SDF Chatter

I can't stop thinking about how the dog was militarized. It looked like a working breed, but I doubt he was bred to commit war crimes.

To celebrate MARCHintosh, today we're restoring a very special Italian-market PowerBook Duo 230.

Image description: a flattering drawing of a fridge held with magnets on fridge. At the bottom of the drawing is written "fresh".

The official microG OS project (https://lineage.microg.org/) leaked their private keys for logging into their servers and signing releases:

https://github.com/lineageos4microg/l4m-wiki/wiki/December-2025-security-issues

We make our official builds on local machines. Our signing machine's keys aren't ever on any storage unencrypted.

Our roadmap for improving security of verifying updates is based on taking advantage of the reproducible builds. We plan to have multiple official build locations and a configurable signoff verification system in the update clients also usable with third party signoff providers.

We don't have faith in any available commercial HSM products being more secure than keeping keys encrypted at rest on the primary local build machine. Instead, we're planning to develop software for using the secure element on GrapheneOS phones as an HSM for signing our releases.

Tags:

• 2026030500 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, Pixel 10, Pixel 10 Pro, Pixel 10 Pro XL, Pixel 10 Pro Fold, emulator, generic, other targets)

Changes since the 2026030200 release:

• full 2026-03-05 security patch level
• integrate extra security patches not included in the Android Security Bulletin from the March 2026 Android 16 security tag release
• update Pixel kernel sources to CP1A.260305.018 (Android 16 QPR3)
• update Pixel firmware and a large portion of the driver libraries/HALs to CP1A.260305.018 (Android 16 QPR3)
• fix Network permission enforcement for MediaPlayerService clients by closing a bypass caused by an upstream Android vulnerability for INTERNET permission enforcement caused by using case-sensitive rather than case-insensitive string comparisons
• rename geocoder options to "GrapheneOS server" and "OpenStreetMaps server" since we're now self-hosting Nominatim instead of providing a proxy to the OpenStreetMaps instance

All of the Android 16 security patches from the current April 2026, May 2026, June 2026, July 2026 and August 2026 Android Security Bulletins are included in the 2026030501 security preview release. List of additional fixed CVEs:

• Critical: CVE-2026-0039, CVE-2026-0040, CVE-2026-0041, CVE-2026-0042, CVE-2026-0043, CVE-2026-0044, CVE-2026-0049, CVE-2026-0052, CVE-2026-0073
• High: CVE-2025-22424, CVE-2025-22426, CVE-2025-48600, CVE-2025-48612, CVE-2026-0016, CVE-2026-0036, CVE-2026-0048, CVE-2026-0050, CVE-2026-0053, CVE-2026-0054, CVE-2026-0055, CVE-2026-0056, CVE-2026-0059, CVE-2026-0060, CVE-2026-0061, CVE-2026-0062, CVE-2026-0063, CVE-2026-0065, CVE-2026-0067, CVE-2026-0070, CVE-2026-0074, CVE-2026-0076

For detailed information on security preview releases, see our post about it.

Changes in version 146.0.7680.65.0:

• update to Chromium 146.0.7680.65
• re-enable use_relative_vtables_abi now that it's compatible with Control Flow Integrity (enabled by GrapheneOS) on arm64 / Android

A full list of changes from the previous release (version 146.0.7680.31.0) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

quasselkopf.de is a single user Mastodon where the sole user is heavily using an LLM to generate posts. They're using AI generated concern trolling to annoy and harass people.

Here's an example of them bothering someone else with AI generated replies:

https://quasselkopf.de/@kranzkrone/116176600327746998

Here's where they began doing it towards us:

https://quasselkopf.de/@kranzkrone/116176504616907351

We posted a constructive reply with useful information so they doubled down on trolling. We called it out and got targeted with abuse.

http://archive.today/2026.03.07-102210/https://www.nytimes.com/2026/03/07/world/europe/europe-iran-trump-war-dilemma.html

A week into the American-Israeli military campaign against Iran, Europe’s leaders remain united in their misgivings about an operation they never asked for. But the reality is, they are being dragged into it more by the day, and that is causing political and diplomatic headaches from London to Berlin.

The tensions are visible in the growing gap between the words of European leaders and the orders they are giving their military commanders to send warships, planes and other combat equipment into the Middle East.

