Excellent post, like usual with Dhole, but I feel the defense of NIST/NSA push on non-hybrid Post-Quantum Cryptography (PQC) is weak. I think the author’s arguments boil down to:

1. NSA is pushing to use it themselves, so why would they use a scheme they know it’s unsafe.
2. There’s no mathematical space to leave a NOBUS backdoor.
3. Peter Schwabe, main author of ML-KEM, used to work with Bernstein and was his Ph.D student.

My responses are:

1. They very link they used for 2., says: “[NSA is] using double encryption already.”, so they really wouldn’t be using pure non-hybrid PQC, as opposed to how they intend the rest of us to use.
2. The same could have been said about SIKE (another non-hybrid PQC proposal), yet it was found to be insecure. Furthermore, author of the cited blog with the mathematical argument for 2. works for Google, so she has a conflict of interest in the topic. However, I’m not an expert on the topic, so the mathematical arguments are beyond me.
3. I get it that Bernstein has a toxic attitude, and thus a toxic community that follows him, so I guess this was added to shut up a lot of incoming toxic responses that simply link to Bernstein’s blog. But yet, I can only see this as such an irrelevant tangent to dismiss criticism.

I hate modern tech. When I was naiver I would see this project as incredibly cool and fascinating; I still think is very cool from a technical perspective. But knowing where and how it’ll be used, is just sad.

That’s the device’s cost, no matter if you install GOS on it or not.

That’s the phone price irrelevant of what OS it has. Graphene team said cheaper compatible models are coming.

The world was bad, it will be worse thanks to LLM. Both things can (and IMO, are) be true at the same time.

Click the “Show legacy phones” or something similar. Some cellphones were supported, but no longer receive updates, so they do not appear in the supported list unless you explicitly tell the page to show them for you.

Maybe run it behind a reverse proxy and use that for auth.

Sidenote: if you dualboot, I can’t recommend enough setting up a desktop entry which runs this command:

Excuse my ignorance, but what’s the difference between this and GRUB?

And lossless compression.

I’m 100% not joking, I once was stuck the the proof of a theorem for a whole week going at it and still wasn’t able to prove it… until I dreamed of the solution, woke up at like 3 am, quickly wrote a skecth of my dream’s proof and went back to sleep. The following morning I checked that path and boom, there it finally was the solution.

Weirdly enough, this happened twice, although that second time I didn’t woke up at 3 am, just in the following morning as usual.

¡Gracias por crear contenido! :)

Only if I had something like a Graphene phone, but with the prices incumbent in their current Motorola deal, that’s about a decade away.

For what it’s worth, you can explore the second hand market for cheaper Pixels + not giving money directly to Google.

Just a heads up, Ecosia relies on you clicking on Microsoft and Google provided ads for its revenue.

From there FAQ:

Do we plant trees if we don’t click on ads?

Like other search engines, we make money when people click on the ads shown in our search results. […]

How does Ecosia compare to other search engines?

[…] We provide industry standard search results together with our partners Google and Bing. […]

Coca-Cola hired a paramilitar death squad to murder unionized workers in my country :)

https://killercoke.org/crimes_colombia.php

Financing a paramilitar group is considered a crime against humanity, btw.

The author does not work for Microsoft

My bad, it was the PR merger that works for Microsoft, not the author.

nor he did add this field to “other open source projects”

Yes he did. He did several PRs using/collecting that field:

• archlinux/archinstall. This one is for a required field at install, not an optional one.
• canonical/ubuntu-desktop-provision
• another one in the same repo.
• yet another one in the same Canonical repo
• accountsservice

People just love to hate anything systemd related

Agree, and I actually like systemd, but I don’t see the relantionship between that and my comment.

Worth mentioning that California’s and Brazil’s age verification laws were cited as a motivating factor in the pull request, the pull request author merger works for Microsoft and the author also did similar pull requests in other open source projects.

Edit: it was the PR merger that works for Microsoft, not the PR author.

Can confirm link now works. Thanks and congrats.

My favorite one was increasing the font size for the ending dot on all paragraphs .

So subtle and efortless to do yet very practical.

Science: Carl Sagan

I have a similar use-case.

What I did for the VPN was to use Wireguard. I configured it using wg-easy, and it’s, well, very easy. What your need to do is:

1. Install wg-easy via Docker.
2. Configure it and create a profile.
3. Open ports in your router to allow port-forwarding the Wireguard tunnel.
4. (Optional). Install a Wireguard client on your cellphone. I use “WG Tunnel”, a FOSS client. Note that the author of the app is a bit of a religious nut, If you care about that kind of stuff.
5. Scan the profile QR generated in wg-easy on your WG Tunnel.
6. Increase the “PersistentKeepalive” parameter to something like 30 seconds in WG Tunnel. This will increase the tunnel’s resiliance to disconnections due to small packet losses; without that, Jellyfin/Navidrome will constantly disconnect.
7. Open Navidrome/Jellyfin, and done :)

Let me know If you have any questions, glad to help.