A frog who wants the objective truth about anything and everything.

Admin of SLRPNK.net

XMPP: prodigalfrog@slrpnk.net

Matrix: @prodigalfrog:matrix.org

  • 1 Post
  • 40 Comments
Joined 2Y ago
cake
Cake day: Jul 04, 2023

help-circle
rss

If you’d be interested in a tracker-like DAW, Renoise has a native Linux version.

For more traditional DAWS, Bitwig and Reaper are the two best Linux native options. Reaper is quite cheap, and also offers a trial version that just nags you like winrar.


We put together a privacy guide with different tiers of inconvenience, which you may or may not find helpful:

https://slrpnk.net/post/17910446


Glad to hear they’re improving the 2FA! I did forget about their office suite and file storage ability, which does set them apart from all except Proton.


Tuta does not allow you to use third party email clients like Thunderbird.


Offering a free tier lets people try the service, and encourages them to become a paid user if they run up against the limits of the free tier.


From what I understand, Tuta may have a slight edge theoretically, but email itself is a pretty poor protocol when it comes to privacy.

Tuta was forced by court order to implement a message logger for an individual, but AFAIK all of their previous messages were encrypted and could not be read by Tuta, and therefore the Government could only see new unencrypted messages coming in before they were encrypted.

Disroot only recently implemented at-rest encryption, so that should be fairly solid now. Posteo also allows you to encrypt your inbox and calendar at rest.

Even with that, consider all private email providers as mostly just to avoid surveillance capitalism (to prevent your data from being mined and sold), but with only marginal protection from state agents.


Tuta and Posteo are both pretty excellent (posteo is cheaper, but has a few less options that might be a deal breaker if you need them, like custom domain support).

Disroot is a good free option, and they offer custom domains after a one time donation.

Mailbox is okay, though they are known to have a very odd 2fa, and will recycle your address if you ever stop paying, allowing others to claim it and potentially impersonate you.

Posteo is unique in that they’ll never delete your account for inactivity, or even if you stop paying, where they’ll let you access and read emails, but not let you send them until you pay again.

Edit: apparently Tuta is going downhill according to others here, which is unfortunate :(


Depends on your needs. Matrix can mostly replace the functionality of Discord, which makes it stand out despite its flaws.

If you just need group chat, encryption, and 1 on 1 calls, XMPP is easily self hosted and highly scalable.

SimpleX seems to be another decent option that’s decentralized.



AFAIK, GrapheneOS supports the Pixel Tablet, which is probably the only truly secure android tablet on the market.

If you’re willing to sacrifice some UX, there are some Linux tablets. A cheaper option could be a 2-in-1 chromebook that allows installing Linux.

Otherwise, you could try to degoogle your Samsung tablet by installing LineageOS on it, if it’s supported.


From what I’ve gathered recently, the Mullvad browser left unmodified and combined with a VPN is one of the most private browsers you can use, short of using Tor.


I’m coming around to this conclusion, and updated the post to reflect that. For something as important as a browser, it’s a little concerning the Librewolf dev team is so short staffed, but they do seem to be holding their own. I hope they’re able to stick around long term.


That’s a well reasoned take, honestly.

As I investigate other options to LW, all of which also require a certain level of trust and/or diligence, ultimately I’m finding LW seems difficult to replace, as it does walk that line between ‘good enough’ security/privacy and convenience. The Phoenix project seems promising, but so far is only convenient on a few distros, leaving Windows users with LW, or perhaps Zen.


To clarify, the only relevancy PrivacyGuides has here is that their forum is where I found the link to the Arkenfox github issue, and how their arguments against Librewolf appeared to have been potentially validated by said github issue.

The main concern is that github issue, where one of the main developers of Arkenfox, from which Librefox is derived, claims:

LW since fxbrit left/died/who-knows has gone to shit - I worked with him behind the scenes to make the right choices and while he would do his own analysis, we always agreed, and his voice influenced them. Now they don’t know what they are doing, and in fact have compromised security and make really stupid decisions. Same goes for all the other forks - really dubious shit going

And directly after which a Librewolf team member then voices agreement that Librewolf’s quality control has degraded since the departure of fxbrit.

Now it could be that the Arkenfox dev is exaggerating, and tbh he comes off as a bit of a prick later in that github issue, but overall, I’d say it merits at least some concern (though perhaps less than I originally thought)


According to their intructions, it would seem it’s trivial to install and receive updates on the supported linux distros:

By default, Phoenix is installed & updated via your operating system’s package manager. This allows for fast, easy updates & fixes as needed, right with the rest of your system!

Windows isn’t support though, so it would be a far more manual process there.


Another user here mentioned the Phoenix project, which may be a good solution for us, as I share the same goals.

I haven’t looked into Zen, I’ll do a dive on that now.


Cheers for mentioning that, I hadn’t heard of Phoenix, but looks like an excellent alternative.


I haven’t given it any research since it’s chromium based.


Unfortunately, adding any addons to the Mullvad browser would defeat the purpose of using it somewhat, since it would defeat the anti-fingerprinting methods.

The Librewolf team member said they’re falling behind on keeping the arkenfox tweaks up to date even as they put out new releases. Perhaps they are able to keep up with Firefox security updates despite that, which I suppose would still make them a better option than vanilla Firefox, but it does give reason to keep a closer eye on them.


I believe Brave is better from a fingerprinting perspective, if only due to it being easier to blend in with compared to Cromite, though Cromite has far better security AFAIK.


I agree on Brave, and I also avoid it so as not to solidify the chromium browser dominance any further.

