Deliverer of ideas for a living. Believer in internet autonomy, dignity. I upkeep instances of FOSS platforms like this for the masses. Previously on Twitter under the same handle. I do software things, but also I don’t.

  • 1 Post
  • 20 Comments
Joined 3 years ago
cake
Cake day: June 5th, 2023

help-circle

  • While de-Google’d, /e/ is a fork of LineageOS that is often VERY out of sync from the security updates AOSP offers, and it puts your device at risk of being easily compromised and tracked. It is not a safe bet as a ROM. I would highly recommend against it if you had to choose between the two. Go with LineageOS, as it is closely downstream from AOSP patches.

    If you have a Pixel tablet? GrapheneOS over LineageOS.

    If not, and those are your options so far: LineageOS.






  • You may have come across this already – and if you have, you are on the right path. Here is a solid list from the coreboot docs on mainboards they support.

    You should be able to derive a few vendors from this list, as well as compare any possible candidates you have found to it. Some vendors on this list produce hardware that is Linux-forward, such as System76 and Purism. Linux-forwad vendors are good place to start.

    System76 has laptops and small profile desktops, servers, etc. Purism has most of that, as well. Both are gonna be a little pricier than a typical vendor, but the hardware – and their respective missions – are worth it if you have the means. I have owned and / or used PCs from both these vendors, and they have been quality.

    Otherwise, that linked list above will be helpful to determine if what you are researching has a mainboard that works. Best of luck!








  • If it’s viable for you, slightly modified Mulvad browser + Searxing for search.

    Mullvad browser is a variant of the Tor browser, but rather than being used to connect to Tor, it’s built on the stripped away version of Firefox that Tor builds. This means no ‘phoning home’ telemetry to Mozilla or Google. The only default connection Mullvad browser uses – and this might be why I would suggest modifying it – is the DNS gets routed through Mullvad. Nothing wrong with that, as they have some solid adblocking DNS servers. But: having a choice for that is good. The default should not be assumed.

    Searxing uses a number of search indexes that have been consistently effective when compared to commercial search engines, and it’s open source and deployable on, say, a home server. There used to be some public instances available. Searxing is good.

    Were setting up a Searxing service for yourself somewhere not as viable, and you want to try a service that you pay for (rather than them using your data as ‘payment’), I would recommend something like Kagi. They offer an interesting feature to their service, and this is why I suggest them: they have a privacy tokenized search, which valdidates but obsfucates you as a user when you make a search request. I think it is smartly engineered, and I can appreciate it for what it is.

    For privacy and security purposes, alike, I would avoid Zen and Floorp. They do not get security updates as often.



  • If you are looking for a hardened phone, I would consider trying GrapheneOS for a bit, see if it does what you are looking for. Uses SELinux and a seccomp-bpf policy for app sandboxing, as well as runs a hardened kernel with a hardened memory alloc. Great isolation approach, too, so that you can run apps on a ‘completely different phone,’ so to speak – think of the isolation like a small version of the OS that can keep apps entirely separate. Finally, if desired (and needed for certain apps), you can sandbox all Google services so that they don’t have direct access. It’s is a different approach to, say, microG.

    GrapheneOS is all about hardening. Security is solid.

    VPN wise, Mullvad wireguard servers are also solid. You can do multihops, which help you obsfucate traffic to degree. They have also been playing around with packet shaping (if you use their app directly).

    Sim cards can be swapped out if use a VoIP service like jmp.chat.