GE-Proton10-15 Released
- fixed opening hang in crosscode
- fixed video playback in fable: the lost chapters
Release GE-Proton10-15 Released · GloriousEggroll/proton-ge-custom
fixed opening hang in crosscode fixed video playback in fable: the lost chaptersGitHub
- ft.com/content/5cd7bccb-24cb-4…
- economist.com/leaders/2025/08/…
‘Will you leave US for China?’ It depends, mathematician Terence Tao says
‘Will you leave US for China?’ It depends, mathematician Terence Tao says
Trump funding cuts have left situation more ‘fluid and unstable’ than at any time in the last 30 years, Tao says.Shi Huang (South China Morning Post)
geneva_convenience likes this.
What was the update? Getting address not found on both calyos.org and calyxinstitute.org which doesn't bode well
Edit: came back up. Update if it's down when viewed
Update: August 27 2025We are concerned that some users may have not seen the important message in this letter about CalyxOS’ current hiatus. Therefore, we are rolling out one last OTA update to devices currently running CalyxOS to reach as many active users as we can. You can read our post for more details about this update.
Saskatchewan Premier Moe says Canada should remove tariff on Chinese EVs
Saskatchewan Premier Moe says Canada should remove tariff on Chinese EVs
As Saskatchewan Premier Scott Moe prepares to go to China next week, he said he would like the federal government to drop its 100 per cent electric vehicle tariff on Beijing.The Canadian Press (CTVNews)
please! I think in the long term an investment in infrastructure or manufacturing would be ideal, but in the interim, putting pressure on the US and giving Canadians more and better EV choice would be an easy win for Canada.
Why are we protecting the US automotive industry?
Satellite Collisions Could Be Prevented With a New AI System
CREAM's Role in Mitigating Kessler Syndrome Risks
Can AI solve the space traffic jam? Discover how CREAM is automating collision avoidance and changing the way we manage satellites.Mark Thompson (IEEE Spectrum)
Apertus: a fully open, transparent, multilingual language model
Apertus: a fully open, transparent, multilingual language model
EPFL, ETH Zurich and the Swiss National Supercomputing Centre (CSCS) released Apertus today, Switzerland’s first large-scale, open, multilingual language model — a milestone in generative AI for transparency and diversity.news.epfl.ch
The Former Lead For Apple Graphics Drivers On Linux Is Now Working At Intel
The Former Lead For Apple Graphics Drivers On Linux Is Now Working At Intel
There's a follow-up to yesterday's surprising story of Alyssa Rosenzweig stepping away from Asahi Linux and that ARM graphics driver work where she led reverse engineering and development of the Asahi Gallium3D and HoneyKrisp Vulkan drivers within Me…www.phoronix.com
(solved, thanks guys!) "No key available with this passphrase" despite it being the correct passphrase
Edit: Turns out you guys were right, I entered the setup password wrong for LUKs. I got this new Logitech keyboard I got for a gift and I type around 170wpm, but I've been having issues with it kind of lagging keys for some reason. What I did was I opened up a notepad and typed in my password a bunch of times and noticed whenever I would type something such as "stain" for example, it would come out at "stani" despite me looking at the keyboard and knowing that wasn't what I was typing. So I encrypted my drive with the wrong password, but figured out how to decrypt it that way. Thanks for the help doods!
Hello! I have a external drive I've encrypted with LUKs that has irreplaceable backups of mine, and for some reason no matter which PC I try it won't unlock despite it being the correct password. It doesn't give me anything else in the terminal other than what I put in the title.
I recently just backed up everything onto the external drive from my computer cause I was distro hopping. It's worked fine on my PC, I saved the password so I was able to mount it no problem before, but now it won't mount on any other PC I try. It isn't the end of the world since I can just try and copy old data from my computers drive before the format since I haven't downloaded anything yet that could overwrite anything important, but I'd still like to be able to get this external drive unlocked. As I've said, irreplaceable files of mine are on it so I'm hoping to get it working. Thank you!
but I suspect that you will need to wipe the drive and set it up again while ensuring that the volume key is stored on the external drive itself.
Whenever I format a drive I just use Gnome Disks since it's the easiest and it lets me encrypt it using LUKs as a option, I've never had an issue like this for years until now since whenever I've used Gnome Disks in the past it always lets me decrypt the drive on any other Linux machine
Hmm, what method did you use to back it up? It sounds to me like something got corrupted, though perhaps someone more experienced could identify a different issue. What I usually do to clone LUKS partitions is use a liveUSB (so no files change while backing up), then use cryptsetup
to create a new LUKS partition on the backup drive if it's a new drive (otherwise for incremental backups you can skip this step), then unlock both drives and rsync
to the backup drive. This is also usually faster than pure cloning, as cloning would also copy the (encrypted) empty space in the partition, and for incremental backups, rsync
will only copy the changed data so it's much faster.
This would also have the benefit of preventing corruption on transfer, because rsync
uses checksums to verify the file was properly reconstructed in the new location, whereas something like dd
won't have the granularity to check per-file checksums (especially if used to clone a whole encrypted partition).
Hmm, what method did you use to back it up?
I used an app called "Pika Backups" , it shouldn't effect LUKs at all tho and the backups themselves weren't corrupted because it also lets me verify the integrity of the backup files which I did before distro hopping and I got no errors
Need more info:
- How did you encrypt it in the first place
- What command are you using to try and mount it now?
- Do you have any other identifying LUKS info about the volume? (
sudo blkid /dev/whatever
)
I encrypted it using Gnome Disks, haven't had any problems with it for years until now
I tried mounting it normally with Dolphin on KDE Plasma, after it was giving me an error I tried unlocking it in terminal via sudo cryptsetup luksOpen /dev/sda1 backups
Here's the output of the command you sent: /dev/sda1: UUID="109ffa3d-6181-43cf-a813-fdd285386866" TYPE="crypto_LUKS" PARTUUID="ac0402f1-01"
Are you typing this passphrase by chance? Do you have it saved somewhere that you're positive is correct?
Try typing it out in a terminal window and see if it matches what you have saved. Special characters and incorrect keyboard mappings could be problematic.
I once had a similar issue, caused by the keyboard layout in the os installer (when I defined the password) being different from the keyboard layout used for unlocking the drive. I quickly leaned to type my password in qwerty on my azerty keyboard and all is fine now.
Another similar thing I'm thinking about is trying with caps lock, as you may have had it on when defining the password
How Erik Prince is Trying to “Make Haiti a Hub for Mercenaries” | Haiti Liberte
Erik Prince, the founder of many mercenary companies since Blackwater, is looking to gain a lucrative foothold in Haiti through wheeling and dealing with unelected, illegitimate leaders as cynical as he is. It won’t end well. Photo: ABC News
How Erik Prince is Trying to “Make Haiti a Hub for Mercenaries” | Haiti Liberte
(Français) Erik Prince, 56, the founder of several mercenary companies beginning with the now rebranded Blackwater, might have Washington’s backing forTravis Ross (Haiti Liberté)
Linux and Secure Boot certificate expiration
Linux and Secure Boot certificate expiration
Linux users who have Secure Boot enabled on their systems knowingly or unknowingly rely on a ke [...]LWN.net
like this
Auster likes this.
The answer as always is, it depends.
Not all implementations rely on shim.
if you set up secureboot without doing anything more than instaling the OS.... yeah probably it is true. Edit: e.g. GRUB2 generally relies on shim. sysemd-boot doesn't
I haven't checked the specific key that signs shim to confirm the expiration date, but there generally is a date, as we're talking about certs and keys here.
Edit 2: Basically what this article is saying is that the machines will need a new platform key (mited in 2023) enrolled in the tpms, with often comes from the firmware (when tpms are wiped for initial enrollment of a new install/setup, they tend to enroll whatever platform keys from microsoft are baked in to the uefi firmware).
So basically, if you haven't had a bios/uefi firmware update since 2022, there's no way for you to have have the new key trusted by your tpm, and the whole chain of trust falls apart when the key you do have expires. So you'll need to disable secureboot. If you use shim and/or the microsoft platform key in someway.
Democratic congressman Jerry Nadler for New York will retire next year in move to galvanize generational change among Democratic party
Jerry Nadler, a Democratic representative from New York, will retire next year after 34 years in Congress in a self-proclaimed move aimed at galvanizing a generational changing of the guard in the party.
Nadler, 78, who represents one of New York’s wealthiest districts covering midtown Manhattan, said he had been persuaded not to run for re-election in 2026 after witnessing the implosion of Joe Biden’s presidential bid last year. The former president was pressured into abandoning his candidacy amid widespread doubts about his age and mental acuity. He was replaced by the former vice-president, Kamala Harris, who subsequently lost the election to Donald Trump.
“Watching the Biden thing really said something about the necessity for generational change in the party, and I think I want to respect that,” Nadler told the New York Times, which broke the news of his forthcoming retirement.
He told the newspaper that a younger replacement “can maybe do better, can maybe help us more”.
Democratic congressman Jerry Nadler will not seek re-election in midterms
New York representative will retire next year in move to galvanize generational change among Democratic partyRobert Tait (The Guardian)
CHECK DETAILS
Session is a FOSS messenger focused on privacy. No phone numbers, decentralized servers, and full end-to-end encryption. Perfect for anyone tired of surveillance-hungry chat apps. Secure, anonymous, open-source.
🔗 GitHub: SESSION - GITHUB
GitHub - oxen-io/session-android: Session Android - Onion routing based messenger [DEPRECATED SEE README]
Session Android - Onion routing based messenger [DEPRECATED SEE README] - oxen-io/session-androidGitHub
😅😅😅
kill --windows,
install --linux,
like this
Andreas Gütter likes this.
What will MS do when Linux becomes a serious threat to their monopoly ?
What actions might they take in the future?
Their only chance there was the late 90s to early 2000s. MS is one company compared to the totality of mega corporations using Linux and MS also uses a lot of Linux. More money at play in the server market than the general desktop OS market. Linux is the server OS
The US government increasingly uses Linux. Other countries pick up Linux at a faster rate than the US. A higher percentage of people use MacOS today than 20 years ago
My expectation: nothing. At least, nothing on the OS side. I don’t think windows is very important to microsoft strategically.
Nowadays, the way to capture audiences is not so much via a proprietary OS, but via proprietary apps.
And in that sense, microsoft is proceeding exactly as expected: more and more of the windows ecosystem either exists on the web, or is available on linux and macos too.
I can see a future where windows only exists for backwards compatibility, but otherwise:
- dotnet apps run on linux (via dotnet core)
- edge runs on linux
- powershell runs on linux
- visual studio code runs on linux
- most of the rest of microsoft’s suite runs in the web
So what does microsoft need to do once windows collapses in the desktop space? Imo not much, really. Those people and companies that are tied to microsoft products will still be. Only, they might be running them on linux.
Edit to add: I am gonna place a bet that we’re gonna see an official microsoft linux distribution by the end of 2035
Businesses live and die by if it broke don't fix it.
They're still a non insignificant number of businesses using Cobol applications.
An official Microsoft Linux distro has existed for a while now: en.m.wikipedia.org/wiki/Azure_…
There's more Linux than Windwoes VMs in Azure, I hear.
Just my guess here, but...
The desktop/laptop sort of form factor is associated in people's minds with unlocked bootloaders. People expect to be able to install Linux on them if they want to. Tablets, game systems, and other sorts of consumer electronics, not so much. I'm thinking Microsoft will do what it can to push hardware manufacturers and the software industry as a whole more in the direction of the kinds of devices that consumers already expect to be locked down like tablets or game systems that are "streaming" game systems. And that way, the bootloader will prevent folks from switching to Linux.
Honestly, ms won't do anything.
unofficial statement out of Microsoft have Linux VMs overtaking the Windows VMs in Azure.
Why should they worry about losing a once off $1100 sale of a Server 2025 license when they can sell you a 2 CPU 8Gb ram Azure VM for $150 a month? Or $113/m commited for 3 years ($4000 total)
Embrace, extend, extinguish.
SQL Server runs on Linux. Azure supports Linux. The next step is to extend into their own distro, get everyone using it, then drop support for mainstream Linux.
Will it work? Maybe. They'll have to make Microsoft Linux more attractive than Debian and Red Hat.
like this
Maeve likes this.
like this
Maeve likes this.
Well there is the 9/11 change that may be happening soon: techrights.org/n/2025/08/26/Th…
Its possible a LOT of linux machines wont work after this date.
Hopefully!
Another funny thing is that there is speculation because firmware developers...many not actually be checking the dates at all in some cases. Cause that would mean extra work. So its very possible this date comes and goes, nothing happens to cheap devices.
That was based on conversations im seeing in other forums. Not sure honestly.
Either way, we will find out soon!
sbctl
utility instead of the hacky shim/MOK method most distributions use.
Fortunately I'm safe from that bc right after I assembled my current PC (even before moving the distro to it; yes, moving, not "installing"), I entered BIOS and disabled secure boot, IPM 2.0 and pretty much everything Spyware related. Only then I booted Clonezilla and extracted from the backup image. Since I had done the same on the old PC in BIOS, that means my Arch was never installed with SB and IPM active.
