• 0 Posts
  • 33 Comments
Joined 2Y ago
cake
Cake day: Jun 21, 2023

help-circle
rss

GrapheneOS is the way to go with a Pixel phone. Wifi calling works just fine on my Pixel 8. As does VoLTE.


Mobile radio communication is encrypted between you and the tower. Newer protocols have better encryption then older. That’s why Stingray tracker is bad since it can force phones to use older vulnerable protocols.


Coming up with a decent domain name has been the challenge for me. You can’t really put on to your cv or so something like me@thebestmfofalltime.com. You can but that doesn’t sound very professional.


Choosing a decent service is usually the easy part (at least with the help of this community). The hard part is to change your email address everywhere.


As they use imap, caldav and carddav for email, calendar and contacts you can use any app you want e.g. thunderbird.

Edit: They even have a moving service so you can move your existing emails from gmail to them.


I’m using filen.io. E2ee and zero knowledge service from Germany. Their desktop client just works.


Haven’t actually tried but I have bad experiences with Linux and dual graphics laptops.


I game on Tumbleweed but on some rare occasions I use windows e.g. my gaming laptop doesn’t have Linux.


I only use LibreWolf on my pc’s and IronFox or Vanadium on my phone. All except Vanadium have uBlock Origin with all social media blocked. I also use Mullvad vpn with social media blocking at dns level. In addition where vpn is not configured I use Mullvad’s dns with all content blocking enabled. Of course no Meta or another social media apps on my Graphene OS phone (except Mastodon and Lemmy). As a cherry on top I use a Linux based OS (OpenSuse Tumbleweed) on my computers primarily (some Windows usage for some gaming).


MicroG is somewhat hacky solution that emulates play services. When you have proper play services you do have all the functionality available. Since it’s sandboxed play services don’t have any privileged access to the system thus can only access data which is available to any normal app.


If you have apps that require play services you can install them to another profile in GOS. Profiles stay active if you like and you can get notifications from other profiles as well. That way you can limit data exposure for play services and apps using them. I do this on my GOS and it works very nice. Though you should use Aurora store to get play store apps (you can get it from f-droid). Many apps from play store work well with out play services.


The same in the EU. All it needs is signal to any available mobile network.


Ran into this as well when I was testing it out (using Mullvad). It seems plausible. Or for some reason Mullvad’s ip addresses end up in some black list regularly that sites like Kagi use to block bots/spammer etc.



Mullvad has content and tracking blocking at dns level builtin (enabled in settings). Having it always on you don’t need to use private dns. If you use other profiles then set the private dns to one of mullvads. On my grapheneos install I use google play services only on another profiles then owner and have apps that require it only in those profiles.


The internet is what you get via your ISP. You’re talking about www which is part of the internet but not the internet itself. There are plenty of things to do on the internet that aren’t www e.g. email works over the internet and I’m not talking about something like gmail but the communication between email servers and between your email provider and you when you use imap or pop3.


Curious choice to write a c++ program for this instead of doing the same thing in a powershell script.

One feature it should have: delete itself after running to leave no traces of such a tool.


It depends on your threat model. Using tor via a know vpn endpoint does make you stand out and can be used to profile your traffic. One of the main points of tor is that all users look exactly the same.

If you have e.g. one user out of a 100 using a vpn endpoint instead of some residential ip address that user immediately becomes a much more interesting target. There is information floating around in the web that state actors have control over several entry and exit nodes.


You got most things right about UDP and TCP. They both work in the transport layer of the OSI model. They are also completely different protocols, related yes but independent.

UDP is “simpler” as it basically throws data packages in to the network and hope they reach their destination. TCP on the other hand has checks in place that verifies that a data package has actually reached its destination.


Doesn’t have a significant impact. Using Telegram (though third party OSS client called Forkgram) and Signal without Play services on pixel as well.


Enabling DoH with max protection probably solves that.


Use MS Edge

Use Chrome. Edge is a minority browser (has a market share of ~10 %). Using chrome though gives all your data to google ( so not recommended).



It does as well as setting your locale to en-us, timezone to utc and giving random output from canvas every time.

Edit: You can also enable a fixed size for you window. More precisely the area which is visible to content (and also to javascript). https://librewolf.net/docs/faq/#what-are-the-most-common-downsides-of-rfp-resist-fingerprinting



No google on device no tracking, and I don’t use google services anyhow (with first party clients anyhow). I do have google play services installed but no google account so they don’t have an identity to connect the data they might be able to collect from the phone. Only google service I use is youtube but that’s with third party clients only (FreeTube & NewPipe) over vpn of course.



Can’t they be both? Potato potahto.

It will destroy the Universe if we do that. /s


? is the start of the suffixes, & denotes a change in suffix Technically speaking they are query parameters not suffixes.


Can you give more details? What apps do you use? Anything worth noting? Thinking about doing this myself as well.


Here’s what I got when I upgraded: https://pcpartpicker.com/list/Kn3hsL. In addition I have two sata ssds (1 TB & 2 TB) for data storage. It’s similar to yours. For me performance was the priority. Doing most of my gaming on Linux.

Edit: As the ram in my build are expo models they run at 6000 MHz. No instabilities.


I’d say wait a few days to see if glibc-eac-bin gets updated. Could the name refer to easy anti cheat perhaps? The glibc is the official library that comes with Linux distros.