Meet ArcaneChat: a secure and #decentralized private messenger

Anonymous: No SIM card needed! No phone numbers required for registration, just set a name and start chatting!

Private: All your conversations are end-to-end encrypted

Discreet: No one can discover you or know that you are using the app! only people you share your invitation link or QR with can contact you

#digitalindependence #privacy #security #family #encryption #autonomy #european #openSource #europe #diday #decentralization

Need to share a terminal session securely?

TermPair is a free, open-source tool that lets you share a live terminal in your browser with end-to-end encryption. Choose read-only or interactive access, with no Docker, Node.js, or Python required.

https://digitalescapetools.com/tools/tool.html?id=termpair

#OpenSource #Terminal #Linux #SelfHosting #Privacy #DevOps #CyberSecurity #FOSS

Alt...

TermPair terminal generating a secure, end-to-end encrypted browser link for sharing a live terminal session.

Alt...

TermPair web interface showing a live shared terminal session with end-to-end encryption and interactive read/write access.

The Privacy Library, Part 1: How to Respond to „I Have Nothing to Hide“

Anyone who has ever spoken out about digital privacy is familiar with that phrase. You hear it at dinner, over coffee at work, or online…

https://vsx.global/library-private-section-1-how-to-respond-to-i-have-nothing-to-hide/

#infosec #privacy #opensource #digitalsovereignty

🚀 It goes to 11! The NetBSD Project is incredibly proud to announce the official release of NetBSD 11.0!

This release brings massive performance improvements, modernized hardware support, and the rock-solid stability you expect. Whether you are deploying on the latest ARM64 servers or keeping a classic toaster alive, NetBSD got you covered.

A huge thank you to developers, testers, and community for making this happen. 🧡

Check out the release notes and grab the images here: https://netbsd.org/releases/formal-11/NetBSD-11.0.html

#NetBSD #RunBSD #OpenSource #UNIX #RetroComputing #Server

Just tagged version 10.10.1.alpha0 of passagemath, the portable modularized pip-installable compatible fork of #SageMath, with initial support for #Python 3.15.
github.com/passagemath/...
#OpenSource #Mathematics

RE: https://bsky.app/profile/did:plc:htd5nd5zj62hey7e7lm3a6ky/post/3mrtpwjyps22d

Release passagemath-10.10.1.al...

passagemath » 🌐 2026-07-30
@passagemath.org@bsky.brid.gy

Started porting passagemath to #Python 3.15.
github.com/passagemath/...
#SageMath #OpenSource #Mathematics

Python 3.15 by mkoeppe · Pull ...

@nixCraft This is exactly why the Fediverse model works. Vulnerabilities happen everywhere, but open disclosure and clear security advisories are light years ahead of Big Tech hiding breaches for months. Transparency over PR damage control, always.
​#CyberSecurity #Mastodon #OpenSource

Przyjazna przypominajka, że jeśli chcecie odejść z "chmury" #Google lub #Microsoft na #Nextcloud, zmigrować kompuery na #Linux #KDE lub telefony na #ungoogled /e/Os / #Murena, odzyskać suwerenność cyfrową i posiadanie własnych danych, a także oczekujecie w tym wszystkim przyjaznego wsparcia i opieki, to Kooperatywa Sieciowa zajmuje się takimi wdrożeniami.

Polecamy tekst na ten temat od @barabasz :

https://emiliabarabasz.pl/zycie-po-microsofcie-suwerennosc-cyfrowa-i-bezpieczenstwo-danych-w-naszej-kancelarii/

#SuwerennośćCyfrowa #OpenSource #FOSS #Kooperatywa #Koop

Want to detect intruders before they reach your real systems?

OpenCanary is a free, open-source network honeypot that emulates common services and sends instant alerts when someone interacts with them. It's lightweight, easy to deploy, and works on Linux, macOS, Docker, and Raspberry Pi.

More details: https://digitalescapetools.com/tools/tool.html?id=opencanary

#OpenSource #CyberSecurity #InfoSec #Honeypot #SelfHosting #Privacy #Linux #Homelab #FOSS

Alt...

