bepvte

I love that the eDNS stripping Quad9 service isn't blocked. Presumably because the owner of the service hasn't realized they strip eDNS.

This behaviour has been removed in the next gnome release

This thin font is very difficult to read

Screenshot functionality is built into gnome:

PrintScr: Whole screen to png in pictures folder Shift+PrintScr: Drag box over area to screenshot Alt+PrintScr: Screenshot the window, with a transparent box shadow around it Adding ctrl to any of those puts it on clipboard instead of pictures folder

Ctrl Shift Alt R records a 30 second webm of the desktop

You should reread that article

Thats not TPM.

This is a good article, but I want to warn the author that the owner of the .tk gtld takes away its "free" domains and redirects them to advertisers when it feels doing so would be profitable.

No, but there are several "thread unroller" sites to make reading these things easier.

This is an unfair expectation. Glimpse has taken off in my school however.

This argument can be applied to the encouraging the rollout of HSTS and HTTPS by firefox and google, which cant be disabled very easily by administrators.

For point 1, Windows 10 plans to implement this.

I've noticed some problems with eSNI so far unfortunately. Some domains like discordapp.com have some access points with eSNI enabled and some without, so when clients access the ones without eSNI, they believe that they are under attack. I cannot wait for it to be finished and implemented though, it would be a huge benefit for the privacy of millions.

Yes, if you press the network and proxy settings in the preferences page, you will see a DNS over HTTPS setting. You can also use this to set your own resolver in case you dont trust cloudflare.

https://support.mozilla.org/en-US/kb/canary-domain-use-appli... You can use this if you run a DNS server

https://support.mozilla.org/en-US/kb/canary-domain-use-appli..., also if you can block it this easily so can the government. The difference with a canary domain is that mozilla can disable it if its misused.

DNS over TLS and DNSCrypt both depend on servers... exactly as centralized as DoH. They are just different wire protocols that in the end do the exact same thing with a centralized DNS server.

DNS over TLS is just DoH but with an easily blocked separate port

AFAIK the ESR (business release) does not have this on by default

You might be interested in GraalVM, which can do this between certain languages implemented on top of it.

As someone with serious writing issues, I can recommend the "penagain" for being really excellent to use

Using ipsets (hash table type thing) is much more efficient then iptables rules, especially if you use entire ip blocks

It says "Bluetooth scanning — Let apps use Bluetooth for more accurate location detection, even when Bluetooth is off." I doubt it makes the device discoverable though.

Theres no recommendation engine, its all manual. I plan on submitting my silly little 9 line extension (https://addons.mozilla.org/en-US/firefox/addon/t-co-sanitize...) to the recommendation request email at some point.

This is a problem even in production autopilot in Teslas. When stopped at a stop light, you can see cars "dancing" and rotating randomly in a jittery fashion. Today during an auto lane change, the system blinked a truck from two lanes across in and out of my target lane, causing the car to cancel going into an empty lane after quarter ways entering it, twice.

I love regex101. It uses webassembly for some of its engines

For one, the kernel cant ask for the password of the hard drive without userspace software. LUKS header is actually all parsed in userspace and the device mapper is setup based on it.

Chrome android features lots of tabloid ad crap in its home page.

Its patched because of the risk it poses to the government and from other state actors