thanks, i'll look again. it's not that i love the idea of being fingerprinted; i just think that five mylar bags, four tin hats and a partridge in a pear tree won't save me from that. i need my password manager, and once that's in, enforcing a generic screen is silly - cow's out of the barn. but not having the arms race against pocket and telemetry would be a big bonus.
i did try that but the never-dark mode blinded me. i understand the reasoning, but absolute anonymity isn't my own threat model; i'd like to be able to use themes and resize the window
neo store refuses to run if you don't grant it the right to send notifications and bypass battery optimizations. if an app demands a permission and doesn't have a plausible explanation why it needs it, i don't keep it :/
It exists, it's called a robots.txt file that the developers can put into place, and then bots like the webarchive crawler will ignore the content.
the internet archive doesn't respect robots.txt:
Over time we have observed that the robots.txt files that are geared toward search engine crawlers do not necessarily serve our archival purposes.
the only way to stay out of the internet archive is to follow the process they created and hope they agree to remove you. or firewall them.
i am not sure it's a flaw at all. the conditional tag syntax is based on opening_hours, which should be able to express 'closed at these times until that date'. there are ways to finesse this. but as long as the published guideline is 'don't do this', there's little point pondering practical solutions.
n.b. paywalls hate the way i have my machine configured, and i only post links i'm actually allowed to read (i was very surprised i could read this one, frankly). sorry you got walled 😡
osmand has great map support. real-time nav for transit isn't an osm strength - i haven't seen an osm app that integrates live traffic or transit
this album is the one i know the least, as i've allowed. but i thought she had made a point of standing by lyrics that haven't aged perfectly. or was that us making the point, not her?
putting a different rom on a samsung is something they don't allow. not to say it can't be done, but it's above my pay grade. eventually i'll get a different phone.
i disabled a bunch of stuff using adb
and pm uninstall -k --user 0 package
. i won't list it all here unless someone asks - everyone's list will be different, and just disabling things willy-nilly can break stuff.
i have nextdns (a paid service). this is configured as the phone's private dns provider.
- my router intercepts all unencrypted dns, to any address, and handles it using nextdns.
- my router rejects all traffic to 8.8.8.8 and 8.8.4.4, which are the google servers most commonly used by bad actors to bypass restrictive dns.
i haven't checked lately for suspicious connections to other dns providers. i think cloudflare and quad9 may have similarly obvious ip addresses for dns that should be blocked.
my nextdns config rejects the samsung-related domains below explicitly, and has the 'native samsung tracker' enabled also.
*.gos-gsp.io
*.hiyaapi.com
*.ospserver.net
*.picks.my
*.samqaicongen.com
*.atlas.samsung.com
*.dqa.samsung.com
*.mcsvc.samsung.com
*.samsungapps.com
*.samsungdm.com
*.samsungknox.com
*.samsungrs.com
*.samsungcloud.com
*.samsungosp.com
*.samsungvisioncloud.com
the keepassxc ssh-agent is an absolute lifesaver
very high level, you should at least read up and consider it. the amount of attempted telemetry coming off our windows laptop is probably 5x our mac laptop. there's a ton of variables in config, so i say 5x not as something scientific, but woah, half an order of magnitude.
this is desktop - no iphone here so can't speak to that, but suspect much less difference
you probably already found this, but for others who might be curious:
https://molly.im/
https://github.com/mollyim/mollyim-android