M86xKC @M86xKC@mastodon.technology

Interesting articles about how Cloudflare Workers mitigate Spectre attacks:

- https://blog.cloudflare.com/mitigating-spectre-and-other-security-threats-the-cloudflare-workers-security-model/
- https://blog.cloudflare.com/spectre-research-with-tu-graz/

This came up in the context of an HN thread on whether V8 isolates are a better unit of isolation than containers (https://news.ycombinator.com/item?id=31740885). My impression used to be that processes were the only reasonable isolation measure in the face of Spectre, but I feel like Cloudflare may be on to something.

We are excited to announce our continuous support for the Qubes operating system with a donation toward the project's continued development.

Read more here: https://mullvad.net/blog/2022/6/15/mullvad-is-now-continuously-donating-to-qubes-os/

This looks cool: #mozilla has released an add-on for #firefox that can do web page #translation *locally* instead of sending data to the cloud.

https://blog.mozilla.org/en/mozilla/local-translation-add-on-project-bergamot/

Based on Project Bergamot and implemented in WebAssembly

https://browser.mt/

🎉 gitty v0.7.0 is out 🎉

gitty is a smart little tool for git projects, that shows you relevant issues, pull requests, and changes at a quick glance - right on the command-line!

What's new?

- show tracking stats for branches

- prioritize remotes named 'upstream' over 'origin'

- many small fixes and improvements! 🐛

Full Changelog: https://github.com/muesli/gitty/releases/tag/v0.7.0

The first release is in review on Google Play. This will be a continuation of TrebleShot project under a different name and will be fully compatible with it. I already began working on a desktop version that will be released under GPLv3. It will use GTK4 with libadwaita. I know this should be cross platform but what I care about is uprotocol and libcoolsocket being available as libraries that other apps can build against.

"Metadata absolutely tells you everything about somebody’s life. If you have enough metadata, you don’t really need content" Stewart Baker, former NSA General Counsel

That's why Briar protects not only against Content surveillance, Content filtering, Takedown orders, Denial of service attacks but also Metadata surveillance.

Briar uses the Tor network to prevent eavesdroppers from learning which users are talking to each other. Each user’s contact list is encrypted and stored on her own device.

#QubesOS actually had an research project, #Qubes Air, to provide an unified framework and API for managing multiple instances of isolated computers of ALL types, not just Xen VMs - they can be containers, VPSes, or even a cluster of physical Raspberry Pi. Not sure how far the project went. But I'd love to build a Qubes cluster with many Raspberry Pi, the ultimate solution to CPU side-channel attacks. https://www.qubes-os.org/news/2018/01/22/qubes-air/

Oh this is helpful, an easy way to check which filter lists contain a given domain.

https://blocklist-tools.developerdan.com

https://github.com/blocklist-tools

We're hiring a Software Developer for our Anti-Censorship Team.

This developer will work to improve the user experience and process of finding alternate routes to the Tor network when global censorship events block access. FT & remote.

Please share!
https://www.torproject.org/about/jobs/software-developer-anticensorship/

One of the first soft skills every open source developer should learn is how to feel comfortable disappointing people.

Finally: an up-to-date TTS Engine for your #Android available at @fdroidorg

https://f-droid.org/packages/com.github.olga_yakovleva.rhvoice.android/

Currently supports: American English, Brazilian Portuguese, Esperanto, Georgian, Ukrainian, Kyrgyz, Russian and Tatar. Hopefully, more languages to come!

No idea why I didn't think of this before but I've solved any networking problems while installing Arch. Just tether from mobile

Additionally, the Arch Wiki is fully usable in Lynx and flipping between TTYs makes for a very fluid experience

This is the collection that feeds Firefox with new extensions. Keep an eye on it! https://addons.mozilla.org/en-US/android/collections/4757633/3204bb44a6ef44d39ee34917f28055/

I just learned that you can use the GNOME Disk utility to copy a ISO to a USB drive... That's really handy, although I was shocked the the article is from 2014 and I found it only now! https://fedoramagazine.org/how-to-copy-the-fedora-install-dvd-to-a-usb-drive/

Oh neat, Blokada provides a hosts file parsed from DuckDuckGo's Tracker Radar data set which you can use with Pi-hole/uBlock Origin/AdGuard/etc.

https://github.com/blokadaorg/blokadaorg.github.io/blob/master/blocklists/ddgtrackerradar/standard/hosts.txt

More: https://community.blokada.org/t/introducing-duckduckgo-tracker-radar-to-blokada/469

#Privacy