![](/static/253f0d9/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/80c24909-8a49-4cb6-9bdd-4b8621b8cf1d.jpeg)
- July 23 - 3.12%
- August 23 - 3.18%
- September 23 - 3.02%
- October 23 - 2.92%
- November 23 - 3.22%
- December 23 - 3.82%
- January 24 - 3.77%
- February 24 - 4.03%
- March 24 - 4.05%
- April - 3.88%
- May - 3.77%
- June - 4.05%
- July - 4.45%
- August - 4.55%
Just a stranger trying things.
Would moving to a european country be within your considerations? Europe have stronger privacy laws and as a latin american (assumed) you have an easier entry through spain which offers some facilitated job market access. But I do concede that depending on how much you value your privacy, this may be an option out of question?
Youre right, thats how it works in almost all messaging apps. But signal implemented sealed sender specifically to counter this.
You can read more about it here: https://signal.org/blog/sealed-sender/
I encourage you to read the first paragraph, which is important in the context of our conversation.
Can you further explain? A red flag to open-source, federation and such, can’t disagree. But to privacy and security? I’m not convinced.
What are you talking about? you get a phone number from signal, and what will you be able to derive from it? there is no graph. signal does not hold any “relationships” information.
This message is definitely giving all the vibes of a disinformation/misinformation attempt. There is no metadata to harvest from signal.
Here is an example of all the extent of data that signal has on any given user: https://signal.org/bigbrother/cd-california-grand-jury/
It involves phone number, account creation time and last connected time. That’s it. Nothing more.
The cross referencing of data is just nonsense. Google and meta already have your phone number. Adding signal info to it adds absolutely zero information to them. They have it all already. They know nothing of who you talk with, which groups you are part of.
The funding of Signal did involve public grants but that’s not anything bad. Many projects and nonprofits receive public money. It does not imply that there are backdoors or anything like that. And signal was purposefully designed so that no matter who owns and operates it, the messages stay hidden independently on the server infrastructure. They did the best possible to remove themselves from the chain of trust. Expert cryptographers and auditors trust signal. Don’t listen to this random ramble of an online stranger whose intentions are just to confuse you and make you doubt.
Do you use Authentik specifically with Tailscale? That’s interesting, indeed I would definitely want that. I was under the impression that it required something like headscale but it seems not to be the case. Thanks!
Edit: minor edit.
You’re suggesting a whitelisting approachaporoach which I’ve used for a long time. But in the end, I I was so upset that most websites required me to enable JavaScript for their unique website because they would otherwise be broken. And I was only interested in blocking it for specific webpages so I ended up having a blacklisting approach which I recommend to keep some sanity, but that’s my opinion :)
Right, but which ones do it check?
Which ones do Calyx check?
I don’t care which is better. But I can share certain unique features which make me personally chose GrapheneOS over all other options I know of:
I don’t know if you do this already, but in case you are not: GOS offers a convenient way to separate apps between each other, where some may depend on google services and others don’t. The methodology which works best for me is to use the main profile for all my personal apps and which do not require google services. For those few apps that do, I create a dedicated profile, in which I install the google services and the apps which need it. You can pipe notifications from that profile to the main one, in the profile settings, that way you can get the notifications of those apps even when not in the dedicated profile.
Additionally, if you do not need those notifications, you can disable the profile to run in the background when not in use.
As others have said, do not touch services and apps you do not recognize. Be very careful as things could turn south. Do not touch things unless you know what you are doing.
My number one gripe with organic maps is how fragile the search is. If you don’t write it exactly right, you get no or irrelevant results. Also, it seems to have no clue of what is popular and what people expect when they search for something. I’m not talking about personalized results but for example the following: searching for “Eiffel”, leads me to minor roads, restaurants and all kinds of results unrelated to the Eiffel tower. This is what is troubling me the most.
I think that’s what we see with apple silicon, right?
The best and possibly only dumb TV brand is Spectre.
https://www.sceptre.com/TV/4K-UHD-TV-category1category73.html?sort=tbt.parent_pdtype&order=DESC
Source: framework CEO https://community.frame.work/t/in-defense-of-dumb-tvs/160
Disclaimer: have not tried them.
Yes, actually it can be quite straightforward. What you are probably best off doing is requesting a google takeout and upload that takeout to Ente directly. I have not followed this process myself so I can’t say much about it but it is described here and is probably the easiest way to migrate:
I’m a customer and have moved over multiple family members, everyone seems happy. Their face recognition and smart search are still WIP, but they are impressively present, despite being all E2EE, by leveraging local processing. They are making very good progress.
It’s unfortunate the grapheneos community has a bad reputation, but I think the fact that Daniel stepped down and that the project is very committed and ticking all my personal boxes (and more) really keeps me devoted. I wish there were more options of phones, but I have no issue personally with it requiring google pixels as they have convinced me with what seems like rational and well supported arguments. I do wonder if as someone else mentioned, it may be interesting to have a GOS-light for other phones, just to give them a chance to get into GOS and try it out before getting a dedicated phone. It feels like a high barrier to entry, and a limited version may still be better than anything else available to those people? Just a thought.
I’m sorry, I don’t have any specific suggestions for you, but I am wondering: is there no open source app you yourself wish existed because you would need it?
Working on an open source app because some else (and not you) needs it, is not a good way of staying engaged and caring about the solution. Being the user and target of a project yourself is usually a much netter way of caring and proposing something tailored to at least one individual, maybe more.
Of course, if you are looking for a programming exercise, go for it, but then you don’t need ideas, you can reimplement something which already exists, perhaps which you like, but in your own way. But if you want to have an impact in the open source, it starts by needing something which you don’t really find anywhere and taking matter in your own hands to fix it :) this is not meant to disincentivize you, quite the opposite! I hope you stay attentive to your digital ecosystem to see which holes can be plugged :)
I maintain a private list of ideas I just think of as I go about my day, of things I would like to write/create for myself and while I won’t be going through with all of them, I hope to be able to pick up one or several of them whenever I have time. I can through some ideas here, not as a hint that you should do it (I’ll probably do them myself regardless), but just to inspire you, maybe:
I have a few more, but this should give you some hints, I hope! Good luck!
Congratulations on your first steps in GrapheneOS!
In order to best help you and give relevant suggestions, we need more information of who you are trying to be private from.
If your threat model is particularly sophisticated, it may be recommended that you do not use a sim card, or at least never when your phone is at home. Instead, exclusively rely on WiFi. It may also involve desoldering your microphone and camera and only make calls using an earpiece.
These are not recommendations, but simply examples of how far one can go with respect to their threat model. If you would rather want to avoid “regular” spying by google, Facebook and the likes, you may be better off selecting a private DNS (for example Mullvad’s extended DNS which comes with social media filtering https://mullvad.net/en/help/dns-over-https-and-dns-over-tls ). You would need to make sure you do not install Google services (nor microg) and especially no google apps.
Much more can be said, but we would need specific information about your case to provide better guidance.
EDIT: I do not want to give the impression that GrapheneOS does not make a good job in improving your situation already. They do! But to do more you would need to justify it with your threat model, that’s what I’m getting at.