dngray

joined 2 years ago
MODERATOR OF
[–] dngray@lemmy.one 2 points 2 years ago

Keep in mind LocalCDN will make your fingerprint more unique. HTTPS Everywhere is unmaintained and no longer needed.... and you certainly don't need Decentraleyes, thats a duplicate of LocalCDN and is also unmaintained.

[–] dngray@lemmy.one 5 points 2 years ago

keep in mind that uses the same method as adb pm uninstall which doesn't actually remove it from the system image, just the current user profile.

[–] dngray@lemmy.one 2 points 2 years ago (2 children)

If you're going to use Arch use Arch. It is incredibly dangerous to be blindly trusting things in AUR, when they can be contributed by anyone.

However, it then goes on to say that only moderate or advanced users should use Arch

Yes because there is less QA, there is nobody testing those things before they are released to you. It also requires you to make a lot of selections which unless you know what components to choose (I also use Arch) would be not great for a newbie user.

I find this funny as many corporate servers use Debian, and I don’t really see any huge security issues since the 90’s waving red flags of warnings and issues.

A lot of them are Ubuntu these days, or Centos. In a corporate environment you tend to be running a lot of containerized workloads because you want redundancy, and high availability.

By following this guide, it really leaves no option for beginner linux enthusiasts. I (we) recommend not folloing this guide as it reads like privacy paranoia propaganda piece.

TLDR being there is no reason to look beyond Fedora or Ubuntu for a newbie user. That is the point that it makes. These other obscure distributions don't provide anything that you need.

[–] dngray@lemmy.one 12 points 2 years ago (4 children)

Just a reminder, we specifically recommend against Garuda due to their unsafe usage of Chaotic-AUR.

[–] dngray@lemmy.one 1 points 2 years ago* (last edited 2 years ago)

Kbin is federated so you should be able to see content from kbin on Lemmy and vice versa.

I checked our page on kbin ie https://kbin.social/m/privacyguides@lemmy.one vs https://lemmy.one/c/privacyguides and what I can say is that there are a lot of comments that don't appear to be federating. Doesn't seem to be a problem with other lemmy instances though.

[–] dngray@lemmy.one 2 points 2 years ago

Yes I don't get how people have trouble understanding this. It's like arguing that something you posted in 1982 is still on groups.google.com or marc.info.

[–] dngray@lemmy.one 29 points 2 years ago (13 children)

VPNs are still worth it for that purpose, particularly torrenting.. Not sure who is saying this but they are wrong.

[–] dngray@lemmy.one 7 points 2 years ago

Proton still has it with NAT-PMP which requires the use of py-natpmp on Linux.

There are other providers but these generally don't meet our requirements as they don't have open source clients or have no audits or are generally not as trustworthy.

WIndscribe also has ephemeral port forwarding and we are looking at adding that some time. Audits have now been completed and they are refactoring some iOS code, then it will be good to go.

[–] dngray@lemmy.one 3 points 2 years ago

Mulch is tied to a specific Android ROM

Yes, that's because it requires webview to be patched, it's the same reason that Vanadium is only available for GrapheneOS. They do use some of Vanadium's patches though.

[–] dngray@lemmy.one 4 points 2 years ago

They still disable CRLSets and have binaries built by "contributors" not in an automated fashion by the developer themselves.

[–] dngray@lemmy.one 3 points 2 years ago

Disabling CRLSets though is worrisome, and its binaries are built by potentially unknown third parties with compromised systems.

[–] dngray@lemmy.one 1 points 2 years ago

Exiftool will only process images, so not things like PDF.

view more: ‹ prev next ›