Welcome to Friendica.Eskimo.Com

Home of Censorship Free Hosting

 Eskimo North Linux Shells, E-mail, Virtual Machines, Web Hosting.

E-mail, Web Hosting, Linux Shell Accounts terminal or full remote desktops.

Sign Up For A Free Trial Here

Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!

lemmy - Link to source

We are past the eviction deadline. Please don’t look away.

I know I’m new here, and I understand some may feel unsure about trusting a stranger. But I come to you with my heart open, because we truly have nowhere else to turn.

My name is Britnny, and I’m a transgender woman living in Gorom refugee settlement in South Sudan. I’m here with three other queer sisters women I now call family. Together, we’ve survived what most people couldn’t imagine: daily threats, hunger, violence, and complete abandonment. But now, even survival is slipping out of reach.

The South Sudanese government gave us an order: leave the camp and go to Juba or face arrest. That deadline has already passed. We’re living in terror, unsure when the next knock on the door might come, or when we’ll be dragged out, humiliated, or worse. We weren’t given any help no money, no transport, not even a safe place to go. And for people like us trans and queer women Juba is not safe. We fear being beaten, harassed or even killed in the streets simply for being who we are.

Right now, we’re holding on with nothing. No shelter, no food security, no peace of mind. We don’t need luxuries we just want a chance to be safe. A kind friend who was once in the same camp helped us set up a fundraiser to help us relocate safely and find shelter in Juba. But we need help to make it real. We’re not asking for pity,we’re asking for solidarity, for a hand to hold while we try to escape what feels like a death sentence.

Please, if you can share, donate, or even just boost this message, you could help save four lives. We just want a chance to live. A chance to breathe without fear. A chance to make it to tomorrow.

Thank you for reading. Thank you for not turning away.

With love and hope,
BritnnyX

gofund.me/891e4f34

lemmy - Link to source

Fediverse alternative for Tiktok?
Preferably with no required registration.

don't like this

in reply to darkguyman

piefed - Link to source

katy ✨

tiktok alternatives would suffer the same problem that shorts and loops do; they are content creator driven platforms so unless you incentivise content creators to move you just get reposts from other platforms or ai generated slop.

tavostator doesn't like this.

in reply to darkguyman

lemmy - Link to source

ℍ𝕖𝕝𝕚0𝕤

Loops, like everyone rightly said, but while this initially peaked my interest, at this point I'm a little skeptical about this project. Dev seems very keen to overhype and tease new features, but usually fails to deliver, like the webUI that was supposed to be days away last year but still doesn't exist. For a fedi platform, not being able to access it via a browser on a desktop is the most bizarre thing to me. I'd hate for fediverse tech to follow this mobile-only trend.

lemmy - Link to source

"Best," somewhat turnkey, user-friendly distro for a 2016 Intel MacBook Pro

Thinking nothing more wonky than mint/pop!/bazzite/elementary. I know there is never “one” perfect one but feeling like trying something new on this machine that’s at least somewhat push button. 
Since it no longer receive regular updates from Apple I just want to keep this machine available for use when needed.

I’m pretty comfortable on the above ones I mentioned. I’m not a coder/engineer so I tend to lean heavily on flatpaks and such, though if I have to go into the terminal occasionally I can usually poke my way around

This entry was edited (6 days ago)
in reply to LandedGentry

lemmy - Link to source

glitching

ubuntu because everything works.

in case you can't stand the snap business go fedora, add rpmfusion and poke around. if everything works, you're set.

two possible issues with resume from sleep. if your wifi won't come back, use the script from t2linux. if your laptop won't wake up expeditiously (takes a while), come back here and ping me and I'll dig up the the script.

stay away from mints and xfces and friends as you need wayland (so, Plasma or Gnome) for fractional scaling, gestures, seamless dock/undock, etc.

FAQ - t2linux wiki

wiki.t2linux.org
This entry was edited (5 days ago)

lemmy - Link to source

Gosuki: a privacy friendly, real time, multi-browser, extension-free bookmark manager

Hello r/linux !

I just released the first version of Gosuki, a multi-browser real time bookmark manager I have been writing on and off for the past few years. It aggregates your bookmarks in real time across all browsers and even external APIs such as Reddit and Github.

I was always annoyed by the existing bookmark management solutions and wanted a tool that just works without relying on browser extensions, self-hosted servers or cloud services. As a developer and Linux user I also find myself using multiple browsers simultaneously depending on the needs so I needed something that works with any browser and can handle multiple profiles per browser.

The few solutions that exist require manual management of bookmarks. Gosuki automatically catches any new bookmark in real time so no need to manually export and synchronize your bookmarks. It allows a tag based bookmarking experience even if the native browser does not support tags. You just hit ctrl+d and write your tags in the title.

Feature Highlights:


  • A single binary with no dependencies or browser extensions necessary. It just work right out of the box.
  • Use the universal ctrl+d shortcut to add bookmarks and call custom commands.
  • Tag with #hashtags even if your browser does not support it. You can even add tags in the Title. If you are used to organize your bookmarks in folders, they become tags
  • Real time tracking of bookmark changes
  • Builtin, local Web UI which also works without Javascript (w3m friendly)
  • suki cli command for a dmenu/rofi compatible output
  • Modular and extensible: Run custom scripts and actions per tags and folders when particular bookmarks are detected
  • Browser Agnostic: Detects which browsers you have installed and watch changes across all of them
  • Also handles multiple profiles per browser
  • Stores bookmarks in a portable sqlite database compatible with the Buku. You can use any program that was made for buku.
  • Can fetch your bookmarks from external APIs (Reddit and Github for now).
  • Easily extensible to handle any browser or API

It's open source with an AGPLv3 license, Checkout the README and website docs for more details.


