Whooping_Seal

joined 2 years ago
[–] Whooping_Seal@sh.itjust.works 2 points 3 days ago* (last edited 3 days ago) (2 children)

I'm going to suggest an alternative to Samsung Internet or Firefox : https://github.com/uazo/cromite

Out of the options I've tried, it's probably the best bet for reducing tracking, fingerprinting & increasing security without turning to Tor browser (which while it is more anonymous, is frustrating for general browsing)

For clearing cache, there are two options. There's a dedicated clear browsing data button in the hamburger menu, it can also be configured to "sanitize on close" (similar to Firefox on desktop, or Brave on desktop / mobile) [In cromite, this can be found under Security > Clear the data at open]

I can't recommend Firefox on Android in good faith, until site isolation (fission) is enabled on the platform. This is a major security regression compared to desktop Firefox, or chromium based browsers on Android

Edit: It seems like Iron Fox (continuation of Mull / fork of Firefox) has site isolation enabled - but it is still buggy and does not have all features enabled e.g no isolated process SELinux labels.

To be fair, even a skilled users may just not notice something like this. There are many things we do in our day to day life without paying enough attention, particularly when it's routine / something we feel adept using.

I hate to post another comment, but another great tool for media reading in general is RSS feed aggregators. Yes they can be janky, but it is the easiest way to explicitly choose what media you receive, rather than relying on algorithms in news apps / social media to dictate all that you read.

NetNewsWire is a great option for Apple devices Feedbro integrates into your web browser And Feeder is the one I use on my Android phone.

Here is a general comparison list on Wikipedia of different feed aggregators.

If you are a bit more technically inclined, I highly recommend hosting your own feed aggregator online (allowing you to sync your saved articles / read articles between devices, and better battery life on mobile devices). The two apps I usually see recommended for this are tt-rss "Tiny Tiny RSS" as well as FreshRSS.

[–] Whooping_Seal@sh.itjust.works 2 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

I think it isn't the most useful spam reduction method as lemmy.ca and I'm assuming Pixelfed.ca federate with a block list rather than an allowlist. Bad actors can always run a new instance to bypas bans etc., even positioning the instances as valid moderated instances for a while before launching bot attacks.

I also think part of the joy of using a platform like lemmy is the pseudo-anonymous nature of the platform. That type of government identity verification begins to compromise that a bit, but maybe I have a more extreme view on the option of pseudo-anonymity being a paragon of the free internet.

Edit: Just to note I am not a lemmy.ca account, but I am a Canadian (which is in part why I picked sh.itjust.works, another Canadian owned instance)

I find it's just a lot of effort to go through visual customization for very little benefit, I have spent more time creating rootless podman images for certain apps, custom scripts, keybinds etc.

What I mean to say is there's likely many people who customize functionality of their systems one way or another — without ever touching the visual side of things much beside maybe changing the font or turning dark mode on.

[–] Whooping_Seal@sh.itjust.works 2 points 2 weeks ago* (last edited 2 weeks ago)

Do Not Say We Have Nothing by Madeline Thien was a great read. It was shortlisted for the Booker prize, won the Governor General's award and won the Giller prize that year.

I also can highly recommend Indian Horse by Richard Wagamese, which was a finalist for CBCs "Canada Reads".

Overall I'd highly recommend looking at the GG and Giller for authors, as well as CBCs "Canada Reads". For Canada Reads, we also have the shortlisted books for this year's edition already!

That is a really fascinating blog post! Thank you for sharing it :)

[–] Whooping_Seal@sh.itjust.works 2 points 2 weeks ago* (last edited 2 weeks ago)

As with any map app, when the app is in the foreground it uses location data to position you on the map. Most of the transit authorities also have public APIs for locating their vehicles which the app uses in conjunction with user location data to provide more accurate transit arrival time (and inherently is how they can know if you're taking transit)

They do state in their privacy policy that location data isn't linked to your personal information, nor is it sold to third parties. Their model solely relies on user / transit authority subscriptions. Of course, this still requires you to trust their data processing, but I feel like they adequately provide useful transit features with said location data.

