Great link, but OP is looking for an archive solution. I was looking for a self-hosted reddit client so great find!

Which distro does she have installed?

Take the Fairphone over the Pixel since you’re in Europe

I use Librewolf and TBB. Both have NoScript enabled and JS turned off by default. I never turn on JS on TBB obviously, and for the few sites that I frequent on Librewolf, I tweaked it by hand. It’s not that hard.

I will look to also use Mullvad browser alongside Librewolf maybe, not sure which one of them is more private since Mullvad browser comes straight from the TOR project and has their security settings.

1. Purchase spare chromebook (with cash)
2. Purchase spare SIM (cash)
3. Get TOTP working with spare SIM, link FOSS authenticator app, delink phone number.
4. Throw away SIM.
5. Get a flash drive, wipe, load videos on it.
6. Go to public location, sign into Google account from there, upload video.
7. Remove battery from Chrome book after uploading video, only ever plug it into power in the proximity of WiFi hotspots which can’t be traced to you.
8. Preferably don’t bring your phone with you since they can track you through that

I’m pissed off because he didn’t limit it to just being an init and made it into a much bigger mess

How does having those 3 keys on the right help?

Very nice read, I look forward to posts with detailed explanations of realistic privacy setups!

With that said, here we go:

1. TOR has been compromised. It likely doesn’t matter if you’re not doing anything that nations would be interested in, but something to keep in mind.
2. True nerds/privacy hobbyists always have multiple browsers for different use-cases. Bravo! I need to take a look at Mullvad myself, I really don’t like Brave anymore.
3. Do you host your SearXNG instance? It should not be very hard to do on the cloud.
4. Which DNS resolver? I’m assuming this is upstream to your Adguard setup, which means the latter acts as the recursive resolver in your setup, if I understand correctly.
5. Didn’t hear about SecureBlue before this, good distro in theory. Thanks.
6. Ever thought of getting a 10-year old Thinkpad yet to get rid of that pesky BIOS? \s
7. Do you have DoT and DNSSEC set up for your “private” DNS? Also, is this something like Quad9?
8. With the combination of flight mode and a Faraday bag along with not having a SIM, I’m assuming that people don’t reach you using traditional means (calling). How do you stay in contact with others?
9. Define “locking down” of public accounts.
10. I have been thinking of AI for a bit, and you can get a P40 with 24GB VRAM for about $100-$150 on Ebay. Put that in an old computer and fight with licensing for a bit (Craft Computing has a good video on getting VFIO working on Nvidia cards by tricking the software) and you’ll have a great setup for AI.
11. I’d stop with the subscriptions and start sailing the high seas, personally, but I understand if the sentiment does not sit well with people here. Piracy simply gives you more control and privacy. Look at LocalMonero to try and get monero without leaving a trace (directly converting fiat to XMR and exchanging for gift cards online after churning).
12. You must be using an old TV, but if you really need to purchase a new TV at some point (and it’s very likely to be “smart”), you can simply disconnect the WiFi antenna from the back of the device. If you’re really good at embedded systems, you could find the flash chip that holds the BIOS/OS of the TV and remove it (and edit the boot sequence) or flash it with something else. This is true for everyone who has a smart TV.
13. Holy shit this guy programs games to play them what a chad.
14. Please switch to Codeberg, Gitlab is annoying.
15. How do you coordinate local time with other people if your clocks are set to UTC?

That was a lot. Thanks for reading!

https://git.zx2c4.com/cgit/about/ https://peppe.rs/posts/self-hosting_git/

Anybody interested in a plain git server with Cgit as a front-end? It’s fast

Kavita is supposed to be the self-hosted automated manga downloader, unfortunately, their website seems to be down.

I believe FMD2 running in an OCI-compatible container with WINE underneath and Guacamole to present the app’s GUI should be a decent alternative, since I heard that FMD2 can auto-download new manga chapters/releases

I found a few links summarising this:

• https://old.reddit.com/r/nextdns/comments/14919dp/randomly_pathnxtracloudnet_is_stopped_getting/jo5n5va/

  • It’s Qualcomm’s URL for downloading assisted GPS almanac days

• https://teddit.net/r/privacy/comments/12yii9u/comment/jhojlr7/
• Graphene OS’ relevant documentation: https://grapheneos.org/faq#default-connections

On 4th and 5th generation Pixels (which use a Qualcomm baseband providing cellular, Wi-Fi, Bluetooth and GNSS in separate sandboxes), almanacs are downloaded from https://qualcomm.psds.grapheneos.org/xtra3Mgrbeji.bin which is a cache of Qualcomm’s data. Alternatively, the standard servers can be enabled in the Settings app which will use https://path1.xtracloud.net/xtra3Mgrbeji.bin, https://path2.xtracloud.net/xtra3Mgrbeji.bin and https://path3.xtracloud.net/xtra3Mgrbeji.bin. GrapheneOS improves the privacy of Qualcomm PSDS (XTRA) by removing the User-Agent header normally containing an SoC serial number (unique hardware identifier), random ID and information on the phone including manufacturer, brand and model. We also always fetch the most complete XTRA database variant (xtra3Mgrbeji.bin) instead of model/carrier/region dependent variants to avoid leaking a small amount of information based on the database variant.

Note sure if e/OS/ has taken as much care as Graphene has to make the requests more private. Then again, they don’t claim to be the most private OS, just De-Googled.

Edit: this is also a good read for further attempts to make your device more private: https://grapheneos.org/faq#other-connections

I do agree somewhat. The main argument coming against it is not following the “Unix philosophy” which I’m a proponent for, making systemd annoying.

Void, Slackware, Alpine, Gentoo, Devuan (although I’d like for them to remove even the slightest semblance of systemd), FreeBSD

If you can’t access your server and your router’s web interface, that’s a subnetting/DHCP allocation issue. Nothing to do with Pi-Hole.

For reference, there’s 2 ways to allocate static addresses to devices:

1. Define DHCP range, and configure the application to use a static address outside of the allocation pool.
2. Give out static addresses by MAC.

“Skill issue bro” /s

DNS. It’s always DNS

Hi, could you detail how you utilise Asterisk?

Hi, thanks for your comment! I just visited your blog and noticed that it loads fairly quickly: I assume you must have some sort of CDN set up. Could you point me to how you went about setting up the CDN for your domain/website? Thanks!