Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)C

chasteinsect

@ chasteinsect @programming.dev

Posts
37
Comments
119
Joined
10 mo. ago

  • TikTok allegedly monitoring users' Grindr activity, digital rights group claims

    Jump

  • I was thinking how the hell does an app track another apps' activity? So they allegedly used AppsFlyer, which is a Mobile Measurement Partner (MMP).

    Companies like Grindr use it for tracking ads, it basically tells whether a user that clicked on a Grindr ad on Tiktok lead to a successful install of their app. They have to install an SDK for that. Apparently it wasn't just tracking that.

  • Why GrapheneOS is Almost Impossible to Crack (Forensic Teams Have Tried)

    Jump

  • The threat level for google play services is different in graphene as it runs in what they call an "appbox," which basically means Google Play is just another app that's sandboxed like everything else.

  • Why GrapheneOS is Almost Impossible to Crack (Forensic Teams Have Tried)

    Jump

  • One thing I haven't understood properly I feel is how notifications work. They talked there's basically 3 ways of sending notifications on android. FCM (googles system) , websockets, unifiedpush. Most apps use FCM so you need play services installed to get notifications, right?

    How does that work through profiles though? Some commenter in this thread said you can forward them from another profile if that profile is running in the background? But if I have google play services installed on profile B but not profile A? Do I have to install them on every profile?

    I may not fully understand how profiles work yet.

  • Why GrapheneOS is Almost Impossible to Crack (Forensic Teams Have Tried)

    Jump

  • Yeah, as they said most banking apps now work, however, Google Pay doesn't.

    There are alternatives to it like curve pay but I haven't done the research whether they're trustworthy enough. EU company I think.

  • Why GrapheneOS is Almost Impossible to Crack (Forensic Teams Have Tried)

    Jump

  • Yeah I apologize, I incorrectly assumed that GrapheneOS's BFU state is more secure and requires you to enter your passphrase by default and not PIN and that this is not available on stock android which some people pointed out it is.

    On a related note though, Graphene does have an interesting feature where if phone hasn't been unlocked for some time it will force reboot to get into that BFU state. Metroplex sets it to 8 hours.

    I think they also have some aggressive USB port control, but I haven't looked into it. Where you can only charge phone in BFU state or something like that. Haven't had time to read into it : https://grapheneos.org/features#usb-c-port-and-pogo-pins-control

  • Why GrapheneOS is Almost Impossible to Crack (Forensic Teams Have Tried)

    Jump

  • Yeah they touched on this in the interview. Basically:

    • Pixels allow unlocking the bootloader (most phones don't)
    • Pixels support alternate operating systems at the firmware level
    • Pixels get long-term security updates
    • The hardware meets GrapheneOS's security requirements

    In one part they mention Pixels Titan M2 chip, for example, which throttles how many unlock attempts you can make.

    That being said they were critical of Google's recent actions. Now Google gives OEM partners (Samsung, etc.) 4 months to implement security updates before publishing to AOSP. Prob one of the reasons why they wanted to seek an OEM partnership as they now get updates instantly with the caveat that for those 4 months they can't publish the source code publicly untill Google releases it to AOSP. So they release 2 builds for every update (One with the embargoed security patches (binary/compiled version) and one with only public AOSP code (open source version that lags behind).

    Also they had problems supporting Pixel 10 as Google removed device trees and didn't push Android 16 QPR1 to AOSP until months after the Pixel release.

  • Why GrapheneOS is Almost Impossible to Crack (Forensic Teams Have Tried)

    Jump

  • Thanks for the in-depth answer, I think I will try installing Graphene today.

    This can not only be turned off entirely in settings, but you can actually modify it on a per-network basis!

    Oh nice ! Makes it way more useful then as I saw forum threads of people saying there's no point in randomizing on your home network and may cause issues.