Edit: I should also add you don't need to make an account, in which case location data cannot be tied to any personal user data and you are still admissible for the free subscription offered by select transit authorities.

[–] Whooping_Seal@sh.itjust.works 2 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

I am not entirely sure, for me there's an option to email them if I believe I am admissible and haven't been added. I don't take transit enough to be admissible however, I usually just walk. I will have to ask some of my friends who have it if it was a fully automatic process for them or if it was manual (in my case, OC Transpo / STO)

Edit: I just opened the app to check and I am now a Royale member, so it is automatic. I take transit only once a week I'd say.

[–] Whooping_Seal@sh.itjust.works 6 points 2 weeks ago (1 children)

I'm not surprised by the corporate network, it's pretty common for those types of networks to severely block inter-device LAN communication. There are two solutions however, for one, KDEconnect has initial Bluetooth support. I think it only support Plasma and Android as of now, and could be documented better, but it does avoid the LAN access problems. The other solution is using a VPN, the easiest off the shelf solution being Tailscale, but I feel this is only worth it if you have multiple use cases for it (I use it for faster Syncthing transfers, Moonlight / Sunshine game streaming. And KDEconnect)

I really wish KDEConnect "just worked", similar to how Apple's devices connect to one another, but I guess this is the price you pay sometimes for an open source cross platform solution.

 

This is a great alternative to Apple / Google maps for public transit takers. Generally speaking their data is a lot better for service issues, rerouted lines, and the actual time of arrival for transit vehicles. Many transit authorities in Canada actually offer the premium subscription for this app, for free, to frequent riders AND the app is developed locally (in Québec)

If you're just looking for general maps however I highly suggest Open Street Map, or the Organic Maps app on Android (which uses OSM data). While they aren't explicitly Canadian, they get you away from American tech conglomerates and give back ownership of data to you, the user!

[–] Whooping_Seal@sh.itjust.works 10 points 2 weeks ago (3 children)

For sending things to devices I use KDE Connect. I realize it is a fundamentally different application, but it is what I use generally to send / receive links between devices, as well as documents, images etc. It also is good for notification mirroring, and really just integrating Android devices into Windows / Linux computers.

For passwords I used KeePass (and I sync them between devices with SyncThing), but I usually recommend Bitwarden (which is what I used to use). Both are open source, have apps for all platforms, can integrate into your browser if you choose. The main advantage of Bitwarden is that it is open source, all necessary features are free, and you can host the server yourself if you want. It also integrates into some services, notably email aliasing ones, to allow you to generate new emails every time you make a new account.

For bookmarks / history your best bet is the extension everyone else is recommending here!

[–] Whooping_Seal@sh.itjust.works 1 points 2 weeks ago (1 children)

I'm saying this as a coffee fanatic myself, you don't need to be educated on what is "good or bad", what matters is what you like :)

I haven't tried Muskoka myself but I'll likely give it a shot at some point!

Some other Canadian ones I like are Hatch (out of Markham) and Equator (near Ottawa)

 

Recently I borrowed my partner's copy of Links Awakening for the Nintendo Switch. I understand that many people did not enjoy the remake due to the graphics but I am one of the weirdos who somewhat enjoys the cutesy round graphics with the intense depth of field / forced perspective look. From a pure graphical standpoint I think this is a really good way of remaking a top down GB / GBC game for a new platform. I similarly enjoyed Pokémon Alpha Sapphire's graphics despite many others not enjoying them.

