Young humanoid in the UK. Proudly LGBT. Slava Ukraini! | they/them

aspe:keyoxide.org:LJEENB2IEL3U4MEJRP7GHBOY4U

Formerly of:

  • 9 Posts
  • 73 Comments
Joined 10M ago
cake
Cake day: Jan 28, 2024

help-circle
rss

I see you’ve already posted it, but YouTube links should be fine. Traditionally, it was better to post Invidious links; but thanks to Google, this links don’t tend to keep working for too long these days.

On the other hand, if a video also exists on media.ccc.de or PeerTube, that would be the preferred option. YouTube is still acceptable, though.


Moral of the story? Don’t read the Express. To quote Dave Gorman, it’s a crock of shit.


I think you may be responding to the wrong comment


Well, most laptops have removable WiFi cards, but if you want to go the extra mile you could try an early-2000s or late-90s ThinkPad (from back when they were made by IBM).


I tried to use it, but I couldn’t get it working (I couldn’t receive any messages, and neither could my brother). In the end, I opted for Matrix instead.


Eh, kinda. It’s not quite as easy to escape from GApps as it is to install Linux, though, so it’s understandable.

My advice is to look into LineageOS, DivestOS, and GrapheneOS and see if your device is supported by anyone. If not, it’s possible to remove GApps using ADB, and you can use NextDNS to block tracking.


Well, that explains how the NSA keep getting in every so often.



I quite like 4get, but SearXNG is probably closer to what you want.


Since you’re using Edge, I’ll assume you’re running Windows. In that case, I’d recommend either Librewolf or ungoogled-chromium.

I, myself, use Mullvad Browser and Links2, but they’re not quite as good for new users.


Lemmy.ca and Sopuli both worked fine on ProtonVPN, and .ca also seems to be fine on Mullvad.


Neither newpipe nor libretube work for me anymore for a while now.

…except NewPipe doesn’t work.


I’d say that your best bet is FreeTube, which got ported to Android back in 2020. I’ve only been using it for a few weeks, since I only got ahold of an Android device this month, but it has never let me down.

It’s available on the IzzyOnDroid repo, and as an APK, so you can install it with F-Droid or Obtainium (or manually).



You need Windows to run Odin. Fastboot doesn’t work for Samsung, and Heimdall hasn’t been updated for seven years.


To be perfectly honest, I think your best bet is to learn a programming language, get a few programmer friends together, make an account on Codeberg, and do it yourself.

Of course, there’s always a chance that some fuchsia-based OS will become available for phones, but I think most people are focusing on Android ROMs and Linux phones at the moment.



That has been really helpful. Thank you!



Custom ROM for Android Tablet
Hey, all. I just bought a Samsung Galaxy Tab A7, and I would like to install a custom Android ROM on it. After a bit of research, my two options are LineageOS and Murena (aka /e/OS). Does one have any advantages over the other? Or is it simply a matter of preference? UPDATE: **You will need a machine running Windows 10 or higher in order to successfully flash either ROM!**
fedilink

Techlore recommends Njalla. However, it is expensive. I use NameCheap and EU.ORG, with deSEC as my website DNS in both cases.


Riseup is good, but I try to use other services as it’s aimed at activists, journalists, refugees, and other people in need who will need the bandwidth a lot more than I do.


I would recommend Windscribe over PIA. They’re open-source and rank highly on Techlore’s VPN toolkit.


I switched from ProtonVPN Free to Mullvad last month when I needed to torrent something. ProtonVPN Free doesn’t allow P2P traffic, and Mullvad is cheaper than ProtonVPN Pro (or whatever it’s called these days).

The AI doesn’t seem too bad, but I’d prefer it not be there at all. I have no opinions about the crypto, as there is a legitimate use for it, but I have no use for the wallet as I have had a lot of trouble getting ahold of any cryptocurrency.

I’m also happier with the company and the experience. I paid with a card, but I liked that they accept cash and Monero.

