Anna

Just VPN is sufficient and don’t get fooled by a lot of VPN adverts. Almost all of the internet uses SSL so even if you directly connect to public WiFi no-one can just snoop on your passwords or anything else. The only thing they will be able to see is the website you are visiting. Same as your ISP whether it’s some telco, VPN, or Google.

I can understand you not wanting to share which website you visit to google but if you are not careful Google will find out one way or the other. Even if you use VPN or Tor

And as already mentioned never do Tor over VPN or VPN over Tor unless you know exactly what you are doing and what are the risk associated with them.

If you are worried about state actors with compromised rootCA and DNS then Tor can help you there but if they are using this to spy on you then just bypassing it can also put you on a list

Um quick question does it know all about my financial obligations and if it sees I’m f*cked does it recommend higher salary???

Umm… apart from my ARR setup and few specific apps and websites. I use Tor and I2P for almost everything.

And for doomsday scenario I’ve several physical books I love and won’t mind re-reading until the heat death. Also I’ve downloaded several GBs of EPUBs I still have to get to… I think I’ll be alright.

To me Pluto will always be the 9th planet no matter what some fancy pants says it not being able to clean up its orbit. My home is also a little messy that doesn’t mean it’s not home.

Embrace. Extend. Extinguish

https://grapheneos.org/features#duress

Graphene OS Team has developed quite a lot of other useful features and some of them have even been merged into upstream AOSP allowing others also the benefits. Recent example is contact scope for apps starting Android 17 but it was initially developed by GrapheneOS team long ago.

Pick and learn any programming language. If you know 1 you can read and understand almost all of them.

For open source contributions my approach is, I use almost all the open source apps, tools, etc. And when I want to do something that isn’t supported or if something doesn’t work the way you want you can just check the source code and fix it. I’m not a Kotlin developer but I’ve contributed to several apps I use daily. Usually the community is also helpful if I’ve made a mistake or if something should be done in a different way for a language the PR Reviewer will just point it out I learn something new fix it and send it again.

Me cooking with a clay pot over a open fire

The only reason is f*ck snap and Ubuntu for forcing it onto users

The real answer is management needs atleast 3-5 meetings to first discuss this with 10 developers 10 upstream developers 10 downstreams developers and business team for all. And after we spent 2-4 weeks of all this a lone developer who’s been saying we just screw it in gets the approval to do exactly that

Firejail

deleted by creator

On high seas there are no ads arr… 🏴‍☠️🏴‍☠️🏴‍☠️

Nah… If you use of=/dev/sda it won’t touch your main drive \s

You know you can do in-place upgrades. I never faced any issues despite the warnings on the doc. Though I always try to do the in-place upgrade on a template clone first to see what I’m in store for. Like sometimes tmpfs needs to be increased…

Deal of art

I’ve never built a full ISO or Libre kernel specifically. But, For debugging few issues in my laptop I’ve built the kernel for qubes OS and app VMs. But from your description it sounds like you just want to disable certain modules. That can easily be achieved by updating the .config for the kernel and if needed you can add the patches to the kernel from Linus (Qubes is already adding few) check out https://github.com/QubesOS/qubes-linux-kernel

you can also use Qubes builder v2 to create rpm packages in secure way.

No. AOSP itself has little to no tracking. All the tracking/spying comes from Google Play Services which are automatically updated to the latest version. Also those are installed as system apps so they have greater access to OS functionality and normally you won’t be able to change the permissions.

In my case I need one app for generating RSA token to login to system. But somehow it works on GrapheneOS. I have created separate profile for that and installed just that 1 app. And during registration we need internet access after that that’s not even needed so I’ve even disabled internet access. And it still works. Check if something similar can be done in your case. But be careful some companies force you to BYOD but then restrict saying you can’t root or use custom ROMs.

I’ve been daily driving Qubes OS for last 6 years. You don’t need to be an Linux expert but you should know basic things. And few common commands and maybe simple bash scripting if you want some level of customization

Main thing is divide your personas,and create a Qubes for each of them. and if you just want to search for some random shit use disposable VMs

My setup is something like this I’ve 3 debian and 3 fedora templates 1 minimal used for sys VMs and vault, 2 normal template here I only install packages only available in official debian/fedora, repos 3 in this template I add custom repos which are still trustworthy

Then depending on what I need in which app on I assign the template.

I’m forced to use zoom and other very intrusive apps for them I’ve just setup the rc.local script (this runs with start of any Qube) to install them

Also even though Qubes provides isolation at Qube level I still use firejail inside all the VMs it just takes few minutes to setup and gives a peace of mind

Also Hassel depends on what you use it for. Few pain points for me are

1. Nested virtualization isn’t possible* there are some workarounds and in most cases it’s okay. The only problem is for Android app development. In that case the best solution is to just use adb and connect your own device

2. PCI passthrough it was really terrible few years ago but now it works in most cases but for me sometimes my Laptop overheats. I don’t need it much often so i haven’t spent time to fix it.

The only place I find it useful is in writing documentation for the code. I can quickly review it without there being any gotchas that only show up under certain circumstances like with code and even if I miss something it doesn’t break anything and anyone who is confused by the doc can easily reach out to me.