Anyone know why showing permissions was removed from the new f droid update? Can i revert back or use a different client perhaps? I feel like that was an important feature

An update on my FOSS downloader extension recommended by Mozilla!

I just updated to a new major release of Media Downloader Unleashed!!, my #firefox add-on to download audio and video from sites that got recommended by #mozilla !

https://addons.mozilla.org/addon/media-downloader-unleashed?utm%5C_source=fedi-share

Mainly, a better media list, more supported sites (even those using a wrong file format!), and some fixes and improvements!

Changelog is too long for the character limit so you can read it all here :
https://github.com/helloyanis/media-downloader-unleashed/releases/tag/v4.2.0

It's just out, so there might still be some bugs, so if you want to try it be sure to leave me any feedback! Thanks! :blobcatheart:

Now for the fun part : Since it got recommended by Mozilla, it appears as a suggestion within the browser, which lead to the amount of users BLOWING UP!! LOOK AT THIS GRAPH IT'S INSANE! THANKS SO MUCH!!!? 🧡🧡

I guess it's a great reward for making great work!!

@opensource

#foss #opensource #devlog #web #webdev #mediadownloaderunleashed

Matrix was built to become the open communication of the web and serve everyone. But, as the Internet and email did, its network effect started with governments. Today, and as proven by the audience in the room, most European governments and several others are either using it or looking at implementing it for their communications. This talk will tell the story of how we got there and why.

Raven runs Windows applications on Linux. You install them with their own installers, the same ones you would use on a PC, and they start: no virtual machine, no winetricks, no DLL overrides.

Same ol' run around.

Make big news about tech sovereignty, open standards, decoupling from deviant big tech companies. As the hype dies out, silent abandonement back to corporate arms.

Archive: https://archive.is/wZn0K

I have a TP-Link router and I want to try OpenWrt on it. Have other people tried this? How did it go? Is it difficult to revert if it doesn't work? I'm nervous because it's my main router.

Have you heard of this is this any good... and what else would you use?

Hi, this is a project I've worked on for a little bit.

scaff is a static site generator aimed to be as simple as possible. In it's current state, it just generates webpages with no extra frills. You create your templates in Go templated HTML, add your assets, write your pages in Commonmark, and you do not have to do anything else.

I am open to comments about the project being posted here or on repository's issues.

Transmission 4.1.4 has been released today as the fourth maintenance update to the latest Transmission 4.1 series for this popular open-source BitTorrent client, a bugfix release that fixes various issues.

Coming almost four months after Transmission 4.1.3, which was a small update fixing a CORS bug that leaked the anti-CSRF nonce, a use-after-free bug in peer code, and a build error when compiling with fmt 12.2.0, the Transmission 4.1.4 release hardens the torrent-add RPC method against malformed requests.

Transmission 4.1.4 also fixes a regression introduced in Transmission 4.1 that could cause torrents with zero-byte files to be handled incorrectly, which could sometimes cause downloaded progress to be lost, and fixes a rare bug that could leave Transmission hung but running on it is closed.

This release also addresses a rare bug that could prevent downloading webseeds from finishing, a bug where setting TR_CURL_PROXY_SSL_NO_VERIFY broke origin server SSL verification, and a build failure that happened when building Transmission with -Wnull-dereference -Werror in GCC 12.15.

On top of that, Transmission 4.1.4 unifies launch and delegation between the Qt and GTK clients. According to the devs, if either is already running and then you or a browser’s MIME-type handler tries to start the other to add a new torrent, that new torrent will get handed off to the pre-existing session.

The GTK client has been updated to allow the torrent list to re-sort and re-apply its filter when the torrent’s top folder’s name changes, open the correct folder when a single-file torrent uses a directory structure when opening a torrent’s folder, and correctly show the app icon on some desktops.

The Qt Client received improvements to the UI code to use less CPU, the Web client received a fix for a display bug that sometimes listed torrent names as ‘Unknown’, while the macOS client was patched against a potential RCE vulnerability that requires local write access to the user’s preferences.

