• 21 Posts
  • 772 Comments
Joined 2 years ago
cake
Cake day: July 12th, 2024

help-circle





  • For professionals and buisnesses, I see where you are coming from (although there is an argument to be made for prioritizing security over uptime whenever acceptable).

    But for selfhosting/private users? If I wake up one morning and my stuff is not working anymore, I can just roll back to the last good backup and then apply patches manually to see where it goes wrong. Way better to have some downtime when I don’t notice (i.e. don’t need the service) than having open vulnerabilities when a fix exists.




  • For my threat model I’m not really concerned with people gaining physical access to my phone, it’s more the surveillance capitalism I’ve got a problem with. So I’d like to be able to keep showing notification contents to myself without showing them to Google.

    If properly implemented google should not see your notification “only” metadata (origin, app, timestamp).

    I do not use play services on my main profile in Graphene. Here is what works for me:

    Email: currently use the Proton app. I’m open to switching to a separate client, but the feature to mark read directly from the notification […]

    I use FairEmail and get reliable push notifications for all my e-mail accounts. I do not have proton however, as far as I know you need the subscription to access mail via IMAP.

    Calendar: also Proton, also open to other clients. Reliability here is important for obvious reasons.

    I think other clients will be difficult here. Proton does not support CalDav (the open standard to sync calendars between devices using numerous applications). Proton also does not support unified push. Getting notifications here will be difficult. However, I would suggest you should try to use the protonmail app in a user profile without play services and see if you get reliable notifications. Some apps have theri own push service implemented when Googles service is unavailable (it will be more battery intensive though). If that does not work, my suggestion would be to use a diffeerent calendar service supporting CalDav (like a small selfhosted Nextcloud instance) and sync that via the android app DavX5.

    Messaging: Facebook Messenger

    I (have to) use Whatsapp which works okayish with notifications when battery optimization is disabled. I suspect Facebook messenger could work the same, so I would, again, suggest to just try it.

    Molly is the go-to? That talks to regular Signal, correct?

    Yes, Molly is a compatible fork of the official Signal client. They support Unified push but that requires running a small server to receive your Signal messages. I do however also get reliable notifications without that (more battery intensive).

    Emergency/weather alerts:

    I guess it depends on the country you are in. But emergency alerts via CellBroadcast are supported in Graphene and do not require Goole Play.

    Microsoft Authenticator:

    Have you checked if that works at all? The last time I have tried to set it up on a profile without GooglePlayServices it refused to work at all. My suggestion would be to have it on a separate profile with play services (it is healthier to separate work and private life anyways).

    Smart home degoogling is Coming Soon™, if there’s anything I need to keep in mind there. Can home assistant consolidate everything or does it work through vendor apps? (Schlage deadbolts, ecobee thermostat, WiZ lightbulbs, Kasa switches if it matters.)

    If a device is supported in homeassistant it should be consolidated. I would suggest looking up the ecosystem and homesssistant for details.

    I’m guessing call, SMS, and MMS are a dedicated channel with the cell service and are not push notifications, but please correct me if I’m wrong.

    Yes, afaik those are separate. They have worked reliably for me without any intervention or Google.

    It seems like scheduled notifications e.g. alarms and timers are also not push notifications. I tried a test timer and it worked.

    Yes, Googles service is only required for stuff that happens remotely and whose timing you device cannot know about in advance.




  • I think (modern) rat poison works by mimicking vitamin K thus inhibiting digestion of actual vitamin K. This in turn will lead to internal bleeding and therefore the rats death. So if you eat enough of it or are small (like children) and decide not to seek a doctor to stop the symtoms it can defenetly kill you, albeit slowly and painfully.

    You could however save money, since this kind of rat poison is not really biodegradable and sticks around in its victims and their predators. So just eating a dead rat would be cheaper and might have the same effect.