As a long time Graphene OS user, I can tell you they don't. Almost no banks or credit card companies have a decent website even, let alone one that can replace thier apps. So far I've yet to encounter any that have…
Also, every company I've ever worked at, including ones producing regulated products like medical or home appliances, uses the beuracracy to take the stance of "Considered Risk". Rather than spending all the tone…
BOMs are used when they're legally required or if the company has a sufficiently mature cyber security stance, but those both tend to focus mostly on shipped client code versus server-onlt code. Usually you end up with…
TPM locking is for ensuring the disk isn't removed from your machine. It's technically possible that someone could tap the hardware while the disk is still in your machine, but otherwise they're stuck contending with…
It's worth noting that at least EU vs US, most the the better quality EVs are not available. Almost all the long range and more efficient EVs are Chinese-made and are not available in the US. My understanding is that…
I struggle with this all the time. It's easy to start with some shell commands, and nothing beats the direct terminal running nature of a shell script. But at some point you get to where you need to do things shell…
You can install whatever shell you want on your system, and there are tons of better alternatives out there. Where it's actually sticky is in the lowest-common-denominator cases, when you need to throw together a quick…
`set -e` is almost never what you want in your scripts. It means "silently exit immediately if there are any u handled non-zero exit codes". The thing that trips most people up on that is subshells when your trying to…
I did the same, starting with Ergo Mode in Emacs many years ago, and ending up today with a programmable split keyboard with those keys as arrows on a layer. For when I'm on a laptop without the keyboard, I have a…
I have to say up front, that I think GrapheneOS in its most locked down mode needs to exist. There are important audiences for which most nation state actors and their related corporate entities are real threats (e.g.…
sysexts are indeed a very interesting feature, though it really only complements some other whole-system solution since it can only affect files under a non-root folder location. I'm struggling to see how sysupdate is…
That is pretty obviously how it started, and for the very reasons you describe. But there have been some other benefits that have come out of going down this alternate path as well. In particular, the remote…
CoreOS is in a weird space. It's been desperately playing catch up with it's sibling products for the last few years, but it also is where a lot of the Fedora/RHEL developers in this space are focused primarily.
In fact, if you want to use something like Nix on a UniversalBlue system, you have to spin your own. The "hotfix" and chattr solutions of pre-composefs don't work anymore. Anything that needs to go into a read only…
Basically you need a server, which you host, pay someone else to host for you, or you join am existing server someone else hosts. Then you find a client. There are a ton of clients around, but it's like picking a…
I have and it works great. The developer is very active in updating and maintaining the software (both client and server), and it already supports most of the XEPs. It's open source and fully supports self-hosted as…
One statement is not related to the other here. Getting and maintaining an active phone number privately is indeed quite hard, partially by governmental design. Signal only requires occasional/rare proof of control of…
XMPP has had less allure as "the new thing" since it's been around for a very long time. It was _the_ chat protocol in the 2000s when it started, and all chat apps used it (when AOL Instant Messenger, Trilian, Purple,…
For Matrix clients I'm given to understand the issue is the lack of XEP equivalents. Either your server(s) and clients are all on the latest available version or you're SOL. This makes third party clients effectively…
SimpleX is another option. These don't have discoverability for lay people users just joining though, which is actually a huge network effect positive for Signal in the family and friends use cases. However it avoids…
I, and all of my contacts, have the default setting for this which makes me discoverable on Signal by phone number look up, but I have phone number sharing disabled. That's the default settings. I've had no issues at…
Someone mentioned (I believe?) after talking to Element/Matrix at FOSSDEM this year that the organization has been struggling a lot to get this going. Apparently issues with thier project organization forking and…
Him, I hadn't tried running it myself, but I couldn't find any indication if anyone using it for Plex (or equivalent). I only saw people going thru complicated schemes to Terry and setup network shared drives, or…
When I tried that before, the Infuse UI was unusably show for me, likely due to the library size, streaming from my server hung for a long time, it had to transcode most of the time because so few codecs were supported…
This is exactly the issue. Even if you ignore the privacy concerns, the reason ClawdBot/Moltbot/OpenClaude got so popular is that everything was actually run locally. The early adopters where people on locked down…
