• 0 Posts
  • 58 Comments
Joined 2 years ago
cake
Cake day: July 8th, 2023

help-circle
  • kyub@discuss.tchncs.detoOpen Source@lemmy.mlwhat is lemmy basically ?
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    21 hours ago

    An easy analogy that common users can understand is e-mail. E-Mail is also decentralized, everyone has an e-mail address but everyone uses a different e-mail host (the domain name after the “@”). So e.g. “john.doe@gmail.com” has an account at gmail.com but “jane.doe@mailbox.org” has an account at mailbox.org. Both are completely different, yet they can communicate with each other. There’s not one company controlling or storing every single e-mail account or inbox. It’s spread out and everyone can choose the mail provider they like or trust the most.

    Then you use that as a bridge to explain Lemmy, or Mastodon, or other Fediverse social media platforms. And remind the listener that single companies having full control over everyone’s accounts is generally bad and opens the door for all sorts of abuse and manipulation or arbitrariness.



  • Just for reference, this is what the Google Play services app transmits roughly every 20 minutes to Google if it has network access:

    Phone #
    SIM #
    IMEI (world-wide unique device ID)
    S/N of your device
    WIFI MAC address
    Android ID
    Mail Address of your logged in Google account
    IP address
    

    And that is when you have disabled ALL telemetry in ALL of the options, even the most hidden ones. So this is the minimum amount this app is always gathering from every Android user using the Google Play services app, no matter what you selected. Other Google apps (like the Play store app) could then contain additional telemetry on top, this is just the common base of all Google proprietary apps. Or the minimum amount of privacy violations you get when using proprietary Google apps on your phone, no matter what.

    If you use GrapheneOS, I’d recommend not installing/using ANY Google apps at all (not even Play store or Play services). To get apps, you should use (roughly in this order of priority): 1.) GrapheneOS’s app store for the built-in apps 2.) Accrescent app store (has several good open source apps, is intended to be more secure than F-Droid) 3.) Obtainium (for getting open source apps directly from their source repos) or if you really can’t get into Obtainium, use F-Droid instead 4.) Aurora Store (for getting apps from the Google Play store without sending too much data to Google. Only do this if there is no open source app available for doing the same thing).

    To fully mitigate the removal of the Play services app, you also should probably install/configure something like ntfy to get battery efficient push notifications and ideally use apps which also use that, e.g. the Molly fork instead of Signal. It’s quite easy to do, just something to be aware of. Otherwise your battery drain might be a bit higher. Then you’re also independent from Google’s push notification infrastructure. But you need a ntfy server to go along with it, either self-hosted or use a public one. There are some privacy friendly ones public ones out there.



  • It’s the other way around. In general, you should choose Linux over Windows, and only if you really need it, use Windows. Also, if you need Windows just temporarily for some things, consider running it in a VM inside Linux just for those occasions.

    Why - well, to keep it short, Linux’ main weaknesses for common users (difficulty, compatibility) are gradually fading away (they are already almost non-existent these days if you have mainstream hardware and a mainstream desktop distro like Mint, Fedora, Ubuntu) while Windows’ main disadvantages (forced stuff like cloud/AI integrations/ads, complete disregard of user’s privacy, increasing security issues due to outdated stuff being kept in the OS for backwards compatibility reasons, and many more things) keep on increasing at a rapid rate. Microsoft has a big business interest in getting all users locked into their cloud ecosystem, locked into a subscription with ever-increasing monthly fees, and give up control over their own computer and their digital privacy. They want users to pay them with their data AND monthly subscription fees. MS Office, for example, will probably not have a pure locally runnable version after 2029 (or around that year) anymore. This Microsoft train is heading towards that wall. And the speed is increasing. And tons of users are still inside that train. And Windows itself likely won’t be spared either. They want you to pay monthly for M365 and they will get their customers there, eventually.

    Furthermore, by supporting Microsoft you’re supporting a very unethical company. They partner with big surveillance companies like Palantir and they are an active participant in the despicable ad-tech-industry (the industry that’s spying on literally everyone and buying/selling/storing tons of intimate user data even though it’s illegal in most countries), they partner with the military, law enforcement and other things. Also, they are a US company, and we all know how US politics is like these days, and this can have a big influence on how “trustworthy” US-based proprietary software will become in the near future. Since 2020, arguably no US-based proprietary software or online service is trustworthy anymore anyway, because of the CLOUD act, which is current law in the US - it means that the US government has access to any customer data stored by a US-based company, regardless of where on Earth they are storing it. This means the often-used claim “my data stored by that US company is safe because it’s in a European-based datacenter!!!11” is false since at least 2020, because MS is forced by US law to grant technical access to customer data to their government. Also, all previous “data transfer privacy agreements” between EU and US like Privacy Shield were all a joke and were dismantled in courts already. So there’s currently zero legal data protection - any data you send to a US company is theirs to do with as they please, essentially. And even if there were any meaningful legal data protections left, those big tech companies might still simply ignore that data protection law and only face minor or no fines at all.