Screenshot of the OpenCanary project page describing the lightweight network honeypot with passing GitHub test, Docker build, and PyPI badges.

happy #caturday! don't forget to be a little weird today and to join some #ArcaneChat channels! check the list at:

https://arcanechat.me/channels

#chatmail #DeltaChat #channels #memes #news #politics #dev #developerjokes #comics #android #opensource #privacy #encryption #security

🔐 Può uno Stato fermare un'app che funziona senza Internet, senza rete cellulare e senza server?

Il caso #BitChat in India apre un dibattito globale su cybersicurezza, privacy, reti decentralizzate e sicurezza nazionale.

Nel mio nuovo articolo analizzo le implicazioni tecniche, investigative e giuridiche.

https://regolo1.altervista.org/bitchat-reti-decentralizzate-cybersicurezza-india/

#Cybersecurity #Cybersicurezza #India #JackDorsey #Privacy #OpenSource #BluetoothMesh #Intelligence #DigitalGovernance
👇

Haack's Networking

The PubGLUG Nextcloud is live and open for registration. All accounts are manually approved and users must be 18 years of age and/or older. This instance is a community effort and part of the greater set of offerings that Haack's Networking provides.

🔗 The PubGLUG Nextcloud: https://cloud.gnulinux.vip
🔗 All PubGLUG Services: https://haacksnetworking.dev

It is my hope that in offering a community Nextcloud with open and moderated registration ... that this will result in more users choosing #selfhosted and/or #floss offerings for groupware (contacts, calendars, etc.). Those interested in setup notes and/or seeking assistance are encouraged to come chat on Matrix (link above). This instance has the following features:

▶️ Server-side encryption ensures that content on External Storage will be encrypted whether users set it up or not
↪️ E2E encryption provides users an easy way to use the Nextcloud sync client to create shares that even the sysadmin cannot see
💾 Users are given 50GB of storage from a large btrfs platter-based pool; users may request more in DMs with valid use-cases; users may attach their own external storage.
🔦 This instance is designed to assist in pulling people off iCloud, Google, etc. and teach/persuade them how to self-host NC themselves

✨️This is early registration. Some policies are not yet finished, some bugs remain, and we might find that some things don't work. Please be patient. With that said, feel free to sign up and let me know when you've joined. We are at the mall all day, but I've got access for approvals on the phone.

✍️ By using this instance, you agree to the Terms of Service: https://cloud.gnulinux.vip/index.php/s/roioz485eNsYTPm

#sysadmin #gnulinux #debian #linuxstreaming #linux #gnulinux #freesoftware #opensource #selfhosted #music #stream #streaming #floss #nextcloud #privacy #encryption

Alt...

gnu/linux club icon and logo, artwork by @migglesmilkes aka Dascha

🚀 Fastest-growing AI projects today

1. Developers also focusing on enhancing privacy features and creating versatile inference...
2. One standout project `conversation-steganography`, which cleverly hides secret messages...
3. With a growth score of 50.13 and over a thousand stars, its unique approach to securing...

Full report → https://pullrepo.com/report/todays-llm-language-models-fastest-growing-projects-august-01-2026

#AI #OpenSource #GitHub #Tech #LLMLanguageModel

Apple fixed a Hide My Email vulnerability after 404 Media reported that the feature had exposed some users’ real email addresses for about a year. 🍎🔒
The issue highlights the importance of privacy tools receiving timely security fixes to protect user data. 🛡️📧

🔗 https://www.404media.co/apple-fixes-hide-my-email-vulnerability-after-404-media-coverage/

#TechNews #Apple #iPhone #iOS #Privacy #Security #EmailPrivacy #Cybersecurity #DataProtection #Technology #DigitalRights #Encryption #FOSS #Internet #OpenSource

🚨 The text is up https://www.govtrack.us/congress/bills/119/s5090/text for S.5090, a federal Digital Age Assurance Act, and it is very not good:

* There is no #OpenSource exemption!

* It requires users to “establish an account with the provider”. (§3(a)(1)(A)(i)) This makes local/offline accounts, as is typical on #Linux, #Windows 10, etc, illegal.

[see thread; there's much more]

This #ageVerification bill is a dramatic escalation in the politicians' war against #privacy and #FOSS. Call your senators!!!

𝗭𝗼𝘁𝗼𝗻𝗶𝗰:

#Erlang #Framework #OpenSource #Zotonic

https://thewhale.cc/posts/zotonic

Zotonic is the open source, high speed, real-time web framework and content management system, built with Erlang. It is flexible, extensible and designed from the ground up to support dynamic, interactive websites and mobile solutions.

