repost
· · to read

Y’all may be wondering why I feel so strongly about Linux and FOSS. I’ve thought about it. You know how Mastodon is now a very accessible, for the blind, social network? It wasn’t always like that. But over the years, the open API has meant that blind people have made their own Mastodon clients, like Tweesecake and TWBlue. Sighted people have made their Mastodon clients accessible, like Mona and Tusky. I see so many pictures on Mastodon that has descriptions that I have to remind myself that an actual person spent time out of their day to craft a description for us. And I think to myself, “What if that could happen to Linux?”

#accessibility #foss #linux #blind

—@devinprater

repost
· · to read

Responsible disclosure of unpatched vulnerability CVE-2023-1430 in FluentCRM by WPManageNinja (with mitigation patch): https://github.com/karlemilnikka/CVE-2023-1430.

tl;dr Attackers can view and edit contact details in FluentCRM. WPManageNinja hasn’t patched the vulnerability within the 90-day responsible disclosure time window. I provide a mitigation snippet to prevent vulnerability exploitation while waiting for an official patch.

#wordpress #wpmanageninja #fluentcrm #cve20231430

—@karlemilnikka

repost
· · to read

p.s. Kbin is part of the Fediverse. You can follow Kbin accounts and magazines from Mastodon etc, and follow Mastodon etc accounts from Kbin.

However, the cross-platform federation doesn’t seem to be working properly yet (bear in mind the project is only a few months old!).

There’s also a complication about the Kbin.social server being overwhelmed over the last few days. Kbin.social has had to use Cloudflare to cope with the overwhelming load, which is known to mess up federation.

—@feditips

repost
· · to read

There’s a Fediverse alternative to #Reddit called #Kbin. More info at https://kbin.pub

Still VERY new, not many servers yet, two so far in English:

https://fedia.io
https://kbin.social

No app yet, use it through these sites. Subreddits are called “Magazines”. You can interact with magazines from other servers.

Coders help Kbin at https://codeberg.org/Kbin/kbin-core, non-coders donate at https://www.buymeacoffee.com/kbin

(Sorry to people bored of this, had many requests to put info in one place)

—@feditips

repost
· · to read

Some work news: I could not be prouder to have worked with a tremendous coalition of advocates and researchers and my clinic student attorneys on the new #FCC rules for #videoconferencing #a11y, more than a decade in the making. There are serious barriers for deaf, hard of hearing, blind, and low-vision folks to participate in the virtual meetings that have become de rigueur in every part of American life since the pandemic, and we are finally going to get some fixes. 🙌 https://www.fcc.gov/document/fcc-requires-video-conferencing-accessibility-proposes-asl-support

—@blakereid

repost
· · to read

I do feel more than a little sympathy for @ernest.

In January he decided to try to build an ActivityPub based messageboard system.

A month ago he decided the code was stable enough that he could release the first alpha version, and stood up https://kbin.social to demonstrate it.

It attracted quite a few users per day and proved that it might just be an exciting new entry into the Fediverse.

And then Reddit’s admins did their thing, and suddenly thousands, millions, tens of millions of users are looking for a new home. And although a few other brave souls have also created kbin instances in the last few days, there’s simply not enough capacity to even begin to cope with all the demand.

#kbin #Fediverse #RedditMigration #Reddit

—@losttourist

repost
· · to read

Holy shit.

Boost this one, please.

The #FOSSdroid subreddit is not only going dark for two days, but the moderator there is spending that time spinning up their own #Kbin, and encouraging the subreddit members to move.

The Old:
https://old.reddit.com/r/fossdroid/comments/146i45k/migration_to_kbin_and_the_fediverse/

The New:
https://social.fossware.space/

The Man:
@NettoHikari

Every subreddit that’s “going dark” for 2 days and then going back to “business as usual”…if they did this instead, #Reddit would either die or cave on the API thing inside of a week.

—@nattiegoogie

repost
· · to read

Mastodon evangelist Tim Chambers @tchambers is now on #kbin @tchambers@kbin.social (https://kbin.social/u/tchambers) and has created a “magazine” (kbin for “subreddit”) to discuss everything #RedditMigration:

Welcome to RedditMigration! >>> https://kbin.social/m/RedditMigration/t/12303

@mastodonmigration is also now on kbin as @FediMigration@kbin.social (https://kbin.social/u/FediMigration)

Why not create a #kbin ( https://kbin.social/ , https://kbin.social/register) or #lemmy (https://join-lemmy.org/) account and join the fun?

—@mastodonmigration

repost
· · to read

FYI to anyone who recently set up a server for #fediverse stuff (like #kbin or #lemmy for the #redditmigration) and is just now having to learn how to set up a content cache in front of it to keep from paying a million dollar hosting bill for something that you thought would just be a nice hobby, you need to make sure of some things:

– Some key files need to be reachable without going through things like cloudflare’s bot detection because they are literally for bots! This includes stuff like `/robots.txt` but also everything under `/.well-known` (and especially `/.well-known/webfinger`).

– You NEED to make sure your cache “varies” content by the `Accept` header, which makes it so that if someone tries to friend you at `https://your.lemmy.example/u/whoever` from their mastodon server (or probably even from a different lemmy/kbin server), their server will be able to fetch the activitypub document for your user! Otherwise, they’ll get a cached copy of the html web page! I dunno how you do this with cloudflare, but with most reverse proxies you run yourself the thing you want is a setting for “vary” which will let you say what headers change the response type.

The next couple of days are probably going to be rough, but doing these things will make things a little better and a lot less confusing for your new users!

—@megmac

repost
· · to read
Steve (@sclower@mastodon.cloud) (mastodon.cloud)
The CEO of #AccessiBe is doing a "we're sorry we screwed up" tour across the internet, and claims he's apologized privately to those who have been fucked over by his company's tech. If so, I'm not one of them (despite my having had to create a guide to help people block their overlay from even loading). So until I get an apology or they take the product offline, I'm calling bullshit on the whole thing.