Note: This setup is both for my android and pc Edit: For those recommending paid services and selfhosting, I don’t have the money nor resources for either. Also it seams some people are confusing my android setup with my PC setup so I’ll write it down. Android: Brave(movies) + Ironfox, Search: Brave + DDG, VPN: Proton ( not always on), GPay = Cash, Auth= Aegis Auth, Pass: KeepassDX, PC: Firefox= Librewolf, VPN = No VPN (VERY slow internet), Search: Searxng + DDG, Pass: KeepassXC,
Arch’s recent stance on age verification, and specifically how they said it, has made me switch off of Arch for good, which is… Unfortunate, since it was the first distro I truly loved. Gentoo is what I use now, but that’s a bit farther down the line. I don’t know a good rolling release distro that’s not super inconvenient, unfortunately.
Brave is… Not great. Bad, even. I prefer Vivaldi for my Chromium fork. Mullvad browser for my Firefox fork (I also just. Refuse to use Firefox proper anymore because of their AUP). Note that one of Mullvad’s CEOs donated to a Swedish far right party, so… Make that decision how you will. It’s a free browser, so… Meh.
My default search engine is Wikipedia. When I want to use a general search engine, order of operations is Marginalia, then Startpage, but SearXNG is a good one. I just found it a bit more inconsistent.
Tuta’s a good provider, I just needed a client because I don’t check my email otherwise. I’m on mailbox.org now because of that. They’re cheaper, and private email is kind of a farce anyway. Also mailbox is cheaper, assuming Tuta doesn’t have a free plan now. Given you said you’re not using paid apps, they might?
Would switch Organic Maps to its fork CoMaps. (See: this open letter)
And I would never recommend Brave as the first choice; it’s run by a shady corporation and reinforces Chromium’s hegemony.
I think it’d also be reasonable to add ProtonMail to email and Mullvad to VPN since you can have multiple.
How about OsmAnd? Is that still a decent project without world domination plans? I actually have CoMaps as well, but have sort of stuck to using OsmAnd.
Yeah, OsmAnd is really good; it’s what I use as my daily driver. CoMaps/Organic to me feel too limited, but some people may like that.
(I use Vespucci for editing on Android.)
Its installed in my android head unit in my car, and it just works, and there’s a lot (and I mean a lot) of stuff it can do, so I really enjoy it as my daily driver (ha! Get it?) in my car.
I think OsmAnd is great, but I personally prefer the cleaner feel of CoMaps. Just preference.
Something I’d suggest if OsmAnd feels too cluttered for you is to change the settings; OsmAnd lets you change a lot, but one of the ones I do is to change “Map Style” to Osm-Carto.
Carto, for context, is the vector map that you’d find by going to the OSM website. Much cleaner color scheme, imo.
dont use brave
Can you tell me why? I found out ddg was just repackage bing results so I’ve been trying brave for now.
It includes a lot of crypto bullshit, and I believe the founder is a right wing weirdo, but don’t quote me on that.
To also point out the good stuff: their browser has some pretty good anti-fingerprinting and privacy measures build in.
Arch BTW… 😎
Close to what I normally use. I prefer CoMaps instead of Organic, Mullvad VPN instead of Proton & Artix instead of Arch.
open source software ≠ privacy
though it is preferable. 3rd party verification of closed source can be accepted in some cases.
My recommendations:
Organic Maps -> CoMaps (they got forked because of some bad decisions.)
Brave -> Helium (has full uBlock Origin and Ungoogled Chromium patches, and no crypto bloat)
LibreTube -> PipePipe (has some nice features like live chat, and less buggy in my experience)
LibreOffice -> OnlyOffice (has better Microsoft Office compatibility, and easier to use in my experience)Disable your third-party DNS, that only works to make you more identifiable as you’re already using a VPN. You can also use Syncthing to sync your password vault etc. between your devices. I’d also recommend using Posteo instead of Tuta because it is cheaper and its privacy policy is kinda better.
For DNS I use Pi-hole with Unbound which is used to contact the DNS root servers directly and recursively find IP-addresses. The first lookup becomes a little bit slower than through say Google but the IP is then cached locally and then it actually becomes faster. This is also more private since it doesn’t require a third-party DNS resolver.
