Pantherina

@Pantherina@feddit.de

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Pantherina,

Dont use “stable” software people.

Gimp 3 is already very nice! Use it exclusively.

Pantherina,

I mean I already reported 2 issues, but it still works. I can use it without big problems, I use the beta Flatpak (as explained in my flatpak remotes list).

Using Wayland too, Idk about any problems but if it wouldnt work I would just disable Wayland for the Flatpak and the app automatically runs through XWayland

Pantherina,

Burner phones are a strange concept. If you want to store sensitive data on it, you shouldnt use some cheap android phone or even a dumbphone without encryption support.

Pantherina, (edited )

All Android phones have Google malware installed by default, as system apps, which means those apps can do whatever they want.

So every piece of data you put on there is possibly tracked and collected.

Then there are 2 more problems

  • the software is proprietary and cannot be externally wiped clean
  • the software is outdated

This makes it vulnerable to Pegasus attacks and others. There are tons of secure practices to avoid getting it, like LTE-only, HTTPS only, encrypted and trustworthy DNS, sandboxed processes, blocked javascript execution from unknown websites…

But still if the phone is outdated there are unpatched and publicly known security issues. Just spamming them at all phones is likely to succeed as so many people run vulnerable versions, as vendors suck.

Then if you have pegasus, the only way for security is to reflash the A/B partitions, both. Factory reset is not secure as it will keep what is already in the system partitions.

The firmware is protected and signed by the vendors, so it is likely clean.

But Pegasus installs itself to the phone storage.

If you A cant obtain factory images or B cant flash the phone at all, you cannot wipe it clean.

So a good activism phone needs

  • trustworthy and minimal system apps / stock software
  • modern software updates
  • possible to reflash whole device externally
  • nice to have: ability to verify checksum of system partition, like GrapheneOS Attestation

This makes them poorly pretty expensive. I think a slightly outdated GrapheneOS phone is okay though.

Pantherina,

I think 3a is already too old. I think 4a is a better minimum, but this is still insecure of course.

Pantherina,

Yes I know, and I want to try DivestOS one time. But they do incomplete patches.

They cannot update the kernel themselves or even worse the firmware. The kernel needs to be built and patched for the specific hardware, GrapheneOS relies completely on Google here. And the firmware needs to be signed by the vendors, so no chance either.

And especially baseband, cellular stuff has extremely many vulnerabilities in the code.

The Best Secure Email Providers in 2024 (blog.thenewoil.org)

Like it or not, email is a critical part of our digital lives. It’s how we sign up for accounts, get notifications, and communicate with a wide range of entities online. Critics of email rightfully point out that email suffers from a significant number of flaws that make it less than ideal, but that doesn’t change the...

Pantherina,

Mailbox.org missing, pass

Pantherina,

What, source?

How would you block an OS?

And btw there are some reasons why GrapheneOS may be criticised

kbal, to linux
@kbal@fedia.io avatar

Update available! This version is very old.

Xscreensaver has apparently been checking for updates and is disappointed that it hasn't had one for 14 months because Debian is too stable. Can anyone recommend a linux screensaver which would work with xfce and can be trusted to never do that?

Pantherina,

Nice for the paranoid people, but this means false errors when there simply are no updates.

Pantherina,

I dont get why people would care for influencers

Pantherina,

Do gorillas kill babies of other animals, monkeys or humans?

I just dont really believe that Harambe would have done anything to that baby.

Pantherina,

There is no existence or Harambe anymore 🥲

Pantherina,

For sure…

Pantherina,
  1. Good that only you do this, as a whole company setup is complex
  2. Pop_OS is currently not that well maintained afaik, their GNOME desktop is quite outdated.

Just using their OS for the hybrid graphics support is a valid point, but should not be the only one.

Having a well managed OS is crucial, but I disagree that Ubuntu base is the best here.

For stability, a centrally managed Fedora Atomic would be better I think. Way more stable, image-based, all peolple would have exactly what they need.

You could build images locally and take care of the exact updates like that. Or you just share specific configs for each role, like preinstalling different software.

But having things like specific policies, any files, hardening etc. is totally possible during image creation.

Pantherina,

What do you mean?

To my knowledge they dont ship GNOME 46 but some old “LTS” variant (GNOME doesnt do LTS variants)

Pantherina,

For sure, edited it. GrapheneOS screenshots have no metadata afaik

Pantherina,

VPNs are not meant for privacy. The concept is clunky, as is the concept of our internet.

Tor or I2P are made for privacy, but the interactions with the clearnet have the same problems, you need a legal entity hosting the server, IPs are known and can be blocked etc.

Hosting your own VPN does not anonymize you anymore but is very unlikely to get blocked.

Pantherina,

Like… the Intel ME?? And no BIOS seems to allow the switch to disable it, even though that was literally required after the NSA sued Intel?

Pantherina,

Very nice tool for usage and development!

Pantherina,

Any system app on Android, the captive portal login and more CAN all bypass a VPN in “block all other connections” mode.

Android is really problematic and having as little system apps as possible is the only fix.

Pantherina,

Interesting. What are the App IDs of those both apps?

If they base on Chromite that is probably fine.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • Durango
  • magazineikmin
  • InstantRegret
  • hgfsjryuu7
  • vwfavf
  • Youngstown
  • slotface
  • thenastyranch
  • ngwrru68w68
  • rosin
  • kavyap
  • PowerRangers
  • DreamBathrooms
  • cisconetworking
  • khanakhh
  • mdbf
  • tacticalgear
  • ethstaker
  • modclub
  • osvaldo12
  • everett
  • tester
  • cubers
  • GTA5RPClips
  • normalnudes
  • Leos
  • provamag3
  • All magazines