• 31 Posts
  • 302 Comments
Joined 2 years ago
cake
Cake day: November 27th, 2023

help-circle
  • Are you keen on using wireless headphones or speakers? If not, I’d go all the way for one without Bluetooth so the thought of present or future vulnerabilities won’t have to cross my mind whenever I use it.

    In addition to the Bluetooth vulnerabilities other commenters have mentioned, a recent one affects headsets with Google’s Fast Pair feature. Once forcibly paired, an adversary can register the headset with their Google account. The headset thereafter pings nearby Android devices as part of the find lost devices network and can be used to track the victim.

    Not sure if they are in production any more, but I can recommend the old iPod-looking Walkman and Sansa MP3 players. Currently also using a no-name iPod nano clone for the fact that it has a microSD slot, even upgraded the internal battery a few months ago.





  • Linux Mint is your best bet. Intuitive for new users without any flashy features to get in the way.

    All said, temper your expectations. I did this for a couple of my folks and the Linux partition just sat untouched until I next visited (and presumably thereafter). Despite updates for their existing Windows 10 ending. For an unfortunate majority of people, they don’t really care until their browser stops rendering pages, no matter how you proselytize Linux.

    on second thought, don't even dual boot. A separate computer would have fared better. But if you must dual-boot...

    No personal experience on how to make the dual-boot graphical, but that’s a very good idea. I’ve witnessed computer science graduates struggle to get their computer to boot from a USB stick.

    Separate disk because that eliminates interference with the Windows Boot Manager. More like the other way around since Windows tends to mess with GRUB after certain updates if it’s on the same disk. Nearly every concern with whether to install Windows or Linux first arises from trying to dual-boot on the same disk. And if anything goes wrong, you can just revert by unplugging the Linux disk instead of painstakingly reconstructing a broken Windows install.

    If you are passionate enough and have some money to spare, get a used laptop (240 GB SSD, 8GB of RAM, 3rd Gen i5 at a minimum), preferably enterprise-grade (Latitude, ProBook, ThinkPad), clean it up, and pop Linux Mint onto it. Your folks can then experience Linux at their leisure, side-by-side with their existing machine at no risk. No fussing with boot order menus, which I have seen confuse computer science graduates.





  • If you are in the US, take a look at Fidelity or Vanguard. They haven’t required the use of a smartphone app.

    Using a phone with Android 8 isn’t best practice for security by any means, but unless you are being targeted or going around downloading shady apps, it’s more likely it will run into app incompatibility issues in the coming years than anything else.

    For sites where I’m making a low-value, one-off purchase and never coming back, I’ll use a pseudonym alongside a prepaid gift card, or failing that, a privacy.com virtual card. Not quite a sustainable strategy with eBay or Amazon, especially if the package needs a signature, so I’ll just use a privacy.com virtual card and supply a P.O. Box address

    Mostly accepted that it is the way it is for these things. If the privacy-friendly option is giving up a few conveniences, I’ll take it. But if it’s keeping me from reaching certain goals, I’ll tolerate a compromise. I don’t think I’m being targeted either, so it’s all tolerable in my personal threat model.




  • In my opinion, the reward for rooting LineageOS is pretty limited for having to risk one of the more important aspects of the Android security model, since the base system is already decently clean. If you want to go the extra mile, you could try installing the LeOS GSI, which strips out the remaining pings to Google servers (see LineageOS column of the table).

    Definitely double check if the build you use has anything weird configured, but modern LineageOS (and Android in general) should already have good encryption by default. Not sure if LineageOS already has a way to toggle per-app network access, but if not, take a look at RethinkDNS, does a fine job without root.

    Not much you can do about the unlocked bootloader, but as long as you aren’t being targeted by some agency, sticking to trusted sources like F-Droid for apps will go a long way. I have a similar approach with two phones and minimal personal data stored on each, so I’d personally approve of those elements.

    Faraday cage might be of interest with regard to the iPhone since those can still function as their own AirTags even when powered off. But modern phones are surprisingly sensitive to signals so the slightest imperfection, especially in cheap Faraday bags, could give you away. While you’re at it, make a threat model to see if Faraday cages are necessary for your needs.



  • I was thinking something on those lines the other day. We like to say that Linux revives old computers, and I wouldn’t for a second consider putting Windows back on them, but I also have a case of hardware support so close, yet so far. I’ve two old laptops with nvidia chips from before the days of Optimus switiching, so you are forced to use the dGPU. Believe me, I wasted a whole weekend trying to make them use only integrated graphics. It was fine while they were supported under the proprietary nvidia driver, but as soon as support ended, nouveau became the only option and it absolutely crippled 3D performance, even on very old titles. Meanwhile, Windows still supports the old 340 driver needed for those graphics chips.

    Mostly comes down to hardware vendors not bothering with Linux support and open-source in general. Which leaves support for affected devices down to volunteers having time to reverse-engineer a driver from scratch. To be clear, I don’t blame nouveau at all. It must have been a ton of work to even get the nouveau driver to its current state.



  • Back in the early 2010s, I bought a new PC with Windows 8 on it. Hated the way it looked and the way it worked. I wanted my Start menu and Aero and Classic themes back. Led me to learning about Linux. But uxTheme and Classic Shell kept me happy for a couple more years.

    Then I got a laptop with Windows 10. Felt my heart rate spike as I went through the settings and found out how much more hostile to user choice and privacy Microsoft had become. When the semi-annual updates kept undoing all my hard work debloating Windows, I decided it was time to begin using Linux in earnest.

    At first, I had a dual-boot setup and jumped around between Ubuntu, Deepin, Arch, etc. Found myself booting into the Windows partition less than once a month, at which point I moved it out onto its own drive. Distro-hopping went on for about a year, after which I decided that Debian met all of my needs. Continued DE-hopping for about another year until settling on XFCE with Chicago95. Brought me enough joy to make a standardized setup in a VM, which I have since cloned to all of my computers except for the Windows laptop I keep around for work.


  • Mixed bag. I’m lucky enough that most of my work can be done on a Linux machine. Workplace does require us to bring our own devices, but the policy is extremely lax, no need to install any monitoring software or the like. Which lets me have a Linux desktop chilling on my desk.

    But I do have to keep a laptop with Windows around. We sometimes have to work with overcomplicated Office documents that break on alternatives like LibreOffice or the occasional piece of proprietary software that needs direct USB access, which Wine cannot yet provide.



  • My uncle has worked many years in IT and sometimes lectures me on digital privacy and security. But I got a glimpse of his phones and computers, it was disappointing. Bogus security apps and optimizations and a refusal to update Windows. Probably different situation with OP’s father, but quite emphasizes the importance of continuing education.



    • Bulk unarchiver or a frontend for ffmpeg (using existing tools, both get very messy when special characters or multiple directories are involved)
      • Existing ffmpeg GUIs have had fixed lists of formats and options, making new or obscure ones inaccessible. There also needs to be an option to export the command based on GUI selections so the user can learn if they choose, or fix the command if something isn’t right.
    • Adding the little details of Windows File Manager (i.e. Format dialog, search by attribute like MP3 bitrate) to some existing Linux file manager
    • Mounting of network drives in Linux graphical file managers: many of them handle it through gvfs, which for some reason insists on mountpoints with long directory paths and special characters, breaking compatibility with various utilities
    • Extending Linux Mint’s libadapta to further restore theming in libadwaita apps. This I am personally looking forward to contribute to as more programs move to libadwaita and disrupt the look I’ve painstakingly set up for my desktop.