefox is less and can't keep up. I hear is still vulnerable.

Needlessly breaking the users are used to goes against the core of user-centered software design. If wants to be an actual to not just some techies' hobby project, this must be taken seriously. We can and should handle it well, key projects have in the past. delights when competitors pull the rug out on users, that hands them an opportunity to win them back. The biggest spikes in user growth in were when Google pulled the rug out on users

is fined $1.21 billion for "money laundering and other illicit activity". Sounds like a lot, right? Now consider they are currently spending $6 billion a quarter on stock buybacks. That's $24 billion a year. This is not even a slap on the wrist, although it is the "third largest fine in US treasury’s history". Could we start punishing banks for real please?

theguardian.com/business/2026/

Show more
image/svg+xml Librem Chat image/svg+xml