GitHub - blob42/gosuki: no-extension multi-browser real time bookmark manager

no-extension multi-browser real time bookmark manager - blob42/gosuki
GitHub
This entry was edited (6 days ago)

lemmy - Link to source

Amazon engineers and marketers were asked on Monday to volunteer their time to the company’s warehouses to assist with grocery delivery

Amazon asks corporate workers to ‘volunteer’ help with grocery deliveries as Prime Day frenzy approaches

Exclusive: Amazon office workers in New York requested to donate time over to Fresh delivery process during firm’s busiest time
Guardian staff reporter (The Guardian)
This entry was edited (6 days ago)

lemmy - Link to source

Hundreds of Minnesota Healthcare Workers Are Getting Ready to Strike

Hundreds of Minnesota Healthcare Workers Are Getting Ready to Strike - Workday Magazine

On July 8 and 10, hundreds of healthcare workers in Minnesota could go out on strike. They are nurses and physician assistants who are members of the Minnesota Nurses Association (MNA) who are upset about what they say is unsafe staffing, as well as …
Isabela Escalona (Workday Magazine)

lemmy - Link to source

Live Under the Sky 1989 – Michael Brecker & Ellington Tribute (Full Concert, Tokyo Jazz Festival): posted by Jazz Video Guy

Live Under the Sky 1989 – Michael Brecker & Ellington Tribute (Full Concert, Tokyo Jazz Festival

Experience a landmark moment in jazz history.This rare, one-hour video captures highlights from the 1989 edition of the legendary Live Under the Sky festival...
YouTube

piefed - Link to source

What are the forum-like communities that are federated?
I mean, we got Kbin, Lemmy, PieFed, NodeBB, stuff like that. What else do they have on the fediverse that's like that?

don't like this

lemmy - Link to source

Dark dwarfs lurking at the center of our galaxy might hint at the nature of dark matter

Dark dwarfs lurking at the center of our galaxy might hint at the nature of dark matter

Celestial objects known as dark dwarfs may be hiding at the center of our galaxy and could offer key clues to uncover the nature of one of the most mysterious and fundamental phenomena in contemporary cosmology: dark matter.
SISSA Medialab (Phys.org)

lemmy - Link to source

Hardware Suggestions For A Beginner?

Hello, I've been saying it to myself for a year now, but I'm on summer break rn and I really need to do something with my life. Here's some of the software I plan to host. Goal is to not spend more than $150-200, I do have some gift cards though.

Absolutely Will Run:

Nextcloud & Immich - I want to replace Google and OneDrive

Might do in the near future:

Jellyfin - my mom and I usually just bootleg by using Kodi on our FireTV, so not a major need rn, but might be nice for future purposes.

piHole - better overall ad blocking, so I don't have to use nextDNS on all my devices, and maybe help my mom out.

VPN - I currently pay for Proton, and we use it on the FireTV, but it sucks cause it doesn't have killswitch. I have several devices and profiles that I use, so I was thinking maybe just an overall VPN might be nice

Seeding - I think it would be nice to give back to the community, since I torrent every now and then.

OS Plan:
I plan to use Proxmox as I have a little bit of experience using it, and others seem to like it a lot for managing multiple software.

I know I don't need to go full power mode rn, so I wanna stick with something low end that I could maybe upgrade in the future. Should I just buy a used laptop/PC, or get like an Optiplex or ThinkServer? I don't wanna rack up my parent's electric bill. I already got some hard drives a year ago, so but is using an external drive bad?

I know to use the Ethernet ports so my signal isn't shit, but I gotta work out the best spot I can put my server. I do know an okay amount of networking knowledge, and I'm a cyber student anyway so this is like a fun yet educational personal project for me.

When it comes to external access and security of these services, should I stick with Tailscale? Some people have concerns over the proprietary bits and are using headscale instead I guess.

Any guidance is much appreciated!

This entry was edited (1 week ago)
in reply to Novaling

lemmy - Link to source

dgdft

If you really want something upgradeable, used enterprise SFF is the way to go: discountelectronics.com/

However, the hardware market is in a weird spot right now; you’ll get far more bang for your buck with an Intel N150. You can find a 16GB DDR5 w/ 1 TB SSD around the $200 mark, and that’s what I’d roll with in your shoes, assuming you don’t mind living without a spinning disk. Your Jellyfin and Immich instances will run far smoother.


Used Computers, Laptops, Monitors

Discount Electronics sells Used Computers, Laptops and Monitors. We have been online and in Austin, Texas since 1997.
Discount Electronics
This entry was edited (6 days ago)

lemmy - Link to source

'Completely unexpected': Antarctic sea ice may be in terminal decline due to rising Southern Ocean salinity

'Completely unexpected': Antarctic sea ice may be in terminal decline due to rising Southern Ocean salinity

The ocean around Antarctica is rapidly getting saltier at the same time as sea ice is retreating at a record pace. Since 2015, the frozen continent has lost sea ice similar to the size of Greenland.
Alessandro Silvano (Phys.org)

lemmy - Link to source

How much spacing while stopped at a red light?
So this has been annoying me lately; drivers leaving excessive spacing when stopped for a red light. I get it, you don't want to be right on the next guys bumper, you should leave space to escape if the guy in front stalls or somebody tries to carjack you. But 2-3 car lengths? It really bugs me when they do it in a left turn lane causing a back up to the travel lane resulting in overall congestion. Or, if they're first at the light, they don't pull up far enough to reach the road sensors that trigger a light change. I haven't been able to isolate to a specific demographic, seems to be young, old, black, white, you name it. Maybe they're just stoned at the wheel. I'm tempted to roll down my window and ask 'wtf'? I'm in the Northeast US. Has anybody else witnessed this?

lemmy - Link to source

European News Outlets Continue Misrepresenting GrapheneOS Project
GrapheneOS is currently under a state sponsored attack attempting to misrepresent it as being for criminals, which we covered a bit at grapheneos.social/@GrapheneOS/…. These poorly researched, biased and inaccurate news stories have led to more harassment towards our community and team.

