4 ms·

I've kept a spare cheap android for too long and recently went with Graphene instead. I have one Google profile and only use it for Uber, work's Google Chat and

• gonzalohm 5mo ago
  What's the best alternative for Google drive? I also went this route but Samba is a bit annoying sometimes
  • dwedge 5mo ago
    I only share with one person so we use Seafile
  • danparsonson 5mo ago
    Syncthing is very nice.
    • cromka 5mo ago
      I have nothing but issues with it, mostly because the iOS/Android apps are notoriously bad at syncing the files timely and also because of ridiculous filename restrictions on Android.
    • gonzalohm 5mo ago
      Is not the same though. It requires downloading the entire shared folder. That doesn't work when I have 100+GB of files and I want to share it with my phone
      • duskdozer 5mo ago
        https://docs.syncthing.net/users/ignoring.html https://docs.syncthing.net/users/ignoring.html
  • bsmith 5mo ago
    If you dont need filesharing, you can just setup wireguard, setup a network drive on your phone's files app.l, and then when connected it'll feel like native file browsing.
  • drnick1 5mo ago
    What makes Samba annoying? I think it's perfect for its intended use (LAN). If you need to share files externally, Nextcloud works very much like Google Drive and allows the creation of sharable links.
  • BloodyIron 5mo ago
    Nextcloud, Samba serving SMB isn't really equivalent.
    • komali2 5mo ago
      Nextcloud also has lots of interesting plugins. I recently found a viable Splitwise alternative I chucked on my instance.
    • yard2010 5mo ago
      I don't get how Samba is not there yet. We already have everything in the OS, the UI, the mental model, the protocols, how come it's such a terrible experience that we need to re-invent the wheel in web 2.0.. Maybe we need a Jarred Sumner to fix it.
      • BloodyIron 5mo ago
        Samba has never been about file sharing over the internet. The project has been about cleanroom-reverse-engineering specific MS technology. To start it was NT4 authentication domains, then printing services, along the way SMBv1 (commonly incorrectly called CIFS btw), then SMBv2 v3.x, and then in 2012 Samba Active Directory. In no way has it ever been about a functional alternative to something like Nextcloud. It's been about services primarily for LAN functionality, not stuff that should be going over the internet (mostly for security reasons). So your expectations really don't align with what Samba has ever been about. Source: I professionally support Samba for businesses.
  • ianopolous 5mo ago
    There is Peergos: https://peergos.org https://peergos.org (disclaimer: I am the creator)
  • class3shock 5mo ago
    Proton Drive works well and is from a company that supports privacy but does require a paid subscription.
• ryukoposting 5mo ago
  If you don't mind me asking, what Bank? I've resolved that this phone will be my last googled phone, and my next will be GrapheneOS.
  • dexterdog 5mo ago
    Not OP, but I've been on GrapheneOS for a few years and I have no problem with Chase, CiT or Wealthfront. I mostly use them to check balances and unlock debit cards, but they all login and function fine.
    • ryukoposting 5mo ago
      Noted, thank you for the advice.
  • dwedge 5mo ago
    Halifax UK. It just refuses to work so I left it (Graphene is more secure, so forcing less security for the sake of tracking is off the cards). All the other banks so far say they won't work without Google services but if I click OK they work
• drnick1 5mo ago
  My setup is similar and nearly 100% self-hosted, including email, files, AI. If something does not work on Graphene, I will do without it. I also have a Google profile, mostly for testing purposes.
  • xerox13ster 5mo ago
    How have you managed to accomplish self-hosted email? I tried similar in 2022 and found it damn near impossible without business static IP or a cloud provider.
    • drnick1 5mo ago
      I have access to a commercial (non-residential), fixed IP. You could also use an outgoing relay as a compromise, since presumably the issue you are facing is other servers rejecting email that you send from a disreputable IP. That being said, you really want a fixed IP as a matter of convenience if you are going to self-host anything.
      • manmal 5mo ago
        How often are your emails being marked as spam, for others? A few years ago it read like there’s a whole science behind avoiding getting flagged. Is this easier now with agents aiding the setup?
