netchami

@[email protected]

This profile is from a federated server and may be incomplete. Browse more on the original instance.

netchami,

You can just disable Google Safe Browsing in the settings.

netchami,

It doesn’t seem to be a public website

All of my personal tools like nextcloud and RSS reader were blocked

netchami,

The classics: uBlock Origin to block those pesky ads and trackers as well as Dark Reader so I don’t get flashbanged everytime I visit a website that doesn’t have a dark theme

LibRedirect is awesome for avoiding tracking websites and replacing them with alternative FOSS frontends

Bitwarden to manage my passwords

Violentmonkey to load custom Userscripts

Snowflake to support the Tor network

netchami,

From their website:

Snowflake is a system that allows people from all over the world to access censored websites and applications. Similar to how VPNs assist users in getting around Internet censorship, Snowflake helps you avoid being noticed by Internet censors by making your Internet activity appear as though you’re using the Internet for a regular video or voice call.

Did you know that Snowflake proxies are operated entirely by volunteers? In other words, a user gets matched with a random Snowflake volunteer proxy, which is run by a volunteer like you! So, if you want to help people bypass censorship, consider installing and running a Snowflake proxy. The only prerequisite is that the Internet in your country is not heavily censored already.

netchami,

Unless you use GrapheneOS this is true. But iPhones aren’t any better. GrapheneOS is the only solution.

netchami,

Graphene gang

netchami,

But far worse security, privacy and app compatibility.

netchami,

It’s actually super easy. This guy makes great videos about GrapheneOS. This is a video install guide, it’s really not that hard. You really don’t have to be worried, there’s nothing that you can really fuck up. If something doesn’t work, you just try again.

netchami,

Yes, the GrapheneOS team put a lot of time and effort into creating Sandboxed Google Play services. It allows you to use Google services which are required for many apps without giving up your privacy. You get to choose which permissions you grant to Google Play services, just like with any other app. Basically any app that works on Android also works on GrapheneOS, except for a few things like Google Pay or Android Auto, because Google actually prevents them from working on Graphene.

netchami, (edited )
netchami,

My Pixel 6a was 300 bucks

netchami,

I can only recommend it. I used a Samsung phone a few years ago and putting a custom ROM on it took me a whole weekend, I had to spend many hours researching and I often encountered issues. With GrapheneOS, it was super easy. 15 minutes after taking the phone out of the box I had Graphene running on it. That was my first time installing GrapheneOS btw.

netchami,

it can be removed by rooting your phone

Which makes it even less secure

netchami,

No, it definitely isn’t. Stop spreading false information and potentially giving people a false sense of security. LineageOS isn’t even as secure as stock Android, it’s definitely not as secure as GrapheneOS as GOS has many security improvements compared to the AOSP. Some examples are the hardened C Library, hardened memory allocator, improved SELinux policies, secure app spawning, hardened browser (Vanadium) which is also used for WebView, etc. LineageOS doesn’t even allow you to relock the bootloader, meaning anyone can modify the system because Android Verified Boot only works with a locked bootloader. It doesn’t have any of the security features that GrapheneOS adds on top of AOSP, it also lacks basic security features from AOSP. It’s ok for tinkering, but I would never use Lineage on a production device. You can read the section about LineageOS of this blog post: madaidans-insecurities.github.io/android.html#lin…

Quote:

A common ROM that has many of these issues is LineageOS:

  • LineageOS uses userdebug builds by default. This adds many debugging features as additional attack surface. It also weakens various SELinux polices and exposes root access via ADB, which, as previously discussed, is not a good idea.
  • LineageOS requires an unlocked bootloader, therefore disabling verified boot, which is essential to verify the integrity of the operating system.
  • It does not implement rollback protection. This allows an attacker to downgrade the system to an older version and then exploit already patched vulnerabilities. The default updater even allows you to downgrade versions yourself.
  • Most LineageOS builds also do not include firmware updates, which prevents users from getting new patches to fix vulnerabilities. Instead, it gives a pop-up advising users to flash updates manually that most people will simply ignore.

This is a non-exhaustive list. There are more issues than just those listed above. LineageOS (and most other custom ROMs) are focused on customising the device and not privacy or security. Of course, you could build LineageOS yourself to fix many of these issues, but most users will not be capable of doing so.

netchami,

Why is my comment crap?

Which of my points are not true?