These attacks are taking a multi pronged approach including pushing existing fabricated stories and harassment towards our team. We'd appreciate if our community was more active than usual in debunking misinformation and attacks on our team. It's a very abnormal wave of attacks.


GrapheneOS (@GrapheneOS@grapheneos.social)

GrapheneOS Mastodon

GrapheneOS

2025-07-02 16:00:02

mastodon - Link to source

European authoritarians and their enablers in the media are misrepresenting GrapheneOS and even Pixel phones as if they're something for criminals. GrapheneOS is opposed to the mass surveillance police state these people want to impose on everyone.

xatakandroid.com/sociedad/cada…



"Cada vez que vemos un Google Pixel pensamos que puede ser un narcotraficante". Es el móvil perfecto...

Los Google Pixel son los máximos representantes de Android, con permiso de Samsung. Es por ello que convencen a los usuarios entusiastas del sistema...
Pepu Ricca (Xataka Android)

lemmy - Link to source

GrapheneOS AOSP 16 To Reach Stable Channel Within Few Days
GrapheneOS based on Android 16 has been through extensive public Alpha/Beta testing and should reach our Stable channel today. We'll continue fixing various upstream Android 16 regressions such as the back button issue impacting the stock Pixel OS we fixed in our latest release.

July Android Security Bulletin will likely be published today. We obtained early access to the signed partner preview and confirmed no additional patches were required, so we set the 2025-07-01 patch level last month after we backported Pixel 2025-06-05 driver/firmware patches.

Tomorrow will likely be the first monthly update of Android 16 with a new Android Open Source Project and Pixel stock OS release. We won't need to backport Pixel driver/firmware patches since we're on Android 16 and can simply incorporate and ship the monthly update within hours.

It can be extraordinarily difficult to backport driver/firmware patches due to dependencies on the new major release. We were only able to backport everything required for the 2025-06-05 security patch level because Android 15 QPR2 is much closer to Android 16 than Android 15.

After our Android 16 port was completed yesterday, we started fixing an Android tapjacking vulnerability disclosed last month:

taptrap.click/

We have a fix implemented and it will be included in our next release, likely with the monthly Android 16 update tomorrow.

This vulnerability was disclosed to Google in October 2024 and Android still hasn't fixed it. Security researchers should report vulnerabilities to GrapheneOS in addition to Google. This now joins our many other GrapheneOS exclusive fixes for serious Android vulnerabilities.

We've decided to make another release today with our fix for the Android tapjacking vulnerability because we need to fix a DisplayPort alternate mode regression specific to 8th generation Pixels which doesn't impact 9th generation Pixels.

TapTrap: Animation‑Driven Tapjacking on Android

taptrap.click

lemmy - Link to source

GrapheneOS version 2025070600 released
Tags:
  • 2025070600 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, emulator, generic, other targets)

Changes since the 2025070500 release:

  • backport fix for back button regression in Android 16 from Android 16 QPR1 Beta 2.1
  • Pixel 8, Pixel 8 Pro, Pixel 8a: restore using asymmetric MTE mode for userspace instead of the default asynchronous mode
  • add back switching to using the Natural display color mode by default
  • migrate more device support to adevtool and remove more unused configuration
  • improve per-device integration for USB-C port control and pogo pins control to make maintenance easier
  • adevtool: remove obsolete overlay handling implementation
  • remove Circle to Search feature declaration
  • enable Runtime Resource Overlay (RRO) enforcement

GrapheneOS releases

Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
GrapheneOS

lemmy - Link to source

GrapheneOS version 2025070500 released
Tags:
  • 2025070500 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, emulator, generic, other targets)

Changes since the 2025070301 release:

  • partially revert upstream changes in Android 16 breaking parts of the lockscreen layout including the date and media info
  • Pixel 8 Pro, Pixel 9 Pro, Pixel 9 Pro XL: add back feature declaration for Pixel Thermometer support lost in our Android 16 device port migration which prevented fresh installs of the app
  • Terminal (virtual machine management app): disable VM console feature since it isn't supported by the stable release of Android 16 outside of debug builds and trying to use it breaks installing the new images (the feature can be enabled once the core OS supports it in production builds)
  • update Pixel HAL compatibility matrix version numbers for Android 16
  • add lockscreen synchronization failsafe to protect against unknown vulnerabilities
  • improve code quality and add unit tests for our strict CVE-2024-50089 protection
  • kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.94
  • fix port of our 2-factor fingerprint authentication tests to Android 16

GrapheneOS releases

Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
GrapheneOS

lemmy - Link to source

GrapheneOS Based On AOSP 16 Now Available In Beta Channel For Testing
GrapheneOS based on Android 16 is now available in our Beta channel. There are 2 main known issues which will be fixed in the next release: lockscreen date and media info are not properly displayed due to an upstream AOSP bug and Pixel Thermometer doesn't appear in our App Store.

