The PHP #security issue shows once again how much our society relies on mostly volunteer work.

Look at PHP Foundation @thephpf finances:
https://opencollective.com/phpfoundation#category-BUDGET

- Reimbursed $67K on development work this year
- Received: $642,755 last year

Compare these numbers with the amounts companies have made with products & services built upon #PHP. Our digital foundations are built on the backs of #opensource volunteers. Governments & companies need to invest in our common digital infrastructures.

RE: https://infosec.exchange/@david_chisnall/116939858992907996

This explains very well why "bad" code contributions by enthusiastic people can still be very worthwhile in the long run.

Also LLM's will not share a drink with you at a conference reminiscing about that time you collaborated on a piece of code, or sharing stories about stuff happening in their life.

Opensource projects dismissing these social aspects are doomed in my view.

#OpenSource #LLM #AI

@EC_OSPO @EC_DIGIT @bert_hubert @rriemann

I'm sharing this story, because I want OpenSource in EU & at the EC to succeed.

Not to shame people, but to give them the info they need to nudge their peers/superiors into changing the current failing system.

Thanks in advance!

#Tech #OpenSource #TechPolicy #Fosdem

Sounds doable. Oh snag! The interface does not allow me to pick a passkey like the Help sections show.

Apparently Passkeys are not supported anymore!?

I have quit a high-tolerance for bureaucracy, opaque rules & stupid systems, but I'm not going to waste anymore time on this for now. I just wanted to discuss a possible bug 😩

Please @EC_OSPO @EC_DIGIT or whoever, fix this horrible system & enable participation by the wider opensource community.

CC @bert_hubert @rriemann

#OpenSource #Tech

1) Trusted Platform Module
I use Ubuntu Linux setup by @tuxedocomputers. They have disabled Secure Boot in WEBFAI by deafult. I do not know why. Apparently this also means it did not install the required files for TPM. I also wonder if this would work at all given with the Web Authentication API as I use LibreWolf.

TPM is not a solution now.

2) Security Keys?
I don't own a security key. I'm not sure I want one. Hardware can/will fail so I need at least 2. Not an option now.

Passkeys?

The MFA options are:

https://trusted-digital-identity.europa.eu/creating-managing-and-using-your-eu-login-account/what-second-factor-can-i-configure-my-account_en

1) EU Login Mobile app
only available in Google / Apple stores 🙄

Not an option. I use a de-Googled Android phone without Google's Play Store. A principled stance I'm sure more opensource people have.

2) Token / Token CRAM

Only available for EC staff & DG CLIMA users. Not an option

3) eID

I can use DIgID (NL eID). I do not feel comfortable using this to contribute to opensource.

This leaves: security key, (TPM) or Passkey

Let's try

You need to sign in to contribute, so you need an account.

You need to create an account on 'EU login' which seems to be the EU single sign-on system for this.

I managed to create an account on 'EU login' & logged into my account.

However I am not allowed to login into code.europa.eu yet.

I need to add some kind of multi factor authentication first.

Ok, safety first, I can imagine why...supply chain attacks anyone....

What are my options?

#OpenSource #Tech #EU

Had to leave @librewolf Matrix group due to it getting spammed & people participating in this group getting invite spam including myself.

Apparently there is no option to counter this in @element or in the @matrix specs? Maybe it could be a bit less annoying if the room was invite only?

Anyways, I'm not willing to deal with this abuse & my only option was to leave this room for now. Pretty sad & angry about this type of behaviour still happening.

#Spam #Abuse #Matrix #OpenSource

Hi @andypiper, great to have met you at Open Forum. We spoke about PublicSpaces.net & Fediscovery. Hopefully I may convince PublicSpaces to invite you for the PublicSpaces Conference. Let's stay in touch, & perhaps we'll bump into each other at Fosdem again.

I'm interested in Hugo, looked into Golang. Found some interesting things:

1) The programming language compiler/toolchain contains telemetry & uses Google's infra: See https://go.dev/doc/telemetry

2) Contributing back to Golang requires a Google account? https://go.dev/doc/contribute

3) No governance info on go.dev afaict

So, Golang seems to be heavily intertwined with Google & not just 'supported by'. Maybe I should look at other tools & languages instead.

#Bigtech #Google #Go #Golang #Privacy #Tech

Dutch public broadcasters umbrella organisation NPO ends their Mastodon experiment writes @Dylan: https://social.npo.nl/@Dylan/113555207155168681

The press announcement sadly lacks numbers:

https://npo.nl/innovatie/projecten/decentrale-sociale-media

So I've gathered some public-available info from social.npo.nl, the server used for this experiment:

https://cryptpad.fr/sheet/#/2/sheet/view/MY+JZgprswdNf9wPilxa1ZEBmtjI9NYg5sCX47fQ-Ac/

This might be useful for those interested in this experiment.

@bjoernsta
@sl007
@mho
@darius
@kissane

#NPO #Mastodon #Fediverse #Media #SocialMedia #FediForum

Sometime ago somebody shared a screenshot of a service with a cookie message along the lines of:
"We take your privacy seriously" while there also was a list of 600+ vendors with whom data would be shared. Does anyone have this screenshot & the source? I think this was by Microsoft MS365?

#Privacy #Cookies #Tech #TechPolicy #OpenSource #Data #GDPR #bigtech #Security #CyberSecurity

I must admit, I find it harder & harder to listen to people & organisations advocating change when their actions are not aligned with their words.

Change is hard. Costs time, effort & is often complex. However, there's a fine balance between sainthood, practice what you preach, being a role model & 'Do What I Say Not What I Do'.

None of us are perfect nor should we, but it would be nice if all that talk about change resulted in actual positive changes

#Tech #Ethics #ClimateChange #Politics

Most #bigtech social media platforms allow personalisation: like a profile picture or a header image for example.

What if we'd use these to advertise the #fediverse? Help those unaware of the existence of the fediverse to explore it & experience the Internet as intended.

Use those in-active Twitter/X, Facebook, Instagram etc accounts for some good!

What do you think? Could we organize something like this?

@publicspaces @toon @dansup @Gargron @fediversereport @laurenshof
@smallcircles

Our future & those after us depends on the universal right to freely choose operating systems, software & services for a more sustainable digital society. We need less e-waste & more re-usable hard- & software.

Please sign @fsfe's open letter & boost this message:

https://fsfe.org/activities/upcyclingandroid/openletter.en.html

#Sustainability #Duurzaamheid #Duurzaam #Nachhaltigkeit #KlimaKrise #KlimaatCrisis #ClimateCrisis #OpenSource #Technology #EUGreenDeal #Policy #FLOSS #RightToRepair #Recycle #ResponsibleTech #Tech

Here's my #introduction:
I live in The Netherlands, Europe. I work as a self-employed tech consultant & software developer. I like to tinker & have way too many interests :)

Likely to toot about:
#technology #techpolicy, #opensource #openstandards #opencontent #publicdomain #creativecommons #copyright #sustainability #diy #infosec #security #data #privacy #accessibility #ui #ux #interactiondesign #ethics #webdevelopment #devops #sysadmin #climatecrisis #food #music #linux #debian #ubuntu