    So this is not a baseless claim. Just because I might keep some statements short doesn’t mean that there are no backing arguments. It’s a very good idea to reduce your dependency on Microsoft’s (or in general, US-based) proprietary software and services. For multiple reasons. Digital sovereignty has never been more important than these days. It has always been important but it was maybe too abstract in the past for many common users to realize. They are slowly starting to realize now that dependencies on proprietary software from any rogue regime (and the current US regime also falls into that category now) are not great to have. Plus, there is Microsoft on its own already putting ever-increasing user- and customer-hostile features into their products. It’s like being in an abusive relationship (as the one being abused). It’s just not good for you long-term.

    So as a user, you should instead choose software which allows you to retain your digital sovereignty and control over your own computing, and simply not take all that abuse. Linux- or *BSD-based OSes with their open/transparent development models, fork-able/modifiable code bases, permissive licensing and essentially zero unwanted crap like adware, spyware, bloatware etc. offer exactly that. And because mainstream Linux distros have already become so easy to use these days, there are almost no reasons not to start using them.





  • I use several, depending on use case:

    • Tor Browser for general and anonymous web browsing (e.g. reading news, looking up stuff, and so on)
    • Mullvad Browser as a clear web alternative for general use
    • Librewolf for generally logging into sites with personally identifiable accounts (e.g. to buy stuff)
    • Ungoogled Chromium for those few sites which only work with a Chromium-based browser, or other specific cases
    • On Android (GrapheneOS): Tor Browser and Vanadium

    All regular browsers have some hardening applied and uBlock Origin installed.


  • kyub@discuss.tchncs.detoLinux@lemmy.mlSuggestions to switch a daily laptop to linux.
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    5
    ·
    edit-2
    2 months ago

    Since you only mentioned 25% gaming, I’d recommend against a gaming-centric distro like Bazzite. Instead, use a generalist desktop distro. Since you mentioned that you’re rather new-ish, I’d recommend against Arch-based distros like CachyOS. Instead, check out e.g. Fedora, Mint, OpenSuSE. (Probably in that order of priority) These aren’t hard recommendations, so you can do whatever and probably be fine either way, but it still doesn’t fit that well.



  • It’s nice to see a significant portion of people (probably still not enough though) leave proprietary social media. Unfortunately, it took them extremely long to realize why that’s a bad thing to use.

    So that’s one step in the right direction I guess.

    On the other hand, there generally isn’t much hope for humanity left because we haven’t learned from past mistakes, haven’t listened to science, and haven’t ensured ourselves a decent future on this planet.


  • All true, except that it doesn’t really get better because after we manage to contain or survive the upcoming Nazi/extremism movement, nature will punish everyone on the planet for not having done anything about climate change. So first we have to deal with huge societal and political problems, and then with huge natural ones (which also cause huge societal and political problems as a result). We know the answers to both of these problems, but we aren’t changing anything.


  • It’s true that both are security risks, and that Tiktok is even worse in general, however other proprietary social networks are also BAD and the proprietary algorithms behind them can all be used for massive user manipulation (control what they see, when they see it, and what they don’t see, combined with tons of personal and psychological data about each user). That said, another factor that might be overlooked is that it also depends on how easy a target something is. An app by a foreign government that could be used to manipulate citizens is a much easier target for “banning”. There’s probably much less legal obstacles in the way in this case, and less resistance against it.


  • Well, “nice” to have that feature, but you still shouldn’t use Discord, or at least limit your time on it as much as possible. Remember, when you use it, you’re part of the network effect that makes Discord big. You have to resist that. Take a look how Discord compares to pretty much any other messenger or communication tool in existence: https://www.messenger-matrix.de/messenger-matrix-en.html Avoid it whenever possible, get your friends to leave it and weaken its network effect.

    So, some of the drawbacks (there’s probably more):

    • Discord has weak security (see URL above)
    • Discord has non-existent privacy
    • Discord has an incredibly vague privacy policy which means they do what they want. Even companies with strong privacy policies screw users over routinely. Guess what companies do who don’t even care about good privacy policies. They even weakened it further a while back because they need to train their new AI features on your data as well, and probably even their weak privacy policies were in the way before. Well, good thing that the users agreed that they can change it at any time for any reason and be fine with it.
    • You grant all rights of everything you write, say, share or do on Discord to Discord, and everything you type, say, upload or share is being processed by their servers
    • Discord tracks what you’re typing before sending it
    • Discord suspended accounts and required even more user data for “verification”, such as telephone numbers which is completely unnecessary except for tracking and data selling purposes
    • Discord shares chat logs with law enforcement (and they can share everything because they’re collecting everything)
    • The Discord client app tracks what programs you have running so it can for example display what games you’re currently running. That means it contains a process logger. It has to scan every running application and then finds games out of those, and then you have to hope that only the game-specific bits are uploaded to their servers. Maybe that is the case, but can you trust them, and also to never change that? No.