Last month, we provided the 2025-06-01 Android/Pixel security patch level early in the month before the stock OS release as preparation and then backported Android 16 firmware and kernel/userspace driver patches to provide the 2025-06-05 Android and then Pixel patch levels.

Our 2025062700 release raised the overall patch level to 2025-07-01 since we got early access to it with a verifiable signature and know we already provide the patches. We usually do an early Android Security Bulletin release before the stock OS but it was done for July in June.

Android Security Bulletins are backports of High/Critical severity patches to older Android. Starting this month, the initial release of Android 16 is one of those older releases. It's split into AOSP userspace patches (YYYY-MM-01) and driver/firmware/Linux patches (YYYY-MM-05)

YYYY-MM-05 patch level has a device-specific portion with more driver/firmware patches. For Pixels, it's the Pixel Update Bulletin. Most Pixel Update Bulletin patches aren't specific to Pixels but the Android Security Bulletin doesn't cover Samsung cellular, Broadcom Wi-Fi, etc.

Pixel Update Bulletin patches are what we had to backport to Android 15 QPR2:

source.android.com/docs/securi…

These were for firmware/drivers/services for Samsung cellular (including the Radio Interface Layer), Broadcom/Qualcomm Wi-Fi/Bluetooth, NVT touchscreen, fingerprint and TPU.

The only part truly specific to Pixels was the TPU patch. Bear that in mind when you look at those Pixel Update Bulletins. Other devices are meant to have their own bulletins covering the same things if they use those components and also further patches. It's fully up to OEMs.

Android Security Bulletin (ASB) is published on the first Monday of the month unless it's a US/Google holiday in which case it gets pushed ahead a day or two. The Android release for the month is a separate thing from the ASB backports, usually published the day after the ASB.

ASB is likely July 7 and the Android OS release is likely July 8. Our aim is to have Android 16 in our Stable channel prior to July 8 so we can ship the initial monthly update to Android 16 instead of needing to backport Pixel Update Bulletin patches which could be infeasible.

Each month, Android has a new stable OS release. It's a monthly, quarterly or yearly release. Quarterly and yearly releases move along the development branch about the same amount and have a similar amount of changes. Those have months of public Developer Previews / Betas first.

Pixels ship the latest monthly, quarterly and yearly release each month. Non-Pixels ship an initial yearly Android release and then only Android Security Bulletin backports until they ship the next yearly release. ASB backports are a subset of the AOSP patches, not all of them.

GrapheneOS needs to follow the stable releases in order to provide the full AOSP privacy/security patches. It also needs to keep up with them in order to ship Pixel driver/firmware patches which are made for the latest stable release, but we'd still need to do this on non-Pixels.

GrapheneOS (@GrapheneOS@grapheneos.social)

GrapheneOS Mastodon

lemmy - Link to source

GrapheneOS version 2025070301 released
Tags:
  • 2025070301 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, emulator, generic, other targets)

Changes since the 2025070300 release:

  • fix upstream Android 16 issue causing very large Binder transactions due to the size scaling based on the number of apps installed across all users including base OS apps
  • reduce virtual memory reserved for Binder buffers back to 1MiB now that we have a direct fix for the upstream issue causing more to be required and using a larger virtual memory reservation size appears to have a small chance of failing
  • revert our fix for a screenshot process crash that's now fixed upstream in Android 16

GrapheneOS releases

Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
GrapheneOS

lemmy - Link to source

GrapheneOS Foundation Discusses Non-Standard Per-app Permissions
Android regularly adds and splits permissions for new API levels. Legacy apps are handled by treating them as requesting the permission to provide a toggle for it. For example, Android 13 converted the existing toggle for disabling notifications for an app into a new POST_NOTIFICATIONS permission.

The Android Open Source Project has infrastructure for this since it's a regular part of the app sandbox and permission model improving. We add Network and Sensors permission toggles in GrapheneOS where Network is based on the existing low-level INTERNET permission and Sensors is entirely new.

Nearly all apps are unaware of these non-standard permissions just as they're unaware of new permissions added by Android before they get upgraded. Therefore, we enable them by default for compatibility but provide the ability for users to disable them at install time like the standard permissions.

For Network, apps request INTERNET, so we provide a toggle for rejecting that request in the initial app install dialog. If it's added in an upgrade, it's disabled by default. For Sensors, apps don't request it so we handle it similarly to how Android handled POST_NOTIFICATIONS for existing apps.

When Network is disabled, we act as if the network is down for compatibility. We won't run network-dependent jobs, various APIs will report it as down and we give errors matching it being down. When Sensors is disabled, sensors not covered by standard permissions give zeroed data and no events.

For usability, apps trying to use those sensors when Sensors is disabled will trigger a notification from the OS which can be disabled on a per-app basis. This informs users about what's going on so they'll know the app is either doing something sketchy or that it may actually require it.

F-Droid has an incorrect approach to installing apps which wrongly warns users about the standard Android POST_NOTIFICATIONS permission, our OTHER_SENSORS permission and previous Android permission additions/splits. They wrongly blamed GrapheneOS and didn't fix it:

archive.ph/MtB2J

They're now realizing that it happens with standard Android permissions added / split in new releases. Their approach to installing apps has been incorrect in multiple ways for many years and this is one of them. Their approach to listing which permissions are used by apps is also very incorrect.

F-Droid has a long history of denying issues including covering up serious security flaws. In some cases they eventually ship a fix but still deny it. It's a major factor in why F-Droid is not a safe or trustworthy source of apps due to major security issues not being acknowledged or addressed.

