HN user

hashworks

118 karma
Posts5
Comments68
View on HN

For most app ads it's enough to set a DoT or DoH in the system that blocks ad domains. Android supports this with a settings menu entry, on Apple one needs a more "technical" solution I think (loading some XML?). Most VPN apps also support DNS enforcement.

Apps like YouTube are an exception, but there are other ways around that on Android.

Will the sandboxed google play permit banking apps to work using TPM and secured credentials?

Apps that don't work don't fail due to technical reasons but because upstream says so, i.e. Google Wallet. My banking app works just fine.

I would expect whatever you initialised before grapheneOS is wiped before you can run the alternate OS.

Yes.

Is termux possible with a root/sudo function?

GOS doesn't support root by itself since they deem it a security risk, but it's possible.

I'm in the same situation myself. It's quite frustrating, since 2 weeks I have been told that "the ticket is open and the technicians will take a look soon". Not sure if stuff like this has a low priority since IPv6 works and it's not considered a total outtage? In Germany there are laws to grant consumers compensation in those cases, but I'll see if this counts soon enough.

One problem with the solution in this blog post is that various endpoints block datacenter IP ranges entirely or make you go through various captcha hoops, but no good way around that. Same for common VPN providers.

Since I wanted to fix this for my entire home network I also had to do this on my router - in those cases it's quite beneficial to have a non-standard device like an Ubiquiti EdgeRouter, not sure how I would have set up all the Wireguard routing and nat rules on something like a FritzBox. The only downside is that the Router isn't powerful enough to handle a lot of connections, so I'll have to switch to IPSec which is supported by hardware offloading.

Matrix v1.15 1 year ago

The official client is clunky and being electron on the desktop doesn't make it better. Messengers live and die on UX. Since it's an open protocol alternative clients exist of course, but are often not feature complete. Things are often slow, especially with large group channels with lots of messages.

If you host a server yourself - it's great that you can! - you'll try the official implementation, synapse — ...and discover that it's a resource hog. Things got a bit better with some streaming sync protocol or something like that, but last time I looked it up that was still experimental and the server is still a chonker. Again, alternative servers exist, again the problem with feature parity.

I feel like the protocol is bloated as well, but I didn't dive into it too much to have a good opinion on that.

When choosing a messenger, I go to Signal for security, to IRC for simplicity and to Telegram for UX. I never thought "Oh let's use Matrix"...

I shudder to imagine what the next tier (cal us') costs.

There is no enterprise tier, instead you pay for any additional features you need. I.e. log streaming is 2$/month/user and SSH recording is 3$/month/user.

While I do that, is that really the case? I can imagine database snapshots are consistent most of the time, but it can't be guaranteed, right? In the end it's like a server crash, the database suddenly stops.

I use both, and I never had problems with any of them. Restic has the advantage that it supports a lot more endpoints than ssh/borg, f.e. S3 (or anything that rclone supports). Also borg might be a little bit more complicated to get started with than restic.

GitHub is down 2 years ago

I don't think an accurate and automated public status page is something any management would want. If it was accurate they wouldn't be able to lie to customers about the uptime. So I always suspect status pages are adjusted manually.

Choose your own IP 3 years ago

For companies this is the way. But I guess for personal use a private Keycloak instance is a bit overkill?

There are good reasons to switch to Wayland. Features, security Standards and it being in active development are some of them.

Of course no one has to use / switch to anything, but reaching a critical mass of users would be helpful in the long term.

I guess I'm just hoping for some user that will be bugged enough by problems in Wayland that they decide to fix them. The chance of that increases with user count.

I understand that the bulk "forest" of Linux users don't care about their window manager / desktop environment, but it's a higher number than in other operating systems. This approach wouldn't work in Windows or MacOS, in Linux it might.