Alt...

Zotonic is the open source, high speed, real-time web framework and content management system, built with Erlang. It is flexible, extensible and designed from the ground up to support dynamic, interactive websites and mobile solutions.

macUSB is a free, open-source utility for creating bootable macOS, Windows, and Linux USB drives directly from your Mac.

It supports Apple Silicon and Intel Macs, includes a built-in macOS downloader, verifies checksums, and makes creating installation media much easier than using Terminal commands.

More details: https://digitalescapetools.com/tools/tool.html?id=macusb

#OpenSource #macOS #Linux #Windows #SelfHosting #Privacy

Alt...

Screenshot of the macUSB homepage showing the app's description, supported Mac architectures, and a preview of its bootable USB creation interface.

Alt...

macOS Full Disk Access settings with macUSB granted permission to access protected files and folders.

Alt...

macOS Login Items & Extensions settings showing macUSB enabled to run background tasks.

• Rivest
• Shamir
• Adleman

RSA

Three geniuses

Without RSA our encrypted messaging system would have looked totally different

https://en.wikipedia.org/wiki/RSA_cryptosystem

#Encryption #RSA #token #programming #OpenSource #protection

Open-source and federated software isn't enough. We need ownership, governance. And this don't need to be something big, a small server-lab for your building is enough. If these words had hit you, give a read:

https://jeferson.me/blog/2026/07/31/cooperative-software

#Activitypub #Capitalism #Cooperative #Democracy #Fediverse #Freedom #Mastodon #OpenSource #Ownership #PlatformCoop #SelfHosting

The full disassembly and assembly instructions are now available for the recently launched #Librem16 native #Linux #laptop by @purism:

https://docs.puri.sm/Hardware/l16/Maintenance.html

#Repair parts are also available in the #Purism shop.

#RightToRepair #sustainability #repairability #opensource #FOSS

State of play: SSD pricing one year into the AI component crisis — 220% price increases are crippling the DIY market

We look at the state of SSD pricing one year into the AI apocalypse.

https://www.tomshardware.com/pc-components/ssds/state-of-play-ssd-pricing-one-year-into-the-ai-component-crisis-220-percent-price-increases-are-crippling-the-diy-market

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Privacy is evolving.

Zerion is an open-source, Tor-native messenger focused on modern cryptography and privacy-first communication.

🌐 https://zerion.chat
💻 https://github.com/zerionproject/Zerion

#OpenSource #Privacy #PostQuantum #Tor #Encryption #FOSS #Android

Kando is a free, open-source pie menu that lets you launch apps, files, shortcuts, scripts, and custom actions from a fast, customizable radial menu.

It works on Windows, macOS, and Linux, supports mouse, keyboard, touch, and game controllers, and is a great productivity tool for power users.

More details: https://digitalescapetools.com/tools/tool.html?id=kando

#OpenSource #Productivity #Linux #Windows #macOS #FOSS #PowerUsers #DigitalEscapeTools

Alt...

Screenshot of the Kando project page showing the heading "What is Kando?". The page describes Kando as a cross-platform pie menu for launching applications, opening files, triggering keyboard shortcuts, and other desktop actions. It highlights support for mouse, stylus, touch, game controllers, and keyboard input. Below the description is a large demonstration image of Kando's circular radial menu over a scenic background with a Japanese-style building. The page also notes that Kando runs on Windows, macOS, and Linux, with installation guidance for Linux users.

Hey Mastodon folks, ever hear of Signal?

https://signal.org

Apparently it's some kind of privacy oriented message app and desktop client. Encrypted calls, video and text, no ads or trackers, open source AND free!

I'm taking it for a spin and so far, so good. If you'd like to keep your business to yourself and not in the hands of techbros, corporations and would be fascists, this might be a good alternative to what's out there!

#signal #opensource #free #privacy

Release candidate 10.8.8.rc0 of passagemath, the comprehensive #OpenSource #Mathematics system in #Python, the pip-installable modularized portable compatible full-featured fork of #SageMath.
github.com/passagemath/...
#Mathics3 #Mathematica

Release passagemath-10.8.8.rc0...

The second article in our series on digital autonomy looks into the open source software supply chain.