Multiple of the F-Droid developers wrongly blaming their app bug on GrapheneOS in that issue are Calyx contractors. They prioritize attacking GrapheneOS with inaccurate claims and fabricated stories about our team over fixing a bug in their app impacting both GrapheneOS and non-GrapheneOS users.

We've repeatedly brought up F-Droid not properly listing permissions or checking for them. Their understanding of Android's permission model is wrong. The way they list permissions misleads and misinforms users. It's one of many major F-Droid flaws they consistently don't acknowledge or fix.

Due to F-Droid deliberately causing friction and annoyances for GrapheneOS users, we'll be implementing a feature similar to our sandboxed Google Play compatibility layer for it. We'll can resolve deliberate issues created for GrapheneOS users ourselves as we did with Revolut.

GrapheneOS (@GrapheneOS@grapheneos.social)

GrapheneOS Mastodon

lemmy - Link to source

Trump to send 12 more tariff letters today, says White House, with more to follow this week
Donald Trump will send foreign leaders more letters notifying them of new tariffs in the days to come, said Karoline Leavitt.

“There will be additional letters in the coming days,” the White House press secretary said, in addition to the 12 he plans to send today and the two already made public, which were to South Korea and Japan’s leaders,

As for why Trump decided to start with the two Asian allies, Leavitt said:

It’s the president’s prerogative and those are the countries he chose.


Trump to send 12 more tariff letters today, says White House, with more to follow this week – US politics live

White House spokeswoman says US president will release letters on social media
Yohannes Lowe (The Guardian)

lemmy - Link to source

Exclusive: Proposal outlines large-scale 'Humanitarian Transit Areas' for Palestinians in Gaza
July 7 (Reuters) - A proposal seen by Reuters and bearing the name of a controversial U.S.-backed aid group described a plan to build large-scale camps called “Humanitarian Transit Areas” inside - and possibly outside - Gaza to house the Palestinian population, outlining a vision of "replacing Hamas' control over the population in Gaza."

The $2 billion plan, created sometime after February 11 and carrying the name of the U.S.-backed Gaza Humanitarian Foundation, or GHF, was submitted to the Trump administration, according to two sources, one of whom said it was recently discussed in the White House.

https://www.reuters.com/world/middle-east/us-backed-aid-group-proposed-human-transit-areas-palestinians-gaza-2025-07-07/

lemmy - Link to source

Turning every word of Ulysses into a clickable link. What topics would you recommend us to cover?
We’re turning every word of James Joyce’s Ulysses into a clickable link.
Some links reflect the current state of the world, some capture modern culture, others are just playfully weird or totally random. Together, they create a living portrait of the Web, word by word. See them here.
What topics do you think we should cover as we pick new links for this project?

Chapter I (2) - Open Ulysses - Medium

Fabled by the daughters of memory. And yet it was in some way if not as memory fabled it. A phrase, then, of impatience, thud of Blake’s wings of excess. I hear the ruin of all space, shattered glass…
Open Ulysses (Medium)
in reply to KoboldCoterie

lemmy - Link to source

BellaCohen

You're absolutely right: the links are not related to the words, that's the point: a total surprise.
20 links, we've just started this chapter (Chapter I (2)), therefore we're asking for your advice 😀

We've started another chapter earlier (Chapter I (1)), where everyone can add links, to any word. Feel free to add yours (or someone else's). Ulysses has 265,222 words. When we fill them all, it will become the world's largest portrait of the Web.

"Duplicate link" - we've doublechecked, haven't found any. Can you pinpoint it for us? I would be thankful 😀


Chapter I (2) - Open Ulysses - Medium

Fabled by the daughters of memory. And yet it was in some way if not as memory fabled it. A phrase, then, of impatience, thud of Blake’s wings of excess. I hear the ruin of all space, shattered glass…
Open Ulysses (Medium)

lemmy - Link to source

Canon PIXMA G550 Linux compatibility?
I'm in the process of getting a new printer and since I recently (December 2024) switched to Linux it would be nice if it would be Linux compatible. So far I've decided on the Canon PIXMA G550 printer but I can't find anything about it's compatibility so I figured I would just ask here in the hopes someone might have the same printer or knows someone who has the same printer and can tell me if this printer works with Linux. If all else fails I could still use the printer with my tablet or phone using Canons app but using it with my desktop would be much more comfortable.
Unknown parent

lemmy - Link to source

PseudoSpock

When you say proprietary drivers, I assume that means they are only available for x86_64 platform... leaving ARM64/aarch64 devices, like Pi's and such, out of luck?

Something I've experienced with similar printer drivers. Hence the ask.

lemmy - Link to source

Does anyone have any experience with sending raw HID commands on Linux? Trying to make a project work
I've currently been messing around trying to make the Switch 2 Pro Controller work on Linux using the raw HID commands from this website, to potentially build into a driver as a bit of a project to get better at C. However, seemingly nothing I use can send any commands properly, or at least in a way that makes the controller work. I've tried both echo, sending bytes to the /dev/hidraw6 device (that device at least on my system, may vary on others), as well as hidapitester (a wrapper for hidapi). I know the device works, as a WebUSB tool that uses the same commands makes the controller work on this system. Is anyone more familiar with this, and can point me in the right direction? I'm on Fedora Linux 42 if that info helps.

USB Initialization

These commands are send to the bulk endpoint (Unless specified HID) in order. Acks are laid out for your viewing pleasure.
docs.handheldlegend.com
in reply to heythatsprettygood

lemmy - Link to source

lemonuri

You might want to try this matrix channel:

matrix.to/#/#simracing:matrix.…

It's a channel for sim racing, but there are pretty knowledgeable people around that can get all sorts of obscure peripherals working on Linux.