“We are not at war,” President Emmanuel Macron of France said on social media Thursday. “We don’t want to go to war,” Prime Minister Giorgia Meloni of Italy told broadcasters the same day. “We are not joining the U.S. and Israeli offensive strikes,” Prime Minister Keir Starmer of Britain said in Parliament on Monday.

Yet France scrambled Rafale fighter jets over the United Arab Emirates after a drone attack hit a French naval base in Abu Dhabi. And Mr. Macron has ordered the aircraft carrier Charles de Gaulle to the eastern Mediterranean Sea, where it could take part in a French-led effort to keep open strategic shipping lanes. On Thursday, France said it would supply Lebanese armed forces with armored transport vehicles to help combat Hezbollah.

In Italy, Ms. Meloni agreed to deploy air-defense forces to Persian Gulf countries to defend them from Iranian missiles and drones. Italy has also allowed American planes to use its bases, though Ms. Meloni emphasized that it was for logistical support, not offensive operations.

It fell to the German chancellor, Friedrich Merz, to sum up Europe’s predicament after he sat next to Mr. Trump in the Oval Office on Tuesday, listening to the president’s bullish briefing on the military campaign.

“We don’t know if the plan will work and whether the military strikes from abroad will enable political change from within,” Mr. Merz said. “This plan is not without risk, and we too would have to bear its consequences.”

Despite expressing those doubts, Mr. Merz has faced a backlash at home, partly because he offered no defense when Mr. Trump criticized Mr. Starmer and Prime Minister Pedro Sánchez of Spain, both of whom had denied U.S. planes access to their countries’ bases. Mr. Merz said later that he stuck up for them over lunch with Mr. Trump.

For Europe’s leaders, there is no perfect way to thread the needle between assuaging Mr. Trump and limiting domestic outcry. A week into the war, Britain has now quietly provided the United States with significant military support. But that has failed to insulate Mr. Starmer from Mr. Trump’s ire, perhaps because the prime minister, likely wary of criticism at home, has not matched that private support with public endorsement.

Europe is caught in a deepening dilemma. On the one hand, its leaders need to protect their citizens stranded in the region, honor defense pacts with Arab states and, in some cases, allow the United States to use their military bases to avoid antagonizing President Trump.

On the other, they need to avoid too overt a show of support for American actions, to avert a military backlash from Iran as well as electoral consequences from their restive publics, which are anxious to avoid the quagmire of another Middle East war.

Dataset:

#Sat Mar  7 09:44:12 UTC 2026
-7      https://lemmy.sdf.org/post/745333 NATO Isn’t Really About Defense, and It Never Was "Ukraine"
0       https://lemmy.sdf.org/post/6942963 Israel Is Silencing Internal Critics "Israel"
16      https://lemmy.sdf.org/post/10956117 Turning Down Food Aid for Millions of Children Reflects Shocking Political Callousness "Yemen"
4       https://lemmy.sdf.org/post/20326760 This Is What Happens When Black Women Challenge Trump "Lebanon"
9       https://lemmy.sdf.org/post/25976760 Can Rahm Emanuel Flip the Script Again? "Syria"
21      https://lemmy.sdf.org/post/36570024 The Achingly Simple Lesson That Democrats Seem Determined Not to Learn "Iran"
19      https://lemmy.sdf.org/post/36658052 How to Think About What’s Happening With Iran and Israel "The Ukraine"
23      https://lemmy.sdf.org/post/41963200 These Peace Negotiators Say It’s Time to Give Up on the Two-State Solution "Qatar" 
74      https://lemmy.sdf.org/post/48411017 "" "Venezuela"
11      https://lemmy.sdf.org/post/48448385 "" "The Ukraine" 
7       https://lemmy.sdf.org/post/48486499 qrstuv appreciation thread "The Ukraine"
28      https://lemmy.sdf.org/post/51573956 The Folly of Attacking Iran "Iran"
21      https://lemmy.sdf.org/post/51900724 The Fan tasy of a Comfy Retirement Has Always Been a Mirage "Lebanon"

After rumors that a McDonalds is opening just up the street in the old vacant Rite-Aid building on Broadway, today Dick’s announced it’s prepared to compete against it with an even sticker, hairier ball pit.

“Everyone knows we’ve got the better burgers and fries no one would fake barely taking a bite of and now we’re going to have the most sticky, diseased ball pit in the city too,” said Dick’s CEO Jasmine Donovan. “And you can bet I’m not just dipping the tip of a socked toe in it like some prissy McDonald’s CEO—I’ll be diving in face-first to gargle those balls for all to see.”