Pantherina

@Pantherina@feddit.de

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Pantherina,

Burner phones are a strange concept. If you want to store sensitive data on it, you shouldnt use some cheap android phone or even a dumbphone without encryption support.

Pantherina, (edited )

All Android phones have Google malware installed by default, as system apps, which means those apps can do whatever they want.

So every piece of data you put on there is possibly tracked and collected.

Then there are 2 more problems

  • the software is proprietary and cannot be externally wiped clean
  • the software is outdated

This makes it vulnerable to Pegasus attacks and others. There are tons of secure practices to avoid getting it, like LTE-only, HTTPS only, encrypted and trustworthy DNS, sandboxed processes, blocked javascript execution from unknown websites…

But still if the phone is outdated there are unpatched and publicly known security issues. Just spamming them at all phones is likely to succeed as so many people run vulnerable versions, as vendors suck.

Then if you have pegasus, the only way for security is to reflash the A/B partitions, both. Factory reset is not secure as it will keep what is already in the system partitions.

The firmware is protected and signed by the vendors, so it is likely clean.

But Pegasus installs itself to the phone storage.

If you A cant obtain factory images or B cant flash the phone at all, you cannot wipe it clean.

So a good activism phone needs

  • trustworthy and minimal system apps / stock software
  • modern software updates
  • possible to reflash whole device externally
  • nice to have: ability to verify checksum of system partition, like GrapheneOS Attestation

This makes them poorly pretty expensive. I think a slightly outdated GrapheneOS phone is okay though.

The Best Secure Email Providers in 2024 (blog.thenewoil.org)

Like it or not, email is a critical part of our digital lives. It’s how we sign up for accounts, get notifications, and communicate with a wide range of entities online. Critics of email rightfully point out that email suffers from a significant number of flaws that make it less than ideal, but that doesn’t change the...

kbal, to linux
@kbal@fedia.io avatar

Update available! This version is very old.

Xscreensaver has apparently been checking for updates and is disappointed that it hasn't had one for 14 months because Debian is too stable. Can anyone recommend a linux screensaver which would work with xfce and can be trusted to never do that?

Pantherina,

Nice for the paranoid people, but this means false errors when there simply are no updates.

Pantherina,

I dont get why people would care for influencers

Pantherina,

Do gorillas kill babies of other animals, monkeys or humans?

I just dont really believe that Harambe would have done anything to that baby.

Pantherina,

There is no existence or Harambe anymore 🥲

Pantherina,

For sure…

Pantherina,
  1. Good that only you do this, as a whole company setup is complex
  2. Pop_OS is currently not that well maintained afaik, their GNOME desktop is quite outdated.

Just using their OS for the hybrid graphics support is a valid point, but should not be the only one.

Having a well managed OS is crucial, but I disagree that Ubuntu base is the best here.

For stability, a centrally managed Fedora Atomic would be better I think. Way more stable, image-based, all peolple would have exactly what they need.

You could build images locally and take care of the exact updates like that. Or you just share specific configs for each role, like preinstalling different software.

But having things like specific policies, any files, hardening etc. is totally possible during image creation.

Pantherina, (edited )

Software that doesnt store private metadata

  • grapheneOS cam
  • opencamera (not by default!)
  • KDE spectacle
  • android GrapheneOS screenshots
Pantherina,

For sure, edited it. GrapheneOS screenshots have no metadata afaik

Pantherina,

VPNs are not meant for privacy. The concept is clunky, as is the concept of our internet.

Tor or I2P are made for privacy, but the interactions with the clearnet have the same problems, you need a legal entity hosting the server, IPs are known and can be blocked etc.

Hosting your own VPN does not anonymize you anymore but is very unlikely to get blocked.

Pantherina,

They only support Ubuntu as downstream Distro, while they preinstall it on their number 1 supported platform, SteamOS. They control the complete software stack and even hardware.

They dont support Arch on whatever hardware, they support SteamOS on the Steamdeck.

Pantherina,

Like… the Intel ME?? And no BIOS seems to allow the switch to disable it, even though that was literally required after the NSA sued Intel?

Pantherina,

Very nice tool for usage and development!

Pantherina,

For some reason it is not yet on Flathub

Pantherina,

I am not using Mint and it is also in the Fedora repos, but there is no reason for it to not be on Flathub. Maybe when I find the time I try to package it.

Pantherina,

Any system app on Android, the captive portal login and more CAN all bypass a VPN in “block all other connections” mode.

Android is really problematic and having as little system apps as possible is the only fix.

Pantherina,

Ich warte auf den digitalen Euro. Bisher fast nur Visakarte, einfach weil ich nicht jedes mal durch mehrere Websites gehen muss, die teilweise Redirects benutzen die meine Browser (Librewolf, Mull) blockieren etc.

Pantherina,

Your browser is not full of adblockers

Pantherina,

Which is a chromium instance. I would use mull with UBO and noscript.

Pantherina, (edited )

They had this on their homepage, advertizing QKSMS and Bromite as if they were project apps. Which they are not.

So either A: they preinstall apps as system apps or B: they have some form of installer that installs them as normal user apps.

You should have as many apps as user apps as possible.

Maybe they changes this idk. But QKSMS is not a simple SMS app like the one that GrapheneOS implements (the old and hardly maintained AOSP one) and Bromite is an unmaintained Browser which is a huge problem. Cromite and Quik are maintained forks.

Some Archive when they still had Bromite on their page

Could not find QKSMS but that was somewhere

  • All
  • Subscribed
  • Moderated
  • Favorites
  • normalnudes
  • khanakhh
  • magazineikmin
  • thenastyranch
  • hgfsjryuu7
  • Youngstown
  • rosin
  • InstantRegret
  • slotface
  • mdbf
  • PowerRangers
  • tsrsr
  • kavyap
  • DreamBathrooms
  • Leos
  • vwfavf
  • ngwrru68w68
  • ethstaker
  • tacticalgear
  • cubers
  • Durango
  • everett
  • osvaldo12
  • modclub
  • tester
  • cisconetworking
  • GTA5RPClips
  • anitta
  • All magazines