Matrix - Decentralised and secure communication

You're invited to talk on Matrix. If you don't already have a client this link will help you pick one, and join the conversation. If you already have one, this link will help you join the conversation
matrix.to

lemmy - Link to source

‘No warning at all’: Texas flood survivors question safety planning and officials’ response

People who lost everything describe leaving homes and express anger at poor preparedness and officials who seemed to shirk responsibility

As Texas marshals a formidable response to the flash floods that have already killed dozens, questions are now being posed about warnings that were given on Thursday and early Friday about the severity of the approaching storm and the co-ordination between local officials and the National Weather Service.

New flood alerts were issued for Texas “hill country” on Sunday, prompting rescue services to suspend the search for missing people, including at least 11 from Camp Mystic, the summer camp on the banks of the Guadalupe River hard hit by Friday’s flash flood.

At an early evening press briefing, Kerr county authorities said they were suspending the search and evacuating first responders from the river valley. They confirmed that 68 had died there, including 28 children. Not all have been identified, with officials still examining the bodies of 18 adults and 10 children.


‘No warning at all’: Texas flood survivors question safety planning and officials’ response

Edward Helmore (The Guardian)

lemmy - Link to source

Black screen on wake from suspend on game mode

Hi all, I have tried everything, and now I am coming here for help. Hopefully someone can tell me what's happening here.
So, I have this older pc that I have converted into a steam console, first with Bazzite and now with Chimera OS. Both work very nicely, but the one issue that persisted on both distros is that when I put the pc to sleep from game mode (press xbox button>power>sleep) then wake it up, the screen is not receiving a signal, it not even a black screen, just no signal. I would have to force reboot it to be able to get in. Nothing works. I can't even get into a tty screen or do anything. It is connected to a samsung tv 65mu8000 via HDMI cable. I have UHD color input enabled for that input, just to give more details.

I have tried disabling the wake up animation like some folks suggested and that didn't do anything. I have tried disabling the display core like some other searches suggested by putting amdgpu.dc=0 in modprob.d in its own file. I have tried blocking the intel iGPU, even though this CPU doesn't have one. Nothing works.
It has an intel core i7 5930k and an AMD RX 6600.
I would appreciate any help or suggestions
Thank you

lemmy - Link to source

Black screen on wake from suspend on game mode

Hi all, I have tried everything, and now I am coming here for help. Hopefully someone can tell me what's happening here.
So, I have this older pc that I have converted into a steam console, first with Bazzite and now with Chimera OS. Both work very nicely, but the one issue that persisted on both distros is that when I put the pc to sleep from game mode (press xbox button>power>sleep) then wake it up, the screen is not receiving a signal, it not even a black screen, just no signal. I would have to force reboot it to be able to get in. Nothing works. I can't even get into a tty screen or do anything. It is connected to a samsung tv 65mu8000 via HDMI cable. I have UHD color input enabled for that input, just to give more details.

I have tried disabling the wake up animation like some folks suggested and that didn't do anything. I have tried disabling the display core like some other searches suggested by putting amdgpu.dc=0 in modprob.d in its own file. I have tried blocking the intel iGPU, even though this CPU doesn't have one. Nothing works.
It has an intel core i7 5930k and an AMD RX 6600.
I would appreciate any help or suggestions
Thank you

in reply to DonutsRMeh

lemmy - Link to source

afk_strats

I've had the similar problems with bazzite in desktop mode coming back from sleep or screen off, first with Nvidia, then solved by switching to an AMD graphics card, but now it happens there too. I have two workarounds.

1) Try Ctrl+Alt+F1and Ctrl+Alt+F3. You should be able to switch to console then back to desktop/login screen.

2) In KDE Plasma, there's a way to map wake screen to a keyboard button. That worked for me until I reinstalled the OS and never bothered.

I think this is a Plasma or SSDM issue but idk how to report it properly.

Any ideas would be appreciated

in reply to DonutsRMeh

lemmy - Link to source

Eugenia

You think it's the screen/hdmi at fault, but it might not be. I've had the problem with two laptops in the past (the bug was with all distros I tried), and in one case it was a BIOS that Linux didn't like, and the second one was the internal wifi that its linux driver was buggy. For the first laptop there was nothing to be done, so I disabled sleep completely in the bios, while for the second one, I disabled the wifi modules in the kernel's blacklist, and then used a usb wifi that I knew it worked better. Both cases were appearing as a dead screen, but it wasn't the screen/hdmi/gfx card to blame. In yet another case, with a thinkpad laptop, the wake up was working, but it would wake up 30 seconds later than anticipated. In that case, it was the fact that its thunderbolt was dead (hardware had gone bad), and only when I disabled it in the bios completely the laptop would wake up correctly and fast.

In all those cases, I had to look at the kernel logs to see what was the issue. There were traces of the problem of which hardware exactly was creating the problem. It might look like a screen/hdmi problem, but most of the times, it's not.

lemmy - Link to source

Omarchy - an opinionated Hyprland + Arch setup | built by DHH

David Heinemeier Hansson, the creator of Ruby on Rails, has tailored together his take on Hyprland combined with Arch. It looks quite neat and promising and looks like a nice entry point for those who don't want to configure hyprland themselves. DHH describes Omarchy as:

Turn a fresh Arch installation into a fully-configured, beautiful, and modern web development system based on Hyprland by running a single command. That's the one-line pitch for Omarchy (like it was for Omakub). No need to write bespoke configs for every essential tool just to get started or to be up on all the latest command-line tools. Omarchy is an opinionated take on what Linux can be at its best.