On top of that, nobody seems to have anything bad to say about Mullvad. Privacy? They keep no logs and are pretty damn transparent. Limitations? No port forwarding, but I can just use Windscribe if I need that. Clients? They don’t exclude Linux or arm64, and BSD users can just use wireguard-go or something.

There’s also a story when one time the Polisen came to Mullvad HQ with a search warrant, but had to leave after discovering that there were no logs kept, and therefore nothing they could do.

Furthermore, they’ve made my favourite web browser (which is essentially Tor Browser without Tor) by collaborating with the Tor Project. It’s one of only three browsers which give good results in Cover Your Tracks (although I have not yet tested anything with CreepJS; and I tend to change the settings in everything, so your mileage may vary).

TL;DR: I recommend Mullvad over ProtonVPN, but not because of the AI or crypto.

I also recommend Posteo over ProtonMail, Filen over Proton Drive, Bitwarden over Proton Pass, and I stopped using Proton before we got Proton Wallet.


MSCHF made a device called an Alexagate, which jams the microphones using ultrasound and is turned on and off by clapping.

It’s a bit expensive, though ($100).

https://alexagate.com/

Otherwise, as you mentioned, you can use DNS to block the tracking. NextDNS has a built-in blocklist specifically for Alexa.



Nice setup! I might have to do a redux…


Odysee uses LBRY as a backend to deliver videos. Librarian, meanwhile, is a privacy-respecting frontend for LBRY; like Invidious.




Huh, that’s strange. Cover Your Tracks should have given much better results.


What browser extensions are you using in Mullvad and Tor?


Try it with Mullvad Browser or Brave. The former should give “You have a non-unique fingerprint”, while the latter should give “You have a randomised fingerprint”.

I personally prefer Mullvad, as it’s not run by a raging homophobe and it’s not based on Chromium.


I read this in Eddie’s voice.


You can try playing with Arkenfox, installing uBlock Origin, fiddling with about:config, and giving yourself an aneurysm…

…or you could try Mullvad Browser. It’s a fork of Firefox, co-developed by Mullvad and The Tor Project, with impressive fingerprinting resistance (according to Cover Your Tracks). It’s like Tor Browser without Tor.

Also, install NoScript. It helps a lot.


Welp. Guess now is as good a time as any for me to switch to deSEC…


Opinions on the TP-LINK Archer AX23
cross-posted from: https://lemmy.ca/post/22775470 > I'm looking to buy a router for home use, on which I plan to install OpenWRT. After some research, I have come across the [TP-LINK Archer AX23](https://www.currys.co.uk/products/tplink-archer-ax23-wifi-cable-and-fibre-router-ax-1800-dualband-10253392.html), which checks all of the boxes I have: > > > > - [x] Comparatively low price > > - [x] Supports WPA3 > > - [x] Supported by OpenWRT > > - [x] Has at least three LAN ports > > > > However, before I and my dad go and buy one, it has to pass the final test: the forums. > > > > Has anyone used this router before? What was your experience? Can I do better, or have I found the best router ever made? Please share your thoughts.
fedilink


It’s okay, but I’d personally recommend NextDNS more. Quad9 is also good, but more basic.


I like it. Pretty damn good for privacy, based on Gecko, supports desktop extensions, and developed by the Divested Computing Group (the same one that created and maintains DivestOS).