On top of that the last update of BIOS nearly broke it, so I flashed it back to the more stable version the motherboard came with. And since I have no intention to update BIOS, I'm safe from all that trouble.
Windows is only 12% of Microsoft's revenue, and between Mac, Linux and ChromeOS, it really doesn't have a monopoly anymore on desktop (about 70%). On top of that, desktop usage in general is decreasing, and is already less than 50% of all web traffic.
What I'm saying is that I think it's safe to say something else will likely "kill" Windows long before Linux ever becomes a serious threat to it.
like this
melroy likes this.
Windows is only 12% of Microsoft’s revenue
That may be true, but a lot of their profits build on that Windows monopoly. I wouldn't be surprised if about 80% of their profits depend on Windows.
like this
eierschaukeln likes this.
Tomato tomato.
I wrote profits, and from the chart you show, clearly above 50% of their revenue is from Windows and derived products.
Last I heard the profit margin for Windows and Office was around 90%, AFAIK by far the highest of the business. So I'm pretty sure that combined with Server products Search and the part of gaming that is on Windows, it will be very close to 80% of the profits.
Some others have already said the "embrace, extend, extinguish" but here's my take on it. Pair it with Secure Boot and TPM 2.0
- Embrace: Secure Boot can already work with Linux, how lucky! This gives them not exactly control, but authoritative denial over your boot process and hardware.
- Extend: This is the part that remains to be seen. If they feel threatened enough by the shift in the gaming landscape, mind you not over losing out on sales or the hearts of gamers or anything, but again control, they may begin to make Linux offerings. A concession to allow an honest to god, thick Office client on Linux would certainly appeal to some. Adobe gets in on that action to back them up with Photoshop and Activision with Call of Duty, etc.
- Extinguish: TPM 2.0. One of the less talked about features of this is remote attestation ("Remote attestation allows changes to the user's computer to be detected by authorized parties. For example, software companies can identify unauthorized changes to software, including users modifying their software to circumvent commercial digital rights restrictions." - DRM). We're already seeing this with CoD on Windows. They'll allow you to run much requested Windows software on Linux, even provide direct support possibly, but at the cost of not precisely control but authoritative denial. Which still works out to be control in most ways since if you want to use the software and they are to remotely attest, they can also insist that part of that attestation is you running some sort of telemetry or not running software they disagree with.
The reason I think this route is highly likely is because it plays well with uninformed consumers. To the untrained eye it looks like they're giving ground and actually allowing for broader support of their software while effectively gaining control over the environment once again and removing the biggest benefits of running FOSS on your system.
like this
melroy likes this.
This is a good point. I've been trying to make it clear in a lot of my predictions that Microsoft doesn't want or even need full control, just enough. They don't even need to do anything particular here other than continue to manage github with their current level of incompetence.
Was trying to source an article here, wasn't there just an outage or some other major issue a few days ago? Anyways ...
I believe they just don't care, since not only is Windows not very profitable anymore, the real money is at businesses. So as long as they sell licenses to businesses (business laptops, etc), but also GitHub Enterprise (yes, Micro$oft also owns GitHub) Microsoft earns enough money that way. And also think cloud (Azure)..
My guess is therefor that the focus on Windows isn't that big anymore. I just hope more companies and gaming devs/publishes also push native binaries towards Linux.
Agreed
I think Windows is primarily a development environment for Xbox, just as macOS is primarily a development environment for iOS
Everything else of value from Microsoft is available via the web/cloud (even Office)
Eventually, Microsoft might even decide that it's more profitable to abandon Windows completely
like this
melroy likes this.
MS hasn't released an Office version outside 365 for 8 years.
365 is Office for them.
I think you’re mixing up Office 365 and Office Online.
Office 365 is a subscription for Microsoft Office that includes access to both the full, more powerful desktop Office applications and the much less powerful Office Online.
Though I don’t think it’s even called Office 365 anymore, but I don’t respect MS enough to bother to Google what they’re calling it now.
I agree
But how many paying customers need features that are not in the online/cloud versions of Office?
Sure this is a shrinking number of people?
not only is Windows not very profitable anymore, the real money is at businesses.
Hear me out, this is exactly why they care. Windows as a product isn't profitable anymore, but as a market share it is. Apple has always enjoyed their locked down ecosystem and Google is trying to completely block side loading on devices we already largely don't have control over the bootloader. It's no secret Microsoft has been seething with jealousy for years.
gs.statcounter.com/os-market-s…
You're a soulless corporate ghoul, how do you make those numbers work for you? Why do you think they have the absolute gall to tell you to throw your computer out and get one that supports TPM 2.0? Why do you think there are still so many people willing or not that will swallow that bitter pill that's Windows 11?
I'm not trying to call you out in particular here or anything, but I think it's foolish to assume they don't
Desktop Operating System Market Share Worldwide | Statcounter Global Stats
This graph shows the market share of desktop operating systems worldwide based on over 5 billion monthly page views.StatCounter Global Stats
I agree with you.
Everyone who is saying that windows isn't profitable or no longer an important part of microsoft's business strategy is just a parrot succumbing to the snowball effect.
How exactly do they hope to lock devs in github??? That’s absurd, there’s no way they can achieve that. I can always take my projects elsewhere and there’s nothing they can do to stop me.
I can't tell if you're joking? If not, what do you think "lock-in" actually means?
It doesn't mean that it is impossible to leave, it means that there is substantial switching cost. And, that is certainly the case for github-hosted projects: all active contributors need to make a new account somewhere else, issues and discussions need to be migrated, CI workflows typically need to be rewritten, and good luck finding something that gives as much free compute for CI as github does. Yes, it's easy to mirror a git repo onto another service, but github is much much more than just git repo hosting and each of their features have their own switching cost.
Also, OP actually said "lock devs in" rather than "lock projects in" - I actually am forced to have a github account if i want to contribute to projects which refuse to move their issues off of it 😢 ... and the difficulty in creating new accounts anonymously these days prevents me from contributing to several things (lemmy, for instance) which i otherwise would.
If not, what do you think “lock-in” actually means?
That they'll lock you out of your repo without access to manage it, maybe? Or threaten you to make your software inoperable in Windows, if you don't comply? IDK, they can always think of sonething but if they think I don't already have full copies of my projects on my computer, they're deeply mistaken. 😂
That not an option. If Linux is a serious threat it means that a normal people could use it without any problem, with all the common software needed (Office, a browser and few other things).
At this point trying to lock down the PC to have the be able to run Windows is not really an option, people could simply choose to not use Windows anymore and be productive anyway.
Only problem are games, but it is probably solvable
They cannot do that to every manufacturer, as most of countries are incentivized to not dependent on American or any foreign product.
I can see China or European manufacturer will slowly move from Windows.
At least China already learning the hard way from Android-Huawei relationship.
Exactly what they're doing right now. What cable companies did. What every dominant business does when something better starts to eat their lunch.
Become increasingly abusive and scummy towards the customers who are left, because they're either too deeply ingrained, spineless or lazy to change and they've already self-selected.
Linux has been becoming a "serious threat" for 20+ years now. I'll wait.
Don't get me wrong I like Linux a lot. But if you step back and look objectively, it has a lot of issues trying to grow outside the hobby/enthusiast community for the desktop.
I think that linux has a couple of things that might help it grow outside its traditional niche that it hasn't in the past. Proton has been a major step forward in to the gaming scene. A lot of people are very unhappy about windows 11. The EU in particular is also investing in ways to get out from under American techs thumb due to the geopolitical landscape.
I don't have too high expectations personally but who knows.
Windows Subsystem for Linux Documentation
Overview of the Windows Subsystem for Linux documentation.learn.microsoft.com
VMs aren't emulation. Its a full OS running on virtual hardware. Also, yes, azure offers several distros, not just Microsoft's.
The OS of the bare metal host shouldn't matter much, if at all, to the guest. If you have a philosophical issue with the hypervisor running under windows I doubt you'd be using azure to begin with.
azurelinux/LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md at 3.0 · microsoft/azurelinux
Linux OS for Azure 1P services and edge appliances - microsoft/azurelinuxGitHub
m.youtube.com/watch?v=Z7lI2fyy…
::: spoiler spoiler
It's an Apil fools video. Not real
:::
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.m.youtube.com
Some people including me maybe dont want Linux to become popular.
Can we please have something in this world that isnt ruined by the general population? They already ruined the internet -
The desktop has been losing market for a while. I feel Windows is already under serious threat (if not already in the minority) when you think about all the devices that mainstream audiences orbit around (phones, tablets, portable consoles, etc), often using the Linux kernel. Only about a third of most website traffic comes from desktops.
Many of the people who frequently use Windows desktop do so because of their job, and often avoid using it outside of work as much as possible, since it feels like.. well, work.
Microsoft has been desperately trying to appeal to those other bigger sectors of the pie and has failed every time.
PC Gaming was one sector they had advantage on, yet that has already started to crumble thanks to Valve. I feel that MS will just try to push for integrating their xbox with Windows OS more and more...
I feel it's a battle with many fronts, since PCs have many uses.. so MS is likely to run their typical spiel: copy what the competition are doing and try to centralize/integrate it with their OS in a way that gives them an advantage, as they are famous for doing.
Another sector they can do this is with the WSL (Windows Subsystem for Linux)... they could turn Windows into a frontend for running Linux apps... so if Linux apps became popular, they could try to advertise Windows as the "best" way to run Linux software without losing the full first party support of legacy Windows software.
It's mobile devices that are eroding Windows market share on desktops, not Linux.
Linux already dominates the server space, it runs the internet and super computing, but it will NEVER be a threat to Microsoft on desktops.
The vast majority of desktop users don't give two flips about security, nor freedom, they don't even know what those things are and don't care to be informed.
I've even seen a few (on reddit) asking for Linux to support giving kernel level permissions to applications, so they can play a few videogames, they are fine with having rootkits on their PC, that's the level of "care" they have.
But that's ok, Linux is already a de-facto "monopoly" on the server side, the most important one, it doesn't need to win over also desktops.
They will adapt.
Embrace, extend, extinguish. They will become Linux.
In all seriousness, if you look into how windows manages its security now, it leverages virtualization to essentially run windows inside of a hypervisor. At some point in the future, the legacy windows kernel is going to just be another virtual machine running side by side with Linux and the hypervisor will probably run their HyperV tech on top of a Linux (compatible) kernel.
Then they will say that you need their version of Linux to run specific hardware and software.
EEE
MS already doesn't have a monopoly in any meaningful sense anymore.
- gs.statcounter.com/os-market-s… - in early 2009, almost 95% of web usage was from Windows, by now it is at around 28%, no longer even the most popular OS, which is now Android around 42%
- gs.statcounter.com/os-market-s… - even looking only at the desktop and ignoring the shift to mobile devices, Windows fell from ~95% to ~72% during the same time period, mostly losing to macOS but more recently also Linux
Windows isn't the main way Microsoft makes money anymore anyway...
Operating System Market Share Worldwide | Statcounter Global Stats
This graph shows the market share of operating systems worldwide based on over 5 billion monthly page views.StatCounter Global Stats
And vendors who agree could simply see they sells down since a, at this point large enough, percentage of the buyer prefer someone who don't agree.
I'd wager they have enough resources to stave it off for as long as possible, and when they can't do that anymore they will have a strategy for making money off of their "services" in the linux space.
Microsoft is part of the cabal at this point. Businesses give it money because they're expected to.
Linux on my smart tv?
I have been rather unhappy with my smart TV's functionality as I feel it isn't smart for me but smart for the manufacturers. I just can't use it how I want to. I would love to overwrite the existing OS from Android to Linux. I've recently converted from Windows and loving Mint.
I haven't read too much regarding Linux smart tvs as my searches mostly come up with raspberry Pi and overwriting an Android box. I don't want to connect anything and just want my tv to boot up in Linux when it's turned on, and get some of my apps going. Is there a way to do this?
For reference I have a Sony Bravia with Android installed on it.
like this
eierschaukeln likes this.
Agreed, ditch the idea of trying to run an OS on the TV itself. It's not worth it.
The TV is best used as a TV and nothing more. Plug a small computer into the back of it using one of the many video/audio ports which exist for just such a purpose.
There are folks form KDE who are trying to implement the Plasma Bigscreen solution: plasma-bigscreen.org/. Seems promising to me 😀
Though, I'd still recommend to use an external device to avoid breaking the TV OS up ;)
like this
eierschaukeln likes this.
Frequently Asked Questions
What happened to Mycroft AI? Mycroft AI was discontinued and bought by a company named OVOS. Therefore, we won't use them for voice-related stuff anymore. Refer to a FAQ they made about the situation here.Frequently Asked Questions
espi.dev/posts/2025/07/plasma-…
Diving into Plasma Bigscreen | espidev
I have been a long time Plasma Mobile contributor, but I have always had a keen interest in having Linux on my TV! I have noticed that in the past few months, the Plasma Bigscreen project has had some interest from people wanting to contribute, but t…espi.dev
It was abandoned for awhile but a few months back someone has taken up working on it and made a bunch of headway. Looks significantly better than the screenshots on that website.
