Young humanoid in the UK. Proudly LGBT. Slava Ukraini! | they/them

aspe:keyoxide.org:LJEENB2IEL3U4MEJRP7GHBOY4U

Formerly of:

  • 11 Posts
  • 124 Comments
Joined 1Y ago
cake
Cake day: Jan 28, 2024

help-circle
rss

Y’all are seriously still using the internet?


I believe Librewolf and Mullvad Browser change your timezone, either to UTC or to Atlantic/Reyjavik (for some reason; probably a bug on my end). Tor Browser likely does the same, but I’m not sure.


I’ll probably switch to LineageOS and harden it myself if GOS starts floundering, but that would be purely to get my money’s worth out of the hardware.

After that, I’d go for my alternative setup of dumb-ish phone + laptop + refurbished iPod.


Fairphones and TeraCubes are ethical hardware. Fairtrade, repairable, and possibly open-source (I’ll have to double-check that).

GrapheneOS is customisable, yes, but LineageOS is moreso.

Magisk is a tool used to root Android devices (essentially adding an su binary to give the user root access). However, this makes the system inherently less secure, and undermines the whole point of GrapheneOS.


The only real downsides of GOS are that it only supports Pixels, and that it doesn’t support microG (I can see the appeal of Sandboxed Play Services, but I would personally have preferred microG).

  • Privacy: GrapheneOS
  • Security: GrapheneOS
  • Customisability: LineageOS
  • Functionality: (Subjective)

I would only recommend three groups of devices:

  • Pixels
  • Fairphones
  • TeraCubes


Sorta. It’s the same engine, but it is generally less private and less secure than actual Chromium.

DivestOS used to have some handy tables, before they shut down the website.


Huh, I didn’t know that. I wonder if any of the rest have implemented that since…



  • uBlock Origin
  • NoScript
  • JShelter
  • CSS Exfil Protection
  • Libredirect
  • Indie Wiki Buddy

I also sometimes use the IceCat extensions, too:

  • LibreJS
  • LibrifyJS
  • Reveal hidden HTML
  • Searxes’ Third-party Request blocker
  • Workarounds for nonfree JS

Matrix is the only one I actually use other than the rest.

There is also XMPP, SimpleX, Threema, Briar, cwtch, Tox, and Delta Chat.


Transcribro is pretty good, and available on Accrescent, but only for English (and American spelling only, at that).


According to the tests I’ve run, IronFox, Brave, and Tor Browser are the only options (in my opinion).

Cromite also works, as does Vanadium, but they’re… basic, and the fingerprinting resistance could be better.


I use SearXNG. I would highly recommend.


Yeah, I’m pretty sure System1 divested themselves of it.

They still own Startpage and Startmail, though.


  • Yewtube is hosted by unixfox, who also happens to be one of the main developers behind Invidious.
  • I’ve talked to the person behind Nadeko on Matrix., and they seem nice.
  • Not sure about the rest, but a poison Invidious instance is unheard of. Still, doesn’t hurt to ask questions like this once in a while!

ffs. Guess I’d better move everything off and close my account, then.




Posteo is probably what you’re after. Only €1 per month!



Thanks, but I’ll pass. Currently, it’s just a random house; but if I blurred it, it would stick out like a sore thumb and possibly attract attention.



  • DAITA adds noise to your traffic, in order to prrvent AI packet analysis. However, most people don’t need this, and it limits your server options as well as increasing your bandwidth usage. Leave it off unless you need it.
  • Multihop routes your traffic through two Mullvad servers, in order to further obscure your IP address. Turn it on for added privacy, unless you have problems as a result.
  • Local network sharing means you can still connect to devices on your home network while using Mullvad VPN. This includes things like networked printers, network attached storage, and the web interface on your router. Turn on unless you’re sure you don’t need it.
  • API access just checks to make sure you can connect to Mullvad at all. The API is what gives you the list of servers and provides your computer with the connection info. Have a look if you’re interested, but you shouldn’t need to change anything.
    • If you are on a hostile network, this part of the settings also lets you enable bridges, which can help to circumvent local VPN blocks.

Oh, I thought they meant firmware.


LineageOS or /e/OS would be my picks. Graphene and Calyx are better, but likely don’t support the device in question.

RIP DivestOS.



Well, this wouldn’t be my main email; it would be just for the site. Thank you so much!



