boredsquirrel

Linux, FOSS, Open Network Location, Environment, GrapheneOS.

If I recommend something, I own it. Ask me to share it with you!

If you like what I do, tip me some Monero!

SimpleX: https://smp9.simplex.im/a#kChap3XWn8-H9KnQvlBZgVw1xmfBgETwwKWXH1qlshU
Monero XMR: 87ZN8URUY1M6GoXpxou4siDKJkLbLKDhT2RScrauzd4gbRyKgoY2ZX3Ut9WuMtkWebisViSE9EVRzVA1SD4kMdtAUPMiZBC
Briar: briar://acumiwj2x6yspnkmslxfnsrqvo3b2m7ibo4xqk2o7nkeahcceqcfy
Codeberg: https://codeberg.org/boredsquirrel

Public Key

npub16962zl9d6a8hfhqnuazd6k7q6wh3cy9xp3htzvxqhdez09l8qxps725zzp

NIP-05 Address

rhababerbarbar_at_tux.social@momostr.pink

Profile Code

nprofile1qqsdza9p0jkawnm5msf7w3xat0qd8tcuzznqcm43xrqtku38jlnsrqcprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnthrh6wm

Publishing to

relay.momostr.pink

Author Public Key

npub16962zl9d6a8hfhqnuazd6k7q6wh3cy9xp3htzvxqhdez09l8qxps725zzp

Show more details

Last Notes

2025-12-06 20:43:37 UTC

- reply

@npub1vkk…9e47
How do you change what libraries (proprietary) apps use? These are bundled within the apps, arent they?

2025-11-09 22:56:19 UTC

- reply

That is pretty cool.
What are your plans on #coreboot support?
That is currently a hard requirement for any laptop I would buy new

2025-10-14 21:33:55 UTC

- reply

How does that work on Mastodon, verified links? I assumed that was something people can set themselves somehow

2025-10-14 20:38:34 UTC

- reply

I could not find you on #GazaVerified
How can that be? I hope you are honest but this looks like you just put the link there, without actually being verified

2025-10-01 15:37:56 UTC

How is #GazaVerified verified?
@npub164u…vy7c
Is there any reference to proof that it is legit?
#Gaza #Donations

2025-09-16 06:30:06 UTC

- reply

What is there apart from #SherpaTTS that is fast and supports many languages?
What components do you want to replace? My only issue currently is the need for multilingual models (german-english) as otherwise it is unusable for me.

2025-07-09 18:35:42 UTC

- reply

#SimpleX is considered controversial?
But yes, Signal being phone number based is an obvious alternative, even though pretty centralized

2025-06-03 20:01:56 UTC

- reply

Wait. There is a tour for women, but only a single woman has ridden it entirely? How is this possible?

2025-05-21 15:02:15 UTC

- reply

interesting! We have a Private Space in user profiles now?

2025-02-27 23:36:14 UTC

- reply

Absolutely valid.
Do you plan to support the MLS format for data uploads? Then existing stumblers like #NeoStumbler could be used to upload data to your DB too.

2025-02-27 23:28:09 UTC

- reply

Won't you include their data in your DB?
I personally have made over 100.000 submissions, would be a shame to miss them ;)

2025-02-20 12:43:02 UTC

@npub1tgg…qwzh
The #Libreoffice Youtube channel is posting a lot of interesting talks from the "Libreoffice and #Opensource Conference 2024"
Some of them:
#LuxChat for Governments: https://www.youtube.com/watch?v=JXdMKaEXq0Q
#OpenDesk on #OpenCode: https://www.youtube.com/watch?v=rVhAltODe-M
#Education: https://www.youtube.com/watch?v=V4fkWfuFXfo
#Encrypted and #Signed Documents (UI, with #OpenPGP or #x509): https://www.youtube.com/watch?v=W-qFr8tL-LE
#Matrix #Luxembourg

2025-01-18 16:35:51 UTC

- reply

Thx for the info, then it is like that.
Here is the goal page
https://phabricator.kde.org/T17370
Tbh, #bubblewrap would need to be fixed drastically to be as secure as the #Android #sandbox. And (I am not sure yet) I think even #Snaps are more secure (on #Ubuntu with #Apparmor patches) than #Flatpak with the current system.
As far as I understood, sandboxing needs to happen in #userspace, with tools like #fuse doing the work while being restricted by #MAC like #SELinux or Apparmor.

