soc.octade.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
two new Linux channels for you! now available in #ArcaneChat, #DeltaChat and other #chatmail clients!
basically encrypted email newsletters, how cool is that???
Channels name:
It's FOSS by @itsfoss
nixCraft by @nixCraft
You can discover the channels invitation link here:
https://arcanechat.me/channels
(NOTE: the channels are generated from the official RSS feeds)
#email #encryption #rss #OpenSource #linux #decentralization
Haack's Networking 
A small informal review of the Conservancy's "Recommendations when Using AI"
📚️ sfconservancy.org/llm-gen-ai/llm-backed-generative-ai-recommendations.html
✍️ I think this is a very reasonable approach to LLM-gen-AI (hereafter AI) and floss space. Despite the fear mongering, AI is simply a tool. As with any statistical software, the human has to be the final arbiter of the content - not the tool itself. The free form input and output increases the concern over confirmation bias but it does not negate the value of the tool if used properly.
💡The main goal - imho - and one which we see this piece calling for in #12 ... is the rapid and immediate forking/development of floss-only AI tooling. Some do already exist, but they are crude in comparison. As with any software, the four software freedoms are paramount for ensuring the safety, equity, and accessibility of the tooling. This is essential and I've already started investing so as to be able to self-host my own generative AI.
🔨 In short, if these two criteria are met - namely, the human is the final arbiter of the content and the underlying models/tooling are floss, then I think arguments against AI-usage crumble. Sure, concerns over reliance on proprietary AI, governmental and/or big money influence, those all matter ... and floss and the four freedoms protect us from these valid concerns. AI is just the latest software - it's not special.
⚡️ This set of recommendations is game-changing. I think the next task for the Conservancy to consider is the legal / copyright side of the matter. A member of our small group brought this up and I share that same concern. As more litigation and legal precedent emerges, it will be interesting to see how this guidance evolves. In particular, I am referring to the US-side of legality re: https://www.copyright.gov/ai/ - I think the next wisest task for the Conservancy to take on is licensing + AI.
Final Grade: A+
This piece reaffirms the Conservancy firmly as a leader in FLOSS spaces. Massive thanks.
@jimsalter @bkuhn @conservancy
#self-hosted #freesoftware #opensource #floss #linux #gnulinux
Now that I've dug my hands deep into the Mastodon core, it looks like it's definitely possible to get the original home instance counts for federated posts, not just your own server's local tally.
For boosts and favourites, recent versions of Mastodon already fetch the origin's reported totals when retrieving a post and store them as "untrusted counts" (untrusted because the remote server self-reports them). So a remote post carries the home server's actual numbers.
Replies are trickier, as they only federate to subscribed servers, so the local count tends to lag. However, you can fetch the full reply tree from the origin on demand.
I'm basing our algorithmic home feed exactly on that: boosts and favourites from the origin counts, and comments from a backfilled reply tree.
Add opt-in ranked home timeline (experimental)
https://github.com/mementomori-social/mastodon/pull/4
The numbers in question have been requested for ages:
Boosts and favourites counts
https://github.com/mastodon/mastodon/discussions/22627
Show the number of reshares, likes, and comments directly in the timeline
https://github.com/mastodon/mastodon/issues/8280
𝗟𝗲𝘀𝘀𝗽𝗮𝘀𝘀, 𝘀𝘁𝗮𝘁𝗲𝗹𝗲𝘀𝘀 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱 𝗺𝗮𝗻𝗮𝗴𝗲𝗿:
#Password #Manager #OpenSource
https://thewhale.cc/posts/lesspass-stateless-password-manager
Storing password in a data base is not safe. LessPass computes a unique password using a site, login and a master password. Use LessPass in your browser, with a browser extension, on your mobile, on your server or in your terminal via a CLI client.
Check out my new collection:
Privacy Focused & Open Source Software
https://mastodon.social/collections/116783152645894152
#Foss #privacy #Collection #mastodon #tech #technology #App #Software #Opensource #fediverse
Open Video Downloader is a free and open-source desktop app for downloading videos, audio, subtitles, playlists, and metadata from hundreds of websites.
Built on top of yt-dlp, it offers a simple graphical interface , no command line required. Available for Windows, macOS, and Linux under the AGPL-3.0 license.