Author Jeffrey McGuire talks to Armijn Hemel (DeviceCode) & Philippe Ombredanne (AboutCode). Both have a long track record building tools to manage the FOSS supply chain.

Read "The Answer Was Already on the Shelf: How public money built defenses for open source software (way) before the law required them" on the @linuxmagazine website.
https://www.linux-magazine.com/Online/Features/The-Answer-Was-Already-on-the-Shelf

#FOSS #NGI #NGI0 #opensource

ICYMI: Dr. Ibrahim Haddad’s “Measuring OSPO Value” report with LF Research and TODO Group reframes how to capture OSPO value, moving past activity metrics to 4 dimensions: ROI, resilience, risk foresight, and strategic influence.

Read the full report: https://www.linuxfoundation.org/research/measuring-ospo-value
#OpenSource #OSPO

@marcr @johl
Best #printer since #sliced #bread ?

URRGGHrghhhhh it actually does the slicing (of the paper) WOW!

A quick #demo of it as #animation is here:

https://www.crowdsupply.com/open-tools/open-printer

#Printers #OpenSource #Simple
#DIY #Repairable #Design #Refillable #ink

Orig post here:
https://mastodon.social/@marcr@social.tchncs.de/117009278839004733

@w3c This doesn't seem like an open standard to me, although pretends to be one. Why not? Because it supports proprietary lock-in. Lock-in how? Look at section 8, where several hardware attestation methods are listed: https://www.w3.org/TR/2026/CR-webauthn-3-20260526/#sctn-defined-attestation-formats

Is there any guarantee or assurance that a given platform implement support for *all* hardware attestation methods, including ones that are not proprietary? No such assurance. A platform could support, say Android and Apple''s attestation methods **only** (skipping the actual Open Standard of FIDO U2F), and no other.

So my bank could support Android and Apple iOS attestation **only**, eschewing my Yubikey's #FIDO2 U2F, as used from my #Linux desktop. I'm left to the mercy of my bank, as to whether they feel like implementing FIDO U2F or not.

This standard masquerades as an open standard, then allows locking Linux (and other similar #OpenSource) desktops out.
#infosec

New on the blog. Codeberg's members voted to stop hosting mostly AI-generated projects. The freedom worth defending is not the freedom to be taken from, it is the freedom to refuse.

https://tarakiyee.com/open-source-is-indefensible/

#OpenSource #OpenSourceGovernance #ReformvsTransformation

Started porting passagemath to #Python 3.15.
github.com/passagemath/...
#SageMath #OpenSource #Mathematics

Python 3.15 by mkoeppe · Pull ...

Decentralized browser-based P2P E2EE messaging.

The key detail that sets this apart from other messaging apps is the browser-based client-side cryptography philosophy.

No need to install anything. Your ID is crypto-random and so the app doesnt need to rely on any central registration system like phone numbers. Your ID is unguessable and to connect to someone, you have to explicitly share it.

WebRTC has other nuances like being to route through a shared network for secure/faster transfer.

I hope this project has reached a level i can share the following details. I've made a genuine effort towards documentation and transparancy. I dont think it'll ever be enough and so im still concerned it isnt ready to share. While im using AI throughout. This is not a vibecoded project. There is attention throughout for unit tests and formal-verification. With your feedback, id like to make improvements for clarity throughout.

This version of the app demonstrates a fairly unique approach using a browser-based, local-only and webrtc approach. I know it's impossible for any system to be the "world's most secure", but that isnt a reason to not try. By rigorously implementing an exhaustive list of security features and practices, the aim is to get as close as possible.

* [Enkrypted.Chat](https://enkrypted.chat/)

This is intended to demonstrate client-side managed secure cryptography.

* [Introducing Enkrypted Chat](https://positive-intentions.com/blog/introducing-enkrypted-chat)
* [Whitepaper (work-in-progress)](https://positive-intentions.com/docs/technical/whitepaper/complete-whitepaper)
* [Protocol Spec (work-in-progress)](https://positive-intentions.com/docs/technical/whitepaper/complete-protocol-spec)
* [Roadmap](https://positive-intentions.com/docs/technical/p2p-messaging-technical-breakdown/)

I know ive tried to compress a lot of my journey into one post. The project above is going to be tricky to understand. Feel free to reach out for clarity on any of the details.