Last but not least, fixes a bug in transmission-remote that broke the --list-groups argument. Check out the release notes on the project’s GitHub page for more details, where you can download Transmission 4.1.4 as a source tarball if you fancy compiling it from sources.

Hi everyone,

I built HealthCoach, an open-source, local-first health and wellness companion designed to track weight, blood pressure, calorie budgets, and daily nutrition journals across desktop and mobile devices.

Most commercial wellness apps rely on mandatory account registrations, cloud lock-in, aggressive telemetry, and recurring subscriptions. HealthCoach takes the opposite path:

• Local-First & Private: All data resides locally on your hardware. There is zero telemetry, tracking, or remote advertising.
• Native Desktop & Mobile Support: Full native desktop builds for Linux and Windows, alongside an Android mobile client.
• Offline Local Sync: Synchronize to a local file share, or peer-to-peer over local Wi-Fi without intermediate third-party servers (with optional Google Drive backup if preferred).
• Open Source: Licensed under GPL. Codebase, architecture notes, and builds are fully open:
  • Website: https://bigtlb.github.io/healthcoach/
  • GitHub: https://github.com/bigtlb/healthcoach

Google Play Closed Testing:
I'm currently working through Google Play's 14-day closed testing hurdle to make the Android build publicly available on the Play Store. If you run Linux/Windows and would like to test the Android companion app, I'd greatly appreciate your help:

1. Join the testing group: https://groups.google.com/g/healthcoach-testers
2. Web Opt-in: https://play.google.com/apps/testing/com.lbthomas.healthcoach
3. Play Store link: https://play.google.com/store/apps/details?id=com.lbthomas.healthcoach

Direct desktop releases and APKs are also available directly on GitHub. Feedback, bug reports, and PRs are welcome on our issue tracker!

I've been thinking about how cool it would be if we could categorize internet domains in the same way the Dewey Decimal System categorizes books. Such a system would allow independent search engines and directories to compete with Google again.

We live in a time where you can spin up as many VPSs as you need. Where data can be distributed in all sorts of ways, among those machines. And on the cusp of the fastest processing power in history (quantum).

I'm honestly looking for a discussion on extending this:

https://github.com/ki4jgt/Open-Catalog-System/blob/main/OCS.json

It's a taxonomy for classifying and grouping domains of similar topics and interests (Facebook, Google, programming, YouTube, etc). As I cannot possibly think of all the subjects contained on the web, I would love some open discussion, here on Reddit -- if that's OK, on how you guys think this should be structured, what subjects you think are missing, and your general feedback on what would make it better.

For those of you who don't know, taxonomies are how we used to find information before Google. To find an atlas at your local library, you'd go to the Information desk, then the reference area (things you can look at in the library but can't check out), then the particular reference type you were looking for.

So, INF.REF.DIC would give you a bunch of dictionaries. Since you're looking for information (a definition), and need a reference, I thought it only fitting to keep the convention. In web terms, Webster, Cambridge, and Urban Dictionary would be listed here.

RFCs are listed under INF.COM.RFC because RFCs extend beyond programming, and are used in a wide range of communication and data formats.

The OCLC owns the Dewey Decimal System (WorldCat), and is lawsuit happy. They even sued someone for using the DDS in a themed party.

That demands an open system be created to take its place, lest we face the wrath of IP lawyers. Libraries aren't even allowed to use the DDS without paying a licensing fee first.

Their reach isn't limited to the US either. They have bodies all over the world, on every continent. And collect usage fees from all local libraries using WorldCat.

I've setup the issue tracker to allow you guys to suggest new categories, suggest moving categories into more appropriate locations, and to suggest name changes.

I will willingly put in the work, if you guys make some awesome cases in the issue tracker.

Thanks.

Google owns the HTML5 model. Anyone who says otherwise is just kidding themselves. The standard and specs are too broad for anyone without a boatload of cash to keep up with.

So I decided to go with a standard that wasn't as convoluted. . . Markdown.

