Bu9818

8 ms·

31.
by Bu9818 3y ago
Yup, or with your own scripts managing bwrap and security-context if not using a DE/Flatpak.
32.
by Bu9818 3y ago
For good, functionality-related reasons at the time[0], and everyone in the Wayland space had been using the mesa library except nvidia with their own proprietary libgl. [0]: https://github.com/swaywm/sway/issues&#
33.
by Bu9818 3y ago
Surely, browsers could create a setting to toggle DNT per hostname?
34.
by Bu9818 3y ago
I think Discord servers for a software project tend to attract a younger audience and are more noisy/active and have offtopic discussion, compared to something like a user/-dev channel on IRC.
35.
by Bu9818 3y ago
I don't disagree with you, except browsing creepjs from Tor Browser it says there have been hundreds of visits with my fingerprint since June (when the 12.5 series was released).
36.
by Bu9818 3y ago
If you want to be able to run most command-line programs (and probably GUI apps through VNC) in an isolated environment (similar to WSL or Chrome OS), then it will suffice, but there are some that appreciate having the desktop Linux environ
37.
by Bu9818 3y ago
I agree there is less bloat like iMessage and less installing random crap apps. The biggest holes if an attacker is determined are probably the browser and images/video, and maybe common networking libraries or networked games which of
38.
by Bu9818 3y ago
The only performance impact I know of is with the seccomp filter in CPU-bound tasks: https://github.com/flatpak/flatpak/issues/4187 Skimming through the recent comments, there might be a way to optimize some
39.
by Bu9818 3y ago
That's definitely the appeal for many of its users, being able to escape the locked down and restrictive environment of Android/iOS and having the functionality of a general purpose desktop Linux device in your pocket. And you can
40.
by Bu9818 3y ago
You can get a spyware-free OS with GrapheneOS, and the newest Pixel phones probably have the best hardware isolation features.
41.
by Bu9818 3y ago
I agree. I would use protonmail or something else for signing up for websites, as a domain would be linked to me (unless I buy dozens of domain names anonymously). For Git commits or communication tied to my real identity, then yeah I'
42.
by Bu9818 3y ago
You can hide it from other users by using a cloak (which some servers enforce on all connections), if that's a concern (but I don't think it's much of a concern). If you want some anonymity from both the server and users you&
43.
by Bu9818 3y ago
Will libwebp get a new release/tag soon?
44.
by Bu9818 3y ago
Well, for one you can avoid messing with NAT traversal and port forwarding if you just use onion services. They list some more reasons here, mostly just for privacy/anonymity: https://github.com/TryQuiet/quiet&#x2F
45.
by Bu9818 3y ago
Is this a supported feature by Google, or does it require client modifications/forks? If the latter, with Web Environment Integrity it's conceivable that this may not be possible with many sites in the future.
46.
by Bu9818 3y ago
>Also out of curiosity, how adequate is Tor for bittorrenting? I would guess it constrains bandwidth pretty severely? I've never done it, but it will have some problems: no UDP support (cannot connect to UDP trackers or use uTP with
47.
by Bu9818 3y ago
Tor Browser and Mullvad Browser are your best options, but they aren't browser plugins. Some of their protection is implemented with browser patches.
48.
by Bu9818 3y ago
I don't know the case for tailscale but systemd system services can definitely be run under a specific user/group and have sandboxing applied.
49.
by Bu9818 3y ago
Sensitive features like screenshots, input methods, screen locking and whatnot are behind extensions (or portals). I'm not familiar with the state of GNOME/KDE/Flatpak, but at least on the wlroots side of things it is true th
50.
by Bu9818 3y ago
You could do some of this with an input method editor (IME). It's pretty much an authorized keylogger that can edit your inputs, and is mainly needed for Chinese/Japanese typing. An IME that provides English autocomplete on the de
51.
by Bu9818 3y ago
This reminds me of a torrent on Nyaa that implemented Bad Apple!! in ASS subtitles by retracing the frames into SVG (seems to be better quality than simply using potrace by itself), converting the SVGs into ASS Dialogue events, and muxing i
52.
by Bu9818 3y ago
For what reasons specifically? Namespaces not being good enough (if the malware is more complex and tries to exploit the kernel)?
53.
by Bu9818 3y ago
Even ignoring the installed interpreter, libraries on Linux distributions are usually installed system-wide as their own packages which other packages depend on (neovim, mpv, cgit, etc.)
54.
by Bu9818 3y ago
DiscordChatExporter: https://github.com/Tyrrrz/DiscordChatExporter It's a standalone program using the API in a nonstandard way but I don't think anyone's been banned for using it yet.
55.
by Bu9818 3y ago
Fair enough, it may be more reliable against general/naive approaches like commercial uses though a sufficiently skilled adversary may only consider the fingerprinting techniques they have missed (one specifically targeting TB users).
56.
by Bu9818 3y ago
This is possible with Linux network namespaces too (but doesn't provide protection against kernel exploitation).
57.
by Bu9818 3y ago
If you're on Linux, consider network namespaces. Very cool feature.
58.
by Bu9818 3y ago
The alternative (faking Chrome or something) is extremely difficult, especially with a different codebase. There's going to be differences. You can tell if someone is using this browser if they're using Tor/Mullvad too. It&#x
59.
by Bu9818 3y ago
As a side note, Tor Browser/Mullvad Browser does randomize canvas (and this changes every time you restart the browser or press New Identity). I don't remember what the reason for randomizing this specific feature is for, maybe it
60.
by Bu9818 3y ago
It's going to be extremely difficult to imitate another browser like that, especially one of a different codebase. Chrome is extremely fingerprintable too.

More ›