More instances of sabotage are being found.

Simply excluding this backdoor does not seem to be sufficient. The malicious actor has contributed over 750 commits to xz, all of which could contain further backdoors.

Downgrading to the last version without any contributions from the malicious actor is not possible either, because of new functionalities and other security issues that were fixed in the meantime. Uninstalling xz is also not possible, because half my system depends on it.

I guess it will take some time to sort all of that out. I am very impressed by the fast and coordinated response to this incident by the FOSS community.

For my phone (almost 7 years old), a thin needle to scrape out all the dust is sufficient. Pressurized air also helps.

I am using Librera Reader. Make sure to install the F-Droid version (Librera FD) without Google Play services.

It is primarily an ebook reader that supports a variety of formats, but it is also an excellent PDF viewer. Significantly more feature-rich than any other FOSS PDF viewer for Android that I have found.

Here, the developer explained why development activity decreased:

While it is true that due to private reasons I had to take a bit of a pause of developing FlorisBoard and some time passed with no progress at all, implementing a completely new statistical NLP (Natural Language Processing) provider, or in laymans terms the long-awaited word prediction and spell-checking implementation, is also a huge task which takes a lot of time and trial-error and development time.

Android supports multiple payment providers. Some banks implement their own payment provider (e.g. Sparkasse in Germany), most just rely on Google Pay (now Google Wallet). Google Wallet has strict requirements for the Play Integrity API. Because of the modifications to Android that GrapheneOS is implementing, it is not eligible to receive the required integrity attestation and thus, Google Wallet is refusing to work. Google could at any point reconsider and certify/whitlelist GrapheneOS, which would allow Google Wallet to work using GrapheneOS. Likelihood close to 0.

Any banking app implementing their own payment provider is completely independent of this decision unless it also relies on Play Integrity API attestation (or a similar mechanism).

You are comparing GitLab (the application) with codeberg.org (the website operated by the codeberg e.V. non-profit). A fair comparison would be gitlab.com (the website operated by GitLab Inc.) with codeberg.org or GitLab (Community Edition or Enterprise Edition) with Forgejo (the application powering codeberg.org). They can be fully self-hosted and are both planning to implement AcivityPub-based federation.

The sidebar on his Patreon page says

you can actually donate any amount you want per month.

On this page, you can scroll down to the bottom, and there is an option “Or choose your own price” with a “Make custom pledge” button.

Well, Gnome 45 is in extra now. That was unusually fast!

With version 45, Gnome switches to ECMAScript modules (ESM). This standardizes javascript exports/imports, but it also means that every single extension will have to be adjusted to work with Gnome 45. I would not mind if Gnome 45 stayed in testing for a bit longer, so developers have time to adjust.

This is just a frontend, DeepL (or any other engine you use) still sees the text that you translate.

Windows is in the wrong, not Linux.

reg.exe add HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation /v RealTimeIsUniversal /t REG_DWORD /d 1 /f

I don’t have that README.zst file in Ubuntu 22.04 LTS, but the amd64-microcode version is 3.20191218.1ubuntu2. The package source code should be here (The server has not rebooted since the last package update).

$ grep "\(microcode\|model name\)" /proc/cpuinfo | head -2
model name      : AMD EPYC 7742 64-Core Processor
microcode       : 0x8301025

That does not sound plausible to me. Typically, your own computer would be behind a router that is either doing NAT or has a firewall (probably the former). Any incoming traffic would be directed to the router without any chance of reaching your computer. Whatever you saw was either outgoing traffic or incoming traffic in response to connections initiated by your own computer.

Connection attempts from the FBI? Could you specify that a bit further?

There exists ~/.cache/mozilla (also ~/.cache/thunderbird), so I assume the cache is already separated?

home assistant, freshrss (and a few related services such as rss-bridge), nitter and piped. I tried to host libregrammar, but ran out of memory.