Flash drive hidden under the carpet and connected via a USB extension, holding the decryption keys - threat model is a robber making off with the hard drives and gear, where the data just needs to be useless or inaccessible to others.

There’s a script in the initramfs which looks for the flash drive, and passes the decryption key on it to cryptsetup, which then kicks off the rest of the boot mounting the filesystems underneath the luks

I could technically remove the flash drive after boot as the system is on a UPS, but I like the ability to reboot remotely without too much hassle.

What I’d like to do in future would be to implement something more robust with a hardware device requiring 2FA. I’m not familiar with low level hardware security at all though, so the current setup will do fine for the time being!

Salty snacks, fried or baked 😁. Failing that, those tiny 7" pizzas that fit into my Ninja, ready in literally 8 mins

Used to like preparing food, but seems like such a hassle now

Looked up what “fawning” meant, never heard that word before

praising someone too much and giving them a lot of attention that is not sincere in order to get a positive reaction

Source

Haven’t watched the video so I’m unsure of the context, whether it’s about a neurotypical as the recipient of fawning, or a neurotypical fawning another individual

From GoG specifically, as they patch the older games on their store to “just run” on modern Windows

Free google play credit, I usually get an email every year for it

But I do pay for Plex, despite Jellyfin being a thing. If I like something and it’s worth it to me personally, why not 🤷‍♂️… but you will never find me defending their kinda crappy decisions like the new Discover feature, removal of “All Songs” from the plex apps in favor of moving people to Plexamp, removing the Gallery sync a few years ago etc.

Some people want their software to be 100% FOSS all-eyes-on-the-codebase, others just do a balancing act based on their personal values.

I value my software to be “transparent enough” in how it operates, “just work”, and hackable to some extent - if I really wanted to I can swap out the ffmpeg binary that Plex uses for transcoding to something else (doesn’t remove the Plex Pass limitation for those curious), I can hook into the server API to change ambient lighting colour based on the cover/background of whatever media is playing, I can create speakers running a Linux board to cast Plex media to, etc. But once that hackable ship sails, then I will look to FOSS alternatives.

For Niagara, everything “just worked”. No noticeable bugs, fast search, consistent feel and design, useful contextual info (e.g. next calendar event shows under the clock), and gestures that made sense for its overall UX. Using it felt less like you were using a “launcher”. The yearly sub was cheap enough that I wouldn’t mind covering for it if I didn’t get credits, and having a single person working on software usually comes with a high level of attention to detail (particularly in performance and UX) but it does have the downside that the experience may be more opinionated and closed compared to if it was a community-driven FOSS project instead IMO.

Alas, google didn’t send credits this year, Niagara made less sense for value/worth-it compared to Kvaesitso, so I abandoned it.

For me, Kvaesitso does everything in a slightly different, much more customizable way, and being FOSS was one of the things that made it particularly attractive as a replacement

Edit: sorry, I may have misunderstood your post - free email != email masking.

My original post below…

Curious why you consider email address masking services as for those with “drastic anonymity” requirements?

I personally don’t think so: they are pretty much just a digital P.O. box, and are typically not anonymous in any way (subpoena/court order to the provider). They are built-in to Firefox too, it will automatically create new ones OOTB as you sign up on websites, if you click the autofill.

They are however IMO one effective tool out of many to restrict the ability of data brokers and hacking groups (aggregated breach datasets) alike from making money from your online presence without your consent.

In almost all cases this data is freely searchable for law enforcement and private investigators, allowing them to avoid going through the legal system to investigate and possibly detain you for things you’re not guilty of

Both were minor annoyances for me at first lol, thankfully the widget button can be removed (Settings, Home Screen, Edit button - toggle off)

The favorites box is an interesting one, I was originally puzzled with it being empty until I started opening and pinning apps. Now settled on using it as an overflow for my home screen, where 5 of the most used are shown under the clock (with music permanently pinned), and the rest sit in the favorites box.

I did notice some stutter on the apps menu which only occurs while the keyboard is open, but goes away completely when the keyboard disappears. For others it seems like the entire app drawer is stuttery (noticed a long discussion on GitHub with some potential solutions: https://github.com/MM2-0/Kvaesitso/issues/257 )

If they’re easy to get, why not have them 😉

IMO this is pretty shortsighted and going to affect all the wrong people, skimasks and balaclavas are a thing!

It prevents apps from opening links in your browser directly, since they have to go through URLCheck first. Let’s say you click a link in your email, and instead it opens a “google.com/url?q=https://amazon.com” or a “safelinks.outlook.com/?url=…” instead of just taking you to Amazon.com. URLCheck will get rid of the unnecessary redirection and allow you to go directly to the site.

Adding onto that, my pet peeve with email links is them showing you a link that says Amazon.com, but then you go to click the link it opens a bunch of email tracking links before finally taking you to Amazon.com. With URLCheck you can actually stop these links from opening, and go to the website directly in the browser yourself.

If you’re familiar with that issue that popped up regarding “.zip” domain names, and how they can be engineered to look like an official URL, this is a non issue as you’ll get a warning if any link contains malicious unicode characters that could be mistaken for something else

Also, if you have multiple apps that can handle a link (maybe different youtube apps like libretube, newpipe, grayjay), you can pick which one to open after clicking a link. Android does have a stock app picker, but it’s very easy to mistakenly set an app as default.

Android apps can also track what apps triggered them to open - URLCheck can mask this, and even set some advanced flags for how the link handler app should be opened.

To be honest after using it for a while, I really wish there was something similar available for desktop

This is how I do it 👌 no need to install another when the pi already comes with one OOTB.

If OP is looking for VNC clients for zorin OS, there’s an app called “Connections” in the store which works great

Ohhh it wasn’t a Pinephone I ordered, it was a Pinecil v2 and a bunch of accessories and stuff for it. Sorry I should have been clearer lol.

The pinecil is absolutely amazing so far, however the included stock tip is pretty rubbish, doesn’t distribute heat too well. The optional extra ones are much better. The whole thing is deceptively small, I thought it was going to be much larger!

Federated alternative to shXtter

My Pine64 order wasn’t marked as a gift, and it turned up at my door completely untaxed 😳

The SaaS or the Flathub one, or both?

Just checked the Flathub one and its accompanying repo, and could not find any mention of tracking or proprietary components…

Compared to Plexamp or Spotify on Flathub, where there is a prominent warning box notifying you about it being proprietary

Yikes, that is embarassing.

Is opencart written in PHP? Bcrypt has been a thing for decades now, and is literally a drop in replacement that handles salting et al. If the developer was hesitant to implement that, I’d rather go use Magento or shudder Shopify

Those sony Trinitrons sounded so damn good, you could hook up two rca’s to the AV jack and use the tv as an reasonably good speaker

Ooh interesting, never knew they started a rewrite!

The reports of poor performance with the PHP version was one of the things that pushed me towards using Syncthing instead when I was looking for a solution to view my documents and files from various devices

Lovely feature, been using it for years 👌 I have my calendar, email, homeassistant and zabbix pinned

They also don’t move when the normal tab bar becomes scrollable due to too many tabs open, which is pretty neat IMO

Happens on both LinkedIn and Instagram, never actually checked what causes it…

Wouldn’t be surprised if it’s some click event listener firing off a synchronous xhr telemetry request when you close the popup, which freezes the main thread long enough to make the browser think you’ve selected some text