cross-posted from: https://programming.dev/post/24574658
was checking my old favourite posts and found this.
Hey now, I’ve been paranoid for years. Don’t call me a newborn.
Seems like I’m a newborn paranoid. Favorite os = arch Favorite browser = librewolf Favorite apps = f-droid
I disable cookies on virtually all websites. And I do fear the slippery slope sometimes.
- arch
- lineage os (rooted)
- librewolf
- fdroid, element
[Realisation]
… I would go full paranoid but Its over my skill level. Also I’m quite happy now that the transition to more private things process is mostly over.
Why would you root Lineage OS? You are putting a hole in your security.
I also do that because it lets me
- limit charging with ACC
- use microG as network location provider (microg installer revived)
- fix SafetyNet
- YouTube ReVanced
- Make using other App stores easier (updating can happen automatically in more recent Android versions, but first installs still require confirmation outside the Play Store)
MicroG doesn’t require root
Also Charging control is now part of Android 15
Root can be a huge security risk. Be very careful and always stay updated with the latest security patches.
Yes, microG works without root, however to get it working as a network location provider you either need it installed as system app (for example LOS4microg) or patch android to allow non-system apps for providing network location.
There’s an official patch, also mentioned in the Install Guide and it’s basically the reason for microg_installer and its revived fork existing.
I could use LOS4microg, which does include the patch, but builds are run much less frequently (once a month instead of weekly) and I’d rather stick to original Lineage.
Thanks for pointing out charging control, I wasn’t aware of that new feature. One more reason to upgrade LOS my phone
I did not give it much thought really, I just wanted my previously rooted phone with no google things. But mainly the SafetyNet thing.
If you are either A) bootloader unlocked or B) using a custom ROM via an exploit, your system is freely open to modification by a physical attacker, regardless.
Graphene os for security, lineage os is for debloated aosp experience, root is for things like wifite2 on smartphone, cheat engine like apps on smartphone, deep control of your smartphone and etc
e.g. for better charging control, to allow f-droid to update apps automatically
did everything but not rooted phone i just debloated my phone currently i don’t use arch btw but it was great but skill issue kills me so i’m here with lmde
This is fairly dated.
Don’t use Telegram or Jami. Also Xorg is dead.
Wait, why not Jami?
According to the threads I found privacy guides:
-
It mostly just doesn’t work well.
-
It hasn’t been independently audited
https://discuss.privacyguides.net/t/add-jami/20052
https://discuss.privacyguides.net/t/why-is-jami-not-listed-in-pg/12500
-
No independent audit is a bad sign. It also is unstable with a giant code base.
deleted by creator
yeah but if you want actual security you use Qubes
and for the love of Torvalds don’t use Tails as a daily driver
also have you seen Stallman’s other video?
Not sure where I fall into this chart =)
Favorite OS: OpenSuse Tumbleweed
Favorite browser: Librewolf
Favorite Apps: Vim/Neovim (not even close to anything else)- I’m not paranoid, though. (It’s not paranoia if everyone agrees with you, most people just don’t care)
- I love FOSS culture and hate corporations with passion.
- For messaging I use Discord and Telegram
- Use old netbook from 2007 and my desktop PC is around the same age.
- I do watch Luke Smith and “Richard Stallman was right”!
Not sure where I fall into this chart.
I can tell you. You’re in the shit distro+shit browser part of the chart. Terrible choices. Not like my distribution which is so good. With a very good browser.
No I haven’t read what your distro is. Nor your browser. Irrelevant.
My distro? You wouldn’t know it. Very niche. But very good. Maybe the same as yours, but not the shit one. The good one.
Am I a moron? Sure. A moron with a good distro. (It’s ubuntu+chrome, if you know it)
cool 👍
I would say somewhere between paranod newborness and tech conservatism 🤔
Suspicious lack of Qubes. Who do you work for??? the CIA? China? The Rwandan National Intelligence and Security Agency?
Honestly Qubes is over rated.
Just use virtual manager with VMs.
If all you want to do is run VMs, Qubes is not what you are looking for. Even virtual machine manager (and other abstractions over libvirt and KVM) need to be hardened to avoid compromising the host.
Example: By default virt-manager uses a NAT bridge to allow for the guest VM to access the host and the LAN. A couple of weeks ago vulnerability was found in CUPS print server, allowing a hacker to do RCE. If a guest VM was compromised (previously or because of the vulnerability), since the host also likely has CUPS the hacker could use the guest system to compromise the host. This is avoided on Qubes because the host has minimal software.
Virt-manager offers no where near the same Security as Qubes. Qubes has a security hardened host and strong Desktop security model. Everything runs in VMs (aka qubes) including different parts of the system to further improve isolation. Sure, you could replace Qubes OS with an off the shelf Linux distro and run VMs, but that is nothing like Qubes, offers none of the convenience, and isn’t hardened or debloated (reducing host attack surface).
No Linux distro comes close. Qubes is designed for a specific job. I am not saying Qubes is the “best OS ever” when I say Linux distros dont come close, I specifically mean that no Linux distro is designed with as strong of a focus on Desktop security model and isolation-based workflow.
So i’m a conservative just a bit paranoid, gotcha 👌.
This. Is. Epic.
No idea where I fall and at different times all over. Use Firefox, fedora now, devian on server. Run selfhosted for most stuff. Just debloated stock Android removed most of Google’s stuff. Have used Graphene but it’s missing tracker tracking.
devian on server.
Debian or Devuan?
yeah we are are similler i use librewolf a fork , used fedora but it’s redhat and they are hated for what happend a year ago so i use linuxmint debian edition i used a lot of distros even stock arch but i didn’t settle also i’m now staring the self hosting thingy i used docker last week and still trying to discover new things if you have anytips or sites or projects i can check out that wouldbe helpful also i debloated my phone removed most shit i don’t used keeped only g maps
I feel so called out, even though I’m the second box and I currently use tumbleweed.
Mmmh don’t think that an FSF Member prefers WebM for it is made and maintained by Google the thoroughbred of sin.
That’s w3m, an Emacs web browser, not webm the WebM file format.
No No I don’t mean the icons but the Blocktext points along OGG and ODT.
Excellent Dr. Horrible reference.
You’ve got it, Buddy :)
What a ride!
I am a newborn paranoid who “watch Luke Smith” and think “Richard Stallman was right”.
Ew 🤢
Removed by mod
Can you not? !politicalmemes@lemmy.world is that way
The subject is technology.
