Discussion
In memoriam de Ariane Gransac (1941-2026), histórica militante anarquista, pieza clave en las acciones de la FIJL y el Grupo Primero de Mayo contra el franquismo.
https://circuloacrata.blogspot.com/2026/05/adios-ariane-gransac-la-fuerza.html
#Anarquismo #MemoriaHistórica #Antifranquismo #MujeresLibres #Biografías #ArianeGransac
Introducing bookmarks on Surf!
Save posts, articles, podcasts and videos, then find them all in Your Bookmarks in the sidebar. Connected Bluesky or Mastodon? Your saves from there will show up on Surf too.
Now available on web and Android — iOS coming soon!
After U.S. targets culture, Bloc asks Carney to backtrack on DST, CanCon payments
https://www.ctvnews.ca/montreal/article/after-us-targets-culture-bloc-asks-carney-to-backtrack-on-dst-cancon-payments/?utm_source=flipboard&utm_medium=activitypub
Posted into Canada @canada-CTVNews
💥"Imponenti manifestazioni non autorizzate scuotono Santiago del Cile. Le organizzazioni studentesche hanno confermato le proteste, nonostante la mancata autorizzazione da parte degli organi competenti. I forti disagi nel trasporto pubblico e privato hanno spinto le autorità locali ad invitare i cittadini a programmare i propri spostamenti."
(L'Indipendente)
@encthenet i really appreciated @astraleureka helping me to realize how difficult the block-level encryption problem is even if you allow yourself to have extra data per block somehow. i had especially been hoping to have distinct keys/key schedules used across the fs somehow, but i was quickly convinced that there's really no way to incorporate an additional trust root when the filesystem is the source of truth.
my entire purpose (which i believe merits both a filesystem and a kernel) is to make filesystem visibility into an analogue of virtual memory, i.e. processes live in their own chroot by default (all i/o is scoped to a named synchronization domain) and extending POSIX to incorporate structured mechanisms for explicit data flow (mostly in the form of "i/o transactions"). after write(), an i/o transaction call can progress the state machine (blocking or nonblocking) to synchronize the written data with another domain and/or to persist it to disk.
in particular i think separating the act of persistence from normal writes and shared file visibility offers an opportunity to employ cryptographic keys, as a way to serialize access to some sort of runtime capability. of course, if a cryptographic key to access secret data is written to disk in any form, then it is visible to an attacker--so that key can be encrypted with another key, making use of the structured supervisor hierarchy.
to answer your question:
What do you do when the key to your data leaks? How do you rotate it? How do you make sure that data encrypted with the old key is deleted?
i don't at all have the answers to this yet, but i think separating writes and visibility from persistence is a really important step. consider my (less difficult) case above, where a cryptographic key is used to encode access to some sort of runtime capability in a way that persists across shutdown. in that particular case, every time the process starts up, it can exchange its key for the capability, and then it can atomically regenerate a new key and ensure that one is persisted.
i'm obviously cheating and handwaving to an immense degree here, but i think that a graph of recursive supervisor processes (down from init) which can locate their persisted state and transform it into runtime state upon startup can define a tree of trust relationships which avoids deep structural dependence upon a particular cipher or master key
@hipsterelectron @astraleureka
Interestingly, I've been thinking of encrypted FSs for a while now, and it's an interesting ball of problems.
I'm most interested in a remotely syncable encrypted filesystem. i.e. stored on a remove server but with a local cache. The idea being that you can wipe your laptop for crossing boarders, and then just rekey it to get your data back.
But I have a desire to be able to share files/directories with others as well which would be best to have a key for each file/direcotry.
hmm... I have wanted to expose ZFS's transaction layer to an app. That is, the ability for an app to "freeze" a file at a transaction point, do a bunch of read/writes, then bundle all the writes as a single transaction. This would prevent the double logging penalty that postgresql and other databases have when running on ZFS. It's doable, just not very POSIXy.
Flock of Smeagols
Europe ramps up support to Ukraine as its US-dependent air defence runs low
Lio Novelli and Jurij Podgoršek who run a tech-critical show on a Slovenian student radio station interviewed me and this was aired a couple of days ago:
https://radiostudent.si/druzba/tehno-klistir/zavzemanje-za-clovesko-obrt
(Interview starts at 23:22.)
The main topic is #Guix, LLMs, and the Guix Consensus Document process.
Why different countries adopt different cars
Nebula: https://nebula.tv/videos/techaltar-why-different-countries-adopt-different-cars
Nebula
Ma maman à La Réunion ça fait des semaines qu'elle est en train de se faire menacer de formations obligatoires hebdomadaire et retrait du RSA par France Travail parce qu'elle trouve pas de taff
Alors que :
• elle a 62 ans
• elle cumule les problèmes de santé et sort d'un arrêt de plusieurs mois
• elle est assistante maternelle à domicile sauf que mdr c'est les grandes vacances donc elle risquait pas de trouver des missions rapidement fin juin quand France Travail a commencé à la harceler
• elle est en logement social et le loyer c'est 75% de son RSA
Macron va bien manger tes morts sale chien
@nileane votre dernière phrase vous discrédite complètement. Comment croire qu’il y a d’un côté une gentille maman et face a elle plusieurs responsables de France travail incompétents et plein d’exigences inutiles ?
AI can generate a design in seconds. But can you tell it was generated by AI?
Moses Amama thinks there are a handful of patterns that give it away almost every time.
We put that opinion to the test on The Opinionated thoughtbotter.
For those scared of being *called* Communist: My God, sack up. Have you ever tried agreeing with your bully's premise? How did it go?
"The American president clearly did not know whom he was dealing with. He is following in the grand tradition of American leaders starting wars with people they don’t understand, then wondering what went wrong."
Solidarity with my neighbors up north! ✊️
The switch to Axon, which is not yet widespread but appears to be increasing as people oppose Flock, signals what might come next—cities entering contracts with another company which has faced less scrutiny and backlash.
https://www.404media.co/cities-are-ditching-flock-immediately-replacing-it-with-axon-license-plate-readers/
To anyone with questions about Meta's Ray-Ban glasses and how this is problematic for privacy and consent, I highly recommend reading this excellent article from Janus Rose at The Verge:
"“One way to think about it is protecting your community and the people you care about,” said Gilliard. “When you’re wearing these glasses, when you use your video doorbell, when you record everyone’s conversations, you’re not just surveilling yourself. And there’s no consistent and foolproof way to guarantee that information won’t be used against people you care about — to hurt trans and queer people, or hurt immigrant communities. I wish people would think about it in those terms instead of ‘did my package get delivered.’”
https://www.theverge.com/tech/807834/meta-smart-glasses-privacy-laws-wearables
did a security check on mitra and it's probably the most secure fedi software there is, good job @silverpill
Desde la Villana de Vallekas todo el cariño a la histórica CSOA La Casika de Móstoles, que pretenden desalojarla el próximo 6 de octubre, después de 28 años de resistencia ⚡🔥
https://www.instagram.com/lacasika.csoa/p/DbkwjBNjK6D/?img_index=3
BREAKING:
After the Washington Post fired me last year for speaking the truth in the wake of the Charlie Kirk killing, I fought back.
And I'm happy to announce: I won my case against the Washington Post.
They have been ordered to reinstate me immediately.
www.nytimes.com/2026/08/24/b...
Washington Post Ordered to Reh...
Sorry, the app encountered an unexpected error
Install bonfire.cafe
Get the full app experience
