Sideloading APKs is an easy vector but so is the Google Play Store. It’ll take scammers like 5 minutes to just perma move to GPlay shenanigans, and its already well known to have poor quality control and tons of malware available to download with the useless play protect logo.

This is just Google’s public justification for creating their walled garden. They already pulled this exact scam with Chinese OEMs which is how Huawei got banned, and others stopped selling in the US. They huffed up some story about CCP spyware and then mandated that GPlay be installed in full, otherwise face consequences from congress.

Even Samsung got pulled in and they essentially agreed to use GApps as the de facto communication suite for their phones in exchange for allowing Samsung to continue to use their Galaxy store.

They see stuff like AOSP as a threat because anyone can just fork the OS and make their own non google Android, and they don’t want any OEM to replace GPlay like what Motorola is attempting right now (hence the increased urgency to lock down Android).

Google’s monopoly in the mobile space revolves around every phone using GPlay, so they’ll do anything to maintain their control.

(I don’t need strong censorship resistance; it just has to work in offices and hotel WiFis.

Wireguard on 443 or OpenVPN + Stunnel on 443

Wireguard is easier to setup because there’s no OpenVPN app that packages stunnel (afaik), so you have to run 2 apps on your phone to make it work.

A server like caddy can also accept HTTPS traffic for some regular websites next to the VPN server.

Wireguard uses UDP, so just run whatever you want on 443 TCP with caddy (unless you want QUIC for some reason?)

Anything beyond that and you’d be looking at using a proper obfuscation solution like Shadowsocks or obfs4, in which case you should look into Amnezia or Tor bridges.

Hey to be fair I know several people who do know, but so poorly that they’ll still be defnitley grinding your gears lol.

Define right wing because the last time I used that insult, it was against users spamming DNC propaganda lol

Use our easy bash oneliner to install our software!

Looks inside script

if [ $(command -v apt-get) ]; then apt-get install app; else echo “Unsupported OS”

Still less annoying than trying to build something from source in which the dev claims has like 3 dependencies but in reality requires 500mb of random packages you’ve never even heard of, all while their build system doesn’t do any pre comp checking so the build fails after a solid hours of compilation.

Gamefreak used an additional hardcoded RSA public key auth in Pokémon Black/White because for some reason they didn’t trust OpenSSL to not fail for their HTTPS API connections, and yet here we are in 2026 with unauthenticated API endpoints.

Was ChatGPT unable to generate swagger docs they could have lazily plugged into an API scanner bruh

Or better yet notice the big fat “unathenticated” label when you look at the endpoint list.

sneak up into a dark street corner at night

“Ay you got that ed25519?”

No sweat, try mirroring a private tracker and you’ll very quickly run out lol. You need a couple of petabytes worth.

The real problem is the price of HDDs not going down due to lower production in light of SSDs.

I fully expect WD to drop this as some stupidly expensive SAS drives that almost no consumer will buy. They should at least apply the dual heads for speed tech so we get faster HDDs for the same price.

Very critical. GNOME and KDE have two very different UX paradigms.

Usually people used to Windows opt for KDE, and Mac or older Ubuntu users opt for GNOME.

The thing is though, a golden standard DE can easily be setup to act as both. XFCE is so customizable that I’ve seen both DE types setup as UNIX like or Windows like workflow.

I’m not sure if KDE or GNOME can do the same because I’m pretty sure they focus on a target audience.

What are your issues with KDE exactly? I always hated GNOME’s lack of standard window buttons and handling multiple windows in a Mac like fashion. Also the app menu which gives me flashbacks of ChromeOS.

I tried protonmail not for the privacy purpose but just to have a normal web email client.

After wasting an hour before finding out you can’t disable the “sent from protonmail” footer without manually deleting it in each draft you make, I said screw it and deployed my own email server with stalwart lol.

It’s receive only because outgoing SMTP is a pain to make reliable these days and my ISP blocks outgoing SMTP anyway, but for everything else I now use Thunderbird.

Been on it permanently for years now. Only complaint is that I found XFS to be better than BTRFS, though most people probably wouldn’t notice.

Only other “complaint” is Fedora doesn’t have a lot of support for embedded arm devices, so you’re on your own if you want an RPM style distro on something like an Orange Pi.

If you want to ruin a concert’s day, change the thermostat a few clicks lol.

Funny thing is you can actually conduct pretty well with just your hand.

Also a good conductor is usually an astoundingly good player of multiple instruments themselves.

It’s kind of like how football (soccer) team managers are retired players that can still play better than the entire stadium wearing loafers and a suit.

How I sleep knowing Fedora + podman actually uses safe firewalld zones out of box instead of expecting the user to hack around with the clown show that is ufw.

I could be wrong here but I feel like the answer is in the docs itself:

If you are running Docker with the iptables or ip6tables options set to true, and firewalld is enabled on your system, in addition to its usual iptables or nftables rules, Docker creates a firewalld zone called docker, with target ACCEPT.

All bridge network interfaces created by Docker (for example, docker0) are inserted into the docker zone.

Docker also creates a forwarding policy called docker-forwarding that allows forwarding from ANY zone to the docker zone.

Modify the zone to your security needs? Or does Docker reset the zone rules ever startup? If this is the same as podman, the docker zone should actually accept traffic from your public zone which has your physical NIC, which would mean you don’t have to do anything since public default is to DROP.

One one hand, a superior ROM choice

On the other hand, subpar crappy Google hardware

Would bet cash money this article was sponsored by Tim Sweeny, who is also a billionaire lol.

Not saying this excuses Gabe Newell in any way, but this was made purely to attack Valve’s newly announced product.

They had no issue when a billionaire with an order of magnitude more wealth than both Tim or Gabe went around advertising his shitty Amazon MMO:

https://www.pcgamer.com/jeff-bezos-heralds-new-worlds-success-after-many-failures-and-setbacks-in-gaming/

It’s impossible to say where New World will be in a year, whether it will be on the road to obscurity or finally giving World of Warcraft something to sweat about, but right now it’s a huge success that validates the commitment and patience Amazon has taken with it. Bezos may not have had a direct hand in its creation, but as the person who greenlighted Amazon’s foray into gaming more than a half-decade ago, you can understand his pride in it.

Couldn’t you just lazy build your own images if you don’t trust the source?

Even then most of these containerized apps can be run perfectly fine as a host binary, you just have to make your own start script and a systemd unit which isn’t that bad.

You could then build a completely custom image if you’d like, or move it into a VM if you don’t like the idea of running it baremetal.

How does it compare to Photoprism? Been on that solution for a while and I really like it, but have seen lots of people suggest Immich as well.

EDIT: https://github.com/photoprism/photoprism

Ubuntu and Docker.

Really? Netplan alone disqualifies Ubuntu as a “friendly stable starter distro”, and I can guarantee you that your guide will somehow become outdated with a single new Ubuntu release, or some poor soul who accidentally selected an LTS release.

Docker doesn’t matter as much, but there’s a reason beyond just FOSS licensing why podman exists.

Would highly recommend Debian instead.

I started on Ubuntu similar to this many years ago and both the server and desktop experience was not fun at all.

HEVC support is enabled for Firefox 134

Cool for anyone not using AV1 which I assume is a big chunk of the userbase because not everyone has good AV1 hardware acceleration lol