This video has a lot of self-hosting and somewhat advanced stuff being mentioned, but if all you want to do is start dipping your toe into Linux then it’s not nearly as hard as you’d think. I would try running Linux in a VM (i.e. VirtualBox) to get a feel for how it operates and build up confidence that way, as well as maybe watching some videos on how people set up and use their Linux etc. It will be a learning curve, but as long as you pick a beginner-friendly distro (e.g. Linux Mint) it’s really no more difficult than if you started using Windows for the first time. Keep backups of your data and/or put Linux on a secondary computer and you should weather the initial few weeks just fine.

On the upside, when you have problems in Linux there will be logical solutions with answers that can be searched for, whereas in an OS like Windows or Mac the solution is probably “I dunno! Reinstall?” or “You just can’t do that, sorry”. It’s also understandable if you don’t want to touch anything complicated, but I do think one of the best parts of Linux is really just getting messy, making mistakes, and learning. Because things in Linux make sense, over time you’ll learn how to use a computer again. I feel strongly that Windows/Mac/Android/iPhones have (intentionally) dulled the average person’s computing skills and put them into a state of learned helplessness. Everyone thinks computers are complicated wizardry because nothing on those proprietary operating systems makes logical sense, and trying to troubleshoot anything results in wasted time and frustration.

Pretty good video. It’s not like he explains how to do anything or even picks very good software to begin with, but his genuine excitement is really all that’s required. Getting people interested is the important part, and they’ll learn much better by using their own motivation. This video also gives off a strong “I’m an idiot, and if I can do it you can do it” vibe which can be really reassuring to those who are just too intimidated to even dip their toe in.

That really seems like a structural problem to me. Break it out into more-focused teams, signify important people whose messages you should pay attention to, or use threads to consolidate topics. If those things aren’t being done and there’s just 50+ people dumping information then the information can’t be deemed important. Adding AI to patch the issue is poor management at best and introducing poisoned information at worst.

I know this is not a unique sentiment by any means, but it makes me legitimately angry to think of participating in a conversation where someone else is using this. If you don’t want to read my messages why are we even connecting; imagine clicking “summarize” on someone genuinely trying to talk to you. “Sorry, the AI hallucinated that you were going to finish the rest of the assignment tonight.” and a year later “Sorry, I forgot all the nuances of who you are as a person because an AI didn’t think they were relevant.”

As a commenter on that post says, this sort of talk is also common in the comments of Phoronix articles. The commenter says they’ve completely stopped supporting Phoronix since it’s clear that Michael enables this behavior by not moderating it (the least he could do is disable commenting; the type of people that are in the Phoronix comments are the absolute worst). It’s been festering for a very long time, unfortunately. Click any Phoronix article that’s older than a day and check the negativity. Worse, click an article about a controversial topic like X11/Wayland/Systemd/bcachefs/KDE/GNOME/etc. and it’s just a shitshow.

I’ve been seeing it to a lesser degree here as well. I don’t know what it is about X11 that really riles up the conspiracy theorists.

Mailbox.org is a good pick to consider IMO. You can read some comparisons on PrivacyGuides, which I also recommend as a starting point for these sorts of topics. The mailbox.org web UI is not great, but it allows IMAP/SMTP access, so I use Thunderbird on both desktop and Android in order to interact with my inbox. My inbox is auto-encrypted with PGP using their Mailbox Guard thing, so my emails are all encrypted garbage on the web UI anyway. Mailbox.org only allows paid-for accounts, but considering the annoying stuff that Proton and Tuta do to their free accounts I’d rather just be honest about the service I’m getting. It allows auto-forwarding directly in the web UI, but given that you can hook up to it with IMAP anyway, it’s not like you couldn’t just do it yourself.

(Also, as another comment said I also recommend DuckDuckGo’s Email Protection for email aliasing if you need it.)

The straw that broke the camel’s back for me is the CEO’s icky tweet about how great Republicans are for your privacy and how they stand up for the little guys (what), which they doubled down on using the official Reddit Proton account. There’s already been a ton of discussion about this on the internet if you care to look for more angles on it.

But before that I’d already grown quite leery of them for their trend of endlessly starting new services before the old ones are polished, along with trying to push everyone into their walled garden and endlessly using naggy popups in the UI about it. Worst of all, they have a clear trend of not giving a damn about Linux support, sometimes giving up on certain features for their Linux clients or releasing the clients way after the Windows/Mac versions. For a “privacy company”, not putting Linux as a first-class citizen is really just unacceptable, and they’ve been around for long enough that it’s clearly a trend and not a fluke. To me, Proton just feels like a wannabe version of Apple. Its continued actions give me the feeling that it exists to serve itself, not its users.

