Bobby Brown @bobbyd0g@hellsite.net

Ugh. Google has patched yet another 0day in yet another media-encoding library that's nearly ubiquitous. Libvpx is in a ton of Linux projects (citation: https://pastebin.com/TdkC4pDv). Wikipedia says it's used by YouTube, Netflix, Amazon, JW Player, Brightcove, and Telestream. It also appears to be used in iOS.

If anyone has reasons to think this vulnerability is limited to Chrome, please let me know. Preliminarily, though, I'm inclined to think this is yet another vuln under active exploit that's going to make a ton of software vulnerable to RCE exploits.

The 0day is tracked as CVE-2023-5217.

https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html

This is important. My mother is currently facing substantial issues regarding her arms, making it difficult for her to effectively operate her keyboard for work. Her computer is running on Fedora Kinoite, and she's in need of reliable voice dictation software to facilitate her job comfortably.

While I'm currently assisting her, it's not really a sustainable long-term solution. If anyone is aware of a high-quality speech-to-text software, preferably one that can function offline and is open-source, please do let me know. This is crucial because the content of her work is confidential, and we need a reliable and secure solution.

Boosts are welcomed.

#Accesibility #AskFedi

Has anyone started an "enshittification watch" website?

Like, just list every notable company or service with a slider bar showing where along that curve they currently fall, with links to notes, analysis, and receipts.

Who is resisting, who is at risk, who is sliding, and who is too far gone.

It's clear that it's gotten much riskier to rely on quite a large swath of the commercial tech landscape. If that's the game they're going to play, seems like we should at least be keeping track with intention so folks can make informed decisions.

[Announcing] fossilphant — a static-site generator to self-host your posts from Mastodon archives https://github.com/swaldman/fossilphant#readme

Check out examples, themes with paging https://www.mchange.com/projects/fossilphant/example/shatter/ or as one tall page https://www.mchange.com/projects/fossilphant/example/tower/

My current instance is sunsetting, and I want to make sure the banalities I posted here remain forever public.

If you are in similar straits, I'd love it if you gave this a try!

cc @isomorphismes @jpkoning @mattlehrer @paulgp

#scala

CISA, the FBI and NSA just jointly published a report on the threat from deepfakes. It's a fairly comprehensive look at deepfake threats to date, and includes some recommendations for how to spot and anticipate them.

https://media.defense.gov/2023/Sep/12/2003298925/-1/-1/0/CSI-DEEPFAKE-THREATS.PDF

@Lazarou @cstross

hardwired analogue telephones can be altered to allow electricity through to the microphone whilst on hook, sounds in the room are relayed back to the Telephone Exchange and monitored (whilst not altering the normal working of the telephone). It was a common tactic in East Germany (all the phones were wired this way) but did also get used against selected targets (usually political activists) in Western Europe (link below shows this on a UK phone)

https://www.flickr.com/photos/rtnvfrmedia/albums/72157644666105390

Hello #fediblockmeta, many people are discussing #thebadspace #blocklist after they blocked tech.lgbt, but few people went through all 355 pages to look at it the #badspace contents. I did that and want to share my findings.

I don't want attention or followers, but I want this post shared, so I am posting from an alt.

https://thegoodspace.neocities.org/