More details: https://digitalescapetools.com/tools/tool.html?id=open-video-downloader
#OpenSource #Privacy #Linux #Windows #macOS #ytdlp #VideoTools
🍵
boostedGentleOS: A Hobby Operating System for Vintage PCs
Relive the nostalgia or discover for the first time the joy of a vintage computing using GentleOS for 16-bit and 32-bit Personal Computers (PCs).
https://www.adamsdesk.com/posts/gentleos-vintage-pc-operating-system/
Open Soure braucht DEINE Hilfe - Petition für Open Source im Ehrenamt
https://www.openpetition.de/petition/online/anerkennung-von-open-source-arbeit-als-ehrenamt-in-deutschland
Ohne Open-Sourc-Software funktioniert unsere digitale Welt nicht mehr, doch die Entwickler tun dies oft in ihrer Freizeit als Ehrenamt. Eine Anerkennung dafür gibt es bisher leider nicht.
Mehr Infos dazu: https://youtu.be/oeigSqbvBOQ
Dringende Stimmen werden noch benötigt! Teilt den Link für mehr Wertschätzung von Open-Source-Entwicklern
#linuxguides #petition #opensource #ehrenamt
New York & California now require 3D printers to "block" gun files.
Problem: a printer can't tell a gun part from a pipe fitting.
Open-source firmware can't be locked down either.
Why this law can't work 👇
https://geekrealmhub.com/3d-printer-drm-laws-technically-impossible/
Hello Fediverse!
This is the very first post on this friendly new instance for everyone who likes, uses, and enjoys talking about free and open source software, especially Linux, BSD, and illumos operating systems.
#fediblue #darkblueproject #mastodon #opensource #freesoftware #fediverse
🍵
boostedAre you a #Zig coder and #Vim user?
I've been trying to steer clear from LSPs when developing Zig and wanting to use ctags instead. But there are two issues with this:
1) ctags doesn't natively support Zig symbols; and
2) I miss being able to go-to-definition for Zig builtin functions and the std lib
https://codeberg.org/hgrsd/ztags is a simple tool (in bash) that solves this.
It bundles a Zig ctags grammar and automatically fetches the Zig source, generates tags for it, and then appends it to your project's tags so you can navigate freely between your project's symbols and Zig's stdlib code.
Hope this might be useful for some other Zig devs too. Please boost if you'd like, so that they might see it :)
Shotcut is a free and open-source video editor for Windows, Linux, and macOS.
It offers timeline editing, filters, transitions, audio tools, hardware encoding, and support for hundreds of formats via FFmpeg.
A privacy-friendly alternative to Premiere Pro, Filmora, and CapCut, no subscriptions, no lock-in, and no watermarks.
More details: https://digitalescapetools.com/tools/tool.html?id=shotcut
#OpenSource #VideoEditing #Privacy #Linux #Windows #macOS #FOSS
boostedSecurity Advisory: CVE-2025-60471 - Use-After-Free in GPAC MP4Box PID Reconfiguration
Processing a crafted MPEG-2 TS file with MP4Box `-info` can trigger a heap use-after-free in `gf_filter_pid_reconfigure_task_discard()`, causing a crash and potential code execution.
Summary:
The `gf_filter_pid_reconfigure_task_discard()` function in `filter_core/filter_pid.c` can access a freed `pid_inst` structure during PID reconfiguration task disposal. When MP4Box processes a specially crafted MPEG-2 Transport Stream file containing broken PMT descriptors, missing packet sync markers, unsupported stream types, and invalid packet data, a PID instance can be freed by `gf_filter_pid_inst_swap_delete()` and later accessed in `gf_filter_pid_reconfigure_task_discard()`.
AddressSanitizer reports a `heap-use-after-free` at `filter_core/filter_pid.c:1341`, with a `READ of size 8` from a freed 336-byte heap region.
CWE:
CWE-416 - Use After Free
Affected Component:
```
filter_core/filter_pid.c:1341
Function: gf_filter_pid_reconfigure_task_discard()
```
Affected Product:
MP4Box (GPAC Multimedia Open Source Project)
Affected Version:
The issue was reproduced on:
```
GPAC version: 2.5-DEV-rev1557-g62714f27c-master
Commit: 62714f27c64a3d1eb7e880f9eed2d38673cb43ce
```
The MITRE response states that GPAC Project/MP4Box before `26.02.0` is affected. Local MITRE data also describes affected GPAC MP4Box 2.4 and earlier, including development branches that contain the vulnerable PID reconfiguration lifecycle handling.
Builds before the fix commit `868c6801c226e9964cace54cfd5a759f152780b4` should be considered affected if they contain the vulnerable path.
