moldy_rice

Citation needed.

Good call to install Linux.

You’re talking about publishing infrastructure compromise

Compromise of the integrity of the traffic between your server and theirs can happen. Loads of CAs have been compromised. X.509 root stores insecurity breaks https.

That’s why most package managers have signatures. And most hardened servers use Tor to fetch packages, to mitigate targeted attacks like indefinite freeze

Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.

Docker pull does not, so it will happily download a maliciously modified image, without checking.

You can go in the sun, but wear sunscreen. You can have sex with a stranger, but wear a condom. You can download software, but check the cryptographic signature.

Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.

Docker pull does not, so it will happily download a maliciously modified image, without checking.

How does it work? Just installs apt packages?

This comment is suggesting doing many things extremely vulnerable to supply chain attacks. Please don’t upvote or do this.

Link?

Sub fail2ban for wazuh. It does the same but so much more, and does everything with 0 config after fresh install.

Wazuh and TOTP

The situation is so concerning, he notes, because there isn’t much that people can do to protect themselves from zero-click ad attacks other than blocking ads as thoroughly as possible on all websites and platforms—a fact that intelligence agencies like the NSA and CIA seem to know all too well.

Or disable JavaScript

I’ve spent hours trying to satisfy Jellyfin and it never fully works correctly.

So, I don’t.

Charging corporations is not a violation of OSI’s definition.

Their definition is free as in speech, not as in beer.

Maybe artists are just less greedy than the average tech bro?

Because your phone gives it that info. Shelter isolated it from other apps. It doesn’t prevent it from getting metadata about your device.

Charging corporation. Making it free for personal use and nonprofits

It has access to your phone’s fingerprint, which is then linked to all your other activity that you do on the phone, because it has the same fingerprint.

It doesn’t need access to the phone data. All it needs is the fingerprint.

The phone number part significantly degrades your privacy and security

Also the signal app depends on non free software blobs, which is a huge risk to security. Claiming that Signal is open source is disingenuous. Parts of it are open source. As a whole, it is not.

No phone number needed. Can run directly on a non-phone server.

Also more secure and trustworthy because it’s open source.

If you manage to make an account on WhatsApp and move it to waydroid, they’ll ban you.

Meta’s game is (meta)data collection and selling your data. They’ll delete your account if they can’t get all your phone’s data (eg if it’s an emulator then they can’t uniquely identify you)