smiletolerantly

It always feels like YouTube is double dipping though. Not with what the post is about; that's either/or, obviously. But Google makes a nice profit collecting user data and behavior, and then selling that to advertising companies. That happens regardless of using an adblocker, and I'd be shocked if it doesn't also happen regardless of YT premium. But at the same time, Google also IS an advertising company; they use their user data collection platform to also show ads to users, getting paid again. So personally, even if YT *wasn't* owned and operated by a shitstain of a capitalist eldritch horror company, I'd *still* have zero qualms blocking all their ads: they're making money off of me regardless.

Yeah, not having ads in the phone app, the TV app, the music app on the phone or in the browser is really nice, I love it. Also got that for all my friends and family. Never paid YouTube a dime though :)

If you use nixos, you basically have to know/learn/use day-to-day the nix language. nixpkgs are written using nix the language, using concepts mostly familiar from just using nixos. Basically everyone using nixos is capable of contributing packages.

Ah, sorry. https://repology.org/repositories/graphs

Just gonna leave this here

That’s a really well argued paragraph. But have you considered: why pet shaped if not for petting? (Jokes aside though. Point taken. But there’s nothing you can say to keep me from talking to them in baby talk from now on when I’m out gardening amongst them. Who’s a big stripey boy? Yes you are, aren’t you? :))

Wait I can PET BUMBLEBEES?!

So let me get this straight: When I was 13, I managed to figure out the router password, disabled child protection for myself, then watched porn on my Android 2.3 phone that I had managed to put a custom ROM on because I liked the way it looked and had no idea what a “launcher” was yet. This is not a hypothetical btw. My parents were smart enough to enable appropriate blocking and secured access to those settings. I’m not sure something on-device was available at the time, but I included the bit about the custom rom to demonstrate that, even though I didn’t know WTF I was doing, I was more than capable of fucking around with the tech to get it to do what I wanted. So were my parents in breach of their duties on child protection? I don’t think they were. They actually did educate themselves (visiting a course / parent meetup to discuss and learn how to protect me from the Internet), and implemented everything they learned. I was just a little shit and found a way around this. And this is NOT an edgecase. Because guess what. It takes one kid in the friend group to figure out a way to circumvent parental controls, and then EVERYONE knows how to do it. It simply does not fucking matter how well intentioned, knowledgeable, and present the parents are (mine were all of that). Going “this would not be a problem if parents parented” is the LAZIEST fucking excuse, and I’m sick and tired of reading about it on here. (Because I probably have to make it clear: I’m not advocating for photo/passport scanning, third party age verification,… and all that bullshit. What I think would be a FANTASTIC idea would be privacy-preserving age verification. There are two good ways to do this: 1) on a login attempt, prove that you are of age by presenting a fresh, signed token from a government service proving that you are over 18, and nothing else; site does not get any info, government does not know what you were trying to access; 2) a device-level age field. Proof here comes from the device itself, and can be 100% privacy preserving; just a “yep, is of age”. In this scenario… GUESS WHAT, PARENTS GET ENABLED TO PARENT “PROPERLY” BY PROVIDING THEM WITH A GOOD, SIMPLE, PRIVACY-PRESERVING TECHNICAL SOLUTION.)

Federated ForgeJo can’t come soon enough.

Funny, I’ve also already read that 😄 Good blog and article.

What blog?

Ha, thanks, I’d already read that. And I do, mostly, agree; the OMEMO implementation is not great both from the security perspective discussed in the post, as well as the UX (not being able to decrypt old messages on new devices at all). That being said, I primarily want a selfhosted, federated messenger which also takes privacy and security seriously, and at least for the former, XMPP is really refreshingly good.

Ugh. I’ve always liked Matrix (and was not bothered too much by the metadata leaks because my home server was not federated anyways), but after noticing some issues and finally reading up on the actual protocol spec a couple of weeks ago… oof. Yeah. No. Set up XMPP for now. Works really well and the protocol seems so much saner. Unfortunately, it too has some annoyances that are unacceptable to me in the long term. I’m this close to saying “fuck it” and wasting the next couple of years of my life on a new protocol that no one is gonna use. (Cue the XKCD here.)

I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!? Why, by boasting that it’s so easy, just look at that, it is only two options you need to set thanks to the 80 custom modules I’ve written to abstract the abstractions from nixpkgs! I WISH I could put an /s here, but I cannot.

Ehm… I’m also on Nixos and I’d say it’s super trivial. services.openssh = { enable = true; settings = { PasswordAuthentication = false; PermitRootLogin = "no"; }; }; users.users..openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];

h, the machine is actually in one of my wireguard nets anyways, but for different purposes.

The nice thing about SSH key-based access is, I either have the key and login succeeds, or I have no business trying to log in. That’s why my remote root server bans via fail2ban after a single failed login. Yes I’ve had to write support to get a KMS. Yes it’s still configured like this.

Yeah the UX for setting it up was not great. Conversely though, the UX for using it has been fantastic so far. My biggest concern was that the clients would feel dated (on Android esp), but no, they’re surprisingly polished!

Yeah, but unfortunately, the keyboard does not look promising. I’m sure we will get there, eventually. Just an uphill battle… As always.

Hardware wise, we’re basically there. Especially since there’s multiple recently-ist mainstream phones on which you can install Linux. UI/UX seems to be a nightmare though, plus missing software

Awesome haha. ALmost exact same setup here, incl. OpnSense with an isolation vlan in which (brother) printer and TV are.

I only use the Nvidia Shield remote. It obviously does everything on the Shield, plus tv on/off, and volume. Then I remapped the Netflix button on it to open a little quick actions menu to select brightness/picture mode levels. Haven’t touched the lg remote since

Incredible. What a shit idea. Anyways, kids, remember: never let your smart devices talk to the internet. We actually love our LG OLED - it’s fantastic hardware. But it has not once, and never will, get the chance to phone home.

Oh god yes German?

I’ve actually been having a great time with simple-nixos-mailserver. Running with a dedicated ipv4 at a highly reputable hoster, to my knowledge, I haven’t landed in a spam folder yet!

Wait, why? I thought I was generally gold at spotting these things, but here I’m struggling. The only thing that looks a little out of place to ne is the ring on his pointing hand, but that might genuinely be a dark band + shadow. What else have I missed?