icefog

5 ms·

1.
by icefog 7y ago
> Of course that means basically no 3rd party apps I'm using LineageOS without Play Store/Services and would like to dispel this myth. Here are just some of the third party applications I can install directly from the developer
2.
by icefog 7y ago
Step 1: Never, under any circumstances, sign into Google Play Services. Better still would be to rid your Android of it altogether and install LineageOS.
3.
by icefog 7y ago
Removing OnStar antenna and power was one of the first things I did on my new GM truck. It doesn't require any special tools or knowledge and only takes several minutes. The fact I had to do any of this at all instead of being asked to
4.
by icefog 7y ago
It doesn't offer end-to-end encryption, therefore there is little reason to be interested. It speaks volumes about the product and company that built it, that it's 2019 and it isn't so much as an optional feature to encrypt y
5.
by icefog 7y ago
Not if the sole purpose of that account is email and nothing more. I should be able to make decisions about what an account is used for and how to authenticate, even if that's the "wrong" or "less-secure" decision.
6.
by icefog 7y ago
Does mutt support oauth yet? If not, this will be the last straw for G Suite from me. I can sort-of understand turning off "less secure" apps in consumer Gmail, but forcing "security" requirements for private, paid enter
7.
by icefog 7y ago
What does any of this have to do with whether or not AOSP is open source? The Play Store isn't even part of AOSP nor Lineage/Graphene, so the point of that tangent is even less clear.
8.
by icefog 7y ago
AOSP is absolutely open source: the code can be viewed, modified, built and deployed as desired. There's good reason to be skeptical of Google-developed software, but your characterization of AOSP as "not open source" is simp
9.
by icefog 7y ago
I like awk as a calculator: calc () { awk "BEGIN { print "$*" }" } $ calc "2^16" 65536 $ calc "2*16" 32 $ calc "2+16" 18
10.
by icefog 7y ago
I value this sentiment and do feel charitable, but $2000 is not a small amount for me - I could buy 10 or more used Android phones for the same price and flash them with open source software to give to friends and family. Wouldn't that
11.
by icefog 7y ago
> The problem is no matter what custom flavor of Android you run, you are still running an OS made by an ad company designed from the ground up to spy on you. LineageOS and GrapheneOS are based on AOSP, which is an open source project n
12.
by icefog 7y ago
Firefox is on a serious roll this year, from performance improvements to actual privacy hardening that matters. Since Chrome rolled out auto-login, I've made it my personal mission to stop using it, and now I'm realizing I haven&#
13.
by icefog 7y ago
I'm unsold on spending $2,000 or even $700 on a new phone, but I also care deeply about privacy and security. Is there any strong reason to choose "Librem" over a cheaper Android running LineageOS or GrapheneOS? They can be p
14.
by icefog 7y ago
Good to know, but I don't need to write anything on OpenBSD. The protection is just enabled by default. That is more comforting to me as a user.
15.
by icefog 7y ago
Does it? On OpenBSD, Chrome cannot read my ~/.ssh directory, can the same guarantee be made on Mac?
16.
by icefog 7y ago
OpenBSD has a really novel concept of using unveil and pledge to contain processes into restricted-service operating modes. And being OpenBSD, these security features are actually turned on by default for many binaries. See discussion in h
17.
by icefog 7y ago
No, but that would be fairly easy to configure - put the IoT devices on their own VLAN with dedicated DNS server. My household is small and the list of new domains visited is manageable and interesting to inspect by hand. It's definite
18.
by icefog 7y ago
But not all of them, right? Some of the vulnerabilities do require upstream microcode updates, and without them, I feel like the risk introduced outweighs any benefit provided by Libreboot.
19.
by icefog 7y ago
Yes, nothing fancy. On the router, Dnsmasq and Dnscrypt-proxy with "forwarding rules" mapping domains or TLDs to desired resolvers. Any queries not matched get forwarded upstream to a server running Dnscrypt-wrapper and Dnsmasq, w
20.
by icefog 7y ago
On my home network, using dnscrypt-proxy, I keep a whitelist of top-level domains my devices have connected to. The few new domains to resolve are forwarded to a remote server and logged for periodic review, to update the whitelist or spot
21.
by icefog 7y ago
> x200 with Libreboot How safe are those now that the Intel vulnerabilities are known? I doubt hardware that old is getting microcode updates.