Cross-posted from https://lemmy.world/post/13888155
fedilink

Opinions on SELinux
I'm considering implementing SELinux in my Debian setup, but I've read that it was initially developed by the NSA. Can anyone shed any light on this? Has SELinux been audited? When and by whom? Does the NSA still have anything to do with SELinux, or is this a "US Navy creating Tor" sort of scenario?
fedilink

cross-posted from: [https://lemmy.world/post/13408103](https://lemmy.world/post/13408103)
fedilink

My Privacy Setup
I just read in interesting and informative [post](https://lemmy.ml/post/13296072) from [@Charger8232](/u/Charger8232@lemmy.ml), and decided to write one of my own. Perhaps there could be a megathread created? EDIT: Items in *italics* are subsequent additions. # Remember these rules: - **Be respectful!** Some people are early on in their privacy journey, or have a lax threat model. Just because it doesn't align with yours, or uses some anti-privacy software, doesn't mean you can downvote them! Help them improve by giving suggestions on alternatives. - **Don't promote proprietary software!** Proprietary software, no matter how good it may seem, is against the community rules, and generally frowned upon. If you aren't sure, you can always ask! This is a place to learn. Don't downvote people just because they don't know! - **Don't focus solely on me!** Since this happened in [another one of my posts](https://lemmy.ml/post/12711033), I want to mention that this thread is **not** designed to pick apart only my setup. The point is to contribute your own and help others. That doesn't mean you can't still give suggestions for mine, but don't prioritize mine over another. - *Be polite!** This falls under "Be respectful", but be kind to everyone! Say please, thank you, and sorry. Lemmy is really good about this, but there will always be someone. # Here is my setup: **Web browsing** * I use Mullvad Browser for general browsing. * *I use Tor Browser for extra protection, when necessary.* * I use Firefox + Arkenfox User.js for general browsing on FreeBSD and on my Raspberry Pi, as Mullvad has not yet been ported to FreeBSD or aarch64. * I use MetaGer for web searches, but I keep switching between different private options. * I always use ProtonVPN (free tier) through WireGuard. * I use NextDNS for extra content blocking. * I use Redirector (by Einar Egilsson) to redirect me to alternative frontends for popular services (e.g. YouTube -> CloudTube) **Desktop** * I use several trusted Linux distributions, as well as FreeBSD, on my PCs and MacBook. * My MacBook's UEFI is password-protected, but I have not done this on other machines: * I haven't got around to securing my main laptop at the UEFI level yet. * My ThinkPad is second-hand and quite old. The BIOS cannot be locked, and the PXE settings have been password-protected by the previous owner. * All of my other devices are simply too old and rarely leave the house anyway. * I recently installed Tails, but I haven't yet had cause to use it. * I use full disk encryption on everything, and I have a VeraCrypted pen drive for special cases * I cover all of my webcams with Blu-Tac or electrical tape * *Many of my laptops are too old for this, but I am trying to make the switch from X11 to Wayland (as recommended by PrivacyGuides).* **Mobile** * I currently use hardened iOS until my iPhone burns out or gets obsoleted. Once this happens, I'll be using DivestOS. * Again, I constantly use ProtonVPN (free tier) using the WireGuard app (as this is the only VPN client that both supports Proton and allows customising the DNS). * I use the private mode in O**r**ion Browser (not to be confused with Onion Browser), as the EFF's Cover Your Tracks software reported that it was less fingerprintable than other options. * I have Onion Browser installed, for when I need more protection or if I need to access a .onion * I use an alphanumeric passphrase. * I disable radios (i.e. WiFi, Bluetooth) when they are not in use. * I don't use a privacy screen protector, but I will buy one for my next phone. **Messenger** * I am forced to use WhatsApp, sadly, as none of my friends or family will even humour me by trying Signal. It could be worse. **Online accounts** * I use KeePass to manage my passwords, which are synchronised between devices using Filen. * KeePassXC is the client I use on desktop. * On iOS, I use Keepassium; but I am apalled by the selection of clients available. * When I switch