Lmao this is amazing. The future is now…

The openSUSE matrix server had this happen last year, and the admins came up with a good solution of bots that seems to keep things very clean now. I’m sure they might be happy to help if you asked in their admins group

If you set up the system like openSUSE then it makes sense snapper would work. I’d look at the openSUSE docs, its not like btrfs is different in Gentoo right? https://en.opensuse.org/SDB:BTRFS#Default_Subvolumes

Is it difficult to add them to more trackers? I’ve often wondered about this, how to keep stuff alive…

Gooner librarian lmfao

Apparently this is a tough problem for mobile devices… GrapheneOS (security hardened OS based on Android) took months to fix a leak someone reported, and had to collaborate with the VPN app providers to do it https://github.com/GrapheneOS/os-issue-tracker/issues/3442

I would be interested to know why you are pushing this product across multiple places on Lemmy. Your post, despite disparaging “viral marketers”, has a viral marketing tone with statements such as “I feel like I’ve been wasting money on my VPN ever since I found Riseup”.

Additionally, while I do believe a free VPN using an autonomous collective, resource pooling approach is a great idea, in practice this VPN has had… not a great history from my point of view. A quick search shows that in 2017 they were forced to comply with US Law Enforcement https://en.m.wikipedia.org/wiki/Riseup, see the Warrant Canary section. VPNs based in the US are known to be at risk, and this is another good example.

When choosing a VPN provider, server location is important, as well as company location. You are repeatedly encouraging people to Torrent from a VPN based in one of the most zealous countries opposing file sharing worldwide, and one that has already worked with Law Enforcement.

The GUI version was working a month or so ago, but a recent Tumbleweed update broke openVPN when using port forwarding via natpmpc. Bug report here https://bugzilla.opensuse.org/show_bug.cgi?id=1236718

Wireguard on the Proton GUI client on Linux is experimental, don’t use it except for testing. Use the manual setup, and make sure to test for DNS leaks.

FYI, for folks currently using a normal PIN and looking to use this, it’s intended that the 2nd factor PIN at least be different than the main unlock PIN. Otherwise you can just swipe up to dismiss the fingerprint prompt and get to the main PIN prompt; if its the same as your 2nd factor, that’s pointless.

I was told on the Graphene matrix channel that the most secure configuration for this is:

Main unlock method: 6 word diceware password

Secondary unlock method: biometric + 6 character 2nd factor PIN

Be aware that if you use this config that you will be prompted for the main unlock method (long password) at reboot, and also every 48 hours.

With Linux, you can literally do anything that you want. And lots of people are already doing just what you describe, making pretty and functional Desktop Environments and compositors for anyone to use. As a beginner I’d encourage you to check out all the major Desktop Environment options first. You can usually get any of these in most major distros (Cosmic may be less available and mature right now).

https://www.gnome.org/

https://kde.org/

https://system76.com/cosmic/

Article with others https://www.geeksforgeeks.org/best-linux-desktop-environments/

Then you can get into compositors, plugins, and other customization, where you can make your system look almost exactly how you want it:

https://hyprland.org/

https://extensions.gnome.org/extension/6099/paperwm/

https://github.com/Bismuth-Forge/bismuth

https://github.com/YaLTeR/niri

These just happen to include tiling because I love tiling haha… I’m sure there are other non-tiling projects you could try out as well.

Edit: sounds like you may have already rejected a bunch of the status quo Desktop Environments as too boring haha. Then I would encourage you to check out Cosmic, and then the experimental tiling compositors I listed above… I’m sure you will find them unique at the very least!

I use a text/limited voice only plan from https://tello.com/

This is hilarious… after bailing from using the run file a couple months ago and going back to the 550 driver due to instability, I finally decided to install the 570 manually today. Should have waited LOL, the timing…

Invidious still works very well, however it is an ongoing battle with YouTube. They ban an instance and the instance’s ban evasion routine tries again, or in the case of IP range bans migrates to another provider and the game goes on. Despite this, it is the only way I know of to access YouTube relatively pain free using a public VPN provider. By now YouTube has blocked a lot of public VPN IPs. To me, this advantage makes it worth it.

