User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
NVAccess and the slow Erosion of trust: I still believe that NVDA is the best available screen reader, and I still donate monthly. These are just a chronicle of decisions that have made me go... Huh. What? stuff.interfree.ca/2026/05/20/nvaccess-and-the-slow-erosion-of-trust.html
12
15
9
0
User avatar
Andre Louis @FreakyFwoof@universeodon.com
3w
@fastfinge Hmm, I daily drive remote and don't mind whether it's core or addon, but that feature alone is invaluable. Did it need to be core? Probably not. Is it better for it in my personal view? Possibly. Did the 2026.1 issue where, if your network wasn't ready in-time, you jus wouldn't fail to connect to a server cause me some problems? Yes. Could it have been solved if it was still an addon? Yes, with 3 minutes with Codex/<insert LLM here or programming knowledge if you're cooler than me>
Core, I just didn't touch it. I waited and hoped it would get solved and 2026.1.1 might have solved it. I haven't rebooted recently to find out.
Remote on the whole though, absolutely necessary.
The rest of the article, no real comment. Haven't been adversely affected.
3
0
1
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@FreakyFwoof I completely agree that it's required. But does that mean it should be in core? I dunno. Like I say, reasonable people can disagree. But I notice that Apple has started moving apps (apple sports, apple invites, etc) out of the main OS so they can maintain and update them seperatly.
3
0
0
0

User avatar
miki @miki@dragonscave.space
3w
@fastfinge @FreakyFwoof IMO, putting it in core just shows how unserious NV Access is about the enterprise market. If they go on like that, they won't be displacing JAWS anytime soon. We need a RedHat of accessibility technology, because NV Access clearly aint that.
2
0
1
0
User avatar
Andre Louis @FreakyFwoof@universeodon.com
3w
@miki @fastfinge Interesting take, why do you say that?
2
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@FreakyFwoof @miki The more remote connections a screen reader makes, and the more possibilities it provides for an outsider to take control of a corporate machine, the harder it is to get corporate security people to let you install it. Jaws tandem had to solve the same problem, though.
1
0
0
0
User avatar
NV Access @NVAccess@fosstodon.org
3w
@fastfinge @FreakyFwoof @miki Remote is disabled by default, needs to be deliberately enabled, and is readily blocked by running NVDA in secure mode. Please explain how that is less secure than the similar offerings by other screen readers? Then tell me how those other screen reader can run while being completely blocked from the internet the way NVDA can if you don't trust it?
0
0
0
0
User avatar
miki @miki@dragonscave.space
3w
@FreakyFwoof @fastfinge Enterprises are deeply paranoid about software that can control your computer, and every screen reader can. If it lets employees install completely unapproved addons that run with screen reader permissions, and can potentially exfiltrate data to a random server somewhere, it's a no go. Especially if there's no vendor to take the blame if something goes wrong.
2
0
1
0
User avatar
Andre Louis @FreakyFwoof@universeodon.com
3w
@miki @fastfinge OK this is interesting. @ednun_p uses it on his work machines and some of the stuff he does I believe it's fair to say is highly, highly sensitive. I wonder how that plays out in that case?
1
0
0
0
User avatar
Andre Louis @FreakyFwoof@universeodon.com
3w
@miki @fastfinge @ednun_p Also companies could just block that port as many do, I'm sure tandem also has a blockable port as well, thus, no data going anywhere... Hopefully...
1
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@FreakyFwoof @miki @ednun_p You could, in theory, run your NVDA Remote server on any port you want. I don't know anyone who does. But you could.
1
0
1
0
User avatar
Helidonkey @ednun_p@tweesecake.social
3w
@fastfinge @FreakyFwoof @miki My company does disable that port inside their building but it seems not on wifi. I do agree though in principle if they new NVDA had it built into the core they probably wouldn't be happy. then again the other day I did try to unlock my machine remotely and it wouldn't let me. so something is going on to protect it clearly.
2
0
0
0
User avatar
James Scholes @jscholes@dragonscave.space
3w
@ednun_p Is the copy of NVDA that runs on secure screens configured to auto-connect for remote access? @fastfinge @FreakyFwoof @miki
1
0
0
0
User avatar
Helidonkey @ednun_p@tweesecake.social
3w
@jscholes @fastfinge @FreakyFwoof @miki yes. the funny thing is, every time I go into the secure screen it says connected
0
0
0
0
User avatar
NV Access @NVAccess@fosstodon.org
3w
@ednun_p @fastfinge @FreakyFwoof @miki Once again, NVDA Remote is disabled by default, blocked by secure mode, and NVDA can run happily completely isolated from the internet. Company IT security have regularly been more than happy with that, but if you know anyone who isn't, please have them reach out to us - we can't address an issue we don't know about.