I think this has to be one of the most frustrating remakes I have played in recent history, solely for the inability to use the dpad for 8 direction movement. I am not against the remake using the joystick for movement, for example the aforementioned Pokémon game alows for the circle pad and the dpad to be used (for 360 degree movement and 8 direction tile based movement). My frustration with the controls in link's awakening is the forced use of the joystick with 8 direction tile based movement. What could have otherwise been an enjoyable experience is made more difficult, and leaves me wondering why I am not playing the original on my 3ds instead.

I do really enjoy many of the QoL improvements in the remake, the graphics, and the music. I also appreciate having the X and Y buttons available unlike the original gameboy versions. I'm still going to power through it, but sadly the GBC version is going to be the definitive version for me despite this version coming so close for me.

 

cross-posted from: https://sh.itjust.works/post/1163818

Update: The guide on github has been updated and has addopted a different method. Notably, it:

A) still accomplishing my goal of avoiding running the process inside as root.

B) uses the linuxserver.io image rather than the syncthing/syncthing one (my method does not allow for the linuxserver.io image to run), the linuxserver one is based on > alpine, I truly forget what the other one is based on.

An archived version of the guide I followed to create my setup has been placed bellow, the updated (and all subsequent version) can be found here

I saw this guide discussing how to run Syncthing in > a podman container on immutable OSes and decided to try and create a better solution that avoids running the process inside as root. I am new to podman and it's been > a few years since I used docker so I am a novice in this side of system administration and I guess I am writing this as a "sanity check" for what I have done.

Below is the podman run arguments I used in place of the ones found in the article, I also manage it with systemd as shown in the article.


podman run -d \
 --name=syncthing \
 --hostname=syncpod \
 --label io.containers.autoupdate=registry \
 --userns keep-id \
 -p 127.0.0.1:8384:8384 \
 -p 22000:22000/tcp \
 -p 22000:22000/udp \
 -p 21027:21027/udp \
 -v ~/.config/syncthing:/var/syncthing/config:Z \
 -v ~/SyncedDirs/:/SyncedDirs:Z \
-v ~/SyncedDirs2/:/var/syncthing/SyncedDirs2:Z \
 docker.io/syncthing/syncthing:latest

Note: I feel the original guide does not explain what the :Z flag does very well, it should at least emphasize unknowing users that it is telling podman to change the SELinux label of a dir to match that of the container.

The notable changes in my arguments is the --userns keep-id option and switching from the linuxserver.io version to the syncthing image. The keep-id option from my understanding tells Podman to create a user namespace where the user and container map to the same UID:GID values. Allowing all files the container touches to still be used by me, the user. I had to switch from the linuxserver.io version to the syncthing official one because the former did not allow the --userns keep-id option to work (perhaps because it is based on Alpine Linux? I have to investigate more. It failed on running an add-user command if I recall)

Below is an excerpt from a RedHat article describing the --userns keep-id option, square brackets are mine:

User namespace modes

I can change this default mapping using the –userns option, which is described in the podman run man page. This list shows the different modes you can pass to the –userns option.

  • Key: "" (Unset) [Effectively what the original guide did]
    >Host user: $UID
    >Container user: 0 (Default User account mapped to root user in container.) (Default)
  • Key: keep-id [What I am doing]
    >Host user: $UID
    >Container user: $UID (Map user account to the same UID within the container.)

(Source)

So far this method seems to work quite well, and has replaced the syncthing package I had layered for a while. Is this the best way to run it on an OS like Silverblue / Kinoite, or is there a more sensible route to go? Any feedback is appreciated!

Edit: Clarity and grammar, and some more detail in a few spots.

12
submitted 2 years ago* (last edited 2 years ago) by Whooping_Seal@sh.itjust.works to c/privacyguides@lemmy.one
 

I am curious as to what are the best practices regarding blurring and / or pixelating a portion of a photo. I understand the reasons why the website suggests to put a black box over text one wishes to redact, but for other content that is not text what is the best choice. Should a combination of the two be used or just one? E.g. for blurring a face or something else within an image.

Thanks!

