Lemongrab

@[email protected]

This profile is from a federated server and may be incomplete. View on remote instance

Lemongrab ,

I think it is a good way to isolate docker containers from the host without the heavier performance increase of a full VM. Each container can be easily set to an IP address, though the same is probably true for docker idk.

Unrelated, Podman is the a unprivileged implementation of docker with full compatiblity. You can use docker images with it which is great, and the syntax is mostly the same.

Lemongrab ,

You can use LXD guides, it is the same just not under canonical control and with dome new features coming out (I think).

Lemongrab ,

I have no problems thus far. It does have a docker compatiblity mode as well

Lemongrab ,

Comparing brave and base Firefox is unfair IMO. Brave is security hardened out of the box, where as Firefox is a general purpose browser and has telemetry in the form of crash reports and the like (which can be turned off). It can be hardend well through arkenfox, or using a fork like Librewolf. Comparing Firefox and chrome is better imho.

Firefox has many built-in anti fingerprinting flags (such as letterboxing, RFP, font limiting, and many more} which when combined with ublock origin are unbeatable. A baked-in content blocker like that of braves loses because it isn't extensible. This website compares on only default settings which aren't representative of the extent each browser can be taken but useful nonetheless: https://privacytests.org/

Lemongrab ,

Incorrect. It is created by someone who is associated with brave, but not a directly created by Brave. I am sure the tests is accurate (at least per test), but the testing criteria could be biased. It'd just be weird to the end up with Librewolf and Mullvad as a clear winner if the intention was to favor brave browser.

Lemongrab ,

I'm stated that because I know baked in features must wait for browser updates to get fixes (not talking about block list updates but the core itself). I also was basing it off a comment I read (can't find sadly) on the limitations of implementing a ublock-style blocklist into brave. And thirdly, I have seen no mention of anything like ublock's blocking modes (block 3rd party scripts/frames). Can you quickly select an element to block in brave?

I might have considered using brave as a 2ndary browser if it werent for the ceo's politics (spending thousands to support anti-lgbt legislation) which I feel are antithetical to privacy.

Lemongrab ,

Here is a graph the illustrates the block efficiency of ublock+Firefox compared to other browsers with/without ublock. https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-best-on-Firefox

Despite the URL name, it shows bare browse Brave and Firefox+ublock compare at blocking 3rd party ads/trackers. It looks like this was updated November of last year.

Lemongrab ,

Look at the bottom of the graph. Each grouping is per browser.

Lemongrab ,

I do understand that you aren't shilling brave. Ublock medium mode is great and I think worth the effort. I wish Firefox had some of the native features present in chromium browsers (mostly quality of life features like native force dark mode on web contents). But I love the extent that Firefox can be taken to reduce not just fingerprinting, but also avenues of attack.

Lemongrab ,

Yeah, it's crazy how many cousins WE have . . .

Lemongrab ,

Honestly kickass new background. Thx imma borrow that.

Lemongrab ,

Russian might still kill over a game of chess.

Lemongrab ,

Does kate from KDE suffice?

Lemongrab ,

Closer to Geany or Sublime. I haven't used gedit before though. Kate has language server back end integration, add-on support, integrated terminal, and other features. Geany might be a good option, though I know nothing of its speed. Kate seemed fine but again no idea.

Lemongrab ,

Np, glad it was useful.

Alright boys, I've been converted to the light side and have installed F-Droid. Now what?

Basically title. I waited on installing F droid for a long time because my phone threw many scary warnings when I tried a long time ago. But now I have it, and I got some fossify apps, but since there is no "Editor's Picks" on F- droid I dont really know where to go from here....

Lemongrab ,

I have some things to add.

Most of the released fossify apps are on fdroid.

From f-droid I recommended:

Binary eye (QR and bar codes)

Fennec or Mull (Firefox without telemetry, Mull for privacy/security)

K-9 mail (email client, Thunderbird mobile)

Aurora store (google appstore without need for play services)

Innertune (better YT music)

OpenNoteScanner (scan paper docs to digitize)

Droidify (fdroid but more feature rich and user friendly)

Lemongrab ,

Much less features. Does the job with simple orientation correction and post process filters for clearer text. Serviceable but incomparably.

Lemongrab ,

waves hands External spare wheel, spare pubes. All connected.

Lemongrab ,

What about a chromebox flashed with some linux os? Nice and cheap mini x86 pc. Just picked one up for 35 bucks with an i7 6th gen, just hoping it uses sodimm and isnt integrated on the mobo.

Lemongrab ,

Very cool. I was literally think about such a project yesterday lol.

Lemongrab ,

Mull works the same as Fennec, except it is hardended with patches from Tor and Arkenfox user.js. No real reason IMO to use fennec over Mull, whose developers also contribute to Fennec. Ghostery also changes your fingerprint, acting as one more data point.
Mull has a whole bunch of configured flags to reduce fingerprinting, and many more to help with security (like disabling JIT).

Check here for some comparisons:

https://divestos.org/pages/browsers

https://privacytests.org

Lemongrab ,

Cookies are partitioned in Firefox strict mode IIRC.

Lemongrab ,

Because Mull is hardened Firefox without telemetry. Brave is Chromium based and the company is shady.

Lemongrab ,

Firefox resistant fingerprinting does the first 2 things, the last one is mobile partial letterboxing. All are anti fingerprinting techniques, but i understand how they may be restrictive. Maybe just add dark reader to have dark mode forced on websites, which technically can be fingerprinted but has a large userbase so idk.

Lemongrab ,

Add cromite (the main bromite fork) which is on Windows and Android, and Mull by DivestOS (like arkenfox for Android). If you want to make a mobile section I would recommend Mull, Cromite, Fenix (fdroid). The thing with privacy browsers is they differ from security centric browsers. Vandium and Mulch are chromium security browsers for Graphene and Divest respectively, Cromite is a privacy chromium browser with good security as well. Ungoogled is designed as a drop in replacement for vanilla Chromium, and has custom flags for hardenning that must be enabled manually.

Lemongrab ,

How

Lemongrab ,

Maybe Cromite (the main bromite fork) would be better. Vivaldi isn't great, but it also isn't brave. It allows for blocklist importing and user scripts, and is on desktop Windows as well.

Next smartphone I buy, which one do you recommend?

Things that make me angry about my current smartphone Samsung Galaxy S21Ultra on a Verizon plan is the mandatory software updates in which they install WITHOUT MY PERMISSION stupid apps like Netflix and addictive gambling games and stacking block games and Candy crush. God knows what else they install without my permission. I...

Lemongrab ,

Rooting defeats androids security model and allows for further exploitation. Graphene most likely does support it because any AOSP OS that is geared towards security isn't going to leave a big hole in their security allowing malware or bad actors to modify system files (or install a rootkit).

What non-FOSS software are you using that you wish you could replace?

For me its honestly a ton of my work software (digital forensics), shit is too niche to be replaced by good FOSS options. Cellebrite, Magnet Axiom, etc. Autopsy is great and free and has a linux version but it simply cannot get the same level of data without a pretty nutty level of custom code....

Lemongrab ,

Notesnook is free, e2ee, nice ui, and has cloud sync. Recommmend

  • All
  • Subscribed
  • Moderated
  • Favorites
  • kbinchat
  • All magazines