Did you know most coyotes are illiterate?
I've been using Plasma Wayland on Bookworm since Bookworm came out. Never had any issues. I'm using AMD GPU though.
Better yet, why put yourself at the mercy of something that can enshittify in the first place? I've never understood why people get into selfhosting and then go right back to giving power over their network to a 3rd party again.
That really seems like a structural problem to me. Break it out into more-focused teams, signify important people whose messages you should pay attention to, or use threads to consolidate topics. If those things aren't being done and there's just 50+ people dumping information then the information can't be deemed important. Adding AI to patch the issue is poor management at best and introducing poisoned information at worst.
I know this is not a unique sentiment by any means, but it makes me legitimately angry to think of participating in a conversation where someone else is using this. If you don't want to read my messages why are we even connecting; imagine clicking "summarize" on someone genuinely trying to talk to you. "Sorry, the AI hallucinated that you were going to finish the rest of the assignment tonight." and a year later "Sorry, I forgot all the nuances of who you are as a person because an AI didn't think they were relevant."
- JumpRemoved Deleted
Permanently Deleted
I'm used to LanguageTool, and at a glance it seems like Harper covers way fewer rules than LanguageTool does. Not sure if this is actually noticeable in practice, but I run my own LanguageTool server and am not too picky about the performance, so I'm not in a rush to move until someone figures out a good way to compare them. LanguageTool's rules are all open source at least, so it's only a matter of time before Harper gets anything it might be missing.
Mailbox.org is a good pick to consider IMO. You can read some comparisons on PrivacyGuides, which I also recommend as a starting point for these sorts of topics. The mailbox.org web UI is not great, but it allows IMAP/SMTP access, so I use Thunderbird on both desktop and Android in order to interact with my inbox. My inbox is auto-encrypted with PGP using their Mailbox Guard thing, so my emails are all encrypted garbage on the web UI anyway. Mailbox.org only allows paid-for accounts, but considering the annoying stuff that Proton and Tuta do to their free accounts I'd rather just be honest about the service I'm getting. It allows auto-forwarding directly in the web UI, but given that you can hook up to it with IMAP anyway, it's not like you couldn't just do it yourself.
(Also, as another comment said I also recommend DuckDuckGo's Email Protection for email aliasing if you need it.)
The straw that broke the camel's back for me is the CEO's icky tweet about how great Republicans are for your privacy and how they stand up for the little guys (what), which they doubled down on using the official Reddit Proton account. There's already been a ton of discussion about this on the internet if you care to look for more angles on it.
But before that I'd already grown quite leery of them for their trend of endlessly starting new services before the old ones are polished, along with trying to push everyone into their walled garden and endlessly using naggy popups in the UI about it. Worst of all, they have a clear trend of not giving a damn about Linux support, sometimes giving up on certain features for their Linux clients or releasing the clients way after the Windows/Mac versions. For a "privacy company", not putting Linux as a first-class citizen is really just unacceptable, and they've been around for long enough that it's clearly a trend and not a fluke. To me, Proton just feels like a wannabe version of Apple. Its continued actions give me the feeling that it exists to serve itself, not its users.
I don't support Proton for other reasons, but I'll note that if anyone is having this problem you can use a half-measure of setting your other email address as a recovery email and enabling "daily email notifications", which will email you once a day if there's unread stuff in your Proton mailbox.
Also consider that you're adding another party that you need to trust to the chain, and also adding another point of failure if iodéOS stops releasing.
I've been using this a lot lately, and it's been great after a bit of a learning curve. It even incorporates some of the functionality from the addons and userscripts that I needed for YouTube, like getting rid of clickbait titles/thumbnails and blocking specific channels. Since you never really have a tracking profile when using YouTube this way, it's very obvious when YouTube is trying to shoe-horn in political channels and clickbait, and you can just continually keep blocking those channels in the recommended section until you get all of them. I'm still missing a way to boost the volume on certain videos that are too quiet for me, though. I use LibRedirect to auto-open YouTube links in FreeTube. FreeTube has occasionally broken because of YouTube API updates, which requires them to figure out the problem and push a new FreeTube release (which could take a day or more), but other than that I'm fairly happy with it.
- JumpDeleted
Permanently Deleted
I don't have any experience with iCloud Private Relay, but I'd be surprised if enabling it will make you un-fingerprintable (in which case what are you really trying to accomplish by using it?). Also, who are you trying to stay private from? Do you personally believe that Apple and/or Cloudflare aren't selling or trading your data? Would you be okay with them being the only ones that control your data if they're not selling it? It's a nuanced topic, and likely you're the only one that can answer your position on that. It's cliché, but defining a threat model can help a lot with deciding how many conveniences you are okay with giving up. I would likely argue that an Android phone with LineageOS can be made more private than an iPhone, but at the cost of security. Does your threat model need to sacrifice privacy for security?