Omarchy comes in different themes, and by the looks of it this are hotswappable on the go by using the keybinds: Super + Ctrl + Shift + Space.

::: spoiler Theme Showcase
1
:::

Website: omarchy.org/
Documantation/Manual: manuals.omamix.org/2/the-omarc…
Github: github.com/basecamp/omarchy
YT video showcase: youtu.be/I5Mnni7cea8
Invidious video showcase: invidious.reallyaweso.me/watch…

GitHub - basecamp/omarchy: Opinionated Arch/Hyprland Setup

Opinionated Arch/Hyprland Setup. Contribute to basecamp/omarchy development by creating an account on GitHub.
GitHub

lemmy - Link to source

Omarchy - an opinionated Hyprland + Arch setup | built by DHH

David Heinemeier Hansson, the creator of Ruby on Rails, has tailored together his take on Hyprland combined with Arch. It looks quite neat and promising and looks like a nice entry point for those who don't want to configure hyprland themselves. DHH describes Omarchy as:

Turn a fresh Arch installation into a fully-configured, beautiful, and modern web development system based on Hyprland by running a single command. That's the one-line pitch for Omarchy (like it was for Omakub). No need to write bespoke configs for every essential tool just to get started or to be up on all the latest command-line tools. Omarchy is an opinionated take on what Linux can be at its best.


Omarchy comes in different themes, and by the looks of it this are hotswappable on the go by using the keybinds: Super + Ctrl + Shift + Space.

::: spoiler Theme Showcase
1

2

3

4

5

6
:::

GitHub - basecamp/omarchy: Opinionated Arch/Hyprland Setup

Opinionated Arch/Hyprland Setup. Contribute to basecamp/omarchy development by creating an account on GitHub.
GitHub
This entry was edited (1 week ago)
in reply to phantomwise

lemmy - Link to source

zmrl

Was just about to suggest it might be PDA. I have a bit of that and it is rather annoying. Some techniques ive used go combat this:

  • challenge yourself. Or someone else challenge you to do a thing. "I bet you can't do x."
  • give yourself a couple choices that lead to the same result and then just lick one. This one can be tough if im feeling indecisive.

Neither are perfect but they do help sometimes.

This entry was edited (1 week ago)
in reply to zmrl

lemmy - Link to source

phantomwise

Nice suggestions, thanks!

Challenges usually get the opposite reaction than demands for me, I can't even count all the stuff I've done because of it. Maybe self (not-)imposed challenges would work? I'll need to give it a try. Though challenges also have their problems, like picking the most stupid or pointless ideas because I was advised not to do it. I think there's a correlation between how stupid and pointless an idea is and how quickly my brain latches onto in 😅

lemmy - Link to source

If americans come to germany and act like german public Transport is the best, how frickin bad is american public Transport?

Genuine Question. Even if I look at hungarian Transport, and they to this day use trains from the UdSSR, they come more consistantly then the DB.

They are really Bad sometimes, with like 20 seperate prices: Theres the bayernwald ticket that only works in the alps, then theres the official ticket to the destination. Theres a special offer, but only in the very special APP. You can use a d-ticket, but look! Some random ass slum in the middle of the worlds ass dosent accept that, but it does the MVV zone Tickets. But then you need the MVV zone 11-M, a ticket to the beginning to the Nürnberg zones, and a ticket for the Nürnberg zones.

And yet this shit is better than americas rails? How?

This entry was edited (1 week ago)
in reply to Luffy

lemmy - Link to source

FireWire400

When I was in Australia, a bunch of people asked me about the public transport here and all of them were baffled when I told them how shit it was...

I have no idea why this perception that everything must be perfect in Germany or Europe came from but it is sooo outdated.

Speaking of tickets; in NSW you just tap your Opal card when entering/leaving train stations. It makes so much more sense and is so much easier.

This entry was edited (1 week ago)

lemmy - Link to source

What’s the ideal ripeness for plantain chips?

I’ve been making plantain chips for a bit, and I’m always dissatisfied with them. If my plantains are too ripe, the chips can’t crunch up. Not ripe enough and they lack the slight sweetness I love.

I decided to grab the greenest ones at the market to slowly ripen them at home, but even that’s a bit wonky, as they tend to ripen on top but not the bottom, which leaves me with something peculiar and delicious, but certainly not what I’m looking for.

So, how do you consistently get plantains in the Goldilocks zone?

lemmy - Link to source

"Une question de survie": l'acte héroïque de Fousseynou, qui a sauvé six personnes d'un incendie au 6e étage d'un immeuble à Paris
bfmtv.com/paris/paris-un-homme…

"Une question de survie": l'acte héroïque de Fousseynou, qui a sauvé six personnes d'un incendie au 6e...

Un homme a sauvé une famille de six personnes prise au piège dans un appartement en flammes dans le 18e arrondissement de Paris, ce vendredi 4 juillet.
TRC (BFMTV)
This entry was edited (1 week ago)

lemmy - Link to source

"Une question de survie": l'acte héroïque de Fousseynou, qui a sauvé six personnes d'un incendie au 6e étage d'un immeuble à Paris

cross-posted from: jlai.lu/post/22265616

bfmtv.com/paris/paris-un-homme…

"Une question de survie": l'acte héroïque de Fousseynou, qui a sauvé six personnes d'un incendie au 6e...

