News

2022-08-30 – Christian Hesse

Recent changes in grub added a new command option to fwsetup and changed the way the command is invoked in the generated boot configuration. Depending on your system hardware and setup this could cause an unbootable system due to incompatibilities between the installed bootloader and configuration. After a grub package update it is advised to run both, installation and regeneration of configuration:

grub-install ...
grub-mkconfig -o /boot/grub/grub.cfg

F-Droid is always commited to distribute FOSS Android apps. Building free
software from source for Android comes with a different set of challenges
from GNU/Linux distros like Debian. Android apps are cross-compiled: they
are not built on the same OS as they run. On top of that, Android provides
only a barebones set of libraries built-in. Like the Java ecosystem, apps
are expected to fetch library binaries from Maven repos and build them into
the app. To ensure that the app is only built with FOSS deps, we develop a
scanning system in fdroidserver to restrict the dependency source and find
problematic dependencies.

F-Droid forbids unknown Maven repos and trusts only some well-known Maven
repos since
2015.
From then on,
some
more
repos
are
added
to the
list. Currently there are 8 Maven repos we trust:

• Maven Central – Google Maven Repo – JCenter – OSS Sonatype – OSS JFrog –
  JitPack.io – Clojars – CommonsWare – Gradle plugin repo

In 2020, JAR and AAR files embeded in the source code were
forbidden and
these trusted repos became the last weak point. We rely on them to provide
only FOSS libs. However, none of them are guaranteed to do so and they have
been a big source of non-free libs sneaking into the APKs.

The Maven Central repo is “the largest collection of Java and other open
source
components”
and a default source of libraries for Maven and Gradle “Serving Open Source
Components Since 2002”. The vast majority of
libraries used in Android apps, outside of Google’s own, are fetched from
Maven Central. It’s one of the most established and well-known Maven
repos. Maven Central has strict requirements that the source
code
and the source control system
information
should be provided, and the license should be
declared.
It also requires that the group ID should match the owner’s domain and the
files should be signed. Furthermore, Maven Central supports reproducible
builds
in a first class way which is a big help for ensuring that apps are 100%
free software.

Everything sounds too good to be true. Unfortunately, it is. Though they
declare that Maven Central is “OSS Repository
Hosting”,
they don’t require that the libs hosted on there are FOSS. Sometimes we find
that a
non-free
lib was
pulled from Maven Central and have to disable lots of affected versions of
published apps.

Are those open source libs hosted on Maven Central trustable? No, not
really. Some libs are tagged with a FOSS license but the source JAR files
are empty. What is worse is that they even encourage uploading a dummy
source JAR file of the sources to pass the
requirements which makes
their requirement totally meaningless. The declared license information may
just
be
wrong and
the source control system information just points to a random
link or a
repo with binary jars
only. Another
common case is that the lib itself is “open source” but it depends on other
proprietary
libs.

Other trusted Maven repos also have problems. The Google one hosts many
proprietary libs, of course, and the open source libs may
depend on
those proprietary one. The OSS Sonatype and JCenter repos are synced with
Maven Central, and include some extra libs. JitPack.io hosts whatever is
built from GitHub, without checking the
license or if
there is any binary in the repo, let alone the dependencies. Clojars and
Gradle plugin repo don’t have a license requirement either. The java
packages from Debian and the CommonsWare repo are pretty good but barely
used.

Given our limited resource and the situation, this may be an endless fighting. But we are getting more weapons. Thanks to our binary scanner, we have found lots of libs that depend on non-free deps in these Maven repos, most of which are from Maven Central. In the future we may scan the dependency map to find them before the build. However, this can’t help find libs with non-free license. Those non-free libs in our block list are mostly found by chance and experience. We are now working on more reliable methods for the future.

This week, the Fuchsia team shared a new proposal titled “ADB on Fuchsia” that shares the team’s intention to support ADB for controlling devices and the reasoning behind wanting to do so. At present, the core “fx” and “ffx” tools used to control Fuchsia devices are only compatible with Linux and macOS computers. And while there’s an effort to get ffx running on Windows, that’s not projected to be completed until the end of 2022. Sadly, ADB for Fuchsia won’t work for consumer Fuchsia devices, such as the Nest Hubs, since Goolgle states that it will only be available during early development phases of Fuchsia devices.