Not going to lie, I vibe-coded the entire thing. And baked in a couple modifications to the standard as well:

:Aligns text right and :centers text:

It also auto-numbers lines starting with . .

I'm just curious if this community is AI-friendly, or if I need to post elsewhere.

It browses markdown and politely declines all HTML content. Written in Python and uses Pyglet as its rendering engine.

Latest update:

After some experiences at a cannabis club, and some other types of member’s clubs, I figured there may be a need for a suite like this to manage dues, snackbar tabs, etc.

https://codeberg.org/CannaClub/CannaDocs/src/tag/26.10.02/README.md

This release is mostly feature complete, and the older tag should still be usable if you prefer that, instead. This tag has shared components broken out, and a suite of end to end tests built.

Features planned: equipment library (bongs, vaporizer, dab rigs, etc), and currently getting served any products by the budtender only adds it to the tab. I’ll be planning on breaking that out into its own “tab” system to aid member work hours or such.

New feature requests welcomed. A demo site is live at cannaclub.dev if you want to check it out (Currently running 26.10.01, will be upgraded to new release soon). Bug reports also welcomed as are PRs.

Enjoy, and stay elevated!

I saw a blog asking Mojeek's devs if it is open-source, and the devs said no. But the things is, that blog is outdated from 2022. And sustysubs.net says that it's open-source, bit I couldn't find any other modern evidence. If it's still not open-source, tell me an altermative (Not Marginalia or YaCy as I plan to use those alongside a third search engine) that's NOT reliant on proprietary indexes, the reason I even considered Mojeek

Sources I used:

• Blog post: https://community.mojeek.com/t/is-mojeek-open-source/237
• Sustysubs.net: https://www.sustysubs.net/categories/web-search/

The PHP development team has released emergency security updates addressing two critical vulnerabilities that could allow unauthenticated attackers to execute arbitrary code on affected web servers. The fixes are available in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Administrators are strongly urged to upgrade immediately.

Both vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, carry a severity rating of 9.2 under CVSS 4.0. They affect PHP installations handling web requests, including those running PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed.

According to the official PHP security advisory, the highest risk is associated with Apache’s mod_php configuration, where researchers have demonstrated that an unauthenticated request can trigger an attack before any application code executes.

The first vulnerability, CVE-2026-109618, involves memory corruption during out-of-memory handling. Under certain conditions, PHP can interrupt request processing while internal structures are only partially initialized, potentially causing subsequent cleanup operations to access invalid data.

The second, CVE-2026-109619, concerns stale global state. Memory belonging to a previous request can be freed while references to it remain accessible, allowing a later request handled by the same worker process to interact with invalid memory.

Importantly, exploiting these vulnerabilities does not require a vulnerable PHP application or a publicly accessible file-upload feature. The problems originate in PHP’s internal request processing, making them particularly concerning for administrators hosting otherwise properly maintained applications.

Debian has moved quickly to address the vulnerabilities. The project issued DSA-6574-1, confirming that Debian 13 “Trixie” users can upgrade to PHP 8.4.27-1deb13u1. Debian 12 “Bookworm” has received PHP 8.2.35-1deb12u1 in its security repository, with both fixes explicitly listed in the package changelog.

The severity has also prompted an official warning from Arch Linux, which urges administrators running publicly accessible PHP applications to immediately upgrade to php 8.5.12 or php-legacy 8.3.36, depending on the installed package.

AlmaLinux technical steering committee has also approved releasing these fixes ahead of Red Hat and CentOS Stream. Patched packages are expected to reach testing repositories later today, followed by production repositories once testing is complete.

For other Linux distros, administrators should check their repositories for updated PHP packages. Distribution maintainers and long-term support vendors received the patches in advance to prepare security updates, including backported fixes where applicable.

PHP 8.1 and older versions are no longer supported by the upstream project, although some distributions may continue providing security patches. PHP 8.2, meanwhile, is approaching its end of life on December 31, 2026.

