• 2 Posts
  • 80 Comments
Joined 2 years ago
cake
Cake day: March 19th, 2024

help-circle

  • communism@lemmy.mltoPrivacy@lemmy.mlSignal in 2026?
    link
    fedilink
    arrow-up
    11
    arrow-down
    1
    ·
    18 hours ago

    As per usual, the answer is “depends on your threat model”. For a lot of sensitive communications, the centralised design and therefore ability to correlate metadata is a no-go. But if you’re just using it e.g. as a WhatsApp replacement to message your friends, it’s fine. It’s still the most polished and normie-friendly e2ee foss messenger.



  • If you want to learn more then do LFS. I don’t think Gentoo teaches you much more than a manual Arch install. But very few daily drive LFS. It’s hardly practical. Gentoo is daily drivable but if you don’t care about compiling all your own packages then I don’t think it’s for you.

    I’d say just do LFS on an old laptop or a VM.






  • communism@lemmy.mltoTechnology@lemmy.worldBitwarden 100% price increase
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    26 days ago

    I’ve had my VPS exposed to the internet for a while and never been pwned. No professional experience. Use SSH keys, not password authentication. Use FDE if physical access is in your threat model. Use a firewall to prevent connection on internal-only ports.

    Vaultwarden will store your passwords encrypted (obviously) so even if your database does get stolen, the attacker shouldn’t be able to read your passwords without your master password.




  • Signal is fine for normal/social chatting. It is centralised which makes it much harder to obscure identifying conversation metadata, and I wouldn’t recommend it for comms with a state threat model. I like SimpleX for addressing those issues.

    If you just want to chat to friends and nothing else, I probably would recommend Signal for the most polished experience and most widely adopted open-source private messenger.







  • Most people who build software from source do it for reasons other than trust. Could be for fun (I imagine the main reason why people do Linux From Scratch), could be for the same reason that compels some people to use Gentoo lol. OP didn’t say what their motivation was.

    edit: nvm, in other comments OP has said they’re concerned about an xz style of backdoor. In any case, I would still be interested to read about someone trying what OP is suggesting.