 

I am just curious if anyone here changes it from the default (disabled) state. Would you say the telemetry data is particularly useful to the developers & respectful to the user? I generally disable all telemetry even on open source software but I am happy to hear people's arguments for enabling some of it if it helps the developers in a privacy respecting way.

Enjoy your day!

 

cross-posted from: https://sh.itjust.works/post/181146

I am assuming many of you have heard about the potential of Meta creating an ActivityPub enabled client (TheVerge, PCMag etc. have made articles). I was just wondering what people's thoughts are on this, and if it came down to it should instances in the fediverse defederate from it considering it could be a case of Embrace, extend, extinguish.

There's a DefederateMeta magazine at !DefederateMeta@fedia.io if you're interested, which includes an anti-meta pact on cryptpad with the responses viewable on a seperate website if you care to see which instance admins have agreed.

I'm just curious what my fellow sh.it.heads think of this development in the fediverse, any input is appreciated!

Reposting at the request of can, within the context of c/agora should this instance defederate from any future Meta activity pub enabled clients? From my understanding it is more so a Twitter-clone and I'd argue a more severe problem for Kbin / Mastodon, but it is still worth discussing here.

37
submitted 2 years ago* (last edited 2 years ago) by Whooping_Seal@sh.itjust.works to c/privacyguides@lemmy.one
 

I am just wondering what matrix instances are recommended. I would rather not use the main matrix.org instance, but I still want something with good up-time, updated software and that is privacy respecting.

Thanks!

~~Update: I am trying arcticfoxes, thank you for all of your suggestions! Feel free to leave more as it may help others who come across this post in the future.~~

Update 2: I had an issue with cross signing, but it works on envs.net so I am assuming it's an issue with the arcticfoxes instance. I am now using envs.net. As I said before, feel free to leave more suggestions for others who come across this post.

 

I was wondering if anyone knows how to figure out which instances are blocking this one? I know beehaw is as it was quite public, but now we are blocked by 2 and I am just curious which instance is the second one. I have looked on the awesome-lemmy-instances page and also tried Federation Observer, The Federation Info and FediDB but none of them seem to have this information.

Edit: Lemmymap seems like the easiest option, as you can't specifically search for an instance. It seems like https://news.cosocial.ca/instances is the other instance that has blocked us! Thank you bdonvr for mentioning this.

Edit2: It should be noted that this is a very small instance as mentioned by PriorProject, and is nothing to be worried about.

4
submitted 2 years ago* (last edited 2 years ago) by Whooping_Seal@sh.itjust.works to c/main@sh.itjust.works
 

I am assuming many of you have heard about the potential of Meta creating an ActivityPub enabled client (TheVerge, PCMag etc. have made articles). I was just wondering what people's thoughts are on this, and if it came down to it should instances in the fediverse defederate from it considering it could be a case of Embrace, extend, extinguish.

There's a DefederateMeta magazine at !DefederateMeta@fedia.io if you're interested, which includes an anti-meta pact on cryptpad with the responses viewable on a seperate website if you care to see which instance admins have agreed.

I'm just curious what my fellow sh.it.heads think of this development in the fediverse, any input is appreciated!

 

Is the matrix user option just to allow for direct messages akin to what Reddit has, but keeping them on a seperate platform to avoid the devs having to replicate federated DMing tech that already exists in another project?

Also, how many of you are using it? What matrix home servers do you recommend?

thanks!

 

cross-posted from: https://sh.itjust.works/post/117681

I am just curious what the state of android auto alternatives are at this point.

As much as I would like to use GrapheneOS I would find it quite hard to part with Android Auto / Apple CarPlay. I am not expecting Android Auto to be one of the apps to be available in sandboxed gapps, but I would like to see a viable alternative that is better than using OsmAnd with my phone mounted to the dashboard.

 

cross-posted from: https://sh.itjust.works/post/118641

Lovely website to test what armour trims look like in various combinations!

view more: next ›