LineageOS has far worse security than both AOSP and GrapheneOS as outlined in the LineageOS section of this blog post: madaidans-insecurities.github.io/android.html#lin…

It also has worse privacy because it uses Google services for things like DNS and NTP by default, which can not be changed by the user. GrapheneOS replaces all Google services like DNS, NTP, connectivity check, and the Attestation key provisioning service through either their own service or their own proxy for the Google service. Most of these can also be entirely disabled by the user on GrapheneOS. It also offers proxies for SUPL and PSDS location services and allows the user to disable these.

App compatibility is worse, as LineageOS uses microG whereas GrapheneOS uses Sandboxed Google Play services. microG is an insecure and poorly implemented version of Google Play services that sometimes has issues with basic Google SafetyNet checks. GrapheneOS just uses the standard Google Mobile Services bundle, but it’s not installed as a system app and has the same privileges as any other app. It can be installed and uninstalled by the user and all permissions can be revoked (including network and sensor access).

netchami,

all devices don’t have specific, stable builds, etc

GrapheneOS is actually very stable and has specific builds for all the devices they support. It only supports Google Pixels, because these are the reference devices that AOSP is built for. They also have great hardware security features like the Titan M series of secure elements.

Also, going this route poses a very real risk of bricking your device.

Not with GrapheneOS. Their easy-to-use web installer makes is basically impossible to break your device during the installation process. It’s really easy and maybe takes 15 minutes.

netchami,

Linux phones are not at a point where you can actually daily drive them. They even lack support for basic apps like Signal. The camera and battery on the PinePhone aren’t great either. These are concept phones, but nothing that anyone can actually use. Also, Linux distributions are much less secure than GrapheneOS or even AOSP. And good luck getting normies to use a Linux phone, it’s already hard with desktops, but impossible with phones.

netchami,
netchami,

Some solutions:

netchami,

Try Yattee with this guide

netchami,

For Android, LibreTube seems to be the best solution. You can also try NewPipe. On desktop, you can use FreeTube and if you want a reliable ad-blocking solution, it’s best to switch to a browser that actually supports proper adblockers. MV2, the API used to block ads is not available in Chrome or Chromium-based browsers, so if you want proper adblocking, use Firefox or LibreWolf with uBlock Origin. Alternative frontends for YouTube like Piped or Invidious are also an option, you can use them in combination with LibRedirect to automatically redirect any YouTube link to the frontend of your choice.

netchami,

It requires the proprietary YouTube app that collects all of your data whereas all the apps and services I listed are free and open source as well as privacy-respecting.

netchami,

LibreTube and self-hosted Piped server is working really well for me.

I use the same stuff, it’s awesome.

netchami,

FOSS/FLOSS is all about empowering users and allowing them to do whatever they want, whereas proprietary software tries to take power away from the user. It’s kinda sad that many people don’t understand this.

netchami,

You can also use VLC or mpv. IINA is a good option for macOS.

netchami,

Might not be as privacy-friendly as other options though

That’s why I didn’t put it on the list. Also, sideloading on iOS is just a terrible experience. You either need to connect your phone to a computer every 7 days, otherwise your sideloaded apps will become unusable, or you can pay Apple $100/year for a developer subscription, so you can use your already overpriced device the way you want to. The best option is to avoid the problem entirely and get an Android phone, preferably a Google Pixel, and then install GrapheneOS on it and sideload F-Droid and LibreTube. This gives you actual freedom, as well as the highest levels of privacy and security you can get on a smartphone.

netchami,

But it requires you to use the proprietary YouTube app that collects and sells all of your data

netchami,

I prefer mpv because the SMplayer user interface is horrible IMO

netchami,

I use Seal for downloading YouTube videos on my phone

netchami,

It’s very likely

netchami, (edited )

I know, Grayjay is on the list. I don’t use it myself though, I prefer LibreTube for Android and Piped on desktop.

netchami,

I really enjoy Lemmy, it’s pretty much the only social network I use nowadays. I also have a Mastodon account, but I don’t really use it, I just don’t like the concept that it follows, I don’t like Twitter and how it works either, even before the acquisition.