    If you have to use it:

    • Never use their desktop app, always use the web version from a secondary browser (web apps running in the browser have much less rights than locally running applications), and even then limit what the site can access to the least amount of stuff necessary. If you never use your mic or camera then block it in the browser settings. Don’t trust Discord’s own mute setting (this also applies to other proprietary software).
    • Use a fake e-mail alias / telephone number when creating your account, generally give them the least amount of data possible. Opt out of any options or features which are tied to you exposing more data to them
    • Don’t give them additional money e.g. for their premium stuff (you already pay with data they gather from you)
    • Block at least these API endpoints which are purely used for tracking purposes (there may be more though, and they might change) [easy to do with uBlock Origin for example]:
    https://discord.com/api/v*/science
    https://discord.com/api/v*/channels/*/typing
    https://discord.com/api/v*/track*
    
    • You can also block these related hosts safely without impairing Discord’s main functions (again there may be more):
    crash.discordapp.com
    status.discordapp.com
    b.stats.paypal.com
    app.adjust.com
    client-analytics.braintreegateway.com
    

  • Yeah, I also don’t like such general laziness. It’s also not just limited to switching to Linux, it’s kind of the same with switching to anything that’s better but slightly(!) more inconvenient than what you’re used to. Well, you can’t make or be part of some progress unless you’re willing to sometimes get off your comfy couch and do something you’ve never done before. Like switching to Linux. Like stopping eating meat. Like stopping supporting certain evil companies. Like going to vote for a non-retarded option. Like voting with your wallet for the products you use/buy and also NOT use/buy. If everyone would do it, the world would be a different (better) place. But still too few are doing it. Because it’s slightly less convenient. And that would be so damn hard to change. Oh man would that be hard. Not.


  • Distro hopping is fairly normal if you’re still relatively new to Linux, I guess you do it less as time goes on, because you’ll have a better idea of whether or not a specific distro is appealing to you or not. To be able to even judge that you have to try out some distros for yourself, of course, so you need to do some distro hopping in order to tell what “direction” of distro is best for you. Sure you can read about it or watch videos but it’s never the same as actually running it for yourself.


  • The question is kind of impossible to answer because the two are so different. It doesn’t make sense to compare Linux to a version of Windows.

    Also:

    One side (myself included) is usually disgusted at Windows for being so bloated, full of spyware and dark patterns, closed, untrustworthy, fraudulent and inefficient. So personally, I’d rate Linux to be as good as a non-existing future version of Windows that’s never going to appear.

    While the other side (most “average users”) are usually disgusted at Linux because Fortnite, Photoshop and that random stupid thing they bought at some store don’t run on it. As stupid as it sounds but that is usually enough reason for an average user to not like Linux. Also, he’d have to install it himself because it’s not preinstalled. Also a major hurdle for that kind of user. Unfortunately, the majority of users. Users like that probably rate Linux as bad as something like MS-DOS or Win 3.x because they feel that Linux is limiting them, but at the same time don’t want to change anything about their software choices.

    The main problem is that common users are usually tied to specific proprietary software (or specific formats which can only be opened by specific proprietary software) which ties them to Windows, and anything that doesn’t run that software cannot be an alternative for them. That’s probably also the reason why MacOS isn’t more popular because it also can’t run everything, but it’s still better than Windows. So unless those users change their habits and the software they use, they will always be shackled to Windows and remain on that sinking ship until they’re literally beneath the ocean, because they never realize a sinking ship.



    • awk
    • the (usually rust-based) coreutils “alternatives” like bat, fd, eza, procs
    • trash-put (rm with trash integration. But beware that it also operates on directories by default, which rm only does with -r. There should be an option to change that behavior but there isn’t. Don’t alias rm to this)
    • wl-copy/paste (or the older one for X11, ‘xclip’ IIRC. Enables you to do stuff like “cat image.jpg | wl-copy” to copy it to the clipboard. Best alias it to something shorter)
    • xdg-open (open the file using your associated program for that file type. Alias to “o” or so)
    • pass (awesome password manager, when you have a GPG key pair. Even better in combination with e.g. wofi)
    • notify-send (to send GUI notifications from shell scripts)
    • ledger (plain-text accounting software. If you use Emacs you should take a look at this as it’s written by an Emacs dev, and has good integration of course)
    • nc
    • nohup