This was engaging and very informative for such a small piece of trivia. Will I ever use or remember this knowledge after today? Unlikely. Perfect.

I don’t support Proton for other reasons, but I’ll note that if anyone is having this problem you can use a half-measure of setting your other email address as a recovery email and enabling “daily email notifications”, which will email you once a day if there’s unread stuff in your Proton mailbox.

Oh. I’m not sure where to host images then; I know that when lemm.ee closed literally all the images that were posted with lemm.ee vanished. It gives me pause to build up the same thing again.

Edit: I switched it to lemmy.ca as a host. (I’m not sure if PieFed allows uploading images without creating a new post in the same way that Lemmy does.)

I’m a big fan of btop, and probably a big chunk of that is that the default configuration is useful and very easy to understand. I can’t be bothered to spend hours configuring a monitoring app and learning obscure keyboard shortcuts to navigate it; if I’m opening a system monitor it’s because I want info, not because I want to live in it.

You can still use it as a target for a more sophisticated backup solution though, like borg. Borg handles the versioning, integrity, and encryption, so online backup can just be used as dumb storage location. If the online backup deletes your data or locks you out, just use your other copies to recreate the backup into another dumb online storage. In this way, your online backup target doesn’t have to be very reliable, as long as it doesn’t fail at the exact same time as your other backups.

I’m not sure how much actual effort it takes to make sure Plasma keeps compiling for X11, but based on the wording from the blog post it sounds like they’re exerting pretty much as little effort as possible. I would say with the recent uptick in leading-edge distros moving to Wayland it’s only a matter of time before almost no one is left on X11, which will deprioritize it even further. Pulling the plug on X11 today is premature given how many people are still running it (SteamOS uses it by default, for example), but I think their ~2 year estimate sounds about right for letting off the gas and putting a hard stop on support.

Okay, but I did just find this game, and it’s a free game that I’m pretty sure already hit mega-popularity back a year ago, so I don’t know what advantage astroturfing on the tiny threadiverse would serve. I’ve just been having fun with it today and wanted to post about it somewhere.

Also consider that you’re adding another party that you need to trust to the chain, and also adding another point of failure if iodéOS stops releasing.

I don’t have any experience with iCloud Private Relay, but I’d be surprised if enabling it will make you un-fingerprintable (in which case what are you really trying to accomplish by using it?). Also, who are you trying to stay private from? Do you personally believe that Apple and/or Cloudflare aren’t selling or trading your data? Would you be okay with them being the only ones that control your data if they’re not selling it? It’s a nuanced topic, and likely you’re the only one that can answer your position on that. It’s cliché, but defining a threat model can help a lot with deciding how many conveniences you are okay with giving up. I would likely argue that an Android phone with LineageOS can be made more private than an iPhone, but at the cost of security. Does your threat model need to sacrifice privacy for security?

Regarding iPhone vs Android, I’ve only ever used Android, but my friends with iPhones and Macs never seem to have access to the open-source software that I use and recommend, so I feel like that’s a big part to consider also. You’ll get roped into a proprietary ecosystem where it seems like every little app is trying to charge you money and won’t show you what it’s doing behind the scenes. If you already have an iPhone I’d understand if you need to weigh the economic feasibility of buying an entire new phone just for privacy as well.

Personally, I don’t really trust anything unless I’m given infallible reason to trust it, e.g. cryptographic proofs, audits, zero-trust models etc.; in this world it seems inevitable that someone will take advantage of your trust either today or tomorrow. If someone is truly on your side, they will do everything they can to take the need to trust them out of the equation, and failing that they should make it as clear as they can what trust is still mandatory and why. If you want to trust someone that doesn’t meet these standards, you do so basically at your own risk, and you’ll have to start doing some mental calculus on what they could get from you, what they might want it for, and how eager you think they would be to start misusing it (e.g., if you pay for a service, the servicer may feel less compelled to subsidize their income by selling your data).

I’m speaking from an American POV on credit cards: getting a good credit score requires doing a lot of things that don’t really make sense. I’d just make your peace with that and play the game. Opening as many credit cards as possible, never missing a payment, and sending a small payment through each one once a year to keep them active is an extremely good way to build a solid credit score. Before you read further, please note that opening credit cards temporarily dips your credit score due to hard inquiries, but all forms of credit score dings are removed after a specific amount of time based on their severity; generally you can expect hard inquiries to go away after ~12 months.