The best way to keep up with which instances are currently functional is via the Invidious Matrix room, https://matrix.to/#/#invidious:matrix.org. You can also check the instances list https://instances.invidious.io/ but it may get out of date sometimes.

Finally, I’ve found the best way to use Invidious is via FreeTube (Linux) or Clipious (Android).

The ultimate in privacy for YouTube is Invidious https://invidious.io/, which fully proxies your videos from YouTube through an Invidious server. Every once in a while YouTube will get the upper hand and figure out how to fingerprint and block the servers, but so far the community has always figured out how to circumvent it. One advantage is that you can feasibly use a VPN with Invidious; without it, you have to keep hopping from VPN server to VPN server until you find one YouTube hasn’t already blocked, especially on a large public VPN like ProtonVPN. This applies to NewPipe as well, since NewPipe still tries to talk to YouTube directly as far as I understand. On Android I use Clipious as the app to access the Invidious servers.

Nope, pretty normal. You’ll find that you’ll need frontends and proxies for tons of things. For example Instagram hasn’t ever worked for me with a VPN. I no longer have an account anyway, but for the times someone sends me a link I’ve had to find sites that let you view the content without actually visiting Instagram. Same with reddit, reddit frontends are very good these days (I’d recommend any Redlib instance). Also, sometimes a specific VPN server is IP blocked and you can just connect to a different server to view a web site that blocked you initially. It is a fair amount of work, but honestly its helped me slow down my consumption of random bullshit anyway haha. I use ProtonVPN and pay for premium.

Relax and Recover for bare metal backup of the OS critical components and directories, and Deja Dup (or Gnome Backup) for user files

Invidious, one good instance is https://iv.nowhere.moe/

So… does THIS mean that this doesn’t support explicit sync, right as explicit sync is about to be stable and supported in the NVIDIA 560/565 drivers? As far as I know there are currently other ways to do screen capture outside of this protocol on Wayland so its not like there are no interim solutions, why release this when it is essentially still incomplete?

I wonder how this calculus changes with the dawn of AI built into the OS… will a Linux system that avoids all that nonsense end up being more energy efficient?

My experience so far as a new user, which might be a little redundant but here goes:

• Overall, there is a balance to work out between security, decentralization and FOSS, and anonymity.
• for the average user, using sandboxed google play is pretty much essential. Otherwise you’ll spend days trying to figure out why you aren’t getting notifications, why certain integrations aren’t working, etc. Notifications especially are just painful without google FCM. HOWEVER, I do not believe it is mandatory to sign in to your Google account for notifications to work, so you could in theory avoid signing in at all and still take advantage of FCM.
• multiple profiles don’t make sense for my use case (and possibly most people). Graphene does advertise the use case of having banking apps on a separate profile, but after attempting to do just that I believe it is a very niche use case that would actually benefit from it. Obviously a great tool to have for privacy and security, but not something you’ll went to use everyday.
• For the move away from Imessage, it is indeed kinda painful and still ongoing. The simple fact is that people are super weird about switching from I message, and honestly going straight to Signal was a no-go for many of my contacts. I’ve had to settle for WhatsApp, Telegram, and even Discord… I just have had to accept that the transition will take time. I’ve weighed that privacy issue against the privacy gain of GrapheneOS itself, and the benefits of supporting a 3rd party OS option, and I still believe using Graphene is better overall. And, once people get used to using a 3rd party app vs Imessage, in a couple years the jump to Signal will be no problem at all.
• banking apps are super painful. That being said, here is an opportunity to vote with your wallet… Support apps that don’t require invasive system access for “security”. For me, the biggest eye opener was that there are NO GENERIC THIRD PARTY TAP TO PAY PROVIDERS IN THE US. It is only Apple Pay, Samsung Pay, or Google Wallet. And, as is pointed out on the Graphene user guide, 3rd party apps are allowed to implement their own NFC payment system, but the extremely vast majority simply choose to use Wallet or Apple Pay. This is obviously rather scary as more and more retailers use these systems, and I’ve realized I would gladly support and use any alternative at this point. Without Graphene, I would have never even thought about it.