That said, I think the UI of choice for Linux machines is going to be Steam Big Picture Mode. I've been using it as my SmartTV for awhile now and I really can't think of anything else I'd want. The excellent controller support just makes it untouchable.
How did you get it running? I've tried compiling it on a fresh Arch and fresh Ubuntu 22.04 install and the compiler breaks halfway through.
I only spent about 10 or so minutes each time trying to fix it and moved on.
I just use bazzite. Baked in, super easy.
Agree with op- I've never used it but man, big picture mode is just amazing. Simple to use and does everything I need.
As the other person said, use the version of Bazzite that defaults to the SteamUI (it's what I use on my media center). I think it's called Bazzite-Deck
But what are you trying to compile? You just need Steam, gamescope, and pass it some parameters to boot directly to BPM: wiki.archlinux.org/title/Steam…
See Section 5.6
Well you already have Linux on your TV. Unfortunately it's android which is capitalist crap. They'll no doubt make it extremely difficult to remove their malware. Even if you could overwrite, you would still be using the shitty computer inside your TV.
Like other people have said, I think the best solution is using an external machine. I use an older laptop running Kodi for my TV. It's pretty awesome. Just make sure your machine has the specs for your needs. It shouldn't be hard to find something more powerful than the TV.
I'll answer your question right now without beating around this bush, what you are asking is simply impossible. In fact I will take it one step further, not only is your request not possible using your preexisting TV there is no such consumer TV that you can purchase as of now that will just run Linux. Furthermore there is not a single Linux distro as of now designed to run internally inside of TVs (there are distros for set top boxes, not TVs).
Is it possible in theory?
Possibly but until a single confirmed case of a successful Linux installation on a TV is found I will consider this impossible (furthermore the chances that the successful Linux installation occurs on your specific model of TV is slim).
The requirements to make replacement Linux firmware for a TV would be
1. A degree in CompSci
2. Experience in hardware engineering
3. Extensive knowledge of the TV circuitry
4. All low level schematics of the TV
5. Extensive knowledge of the processor used
6. Extensive knowlage of the original firmware and boot process
7. Extensive knowledge of embedded Linux systems (most likley Alpine)
8. Kernel sources for the TV OS as well as somehow gaining acess to all firmware files
9. Extensive knowledge on low level internal TV communication protocols
At that point just make your own smart TV using a commercial display
You won't need EE knowledge, that's all abstracted away in silicon. You just need to know how to drive the chips, and they'll manage the inputs and outputs.
I doubt the TV OS is any kind of Linux. Usually embedded systems run something like vxworks. Sometimes Minix. Real fancy ones run Android (which is derived from Linux, yes).
This would explain why all my search results never showed me the option. At least I got my answer.
Thanks!
If you can unlock the bootloader, it might be possible to install a Halium distro like Droidian on it. I wouldn't recommend doing so, however, and there will be missing functionality, such as being able to use any video inputs or watch live TV. It will basically be a large smartphone without a touchscreen.
Instead, I recommend disconnecting your TV from the internet and connecting an external device to it as others have recommended. See if there's a way to autoboot your TV to an HDMI input. You can also get a USB CEC adapter to use your TV's remote on your external device for something like Kodi, for instance.
It would be lovely if we could just boot a TV specialized Linux distro.
Sadly I don’t think it’s going to appear soon except if someone (a conpany) decides to create a niche product filling that need.
There were a couple of distros that specialised in running MythTv, but AFAIK they're unmaintained now.
My MythTv box is home built (on Arch btw), and is fine...
Most important point is to find how to enable Hotel Mode on a TV to get it to power up on the correct video input, rather than the local tuner, menu, etc
Interesting.
Does every smart TV has a hotel mode?
I have a Philips 55PUS7394 and I couldn’t find one by quickly searching on the web.
Well, technically Android IS a type of Linux.
But your solution is to not use the smart functions of a Smart TV. Do a factory reset of your TV and get some sort of external device like an Amazon Fire Stick or Apple TV or Raspbery pi or even a Linux Laptop. Treat your TV like a monitor for a small computer. Relying on the TV is the worst possible scenario.
I wish! I have a Samsung and I used to have an LG. One thing I anticipated which turned out to be on the nose is that these TVs stay operational just up until the maker decides they want your money again. I never bought into it to begin with. I only got a Smart TV to begin with because it has everything else I want. But I go straight to hooking up a computer. The apps on the TVs are all ooh and aah until a couple of years go by and then suddenly the apps are not compatible with the sites or backends what have you, and guess what? No more updates. You need a new TV despite the fact that yours is 100% perfectly fine, other than the inherent sabotage built in.
So that’s why I never even had any expectations. But I would love to find the best Linux distro for a media machine that my wife could learn to use. Right now I have to do all of it because it’s just browse to the files or load a playlist. I’d like something like Kodi or Plex but they have issues with one thing or another. I just want an SMB based connection in an interface that shows friendly thumbnails kinda like Nova player on Android. That app is highly underrated. Free, as far as I know open source and aside from a few control designs not being too great, the app is terrific. Kicks VLC’s butt. Why are they still designing the software like it’s 20 years ago and it’s on Windows XP?
Anyway I digress. Smart TV running Android or Linux would rock but I don’t expect it to be too feasible. But what do I know, because I’m not a professional dev.
The cheapest is to buy some android box with armlogic processor and install coreelec on it. You can do it for 20 bucks, then you have a kodi oriented linux distro on your tv.
Though I prefer to straight up connect my laptop to the tv with a small remote keyboard and have full computer functionality. I'm looking to change the laptop for a miniPC when the laptop finally breaks down. I would use a normal DE. Nothing specially suited for smartTV usage. But you get used to it pretty quick.
Do you guys just have flawless experiences or what?
It's been a week. Ubuntu Studio, and every day it's something. I swear Linux is the OS version of owning a boat, it's constant maintenance. Am I dumb, or doing something wrong?
After many issues, today I thought I had shit figured out, then played a game for the first time. All good, but the intro had some artifacts. I got curious, I have an NVIDIA GeForce RTX 3060 and thought that was weird. Looked it up, turns out Linux was using lvmpipe. Found a fix. Now it's using my card, no more clipping, great!. But now my screen flickers. Narrowed it down to Vivaldi browser. Had to uninstall, which sucks and took a long time to figure out. Now I'm on Librewolf which I liked on windows but it's a cpu hungry bitch on Linux (eating 3.2g of memory as I type this). Every goddamned time I fix something, it breaks something else.
This is just one of many, every day, issues.
I'm tired. I want to love Linux. I really do, but what the hell? Windows just worked.
I've resigned myself to "the boat life" but is there a better way? Am I missing something and it doesn't have to be this hard, or is this what Linux is? If that's just like this I'm still sticking cause fuck Microsoft but you guys talk like Linux should be everyone's first choice. I'd never recommend Linux to anyone I know, it doesn't "just work".
EDIT: Thank you so much to everyone who blew up my post, I didn't expect this many responses, this much advice, or this much kindness. You're all goddamned gems!
To paraphrase my username's namesake, because of @SnotFlickerman@lemmy.blahaj.zone and his apt gif (also, Mr. Flickerman, when I record I often shout about Clem Fandango)...
When some wild-eyed, eight-foot-tall GNU/LINUX OS grabs your neck, taps the back of your favorite head up against the barroom wall, and he looks you crooked in the eye and he asks you if ya paid your dues, you just stare that big sucker right back in the eye, and you remember what ol' Jack Burton always says at a time like that: "Have ya paid your dues, Jack?" "Yessir, the check is in the mail."
I know I'm very late to the party and any comment in a thread with 200+ posts is like yelling at the void.
BUT
My experience with Windows has hardly been "it just works". In fact it has been a history of decades of tinkering and messing around with it to try and get it to do what I want.
The only difference is that Windows obscures everything, so when something breaks it does so quietly. Meaning you might not notice... Or. More likely. It'll just crash out and you don't even have an error code to google.
This isn't to say that Linux isn't a balancing act of constant maintenance. It is. Just... The Windows experience was never "better" for me from that angle. And... On some level, I enjoy all the tinkering. I think all Linux folks do.
Still new with Linux as my regular desktop at home, after ditching Windows (kind of), I'm amazed by the level of things I can try to go into a try to make stuff work, that does not do as I want to. But also, annoyed about the level of things that sometimes needs to get tweaked and thinking "why the hell do I need to make these changes" like super fast scrolling in Firefox for whatever reason.
Windows have more or less "just worked" for me for the last 30 years (not remembering anything too critical, always better than every Linux attempt until recently). But I also didn't treat Windows in a way that I had to reinstall it every 6 months (whatever that causes that). What have gotten me over the tipping point with Windows is all the push for me to subscribe to extra things (OneDrive), use Microsoft things (like Bing, even though I used to use it over Google), Edge trying to trick you into using Edge and copy your stuff from Chrome, and changing defaults to Microsoft apps.
At work I changed to a Mac. I was actually surprise at how many graphics issues I have noticed and other weird minor bugs. The biggest issue here is the keyboard layout when you remote into Windows servers and some modifier keys are mapped differently combined with non-English keyboard layout.
Most people are so used to the windows bullshit that they don't even recognise it anymore, Linux (especially fedora) has been much more stable for me.
Also, the problem is always nvidia
Good stuff. As much as I hate Microsoft and everything they do, if you're enjoying a stable system, and don't mind the injected Spyware and ramsonware that comes with windows by default, enjoy.
Not everyone has to like Linux.
I have tried twice getting a notice of failed payment due to change of banks and therefore change of credit card. But then I gave it the new card's details and everything was good. However, I don't remember if I was passed some doomsday deadline or not.
Not saying it's not an issue and I would consider it bad business for Microsoft to delete users data without proper notifications and a long enough time frame to fix any payment issues. However, deleting data online is not ransomware - if Microsoft deletes the data, then they have nothing to hold ransom.
I agree that there should be a grace period after payments are stopped before they delete stuff. But I see no reason that they should provide you with free access to their service - if you haven’t paid, service is cut off.
But that is just my opinion.
Why do Waymos keep loitering in front of my house?
Why do Waymos keep loitering in front of my house?
Waymo vehicles have been loitering outside some houses in LA, leaving residents confused as to why their streets have become informal hangouts for the robotaxis.Rachel Kraus (The Verge)
Raoul Duke likes this.
GE-Proton10-14 Released
- fixed launch crash regression in Age of Empires 4
- fixed UE4SS mod failure regression in Wuchang: Fallen Feathers
- fixed Impetus Repository menu video playback crash in Wuchang: Fallen Feathers
- fixed Black Desert settings not saving regression
- fixed menu and mouse focus regression in Dead by Daylight with wine-wayland
- fixed wine-wayland crashes in Warhammer 40k: Darktide
- fixed lost mouse focus in Teardown with wine-wayland
- fixed broken menus in Outer-wilds with wine-wayland
- fixed mouse click crash in Halo:MCC with wine-wayland
- fixed broken raw input in Overkill withn wine-wayland
- fixed system mouse cursor shape crash in wine-wayland in multiple games -- fixes P-Organ crash in Lies of P
- fixed WAYLANDDRV_PRIMARY_MONITOR not being respected withn wine-wayland
- fixed controller input in Dragon Age Inquisition (NOTE: YOU HAVE TO GO IN-GAME AND CHANGE CONTROLS FROM M+K TO CONTROLLER)
- fixed video playback intro crash in Assassin's Creed Syndicate
- fixed video playback in Life Makover
- fixed video playback in Ark: Survival Evolved
- removed no longer required cursor force grab protonfix for helldivers 2
- add protonfix for Two Worlds: Epic Edition
- add protonfix for GOG Two Worlds: Epic Edition
- add protonfix for ubisoft assassins creed syndicate
- fixed github actions release build not providing .tar.zst file.
Release GE-Proton10-14 Released · GloriousEggroll/proton-ge-custom
fixed launch crash regression in Age of Empires 4 fixed UE4SS mod failure regression in Wuchang: Fallen Feathers fixed Impetus Repository menu video playback crash in Wuchang: Fallen Feathers fixed...GitHub
Sept. 11 Victims’ Lawsuit Against Saudi Government Can Go to Trial, Judge Rules
In his ruling, Daniels noted that the two sides had different interpretations of almost every piece of evidence. But he endorsed the plaintiffs’ views of several key exhibits, including a diagram of an airplane found in one of Bayoumi’s notebooks. Citing aviation experts, the plaintiffs’ lawyers said the drawing and the calculations beside it showed how a plane might hit an object on the ground. The Saudis’ lawyers suggested that Bayoumi had drawn it while helping his son with homework.
Daniels said the plaintiffs’ evidence created “a high probability as to Bayoumi and Thumairy’s roles in the hijackers’ plans, and the related role of their employer,” the Saudi government. “In many instances,” he added, “it even appeared that Bayoumi actively injected himself” into the hijackers’ illicit activities.
