ementally

Related: "Flathub is insecure for distributing cryptocurrency software".

https://github.com/feather-wallet/feather/issues/47

Guix seems the best when it comes to reproducibility https://guix.gnu.org/en/blog/2024/identifying-software/

How is it compared to https://ente.io/ ?

Just disable the apps, no need to debloat.

https://discuss.privacyguides.net/t/universal-android-debloa...

Also Cheat engine https://github.com/cheat-engine/cheat-engine/issues/2105

Same with Cheat engine https://github.com/cheat-engine/cheat-engine/issues/2105

Interesting, I really like your technical blogs https://peergos.org/blog.

Discussion thread: https://old.iris.to/note1hekrtdrtnfk40xuktjaw8y06um9eyf6seh7...

Yeah you are right. It is more like https://bs.parity.io/#/-BananaSplit-shamir

Reminds me of https://superbacked.com/ and https://github.com/Twometer/hyperbacked which is an open source clone of superbacked.

Both Generate Encrypted QR parts using Shamir's secret sharing.

>Or the committer is making very small changes that are hard too see amongst the massive whitespace changes his auto-formatter makes every time she saves a

How about you show it? lmao

Can't believe that this is even a comment.

Should have just kept it off.

From https://simplex.chat/blog/20230722-simplex-chat-v5-2-message...

>Why not hosted groups with MLS?

>Initially, we considered the design with the dedicated servers, potentially self-hosted, that host groups. This design would require adopting MLS (or similar) protocol for group-wide key agreement. Unfortunately, this design is not sufficiently resilient and easier to censor than decentralized design. Also, MLS protocol is very complex to implement, requires a centralized component, and reduces forward secrecy. So we decided against this approach.

Nice!

Would be great if it is being built with security in mind.

Probably important for competitive games only.

60 fps is great for anything else.

Signal's Sealed sender is broken

https://news.ycombinator.com/item?id=35058706

This was an article about the app [0].

"Man Creates Messaging App FBI Can't Crack and Anyone Can Download, Stopped at Airport Days Later"

I would just use SimpleX tbh [1]

[0]https://www.westernjournal.com/man-creates-messaging-app-fbi...

[1] https://simplex.chat

Brave https://www.privacyguides.org/en/mobile-browsers/#brave

About Vanadium, it is mostly focused on security, and it takes advantage of OS hardening to do that. Brave is a fine choice, and it does offer fingerprinting protections that Vanadium doesn’t. It’s up to you which you’ll choose for you use case, but Vanadium takes the cake when it comes to a robust, secure and minimal browser

You are probably better off with GrapheneOS + Orbot.

Here is the list of issues I have with this blog.

1) LineageOS https://github.com/beerisgood/Smartphone_Security#custom-rom...

2) Riseup email, they have a mailing list, which apparently makes them unable to add a proper DMARC policy. As a result, anyone can spoof an email at any @riseup.net address, and the email would show up as a legitimate email on most recipient mail servers and they do not encrypt the data at rest per-user with the user's own keys like ProtonMail.

3) Session is great but lacks PFS (perfect forward secrecy)

4) bromite usually behind in updates which leaves it vulnerable to exploits

btw, On Android, Firefox is still less secure than Chromium-based alternatives: Mozilla's engine, GeckoView, has yet to support site isolation or enable isolatedProcess.

I actually find their Goggles [0] feature really interesting.

[0] https://search.brave.com/help/goggles

Probably useful for people doing web stories.

https://developers.google.com/search/docs/appearance/enable-...

A reddit thread about CalyxOS making connections to xtrapath1.izatcloud.net .

https://old.reddit.com/r/CalyxOS/comments/pym8l1/calyxos_con...

a) If they are unable to identify the user by any means then this is their only resort and google is going to happily hand it over.

b) Depends on the country you are in. You might be the only one connected to a specific VPN server at specified time, this also answers point c.

c) Would be surprised. Have a read of this recent Affidavit https://s3.documentcloud.org/documents/23723268/pompourin-af...

https://old.reddit.com/r/ProtonPass/comments/12su1vq/proton_... They claim that using it as cloud service prevents brute force.

If your ISP suspects your IP address (can see your are connected to specific VPN server) they can just contact top websites, example: twitter, facebook or google and ask them if there are any users connected with the same IP at given specific time.

How can you be sure that you are the only one in your country not connected to the same IP address provided by a VPN server?

Repo is still private and the dev removed all of his updates.

https://web.archive.org/web/20221125051241/https://orenom.fi...

The repo: https://codeberg.org/orenom/wikiless