0
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@miki @FreakyFwoof So wouldn't having it in core be better, in that case? That way remote access still works without employees having to install addons. Or would it be worse, because remote access now can't be disabled? I don't know enough about the corporate environment to know either way. But I'm starting to wonder if NVAccess does, either. This is my entire point: these decisions are hard, and require deep thought and deep study, both to make the best possible decision (there are no perfect decisions) and to understand how you got there.
1
0
0
0
User avatar
Andre Louis @FreakyFwoof@universeodon.com
3w
@fastfinge @miki Do remember that by default, Remote is opt in not out it's disabled on new installs.
1
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@FreakyFwoof @miki Right, but I am the one who decides if it gets enabled or not. Once NVDA is installed, the corporate security people have no control over that. But NVDA does have a corporate mode that disables addons.
2
0
0
0
User avatar
miki @miki@dragonscave.space
3w
@fastfinge @FreakyFwoof Disabling addons is not an option if you do genuinely need some, for example to make some internal piece of software accessible, or even to give your employees a better speech synthesizer than what Microsoft offers by default. What they should be doing is a group policy option to control which addons can be used and from where. This would allow you to place the allowed addons in a directory that the user has no write permissions for. This doesn't fully solve the problem because your addons still need to be GPL and you need to ship source code, making it much harder to develop and sell expensive enterprise addons for extensive enterprise software, but it's at least a step in the right direction.
1
0
0
0
User avatar
NV Access @NVAccess@fosstodon.org
3w
@miki @fastfinge @FreakyFwoof We're working on that. For now, your company can setup the add-ons they approve, and THEN set NVDA to run in secure mode. But yes, we are aware of the limitations of that and planning an improved corporate mode. Noe news on that yet though.
0
0
0
0
User avatar
NV Access @NVAccess@fosstodon.org
3w
@fastfinge @FreakyFwoof @miki Secure mode DOES disable you making remote connections as well: www.nvaccess.org/corporate-government/#remoteAccess
0
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@miki @FreakyFwoof Yes, this is another factor. But once again: jaws tandem is built in. Why is NVDA remote different? Again, I'm not sure what I think here. But I do know that the question is complicated.
0
0
0
0
User avatar
Andre Louis @FreakyFwoof@universeodon.com
3w
@fastfinge It did make it easier to make damn sure I had remote at logon, but yeah. Otherwise...
0
0
1
0
User avatar
Amir @amir@dragonscave.space
3w
@fastfinge @FreakyFwoof Right, but it's Apple and we know that they will take care of those apps in due time. With the Remote add-on in particular, I mean the original Remote, it was oftentimes updated terribly late as if it had been ditched by its own devs altogether.
1
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@amir @FreakyFwoof Could NVDA have taken over maintaining the addon, but not have made it part of core? That way, it could be updated separately from NVDA. Maybe that would have made maintaining it harder somehow? I don't know. To repeat myself again: "I'm probably missing context, so I'll just have to trust that NVAccess knows things I don't." That phrase is doing far too much work, I think.
1
0
1
0
User avatar
Amir @amir@dragonscave.space
3w
@fastfinge @FreakyFwoof Yeah - maybe. But they rarely do such a thing these days. At least I haven't seen such an add-on being maintained by NVAccess.
2
0
1
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@amir @FreakyFwoof And the idea that "We've never done it that way, because we don't do that, so it can't be done." is another alarming sign of shallow decision making. Also, NVDA has never moved an addon into core. So they're already doing things they've never done before.
0
0
1
0
User avatar
NV Access @NVAccess@fosstodon.org
3w
@amir @fastfinge @FreakyFwoof Great discussion - anyone care to ask US why we brought NVDA Remote into core? No, ok carry on then....

(If anyone IS interested), as Samuel guessed in his article, it helps simplify the API and security bringing that into core and also allowing you to have it run on startup without allowing add-ons to run at login, etc, etc.)
1
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3w
@NVAccess @amir @FreakyFwoof I did check GitHub for the relevant discussion. Finding no discussion about the tradeoffs I was left to guess.
1
0
0
0
User avatar
NV Access @NVAccess@fosstodon.org
3w
@fastfinge @FreakyFwoof @amir If only there was someone you could ask about why NV Access has done things..... If only NV Access themselves were contactable and able to answer questions.....
0
0
0
0