Attack Conditions:
An attacker supplies a crafted MPEG-2 TS file with corrupted PMT descriptors and invalid packet data. The issue can be reproduced locally with:
```
./MP4Box -info 31_gf_filter_pid_reconfigure_task_discard_filter_core_filter_pid_c_1341
```
No elevated privileges are required. User interaction is required when the victim manually processes the malicious file, or an automated media workflow invokes MP4Box on attacker-controlled input.
Impact:
The immediate observed impact is Denial of Service due to process termination. Because the vulnerability is a heap use-after-free, memory corruption and potential arbitrary code execution are possible.
Fix / mitigation status:
The issue was fixed in GPAC commit:
```
868c6801c226e9964cace54cfd5a759f152780b4
```
Users should update to a GPAC build containing this commit or later. The affected filter PID reconfiguration path should ensure that PID instance lifetime is valid before task discard logic accesses the object.
References:
- Issue: https://github.com/gpac/gpac/issues/3279
- PoC: https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/31/31_gf_filter_pid_reconfigure_task_discard_filter_core_filter_pid_c_1341
- Fix: https://github.com/gpac/gpac/commit/868c6801c226e9964cace54cfd5a759f152780b4
- CVE record: https://www.cve.org/CVERecord?id=CVE-2025-60471
Credit
Alexander A. Shvedov (@sigdevel)
#fuzzing #infosec #security #aflplusplus #revers #cybersecurity #bugbounty #vulnerability #opensource #linux #cve #advisory #media #gpac
WinDiskWriter a free and open-source macOS tool for creating bootable Windows USB installers.
It supports Windows 11/10/8.1/8/7, and Vista, works on both Intel and Apple Silicon Macs, and can automatically handle large install.wim files, EFI booting, and Legacy BIOS compatibility.
A handy tool for Mac users who need to install or repair Windows without using Microsoft's Media Creation Tool.
More details: https://digitalescapetools.com/tools/tool.html?id=windiskwriter
Hello #fediverse
I'm an independent developer who believes in Digital Sovereignty—people should own their tools and control their data.
As a Linux user, I build privacy-first local AI, security & cryptography tools, and system automation scripts to solve real-world problems.
Here to build in public, learn, and connect with people who value open source, privacy, and user freedom.
Feel free to follow along or check out my GitHub!
boostedI was able to add a couple more people to my "Linux Audio" collection for those who are doing music production on the Linux platform.
Since people can't be added to collections unless their Mastodon site is using Mastodon 4.6 or higher, I have to add people little by little as their Mastodon sites update.
Little by little I guess. I think in the end it will be a great feature! :)
#Mastodon #Linux #LinuxAudio #MusicProduction #Audio #Foss #OpenSource
Finalmente secret chat crittografate su Telegram Desktop! Mercurygram porta privacy e sicurezza sul tuo Linux. #Mercurygram #TelegramDesktop #Linux #Privacy #Security #OpenSource
Meet #ArcaneChat: a secure and decentralized private messenger
Anonymous: No phone number or any data required for registration!
Private: All your conversations and pictures are end-to-end encrypted, only visible by the chat members
Discreet: No one can discover you or know that you are using the app! only people you share your invitation link can talk to you
It is magic! ✨
#digitalindependence #privacy #security #family #encryption #autonomy #european #openSource #europe #decentralization
#libreoffice #joplin #microsoft #office #copilot #opensource #oss #ai #linux #macOS #windows
❄️ Determinate Nix Adds Seven-Day Nixpkgs Cooldown After AUR Malware Scare
「 Determinate Systems is a separate company from the NixOS project, focused on commercial and developer tools for Nix, such as Determinate Nix, FlakeHub, and package security services. This change affects Determinate Nix, a downstream distribution for Linux, macOS, WSL, and CI/CD systems, not NixOS or upstream Nixpkgs 」
https://linuxiac.com/determinate-nix-adds-seven-day-nixpkgs-cooldown-after-aur-malware-scare/
@aral @_elena i'm very pessimistic about the future, globally. A small part of me was still putting hope in #Europe . Hoping we would have the chance to do things better, differently.
Adopt more officially #fediverse , #opensource , #ethics solution. It wouldn't have been hard to leverage on the great strength and potential of #mastodon , #matrix and #element , ...
This might seem out of proportion, but all my hope is gone 😞 All of it.
After Bluesky, Threads, and so on, the whole #WSocial thing is another reminder that it was never about the #Fediverse being "too complicated" or "just for nerds".
A bafflingly large amount of people genuinely only act on a gut feeling telling them that only commercial products with fancy marketing owned by a for-profit corporation can be trustworthy, 'official' and 'legal', for the lack of a better word.