In 2020 during the height of the pandemic, Connor Leahy, co-founder of EleutherAI and CEO…

The post Episode 3: When hackers take on AI: Sci-fi – or the future? first appeared on Voices of Open Source.

Mehfil-e-Sama – Qawwali – ARY Qtv

Subscribe Here : https://bit.ly/3dh3Yj1

#ARYQtv #MehfileSama #Qawwali

Official Facebook : https://www.facebook.com/ARYQTV/
Official Website : https://aryqtv.tv/
Watch ARY Qtv Live : http://live.aryqtv.tv/
Programs Schedule : https://aryqtv.tv/schedule/
Islamic Information : https://bit.ly/2MfIF4P
Android App: https://bit.ly/33wgto4
Ios App: https:https://apple.co/2v3zoXW

reis novela , reis novela completa , assistir reis novela completa , reis novela da record , novela de reis , assistir novela reis completo gratis , reis novela da record completo , quero ver a novela reis , ver novela reis , assistir novela reis online , assistir novela reis online gratis , reis novela assistir , reis novela todos os capitulos , reis novela online , novela brasileira reis , reis novela completo , a novela reis completo

La gestion numérique interdépartale a récemment mis à jour la liste des logiciels gratuits recommandés par l’État, et il y en a beaucoup: vous pouvez dessiner quelques idées pour une utilisation quotidienne. Près de dix ans se sont écoulés depuis que l’État offre chaque année …
#LEtatfrançais #veutfaire #installercette #listelogiciels
Gestion numérique entre les nouveaux départements – La nouvelle met à jour la liste des logiciels gratuits recommandés par l’État, et il y en a beaucoup: vous pouvez dessiner plusieurs idées pour votre utilisation quotidienne. Cela fait près de dix ans que le pays a proposé, chaque année, une liste de logiciels gratuits dont l’utilisation est recommandée pour les affaires et les particuliers. L’objectif est simple: promouvoir l’utilisation de cette catégorie de logiciels et limiter les programmes de propriété. Cette liste a été mise à jour tout au long de l’année par la gestion numérique entre les mission, mais aussi par Etalab, l’administration publique française qui a proposé d’améliorer les services publics et les actions publiques grâce aux données. Il y a quelques semaines, une liste mise à jour a été publiée dans la version PDF, qui permet à tout le monde d’obtenir des idées concrètes sur le contenu. Petites étapes pour le seuil, grandes étapes pour l’administration: La liste des logiciels recommandés est publié dans PDF: https: // t / awbnfaovkh

… et dans Markdown https: // t / 7ebfqegrod et org-mode https: // t / sucpxtcd5. 2xjmhimwiv – Code.gouv 4 août 2022

Un logiciel gratuit qui est plus ou moins connu

La liste publiée compte près de 300 logiciels libres, ce qui fait donc partie de la base du logiciel entre les motos. Parmi eux, il doit y en avoir que vous connaissez, comme LibreOffice, WordPress, VLC, Mozilla Firefox, Chromium, Filezilla ou 7ZIP. Cuvee 2022 comprend plusieurs nouvelles fonctionnalités, notamment Raspberry Pi OS, le système d’exploitation officiel de la machine Raspberry Pi, le logiciel de modélisation de mélangeur 3D ou Kleopatra, le gestionnaire de certificat pour les opérations de chiffrement. Cette liste a de nombreux logiciels utilisés, en particulier destinés aux professionnels, mais la plupart des individus peuvent être inspirés par leurs besoins personnels. Certains logiciels ne sont plus recommandés

Lorsque certains logiciels gratuits sont entrés dans la liste, d’autres sont partis. La décision de ne pas recommander le programme est parfois justifiée. Par exemple, Audacity, qui fait partie de Sill depuis plusieurs années, a été publiée cette année en raison de l’acquisition, à la fin de 2021, par la Russian Muse Group Company, qui a recueilli les données des utilisateurs. Dans d’autres cas, nous ne connaissons pas la raison. Phpbb, une plate-forme qui permet C