to Android, I will use KeePassDX. * I use ente Auth and OTPClient to generate TOTPs. I also have a graphing calculator that can generate these. * I am in the process of partially anonymising my online accounts. **Video streaming** * I use CloudTube to watch YouTube videos. * I use PeerTube when possible (mainly to watch Techlore and The Linux Experiment). * I use FreeTube on desktop. **AI** * I played around with ChatGPT and DALL-E last year, but those days are behind me now. * I signed the NoML open letter, and I have used robots.txt to shut out LLM scrapers from my websites. **Social Media** * The only non-FOSS social media I use are Tumblr — which is ranked B by ToS;DR — and cohost. * I only use my real name on Mastodon, and even then I will probably change to my usual username when and if I next decide to change servers. **Email** * I use Posteo. * I have DuckDuckGo Email Protection as an alias service, which I use through Bitwarden. **Shopping/Finance** * I rarely make online purchases. I am certainly being tracked, but I'm simply not producing enough data in the first place for this to be a big problem. * For physical purchases, I ~~am trying to~~ use cash ~~more often~~. However, my sixth form cafeteria only accepts two forms of payment: biometric (handled internally) and debit card. * I use no subscription services at all, but I may use LiberaPay and OpenCollective in the future to support open-source projects. **Music streaming** * I occasionally stream music from Bandcamp, but virtually everything I listen to is either on CD or a local file. * I occasionally listen to KERRANG! Radio using an MP3 stream, and BBC Radio 4 over FM. **TV shows** * I use DVDs for most of my viewing, but I have sailed the high seas in the past * Some shows I enjoy (i.e. Helluva Boss) are released officially for free on YouTube (watched via CloudTube). * I do not own a smart TV. **Gaming** * I generally don't game. * When playing Minecraft, I use PrismLauncher and I'm always sure to install the Anti-Telemetry mod. **Programming** * I code in Python using Micro. I also sometimes use Kate, but only if I'm running Plasma. * I use Codeberg to host my projects. **Productivity** * I normally use LibreOffice. * I'm trialling a new workflow, using Markdown and Pandoc for text documents and presentations, and Gnumeric for spreadsheets. **Misc** * I use an RSS reader for news. * My local timezone just happens to be the same as UTC. * I use a privacy-respecting smartwatch: the PineTime (from PINE64). * I don't have a car, as I'm 17. * I use Bluetooth headphones out of necessity. I'm still salty about Apple removing the headphone jack and then every other phone company following suit. However, they are basic headphones which do not require an app, and so they should be more private than other similar models. * I will never use Amazon Echo or Google Home. ## To-Do * ✅ ~~Look into further hardening of iOS~~ * ✅ ~~Start using multiple browsers~~ * ✅ ~~Use cash more often~~ * ✅ ~~Anonymise social media~~ * Try to get family to ditch Meta * ✅ ~~Look into BIOS and UEFI hardening~~ * Buy a privacy screen protector and faraday equipment * Audit all systems with Lynis Thanks for reading! EDIT 27/05/24: Updated search engine, iOS apps, email, social media, and checklist.
fedilink

Suggestions for a second browser
I currently use a few browsers on various platforms: * Mullvad on Linux and macOS * Firefox (w. Arkenfox User.js) on FreeBSD * Safari (w. extensions & privacy settings changed) on iOS However, I am finding the absence of any sort of cookie persistence in Mullvad and Safari to be a little annoying, as just about everything I use has 2FA enabled. So, I was wondering what you would say a good choice for a second browser would be. I would use this to access a small number of privacy-respecting sites (such as CloudTube and Lemmy), which would involve saving cookies and allowing third-party content (i.e. googlevideo in CloudTube). Ideally, this should be Firefox or WebKit-based, and I would like suggestions for Linux, macOS, FreeBSD, and iOS. On macOS, I have not signed in with an Apple ID, so I can't use the App Store; but I *do* have Homebrew and [pkgsrc(7)](https://man.netbsd.org/pkgsrc.7) installed. Any ideas? EDIT: I am NOT moving away from Mullvad. I'm looking for a COMPLEMENTARY browser which I can use for stuff like CloudTube.
fedilink


Damn Small Linux is back!!!
cross-posted from: https://lemmy.ca/post/14567056
fedilink