I for one hate Microsoft Windows a great amount, yet am in love with C#… Just because a company has one terrible product, doesn’t mean everything they make is terrible.
Also… What everyone else here already said. No reason for me to rinse and repeat what’s been said lol.
If you’re very technical and understand Linux, security, etc in great lengths (such as how to setup your own iptables rules with looking for help or creating your own scripts), and really know what your doing, a rooted non-gapps lineageos (optionally microg) is a great choice, as long as you install things like AFWall+ and such to lock it down a ton. Heavy emphasis on “understanding” what you’re doing here, since if you don’t, a rooted device could be bad on security.
If you’re not at that comfort level or have the time for that kind of stuff, GrapheneOS (unfortunately on pixel) is the best option.
If you don’t want to give Google any of your money, and you don’t want to go into the super low level system control with root, the best option is probably still lineageos with microg (or without if you don’t need push notifications for anything).
Who knows, guess we’ll find out. The only point I was trying to make is the title of the article being misleading to an assumption rather than fact. It’s very possible what you just mentioned is the case, but we won’t know until later. My personal concern is the fact Zoom is used for work for many and getting around that for most folks will be the hard part. I hope the terms for free users vs business agreements differ.
96% but it’s not accurate. Verified on my DNS logs that the two it claimed weren’t blocked, actually resolved to 0.0.0.0 correctly, so I’m actually at 100%
Title probably needs to be reworded. Terms clearly mention they won’t use it without user consent, not that they MUST use it. Doesn’t mean it’ll stay that way, but just don’t consent for it when asked and you’re probably okay (I’m mentioning this for those who have no choice but to use it, for things like work)
If you have geolocation enabled or don’t block location requests, that could be another way. VPN can’t protect you from geolocation.
Probably already said here, but it’s going to just come down to your end goal to know what distro fits what you’re looking for.
I am personally a huge fan of Gentoo, another distro that’s all about “from the ground up” approach. It’s actually where I started with Linux and is how I became as proficient in it as I am today. In fact my internal server that does everything is running Gentoo as it’s OS… Has never had any problems in the last decade that would require a reinstall or anything crazy like that.
But even as much love as I have for Gentoo, I have Linux Mint installed on my laptop. Why? Because it’s just more convenient when I need my full focus on the 10 other personal projects I’m working on… Also amazing on the gaming front. Doesn’t have nearly as much bloat as some other Ubuntu-based distros on first install, has a huge community support, and is just great all around to have.
Ah, I misunderstood you mounting the system in as your main, not a backup. Gotcha!
Why not just self host? What happens when/if their service goes down without any warning? You lose everything?
Got my things all on a server with RAID for redundancy and backup weekly to an external (encrypted) device, monthly to another that doesn’t stay at home. Also means I don’t have to rely on the Internet to use all my services if the ISP goes down, the firewall explodes, etc. Self hosting is the way to go!
Edit: autocorrect being annoying
Again, no Ubuntu expert here, so do this at your own risk (someone jump in and say this is a bad idea if it is). Not irreversible as you can just revert what I’m telling you via live CD, but just wanted to leave the warning.
If uname -r shows the old kernel *-24, and grub update is choosing that instead of *-25, perhaps Ubuntu relies on the last change/created date or something weird. What you can check is if *-24 AND *-25 show up in /usr/src. If both are there, do (as root/sudo): mv /usr/src/*6.2.0-24* /root. Now run grub-update again. I think it should tell you which version it chose for the boot menu.
Next try: grep 6.2.0 /boot/grub/grub.cfg to verify you see the new version.
grub-update again.grub-update to avoid not being able to boot back in. This wasn’t the fix we were hoping for.^ this is all assuming Ubuntu puts its kernels in /usr/src and uses that location as reference to what’s available/installed. If you see nothing there, then something else will need to be attempted
Edit 2: another thing to check is if the compiled kernels are in /boot. Basically follow the same instructions above but use /boot/*-24 instead. This might actually be what needs to be done now that I think about it, not necessarily /usr/src.
I don’t, but that’s because of how I have things setup around the network. While most people here say it’s because they don’t need it, I am in a position that I need SOMETHING simply because others in the household could bring in malware and rather than trust them to make smart decisions, I proactively monitor all network activity for anything unusual. That being said, I have clamAv installed and run a weekly scan, but my real “antivirus solutions” are as follows: A syslog server that’s connected to grafana/MySQL and alerts me based on very specific criteria. Along this, I’ve got my network firewall configured to block all “untrustworthy countries” in and out 100%, as well as use an IDS/IPS (also connected to syslog for alerts). Lastly, an internal DNS which grabs from like 20 sources that include some reliable lists with malware domains and such, and a custom list of my own that I add to as useful security news feeds hit my RSS feed with urls in their blog posts.
Actually got a list of other things going on in the network to make it even more secure, but just wanted to list the main things that’ll give you a step up in the anti-malware front.
None of this is buletproof without proper care for how you use the Internet, though.
You get the idea. My message got way too long and turned into a rant lol.
Have you tried a normal “grub-update” command to make sure it gets the right kernel to boot up for you? Not 100% familiar with Ubuntu, but perhaps that’s all you’d need to run to get it booting to the right version.
Lmao I’ve unfortunately seen stuff like this, where other parts of code that looked like just made up stuff had zero comments. Basically comments only where they weren’t needed and lacking where they’re needed
Thanks! Came back to actually add an edit or reply to mention that I found an issue on darkreader issues with a resolution for putting in a custom filter to unlock origin! Worked perfectly.
https://github.com/darkreader/darkreader/issues/11325
Question in the issues that did come up is… Why are they doing this? Only reason as some others mentioned sounds like it would be for tracking purposes which contradicts what their model is about. Seems like there’s no winning search engine for privacy, just the least of all evils? Lol. Glad to at least be back to using it for now.
You have comments in your legacy codebases?? Luckyyyyy
Love it except I can’t use it because I don’t save cookies to keep the “dark setting” enabled and dark reader doesn’t automatically invert it, likely due to them breaking some sort of common html/css standards if I had to guess. Wish they would fix it for accessibility. :(
Unless referring to encryption, can you expand on why NC with Dav isn’t private? I’ve got both selfhosted (in home) and haven’t picked up on any traffic sharing my calendar to third parties through my logs and alerts, so would like to know more of what you’ve seen to see if I have a gap in my automated alerts.
Edit: unless your answer was just in response to the OP wanting an already hosted system, then yeah I can understand what you mean there.
If in the US, check out privacy.com. It’s a bank so expect the signup process to be as invasive as any other bank, but they allow you to create masked cards and you can fill in any name and address you want into the billing info to keep your real info away from websites. Paid version also hides transactions you make from your actual bank.
What I did was just buy the tv I wanted for the hardware and block it from internet access by Mac address, then plugged it into the network with eth. I then put dns blocks on every request it made (I log things before blocking them, and did this on the scenario a kill switch gets messed up or something) and installed the media software from there. Smart tv made private.