• 10 Posts
  • 68 Comments
Joined 6 years ago
cake
Cake day: February 20th, 2021

help-circle


  • I figure these headlines are a best interpreted as a repeating reminder to degoogle.

    The hints have only increased in urgency over the past couple of decades, from “we might do marketing” to “we spy on you” to “we do genocide”.

    Anyway – nothing special about this headline, but finally I acted upon it: 1-2-3 backups of my google-email/photo/drive archives and reduced my google accounts to an empty skeleton (while I figure out if there’s still any third party services I’ve forgotten about reliant on that email address).

    I’d mostly migrated away from google a decade ago, maybe I can dispose of this skeleton account by the end of the year.


  • a way to increase lock-in

    Lock-in was already being achieved by mandatory use of apps which require iOS or Google Play services.

    Plenty of banks etc which I can simply not use because of this requirement, and others which downgrade you to password+SMS security (used to be a physical TOTP token) if you refuse their app.







  • I prefer browser(web)-based banking apps which work well on a phone UI without the info-access creep.

    UBank (NAB subsidary) and Wise (not a bank) both support passkeys for login in the browser. Most other banks here seem to have regressed from hardware tokens to SMS codes or proprietary apps for their MFA.

    Passkeys are only as secure as your passkeys – I use Bitwarden with master password re-prompt checked for bank credentials, but I should probably switch to a hardware based passkey (at least for unlocking Bitwarden itself).

    The phone apps are sometimes required to do some things (like managing passkeys for UBank, verifying ID in Wise). They work on LineageOS without the google stuff, but might be worth installing only temporarily in a separate profile or phone.

    Retail payments – just use a physical card if you’re not using cash.










  • rcbrk@lemmy.mltolinuxmemes@lemmy.world•ThinkPad
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 years ago

    The replacement battery you bought in 2017 was the last of the genuine stock for that 2012 Thinkpad model. Now it’s only poor quality aftermarket. Maybe just stick with the existing genuine battery – its 47 second runtime should be enough time for AC loss to trigger a custom script to make it hibernate.




  • Whittaker’s phrasing is ambiguous. Could be read as expressing one of a number of things:

    • The paper/article is misleading and distracting from meaningful threats to privacy.
    • That the original tweet is using misleading accusations to distract us from the article’s revelations of meaningful threats to privacy.
    • That Appelbaum’s authorship of the research is an unwanted negative association which undermines the attention deserved by the threats documented in the paper which are misleadingly justified as necessary by eg. governments.

    It’s difficult to know without a better understanding of Whittaker’s position on the various matters at hand, so I don’t know.



    • For incoming mail, on your server run a mail retrieval agent like fetchmail to fetch mail from the externally hosted mailbox into a maildir on your server.
    • To serve that maildir to your clients, on your server run a mail delivery agent like the IMAP server Dovecot.
    • To accept outgoing mail from your clients, on your server run something like Postfix with a relayhost configured with the details of your externally hosted SMTP server.

    There’s nothing unusual or tricky about any of this arrangement.