If something is a commercial offering by a competent-looking, rich family man in a suit, it's clearly an official, legal, trustworthy product. You can be proud of using such a fancy-looking service.
When they see a community-run open-source project or a grassroots initiative, their first instinct is that it must be shady, illegal, complicated, broken or predatory in some way. It's probably some aftermarket grey area bootleg made by weird tech nerds, political groups with an ulterior motive, conspiracy theorists or some naive teenage hackers. They'd also be embarrassed for using it in front of their peers and neighbours; who uses some free back-alley software, are you poor or something?
The same people are the reason why Google is using the word 'sideloading', why scammers love wearing fancy suits, why people suddenly act childishly helpless in front of LibreOffice, or why DIY HRT is so demonised.
They trust any kind of 'official approval' over their own senses. If someone does something that isn't 'approved', they're a bad person or clearly endangering themselves and others. No idea why exactly, but psh, it must be wrong somehow, or everyone would do it, right?
If people on the Fediverse understood that the whole "it's all so complicated and clunky" thing is just a thinly veiled excuse for a general disdain for non-commercial software, we could finally stop making all our software imitate their corporate equivalents in a futile attempt to appease people who never gave us a chance in the first place.
You'll never convince them to treat it in good faith no matter how much effort or money you put into UX or 'ease of use'. All you're doing is making the software worse, e. g. through things like dot-social, verified accounts or begging brands, corporations and politicians to join and give your product some kind of 'official' validation.
RE: https://floss.social/@kde/116758969592817721
Get KDE Plasma 6.7 on Fedora KDE Desktop Edition!
➡️ https://fedoraproject.org/kde/
#Fedora #KDE #FedoraKDE #Linux #OpenSource
Plasma 6.7 is out and landing soon on your distro of choice!
You can look forward to easier menu customization, better control over your mics, and, as for virtual desktops... Well, well, well! You get keyboard navigation and the much anticipated feature of having separate virtual desktops on different monitors.
Find out about all the new stuff packed into Plasma 6.7 here:
Map your footprint.
Score the leak.
Get a plan.
Inventory the services that hold your data. Answer a few questions about how you use each. Get a privacy grade with prioritized fixes.
#opensource #privacy #freesoftware #technology #apps #lifestyle #economy
The first of the proposed EU #standards for #CRA compliance for product categories has been published for public (= NSO) review. It covers "Cybersecurity requirements for boot managers" and can be found at https://www.etsi.org/deliver/etsi_en/304600_304699/304623/00.01.03_20/en_304623v000103ev.pdf
No paywall. #OpenSource people helped write it. Feedback only to your national standards body please, not to me or to ETSI. There will be a bunch of these.
Brave Origin, minimalist paid build, launches at $59.99 one-time, removing AI, VPN, Wallet, Rewards, while retaining Shields and Chromium patches.🧭
Linux users get Origin free, while other platforms can toggle or strip optional features, reflecting a more modular, privacy controlled browser build.🔧
🔗 https://brave.com/blog/brave-origin/
#TechNews #Brave #BraveOrigin #Privacy #Browser #FOSS #Cybersecurity #OpenSource #Linux #AI #VPN #DataPrivacy #Tech #Security #Chrome #Chromium #Free
boostedToday I released Lockpicker.
Lockpicker is essentially a GUI frontend to hashcat. Recover a password from its hash straight from a modern GNOME-native interface without the hassle of dealing with hashcat syntax.
Early release. It still has a few rough edges UI-wise, where I probably want to do a pretty major overhaul eventually. I also need to redo the logo properly. But it works quite well, comes with OpenCI GPU acceleration.
A Proton survey of 3,000 people in the UK, France, and Germany found 45% may avoid businesses using US tech for data storage over privacy concerns 🇪🇺
The survey also found 65% believe European businesses should prioritize local technology providers, highlighting interest in digital sovereignty 🔐
🔗 https://proton.me/business/blog/european-digital-independence-survey-2026
#TechNews #Proton #Europe #DigitalSovereignty #Privacy #DataProtection #US #Cybersecurity #Business #OpenSource #Security #Technology #USA #Infrastructure #EU
In a policy statement¹, @conservancy said:
> “#FOSS projects should not shun contributors who choose to use LLM-gen-AI systems.”
@dalias' reply:
>> “LOL WTF NOPE. 🤡”
While it was surely unintentional, your reply is quite similar to the cruelty of traditional #FreeSoftware rhetoric — wherein we shunned people for *using* #Apple & #Microsoft. Such users deserve sympathy and help toward more software freedom.
