Roles in authentik are for permissions in authentik. You want a group instead. Group memberships are send via OIDC.

Been working with Linux every day for over a decade at my job. At home I run the most boring generic shit.

Check out EFF cover your tracks: https://coveryourtracks.eff.org/

The results are very interesting. For me, the most unique thing about my browser was that I had two system languages, and so the accept-language header was very unique.

I now use vanadium (graphene OS), which simply sends made up values for a lot of headers, and so makes fingerprinting harder.

In general, you should try to be as “normal” as possible, use standard settings for everything, just accept English, etc…

I wonder how accurate you can date a picture based on jpeg artifacts and resolution.

I’m not sure if you’ve ever had a public project, but for most people, be it YouTube, twitch, github, whatever, its not so easy. Negative comments grate on you, and, over time, can really take a toll.

William Osman interviewed a bunch or creators about this: https://youtu.be/DVCpKfedfok

Its not as easy as to call people out. Some people go great lengths out of spite, doxx you, send you death threats… Is it really worth it? Not that a “fuck off” will work anyway.

You say people will join you but they really don’t. The reality is there are a ton of crucial open source projects being run by one person on the edge of burnout. See curl, xy, etc.

Money absolutely would help and I wish the EU would put additional funding into this.

I would put truenas on the NAS, also put a VM on truenas with 16-24G of RAM.

Create a kubernetes or docker swarm cluster with server 1 and the nas vm and just have everything as containers. This way you just have one resource pool, and the containers will be started wherever there are enough resources available. The containers will mount NFS shares from truenas which truenas will create automatically as ZFS datasets. ZFS supports snapshots.

This is probably the way, because a traditional “mail server” is actually 4-5 different servers working together.

• postfix for SMTP
• dovecot for IMAP
• amavis to plug in…
• spamassassin as anti spam
• clam-av as antivirus

And they can all be very easily misconfigured to break everything completely. Great learning experience though.

GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device (along with any installed eSIMs) once entered anywhere where the device credentials are requested (on the lockscreen, along with any such prompt in the OS).

No I’ve never seen this. Usually they send you an email to the admin address of the domain with the code.

Its always encrypted, just that the keys are in RAM when it runs.

In case of graphene though you can have a distress pin that wipes the encryption keys, making the phones content irrecoverable.

AES is already post quantum crypto so that sounds a bit marketingy.

I’m using it and never going back.

It’s not just the privacy aspect, but the fact that most results in other search engines suck. The first two pages would usually be ads - first the bought ones, then company websites and copywritten blogs. I get that way less with kagi. I find useful stuff faster and my brain is less polluted.

Jokes on you, using AI I got that time down to 4 hours trying to convince it to create working code, and 3 hours of debugging.

Related: https://timsh.org/tracking-myself-down-through-in-app-ads/

Unity games on mobile send your location to Unity servers every couple seconds through the Unity ad network.

Things you can do:

• GDPR Request to Unity
• use a DNS that blocks trackers, like mullvad

So for those unaware. If followed through this would be the biggest economic crisis worldwide, since the great depression. No hyperbole.

US treasury bonds are the way the US government borrows money. They are most of the debt. They are also the “safe asset”. Because it was assumed that the US, being the sole superpower and the biggest economy, would always pay back its debts. Because of this whenever organizations needed to park money super safely, they would use US government bonds.

Around 30 trillion worldwide, that is 1/3 of the world’s GDP, is held in US bonds.

You know who the biggest borrowers of US debt are? Pension funds. And you know the biggest one of all of them? Social Security. US social security holds around 3 trillion of US debt. Debt that would suddenly be worth nothing anymore.

In total, around 27 trillion of treasury bonds are held in the US by pension funds, local governments, etc. These would be gone.

Other countries would suddenly lose 3 trillion, biggest of which are Japan, China and the UK. Belgium Luxembourg and Switzerland hold a huge share compared to their economy, and could collapse completely.

But hey, at least the national debt is gone, right?

Well… No one would borrow the US money anymore. Who would trust them anymore? Likely, this would be the end of the USD as the worlds reserve currency. With that, I doubt military spending could be upheld. The US would collapse as a superpower.

Nextcloud has collabora integrated.

I would put this stuff behind VPN.

The question to ask yourself is why is cloudflare offering that service for free? Probably because they get something out of it, like analysing the data.

Seems weird to me, the router would need to do deep packet inspection of DNS and selectively block specific ones. It feels more like you’ve set up your DNS to do forwarding instead of resolution. Can you post a network diagram and the DNS config?