cubesnooper

7 ms·

1.
by cubesnooper 11mo ago
Tor is great at reducing tracking done by ad companies. I use Facebook and Reddit (a big chunk of my social media activity) exclusively over Tor. Step 1, block all Facebook and Reddit domains and subdomains at the DNS level. This is not to
2.
by cubesnooper 2y ago
Once you’ve had the PIN scramble turned on for a while, it becomes second nature. I enter my GrapheneOS scrambled PIN about as quickly as the unscrambled PIN on my non‐GrapheneOS work phone. But it’s more of a defense against figuring out m
3.
by cubesnooper 2y ago
GrapheneOS supports Android Auto now! I use it every day.
4.
by cubesnooper 2y ago
When I travel to Europe, my North America–only cell service doesn’t work at all. I definitely appreciate free Wi‐Fi at my destinations.
5.
by cubesnooper 2y ago
Cell signal is terrible for privacy, uniquely identifying each individual’s location at all times. Though Wifi can also be tracked, it at least is possible to use anonymously with MAC randomization as is the default on many phones. (Leaving
6.
by cubesnooper 2y ago
I browse social media sites like Facebook and Reddit using their onion services. I was sick of seeing ads pop up that were clearly based on tracking my general browsing activity through IP correlation, tracking pixels and embedded “like” bu
7.
by cubesnooper 2y ago
For games, the equivalent level of ownership comes from DRM‐free digital purchases. That means buying games from platforms like GOG, Itch, and Zoom Platform, and then backing them up. Steam is distantly behind in terms of user ownership—the
8.
by cubesnooper 2y ago
According to the commit message, the motivation is also to detect certain kinds of attacks against sshd itself, not just bruteforced login attempts.
9.
by cubesnooper 2y ago
A few more things: An SSH key can be freely reused to log in to multiple SSH servers without compromise. Passwords should never be reused between multiple servers, because the other end could log it. An SSH key can be stored in an agent, wh
10.
by cubesnooper 2y ago
I’ve seen lots of passwords accidentally typed into an IRC window. Never seen that happen with an SSH key.
11.
by cubesnooper 2y ago
I recently bought a 2024 Toyota RAV4. Throughout the purchasing process, I kept an eagle eye out for any data collection that I might accidentally opt into. This way I avoided a free trial of Toyota Safety Connect, which tracks the location
12.
by cubesnooper 3y ago
100% of the spam I’ve gotten over Signal in the past few years (two messages) has been from cryptocurrency scammers, exactly the sort of people who would have $5 in cryptocurrency many times over to create new accounts with.
13.
by cubesnooper 3y ago
I run OpenSMTPD, mostly because of how simple it is to configure but also how its privilege separated design has reduced the impact of bugs when they happen. (See Qualys’s sometimes complimentary comments in their OpenSMTPD vulnerability wr
14.
by cubesnooper 3y ago
How huge?
15.
by cubesnooper 3y ago
I’ve run my own email server for five years now. It’s surprisingly approachable when done piecemeal. I broke it into several pieces. 1. Switched from the GMail web interface and app to open source IMAP clients on phone and PC. 2. Switched a
16.
by cubesnooper 3y ago
Google Voice doesn’t support RCS either, so I roll my eyes when Google talks about interop.
17.
by cubesnooper 3y ago
Reminds me of this classic: https://web.archive.org/web/20160720140639/https://www.csd.u... You’ve given me something to think about. Luckily, I only have to amend my mental model a bit, to assume giving
18.
by cubesnooper 3y ago
> IMEI According to the GrapheneOS FAQ: “As of Android 10, apps cannot obtain permission to access non-resettable hardware identifiers such as the serial number, MAC addresses, IMEIs/MEIDs, SIM card serial numbers and subscriber IDs
19.
by cubesnooper 3y ago
Yes, if the worry is that an app could offload data via the network, then turning off the network only provides a privacy benefit if the network stays off. That’s why the recommendation is to run Google apps in an isolated user profile, so
20.
by cubesnooper 3y ago
GrapheneOS allows disabling network for a particular app, alongside the other permission settings. As a rule, I’ll give an app either file permissions or network permissions, but almost never both. A lot of apps are perfectly usable without
21.
by cubesnooper 3y ago
> After installing GrapheneOS, I wonder if it is possible to selectively stop connections to GrapheneOS servers. There are probably some connections to Graphene servers enabled by default. This is actually extensively covered in the Grap
22.
by cubesnooper 4y ago
I find myself wishing more and more for a wifi‐only tablet in a phone form factor. Sure, I recognize that I’m in the minority here, as someone who keeps his phone in airplane mode/wifi‐only mode all the time. But it doesn’t mean giving
23.
by cubesnooper 4y ago
That’s a great tip!
24.
by cubesnooper 4y ago
I don’t exactly like it, but isn’t it an effective measure to reduce scalping? So many .com domains are owned by entities who bought piles of dictionary words just to slap them on a SEO ads page, only willing to part with them for exorbitan
25.
by cubesnooper 4y ago
There are downsides to country TLDs. What if you move? You might not be allowed to keep the domain from a country in which you no longer reside. Or if the country moves underneath you. Quite a few Brits lost their existing .eu domains after
26.
by cubesnooper 4y ago
This is why I always purchase my domains for ten years up front, and top it up to ten again each year after. This way if the renewal fee increases beyond what I’m willing to pay after I’ve already got infrastructure running on the domain, I
27.
by cubesnooper 4y ago
I self‐host mostly because local copies of things give me some privacy (sites won’t know what my IP is searching for), and it also lets me work easily when Comcast is down… which is annoyingly frequent in my neighborhood. All of these machi
28.
by cubesnooper 4y ago
I wouldn’t recommend renewing your domain every ten years, but I do always purchase my domains for ten years and subsequently renew every single year. That gives me a modicum of safety from certain life circumstances (e.g., there’s an HN co
29.
by cubesnooper 4y ago
I have another Raspberry Pi sitting next to my desk, with a keyboard and a tiny screen, dedicated to systems administration. My user on this machine has an SSH key that on every machine logs into an account with sudo access. To revoke a use
30.
by cubesnooper 4y ago
> Your personal (private) key lives on your workstation, and CA key lives on RPi. Yep. > There are some other machines that you want to SSH into. They trust CA public key. Yep, with TrustedUserCAKeys. > The remote servers trust the

More ›