Regarding iPhone vs Android, I've only ever used Android, but my friends with iPhones and Macs never seem to have access to the open-source software that I use and recommend, so I feel like that's a big part to consider also. You'll get roped into a proprietary ecosystem where it seems like every little app is trying to charge you money and won't show you what it's doing behind the scenes. If you already have an iPhone I'd understand if you need to weigh the economic feasibility of buying an entire new phone just for privacy as well.
Personally, I don't really trust anything unless I'm given infallible reason to trust it, e.g. cryptographic proofs, audits, zero-trust models etc.; in this world it seems inevitable that someone will take advantage of your trust either today or tomorrow. If someone is truly on your side, they will do everything they can to take the need to trust them out of the equation, and failing that they should make it as clear as they can what trust is still mandatory and why. If you want to trust someone that doesn't meet these standards, you do so basically at your own risk, and you'll have to start doing some mental calculus on what they could get from you, what they might want it for, and how eager you think they would be to start misusing it (e.g., if you pay for a service, the servicer may feel less compelled to subsidize their income by selling your data).
I'm not a security expert by any means, but here are a few things I know as a regular user:
Always keep your system up-to-date and only download and execute software from the official Arch repository if you can help it. Malware often takes advantage of outdated systems that don't have the latest security patches, so by staying as up-to-date as possible you're making yourself a very difficult target. The AUR is a user-based repository and is not inherently trusted/maintained like the official Arch repos, so be careful and always read PKGBUILDs before you use AUR software. Don't use AUR auto-updaters unless you're reading the PKGBUILD changes every time. Ideally try not to use the AUR at all if you can help it; official Arch Linux is usually quite stable, but AUR software is often responsible for a lot of the "breakages" people tend to get with Arch. If you have to run sketchy software, use a virtual machine for it, as a 0-day VM escape is almost certainly not going to happen with any sort of malware you'd run into. ClamAV or VirusTotal may also help you scan specific files that you're wary of, but I wouldn't trust that a file is clean just because it passes an AV check. Also, never run anything as root unless you have a very specific reason, and even then try to use
sudoinstead of elevating to a full root shell.Don't open up any network ports on your system unless you absolutely have to, and if you're opening an SSH port, make sure that it: isn't the default port number, requires a keyfile for login, root cannot be logged into directly, and authentication attempts are limited to a low number. If you're opening ports for other services, try to use Docker/Podman containers with minimal access to your system resources and not running in root mode. Also consider using something like CrowdSec or fail2ban for blocking bots crawling ports.
As far as finding out if you're infected, I'm not sure if there's a great way to know unless they immediately encrypt all your stuff and demand crypto. Malware could also come in the form of silent keyloggers (which you'd only find out about after you start getting your accounts hacked) or cryptocurrency miners/botnets (which probably attempt to hide their CPU/GPU usage while you're actively using your computer). At the very least, you're not likely to be hit by a sophisticated 0-day, so whatever malware you get on your computer probably wants something direct and uncomplicated from you.
Setting up a backup solution to a NAS running e.g. ZFS can help with preventing malware from pwning your important data, as a filesystem like ZFS can rollback its snapshots and just unencrypt the data again (even if it's encrypted directly on the NAS). 2FA'ing your accounts (especially important ones like email) is a good way to prevent keyloggers from being able to repeat your username+password into a service and get access. Setting up a resource monitoring daemon can probably help you find out if you're leaking resources to some kind of crypto miner, though I don't have specific recommendations as I haven't done this before.
In the case of what to do once you're pwned, IMO the only real solution is to salvage and verify your data, wipe everything down, and reinstall. There's no guarantee that the malware isn't continually hiding itself somewhere, so trying to remove it yourself is probably not going to solve anything. If you follow all the above precautions and still get pwned, I'm fairly sure the malware will be news somewhere, and security experts may already be studying the malware's behavior and giving tips on what to do as a resolution.
They could be you! They could be me! Admittedly, there's a higher chance that it's me.
I am paid a fuck-ton so my answer is definitely yes, but I really think it would vary person-by-person. "Should" people need to work 5 days per week to get that pay? My answer is probably no.
My corporate job is one of the better ones in terms of pointless BS and people pretending to be their corporatesonas, but every time I take time off I'm reminded that we're wasting our entire lives with work. I take a few 4-day work weeks and suddenly my house is clean again, I'm cooking more interesting meals, writing code for fun, hanging out with friends, catching up on shows, etc. Imagine how much progress, art, and innovation we could have if everyone's natural talents and interests were given space to exist. Long-term we would have so much more of everything, and everyone would be happier and healthier. Unfortunately, short-term we've gotta layoff 4% of our workforce again because Mr. AI said it might make the line go up.