Meta May Be Infringing on GDPR With Their New Paid-For Ad-Free Model (tutanota.com)

Recently a European Court has judged that Meta’s way of collecting and using people’s data in Europe has been in violation of privacy regulations between 2018 and 2023. Now Meta announced an option of Facebook and Instagram without personalized ads for 120 euros per year. European users would have the option to pay or agree...

netchami,

You mean 30%, right?

netchami,

Wow, I can’t believe our regulators put in such a dumb limit into this otherwise awesome regulation

netchami,

You can just purge the cache in uBlock Origin and update the filterlists, that will fix the issue too.

netchami, (edited )

Opera GX 🤢🤮

Use a proper browser like Firefox or preferably LibreWolf with a proper adblocker like uBlock Origin. LibreWolf even comes with uBO preinstalled. It also makes many other significant privacy security improvements compared to normal Firefox.

netchami,

I do actually see a need for you to switch, Opera is one of the shadiest browsers owned by some weird Chinese company. It collects all of your data and sends it right to China, I wouldn’t be comfortable using this, it’s far worse than Chrome or even Edge. They also run really weird ads and marketing campaigns, just use Firefox or LibreWolf, the latter has uBlock Origin preinstalled and it’s pre-configured for maximum privacy. I can only recommend it!

netchami,

Just homebrew your switch and install whatever you want. You can even install Android on it lol.

YouTube with recommendations based on what you watch and subscriptions

I’ve been using Invidious and NewPipe to watch YouTube for a long time. I don’t use an account with either of these. However, I’m wanting to get recommendations based on what I watch and my subscriptions. LibreTube looked promising but it no longer works. When I try to watch videos it won’t play. YouTube Vanced is dead....

netchami,

And I think YouTube won’t like what they’re doing.

They have a lot of money for legal battles

netchami,

I am aware of this option, but sideloading on iOS currently kinda sucks. You have to use AltStore which sometimes goes unmaintained for a few months, even when it’s maintained it’s kinda buggy and the Windows version almost never works for me. It’s also not available for Linux. And you have to connect your phone to a computer running AltStore every 7 days, otherwise the app will stop functioning. It’s just not a great solution and especially bad for less tech-savvy users.

netchami,

But you still have to do it once a week, right?

netchami,

I’m definitely not gonna pay Apple money to use my device that I already paid way too much money for the way I want to. But I just switched to Android (GrapheneOS to be percise) and now I don’t have to deal with any of this BS anymore.

netchami,

LibreWolf massively improved it’s update schedule and you can disable any feature you dislike. They have a separate page in the normal user-facing settings for disabling stuff like letterboxing, no need to use about:config. It’s better for new users, but also just more convenient for power users. Having to explain how to harden Firefox to a new user would not be ideal.

netchami,

On average I get like an hour and a half of screen time per day. I use my phone to message people on Signal, I connect it to my bluetooth earbuds and listen to music or a podcast when I go for a run and I occasionally like to take photos. I don’t waste my time scrolling through TikTok for 8 hours like many other people unfortunately do. One week of battery life is pretty rare, but it has happened before. As I said, usually I get 2-3 days out of it when I it charge up to 80%. (charging up to 100% is bad for battery health, so I try to avoid it). I’m sure you will be fine. You can get a Pixel, install Graphene, try it out and give it back and receive a refund if you don’t like it. That’s the good thing about Pixels, installing a custom OS doesn’t void the warranty or anything like that. You can just revert back to the stock OS and everything will be fine.

netchami,

there are many apps which use root access to increase privacy

If you mean apps that allow you to restrict permissions of other Apps, there’s App Ops, it works with Shizuku

customize the system

You can do some customization with adb/Shizuku but for some things you might need root. But I would definitely value security over customizability.

manage battery charging

The OS can do that pretty well

enforce firewall for apps and system

GrapheneOS has a built-in firewall that you can use to block network access to any app on the system.

block trackers

You can do that with DNS services like NextDNS

backup the system

GrapheneOS has a built-in backup solution

netchami,

Who doesn’t keep their credit card in a wallet???

netchami,

LibreTube isn’t broken, it’s the Piped instances that have issues. You just need to switch to another Piped instance in the settings. Click on the three dots, then select settings, go to ‘Instance’ and at the top you can hit ‘Choose…’ to change the Piped instance. I haven’t experienced any issues with adminforge.de. kavin.rocks also seems to work well.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • KamenRider
  • Ask_kbincafe
  • TheResearchGuardian
  • KbinCafe
  • Socialism
  • oklahoma
  • SuperSentai
  • feritale
  • All magazines