• 7 Posts
  • 254 Comments
Joined 2 years ago
cake
Cake day: June 22nd, 2023

help-circle




    1. There’s data-sharing agreements with more than just the N eyes countries
    2. If there’s an international warrant for that data the company is obliged to comply regardless

    The only countries in which n° 2 doesn’t apply for the US are countries you really don’t want your data in either.

    In short, however: if a government really wants your data it will find a way to get it no matter where you store that data, so the best thing is to simply not store that data at all, Mullvad and Signal don’t do that.


  • I mean maybe but you could also just say “we did some whacky shit here help us fix it please” and let the community help you in the effort. That’s the beauty of open source. Then again they may have their reasons and frankly I’m not even interested in a TikTok like social media so w/e as long as they don’t eat up their word it’s fine.


  • EuroNutellaMan@lemmy.worldtoFediverse@lemmy.worldHappy #GlobalSwitchDay
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    3 months ago

    Jurisdiction is not that important. Even if it was in Switzerland it’d have to comply with international law enforcement and warrants. The key is that sure Signal is obliged to give out whatever data it has, but the point is that it doesn’t have much useful data to give. It’s the same as Mullvad, and a far smarter approach than “lol we just gonna ignore the warrant huhuhu look at us we host somewhere in Shitzerfuck” (oh btw “We are in X country which is not in N eyes” is just marketing).

    Oh and btw the same goes for instances of the fediverse (which are ran by volunteers you need to trust), and if they don’t comply and the US government really wants to break into them they probably will find a way. Doesn’t even need some complicated backdoors or anything it just needs to find an OPSEC slip-up, do some social engineering, arrest someone or at worst find a bug to exploit, and I can guarantee that unless you have some serious security wizards running your instance you’re not beating the FBI there and if the FBI is really persistent and focused on you for some reason then the wizards won’t be enough you need state actors.

    If your threat model actually includes the US government (aka you’re actually in danger and not some paranoia or just-in-case situation, be realistic with yourself) and there’s credible threats you may be targeted by it or other governments then you’re probably going to be using tor, briar, all that jazz, and wouldn’t be on lemmy. If you’re just some guy who just needs to message your family and shit Signal is perfectly fine, I can tell you that unless you’re a serious threat to the government they won’t waste resources cracking down ways to capture you via signal or whatever you use that is even somewhat secure (so no telegram, no WhatsApp, no messenger, etc), even if you’re a minority or activist, if not because you’re not important enough then because they have other easier ways to do it.

    Edit: oh and btw Signal was banned in Ruzzia (a country way more authoritarian than the US currently is) because the FSB couldn’t crack it so that goes to show it is pretty secure.









  • Chafa - I can turn pictures in ANSI art for my terminal

    Syncthing - A godsend for me and I can’t believe how easy it is to set up and have it just work, I was almost disappointed when I was setting it up expecting issues and then the mf just works perfectly fine without issue

    Tailscale - Very useful to remotely ssh to my computer(s) even from my phone

    Termux - terminal on android

    This one you may have heard of and it’s not exactly niche, indie or small but I’ll add it anyways just in case: Too Good To Go - allows you to get cheap food and save it from going to waste. I use it a lot when I can’t go to the university cafeteria and don’t feel like cooking





  • that’s because you can’t have both. It’ arch or it’s very stable. Granted Arch by itself is not that unstable if you manage it well and know what you’re doing but we’re talking hardly ever having to troubleshoot something.

    Manjaro doesn’t acieve any more stability than Arch, and in fact is actually worse than arch.

    Debian testing is a rolling.

    Manjaro is an arch derivative and has the bad parts of arch still. Again, why recommend manjaro when you have better alternatives that actually achieve what manjaro sets itself out to be? Fedora had KDE plasma 6 sooner than Manjaro afaik and it managed to be stable, it is a semi-rolling with up to date yet stable packages etc, same for OpenSUSE Tumbleweed. Manjaro has no purpose, it’s half-assed at being arch and it’s half-assed at being stable.

    AUR isn’t a problem in Manjaro because of lack of support, it’s a problem because packages there are made with Arch and 99.999% of its derivatives in mind, aka latest packages not one week old still-broken packages. Also Manjaro literally accidentally DDoSes the AUR every now and then because again they’re incompetent.

    And if you’re going to be using Flatpaks then all the more reason to not bother using Manjaro or any arch derivative and just use an actually stable distro with flatpaks.