        • tuzakey 5mo ago
          I imagine an agent would make a lot of the first time setup from scratch easier, but the fastest reliable way to get up and running is mail-in-a-box or mailcow. Before those were available I built a flurdy style Postfix+Courier+Amavisd+MySQL setup and have been evolving it ever since. Now I'm on Postfix+Dovecot+rspamd+MySQL but I don't think that's for everyone or even the best way to start. The science of not getting flagged is easy when you're not sending large volumes of untrusted mail; it only gets complicated if you start hosting mail for "customers" or let your system forward mail unfiltered into gmail/yahoo. Here's my hit list of universal things to configure: * Start with an IP with good or neutral reputation, non-residential, its nearly impossible to fix an IP that has been burned by a spammer. (Network) * Valid reverse dns for your IP matching your mailhost forward dns (DNS) * Valid SPF record; -all (DNS) * Valid DKIM; with sufficiently sized key (DNS+Config) * Valid DMARC; start with p=none to test and move to p=reject once you're configured (DNS) * ARC if you or your users will ever possibly forward mail (Config) * Don't get your messages flagged as spam anywhere ever, filter outbound mail even if its just you. All it takes is one piece of malware and a saved password and you'll have to get a new IP. (Config) * Don't configure services behind your mail server with example domains that you don't control ~ I get so much mis-configured test mail from people who think its cute to use my domain as an example in their practice lab. It all gets reported as spam or bounces and then their smart host bounce rate goes up. (Config) * Test for open relay; only relay for authenticated users. (Config) * Use strong authentication, preferably with certificates or MFA. (Config) * Secure everything; IMAP/SMTP/POP are old AF make sure you're requiring STARTTLS and setup MTA-STS to prevent downgrade attacks and enforce encryption in transit. Use a real certificate from Lets Encrypt don't self-sign. (DNS+http+Config) * fail2ban your auth, you're going to get so much driveby password spraying and credential stuffing; I fail2ban block entire subnets at a time with iptables actions. I also have a bunch of "poison pill" rules for weird stuff I see in my logs eg block anyone who tries to auth with the NTLM hash for 'password'. (Config) * Don't bother with BIMI at home, you can't get a blue check mark without deep pockets and a trademark (vmc) and most platforms only show logos that have a matching vmc. (DNS+https+config) * DMARC reporting and TLS-RPT reporting are a pain to manage but are helpful troubleshooting deliverability be prepared to read some XML reports or setup a stack to parse them as they arrive (DNS + Config + https) * setup the SMTP Submission port (587), so many networks block port 25 outbound and its the right way for clients to connect. (Config) * configure BACKUPS, don't skip this step, encrypted restic backups to s3 or backblaze b2 is cheap and easy. (config) * track your configs in git, don't commit secrets. (config) * configure a free blacklist monitor on mxtoolbox for your domain(s) (config) If you do those things you'll be in a pretty good spot, you could probably paste that list/this post into your agent and vibe up solid mailserver. For me keeping the spam and phishing out is a bigger hassle than deliverability issues. rspamd does a pretty good job of keeping it manageable. I do all of those things and with all of that setup the only place I ever run into issues with with users on AT&T's residential broadband mail servers. AT&T appears to block you if you're not known to them and they have a short memory. If you don't have regular correspondence with AT&T users they will block you after a bit. I'm a fairly low volume sender so I end up blocked every other time I try to send to AT&T by no fault of my own. I've talked most of those friends off of AT&Ts free email and on to ProtonMail at this point.
• zx8080 5mo ago
  Nice that there's bank to move to. We need regulations against such lock ups.
  • dwedge 5mo ago
    Forced 2FA for banking in the EU is making this worse when it doesn't work
• palata 5mo ago
  > One bank refused to work (even with Google services) so I moved bank Banks are implementing terrible "security" checks. Users of alternative OSes should be a lot more vocal: change bank, but also complain a lot to the offending one, and make sure to leave them a bad review on the Play Store. Actually people not using an alternative OS but caring about that should also leave bad reviews to those banks on the Play Store. At the end of the day, the problem comes from humans in those banks who don't understand and don't give a shit. The only way to make them care about it is to complain enough that it becomes their problem.
  • circuit10 5mo ago
    When I had a jailbroken iPhone my bank app (HSBC) would detect it and show a warning but let you continue anyway at your own risk, which I thought was a reasonable compromise
• fullstop 5mo ago
  > It's a bit irritating but I'm glad I started down this journey because it looks more and more like I'm going to be avoiding the internet I feel this more and more each day.
• ghm2180 5mo ago
  This should be the way. Have a tiny burner phone for maps and any apps that you absolutely can't use without google(it should be a tiny set of < 10 apps hopefully) until you can fully de-google My current de-google project is categorizing all my pictures on my local NAS to create the memories feature (where it shows historic pics on multiple theme axes). You can get really far with just a few hours of work a month to de-google and some off the shelf image embeddings. The hero project in this category — what one cannot do trivially as an indie dev — is creating a great fresh PoI dataset. This is tough to do on a planetary scale because its a societal cooperation problem.
  • class3shock 5mo ago
    The problem with this is gmaps. There is no alternative to it and by the nature of it knowing your location it removes anonymity. I would buy, or even pay a monthly fee, for something that is 75% as good as gmaps but respects your privacy but there is nothing out there I have found.
• foltik 5mo ago
  Have you tried the Uber webapp?
• paweladamczuk 5mo ago
  What do you use for calendar and tasks hosting? I'm on a similar journey and I use Radicale.