The PHP team also emphasizes that there are no complete workarounds for these vulnerabilities. Disabling session.upload_progress.enabled and restricting request sizes may reduce exposure to some attack paths, but these measures do not address every exploitation scenario.

Administrators should install the appropriate security update as soon as possible, and restart affected PHP workers or services to ensure the corrected code runs.

The LiberNT project is working on an alternative implementation of the Windows NT architecture, using Windows 11 version 24H2 as its compatibility reference. Unlike Linux distributions, LiberNT does not use the Linux kernel. It builds on the ReactOS codebase while replacing and extending several core components.

One of the project’s main priorities is ARM64 support, particularly for single-board computers and embedded devices. LiberNT also supports x86-64 and 32-bit x86, while RISC-V 64-bit and PowerPC ports are under development.

According to the developers, the implementation follows a clean-room approach. Windows behavior is studied using Microsoft’s public documentation, SDK and WDK headers, public symbols, and black-box testing. The team states no proprietary Windows code is copied or transcribed.

On the technical side, one of the biggest changes is NVS, a new memory manager and kernel pool implementation replacing the corresponding ReactOS components. LiberNT also introduces a new cache manager, with developers claiming better results than the original ReactOS memory manager in their memory and cache benchmarks.

Other changes include a new NTFS driver, an updated StorPort implementation with NVMe support, USB xHCI and SD bus drivers, and work on the Windows Display Driver Model and Desktop Window Manager.

On the application compatibility side, LiberNT implements WoW64 on its 64-bit targets, while ARM64 systems use the FEX emulator to run x86 applications. ARM64EC support is also part of the project.

Early compatibility results are already available on the project’s compatibility page. According to tests published by the developers, Google Chrome, the open-source strategy game 0 A.D., and Command & Conquer: Yuri’s Revenge are reported to work. Steam is listed as usable, while the RPCS3 PlayStation 3 emulator currently starts but has not been classified as usable.

However, the compatibility database contains only five entries, all tested against a specific development build.

LiberNT also targets Raspberry Pi hardware, with the same ARM64 disk image designed to boot on Raspberry Pi 3, Raspberry Pi 5, and generic ARM64 virtual machines running under QEMU. The project includes drivers for Raspberry Pi display, networking, and audio hardware.

For those interested in trying it, the developers provide downloadable builds in three formats: a preinstalled raw disk image, a VHD image for virtualization platforms, and a bootable installation ISO. The preinstalled image is recommended, with support for both UEFI and BIOS booting.

Still, LiberNT remains a work in progress. The developers caution that the available builds are experimental and should be used in virtual machines or on spare hardware rather than production systems. The source code is available on GitHub.

A bit of a surprise, really, Wine is making its way to OpenBSD. An experimental port has been submitted, and early testing shows it can already run dozens of 64-bit Windows apps (including quite a few games).

The announcement comes from OpenBSD developer Thomas Frohwein, who made the proposed port public on the OpenBSD mailing list and describes it as possibly the most surprising port proposal of the year.

As Frohwein makes clear, getting Wine to work on OpenBSD has been a team effort with the bulk of the work being done by Andrii and Fabien. The biggest hurdle has been the %gs segment register. Wine needs this, but OpenBSD doesn’t allow applications to set GSBASE directly.

The breakthrough was a software workaround which uses the %gs prefix to generate the instructions, circumventing a major compatibility issue which had previously made getting Wine onto the OS so difficult.

The results are already very impressive. The dev team has successfully tested a good number of 64-bit Windows apps, and most run quite nicely. Even more surprisingly, a recent remaster of The Witcher 3 appears to run quite well (though again you do need to install vkd3d-proton to get the D3D12 via Vulkan to work).

Frohwein also posted links to screenshots and gameplay recordings to show off the progress. He pointed out that the gameplay in the recordings may look a bit less smooth than it actually is, as they were recorded directly from the system using FFmpeg.