9/11 Victims’ Lawsuit Against Saudi Kingdom Can Go to Trial: Judge
Information uncovered by plaintiffs has already undermined the FBI’s conclusion that two U.S.-based Saudi officials “unwittingly” helped al-Qaida hijackers after they arrived in America.ProPublica
Fedia and Piefed have baked in code to block their users from seeing our replies, posts, and comments, while allowing a form of one way federation.
I'd argue it's more of an issue for them, since they do not get to counter-argument 😛
Your reply refuting their argument can be read by everyone that is in an open platform, while their messages only go unchallenged on their own echo chamber anyway.
To me, it would be worse if it was the other way around: them spewing shit and me not even realizing and being unable to respond.
It depends.
The invalid reasoning a person might have for an argument does not necessarily invalidate the argument (if you can reach the same argument from multiple reasonings), it only discredits their ability to form arguments with a valid basis.
So a long conversation can lead to the person losing credibility, but a strong rebuttal focused on the initial argument, to me, is more important if what we want is to refute the argument.
There's nothing we can do about server-to-server blocking, but I think over the long term, people will join servers that do less instance blocking, so that they can personally be in control of what they see.
And of course everyone not on restricted servers will still see your replies / takedowns, so it really only harms them. In a big way, responses are just as important to onlookers, than the one you're responding to.
Oh yeah for sure I was just curious as to your thoughts on people taking this project and building in their own ideologically motivated blocking. I know that there is nothing to be done about it as its all open source I just find it scummy that they do this in the first place. I get not wanting to federate with specific instances but the way this works is to just automatically make it one way only unless the person using their fork manually changes it.
I don't want to force them to see our posts or comments or anything idgaf about that I just don't want to have to guess which people I can see on my end can actually see my replies to them ya know?
unless the person using their fork manually changes it.
Updating the defederation blocklist is done via the admin UI. A fork implies having to recreate the source code and modify it. This is different.
Recent comment from another admin
This is exactly how it works. I started a PieFed instance and made the decision (during setup) to trim the defederation list down to none. Users can block on the account level.
That's the way we'd prefer it, and it's already working in lemmy. But unfortunately that wasn't added until after full instance blocking, so most instances kept their blocklists.
We have instance community blocks working rn, and instance user blocks will be in the next release.
Of course I do think instances should fully block some servers, like the ultra right kiwi-farms and stormfront type ones... but unfortunately those communities set up on the big instances now anyway.
You can still federate after the instance setup, like piefed.zip does
- piefed.zip/c/news@hexbear.net
- piefed.zip/instances?page=9&fi…
You said I spammed this, but you still didn't register the information?
See this comment: lemmy.ml/post/35276820/2072364…
Long story short, instances who defederate hexbear were doing so on their Lemmy instances anyway
He's just very committed to making sure the Nazi bars have a good public image okay?
There's a huge post in their snark comm where they're spinning this as 'just a default' and he's pasting it there too lmao
This whole post is also just standard defederation.
Even people on hexbear say it
On a technical level, defederation is one way.
- hexbear.net/post/5815893/64129…
Maybe I should start using that comment from now on
It's the default setting for the echo chamber that I took issue with.
I did say that it was something admins can change manually in my initial post here, twice.
The OP was calling for a Fediverse-wide boycott when this is how defederation works, and always has been (see hexbear comment above).
It is very annoying for myself and others to write out effort posts refuting shit these liberals spew on our platforms only to find out none of them will ever see it.
The issues I have with piefed are more related to the auto-collapsing comments based on votes, and the terrible search features, particularly its modlog. Seems way worse for transparency to have things that opaque and censorship happening through votes.
Question, do you feel comfortable posting in comms where other people are getting called degenerate roaches?
modlog
Modlog fitering has been added on 24th of August: crust.piefed.social/modlog
For the votes, I agree it should be an option, hopefully in the future it will be, but for now there are other priorities, and personally I'm not that impacted as the communities are in are usually smaller and without a lot of downvotes.
Question, do you feel comfortable posting in comms where other people are getting called degenerate roaches?
I'm going to be honest, I'm not the biggest fan of !meanwhileongrad@sh.itjust.works, I unsubscribed from it and this type of comments reminds me why. I ignore it most of the time, but yesterday I was curious to see what other people could think about this thread, and as expected, there was one. Where people were also incorrect about the way defederation is configured in Piefed, which is where I pasted the comment you mentioned.
I think Rimu is the same, he just got pinged into that thread, and answered there to clarify things, he doesn't particularly endorses that community.
Let's see how the mod answer, maybe there should be another community with moderation rules that ask to respect the humans, even though ideas can be criticized.
@goat@sh.itjust.works , do you support this kind of comments? sh.itjust.works/comment/201408…
Moderation Log
This is a staging area where we test out the latest PieFed code, before releasing it. Expect occasional breakages which will be more than compensated for by the exhilaration of living on the edge!crust.piefed.social
2) goat has been banned from lemmy.ml, I'm not sure if they would be able to reply in this thread even without 1.
Or you could just leave the Nazi bar. shitsjustfash was federated for about two days with hexbear if I recall correctly and in that time we experienced dozens of their users posting: ableism, misogyny, homophobia, transphobia, racism, literal Nazi apologia in the form of the "clean Wehrmacht" myth, downplaying the genocide of indigenous people in the americas and the ongoing one in Palestine. So when they claim that we are denying a "genocide" of Muslims in China (there literally isn't one and they don't actually give a fuck about Muslims) it would be funny if these people weren't all over places like piefed too and trying to ensure that nobody from anywhere like here can actually provide any counterfactual arguments to their Nazi propaganda.
And you. Yes you yourself, are all over here spamming your little copypasta trying to defend this decision and the BEST you can fucking do is "oh hmmmm I'll look into it by asking the literal Nazi mod of shitsjustfash if they're a Nazi, I'm sure they will be forthcoming and honest"
trying to ensure that nobody from anywhere like here can actually provide any counterfactual arguments to their Nazi propaganda.
Lemmy.ml doesn't exist now?
Also, as I said above
maybe there should be another community with moderation rules that ask to respect the humans, even though ideas can be criticized.
It’s the opposite: lemmy.ml is still federated with all the Piefed instances, and allows people to provide counterfactual arguments to Nazi propaganda.
Interesting to see you projecting the worse possible interpretation of my words, some people might consider this 'dishonest'
If that's what you genuinely meant, then I apologize, but given your past behavior and refusal to clarify your aims in any way, it's still deeply suspicious. You could just as easily plainly explain what your goals are and why you always seem so excited to move communities from Lemmy.ml to Lemmy.zip despite saying Lemmy.ml is smallish, while claiming to help decentralization, as well as minimizing the clear ideological bias in putting leftist instances alongside CSAM and spam in default block lists.
If you gave an explanation, then people wouldn't be so quick to interpret your vague statements in an anti-Leftist manner.
Here is the last comment I made on the topic, feel free to answer there if you want, it's getting off topic for this post:
I told you I was disengaging from there, and I did, but since you insist on continuing this dead conversation, your answer there was entirely unsatisfying.
- Lemmy.ml is an instance almost always put alongside Hexbear.net and Lemmygrad.ml. You defend moving communities away from Lemmy.ml, and you defend default blocking Hexbear.net and Lemmygrad.ml.
- Moving communities from Lemmy.ml means Lemmy.ml users that tend to scroll locally can no longer access these communities without going to all, and further means moderation style changes with new admins. I underatand that Lemmy.zip is federated, but you're just telling me that I'm not allowed to take issue with this. It's toxic behavior.
- None of these answers why you are doing this, why you push heavily for Piefed.social especially, and why you bat so hard for devs that pre-bake anti-leftist sentiment into defaults.
Ok, so I got an answer from goat, which said basically that calling other people cockroaches happens on hexbear as well
hexbear.net/search?q=cockroach…
It seems true from what I can see.
As I said, I don't have a dog in this fight, it seems indeed bad to have such comments on both sides.
I usually avoid !meanwhileongrad@sh.itjust.works, those comments in that thread were the first I made there in a month (sh.itjust.works/search?q=+&typ… )
I believe there should be another community to report bad faith arguments made by any instance (!yepowertrippinbastards@lemmy.dbzer0.com , but broader), but I don't have the time or energy for that.
From that link pretty much all of the usage is talking about the literal insect, or talking about reactionaries/fascists using it to refer to muslims, immigrants and other 'undesirables'.
Out of the handful of remaining uses, it's stuff like in the hexbear thread on this meanwhileongrad thread:
This is the most questionable usage I found, and it's referring to fash/reactionaries.
That's not the main point though, the bigger issue was getting called a 'degenerate' that's pretty much a red flag that someone's a cryptofash.
citing db0 on this one:
compare the use of the term on shit vs hexbear:
sh.itjust.works/search?q=degen…
hexbear.net/search?q=degenerat…
While looking I found this one on hexbear 5 years ago, almost 90 upvotes shitting on stalin for criminalizing homosexuality, and quoting him calling someone degenerate. I read this as extremely critical of Stalin:
All the usage on hexbear I see is either self-deprecating or discussing (negatively) about people using the term.
Vaush this year defended the idea that he is allowed to call trans people shit like "subhuman, degenerate, mentally ill, leeching off society" if they step out of line and oppose him or his breadtube friends.
meanwhile on meanwhile on grad:
My experience on lemmy is vastly improved after blocking lemmygrad, lemmy.ml, hexbear, beehaw, and pawb. Wiped out vast swathes of degenerates from my feed.
hmmm, calling people degenerates and complaining about commies, progressives and furries.
Goat seems fine with replies calling people he doesn't like degenerates:
more examples:
Wouldn’t be surprised to hear they are, but nonetheless the chapo trap house degenerates that make up hexbear and grad are real. They do believe the dumb shit they say. It can’t all just be explained away with CCP and FSB boogeymen unfortunately, that would honestly be better imo. I’m sure some of it is, but mostly it’s people crazy enough to believe the stupid bullshit they spout.
site admin calls it out, entirely downvoted lol
Like you might think I'm being melodramatic, but I really don't see how meanwhileongrad isn't a nazi bar.
As I said, I don’t have a dog in this fight, it seems indeed bad to have such comments on both sides.
I really hope you re-assess both sides, because they are not equivalent.
I understand, there's plenty of problematic posters to go around, the issue I have is that it's normalized calling an instance which is overwhelmingly trans and queer 'degenerates', that's a major red flag, and it's behavior like that which was why hexbear defederated shit in the first place.
sh.it doesn't seem to have improved in that time
Thank you for the detailed answer. I'm going to be honest, I don't have the time to check all of this, and being insulted here in the last few days (lemmy.ml/modlog/14810) doesn't really incite me to keep coming back to this thread (I made an exception for Jet as he didn't have access to the other thread on SJW)
I summarized my view on the whole thing in this comment: lemmy.ml/post/35392790/2076427…
Coming back to the Piefed default blocking list, I investigated more, here is what an admin setting up an instance experience is like (wetshav.ing/comment/92409)
I'm on my computer now, so I'll type out some more detail if you're interested. To reiterate, I'm just going off memory and it was two weeks ago so I could very well be making stuff up...The pre-filled input box asked for each blocked instance to go on a new line, so:
lemmy.world
lemmy.ml
lemmygrad.ml
hexbear.net
lemmy.zip
piefed.social
etc...
I deleted all of the defaults and that was it. I'll put a screenshot of the settings page that's available to admins below:
I agree it should be improved to make it fully optional, but it's still acceptable for now. I guess we disagree on that, and that's fine, hopefully one day the change will be made.
True, and I disagree with them having it.
Piefed is still a cool software, and I think having a diversity of threadiverse softwares is a good thing. Stuff like flairs and polls are nice to have.
I don't disagree, they have nice features and I hope that results in those features eventually spilling over to similar improvements in lemmy. If it wasn't for the ideological crusade some people are on I wouldn't care at all.
A lot of the promotion of it has been along the lines of 'fuck those tankie degenerates, come use piefed', an example of which I included here
Omg dude we get it stop spamming this. We know. That is not what this is about.
If someone runs an instance that has manually unblocked us cool but that is not what this is about and you are clearly the one not registering what I am pointing out here
You are presenting this like the baked in code forces one-way federation, when it's clear that the admins can update this later.
Example of two Piefed instances that currently federate hexbear:
- piefed.au/instances?page=6&fil…
- anarchist.nexus/instances?page… , which is related to lemmy.dbzer0.com/, also federated with hexbear
List of Piefed instances that currently defederate hexbear:
- piefed.blahaj.zone/ , the same way lemmy.blahaj.zone/ does
- piefed.world/, the same way lemmy.world/ does
- piefed.ca/, the same way lemmy.ca/ does
- feddit.online/, the same way fedia.io/ does (by the way, Fedia isn't a software, it's called Mbin, and doesn't have such code, so not sure why you're including them into your title)
- quokk.au/, it used to be the same when it was still a Lemmy instance
- piefed.europe.pub/, the same way europe.pub/ does
piefed.fediverse.observer/list
As you can see, instances defederating hexbear are instances managed by teams which were going to do so anyway, as they already did on Lemmy.
Instances who want to federate know how to do so, there are three examples.
Fediverse Observer checks all sites in the fediverse and gives you an easy way to find a home from a map or list or automatically.