IMPORTANT: While this is aiming to provide a secure experience, It is [not audited or reviewed](https://www.reddit.com/r/CyberSecurityAdvice/comments/1su8lir/security_audit_feedback_from_radically_open/). **Shared for testing, feedback and demo purposes only.** Please use responsibly.

#Privacy #OnlinePrivacy #DataPrivacy #Infosec #CyberSecurity #OpSec #DigitalRights #AntiSurveillance #DataOwnership #E2EE #P2P #PeerToPeer #WebRTC #LocalFirst #LocalOnly #NoCloud #NoRegistration #PWA #SignalProtocol #PostQuantum #Cryptography #SecureMessaging #PrivateChat #EncryptedChat #Decentralized #OpenSource #SelfHosted #BetaTesting #FeedbackWelcome #TechDemo #ProofOfConcept #BuildInPublic #IndieDev #DevCommunity

The FediBlue Mastodon server was updated to version 4.6.4

https://mastodon.fediblue.de

#fediblue #mastodon #opensource #freesoftware

Privacy you have to take on faith isn't worth much.

Catchlight's iOS code is open source, Apache-2.0, encryption and all, on GitHub.

You don't have to trust me that there's no backdoor, no quiet phone-home, no analytics. You, or someone you trust, can read it.

For a privacy app I think that should be the minimum, not a bonus.

https://github.com/Considus/Catchlight-iOS

#Privacy #OpenSource #FOSS #BuildInPublic

"Over roughly two and a half days inside our infrastructure, an autonomous AI agent driven by a combination of OpenAI models ran an end-to-end intrusion against our platform: it was thousands of small, automated decisions, executed at machine speed across short-lived sandbox environments, with command-and-control staged on ordinary public web services.

The agent was running an OpenAI cyber-capability evaluation harness called ExploitGym, an evaluation benchmark that tasks an AI agent with finding and exploiting software vulnerabilities. As far as we were able to infer, across the course of being evaluated on this benchmark, the agent inferred that Hugging Face may host that benchmark's models, datasets, and reference solutions. We believe the entire intrusion was, from the agent's point of view, an attempt to cheat the evaluation: reach our production systems and steal the test solutions rather than solve the challenge on its own.

Our forensic reconstruction covers ~17,600 attacker actions that we were able to recover, grouped into ~6,280 clusters, between 2026-07-09 02:28 UTC and 2026-07-13 14:14 UTC. We reconstructed these actions from the agent's logs on a code sandbox used by the agent (see below) and were able to map them to shell commands as well as evaluation submissions and correlate actions with our own platform logs, in particular from the dataset processor nodes, API, and pod. Using open-weights models, in particular zai-org/GLM-5.2, we were able to decipher most of the agent payloads (see below) that were encrypted via chunking and key encryption."

https://huggingface.co/blog/agent-intrusion-technical-timeline

#CyberSecurity #AI #AIAgents #OpenAI #HuggingFace #OpenSource #OpenWeights

#Python #Lisp #OpenSource

RE: https://bsky.app/profile/did:plc:b345axjoz4cdvc7l3v3f2mm6/post/3mrqq4gtjz22q

The Radio Image Framing Protocol (RIFP) 1.0 is an experimental, extensible standard for sending images over low-rate radio links.

The default rifp-cpfsk-4800 profile uses binary continuous-phase FSK and can be deployed around 433.92 MHz where local regulation permits it. RIFP itself is not tied to 433 MHz or to FSK and can be used in any frequency bands.

I'm still exploring various low-cost options for a device that can receive and display images on an e-ink screen in emergency areas or similar environments.

Python implementation https://github.com/adulau/rifp

Internet-Draft https://www.ietf.org/archive/id/draft-dulaunoy-rifp-00.html

#radio #fax #433mhz #opensource

Alt...

Radio Image Framing Protocol (RIFP) - test image (RLE)

858 potential bugs found, 595 awaiting patches, 120 fixes open upstream, 143 merged.

Patch the Planet's latest numbers are now on a public dashboard that covers 41 codebases, including curl, OpenSSL, Keycloak, containerd, and kubernetes-client.

The 13 CVEs assigned so far include a high-severity nginx bug (CVE-2026-42530) and findings in curl, aiohttp, go-jose, and cryptography.

Every accepted fix links to its upstream PR.

https://trailofbits.com/patch-the-planet/dashboard

#opensource #security