I would go with SimpleX instead of Signal since it is very secure and you can self-host the server. There are no user IDs. Here is the official website: https://simplex.chat/
the onboarding for family & friends on simplex is too much - Ive had much better luck with deltachat
That is true. I have only managed to convince my wife to use it but I had to set it up for her. Now we can chat about what to eat for dinner securely though 😄
Any chance you found a way to encrypt local app caches?
What privacy concerns are there with using your ISP DNS? (honest question, not judging)
ISPs not only have a monopoly on connectivity and bandwidth prices - which they severely abuse by the way, considering the actual operational costs - but they also have everything to gain on analyzing your traffic, DNS queries being one of them. They already have a bunch of personally identifiable information (PII) on you (full name, date of birth, banking information and, in some countries, even social security number). Linking that PII to your DNS requests (read: what websites you visit) and selling that to data brokers is a pretty low effort sweet deal. Long are the days gone when ISPs only provided Internet service.
Texts on the topic:
- https://mullvad.net/en/help/all-about-dns-servers-and-privacy
- https://labs.ripe.net/author/babak_farrokhi/is-your-isp-hijacking-your-dns-traffic/
- https://www.howtogeek.com/why-dns-betrays-your-privacy-and-how-dnscrypt-stops-it/
Videos on the topic:
In my country they implemented national wide surveillance in the network infrastructure and they keep track of everything Edit: that’s why internet is very slow
dns requests flowing through your ISP means they know where you (want to) go and 3rd parties can potentially determine identity based on certain aspects (date time of request, how many, etc) can matter to law enforcement, surveillance/state efforts, hackers and beyond) because ISP may not govern well or, hell, wven sell those requests or just 3rs party manages it without your knowledge etc )
it’s better to have a known good dns provider that can offer a little trust but realistically nothing is 100%…
Depends where you are, and what laws your ISP is required to follow with regards to blocking/tracking. Personally I like Quad9.
Your ISP can see what websites you visit. But even if you change DNS server it can still see that if you don’t use either a VPN or DoH/DoT.
So it’s a good idea to use DoH or DoT. It’s an improvement but it’s far from perfect because the DNS server you’ll pick will see what site you visit, you have to trust them. And your ISP still has other ways to see which site you visit.
They can still see what sites you visit even with Secure DNS though. That only blocks your ISP from seeing what domain names you’re connecting to, but they can still see the IP addresses. It’s useless, unless you’re using a VPN in which case it is worse for your privacy as it makes you more identifiable than just using your VPN’s DNS.
deleted by creator
Self-hosting Immich as an alternative to Google Photos is amazing, I love it!
Pretty solid. Too solid in fact. How long ago did you start the process?
What alternative did you find for gmap?
2-3 months ago. Gmap has a lot of alternatives
this is not good. stuff like google calendar and photos are cloud service, a local app isn’t a replacement and there’s so many good ones. brave stuff just injects their affiliates and ads and has paid models, plus is led by someone with very questionable views. arch linux as windows replacement is objectively a bad choice as first linux distro. keepass is great but again offline.
yeah, if you want privacy, de-cloud. even google photos is private if you never connect to the internet. we should recommend less bad alternatives with comparable features, talk about compromises and use cases, and generally avoid making such eye catchy “privacy packs” which don’t work for most and are honestly a circle jerk for who already solved their privacy needs
also there’s no private AI. your local model is built on stolen data, so if you care about our privacy and not just your own stop using ai crap or kindly fuck off back to your favorite techbro
- If you object then recommend something or help.
- I only use Brave for movies because its faster and my internet is slow.
- Its not my first time using Linux, I’ve tried Ubuntu, CachyOS, and Arch and with them KDE, Hyprland, Gnome and many others.
- That’s what I’m trying to do, reduce cloud storage usage.
- I used this “eye catchy privacy packs” because its easy to make. (And its powered by ente
- I know there is now private AI, I don’t use them often but i try and use ones with good privacy policy and I don’t have money to bay a powerful PC hell even my phone is stronger
- Lastly If your this angry go and take a walk instead of crashing out at people and wasting their time.