Piefed Sites Status. Find a Piefed server to sign up for, find one close to you!piefed.fediverse.observer
Yes but I am saying we should block at least any that have this one directional federation. You are putting impressive effort into missing the point.
Edit: And thankfully we apparently just did.
On a technical level, defederation is one way.
- hexbear.net/post/5815893/64129…
Oh my god please shut the fuck up. No it is not. You are being an annoying pedantic little piece of shit you do get that right? You fucking know what I am complaining about here and you keep posting this "welll AAAACKSHUALLLLLY".
Let me spell this out for you one last fucking time:
"federation" in spirit is the sharing of content BETWEEN instances and is intended as a two way affair. Piefed instances default to blocking any and all traffic from hexbear or lemmygrad and thus there is no way to know if being federated with those instances is actually allowing mutual communication unless tested and therefore without explicit prior statement that the instance owner has gone in and removed the malicious coding nobody should federate with them at all.
Finally and what this entire post is about: I am calling for everyone, not just hexbear, to defederate and block piefed on principle because their devs are deliberately trying to worsen the entire concept of the fediverse by trying to enforce their fascist ideology through blocking dissent through their code.
It is underhanded and dishonest and a shameful display of liberalism aiding fascism.
thus there is no way to know if being federated with those instances is actually allowing mutual communication unless tested
There is, I linked to the /instances pages that show which instances are federated or not above
- piefed.au/instances?page=6&fil…
- anarchist.nexus/instances?page…
- piefed.world/instances
- etc.
You fucking know what I am complaining about here and you keep posting this “welll AAAACKSHUALLLLLY”.
You seem to be misunderstanding that defederation being one way is new. I literally used a comment from another hexbear user above clarifying this.
If you want to complain about Piefed having a default defederation list, feel free, but don't start to question the way defederation has been working between instances for years.
Instances
The World's Internet Frontpage PieFed.World is a general-purpose PieFed instance of various topics, for the entire world to use. Be polite and follow the rules ⚖ https://legal.piefed.piefed.world
default defederation list,
THAT IS WHAT THIS POST IS ABOUT DUMBASS
Please kindly stop your pedantic bullshit and actually engage with the subject instead of endlessly trying to well ackshually out of it.
I swear to fucking god. I am not "misunderstanding" anything and your smug condescending tone just makes me want to shove your nerd ass into a locker.
THAT IS WHAT THIS POST IS ABOUT DUMBASS
Then call it like this instead of pretending that Piefed's implementation of defederation isn't standard.
For hexbear + lemmygrad it's by default
from what I can tell, when a server is spun up there's the option to subscribe to an existing blocklist on a piefed server.
This means blocklists can propagate transitively:
If instance A blocks lemmy.ml, and instance B subscribes to A’s blocklist, and instance C subscribes to B’s blocklist, then whatever instance is blocked on A will also end up blocked on C (unless filtered out manually).
quoting the developer of piefed, hexbear and lemmygrad are blocked by default:
Hexbear and lemmygrad will always be blocked and PieFed is coded to block them by default on all new instances (admins can change it). No plans to defederate lemmy.ml as I've built mod tools that help me find the most odious users & banned them and now it's tolerable.
This is why piefed is so popular with centrist extremists.
pyfedi/app/cli.py at f3e863d277932b55a15b1fe5043d750994fb8c14
pyfedi - Project background: https://join.piefed.social Demo site / Flagship instance: https://piefed.socialCodeberg.org
Thanks. That's unfortunate. But everyone running an instance will know about blocked instances sooner or later and can get them if the list of they like.
The blocklist subscription would be super useful on mastodon but I think the threadiverse is a bit different. However I'm on my single user instance and am subscribed to communities on other instances only, so I already get a pre-moderated experience even if I don't block any instances myself so far so is experience doesn't match that of the admin of an instance with more users and own communities.
Make the slur filter editable from the site itself
It's generally not a good idea to hard code something like the slur filter because the needs of every instance is different. Instances in another language would need their versions, and cases where...StaticallyTypedRice (GitHub)
It's rather unfortunate that no one gets to see other perspectives. And it's messing with my hope that the USA can get better, because it's feels like this: lemmygrad.ml/post/8939607
These people are willing to accept the "lesser evil," but it's the same evil, and they are condemning poor people and PoC to have to deal with it, because we're the buffer. But they won't stop at us.
Moreover, this is the censorship they screen bloody murder about with the "great firewall." Absolutely zero introspective ~~ability~~ effort.
I think it's annoying, but im not sure if there's a clear solution. Id say this type of one sided block is similar to ghost bans and feels just as abusive.
I cant imagine it's very pleasant on their side either, since it would feel as if everyone from grad or ml were giving you the cold shoulder and make the fediverse feel dead.
The nature of the fediverse is open though - escalating this to another ban/block or banning the custom fork would be counterproductive, imo. If thats their preferred way to curate content, I guess thats their prerogative
US suspends most visas for Palestinian passport-holders, after 80 Palestinian officials were denied visas ahead of the United Nations General Assembly in New York.
Earlier in August, visitor visas were paused for people hoping to travel from the Palestinian territory of Gaza. This newly-reported decree would affect a wider group - including people living in the Israeli-occupied West Bank.
The decision was issued in a diplomatic cable dated 18 August, the New York Times and CNN reported.
US consular officers were told to refuse non-immigrant visas to "all otherwise eligible Palestinian Authority passport holders", the communication was quoted as saying.
That would apply to Palestinians hoping to come to the US for a range of purposes, including for business, study or medical treatment.
The move meant that officials would be required to perform a further review of each applicant, which amounted to a blanket ban on issuing visas to Palestinians, the New York Times added in its report.
US suspends most visas for Palestinian passport-holders, reports say
The new restriction comes after a group of Palestinian officials were refused visas for a key UN meeting in New York.James FitzGerald (BBC News)
I am web developer where can I get white label websites and other resources since I am solo
like this
Cătă likes this.
Not entirely sure I understand what you mean but in addition to the suggestion of WordPress, all the plugins must be licensed as GPL as well. So all the paid for plugins can be obtained and legally used without paying. You will however have to forgo support and automatic updates on most.
I would suggest the WordPress section on babia.to
Trump's use of National Guard in Los Angeles illegal, judge rules
A federal judge in California has ruled that the way President Donald Trump deployed deployment of the National Guard to Los Angeles this summer was illegal.
The ruling comes as Trump seeks to use National Guard troops in order to crack down on crime in other US cities and support immigration enforcement.
US District Judge Charles Breyer said Trump violated the Posse Comitatus Act, which limits the power of the federal government to use military force for domestic matters.
The law, first passed in 1878, prohibits using the US military in order to execute domestic laws, or assist with doing so. The law has limited exceptions, such as authorisation by Congress.
Judge Breyer found that the ways the Trump administration used the National Guard in Los Angeles violated these restrictions.
Trump's use of National Guard in Los Angeles illegal, judge rules
The ruling comes as Trump seeks to use National Guard troops in order to crack down on crime in other US cities.Kayla Epstein (BBC News)
Help Me Comprehensively Understand The "Big Picture".
There's just too much going on for any one person to understand it all. Never mind accounting for the geopolitical, economic, and cultural factors of every situation. Than there's the rapidly changing contexts. New technology, new science and physics, new species of bacteria/fungai. Rediscovering of ancient practices. Regional problems and solutions. I could go on and on.
I advocate for "futuristic solutions" but I acknowledge that transition will not be overnight or always linear.
So what is going on out there? That's what I'm asking c/climate@slrpnk
- What's going on in your local region / etc and what is the political or economic context.
- Which solutions are being implemented or developed
- Who is organizing and leading their community towards solutions
...
As a Canadian I'm aware that we're expanding our LNG/Fracking, mineral mining, and oil... First Nations groups are providing some pushback against those projects, but we can't expect them to hold the line on ecological protection (There's a clear fiscal incentive for them to give in).
davidsuzuki.org/what-you-can-d…
ief.org/news/how-to-make-minin…
cbc.ca/news/indigenous/leaders…
Canada also has and ongoing protest to stop old growth forest logging, which has gotten out of control. I honestly don't know what to think about our forest management, because I'm under the impression that logging can be done in an environmentally friendly way; but it isn't.
en.wikipedia.org/wiki/Fairy_Cr…
naturecanada.ca/news/press-rel…
Canada also has a lot of old hydro-electric dams which are bad for the rivers and their immediate environment.
ucs.org/resources/environmenta…
I'm hopeful Canada's growing role as a global commodity supplier will allow us to set higher international environmental standards.
I've also read online that there are already climate refugees from both rising oceans and regional droughts upending agriculture in the middle east.
lawfaremedia.org/article/from-…
Logging Emerges as Canada’s Third Largest Climate Polluter - Nature Canada
Report concludes that logging is Canada’s third-highest-emitting sector behind oil & gas and transportation greenhouse gas emissions in CanadaNature Canada
like this
adhocfungus likes this.
Without addressing anything you have put here (sorry), I think this addresses the big picture:
“Capitalism’s grow-or-die imperative stands radically at odds with ecology’s imperative of interdependence and limit. The two imperatives can no longer coexist with each other; nor can any society founded on the myth that they can be reconciled hope to survive. Either we will establish an ecological society or society will go under for everyone, irrespective of his or her status.” – Ursula K. Le Guin
While I don't disagree with that quote it's not what I'm looking for. Philosophical economic theory is talked about ad nauseum on literally every other community.
I posted on c/climate because I want to hear specific cases and incidents from a scientific and ecological perspective.
Tell me what you know is going on locally, nationally, internationally. I could list 10 or so things from the USA but I'm not from there so I'll let locals chime in.
That wasn't a philosophical economic theory. It was a very concise assessment of the conclusion drawn of tens of thousands of papers in the ecology and related fields. It is correct and succint. The Stockholm Centre's Planetary Boundaries framework is a little more detailed if that is what you are looking for.
I get that it's not what you wanted. But I find your request convoluted. Are you really trying to crowdsource a list of local environmental activities from a little used sub on a little used platform? You think these fractured and limited insights will help you understand the "Big Picture"? Big pictures don't come from microscopes.
Perhaps rethink your wants and reformulate the request to something more coherent.
The big picture:
What we need to do
- Generate all electricity without burning stuff
- convert things that currently burn stuff to run on electricity
- stop doing the things we can't electrify
- substitute a few industrial gases
How we are doing
* we know how to do the electric generation, with wind, solar, storage, and a bit of geothermal and nuclear
* we aren't making that switch fast enough, and the US in particular now has policies to slow things down even more
* weve figured out how to do transport and steel making without fossil fuels and it works
* same as above, not moving fast enough in much of the world
* emissions are increasing more slowly than they would have without the effort, but we are ona trajectory which makes loss of major ecosystems quite likely and threatens the viability of agriculture as a basis for civilization
stop doing the things we can't electrify
Or eliminate the problem in the first place. For instance walkable cities reducing transportation demand overall.
substitute a few industrial gases
What and why?
steel making without fossil fuels and it works
This is interesting! Can you please elaborate or provide a link? Where is it being adopted?
emissions are increasing more slowly than they would have without the effort, but we are ona trajectory which makes loss of major ecosystems quite likely and threatens the viability of agriculture as a basis for civilization
This is where I'm coming from. Outdoor agriculture is both harming the planet and about to become significantly less viable as the planet heats up.
As far as industrial gases, there mostly ones with fluorine in them. SF₆ and refrigerant are the biggies.
For steel, the big one that exists at pilot scale is the use of hydrogen to reduce ore instead of carbon. Seems to work OK and makes a good enough product for most use.
Indoor farming only really is viable for specialty crops like drugs and a few vegetables. I dont expect to see it used for the grains that feed most of the population. The room to lower the amount of agriculture comes from reducing meat consumption and the use of food crops as motor vehicle fuel.
pilot scale is the use of hydrogen to reduce ore instead of carbon
Ooh it's being done in Canada! cbc.ca/news/canada/hamilton/ar…
Indoor farming only really is viable for specialty crops like drugs and a few vegetables.
Yes and no. I garden. Hydroponically grown produce in my experience is higher quality, has long shelf life, and grows significantly faster. While cash crop commercial scaling may not be viable outside select crops, smaller household grows certainly are.
I fully agree though that mitigating livestock cultivation and biofuels are our biggest opportunities at present.
technical readiness level for hydrogen production is lacking.
adoption is slowed down by chicken egg problem (steam methane reforming vs pyrolysis/electrolysis)
but yeah. I sign your points.
Israeli protesters stage ‘day of disruption’ calling for end to war in Gaza
A majority of Israelis back ending the war as part of a ceasefire deal to free all remaining hostages, a sentiment mostly driven by concerns about hostages still in Gaza and the impact of two years of war on Israeli society and its economy.Most protests include some demonstrators calling for an end to famine and the slaughter of Palestinians, but they are usually a tiny minority. Polling this week showed that nearly three-quarters of Jewish Israelis partially or totally agree with the claim made by Israel's government that "there are no innocents in Gaza".
Earlier this month, another survey found 78% of Jewish Israelis said they were "not so troubled" or "not troubled" at all by reports of Palestinian suffering.