    GrapheneOS’s airplane mode disables the cellular radio entirely, whereas some OEMs don’t do that on their phones, even when you turn on airplane mode, meaning your cell provider could still triangulate your position regardless of if you have airplane mode on or off.

    Did not know that, fascinating! Even Airplane mode is upgraded :D

  • What Have I Learned From Daily Driving Arch Linux For Three Years?

    Jump

  • I have similar experiences, have been using it for a year now, works ... fine.

    Nothing broke, seems stable.

  • What Have I Learned From Daily Driving Arch Linux For Three Years?

    Jump

  • I also had some problems with my nvidia gpu around a year ago when I switched over to linux.

    I'm not sure whether this was wayland specific, but when the GPU's clock speed would jump up after some time of inactivity it would cause this sort of stutter / lag for that 1 second of transition. Was really annoying, I had to change the minimum clock speed, it did help. I eventually switched to a AMD gpu and everything worked perfectly without me needing to do anything.

    And in general I had a couple of more problems with some electron apps back then (Obsidian), that did not work well when forced to run wayland. Though this was probably not nvidia specific. Eventually I remember finding some sort of fix for it by setting some obscure environment variable that I found on hyprlands discord that was recently made available.

  • Is Signal safe?

    Jump

  • Privacy exists, complete anonymity on the internet is way way harder, however.

  • Is Signal safe?

    Jump

  • i checked out Threema that was mentioned in the article. It's 6.50 eur. I would have trouble getting people to use Signal, how do people convince others to pay for a messaging app?

  • A trillion dollars is a terrible thing to waste

    Jump

  • Bookmarked, looks like an interesting read, thanks.

  • "no car no problem "

    Jump

  • living the dream

  • Jolla Phone Pre-order Voucher

    Jump

  • I've never heard about sailfishos before. Are there any phones running it now? Also, forgive my lack of knowledge, but what's stopping people from running it on their samsungs or whatever?

    The whole thing does look interesting. Hopefully it picks up so that in 2 or 3 years when i'll be shopping for a replacement to my pixel 8 I'll actually have some good options.

  • New to Linux which OS to use?

    Jump

  • Its not that bad to start with arch it's not as hard as it used to be. I started with endeavourOS approximately a year ago and most things just work out of the box and you don't need to do much and honestly i find it easier than having to navigate layers of abstractions.

    Most of my time went into configuring stuff like hyprland, nvim and other stuff and arch just worked.

    I came with 0 linux knowledge, the only terminal commands i knew were cd and ls and if not for arch I don't think I would have been hooked on linux. That being said, I get it and sometimes it is frustrating but just putting it out there that it's doable.

  • Got me sum hyprland

    Jump

  • Why use a terminal pdf viewer?

    Jump

  • Yeah I noticed the main AUR package was last updated in June 2024. Thought they abandoned it but the GitHub shows the last release was around the same time. Downloaded sioyek-git instead and it works great.

    I think I'm sticking with Sioyek. It checks enough boxes for what I need from a pdf viewer. Well documented, no performance issues, and it supports epub too.

    The command line tools, portals, ruler for reading, keyboard text selection, searchable highlights, easy file opening, marking. Really vim-like. Need to customize some keybinds but otherwise don't see a reason to look elsewhere for now.

  • Saw this ghacks article for speeding up YouTube on FF and seems to help.

    Jump

  • Just tried it, setting gfx.webrender.compositor.force-enabled to true made firefox unusable with all sorts of visual glitches so I changed back both.

    Kinda annoying. Somewhere a month ago firefox suddenly turned sluggish. It loads fine, video playback is ok as well, but the UI animations on the video player like seeking, changing volume, subtitles or video speed are really laggy.

    I switched to a completely new profile and tried disabling all of my extensions but it's the same. Kinda accepted it at this point and am ignoring it. It came out of the blue hopefully it gets fixed as well.

  • Why use a terminal pdf viewer?

    Jump

  • Oh Sioyek looks interesting. Also the blog is great !