However, from all I have read, Firefox Mobile based browsers truly are less secure from a technological standpoint. I think for most people, Firefox Mobile is secure enough for it not to be enough of a deciding factor to use a chromium browser, but objectively it is worse. Mull was making the best of that despite the downsides, so hopefully the IronFox fork succeeds on mobile.

And despite their recommending Brave, I think the arguments against LibreWolf do have some merit.


If you use the LibreWolf browser, you may want to read this.
**Edit: I may have given too much weight the the Arkenfox dev's assessment. Upon more research and consideration, I think Librewolf could still be a better option compared to straight Firefox, though hopefully the Librewolf team receive more help/contributors in the future to ensure its success long term.** ------ I've been a user of Librewolf for a about a year now, and it's always served me pretty well as a nice easy way to get a hardened Arkenfox Firefox. However, recently I was curious why Librewolf wasn't recommended on PrivacyGuides, and took a look through [their reasoning on their forum](https://discuss.privacyguides.net/t/librewolf-browser-firefox-fork/148). That thread spans multiple years, and for the most part I thought their reasons for not including it were a bit unfair, especially after Librewolf started offering automatic updates. But towards the end of that thread in October, a Privacy guide team member [posted](https://discuss.privacyguides.net/t/librewolf-browser-firefox-fork/148/202) a link to the Arkenfox github issue tracker, where a Librewolf team member reveals how the project appeared to have lost steam after a critical member left, and they are [struggling to keep it up to date](https://github.com/arkenfox/user.js/issues/1906#issuecomment-2443323664) with the latest Arkenfox updates, despite putting out new releases. I'm not sure if those problems have been resolved since that time. One of the maintainers did mention they're [still short staffed](https://codeberg.org/librewolf/issues/issues/2169#issuecomment-2563150) in this topic on taking over maintaining Mull. After considering the arguments for and against in the PrivacyGuides thread, I think their conclusion for not recommending does have some merit. Using Librewolf adds an additional layer of trust, not only to not be malicious (which I don't suspect they are) but to also be able to adequately fulfill what they set out to do reliably. Another big part of them not recommending it was the existence of the Mullvad Browser, which I didn't realize was in fact a very well hardened version of Firefox (essentially the Tor browser without the Tor part), and is far more effective for private browsing compared to Librewolf or an Arkenfox'd firefox. Ultimately you'll have to come to your own conclusion, ~~but personally I'll be switching back to Firefox as my convenient daily browser full of addons, alongside the mullvad browser for (more) private browsing.~~
fedilink

Nice thing about Posteo, and which is AFAIK unique to them now, is they will never delete your account even if you stop paying. If you cease payments, they will let you log in and continue to receive email, but you cannot send emails until you pay again.

The only way your account gets deleted is if you manually delete it yourself.

Proton used to say your account would never be deleted from inactivity if you’d made at least one payment for premium service, but that policy was walked back last year I believe.


Disroot has an encrypted inbox available via an opt-in beta, so hopefully it becomes the default soon.



FYI, Posteo will never delete your account, and will still let you log in and receive emails even if you stop paying (you won’t be able to send emails until you pay the $1 a month again).

They apparently will only recycle your address if you explicitly delete your account yourself.



Mailbox.org is another good one.

EDIT: Apparently they recycle addresses, so if you ever cancel your subscription with them, someone could eventually sign up with your old address and receive any mail from places you didn’t switch over to a new address, which is concerning.


Posteo, Mailbox.org, and Tuta are all good alternatives.

EDIT: Mailbox.org will eventually recycle your address if you stop using their service. Something to be aware of.


You may want to give Freetube a try, which may avoid that issue (especially if combined with libredirect).


AirVPN has a pretty good reputation AKAIK, and their 2-year plans are cheaper than Mullvad and Proton.


The best replacement I’ve found is the Freetube client combined with Libredirect in the browser.


A while back I put together a pretty big list of free Linux games, along with their license info. A good amount of them are FPS games, hopefully one of them interests you 🙂

I guess for tactical shooters, Urban Terror might qualify?


The community is rightfully distrustful and dismissive toward a technology that is mostly used for scams and grifting.

The Folding Ideas video on crypto has yet to be adequately refuted.

If someone was earnestly looking for a way to privately transact, the best option I’ve seen is GNU taler, which doesn’t require any crypto or blockchains to accomplish its goal extremely well, it just needs wider adoption.


LBRY also uses a crypto back end, and LBRY coin (their crypto) is what odysee used before being bought out by Arweave. I wouldn’t recommend either, personally.


Please be aware, Odysee was recently purchased by a Crypto company that also acquired an NFT company.

For more info, see my comment here: https://slrpnk.net/comment/9749921

I would not recommend investing any time or money into the platform, as it will inevitably crash and burn as the owners walk away flush with cash while everyone else is left holding the bag.

Peertube is not ideal, but it is currently the only alternative that isn’t tied to a shady crypto scheme.



Apparently a few coop banks somewhere are adopting/have adopted taler, so hopefully it takes off.


Ahh, you’re the guys who posted over in reddit before your thread got locked that think it’s a good idea to promote Russian propaganda equally with Ukrainian content, because you don’t want to ‘Take sides’ politically. Closed source too, so that’s pretty much a dealbreaker right there, especially for Privacy focused users. We’ve been abused by closed source software for far too long to trust anything less.

You also have absolutely no plan on how to monetize, as others have said in this thread already.

I certainly won’t be supporting you, not with those values.



Sadly multiplayer compatibility due to anti-cheat is still a sticking point as has not improved that much overall.

It seems to have gotten a lot better lately with EAC games at least. Hunt Showdown getting official anti-cheat support due to the Steamdeck was a big one for me. And a bunch of other big games that I personally don’t play got support too, like Dead By Daylight and Apex Legends.