• 2 Posts
  • 21 Comments
Joined 2 years ago
cake
Cake day: June 23rd, 2023

help-circle





  • Google has many faults, but the one responsible for this one is someone else :)

    The FOSS google maps alternatives I hear recommended most often are OsmAnd+ and, especially, Organic Maps.

    Personally I don’t use maps very often (I know my way around my area pretty well, so I usually just lookup the location of wherever I want to go before leaving home), but I’d say Organic Maps is simpler and more user friendly than OsmAnd+.

    Both can work offline if you download the maps for your area.

    The maps are pretty good (at least in my area), but compared to Google Maps you’ll have to rely more on street addresses as there aren’t as may points of interest.


  • We do deserve end-to-end encrypted communication but then nobody except nerds could be bothered about managing private keys, so in the end providers would manage our keys and still be able to read our messages.

    If the problem is that goggle/etc can read your email, not using them for your email is the solution.

    Then, yes, there’s also an issue where ecommerce sites submerge us in useless email (is “your package has been shipped” an event so important that I must be immediately notified? Because I only care about when the package will be delivered) and could use a “notificaiton settings” page.

    Of the sites I use, the worst offender is aliexpress, which sends (IIRC) “order confirmed”, “package shipped”, “packages reached customs”, “package cleared customs” and “package has been delivered” for every friggin’ item you ordered.







  • gomp@lemmy.mltoPrivacy@lemmy.mlIn search for a good VPN
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    6 months ago

    I have no idea what a DreamMachine is (and wikipedia does not help) so here’s the long answer :)

    If you want a VPN tunnel to your own home, for secure access to your LAN, I’d recommend you look into NetBird and/or TailScale, which at their core are wireguard plus NAT punch-through (you can also run wireguard or openvpn directly, but it may be a pain since you most probably have a dynamic IP and possibly a CGNAT).

    If you want to hide your traffic while connecting through networks you don’t trust (such as the work one or some cafe’s wifi), you can either use NetBird/Tailscale as above and connect though your home (well, assuming you trust your ISP of course) or some third party VPN which connects to their servers (I’d say look into Proton first).

    Keep in mind that VPNs actually do very little for your online privacy (ie. it’s not like google or facebook can’t track or fingerprint you). They do is prevent man-in-the-middle traffic analysis from your ISP (or the admin of whatever LAN you are using), but then the VPN provider can do the exact same things, so… make sure to double-check the privacy guarantees of your VPN provider and compare them with those of your ISP.



  • Lineage OS is not designed to relock the bootloader.

    I don’t understand why so many people worry about that… doesn’t it only ensure that data is wiped if some agent secretly installs a rootkit or sorts on your phone before giving back the device to you?

    To me, bootloader locking is mostly a way for phone manufacturers to make it harder to run anything but the ROM they have chosen (and it’s a PITA and the most laborious part of installing a ROM).





  • Those are outside Signal’s scope and depend entirely on your OS and your (or your sysadmin’s) security practices (eg. I’m almost sure in linux you need extra privileges for those things on top of just read access to the user’s home directory).

    The point is, why didn’t the Signal devs code it the proper way and obtain the credentials every time (interactively from the user or automatically via the OS password manager) instead of just storing them in plain text?