The system encourages you to have a lot of accounts, and it encourages you to have a long average account age. People who never use credit cards may have a poor credit score due to lack of history, and people who only have ~one long-running credit card will have a fragile credit score due to the average account age being prone to literally breaking in half as soon as they open any other credit account. Opening as many accounts as early as you can will temporarily dip your score, but it will come back much stronger. Sometimes you’ll get rejected for a credit card and will still have to eat the hard inquiry, so it’s a delicate game of trying to open accounts and also trying not to appear too desperate. Having a lot of income also helps credit card companies be more amenable to your thin history.

Also as a last note since you seem like someone who “takes money seriously” enough to not be in debt: at least in America, credit cards are great for your finances as long as you pay them off. Credit cards do not charge you any interest or fees as long as you pay your balance on time, and generally you shouldn’t be applying for any credit cards that have an Annual Fee charge. It’s not too hard to get an unconditional 2% cashback card, which means they will give you 2 cents back for every dollar you spend (this doesn’t count as taxable income). You can further diversify to get specific 5% cards for your most-used categories like gas and utilities.

I’m not a security expert by any means, but here are a few things I know as a regular user:

Always keep your system up-to-date and only download and execute software from the official Arch repository if you can help it. Malware often takes advantage of outdated systems that don’t have the latest security patches, so by staying as up-to-date as possible you’re making yourself a very difficult target. The AUR is a user-based repository and is not inherently trusted/maintained like the official Arch repos, so be careful and always read PKGBUILDs before you use AUR software. Don’t use AUR auto-updaters unless you’re reading the PKGBUILD changes every time. Ideally try not to use the AUR at all if you can help it; official Arch Linux is usually quite stable, but AUR software is often responsible for a lot of the “breakages” people tend to get with Arch. If you have to run sketchy software, use a virtual machine for it, as a 0-day VM escape is almost certainly not going to happen with any sort of malware you’d run into. ClamAV or VirusTotal may also help you scan specific files that you’re wary of, but I wouldn’t trust that a file is clean just because it passes an AV check. Also, never run anything as root unless you have a very specific reason, and even then try to use sudo instead of elevating to a full root shell.

Don’t open up any network ports on your system unless you absolutely have to, and if you’re opening an SSH port, make sure that it: isn’t the default port number, requires a keyfile for login, root cannot be logged into directly, and authentication attempts are limited to a low number. If you’re opening ports for other services, try to use Docker/Podman containers with minimal access to your system resources and not running in root mode. Also consider using something like CrowdSec or fail2ban for blocking bots crawling ports.

As far as finding out if you’re infected, I’m not sure if there’s a great way to know unless they immediately encrypt all your stuff and demand crypto. Malware could also come in the form of silent keyloggers (which you’d only find out about after you start getting your accounts hacked) or cryptocurrency miners/botnets (which probably attempt to hide their CPU/GPU usage while you’re actively using your computer). At the very least, you’re not likely to be hit by a sophisticated 0-day, so whatever malware you get on your computer probably wants something direct and uncomplicated from you.

Setting up a backup solution to a NAS running e.g. ZFS can help with preventing malware from pwning your important data, as a filesystem like ZFS can rollback its snapshots and just unencrypt the data again (even if it’s encrypted directly on the NAS). 2FA’ing your accounts (especially important ones like email) is a good way to prevent keyloggers from being able to repeat your username+password into a service and get access. Setting up a resource monitoring daemon can probably help you find out if you’re leaking resources to some kind of crypto miner, though I don’t have specific recommendations as I haven’t done this before.

In the case of what to do once you’re pwned, IMO the only real solution is to salvage and verify your data, wipe everything down, and reinstall. There’s no guarantee that the malware isn’t continually hiding itself somewhere, so trying to remove it yourself is probably not going to solve anything. If you follow all the above precautions and still get pwned, I’m fairly sure the malware will be news somewhere, and security experts may already be studying the malware’s behavior and giving tips on what to do as a resolution.

They could be you! They could be me! Admittedly, there’s a higher chance that it’s me.

I haven’t used Arch in a while but from this news bulletin it looks like the [Community] repository doesn’t even exist anymore, which is where the OP article supposedly says rye-init resides.