Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)KO
Posts
1
Comments
123
Joined
2 yr. ago

  • Best to buy phones that you can relock your bootloader, from memory I can only think of 2 phone manufacturers that allow that: Fairphone and Pixel phones that allow you to relock bootloader.

    I bought Fairphone 5 with Degoogled /e/ OS from Murena to avoid that annoying cat and mouse game. I bought from murena website to get my phone already with degoogled firmware flashed.

    In my case bootloader is locked with google attestation so 99,9% apps works, including Banks apps with TAP to pay. Bank payments that dont use google pay but implent NFC directly works (so except for google pay other pay method should work).

    Both my bank apps works with tap to pay, But Your milage may vary.

    Im happy with my phone. Due to all that, not a single app had issues with "valid OS checks" because it actually is valid, it did came directly from seller and never got unlocked/flashed.

    It is locked but I should be able to unlock bootlader, flash different firmware version and lock it back up making the attestation valid again but didn't do that yet so can't be 100% sure.

  • It sounds like jest plain simple website/forum BUT with specific protocol making it more discoverable/searchable?

    Allowing to post comments anonymously... sound like a bad idea in the long run, but who know, make me eat my words.

  • I did saw You could also use Tailscale and use their internal signed certificates. Then you can access it both internally and remotly over Tailscale with SSL.

    Personally I own a domain for years and just use it.

  • assuming that Google is not malicious

    Previously they would need to push malicious code to your device to steal your login data, that is a risk that someone would do reverse engineering on that and expose it, now they will have the data on their servers and they can abuse it any time they want, I doubt they will use it to login as you, but they will use it as metadata to connect all your accounts for marketing.

  • proper authentication protocol do not send your password to Google to authenticate

    That is not true for 99% services including google. Google have a plain text password at the time you are logging in, they just store hashed+salted version in storage.

    (Almost) No website (or app) is hashing the password before sending it to server, so if you hack the login screen you can dump RAW passwords anytime.

  • No thanks, sounds like security and privacy nightmare.

    The part about "no user interaction required" doesnt feel right secure.

    Especially as it is stored at google servers, it says it is encrypted but it is encrypred using keys that google has access to as they are unlocked with you logging in into google account.

  • Linux is slow at killing apps when you run out of memory because it was designed to also run on low spec hardware even if very slowly (making the ui totally unrensposnive) due to swapping.

    This comic is about the kill command, how Linux kernel is handling force stopping apps vs (old?) Windows when if App frozed it was hard to close it. Now with modern apps and hardware you very rarely see that as most apps are designed to have asynchronous logic that is correctly handled, but it's still more or less relevant.

  • For VR, if you have a Quest headset and good WiFi, you can try ALVR with SteamVR, it works just fine for me while playing BeatSaber but depending on games your milage might vary.