Of course, there are still limitations. The biggest one is that WoW64 (Wine’s compatibility layer for running 32-bit Windows apps in a 64-bit environment) doesn’t currently work. The OpenBSD port is therefore limited to 64-bit Windows software.

The built-in Wine test suite is also disabled for now. Some of the tests need access to the X server, and some just hang (though the developers have not seen this in their own real-world testing with a large number of games).

For anyone wanting to play around with the port, Frohwein recommends starting with the 64-bit version of Notepad++ (a fairly light Windows app). He also suggests running Wine under a separate unprivileged user account until additional security restrictions can be implemented.

Importantly, Wine has not yet been officially accepted into the OpenBSD ports collection. The current submission is a work in progress which is being proposed for testing, feedback and review by the OpenBSD developers.

Still, given OpenBSD’s very strict security model and the technical difficulties of the task, getting Wine to run modern Windows apps and indeed some of the more demanding games is a significant accomplishment. If it does eventually make it into the official collection, it would go some way toward extending the range of software available to OpenBSD users.

For more details, see Frohwein’s announcement.

LibreOffice continues to enjoy strong demand following the release of version 26.8 in August. According to new figures from The Document Foundation, the open-source office suite recorded 9.4 million downloads over eight weeks, from August 24 to October 18, averaging more than one million downloads per week.

Even more impressive, LibreOffice’s total downloads for 2026 have already surpassed the entire 2025 figure, with ten weeks still remaining in the year.

The latest numbers follow the record-breaking first week of LibreOffice 26.8, which saw 1,031,162 downloads shortly after release. Before the announcement, weekly downloads were slightly below one million but have remained above since.

And those 9.4 million downloads don’t tell the whole story. TDF explains that Windows updates are counted separately, as are downloads of older LibreOffice versions, which also continue to attract considerable interest.

To provide a broader picture, the foundation shared website traffic statistics for the same period. The main download website recorded 11.4 million visits, the Windows update website received about 90 million visits, and the site serving older LibreOffice releases registered nearly 39.7 million visits.

Of course, these figures represent website visits rather than actual downloads or installations, so they shouldn’t be added to the reported 9.4 million total.

As for what’s driving the growth, TDF acknowledges that it cannot provide a definitive answer. Since LibreOffice downloads are anonymous, the organization has no reliable way to determine exactly why more people are choosing the software.

“We like to think that the consistency of the LibreOffice project – which has been championing the concept of digital sovereignty and standard document formats for years – and the robustness of the software, which has never sought to be a clone of the most widely used office suite on the market but has always strived to forge its own path, are two very important factors that, in the long term, represent a significant advantage over all other products.”

Whatever the reasons, the numbers are impressive. This suggests interest in LibreOffice remains strong well after the initial excitement around version 26.8. And with more than two months left in 2026, the project is on track to finish the year with substantially more downloads than in 2025.

I'm looking for a script that uses arp poisoning to impersonate the network DNS server and blocks all requests to ad servers.

Connect the device to any network and you've automatically got ad blockers for all devices without configuring anything.

Hacking for good.

Pipepipe doesn't play soundcloud songs for me since a couple of days and it is marked as legacy anyway. Firefox doesn't play songs, and vanadoum also has issues sometimes.

What do you use or recommend to listen to sets on soundcloud?

cross-posted from: https://lemmy.world/post/53413788

License: MIT

I couldn't find any app in the stores that tracked allergy levels based on location, even an approximate one, so I built my own.

It shows 15 types of pollen for wherever you are in Italy. Forecasts come from Open-Meteo (CAMS) and real measurements from ISPRA, and next to each value the app tells you which of the two it is, or if it's just an estimate.

There's a symptom diary that takes a few seconds a day. After a while it shows which pollens match your worst days, and you can export it as a PDF for your allergist. It also has alerts and a home screen widget.

No account, no ads, no trackers, and it doesn't need Google Play Services.

The app is only in Italian for now, since the data only covers Italy.

APK: https://github.com/lorenzocaputodev/allergy_radar/releases/latest
Source: https://github.com/lorenzocaputodev/allergy_radar