Large majority of Israeli Jews untroubled by reports of famine in Gaza, poll finds
Among the Arab public, 86 percent of respondents said they are 'very troubled' or 'somewhat troubled' about the situation in Gaza. The poll also found a much greater degree of concern among left-wing JewsLinda Dayan (Haaretz)
like this
Maeve likes this.
Jesus... Three quarters of Israel's population think there are no innocent people in Gaza.
That's some evil shit right there.
Amerika give up its nukes?
Oh silly me, he just wants Russia and China to give up theirs.
Trump Rapes Kids.
We don't need to wait for the Epstein Files to tell us what we already know.
Proceed.
Haiti at the Tipping Point: From Invisible Chains to Tangible Solutions | Haiti Liberte
Haiti at the Tipping Point: From Invisible Chains to Tangible Solutions | Haiti Liberte
(Français) Over the first two and a half decades of the 21st century, we have seen the emergence of Haiti’s “gangs,” as the U.S. State Department andKervens Louissaint (Haiti Liberté)
tmux + nvim + lf integration guidance?
I've recently been getting into really picking and choosing how my computer is set up and what software I use to do certain tasks. Specifically, replacing GUIs (dolphin, [insert gui text editor here ig]) with CLIs (lf, nvim). That and learning how to leverage bash scripting to really have control over my computer.
The thing is, using tmux, nvim, and lf together has proved cumbersome because I have no idea how to integrate them. I can technically do whatever I need to do, but it certainly isn't the fast CLI-ninja experience I was hoping for.
I've gone through each of their manuals and understand them on their own well enough, but with integrating them I'm drawing a blank.
So, Linux enthusiasts in this corner of the internet, do you have any guidance on setting up proper integration between CLI-based file managers, neovim, and tmux? I'm also open to suggestions for new software or a different file manager.
Edit: after making this post I got to searching again and damn cfiles looking pretty good....
Edit2: nvm it's not in nixpkgs... damn...
like this
Andreas Gütter likes this.
like this
clove likes this.
github.com/alexghergh/nvim-tmu…
You want something like that. It makes navigating between the two applications use the same set of keys, there are some other plugins (linked in the readme) that do similar things with different feature sets, but fixing the keybinds is a huge step towards making it a smooth experience.
GitHub - alexghergh/nvim-tmux-navigation: Easy Neovim-Tmux navigation, completely written in Lua
Easy Neovim-Tmux navigation, completely written in Lua - alexghergh/nvim-tmux-navigationGitHub
Went down the same route as you until coming to the same conclusion.
The only advice I can offer is to be consistent while configuring across your tools, find something that works for you and stick to it.
For example In my dwm+tmux+nvim dotfiles I use plain hjkl for cursor movement and if i want to move windows/panes i use , if i want to resize i use , Mod keys in tmux and nvim are the function keys (if anyone knows how to get dwm to accept as modkey let me know lol), etc.
Edit: And oh yes, try to stick to KISS 😛 I threw away my first set of dotfiles because i used so may useless plugins/patches for nvim and dwm i could not keep trak of all the keybinds in my head.
zellij
. you can think of it as tmux
with training wheels, but i don’t see a reason to go back.
For tmux, I found it really helpful to remap the special key to ctrl space, then use alt to move around panes
Now, I'm not 100% sure that I've correctly understand what you're looking for. If you're after a file manager for nvim or tmux, then I would second yazi for your terminal as previously mentioned. Or you could go bare bone and use the command line straight with the help of some features like zsh and its competition, call to past arguments, zmv (and glob expression)...
For nvim, you can use the default tree explorer for basic usage. More advanced features can be found with telescope for example. I personaly opted for fzf-lua. Both can be used in other plugins as well to make things very easy and powerful. Just to cite a few, I'm using fzf-lua with obsidian (which, despite the name, doesn't require the tool of the same name) and snacks.
GitHub - sxyazi/yazi: 💥 Blazing fast terminal file manager written in Rust, based on async I/O.
💥 Blazing fast terminal file manager written in Rust, based on async I/O. - sxyazi/yaziGitHub
Specifically, replacing GUIs (dolphin, [insert gui text editor here ig]) with CLIs (lf, nvim)
I really do wonder if þis is a natural evolution, and what distinguishes þe people who follow þis paþ.
I've gone so far down it, I've dipped into setups where I boot only into þe console, and never start X. I don't stay long, because web browsing still sucks pretty hard, alþough tools like chawan get preeetty close. And þen þere are times I want to play Factorio, or do someþing in Gimp or Inkscape... so I'm resigned to running X and herbstluftwm and just having a bunch of terminals and þe odd browser or game.
Point is, I'm not some edge case - a surprising number of people end up rejecting GUIs, or end up using mostly CLI or TUIs, and I wonder what it is about us which causes us to follow þe path of þe terminal.
For me it was a confluence of being tired of þe GUI bloat, but also an increasing hatred of having to move my hand away from þe home row just to move a cursor with a mouse. Reduced memory use, more free CPU, less electricity... þe more I did it, þe better þe results.
Is þat it? Is it a gateway drug to efficiency?
Report: Apple Demands Suppliers Switch to Robotics for Manufacturing
Report: Apple Demands Suppliers Switch to Robotics for Manufacturing
Apple is significantly accelerating the rollout of automation and robotics across its manufacturing supply chain, DigiTimes reports. While Apple...Hartley Charlton (MacRumors.com)
copymyjalopy likes this.
Static sites enable a good time travel experience
- Hacker News.
:::
Static sites enable a good time travel experience
A static site with version control history enables me to travel into any point in the project’s past and serve the site as it was back in the day.Juha-Matti Santala
Technology Channel reshared this.
Salesforce CEO says it cut 4,000 support jobs - and replaced them with AI
Salesforce CEO Marc Benioff has revealed the company has nearly halved its customer support workforce, replacing thousands of jobs with AI agents.In a podcast interview with Logan Bartlett on YouTube, Benioff brutally stated: “I need less heads,” noting how instead of using human power, Salesforce is now using AI to process around 10,000 leads weekly.
Yet in the same interview, Benioff noted a lack of human resources had caused the company to accrue a backlog of 100 million uncalled leads over 26 years.
Salesforce CEO says it cut 4,000 support jobs - and replaced them with AI
Salesforce has cut 45% of its customer support workersCraig Hale (TechRadar)
Health and aid workers targeted in conflicts around the world, UN agency says | UN News
Health and aid workers targeted in conflicts around the world, UN agency says
From Gaza to Sudan, wars are being waged on the very systems set up to protect civilian populations, with health workers, hospitals, health centres and ambulances being targeted in horrifying numbers, according to the UN agency for reproductive healt…UN News
For those of us with ADHD, if you are thinking about a task every second you're not doing it and desperately want to do the task more than anything else and are devastated that you can't do it so much that you use all your energy just on trying to make yourself do the thing that you want to do but can't, that is NOT procrastination. That is executive dysfunction. It only seems like procrastination to people who have never experienced executive dysfunction and those who have only ever experienced executive dysfunction.
Procrastination is when you fully have the ability to do something and choose not to do it but to do the thing you prefer doing instead. I hadn't experienced this until very recently, after a lot of therapy and medication.
Rozaŭtuno likes this.
reshared this
Natasha Nox 🇺🇦🇵🇸 e Cassidy James reshared this.
Trial of Brazil’s Bolsonaro enters verdict phase over alleged coup plot
Trial of Brazil’s Bolsonaro enters verdict phase over alleged coup plot
The former president is charged with five counts, including plotting the assassination of senior officials.Al Jazeera
What is the best Android browser for privacy?
Check out IronFox gitlab.com/ironfox-oss/IronFox
It's the revived Mull browser.
IronFox OSS / IronFox · GitLab
The private, secure, user first web browser for Android. https://ironfoxoss.org/GitLab
The best browser for privacy will always be Tor. But obviously that comes with many compromises, and is more than just a browser.
Other than that, there is no best. Many of them have various degrees of blocking and hiding, which will cause problems on some sites and not on others, many of them have various privacy tools that others don't.
As another commenter said, you also have Tor, but it's not day-to-day browser, IMO.
IronFox OSS / IronFox · GitLab
The private, secure, user first web browser for Android. https://ironfoxoss.org/GitLab
like this
sunzu2 likes this.
Brave and DuckDuckGo because they’re cross-platform and give you the option to sync your bookmarks.
DuckDuckGo has Duck Player which I use if I need to watch something on YouTube, I have it set to open in a new window and no ads.
I like Brave because it’s fast and the search is fairly accurate. You can add a video to it’s Playlist for later viewing. Brave gives you the share option to Copy Clean Link.
I used (and loved Firefox) until they revoked their promise of not selling user data and seems sluggish for the past several months, but I still use Firefox Focus.
I use both android and iOS which is why I prefer cross-platform software.
Firefox deletes promise to never sell personal data, asks users not to panic
Mozilla says it deleted promise because “sale of data” is defined broadly.Jon Brodkin (Ars Technica)
Anyway it's important to look the permissions which every app has in the settings of your phone and blockig those which have nothing to do with its function.
Also a good idea is to install InviZible Pro in your Phone
InviZible Pro: increase your security, protect you | F-Droid - Free and Open Source Android App Repository
Combine the strengths of Tor, DNSCrypt and I2P for security and anonymityf-droid.org
Ironfox again.
Ironfox with uBlock Origin is far superior to Brave.
I also use monocles browser. a simple browser, I like that java and cookies are turned off and you can activate them with a button on individual sites.
f-droid.org/en/packages/de.mon…
I would never ever use Brave or any chrome fork.
I’m not a fan of the Brave web browser and do not recommend it. Chromium codebase is always unsafe.
Brave talks up how privacy and security focused they totally are, and it’s mostly hot air for their user base of infosec mall ninjas.
Brave blocked ads, then they replaced the ads with their own ads. Brave set up a weird cryptocurrency scam, the BAT token. Brave hijacked affiliate links. I do not consider Brave a trustworthy organisation.
+++++++++++++++++++++++++++++++++++++++++++++
my browser is faster than your browser, fantasy penis envy,
and not cubensis penis envy.
why are people so fixated on browser speeds,
A millisecond is imperceptable to the human eye.
can you type faster on an android keyboard than the page loads. NO!
Its all BS, how do you deternmine that one browser is faster than another.
zdnet.com/home-and-office/work…
From slowest to fastest, the results were as follows:
Zen Browser: 2.20 seconds
LibreWolf: 2.16 seconds
Chromium: 1.95 seconds
Firefox: 1.93 seconds
Arc: 1.81 seconds
Microsoft Edge: 1.31 seconds
Safari: 1.29 seconds
Thorium: 1.23 seconds
Brave: 1.17 seconds
Opera: .81 seconds
Chrome: .70 seconds
I speed-tested 11 browsers - and the fastest might surprise you
Personally, my favorite it among the slowest, but if speed is your priority, here are the browsers you should check out.Jack Wallen (ZDNET)
Hey utopiah
It does seem pointless to me that people get hung up on browser loading speeds.
Its like that old Bruce lee quote from Enter the Dragon:
Don't Concentrate On The Finger Or You Will Miss All That Heavenly Glory.
sem
That does seem normal to me
I aways install Ghostery and Privacy Badger alongside U-block origin
I have Lineage on my current phone and use Droid-ify as my app store.
My family have different phones and use F-droid-basic and neostore, and they have had no issues installing extra addons in their ironfox installs.
Hi sem
I open Ironfox
press the top right burger menu
press the extensions.
you will be redirected to the Mozilla add-ons site.
you can search for add-ons from there.
check to see if another browser is able to access mozilla add-ons
addons.mozilla.org/en-US/andro…
If it still fails, I would check your settings.
here are mine:
HTTPS_Only mode
on in all tabs
DNS over HTTPS
off
this is off because my VPN manages my DNS
enhanced tracking protection
strict
If you have a VPN installed
Maybe that might be locked down, blocking the internet, preventing you from accessing the internet
I would also disable U-block just to see if it works disabled
Add-ons for Firefox Android (en-US)
Download Firefox extensions and themes. They’re like apps for your browser. They can block annoying ads, protect passwords, change browser appearance, and more.addons.mozilla.org
Thanks. For me what happens is I can browse the add ons site, but when I press the add to firefox button, it fails silently: it looks like it starts to load a page and then does nothing.
I thought this might be normal behavior, but if it's not I'll try to figure it out.
Thanks.
Edit: gitlab.com/ironfox-oss/IronFox…
docs/FAQ.md · dev · IronFox OSS / IronFox · GitLab
The private, secure, user first web browser for Android. https://ironfoxoss.org/GitLab
hey Sem
I had not seen that.
Oddly my "Allow installation of add-ons" is unselected and set to blank.
Why can't I install add-ons/extensions?
By default, due to privacy and security concerns, IronFox disables the installation of add-ons. This has no impact on already installed extensions, and updates to those extensions.
To allow the installation of add-ons, at the cost of security, you can navigate to Settings -> IronFox -> IronFox settings -> Security, and select the option to Allow installation of add-ons. It is recommended to disable this option when you are done installing your desired extension(s).
