hpcoke

> We need the critical role of Open Source maintainer to professionalize.

Do we? I do open source work and maintainership, and am happy that this is outside the control and influence of industry.

Must even this that "makes the Internet special" also bow to industry needs?

Interesting. What's your setup for sharing peripherals between your PinePhone dock and your laptop/desktop?

Yes. The state of the art is:

* biktorg's firmware (now flash able via GNOME Firmware or fwupdmgr)

* NetworkManager with --test-quick-resume-suspend flag.

* Crust/ATF as platform firmware (e.g. Tow-Boot)

* eg25-manager to manage the modem

This will be available transparently to most users, but some distros might not be there yet.

PostmarketOS and Mobian are safe bets.

+1

https://www.pine64.org/2022/01/31/pinephone-community-poll-r... shows most PinePhone users don't use the CLI-based interface.

Advice for anyone considering it:

* There are rough edges, but the basics are there: calling/SMS/4G/WiFi/audio/browsing/suspend.

* If you want to try it, put https://xnux.eu/p-boot-demo/ on an SD card and plug that into your PinePhone. That has a bunch of different distros and UIs on it.

* To keep up to date, follow https://www.pine64.org/blog/ and https://linmob.net/

I'm excited to use a community driven phone!

+1. This is my primary source for keeping up to date, along with https://www.pine64.org/blog/

> This hasn't been a real benefit for years. Exit nodes are running at something like 10% capacity.

https://metrics.torproject.org/bandwidth-flags.html corroborates what you say about utilitisation.

Exit nodes are legally difficult to host in many countries, which reduces diversity, which is a risk.

Onion services avoid the need the exit nodes, and thus the diversity risk.

> This is just another problem with hidden services. Opening circuits costs malicious clients far less cpu time than it costs the server.

I had a look for this but couldn't find it.

> https://hstspreload.org/ offers the same benefits. You are guaranteed to be connected to what you expect - or not at all.

TLS/HSTS is still subject to CA attacks, e.g. diginotar.

CA/X.509 is a complex stack too.

> TLS mitigates attacks that can be executed by malicious exit nodes (or WiFi networks, or ISPs), that is the whole purpose of TLS.

A malicious exit node could refuse to serve some websites. This seems a minor risk though.

Reducing load on exit nodes is a technical benefit that's in that blog post.

Another benefit to using Tor onion services for large sites is that the Tor circuit ID can be used as an additional key in an IP rate limit cache. This helps block Tor bots (on the basis that establishing a Tor circuit is expensive).

No, since the redirect only works in the Tor Browser, in which case the cleartext connection is still a Tor connection.

It's great to see cross-distro activity in removing the burden from distributions of packaging different builds of u-boot.

I use Tow-Boot on my Pine64 RockPro64, with a plain NixOS aarch64 installation. Bliss!

Thanks Samuel and Martijn!