2025-01-18 14:44:38 UTC

- reply

Can you tell us what happens on the "sandbox all the things" goal?
I think this is a pretty crucial step forward, even though #sandbox technologies (most often through user namespaces) are more problematic than I initially thought.
(Basically, user #namespaces open up #privesc to the monolithic #kernel, which is incredible. #Android and #ChromeOS use #LXC, mounts and #SELinux for #sandboxing)

2025-01-02 13:01:35 UTC

- reply

I have made some reports already.
Latest 0.5.2 (if you still update the link on your website) on Android 15 / GrapheneOS.

2024-12-29 18:52:35 UTC

- reply

I totally disagree with what you told me was said in that thread. Still, like/dislike is a black/white decision, and if you like some things a person said, it should be fine to give a like.
Please dont ever block people for liking posts. Comments, fine. But not likes.

2024-12-29 11:33:56 UTC

- reply

that claim is of course wrong. I probably just liked a different part of that comment.
So you suspended me for liking and commenting on a post that contained misinformation?
You call this "spreading misinformation"???
Damn.

2024-12-28 22:51:03 UTC

- reply

Lol I was suddenly unsuspended. What is going on here?

2024-12-28 22:50:20 UTC

- reply

No I never saw that post

2024-12-28 19:58:17 UTC

I love it.
My Account "missing-root" on the #GrapheneOS discussion forum got "mini-suspended" again... for "spreading misinformation about GrapheneOS".
Could you please tell me why? This happened multiple times and no time I get a quote WHAT was this misinformation. No correction answer on anything I wrote as far as I can tell.
@npub1kwa…e0nj

2024-12-27 20:20:10 UTC

- reply

#SepiaSearch is really nice! The #Peertube app... doesnt work at all for me, doesnt even play videos.

2024-12-12 19:51:11 UTC

- reply

DAITA is really nice. What are limitations for it, when will it be available on all servers, roughly?

2024-12-12 19:48:31 UTC

- reply

thanks,
So @npub1xh7…v9hj does your client allow to do this?
This also concerns #DNS, it would be good to still use Mullvads DNS servers for split tunneled apps

2024-12-12 18:11:18 UTC

- reply

The same is shown on cell data, but there it is way less. The settings show 12GB used by MullvadVPN, the other apps are like 150MB
This could be an unrelated issue though. I have a data hog app that consumes GB's of data, which I need to find. This probably means I need to turn off my VPN 😬

2024-12-12 18:10:10 UTC

I am a tiny bit concerned.
Using #MullvadVPN @npub1xh7…v9hj on #GrapheneOS @npub1kwa…e0nj I need to disable GrapheneOS' default VPN protections to make split tunneling work.
I use that to prevent #Youtube from blocking me (poorly the good times are over it seems), and to have local network stuff (#RDP, #LocalSend, #KDEConnect, #SyncthingFork) work.
Are all these apps bypassing my VPN?? Or are they collecting data themselves and the system can access that?
The GB numbers indicate the latter?
https://tux.social/system/media_attachments/files/113/641/175/571/538/235/original/960a9c9a3b9a8042.png

2024-12-01 22:56:57 UTC

Die #TK #TechnikerKrankenkasse App blockiert ab jetzt #GrapheneOS und andere custom #Android Systeme.
Nicht nur...
...umgeht sie das Sicherheitskonzept von Android, indem sie Code aus dem RAM (also unverifiziert aus dem Internet) lädt
...möchte sie ihren eigenen Code debuggen, um so das System auszuspionieren
...blockiert sie die Benutzung von Fingerandruckentsperrung auf nicht-#Google Android
Sondern jetzt läuft sie einfach gar nicht mehr.
Gehts noch?
https://tux.social/system/media_attachments/files/113/580/018/363/300/795/original/8a00d2f309272722.jpg

