Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)TH
Posts
13
Comments
271
Joined
2 yr. ago

  • In my opinion, the web browser is the single most important application that should be sandboxed on a system. We use them to access nearly everything on the Internet, including resources that are routinely laden with obfuscated JavaScript.

    Every attempt should be made to separate the browser from the host system, and circumventing that safeguard in order to facilitate direct access to your password database is risky at best.

    Edit: I don't mean to suggest that I have the perfect solution either, but I keep everything sandboxed and just opt for KeePassXC's native global hotkey for auto-filling credentials.

  • I think you've already received plenty of feedback here, for better or worse, so I'll just add that you're going find quirks in any operating system if you use it long enough; Windows is no exception.

    Windows and macOS also introduce privacy and security complexities due to their proprietary nature. If that doesn't bother you more than the annoyances you've encountered under Linux, do whatever works for you.

  • I admit I typically hide the RPM Firefox and stick to the flatpak version. Aside from Nautilus though, in my experience most of the core GNOME user apps are provided via flatpak under Silverblue, including things like GNOME Calendar, Text Editor, Contacts, Totem, Evince, EoG, etc.

  • I'm a big fan of the Intel NUC platform, coupled with a fanless case and all-SSD/NVMe drives. They're low-powered, fast enough for most common tasks, and completely silent.

    I have an NVMe drive for the OS (currently Proxmox, soon to be Debian again or Fedora), containers and VMs, and an internal 8TB SSD for data storage (whole disk encrypted). This may not meet your needs if you're intending to be a data hoarder, but I have a sizeable movie and lossless music collection accumulated over 25 years and I'm not even using 4TB yet.

    You can of course still use a similar setup but keep even larger storage on a NAS device, or simply use a USB dock with a couple of 16TB drives. It's really down to whatever your needs are.

    I love that the server, router, modem, and switch use such a small footprint and are able to be powered for up to an hour by an equally small and inexpensive 600VA UPS.

  • I rate Voyager as being in a different class altogether, since it is free and open source. I will always choose FOSS over proprietary software, particularly for network-aware apps, whenever a viable solution exists.

    I haven't tried Boost for Lemmy yet, but I didn't care for it on Reddit (my wife loved it though and used a lot of its moderator features). I used Relay for several years myself, and then Infinity for Reddit until I left the platform.

  • Depends on your power needs. My home server is an Intel NUC, so I'm able to keep it, the modem, router, and main switches running through most power outages with an APC 600VA UPS for about $80 USD.

  • Hmm, why are you not able to shutdown/reboot from the terminal? I don't have any Debian systems running at the moment (other than Proxmox), but I've used Debian for over a decade and never had any issue using the terminal for power management functions (Proxmox included).

  • Ptyxis, formerly Prompt. I used urxvt for many years but eventually settled on GNOME Terminal after transitioning to the GNOME environment for most of my devices. Ptyxis is a slick and quick container-centric GTK 4 terminal that fits well with my Fedora Silverblue container-based workflow.

  • I try to keep things simple and just use Markdown files for everything. I have a doc for each physical device, and another doc for each service/container running on the LAN.

    I generally track hardware specs, upgrade paths, and software changelogs/todos as unsorted lists within these docs. It's super portable and easily synced across devices via Syncthing.

  • First, it's important to realize that Meta is likely tracking you already through its ad-related services even if you don't have an actual FB account. Countless retailers and services are using Meta and Google for ads and analytics and it's virtually impossible to be completely off their radar if you do any online shopping, banking, or service consumption.

    Even with the use of VPNs, uBlock and other tools, Meta likely already has your particulars, including full name, phone number, email, and physical address simply by way of family members and colleagues saving that information to their own address books which are then shared to Meta through FB, WhatsApp, etc. In this way, your name, phone number and/or email address has likely already been associated to otherwise anonymized data through retailer back-ends.

    That said, if Marketplace is important to you I would simply create a FB account and use it solely for that. I would avoid installing any FB/messenger apps, and opt for a browser-only experience in order to minimize additional privacy infringement. Use FF containers, incognito mode, or a separate browser altogether for FB access if you feel it's necessary.

    Meta has taken a hardline approach to fake/obfuscated accounts, so I suggest using legitimate tombstone info but only provide what's necessary for account generation. Anything less and you'll risk a deactivated account, or Marketplace ban.

    Don't overthink it. If you use the platform with basic care (no apps, no persistent cookies), then the most they're going to glean is that you like shopping for retro games and other used goods.