moved from us instance

  • 11 Posts
  • 829 Comments
Joined 5 months ago
cake
Cake day: June 3rd, 2026

help-circle














  • The phone feels sluggish

    Maybe I am just used to it, but LGTM on swmo on a much older device. Maybe it’s that, or maybe it’s because you are using Flatpak or something, or both?

    I could not find VPN software that would work on this phone in my heavily controlled jurisdiction

    #pogoda

    I see… Anyways, so the easiest thing one hypothetical evil spy would do is just run the Tor daemon. “webtunnel” is the only option that still functions unfortunately (apart from meek but technological advancement made it unusable for most applications); source: friend. In /etc/tor/torrc:

    SOCKSPort 0.0.0.0:9050
    SOCKSPort [::1]:9050
    ControlPort 9051 #optionally add the hashed control password thing
    AutomapHostsOnResolve 1
    UseBridges 1
    # run `which lyrebird` if it doesn't run, will save you some nerves and feeling stupid
    ClientTransportPlugin webtunnel exec /usr/bin/lyrebird
    

    then add a few WebTunnel entries.

    Bridge webtunnel [2001:db8:28ff:ae4f:c:9ef6:1722:ac46]:443 1098B4E153AB1666B4F63F48325A103FB005940F url=https://pod04.oneclickhost.eu/FeTyRXzPPAzwIjuxzWxwl09N ver=0.0.7
    Bridge webtunnel [2001:db8:259c:faa6:24a9:cce0:c60f:4642]:443 23958FC105E58061AFD2DECC61D363F28AB36490 url=https://pod02.oneclickhost.eu/lzcHh4sbo8bOTwkc4IwkSxNS ver=0.0.7
    Bridge webtunnel [2001:db8:11d3:d5e7:2939:8453:7baf:868f]:443 531640559965FB7501EB5C006018F61D1E9FA1BB url=https://cdn-34.triplebit.dev/Aec3euCh4ux3deij ver=0.0.2
    Bridge webtunnel [2001:db8:8229:577b:8f3a:bc4c:7d18:24be]:443 4C26D2BA24011E89875857BDB338969D08CAAE0B url=https://test.notalot.org/ApKhNDWZv4MCjbH05W6eQFkF ver=0.0.4
    Bridge webtunnel [2001:db8:4a7:f9d5:dd5:a50d:e609:b356]:443 0FF5783D11A1B411A5815CE0C6C25AD584D281FE url=https://cdn.xoomlia.com/dzq3/ ver=0.0.3
    

    Whoops, I dropped some! How could I possibly do such a crime…

    Then one could enable it in rc, or otherwise disable it there and run tor in a terminal each time. Test: env ALL_PROXY="socks5://[::1]:9050" curl https://check.torproject.org/ | grep -i congratulations.

    Now, what most would be tempted to do is set that environment variable globally. This would actually be a mess because even a single application (Abaddon the Discord client for example) could use multiple libraries at once, some respecting it, some respecting /etc/sysconfig/proxy, others respecting gsettings and so on and so forth. It will basically just yell at the internet that you are using Tor. Sometimes even the application itself might have an option to proxy but it won’t apply to a plugin or something.

    Instead, one would install torsocks, add AllowOutboundLocalhost 1 and EnableIPv6 1 to /etc/tor/torsocks.conf (so that it’s still usable with the environment variable), then copy .desktop entries of each program you want to run with Tor from /usr/share/applications into ~/.local/share/applications and change each Exec= line (yes, there are sometimes multiple) from, for example, abaddon to env ALL_PROXY="socks5://[::1]:9050" torsocks abaddon. The variable is still there for performance reasons, and because it may sometimes break without it.

    Now, the Tor people don’t want Tor Browser to be packaged for MUSL. For some reason. You could, for example, run a Debian container (or just Whoix at this point, ask if you want the env variables to use system tor regardless). You would be basically the only person with this atrocious screen size even with letterboxing; so I suggest you to embrace it, turn all knobs on in Librewolf, get the foxyproxy extension (make sure it’s actually working) and be pseudoanon instead of fully anon. OR install chawan browser (ALL_PROXY will work for most things but not the Gemini part for example, use torsocks for Gemini).

    AHEM, anyways…

    Often times, notifications didn’t come from inactive apps until I opened them.

    That’s by design. Like GrapheneOS. It’s weird if you do get notifications from closed programs, however; those probably run some daemon all the time.