In my experience, once you’ve got Arch set up, it less work to maintain than Manjaro. On Arch, you have noticeably more frequent, but smaller, package updates. On Manjaro, compatibility issues with the AUR may occur, which happened a few times for me, while that won’t happen on Arch.
Keepass allows you to use a passphrase in combination with a randomly generated keyfile. You only need to copy the keyfiles to your devices once (not via cloud services, obviously). Your actual database can then be synchronized via any cloud provider of your choice (hell, you could even upload it publicly for everyone to see) and it would still be secure.
Is “I use zsh, btw.” a thing yet?
Doesn’t prevent the initial crash, of course, but there won’t be one on the next boot.
That depends a bit on the ruleset. According to Guinness (where hyperventilating with pure oxygen beforehand is allowed), it’s 24:37.36. According to the freediving organisation AIDA (where pre-breathing oxygen isn’t allowed), it’s 11:35
What distros are there that have drive encryption but don’t require decrypting the drive while booting? Isn’t LUKS pretty much the standard disk encryption for all Linux distributions?
Yes, but the tendency is there. Notably, “Alea iacta est” (commonly translated as “The die has fallen”) is closer in literal meaning to “The die has been thrown”.
Telegram being next to Signal is also questionable.
As someone who started out with Manjaro and used it for a bit over two years, it does its job alright.
That said, Manjaro’s “let’s use Arch repos but delay them for two weeks” policy leads to compatibility issues with the AUR.
Also, they’ve repeatedly let their certificates expire (happened like 3 or 4 times, iirc) and there’s been some management controversy, especially surrounding Jonathon leaving.
If you want “Arch, but beginner friendly”, there’s better options than Manjaro, imho.
Can’t have jury nullification if you don’t have juries.
Fwiw, OpenStreetMap is pretty amazing
Yes, it’s usually still available, but systemd timers are the more “modern” way, which is why distros like Arch use them by default:
There are many cron implementations, but none of them are installed by default as the base system uses systemd/Timers instead
but it will make the planet a lot less habitable for humans.
And, unfortunately, for a wide range of other species.
Nope, it still works on my phone. Do you have the newest F-Droid version?
they all went dark
A couple of them (such as Infinity) were granted an extension and still work.
And lastly the fact that Signal is the only CA means that they can use a machine- in-the-middle attack on their own users and there is no way to protect against it.
As I mentioned in my comment, it doesn’t - if the users verify each other’s “security number”.
I have to say that some of the points on that site are outright ridiculous.
First off, they quote the privacy officer of the German protestant church, who has no technical background according to his own bio:
"… when using Signal, data protection concerns remain, especially because this service processes personal data of its users outside the scope of the GDPR. The use of this messenger service can therefore not be recommended.”
Not sure what that’s supposed to mean, because the GDPR applies based on user location and not company location. Although I’m going to grant that having servers in US jurisdictions may be a concern.
And he goes on to say that Threema (for profit, proprietary server code and (at the time) client code) and SIMSme (for profit, fully proprietary) are preferable over Signal because of the jurisdictions they’re in. Not sure about anyone else, but I’m going to trust the open source software more, regardless of what jurisdiction the servers are in.
I do have to give him credit for recognising a “self-hosted messenger service based on established and freely available protocols on federated servers” as the best option, though.
negative: actual server software used does not have to match the version published on GitHub
Fair, but how many other messaging services publish server code at all?
negative: terms of use (external) as well as privacy policy in English only
I suspect there’s very little overlap in the Venn diagram of people who use (or even know of) Signal and people who don’t speak English.
negative: weaknesses in authentication for encryption
This boils down to users trusting Signal as a certificate authority and not verifying their contacts “security number”. Fair point, but a user can still choose to use Signal in a way that removes those weaknesses.
Of course, since we’re on a federated service, I expect people to jump on the chance to recommend Matrix/XMPP instead, but realistically, I’ve had much more success getting people to use Signal. And apart from federated messengers, I’m not aware of anything better than Signal.
It’s based on Firefox, but those modifications do have a rather large impact in terms of privacy.