Same goes for #LLM-backed generative #AI users.
¹ https://sfconservancy.org/llm-gen-ai/llm-backed-generative-ai-recommendations.html
Ubuntu 26.10 cambia il modo di scrivere su desktop con Myna: dettatura vocale locale, privacy al centro e uso immediato in ogni campo di testo. #Ubuntu #Linux #AI #OpenSource #Privacy #Accessibilità
Coming up in #LibreOffice 26.8, our next major release (due in August): the border toolbar button in Calc is now a split button that remembers and reapplies the most recently used border style. Thanks to Andreas Heinisch for implementing this feature! #foss #openSource #freesoftware
Four easy steps to elevate your privacy & security this year:
Choose a privacy-respecting browser 🌐 Check out: https://privacytests.org/
Use a privacy-first search engine 🔎 (Startpage, DuckDuckGo, self-hosted options etc.) further reading: https://www.privacyguides.org/en/search-engines/?h=search+engine
Use privacy-respecting email 📧 (Proton, Tuta, ) further reading: https://www.privacyguides.org/en/email/
Use only E2EE messaging apps 🔒 (cross-platform with minimal metadata: Signal) further reading: https://www.privacyguides.org/en/real-time-communication/
You're welcome… spread the word! Sharing is caring 🎁💬
The gift that keeps on giving: data retention, compartmentalization, FOSS, privacy & security. #FCKBigTech stick it to them… #FCKSurveillanceCapitalism 🖕Privacy security isn't a sprint; it is a marathon… Even a journey of over 9k steps begins with the first one… 🙏 💚Use E2EE, full-disk encryption, back up, and update…
#Privacy #Security #E2EE #FOSS #OpenSource #DataProtection #Browser #SearchEngine #Email #Messaging

It turns out, sharing is caring:
#FOSSEPS proves open source isn’t just about code; it’s about collaboration, sovereignty, and smarter public services
📂 1,000+ solutions in the EU Open Source Catalogue
🔗 Stronger governance for publiccode.yml
🛡️ Mapping critical dependencies
🔒 Bug bounties for resilience
https://interoperable-europe.ec.europa.eu/collection/ec-ospo/news/fosseps-preparatory-action-key-outcomes-and-achievements
@EC_OSPO It's because we're busy coding open source stuff.
Maybe one day the EU 🇪🇺 will wake up, but today is probably not that day 😎
#foss #oss #opensource #eu #eupol #uscloud #opencloud #privacy #gdpr #dataprotection #dataskydd #cybersecurity
Most people can't answer a simple question: who holds my data, what are they allowed to do with it, and how do I reduce that?
The information is scattered across dozens of accounts and buried in privacy policies almost no one reads.
This free open source tool turns that fog into a ranked list of concrete actions and alternatives.
PERSONAL PRIVACY SCORE
https://privacyscore.me
When you're building software aimed at a niche related to hype, the only thing you can do is hook people onto it. I mean, you're targeting the kind people who have an attention span of a fruit fly. Unless they're literally addicted to your software, they're going to forget it as soon as they notice the next shiny thing.
👿 FreeBSD 15.1 Released With Updated WiFi Drivers, Better C23 Support & Other Improvements https://www.phoronix.com/news/FreeBSD-15.1-Released
📝 Zettlr is a free and open-source Markdown editor built for researchers, students, writers, and anyone who prefers owning their notes.
It supports citations, Zotero integration, LaTeX exports, full-text search, and Zettelkasten-style knowledge management while working entirely with local files.
A powerful privacy-friendly alternative to cloud-based writing tools.
More details: https://digitalescapetools.com/tools/tool.html?id=zettlr
#OpenSource #Markdown #Writing #Research #Privacy #Zettelkasten #NoteTaking
@calyxinstitute Is it an open-source solution or does it force to use a stock Google device?
Meaning, forget alternative ROMs?
#opensource #ungoogle #degoogle @iode @e_mydata
The European Alternatives To YouTube, WhatsApp & Instagram
https://youtube.com/watch?v=tpx_E6VvfwI&is=C5absLlan3K8Sr_J
What if Europe had its own alternatives to YouTube, WhatsApp, and Instagram?
An interesting video about digital sovereignty, privacy, and technological independence. Definitely worth watching.
#Europe #DigitalSovereignty #Privacy #Technology #OpenSource #EuropeanTech #DigitalIndependence #Innovation #Mastodon #Fediverse