In this post I try to explain the Double Ratchet Algorithm that drives the cryptography behind OMEMO and Signal. This is the second part of my series about the crypto behind OMEMO. https://blog.jabberhead.tk/2019/04/15/closer-look-at-the-double-ratchet/
IMPORTANT: Synapse will soon deprecate Postgres 9.4 and Python 2.7 support. Read all about it here https://matrix.org/blog/2019/04/08/synapse-deprecating-postgres-9-4-and-python-2-x/
My dream is to use only one foss and decentralized messenger for everything. With @matrix this seems possible now.
I'm currently chatting with people on:
and I'm using only FluffyChat. Not everything is working 100% fine and there is still a lot of work to do. That's why I'm still using Telegram on my phone too.
What I would like to have:
-WhatsApp bridge without the need of an extra device
-XMPP&Telegram direct chats
#NVDASR 2019.1.1rc1 is available for testing. 2019.1.1 addresses crashes in Google Chrome and Excel, plus an error when copying settings to the secure desktop. We welcome feedback before the official release: https://www.nvaccess.org/post/nvda-2019-1-1rc1-available-for-testing/
Here's a video of the @firstname.lastname@example.org 'Fake Lane Attack' causing the @Tesla@twitter.com to drive into opposing lane by placing stickers on the ground:
https://youtu.be/6QSsKy0I9LE?t=88 (starts at 1:28)
@codesections I've used Alpine with Xfce on a Raspberry Pi several times to display some things on a screen, I suppose that could count as a limited form of desktop use.
Nice look over the rim of the tea cup and definitely something the XMPP ecosystem needs.
To all blind Android users: The #Tusky Mastodon client has been updated to version 6.0 and brings a big step forward in usability with TalkBack. Toots in most timelines are now single entities, and they have actions for replying, boosting, accessing profiles, links and other tapable items within a toot. This means that going from toot to toot only takes one swipe now instead of 5 to sometimes more than 10 in previous versions. Happy tooting!
SCHEDULED MAINTENANCE: We'll be taking the http://matrix.org homeserver down for essential database maintenance between 12:00 and 12:30 UTC on 2019-04-01
Hey hey, a new Synapse release candidate for you 0.99.3rc1 - The highlight is a completely rewritten user directory, now much more performant. If you want to help us test check it out https://github.com/matrix-org/synapse/releases/tag/v0.99.3rc1
Firefox admits they will eventually be sending all of your DNS to Cloudflare. Cloudflare will monetize your internet browsing, no matter how much their PR people say they are.
If you want to disable that, go to "about:config", and set "network.trr.mode" to 5.
The values are: 0 - default off, 1 - race, 2 TRR first, 3 TRR only, 4 shadow, 5 off by choice
If not sure why detecting screen readers is bad for users, folks far closer to it and smarter than I have written plenty: http://adrianroselli.com/2014/03/on-screen-reader-detection.html
Hmm, announcing that you use assistive tech to every website doesn't seem like something you should be opted into via an update.
@HNguyenLy @Apple You can disable the setting under Accessibility > VoiceOver > Web but mine was enabled by default. I don't think apple mentions much of their new "hidden" features in a new iOS update so they all have to be discovered by users.
did you know that in Mastodon, every time you use the web client with new localStorage it requests a new OAuth token?
did you know that Mastodon mobile apps cannot be trusted to refresh the token?
did you know Pleroma has to emulate this security hole for app compatibility?
it’d be nice if we could actually fix this gaping security hole…