Can I trust Combell?
I recently transferred one of my domains over to Combell (a registrar based in Belgium), and they gave me an email inbox under my domain as part of the package. However, I’m wondering if it’s trustworthy. If it isn’t, I can set the registrar to redirect mail to the Posteo alias I currently use for the site. However, it would be convenient to be able to use this inbox. I would, of course, be using PGP encryption when possible (although in practice this is infrequent). Any thoughts?
fedilink

Sounds like a good time to mention that “Little Brother” by Cory Doctorow is available in GNU Info format (usually used for manpages).



I got my Grandma to switch to DDG after she saw an advert for it on TV.

My Gran, meanwhile, didn’t need convincing. She uses Ecosia, because she likes the whole reforestation thing they’re doing.


Yeah, I have my own SearXNG too, albeit hosted on a VPS. However, the difficulty I was talking about was in convincing other people to switch.


Yeah, that sounds like she clicked an ad. Personally, I’d recommend switching to Startpage, Whoogle, or SearXNG; but I understand that might be easier said than done.




Slightly moreso than YouTube, but you should really use Librarian or the LBRY app.

Also, be warned that Odysee is alt-tech.


  • I used to have an Xperia SP. One day, I decided to swap out all of the AOSP apps that came preinstalled for Google’s own offerings.
  • I also used to use Yandex as my main search engine. I thought it was better than DuckDuckGo…
  • I also used to use Yandex.Browser, Yandex.Mail, and Yandex.Disk. I’m also not sure I deleted my account…
  • Just three years ago, I was using Opera. I had no idea it had become a Chinese Chromium fork. I also used to use Maxthon, on occasion.
  • I used to use Opera VPN.
  • When I was about 7, I ended up with a bunch of malware on my laptop (turns out McAfee is shit). I recently discovered that my IP range briefly ended up on some blacklist around that time, so I assume I had become part of a botnet.
  • Around this time, I used Hola VPN.
  • Until fairly recently, I had multiple ad and tracker blockers installed at the same time. This is obviously overkill, and increases your fingerprintability.
  • I also used to manually change my user agent to Chrome on Windows 10, despite the fact I was using Firefox on Linux. The mismatch also made me more fingerprintable.
  • I used to have Do Not Track enabled, which can be used to fingerprint users.
  • I used to use my browser fullscreen, meaning my screen resolution could be calculated and used for fingerprinting.
  • I used to use Outlook.com as a client for my email, which was privately self-hosted by my dad.

Yeah, I used to be pretty insecure, huh. My privacy journey was quite fast, and began around 2020. My uncle had given me a ThinkPad and a DVD of Linux Mint. I was stuck at home for most of the year, I started watching a lot of sociopolitical comedy videos, and eventually one thing led to another and before you knew it I was wearing the metaphorical tinfoil hat.

Nowadays, I’m doing much better.


Glad I changed my stack over a few months ago:

  • Proton Mail → Posteo
  • Proton VPN → Mullvad VPN
  • Proton Drive → Syncthing

I’d also recommend KeePassXC in place of Proton Pass, and Cake Wallet in place of Proton Wallet. However, these were both Proton services I never used anyway.


Fossify SMS is better, since SimpleMobileTools went proprietary after an aquisition a few years ago.


VPN connections keep getting blocked
So, for privacy and security reasons, I use a VPN. This is normally Mullvad (with DAITA and quantum resistance enabled), but I have ProtonVPN, Windscribe, and Orbot handy in case something doesn't work. However, lately I've noticed my connections being blocked. This is across three different ISPs: Sky, Virgin, and Wifinity. I have tried all three VPNs and Orbot, and I have tried several protocols (WireGuard, OpenVPN, IKEv2, Stealth, and of course SOCKS5) to no avail. The logical solution would be to use a bridge in Orbot, but the button seems to have been removed. Also, by using Orbot, I will not be protected by my DNS. I am currently using iOS, but my other machines run Linux and I will be getting a GrapheneOS phone in the near future. Can anyone help?
fedilink

Custom ROM for Android Tablet
Hey, all. I just bought a Samsung Galaxy Tab A7, and I would like to install a custom Android ROM on it. After a bit of research, my two options are LineageOS and Murena (aka /e/OS). Does one have any advantages over the other? Or is it simply a matter of preference? UPDATE: **You will need a machine running Windows 10 or higher in order to successfully flash either ROM!**
fedilink