As a long time Graphene OS user, I can tell you they don't. Almost no banks or credit card companies have a decent website even, let alone one that can replace thier apps. So far I've yet to encounter any that have…
Also, every company I've ever worked at, including ones producing regulated products like medical or home appliances, uses the beuracracy to take the stance of "Considered Risk". Rather than spending all the tone…
BOMs are used when they're legally required or if the company has a sufficiently mature cyber security stance, but those both tend to focus mostly on shipped client code versus server-onlt code. Usually you end up with…
TPM locking is for ensuring the disk isn't removed from your machine. It's technically possible that someone could tap the hardware while the disk is still in your machine, but otherwise they're stuck contending with…
It's worth noting that at least EU vs US, most the the better quality EVs are not available. Almost all the long range and more efficient EVs are Chinese-made and are not available in the US. My understanding is that…
I struggle with this all the time. It's easy to start with some shell commands, and nothing beats the direct terminal running nature of a shell script. But at some point you get to where you need to do things shell…
You can install whatever shell you want on your system, and there are tons of better alternatives out there. Where it's actually sticky is in the lowest-common-denominator cases, when you need to throw together a quick…
`set -e` is almost never what you want in your scripts. It means "silently exit immediately if there are any u handled non-zero exit codes". The thing that trips most people up on that is subshells when your trying to…
I did the same, starting with Ergo Mode in Emacs many years ago, and ending up today with a programmable split keyboard with those keys as arrows on a layer. For when I'm on a laptop without the keyboard, I have a…
I have to say up front, that I think GrapheneOS in its most locked down mode needs to exist. There are important audiences for which most nation state actors and their related corporate entities are real threats (e.g.…
sysexts are indeed a very interesting feature, though it really only complements some other whole-system solution since it can only affect files under a non-root folder location. I'm struggling to see how sysupdate is…
That is pretty obviously how it started, and for the very reasons you describe. But there have been some other benefits that have come out of going down this alternate path as well. In particular, the remote…
CoreOS is in a weird space. It's been desperately playing catch up with it's sibling products for the last few years, but it also is where a lot of the Fedora/RHEL developers in this space are focused primarily.
In fact, if you want to use something like Nix on a UniversalBlue system, you have to spin your own. The "hotfix" and chattr solutions of pre-composefs don't work anymore. Anything that needs to go into a read only…
Basically you need a server, which you host, pay someone else to host for you, or you join am existing server someone else hosts. Then you find a client. There are a ton of clients around, but it's like picking a…
I have and it works great. The developer is very active in updating and maintaining the software (both client and server), and it already supports most of the XEPs. It's open source and fully supports self-hosted as…
One statement is not related to the other here. Getting and maintaining an active phone number privately is indeed quite hard, partially by governmental design. Signal only requires occasional/rare proof of control of…
XMPP has had less allure as "the new thing" since it's been around for a very long time. It was _the_ chat protocol in the 2000s when it started, and all chat apps used it (when AOL Instant Messenger, Trilian, Purple,…
For Matrix clients I'm given to understand the issue is the lack of XEP equivalents. Either your server(s) and clients are all on the latest available version or you're SOL. This makes third party clients effectively…
SimpleX is another option. These don't have discoverability for lay people users just joining though, which is actually a huge network effect positive for Signal in the family and friends use cases. However it avoids…
I, and all of my contacts, have the default setting for this which makes me discoverable on Signal by phone number look up, but I have phone number sharing disabled. That's the default settings. I've had no issues at…
Someone mentioned (I believe?) after talking to Element/Matrix at FOSSDEM this year that the organization has been struggling a lot to get this going. Apparently issues with thier project organization forking and…
Him, I hadn't tried running it myself, but I couldn't find any indication if anyone using it for Plex (or equivalent). I only saw people going thru complicated schemes to Terry and setup network shared drives, or…
When I tried that before, the Infuse UI was unusably show for me, likely due to the library size, streaming from my server hung for a long time, it had to transcode most of the time because so few codecs were supported…
This is exactly the issue. Even if you ignore the privacy concerns, the reason ClawdBot/Moltbot/OpenClaude got so popular is that everything was actually run locally. The early adopters where people on locked down…