I think Tor Project is implementing a better version of Linux package. The current Flatpak one is more of a Python wrapper to download the browser rather than an actual browser. It was developed by an independent open source developer later took over by Tor Project since it was very popular. Hopefully it will be fixed in future.

There are no alternative browsers out there. Our situation has came down to choose one of the least evil out there.

Same here. Just turned off all data collection checkboxes. Fuck Mozilla!

Windows Vista had lot of changes to the kernel. Windows 7 relaxed security features introduced in Vista. But nothing changed after that. They have been slapping ugly UI on top of existing kernel.

This is on my todo list. I use Docker-compose for it’s simplicity, but Docker is a security nightmare. If you are not careful, it would expose your Nextcloud instance to the whole world. Podman integrates nicely with firewalld which gives me zone based rules. Can’t wait to do this. But I will give sometime to let Quadlet get stabilized and popular.

Is no one aware of Fedora Media Writer? It’s FOSS and the most trustworthy ISO burning software in existence. It’s only issue is that its named as if it is written only for producing Fedora bootable media. It works for everything.

GrapheneOS is both secure and private. It also supports hardware based attestation (No need for SafetyNet). It’s just that mediocre people who develop these apps do not wish to support freedom respecting platforms.

Your dumb phone is much insecure than a smartphone which has GrapheneOS or LineageOS. Your dumb phone certainly lacks secure 4G or 5G communication, cannot use e2e encrypted messaging platforms and cannot update firmware in case of security bugs.

How would Signal help with zero days?

Did you even read the article? 0-day vulnerabilities are not unique to WhatsApp. Even Signal can be exploited given it’s complexity.

SimpleX is not a Signal fork. It is it’s own protocol, service and app. It just utilizes Signal protocol for encryption like every good e2e encrypted messenger out there.

SimpleX allows anonymous identity, federation between servers and still a good UX.

They block 3rd party tools like yt-dlp, NewPipe etc from residential IP addresses. Probably they deployed solutions to differentiate normal YouTube session on their website and automated tools.

This time they started blocking both residential IP addresses and VPNs to discourage yt-dlp, NewPipe etc. From what I noticed, you need to use official website to load cookies and maintain that session to continue watching videos. It’s irritating. I hope they fuck themselves and go out of business.

Don’t bother videos against GrapheneOS. The lead of GrapheneOS has autism and he lacks social skills. This creates endless loop of hate talk between some YouTubers and GrapheneOS.

As a technical project, GOS is far superior and it is the most secure OS on the planet right now. The lead of the GOS has developed hardened malloc and various other security solutions that is now baked into GrapheneOS. So I would ask people to enjoy the project rather than stimulating more fuss against the project.

I agree SimpleX is superior protocol. I use it to share text between my devices. But I’m little bit hesitant to recommend it to friends and family because it is VC funded. Until SimpleX becomes non-profit or alternative implementation of SimpleX protocol starts showing up, I won’t use it as my main IM.

This is why I like GrapheneOS on phone. It is hardened and secure, but never gets in the way of your work. Everything works as it should. Kicksecure is the closest on the desktop space, though Fedora is also reasonably secure.

I think it depends on maintainer of the device. For me personally, LineageOS has broken a basic workflow like having Signal voice/video call. None of the IM apps are able to pick audio from microphone on my device (and various other models as well) due to a bug in LineageOS for almost 6 months. I regret installing it.

Signal. Though SimpleX is growing as a superior private messenger.

I think, OP is pointing to the fact that ECH makes it harder to block connections to mothership from proprietary apps, TVs etc. These apps could now use ECH, DoH to hide it’s traffic from being observed.

But OP could always buy a better router that can proxy layer 7 traffic and block the traffic if desired.

Tailscale already has Mullvad integration. Why don’t you utilize that?