Un homme a sauvé une famille de six personnes prise au piège dans un appartement en flammes dans le 18e arrondissement de Paris, ce vendredi 4 juillet.
TRC (BFMTV)

lemmy - Link to source

Charles Rice, Nobel Prize winner in Medicine: ‘It’s a crime that a drug exists that could cure everyone yet not everybody has access to it’

Charles Rice, Nobel Prize winner in Medicine: ‘It’s a crime that a drug exists that could cure everyone yet not everybody has access to it’

The virologist, awarded for his part in the discovery of the hepatitis C virus, has helped save the lives of millions of people
Manuel Ansede (Ediciones EL PAÍS S.L.)

lemmy - Link to source

Vulnerability Report - June 2025

Introduction


This vulnerability report has been generated using data aggregated on
Vulnerability-Lookup,
with contributions from the platform’s community.

It highlights the most frequently mentioned vulnerability for June 2025, based on sightings collected from various sources, including MISP, Exploit-DB, Bluesky, Mastodon, GitHub Gists, The Shadowserver Foundation, Nuclei, and more. For further details, please visit this page.

The final section focuses on exploitations observed through The Shadowserver Foundation's honeypot network.

The Month at a Glance


The June 2025 report highlights a mix of long-standing and newly identified high-risk vulnerabilities. Notably, Citrix discloses a critical NetScaler ADC/Gateway flaw (CVE-2025-5777), dubbed “CitrixBleed 2,” which can expose session tokens and bypass multi-factor authentication — echoing last year’s infamous CitrixBleed. Other urgent issues include a PayU India WordPress plugin vulnerability (CVE-2025-31022) that allows full account takeover across thousands of sites, and a Python “tarfile” library bug (CVE-2025-4517) that enables attackers to write files outside intended directories. Among the most sighted vulnerabilities are multiple Microsoft Windows 10 and Google Chrome flaws, as well as several Citrix ADC bugs, many rated “High” or “Critical.” Common web weaknesses like cross-site scripting and SQL injection (CWE-79, CWE-89) remain widespread, highlighting the ongoing need for strong patching hygiene. Some older vulnerabilities — such as the 2015 D-Link DIR-645 flaw and known Confluence or Cisco RCE bugs — also continue to see active exploitation. Organizations should prioritize remediation of these critical and actively targeted vulnerabilities, while reinforcing application security against injection and XSS attacks.

Top 10 vulnerabilities of the Month

VulnerabilityVendorProductVLAI Severity
CVE-2025-33053MicrosoftWindows 10 Version 1809High
CVE-2025-49113RoundcubeWebmailHigh
CVE-2025-5777NetScalerADCCritical
CVE-2025-5419GoogleChromeHigh
CVE-2025-2783GoogleChromeHigh
CVE-2025-6019Red HatRed Hat Enterprise Linux 10Medium
CVE-2025-33073MicrosoftWindows 10 Version 1809High
CVE-2025-6543NetScalerADCCritical
CVE-2015-2051D-LinkDIR-645Critical
CVE-2017-18368ZyXELP660HN-T1ACritical

Evolution of sightings per week


Top 10 Weaknesses of the Month

CWENumber of vulnerabilities
CWE-79659
CWE-89411
CWE-74342
CWE-119190
CWE-862157
CWE-352157
CWE-120105
CWE-9494
CWE-2286
CWE-9874

Insights from Contributors


CitrixBleed 2
Citrix patched a critical vulnerability in its NetScaler ADC and NetScaler Gateway products that is already being compared to the infamous CitrixBleed flaw exploited by ransomware gangs and other cyber scum, although there haven't been any reports of active exploitation. Yet.

Security analyst Kevin Beaumont dubbed the vulnerability "CitrixBleed 2." As The Register's readers likely remember, that earlier flaw (CVE-2023-4966) allowed attackers to access a device's memory, find session tokens, and then use those to impersonate an authenticated user while bypassing multi-factor authentication — which is also possible with this new bug.

GCVE-1-2025-0002: Cl0p Ransomware Data Exfiltration Vulnerable to RCE Attacks
A newly identified security vulnerability in the Cl0p ransomware group’s data exfiltration utility has exposed a critical remote code execution (RCE) flaw that security researchers and rival threat actors could potentially exploit.

The vulnerability, designated as GCVE-1-2025-0002, was published on July 1, 2025, and carries a high severity rating of 8.9 on the CVSS:4.0 scale.

Stuxnet-related CVEs
- CVE-2010-2568 MS10-046 Windows
- CVE-2010-2729 MS10-061 Windows
- CVE-2008-4250 MS08-067 Windows
- CVE-2010-2772 Not Available Siemens SIMATIC WinCC

CVE-2025-31022: More details about PayU wordpress extension
"This can be abused by a malicious actor to perform action which normally should only be able to be executed by higher privileged users. These actions might allow the malicious actor to gain admin access to the website."

CVE-2025-4517: Additional information
RISK : Multiple vulnerabilities affect the standard TarFile library for CPython. Currently, there is no indication that the vulnerability is actively exploited, but because it is a zero-day with a substantial install base, attackers can exploit it at any moment. An attacker could exploit flaws to bypass safety checks when extracting compressed files, allowing them to write files outside intended directories, create malicious links, or tamper with system files even when protections are supposedly enabled. Successful exploitation could lead to unauthorised access, data corruption, or malware installation, especially if your systems or third-party tools handle untrusted file uploads or archives RECOMMENDED ACTION: Patch Source: ccb.be

Continuous Exploitation



Thank you


Thank you to all the contributors and our diverse sources!

If you want to contribute to the next report, you can create your account.

Feedback and Support


If you have suggestions, please feel free to open a ticket on our GitHub repository. Your feedback is invaluable to us!
github.com/vulnerability-looku…

GitHub - projectdiscovery/nuclei: Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you f

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the ...
GitHub
⇧