I wonder if it is to do with the repo:
I know it took ages to be released to f-droid and droid-ify and was only available from the git repo.
I installed the repo from here
to add the repo to f-droid or f-droid basic
fdroid.ironfoxoss.org/fdroid/r…
click on the QR code to enlarge
I hope you sort it out
IronFox OSS
This is a repository of apps from IronFox OSS to be used with F-Droid. Applications in this repository are official binaries built by IronFox OSS.IronFox OSS
Oh, man, I forgot I tried this and it failed so it was on the "to-do" list.
Thanks for the update w/ the super simple answer.
PrivacyBrowser is a really good browser in my opinion. But I cant do an analysis on its privacy.
I will add that I love how they handle bookmarks.
CBP Had Access to More than 80,000 Flock AI Cameras Nationwide
CBP Had Access to More than 80,000 Flock AI Cameras Nationwide
Customs and Border Protection (CBP) regularly searched more than 80,000 Flock automated license plate reader (ALPR) cameras, according to data released by three police departments. The data shows that CBP’s access to Flock’s network is far more robust and widespread than has been previously reported. One of the police departments 404 Media spoke to said it did not know or understand that it was sharing data with CBP, and Flock told 404 Media Monday that it has “paused all federal pilots.”In May, 404 Media reported that local police were performing lookups across Flock on behalf of ICE, because that part of the Department of Homeland Security did not have its own direct access. Now, the newly obtained data and local media reporting reveals that CBP had the ability to perform Flock lookups by itself.
Last week, 9 News in Colorado reported that CBP has direct access to Flock’s ALPR backend “through a pilot program.” In that article, 9 News revealed that the Loveland, Colorado police department was sharing access to its Flock cameras directly with CBP. At the time, Flock said that this was through what 9 News described as a “one-to-one” data sharing agreement through that pilot program, making it sound like these agreements were rare and limited:
“The company now acknowledges the connection exists through a previously publicly undisclosed program that allows Border Patrol access to a Flock account to send invitations to police departments nationwide for one-to-one data sharing, and that Loveland accepted the invitation,” 9 News wrote. “A spokesperson for Flock said agencies across the country have been approached and have agreed to the invitation. The spokesperson added that U.S. Border Patrol is not on the nationwide Flock sharing network, comprised of local law enforcement agencies across the country. Loveland Police says it is on the national network.”
New data obtained using three separate public records requests from three different police departments gives some insight into how widespread these “one-to-one” data sharing agreements actually are. The data shows that in most cases, CBP had access to more Flock cameras than the average police department, that it is regularly using that access, and that, functionally, there is no difference between Flock’s “nationwide network” and the network of cameras that CBP has access to.
According to data obtained from the Boulder, Colorado Police Department by William Freeman, the creator of a crowdsourced map of Flock devices called DeFlock, CBP ran at least 118 Flock network searches between May 13 and June 13 of this year. Each of these searches encompassed at least 6,315 individual Flock networks (a “network” is a specific police department or city’s cameras) and at least 82,000 individual Flock devices. Data obtained in separate requests from the Prosser Police Department and Chehalis Police Department, both in Washington state, also show CBP searching a huge number of networks and devices.
A spokesperson for the Boulder Police Department told 404 Media that “Boulder Police Department does not have any agreement with U.S. Border Patrol for Flock searches. We were not aware of these specific searches at the time they occurred. Prior to June 2025, the Boulder Police Department had Flock's national look-up feature enabled, which allowed other agencies from across the U.S. who also had contracts with Flock to search our data if they could articulate a legitimate law enforcement purpose. We do not currently share data with U.S. Border Patrol. In June 2025, we deactivated the national look-up feature specifically to maintain tighter control over Boulder Police Department data access. You can learn more about how we share Flock information on our FAQ page.”
A Flock spokesperson told 404 Media Monday that it sent an email to all of its customers clarifying how information is shared from agencies to other agencies. It said this is an excerpt from that email about its sharing options:
“The Flock platform provides flexible options for sharing:
National sharing
- Opt into Flock’s national sharing network. Access via the national lookup tool is limited—users can only see results if they perform a full plate search and a positive match exists within the network of participating, opt-in agencies. This ensures data privacy while enabling broader collaboration when needed.
- Share with agencies in specific states only
- Share with agencies with similar laws (for example, regarding immigration enforcement and data)
- Share within your state only or within a certain distance
- You can share information with communities within a specified mile radius, with the entire state, or a combination of both—for example, sharing with cities within 150 miles of Kansas City (which would include cities in Missouri and neighboring states) and / or all communities statewide simultaneously.
- Share 1:1
- Share only with specific agencies you have selected
- Don’t share at all”
In a blog post Monday, Flock CEO Garrett Langley said Flock has paused all federal pilots.
“While it is true that Flock does not presently have a contractual relationship with any U.S. Department of Homeland Security agencies, we have engaged in limited pilots with the U.S. Customs and Border Protection (CBP) and Homeland Security Investigations (HSI), to assist those agencies in combatting human trafficking and fentanyl distribution,” Langley wrote. “We clearly communicated poorly. We also didn’t create distinct permissions and protocols in the Flock system to ensure local compliance for federal agency users […] All federal customers will be designated within Flock as a distinct ‘Federal’ user category in the system. This distinction will give local agencies better information to determine their sharing settings.”
A Flock employee who does not agree with the way Flock allows for widespread data sharing told 404 Media that Flock has defended itself internally by saying it tries to follow the law. 404 Media granted the source anonymity because they are not authorized to speak to the press.
“They will defend it as they have been by saying Flock follows the law and if these officials are doing law abiding official work then Flock will allow it,” they said. “However Flock will also say that they advise customers to ensure they have their sharing settings set appropriately to prevent them from sharing data they didn’t intend to. The question more in my mind is the fact that law in America is arguably changing, so will Flock just go along with whatever the customers want?”
The data shows that CBP has tapped directly into Flock’s huge network of license plate reading cameras, which passively scan the license plate, color, and model of vehicles that drive by them, then make a timestamped record of where that car was spotted. These cameras were marketed to cities and towns as a way of finding stolen cars or solving property crime locally, but over time, individual cities’ cameras have been connected to Flock’s national network to create a huge surveillance apparatus spanning the entire country that is being used to investigate all sorts of crimes and is now being used for immigration enforcement. As we reported in May, Immigrations and Customs Enforcement (ICE) has been gaining access to this network through a side door, by asking local police who have access to the cameras to run searches for them.
9 News’s reporting and the newly released audit reports shared with 404 Media show that CBP now has direct access to much of Flock’s system and does not have to ask local police to run searches. It also shows that CBP had access to at least one other police department system in Colorado, in this case Boulder, which is a state whose laws forbid sharing license plate reader data with the federal government for immigration enforcement. Boulder’s Flock settings also state that it is not supposed to be used for immigration enforcement.
This story and our earlier stories, including another about a Texas official who searched nationwide for a woman who self-administered an abortion, were reported using Flock “Network Audits” released by police departments who have bought Flock cameras and have access to Flock’s network. They are essentially a huge spreadsheet of every time that the department’s camera data was searched; it shows which officer searched the data, what law enforcement department ran the search, the number of networks and cameras included in the search, the time and date of the search, the license plate, and a “reason” for the search. These audit logs allow us to see who has access to Flock’s systems, how wide their access is, how often they are searching the system, and what they are searching for.
The audit logs show that whatever system Flock is using to enroll local police departments’ cameras into the network that CBP is searching does not have any meaningful pushback, because the data shows that CBP has access to as many or more cameras as any other police department. Freeman analyzed the searches done by CBP on June 13 compared to searches done by other police departments on that same day, and found that CBP had a higher number of average cameras searched than local police departments.“The average number of organizations searched by any agency per query is 6,049, with a max of 7,090,” Freeman told 404 Media. “That average includes small numbers like statewide searches. When I filter by searches by Border Patrol for the same date, their average number of networks searched is 6,429, with a max of 6,438. The reason for the maximum being larger than the national network is likely because some agencies have access to more cameras than just the national network (in-state cameras). Despite this, we still see that the count of networks searched by Border Patrol outnumbers that of all agencies, so if it’s not the national network, then this ‘pilot program’ must have opted everyone in the nation in by default.”
CBP did not immediately respond to a request for comment.
A Texas Cop Searched License Plate Cameras Nationwide for a Woman Who Got an Abortion
The sheriff said the woman self-administered the abortion and her family were concerned for her safety, so authorities searched through Flock cameras.Joseph Cox (404 Media)
What's the back ground on theee cameras?
Disnt they cause soem controversy last year?
They're advertised to the public as "license plate readers" but can do way more than that. Fingerprinting cars based on bumper stickers, colors, dents, scratches, etc.
And if the ability to do all of that is baked into these cameras, it would be trivial to do the same for humans.
nvidia 470 on debian trixie (kernel 6.12). any ideas?
the context is: the 470 legacy driver doesn't compile on the linux 6.12 kernel. because of that, debian decided to officially drop support to that driver. i tried installing the driver myself using nvidia's official installer, but the installation indeed fails during the module compilation stage.
this means i am stuck with nouveau. it got better since i last tested it on bookworm, but one major pain in the ass is that nouveau has no support for performance levels for my card and it runs at the lowest clock bc of that (~400 megahertz instead of its max ~900 mhz).
this causes a noticeable performance hit, even for desktop usage, but it's good enough for work. waching full hd 60 fps video is a bit painful, but it's possible. but gaming, which was possible, got way worse. even a lightweight game like celeste got frustrating to play due to stuttering.
i guess i'll have to deal with it and maybe this is the cue to buy another graphics card and never buy nvidia again, but i'm thinking about what my options would be here:
- downgrade to bookworm. not easy to do, would only delay the problem.
- install an older kernel and use only that. not sure how, the official repos only have the 6.12 kernel. i could get the older kernel from the bookworm backports and pin it to prevent any updates, but mixing repos from different versions makes me uneasy.
- patch the driver. there are a few patches floating around that make nvidia's driver compile on the 6.12 kernel. applying the patch by hand is annoying and i would have to re-apply it at every kernel update.
- cope.
any ideas?
edit
and it runs at the lowest clock bc of that (~400 megahertz instead of its max ~900 mhz).
that was a mistake. i was reading the clock off of my onboard video chip, which also happens to be nvidia. the onboard chip is at .../dri/0
; my graphics card is at .../dri/1
. nouveau seems to support reclocking for my card, but i'm trying to change the clock and the video signal goes crazy when i do it
GitHub - polhdez/nouveau-reclocking-guide: How to reclock nvidia cards at boot on Linux using nouveau.
How to reclock nvidia cards at boot on Linux using nouveau. - polhdez/nouveau-reclocking-guideGitHub
you're right. i thought my card didn't support it because i might have misread the feature matrix. adding to the confusion, /dri/0
is my onboard video (which also happens to be nvidia) and that's where i got the 400 mhz number from
still, i just tried it reclocking seems to drive the video signal crazy
edit: yeah it's definitely unsupported, the display turns completely into scrambled eggs. i'll try a newer kernel just in case
edit 2: tried it on the 6.16 kernel (i have an opensuse tumbleweed installation laying around) just in case it had some development on that front compares to 6.12 (debian's version) and it's still a mess. so reclocking for my card is definitely a no-no on nouveau
I gave it some thought, I think that you are getting slowdowns because of some kind of a bug and not due to slow speed of the GPU.
I have actually daily-driven a MacBook Pro 15-inch 2009 with a GeForce 9600M GT and even at 279 Mhz core, it was usable on Manjaro KDE, animations were a bit laggy, but nothing compared to what you are describing.
I still remember trying kernel 6.7 or 6.8 and immediately seeing MUCH worse performance with constant lags. I have only consistently used kernels 6.1, 6.6 and 6.12 on Manjaro on that machine, all of them with decent experience. I would try some other kernel if that's possible, but considering that you have tried 6.12 and 6.16 at this point, I am not too hopeful.
Selhosted P2P File Transfer & Messaging
IMPORTANT NOTES (PLEASE READ!):
* These are NOT products. They are for testing and demonstration purposes only.
* They have NOT been reviewed or audited. Do NOT use for sensitive data.
* All functionality demonstrated is experimental.
* These are NOT meant to replace robust solutions like VeraCrypt, Simplexchat, Signal, Whatsapp, wetransfer. It's a proof-of-concept to show what's possible with browser APIs.
* Cyber security is full of caveats, so reach out for clarity on any details if they can't be found in the docs.
