New in our electronic #collection:

➡️ Human Rights in the Digital Domain. Core Questions

🔗 https://doi.org/10.1017/9781009606295

#HumanRights #SocialMedia #digitalization #legislation #privacy #governance #ethics #education #OpenAccess #OpenScience #books #bookstodon

"Wir fordern, dass alle Abgeordneten des Deutschen Bundestages sowie Bundesminister*innen künftig in die gesetzliche #Rentenversicherung einzahlen – wie es für jeden anderen Arbeitnehmer in Deutschland selbstverständlich ist."

Das wollt Ihr doch auch, oder??
Dann zeichnet noch HEUTE die Bundestags-Petition 186146!
https://epetitionen.bundestag.de/petitionen/_2025/_09/_04/Petition_186146.$$$.a.u.html

Und bitte RT für mehr Reichweite 🙏🏼

One California city’s idea to tackle the housing crisis: Take the stairs
https://www.latimes.com/california/story/2025-11-23/one-california-citys-idea-to-tackle-housing-crisis-take-stairs?utm_source=flipboard&utm_medium=activitypub

Posted into California @california-LATimes

Salut les mastonautes ! Bonne journée et bonne semaine à toutes et tous 👋

🎉 @CoMaps vient d'apporter une nouveauté qui fait très plaisir car elle apporte un véritable plus aux piétons 👟 et cyclistes 🚲, principalement dans les zones urbaines 🏬 en périodes de chaleur ☀️🌡️ : les arbres 🌳🌲

Ci-dessous quelques exemples à #Paris, #Lyon, #Chambéry et bien-sûr à #Grenoble, qui est une référence en termes de déclaration des arbres sur #OpenStreetMap.

#️⃣ #OSM #OpenSource #Logicielslibres #FLOSS #FOSS #FreeSoftware #VéloTaf #Cyclisme #Rando #Randonnée #Vélo #Comaps

@contrapunctus @alisynthesis @NebulaTide @JohnnieMac

Anyone recommending a decentralised alternative to Signal and not including any discussion of anonymity sets, metadata leakage, and so on, is just telling me that they have absolutely zero idea of how security and privacy work.

XMPP (and I say this as someone who was involved in standardising it back in the day and wrote two client implementations) is not fit for purpose for a modern threat models. It leaks metadata like a sieve to passive adversaries.

The Fediverse is a fundamentally different problem because it's about public communication and does not aim to provide privacy. A tool for private communication is a completely different problem space.

Every user of Android and other Linux distributions, macOS and iOS in France has benefited from GrapheneOS contributing to open source projects used in these systems. Ideas we came up with for defenses were also deployed in these. French law enforcement literally uses our code.

@contrapunctus

I've posted at length about this before, so I didn't want to repeat myself, but (like this) it was deep in another thread. Here are some of the most important things:

In XMPP, your roster is stored on the server (in plaintext, because the server must be able to process it). The roster contains everyone in your contact list and everyone who has you in their contact list. This gives an attacker who compromises a server a complete dump of your communication graph, and a subset for a bunch of other people. This means that the number of servers you need to compromise to get the kind of metadata that the US uses to decide which people to kill is quite small.

Presence stanzas are unencrypted and broadcast. These contain your online status and propagate to everyone who has you in their contact list. Anyone on any of the servers in your contact list can see this and track your online status.

This makes it quite easy to do traffic analysis to find a subgraph of the communication network: Someone connects and then you see a flurry of messages and can immediately see which servers a person is connecting to. If people are using small servers, that's often enough to identify them even without compromising a server.

Every message you send, even with OMEMO, has plaintext to and from fields. This means anyone with access to either server knows who you're communicating with. This is also typically visible to passive monitoring. If two people are using the same server, it's easy to correlate incoming and outgoing traffic, especially since most servers are small (larger servers make the first problem worse: This is what I'm talking about when I say that making a distributed protocol secure is hard, you solve one problem and another gets worse). If two people are on different servers, you need to observe more, unless they are on single-user servers, in which case just watching one server is sufficient.

There are other issues, including some client-specific things about OMEMO downgrade attacks, but these are the most obvious ones.

But if, for example, you're thinking of setting up a union and don't want it to be easy for your employer to see who is involved in planning, XMPP is a bad choice. Just watching the traffic on the corporate WiFi makes it quite easy for them to see who is in the union chats.

@fesshole
https://youtu.be/LqIpf3j45p8

I work in telephone sales for an insurance company. The next two customers I had to call were Mrs Cockburn and then Mr Woodhead. In a moment of confusion I asked to speak to Mr Cockhead, immediately hung up and marked them both as Do No Contact in the CRM.

Here's France's ANSSI agency proposing an exploit protection to defend against apps being exploited:

https://github.com/GrapheneOS/os-issue-tracker/issues/1118

Today, our restrictions for Dynamic Code Loading via both memory and storage cover protecting against this and are enforced for the whole base OS.

Pro tip: on Black Friday, all of your favorite Linux distributions will be FREE to download.

We’re Seeing What a No-Immigration Economy Looks Like
By Wendy Edelberg
https://www.nytimes.com/2025/11/23/opinion/jobs-report-immigration-trump.html?smid=nytcore-ios-share

Mum missed me when I left for uni. I sneaked home as a surprise, and jumped out at her and Dad for a laugh. But this was Northern Ireland in 1993, I was dressed in goth black, and Dad was police. The poor guy thought the IRA had come to kill him. Still feel awful about it.

Ähnlichkeiten mit lebenden deutschen Politikerinnen sind rein zufällig.

❞
Was ist zu halten von einer toughen Frau, die […] ihre Homosexualität offen auslebt, eine feministische Künstlerinnengruppe mitbegründet – und dann der NSDAP beitritt und antisemitische Schriften verfasst? Die Kulturpublizistin Nina Schedlmayer erzählt heute, vor dem Hintergrund unserer von Widersprüchen extrem geprägten Gegenwart, die Geschichte von Stephanie Hollenstein (1886 bis 1944)
❝

https://shop.falter.at/detail/9783552075122/hitlers-queere-kuenstlerin

Bon dia. Encara no sabeu perquè tenim una societat tan idiota?

71 estudis amb 98.299 participants.demostren que mirar vídeos de TikTok i Reels d'Instagram perjudica la capacitat lectora, d'aprenentatge i per resoldre problemes.

Vosaltres aneu fent.

https://pubmed.ncbi.nlm.nih.gov/41231585/

Meanwhile, the FBI and European law enforcement facilitated years of organized crime in Europe via Operation Trojan Shield while infringing on our copyright and trademarks. How about they start by arresting themselves? See our other thread about this:

https://grapheneos.social/@GrapheneOS/115589833471347871