Opinions on the TP-LINK Archer AX23
cross-posted from: https://lemmy.ca/post/22775470 > I'm looking to buy a router for home use, on which I plan to install OpenWRT. After some research, I have come across the [TP-LINK Archer AX23](https://www.currys.co.uk/products/tplink-archer-ax23-wifi-cable-and-fibre-router-ax-1800-dualband-10253392.html), which checks all of the boxes I have: > > > > - [x] Comparatively low price > > - [x] Supports WPA3 > > - [x] Supported by OpenWRT > > - [x] Has at least three LAN ports > > > > However, before I and my dad go and buy one, it has to pass the final test: the forums. > > > > Has anyone used this router before? What was your experience? Can I do better, or have I found the best router ever made? Please share your thoughts.
fedilink

Cross-posted from https://lemmy.world/post/13888155
fedilink

Opinions on SELinux
I'm considering implementing SELinux in my Debian setup, but I've read that it was initially developed by the NSA. Can anyone shed any light on this? Has SELinux been audited? When and by whom? Does the NSA still have anything to do with SELinux, or is this a "US Navy creating Tor" sort of scenario?
fedilink

cross-posted from: [https://lemmy.world/post/13408103](https://lemmy.world/post/13408103)
fedilink

My Privacy Setup
I just read in interesting and informative [post](https://lemmy.ml/post/13296072) from [@Charger8232](/u/Charger8232@lemmy.ml), and decided to write one of my own. Perhaps there could be a megathread created? EDIT: Items in *italics* are subsequent additions. # Remember these rules: - **Be respectful!** Some people are early on in their privacy journey, or have a lax threat model. Just because it doesn't align with yours, or uses some anti-privacy software, doesn't mean you can downvote them! Help them improve by giving suggestions on alternatives. - **Don't promote proprietary software!** Proprietary software, no matter how good it may seem, is against the community rules, and generally frowned upon. If you aren't sure, you can always ask! This is a place to learn. Don't downvote people just because they don't know! - **Don't focus solely on me!** Since this happened in [another one of my posts](https://lemmy.ml/post/12711033), I want to mention that this thread is **not** designed to pick apart only my setup. The point is to contribute your own and help others. That doesn't mean you can't still give suggestions for mine, but don't prioritize mine over another. - *Be polite!** This falls under "Be respectful", but be kind to everyone! Say please, thank you, and sorry. Lemmy is really good about this, but there will always be someone. # Here is my setup: **Web browsing** * I use Mullvad Browser for general browsing. * *I use Tor Browser for extra protection, when necessary.* * I use Firefox + Arkenfox User.js for general browsing on FreeBSD and on my Raspberry Pi, as Mullvad has not yet been ported to FreeBSD or aarch64. * I use MetaGer for web searches, but I keep switching between different private options. * I always use ProtonVPN (free tier) through WireGuard. * I use NextDNS for extra content blocking. * I use Redirector (by Einar Egilsson) to redirect me to alternative frontends for popular services (e.g. YouTube -> CloudTube) **Desktop** * I use several trusted Linux distributions, as well as FreeBSD, on my PCs and MacBook. * My MacBook's UEFI is password-protected, but I have not done this on other machines: * I haven't got around to securing my main laptop at the UEFI level yet. * My ThinkPad is second-hand and quite old. The BIOS cannot be locked, and the PXE settings have been password-protected by the previous owner. * All of my other devices are simply too old and rarely leave the house anyway. * I recently installed Tails, but I haven't yet had cause to use it. * I use full disk encryption on everything, and I have a VeraCrypted pen drive for special cases * I cover all of my webcams with Blu-Tac or electrical tape * *Many of my laptops are too old for this, but I am trying to make the switch from X11 to Wayland (as recommended by PrivacyGuides).* **Mobile** * I currently use hardened iOS until my iPhone burns out or gets obsoleted. Once this happens, I'll be using DivestOS. * Again, I constantly use ProtonVPN (free tier) using the WireGuard app (as this is the only VPN client that both supports Proton and allows customising the DNS). * I use the private mode in O**r**ion Browser (not to be confused with Onion Browser), as the EFF's Cover Your Tracks software reported that it was less fingerprintable than other options. * I have Onion Browser installed, for when I need more protection or if I need to access a .onion * I use an alphanumeric passphrase. * I disable radios (i.e. WiFi, Bluetooth) when they are not in use. * I don't use a privacy screen protector, but I will buy one for my next