OpenBSD admin and ports maintainer

  • 2 Posts
  • 72 Comments
Joined 1 month ago
cake
Cake day: May 29th, 2024

help-circle


  • ssm@lemmy.sdf.orgtoPrivacy@lemmy.mlRCS vs SMS/MMS?
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    15 hours ago

    Encrypted XMPP/IRC+ZNC/other plain text protocol is the best. Mobile data is everywhere and cheap, especially for text messages. Only one person has to do the heavy lifting setting up the server on a VPS with encryption; connecting the clients is easy. The hard part is getting people to use them when network providers and Android/iOS devs shoehorn SMS/MMS/RCS as the default and only option.


  • ssm@lemmy.sdf.orgtoPrivacy@lemmy.mlThought on Graphene?
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    16 hours ago

    Unless you want to tell me that the Android kernel is the first OS kernel without bugs, it takes at the very least one bug to be left intentionally unfixed and shared with the feds to introduce a backdoor. I wouldn’t consider it infeasible with how large the android kernel is, and how high a barrier of entry kernel dev is. If the bug is found, just move to the next one. Normally I wouldn’t be so paranoid, but this is Google we’re dealing with, on one of, if not the most popular kernels on the planet.




  • Random hardware suggestions, using mobile Linux support as a litmus test

    • Pinephone (Pro): Main downside is that OG Pinephone has extremely anemic hardware, and the charging circuit is not controlled through hardware for some insane reason; hope the kernel devs of whatever OS you put on it knows how to not turn your phone into a bomb. Also Pine64 as a company has gotten flak for their support of Manjaro. Can’t deny how good the price is though.
    • Fairphone 4: Good hardware, but expensive. I don’t own it, but it works good on postmarketOS according to the wiki.
    • Librem 5: Overpriced compared to the earlier members on this list, but you can guarantee the phosh interface will work well considering it was developed by Purism as well.
    • OnePlus 6 and 6T: I don’t know much about these, but they’re very popular with the mobile Linux crowd.

    As for the pixel, there’s work on it but it’s still broken at the moment. As for the hardware being too old, I haven’t used anything Android in a while, so I don’t know how much performance degrades each release, but a mobile Linux distribution should run just as good today as it will 20 years from now, assuming you use the same interface.











    • Use a fork of Firefox (librewolf), or a different open source browser
      • even if you modify Firefox to remove all telemetry, Mozilla are bad actors, and will update to add new telemetry like Anonym or Cliqz by default after an update. Unless you really trust your package maintainer, use a fork or a different browser
    • Force a common useragent
    • Disable javascript everywhere, or use a browser without javascript, whenever possible
      • trying to defend against fingerprinting with javascript enabled is futile, even things like your number of cpu threads (navigator.hardwareConcurrency), list of fonts, webgl support, supported codecs, browser permissions, and variations in canvas rendering can be used in fingerprinting
        • tor browser is the only project I know of that can come close to avoiding fingerprinting with javascript, but even then you’re advised to avoid using javascript with tor browser
      • use 3rd party clients for things like youtube that would normally need javascript



  • Set your system-wide DNS to a provider in a country with better privacy laws. I use quad9. Disable DNS over HTTPS (DoH) in Firefox if you have it enabled, as it sends DNS queries to cloudflare, which may be even worse than sending your DNS queries to your default ISP servers (also disable DNS prefetch). If you’re hosting a DNS server, you can also set up a DNS blocklist if you use something like unbound or unwind.

    I would get away from proton, they’re too popular and too much of a target, and most critically they fucked over a climate protestor, and then removed “we do not keep any IP logs” from their privacy policy. If they’re willing to lie about that, what else are they willing to lie about? If you want a fun project, set up your own mail server. Easy (relatively speaking) to do on OpenBSD with a cheap VPS provider like buyvm. Password manager is easy enough to write yourself with an openssl script, or you can use some other open source password manager if you hate scripting. Storage should be cheaper on a VPS than whatever proton is providing, and you can even host your own VPN (though this has potential to be easily routed back to you unless you serve multiple users with your VPN).

    Disable javascript everywhere you don’t need it. I use qutebrowser, and javascript is disabled by default, and I only reluctantly enable it per-domain when I absolutely have to.

    Use 3rd party open source clients for propietary apps, or move to open source ecosystems (like lemmy!).

    I would get off of Android all together, and switch to a real Linux phone, if you can tolerate the jank. I don’t trust Google not to put a backdoor in the Android kernel (which forked all the way back at Linux 2.something). You could also try switching to a dumb phone, but those still run some amount of spooky blackbox software and I wouldn’t totally trust it from any major phone manufacturer.