How so? I feel it is an example of the effect because customers are drawn in with a low price and are surprised by a plethora of seemingly-sneaky fees, which take up a large portion of the total bill. Customers feel negatively about the long list of fees and the implication that they've been tricked, but they wouldn't think twice if the fees were just included in the base price. It is against their best interest to be automatically and opaquely charged for all regular services (i.e. normal airlines) instead of being transparently given the option to forego those that they do not care about (i.e., fee-based airline).
I remember someone talking about an airline that advertised very low prices up-front but then added tons of fees for every individual thing, and when adding all the fees up for the service you'd expect with any other airline the end price would be the same. However, given that all the services/fees are technically optional, this is actually an ideal pricing model since you don't have to pay for any services you don't want.
It's important to use services with a workflow that works for you; not every popular service is going to be a good fit for everyone. Find your balance between exhaustive categorization and meaningless pile of data, and make sure you're getting more out than you're putting in. If you do decide that an extensive amount of effort is worth it, make sure that the service in question is able to export your data in a data-rich format so that you won't have to do it all again if you decide to move to a different tool.
By default, Wine/Proton has access to your full Linux filesystem under the virtual
Z:/drive from within the Wine environment, so any dedicated adversary could include your Linux stuff into its data collection. The odds of this already occurring are probably low-ish. You can use bubblewrap raw to start sandboxing resources (e.g. blocking network access or masking directories), or there's a project called sandwine which presumably auto-configures the important stuff through bubblewrap (though I've never gotten around to trying it). Wine itself can also be configured to drop theZ:/drive through itswinecfgtool.Without a dedicated configuration, I'm not sure Wine has any real priority or guarantee about sandboxing your original system from Windows executables, which is also why it's important to remember that Windows malware can still do damage when running on a Linux system. The malware doesn't really even have to be aware that it's running in Wine if it just tries to encrypt any files it can reach.
To be fair, it's also basically impossible to have extremely high quality AV1 video, which is what a lot of P2P groups strive for. A lot of effort has gone into trying to do so and results weren't good enough compared to x264, so it's been ignored. AV1 is great at compression efficiency, but it can't make fully transparent encodes (i.e., indistinguishable from the source). It might be different with AV2, though again even if it's possible it may be ignored because of compatibility instead; groups still use DTS-HD MA over the objectively superior FLAC codec for surround sound because of hardware compatibility to this day. (1.0/2.0 channels they use FLAC because players support that usually)
As for HEVC/x265, it too is not as good as x264 at very high quality encoding, so it's also ignored when possible. Basically the breakdown is that 4k encoding uses x265 in order to store HDR and because the big block efficiency of x265 is good enough to compress further than the source material. x264 wouldn't be used for 4k encoding even if it could store HDR because its compression efficiency is so bad at higher resolutions that to have any sort of quality encode it would end up bigger than the source material. Many people don't even bother with 4k x265 encodes and just collect the full disc/remuxes instead, because they dislike x265's encoder quality and don't deem the size efficiency worth its picture quality impact (pretty picky people here, and I'm not really in that camp).
For 1080p, x265 is only used when you want to have HDR in a 1080p package, because again x265's picture quality can't match x264, but most people deem HDR a bigger advantage. x264 is still the tool of choice for non-HDR 1080p encodes, and that's not a culture thing, that's just a quality thing. When you get down into public P2P or random encoding groups it's anything goes, and x265 1080p encodes get a lot more common because x265 efficiency is pretty great compared to x264, but the very top-end quality just can't match x264 in the hands of an experienced encoder, so those encoding groups only use x265 when they have to.
Edit: All that to say, we can't entirely blame old-head culture or hardware compatibility for the unpopularity of newer formats. I think the home media collector usecase is actually a complete outlier in terms of what these formats are actually being developed for. WEB-DL content favors HEVC and AV1 because it's very efficient and displays a "good enough" quality picture for their viewers. Physical Blu-Rays don't have to worry about HDD space or bandwidth and just pump the bitrate insane on HEVC so that the picture quality looks great. For the record, VVC/x266 is already on the shortlist for being junk for the usecases described above (x266 is too new to fully judge), so I wouldn't hold my breath for AV2 either. If you're okay with non-transparency, I'd just stick with HEVC WEB-DLs or try to find good encoding groups that target a more opinionated quality:size ratio (some do actually use AV1!). Rules of thumb for WEB-DL quality are here, though it will always vary on a title-by-title basis.