Andromxda

joined 7 months ago
[–] [email protected] 7 points 5 months ago (2 children)

Airlines in America really suck, I feel like we have much better options here in Europe

[–] [email protected] 5 points 5 months ago* (last edited 5 months ago)

Why is my neighbor receiving ads for anger management?

He probably gets aggressive when seeing too many ads

[–] [email protected] 2 points 5 months ago* (last edited 5 months ago)

It's not cheap, but this setup doesn't just serve as a router. It's also a dedicated hardware firewall solution, with the capacity to handle big and fast networks (I'm speaking hundrets of clients and technically it could even do 40+ Gbps over an SFP fiber-optic connection.) It also lets me monitor my network and filter connections. I use Telegraf, InfluxDB and Grafana to get a nice visual overview of my local network, as well as all the inbound and outbound connections. I can even see the location of the servers I connect to through MaxMind GeoIP in my Grafana dashboard. I also use Sensei (I think it's called Zenarmor now) for advanced filtering, and I use ClamAV with TLS interception to scan for malware. I could also run a DNS server through Unbound or Pi-Hole, but I prefer to do that on a separate device. OPNsense is a very powerful piece of software, and the StarLabs Byte is a suitable device to run it. For me it's very important to have a free BIOS firmware implementation like coreboot on a security-critical device like my firewall.

[–] [email protected] 1 points 5 months ago

It doesn't say anything. It shuts the device down almost instantly, and simulnateously wipes the encryption keys from the secure element, ensuring that the data stored on the SSD can't be decrypted.

[–] [email protected] 8 points 5 months ago (7 children)

I don't know why it's blank, but when checking the c/privacy modlog from my instance, I can't find anything.

But when I go to lemmy.ml and check the modlog from there, I see this:

[–] [email protected] 1 points 5 months ago

+1 for NetBird

[–] [email protected] 8 points 5 months ago (9 children)

Because Lemmy.ml mods are morons

[–] [email protected] 4 points 5 months ago

Your logic is quite flawed.

privacy-oriented distributions are more likely to be targeted by intelligence agencies

Since GrapheneOS is based on Android (AOSP), any vulnerability that exists in Graphene definitely also exists in AOSP. Graphene is often faster at fixing security vulnerabilities than Google. GrapheneOS makes some substantial security improvements to AOSP, so the chance of a bug in AOSP being exploitable in Graphene is much lower.

trusting your OpSec in the good will of someone it's not a good idea, at least for me

That's literally what you're doing with the stock OS. Since it's proprietary, no one can actually verify what's actually going on. You're literally trusting a billion-dollar big tech advertising corporation that participates In the NSA PRISM program. What you're saying doesn't make any sense.

[–] [email protected] -1 points 5 months ago

The fact that the system is open source

[–] [email protected] 2 points 5 months ago

That's why the modem is isolated from the rest of the system through IOMMU: https://grapheneos.org/faq#baseband-isolation

view more: ‹ prev next ›