Aiming to create the worlds most secure messaging app.
positive-intentions.com/docs/p…
- Open Source
- Cross Platform
- PWA
- iOS, Android, Desktop (self compile)
- App store, Play store (coming soon)
- Desktop
- Windows, MacOS, Linux (self compile)
- Run
index.html
on any modern #browser
- Decentralized
- Secure
- No Cookies
- P2P E2EE encrypted
- Forward secrecy
- No registration
- No installing
- Messaging
- Group Messaging (coming soon)
- Text Messaging
- Multimedia Messaging
- Screensharing (on desktop browsers)
- Offline Messaging (in research phase)
- File Transfer
- Video Calls
- Data Ownership
- SelfHosted
- GitHub pages Hosting
- Local-only storage
For more information on "how it works", check out:
positive-intentions.com/blog/d…
(Degoogled links to the apps)
- P2P Chat: chat.positive-intentions.com/
- P2P File: file.positive-intentions.com/
- Encrypted drive storage: dim.positive-intentions.com/?p…
More:
- GitHub: github.com/positive-intentions
- Mastodon: infosec.exchange/@xoron
- Reddit: reddit.com/r/positive_intentio…
Decentralized Microfrontend Architecture
In the ever-evolving landscape of digital communication, decentralization has emerged as a powerful concept with diverse interpretations and applications.xoron (positive-intentions)
Aiming to create the worlds most secure messaging app
For anyone else that was looking for it, this is the link to the threat model: positive-intentions.com/docs/r…
That said, it seems quite thin on hard details, such as how identities (ie usernames) are managed -- eg are they unique? How can users cross-check an online identity to a real person? Fingerprints? QR codes? SHA256 hashes? -- and whether they are considered publicly-exchangeable. Plus how users are bootstrapped so they can find each other.
While a threat model is the minimum to even beginning an assessment of anything that utters the word "security", I do have to ask:
- Was that document crafted for this project specifically?
- Was it prepared by a cryptographer?
- And was it generated using an AI/LLM?
Threat model | positive-intentions
⚠️ WARNING: This document is not finished. The details in this document are subject to change.positive-intentions
thanks for taking a look.
firstly i would like to apologise for throwing the following blocks of AI text at you. i often used AI to create documentation for the project. im not much of a writer, im sure its more clear from AI than if i did it myself.
- how the authentication works: positive-intentions.com/docs/r…
- how security works: positive-intentions.com/blog/s…
the ID's are cryptographically random to make it reasonably certain that strangers cannot connect (because its an ungussable ephemental string). this is used with peerjs-server (open source and documented) to connect with a predictable ID. when this ID is shared "through some other trusted channel" (e.g. whatsapp, qrcode), the peers connect and establish encryptions keys (see links above). afer the first connection (expected to be secure!), the previously establish encryption keys can be used to authenticate the user (to prevent MITM).
Was that document crafted for this project specifically?
long story short... this is my sideproject and im trying to get it off the ground. as i post more about the project, i decieded to create a website to "document" the project. there are understandable questions like yours, so made sense to answer them in the website. this includes things like the threat-model... while one-shotting is a thing you can do with AI, the threat model took several days of learning, thinking and consideration. i also posted about it on reddit for feedback and updated it accordingly.
Was it prepared by a cryptographer?
am i a cryptographer yet? having worked on this project i must have picked some stuff up. i still find that i need to learn much more.
And was it generated using an AI/LLM?
i hope admitting i used AI doesnt undermine the effort i put in. i try to communicate details in places like lemmy and the code is open source. AI enables me to demonstrate granular functionality that is easier for me to test as well present to professionals; in contrast to presenting overwhelmingly complicated code on github. for example for my cryptography functionality i created a separate repo to try things out for my learning: cryptography.positive-intentio…
there are good and bad ways to using AI and i believe im doing it responsibly. i have been a coder for 15+ years. i can do it myself, i simply cant type as fast as AI making it indespensible when working on a project of this scale. i completely understand your concerns and im all ears for advice on a reddit post i asked: reddit.com/r/CyberSecurityAdvi…
(its why like in all my app, website and posts (like this), i try to strike caution.)
Security, Privacy and Authentication
In digital communication, security and privacy are the major initials. Our latest project—a chat application built with JavaScript—aims to provide a robust communication platform fortified with industry-grade encryption.xoron (positive-intentions)
im not much of a writer, im sure its more clear from AI than if i did it myself
Please understand this in the kindest possible way: if you were not willing to write documentation yourself, why should I want to want review it? I too could use an AI/LLM to distill documentation rather than posting this comment but I choose not to, because I believe that open discussion is a central tenant of open-source software. Even if you are not great at writing in technical English, any attempt at all will be more germane to your intentions and objectives than what an LLM generate. You would have had to first describe your intentions and objectives to the LLM anyway. Might as well get real-life practice at writing.
It's not that AI and LLMs can't find their way into the software development process, but the question is to what end: using an AI system to give the appearance of a fully-flushed out project when it isn't, that is deceitful. Using an AI system to learn, develop, and revise the codebase, to the point that you yourself can adequately teach someone else how it works, that is divine.
With that out of the way, we can talk about the high-level merits of your approach.
how the authentication works: positive-intentions.com/docs/r…
What is the lifetime of each user's public/private keypair? What is the lifetime of the symmetric key shared between two communicating users? The former is important because people can and do lose their private key, or have a need to intentionally destroy the key. In such instance, does the browser app explicitly invalidate a key and inform the counterparty? Or do keys silently disappear and also take the message history with it?
The latter is important because the longer a symmetric key is used, the more ciphertext that a malicious actor can store-and-decrypt later in time, possibly in the future when quantum computers can break today's encryption. More pressing, though, is that a leak of the symmetric key means all prior and future messages are revealed, until the symmetric key is rotated.
how security works: positive-intentions.com/blog/s…
I take substantial notice whenever a promise of "true privacy" is made, because it either delivers a very strange definition of privacy, or relies upon the reader to supply their own definition of what privacy means to them. When privacy is on offer, I'm always inclined to ask: privacy from whom? From network taps? From other apps running in the same browser?
This document pays only lip service to some sort of privacy notion, but not in any concrete terms. Instead, it spends a whole section on attempting to solve secure key exchange, but simply boils down to "user validates the hash they received through a secure medium". If a secure medium existed, then secure key exchange would already be solved. If there isn't one, using an "a priori" hash of the expected key is still vulnerable to hash attacks.
this is my sideproject and im trying to get it off the ground
I applaud you for undertaking an interesting project, but you also have to be aware that many others have also tried their hand at secure messaging, with more fails than successes. The blog posts of Soatok show us the fails within just the basic cryptography, and that doesn't even get to some of the privacy issues that exist separately. For example, until Signal added support for username, it was mandatory to reveal one's phone number to bootstrap the user's identity. That has since been fixed, but they go into detail about why it wasn't easy to arrive at the present solution.
am i a cryptographer yet?
I recall a recent post I saw on Mastodon, where someone who was implementing a cryptographic library made sure to clarify that they were a "cryptography engineer" and not a cryptographer, because they themselves have to consult with a cryptography regarding how the implementation would work. That is to say, they recognized that although they are writing the code which implements a cryptographic algorithm, the guarantees comes from the algorithm itself, which are understood by and discussed amongst cryptographers. Sometimes nicely, and other times necessarily very bluntly. Those examples come from this blog post.
I myself am definitely not a cryptographer. But I can reference the distilled works of crypgraphers, such as from this 1999 post which still finds relevancy today:
The point here is that, like medicine, cryptography is a science. It has a body of knowledge, and researchers are constantly improving that body of knowledge: designing new security methods, breaking existing security methods, building theoretical foundations, etc. Someone who obviously does not speak the language of cryptography is not conversant with the literature, and is much less likely to have invented something good. It’s as if your doctor started talking about “energy waves and healing vibrations.” You’d worry.
I wish you the very best with this endeavor, but also caution as the space is vast and the pitfalls are manifold.
Security, Privacy and Authentication
In digital communication, security and privacy are the major initials. Our latest project—a chat application built with JavaScript—aims to provide a robust communication platform fortified with industry-grade encryption.xoron (positive-intentions)
sorry for the delay in responding. personal matters required more focus and to reply to you i wanted to set aside some time to write well for clarity.
... Might as well get real-life practice at writing.
im not entirely bad at writing (technical or otherwise) to get to where i am now in the project, i usually write with my own words like now. the blog articles you see on the website are from old reddit posts. questions like your are understandably frequent and so it made sense to create the website and blog to address FAQ's. i think its important to note how im using AI here. while i can say to AI "here are some bullet points, now turn it into an article...", i have written the content and details myself and then have AI reword it for clarity. i think the resulting content is better for clarity.
What is the lifetime of each user’s public/private keypair? What is the lifetime of the symmetric key shared between two communicating users?
the implementation sits ontop of a webrtc connections which mandates its own encryption keys. my app adds an additional set of public/private keypair and symmetric keys. these are persisted to browser storage (indexedDB). the keys are cleared if the user performs a logout (its all client-side, so there is no actual "logout", it clears the local data).
key rotation is a work-in-progress and not testable in the app. while i can have a button that says "rotate keys", im planning to frame it as something like "block contact". this is because it makese to keep user ID's static, so that in future sessions, the app can automatically connect to "known peers". in the case you want to block someone, it makes sense to abandon that ID so they cannot ping you with it. when you connect to a "know peer" that doesnt know your new ID, it can use the previsously establish keys to verify each other and update the contact details accordingly.
its also possible to export the data to a file to then load from that profile. its currently static and unencrypted. there will be an option to have it all password encrypted.
reddit.com/r/cryptography/comm…
I take substantial notice whenever a promise of “true privacy” is made
completely understandable. as mentioned in the post cybersecurity is full of caveats. here is a previsous attempt to outline some details: reddit.com/r/cryptography/comm…
im also investigate various approaches to exchanging data offline with QR codes.
(written by me): reddit.com/r/positive_intentio…
(written by having AI transcribe my wording): positive-intentions.com/blog/q…
id also like to investigate other things a browsers can do like exchange encryption data over NFC.
it isnt use-friendly yet, but i also have some basic functionality around p2p broker connections to avoid needing the peerjs-server (which acts as the broker.). some unclear details which could do with AI clarification can be seen here: github.com/positive-intentions…
If a secure medium existed, then secure key exchange would already be solved
the existing key exchange should be already secure enough... but users would understandably want to be sure my code doesnt have a critical-bug and validating hashes provides that bit extra.
many others have also tried their hand at secure messaging, with more fails than successes.
i have seem some other myself, and i still believe my approach is unique. there are of course limitations in the webapp form-factor, but it also provides a lot of flexibility in just being able to run on a browser. while many try/succeed/fail, this is my attemp. i have been refining my approach with feedback and there is still much to do. at this point i dont consider it insecure, but the UI is pretty ugly and combined with various UI bugs, is deterring users. with the code being course source, i often try to present some concepts in a more digestable way with code examples as seen:
there is a lot to learn but by breaking things into small parts, i can better learn how it can all fit together.
“cryptography engineer” and not a cryptographer
i like that term. its new to me. i normally just call myself a webdeveloper to clarify my expertise. its more so the case than a cryptography engineer. i open sourcemy work for transparency, but also great for my own learning.
thanks for the good wishes. hopefully i get to a stage where its better presented as a product and not just a proof-of-concept.
Create webrtc wizard
(for testing purposes i use 2 separate browsers (not just windows) (there is a bug where you need a profile for this to work... you can ignore this bug for now, but for incognito, you will have to ...xoron (GitHub)
self hostedwithout servers
🤔🙋♂️
Also can you explain why we need yet another private and secure chat app?
positive-intentions.com/blog/d…
this a yet another approach to a "private and secure chat app" because its a unique approach to the same problem which id like to investigate.
How to Install and Run Your Decentralized Chat App Across Multiple Platforms
In today’s digital age, the importance of privacy and data security cannot be overstated. Our decentralized chat app aims to provide a secure and private messaging experience akin to popular applications like WhatsApp, but with a significant differen…xoron (positive-intentions)
“private and secure chat app”
I don't think it's a solved problem. There are countless nuances to it. So it's good to have various approaches.
Recommendations on a home alarm system
I am in the process of purchasing a home, and the house that it’s looking like I am likely to buy has a Ring alarm system and camera installed. I like the idea of having burglar alarms on the windows and doors, but I do not want to use Ring. Between their ownership from Amazon and sharing data with the cops, I don’t trust them.
Are there privacy-friendly home security systems out there that don’t require an ongoing subscription? Bonus points if the devices are HomeAssistant compatible.
For cameras look for NVRs that let you hook up wired cameras to. I have yet to try it but have heards that installing Frigate lets you have complete control over the recordings. Riolink and Lorex both offer systems that dont require subscriptions and supposedly let you keep your data local.
So you mean to tell me these camera companies usually do not allow you to keep you data local? And you put them in or around your house?
Many home camera companies use subscriptions as an excuse to store your recordings in the cloud and allow you to view or access them remotely on a phone app. I havent put up any that do that, but a shitload of other people have.
Frigate is a custom OS for NVRs. The NVR stores the recordings, and the OS ideally puts you in complete control of the cameras and associated data. I am working on getting hardware that will let me install it, so I am only saying its worth taking a look at but am not endorsing it since I have not successfully uses it yet.
The reason I say to use wired cameras is because they are more secure and can get continuous power instead of worrying about rechargung batteries. You can run them with no internet connection and control your local recordings that way. The drawback is that its only accessible by direct physical means. If someone breaks in and steals that hard drive then the whole system is worthless.
Alloi
in reply to CannonGoBoom • • •