phone. **Messenger** * I am forced to use WhatsApp, sadly, as none of my friends or family will even humour me by trying Signal. It could be worse. **Online accounts** * I use KeePass to manage my passwords, which are synchronised between devices using Filen. * KeePassXC is the client I use on desktop. * On iOS, I use Keepassium; but I am apalled by the selection of clients available. * When I switch to Android, I will use KeePassDX. * I use ente Auth and OTPClient to generate TOTPs. I also have a graphing calculator that can generate these. * I am in the process of partially anonymising my online accounts. **Video streaming** * I use CloudTube to watch YouTube videos. * I use PeerTube when possible (mainly to watch Techlore and The Linux Experiment). * I use FreeTube on desktop. **AI** * I played around with ChatGPT and DALL-E last year, but those days are behind me now. * I signed the NoML open letter, and I have used robots.txt to shut out LLM scrapers from my websites. **Social Media** * The only non-FOSS social media I use are Tumblr — which is ranked B by ToS;DR — and cohost. * I only use my real name on Mastodon, and even then I will probably change to my usual username when and if I next decide to change servers. **Email** * I use Posteo. * I have DuckDuckGo Email Protection as an alias service, which I use through Bitwarden. **Shopping/Finance** * I rarely make online purchases. I am certainly being tracked, but I'm simply not producing enough data in the first place for this to be a big problem. * For physical purchases, I ~~am trying to~~ use cash ~~more often~~. However, my sixth form cafeteria only accepts two forms of payment: biometric (handled internally) and debit card. * I use no subscription services at all, but I may use LiberaPay and OpenCollective in the future to support open-source projects. **Music streaming** * I occasionally stream music from Bandcamp, but virtually everything I listen to is either on CD or a local file. * I occasionally listen to KERRANG! Radio using an MP3 stream, and BBC Radio 4 over FM. **TV shows** * I use DVDs for most of my viewing, but I have sailed the high seas in the past * Some shows I enjoy (i.e. Helluva Boss) are released officially for free on YouTube (watched via CloudTube). * I do not own a smart TV. **Gaming** * I generally don't game. * When playing Minecraft, I use PrismLauncher and I'm always sure to install the Anti-Telemetry mod. **Programming** * I code in Python using Micro. I also sometimes use Kate, but only if I'm running Plasma. * I use Codeberg to host my projects. **Productivity** * I normally use LibreOffice. * I'm trialling a new workflow, using Markdown and Pandoc for text documents and presentations, and Gnumeric for spreadsheets. **Misc** * I use an RSS reader for news. * My local timezone just happens to be the same as UTC. * I use a privacy-respecting smartwatch: the PineTime (from PINE64). * I don't have a car, as I'm 17. * I use Bluetooth headphones out of necessity. I'm still salty about Apple removing the headphone jack and then every other phone company following suit. However, they are basic headphones which do not require an app, and so they should be more private than other similar models. * I will never use Amazon Echo or Google Home. ## To-Do * ✅ ~~Look into further hardening of iOS~~ * ✅ ~~Start using multiple browsers~~ * ✅ ~~Use cash more often~~ * ✅ ~~Anonymise social media~~ * Try to get family to ditch Meta * ✅ ~~Look into BIOS and UEFI hardening~~ * Buy a privacy screen protector and faraday equipment * Audit all systems with Lynis Thanks for reading! EDIT 27/05/24: Updated search engine, iOS apps, email, social media, and checklist.
fedilink

Suggestions for a second browser
I currently use a few browsers on various platforms: * Mullvad on Linux and macOS * Firefox (w. Arkenfox User.js) on FreeBSD * Safari (w. extensions & privacy settings changed) on iOS However, I am finding the absence of any sort of cookie persistence in Mullvad and Safari to be a little annoying, as just about everything I use has 2FA enabled. So, I was wondering what you would say a good choice for a second browser would be. I would use this to access a small number of privacy-respecting sites (such as CloudTube and Lemmy), which would involve saving cookies and allowing third-party content (i.e. googlevideo in CloudTube). Ideally, this should be Firefox or WebKit-based, and I would like suggestions for Linux, macOS, FreeBSD, and iOS. On macOS, I have not signed in with an Apple ID, so I can't use the App Store; but I *do* have Homebrew and [pkgsrc(7)](https://man.netbsd.org/pkgsrc.7) installed. Any ideas? EDIT: I am NOT moving away from Mullvad. I'm looking for a COMPLEMENTARY browser which I can use for stuff like CloudTube.
fedilink


Damn Small Linux is back!!!
cross-posted from: https://lemmy.ca/post/14567056
fedilink