Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)I
Posts
2
Comments
103
Joined
2 yr. ago

  • It doesn't intentionally disable biometrics. Disabling biometrics is just a logical consequence of wiping the encryption keys from RAM. Your data is encrypted with your password as the key (not exactly, it first goes through a key derivation function, but the PIN/password is the entry point for the KDF). Your biometric information can't decrypt your data, as your data is not encrypted with your biometric information as the key. When using biometrics, the encryption key is kept in RAM, and the biometric data is only validated by the OS. No actual decryption occurs here. The data on your phone is only being decrypted during the first unlock after a reboot. That's why security states are grouped into BFU (before first unlock) and AFU (after first unlock).

  • The main purpose of this is actually security. Because when the device is in BFU (before first unlock) state, it's much harder to gain access to the data (without the correct unlock credentials). During the reboot, the encryption keys are wiped from RAM, making it essentially impossible to access the device, since brute-force unlock attempts are prohibited by Weaver API, which is enforced by the Titan M2 hardware security module. You can read more about this at https://grapheneos.org/faq#encryption

  • Kodi is ideal for an HTPC

  • We need a successful replacement to DirectX for this to happen.

    Vulkan?

  • I don't really remember, that was a few years ago. I've been using the flatpak ever since.

  • Awesome

  • For me it was actually the other way around, I had issues with the normal package so I went with the flatpak.

  • mail.tm is pretty nice for this. It's meant to be used as a throwaway email service, but you can also save the login credentials and reuse the email address if you need it more than one time.

  • There are a few self-hosted solutions like 13ft and ladder

  • There are no

  • IMO the best Linux desktop experience that you can get right now

  • I don't really use it that much either, I prefer Lemmy/Kbin

  • It's not perfect, but much better than going to Shitter. Some people apparently find Mastodon obscure or confusing and switched to Bluesky instead. Supposedly it's more friendly towards new users. I just hope that bridgy-fed improves and becomes more common in the future, so we can follow Bluesky accounts from the Fediverse and vice-versa.

  • They got rid of port forwarding to improve the reputation of their IP ranges. That makes it less likely for Mullvad users to get blocked by CDNs like Cloudflare and Akamai when visiting websites. If you want port forwarding, just use AirVPN or rent a VPS and use that. Not sure what you're talking about, but Mullvad is based in Sweden, which is not a part of the five eyes alliance. It's a part of 14 eyes, but Sweden has very strong privacy laws, Mullvad even has an entire page about privacy legislation in Sweden: https://mullvad.net/en/help/swedish-legislation

    They also have a page that explains how Sweden being part of the 14 eyes alliance doesn't really affect Mullvad: https://mullvad.net/en/blog/5-9-or-14-eyes-your-vpn-actually-safe

    Their office was also raided by prosecutors last year, and they weren't able to seize any customer information, because Mullvad doesn't store anything about their customers: https://mullvad.net/en/blog/mullvad-vpn-was-subject-to-a-search-warrant-customer-data-not-compromised https://mullvad.net/en/blog/update-the-swedish-authorities-answered-our-protocol-request

  • Yes, there's no reason this wouldn't apply to a VPN provider. It's also the reason NordVPN or Surfshark is so incredibly cheap.

    They have lots of users -> They can pay lots of money for advertising -> They get more users -> Everything becomes cheaper -> They can pay more for advertising

    You get the point