

I don’t quite understand the problem this protocol solves that existing solutions don’t, to be honest. I think it would be great to add what problems it solves in the document.


I don’t quite understand the problem this protocol solves that existing solutions don’t, to be honest. I think it would be great to add what problems it solves in the document.
If by malware you do genuinely mean those that exploits vulnerabilities on your system to gain unauthrorised access (as opposed to apps that have heavy telemetry), I think apps from official sources are sufficient like Play Store or F-Droid. Malware will usually ask you excessive number of permissions. Deny them whenever possible. Installing them in second profile would make the damage contained.
But since you said degoogling, I would go with F-Droid, or directly from GitHub, where most apps are open source. Obtainium is a great tool to manage those applications. Last but not least, denying network access can block some telemetry on apps that don’t require network to function.


I do it, but with the toothbrush. There definitely is a difference between scraping it and not scraping.
Looks like wrong link? It points to reddit.com only.


Yeah, it’s annoying. There’s so many standards and repos, so devs end up with that gigantic version chart showing the version of their program in each repo.
Reminds me of Torvald’s talk about application packaging years ago. Still relevant.


Some programs recommends you to download it like that. Frida is one.


I noticed it like last week, but it’s been a while since I visited XKCD back then. Probably recent.


Facing, but I use handheld one so I can point it anywhere I want. I was surprised this wasn’t common in UK even though it’s fully compatible.


That’s fine as long as you’re okay with typing it in every now and then. I would find it tedious to be honest. Past a certain point, additional security is meaningless.


You should not use lockscreen password as your master password. Chances are, your lockscreen password is much simpler than your master password. Reason why you can get away with it is because your mobile devices usually have some form of well-integrated isolated environment that can throttle brute force attacks. Your password managers probably cache your vault offline, which may be vulnerable to brute force attacks unless it utilises TPM in some way. Same goes for FDE. Online vaults probably have some sort of rate limiting so that isn’t much of an issue.
One thing I strongly recommend is being realistic with your goal. Current scheme seems a bit too paranoid.


Yeah, it’s common, especially in programming. It’s true that searching on Google usually solves the problem, but the biggest issue is that it’s hard to know the exact word you need to use. They know the word so it’s trivial for them, but that’s not the case with others, and they’re proud that they’re out of touch with people.
As much as I prefer lock-in free methods, Obsidian or any other note taking software I’ve seen does not come close to covering full set of what Notion has to offer in terms of features relevant to note-taking. Inline Kanban, tables, and just about every single things that cannot easily be represented in text and images are usually not covered. Also: collaboration, synchronisation, sharing. Lack of vendor lock-in is secondary.