What the hell are you talking about? We have standards almost for everything now. It’s just ARM ecosystem messed up as it were on purpose.

With apps, you can subscribe to channels, keep history, create playlist etc. Not possible with website.

Agreed. VM frontends are supposed to be powerful and feature-rich. Dumbing it down was one of the stupidest ideas, any such project could make.

Wtf are you talking about? GrapheneOS logo represents hexagon structure of Graphene, one of the strongest material on Earth. It symbolizes the strong security it offers, not a butthole.

This. Google would not be fucking us with Play Integrity and other DRM craps if Linus made the kernel GPLv3 licensed. It would have been a dreamland to have hackable phones, TVs and a whole lot of IoT devices where the users would be controlling them instead of other way around.

Fedora is very stable until a kernel update breaks a hardware function.

Who provides free cloud VM?

You can use GitHub.

No. Offline password managers are also suspectible to supply chain risk.

Same setup here. Worked for years and I’ve no plans to switch. As long as Nextcloud is up, bidirectional editing is simple. Trouble comes when one of the clients edited the KeePass file and can’t sync.

banIP works at IP layer. It basically injects additional firewall rules to nftable to reject packets from specific set of IP addresses. It is not aware of layer 7 like HTTP.

What is your goal exactly? Do you want to allow /.well-known to all countries including the bad ones you are blocking? Then you’ve to do it at application layer or setup a reverse proxy that has WAF (Web Application Firewall) and serve ./well-known from the proxy.

Good for you. I use OpenWrt on a decent router yet it’s so flexible. I can create multiple VLANs with different firewall rules, multiple APs, Ad and IP blocking etc.

Honestly I can’t imagine going back to a shitty ISP router ever.

Agree. Saying TPM is bad is same as saying Encryption is bad. It’s not about the technology. It’s about the evil hearted corporations using these technologies to limit user freedom.

I replaced Raspberry Pis with Intel NUC mainly because NUC comes with TPM 2.0. I can now encrypt my drives without storing the key in plaintext.

I could not read the blog because it blocked me for using VPN (speaking of DRMs :) ). While I agree DRM is evil and should be ablolished from user’s computers, readers should not get wrong idea about TPM. It’s what protects your phone and servers from attackers. Desktop would also benefit from it a lot.

Not only is it resource‑intensive, but Qubes also lacks Secure Boot and Wayland support. Secure Boot is critical to ensure the OS has not been tampered with, and Wayland is required to isolate individual apps running within a single VM from capturing input intended for other apps. For an average user, I would recommend SecureBlue rather than Qubes.