2024-11-21 23:27:36 UTC

I donated to support #Kasts, the #KDE answer to #Antennapod on Android!
Both apps are great, they allow you to stream or download #podcasts from tons of sources, you can just search for something and will likely find it!
Most are hosted on small sites, so this system is also very #decentralized.
And I also donated for #Filelight, a great tool for data hoarders like me! Find what files eat up your space!
https://kde.org/fundraisers/yearend2024
https://tux.social/system/media_attachments/files/113/523/525/515/332/065/original/7c994b54f0b8efce.png

2024-11-21 23:20:56 UTC

- reply

I just saw how cool #KDEitinerary is!
The wagon layout, custom OSM map of the train station, all shops, the weather integration,...
But tbh, #KTrip should be renamed like Koffi or something and KItinerary should be called "KTrip". I still struggle to spell that word.
Crazy!
I will adopt it, and #Merkuro, and #Kast! Can't decide haha
#KDE #fundraiser
https://apps.kde.org/itinerary/
https://tux.social/system/media_attachments/files/113/523/551/627/087/603/original/b76888f3fb5fddee.png
https://tux.social/system/media_attachments/files/113/523/551/912/352/917/original/7c0e1e154fa6435b.png
https://tux.social/system/media_attachments/files/113/523/552/219/241/500/original/c2e8627b39a527e0.png
https://tux.social/system/media_attachments/files/113/523/552/493/029/405/original/be23179ae7e1e11d.png

2024-11-08 10:24:25 UTC

- reply

@npub1am6…4z5c @npub14ra…ss7p
Could you elaborate on "grifters"? I didnt find any databases at all, just server and client software.
#BeaconDB will be very permissively licensed which should make this no problem and also prohibit licensing future data more restrictively.
I read through libregeolocations website and found their stances on hashed and truncated data very interesting. How does Apple handle this data, do they just share SSIDs with coordinates? This would be very invasive.

2024-11-08 00:29:41 UTC

- reply

@npub1am6…4z5c
I just found @npub14ra…ss7p which is HUGE!
After reading about how privacy preserting #BeaconDB and also #Libregeolocation are, #WiGLE is quite the opposite, containing SSIDs, protocols used etc.
1,4 billion wifis sounds like a pretty good start though, is there any chance for collaboration here too?

2024-11-05 19:36:50 UTC

- reply

@npub1kwa…e0nj what does this mean for the potential integration of local NLP in #GrapheneOS?
These databases would be downloaded, so it wouldn't be an issue, if they are "too copyleft" as they are not preinstalled right?
#OpenCellID has a very impressive and old database, simply years ahead.
https://opencellid.org

2024-11-04 13:06:12 UTC

@npub1am6…4z5c
Do you plan on integrating data by #OpenCellID into your database?
With the announced unprivileged NetworkLocation App in #GrapheneOS @npub1kwa…e0nj , this would be a huge benefit.
I am a contributor to OpenCellID for a long time, with #TowerCollector.
Currently I use NeoStumbler and Towercollector at once, to upload to OpenCellID too.
I contributed waaay more to OpenCellID than was possible with #BeaconDB, simply because it is so young!

2024-10-25 07:50:21 UTC

- reply

@npub1faz…92lv
Crazy! And these are just the nerds that know what to look for.
Once @npub1kwa…e0nj may integrate such an option, this would accelerate a ton!
I am also submitting, but with 2 apps, #TowerCollector for #OpenCellID and #NeoStumbler for #BeaconDB
The Neostumbler people are discussing if they want to integrate a list of possible endpoints, or preset one
Sounds like they dont want to preset BeaconDB, maybe a fork would make sense in that case, manually changing doesnt scale...

2024-10-18 20:20:46 UTC

- reply

@npub1a5l…v5aa
Oh well that is strange!
I dont know if this is the update (I am on the alpha channel currently) but now the interface is different again.
Here the "run in background" is available again and I disabled it, while the "force stop" button on the top right is still there.
I suppose this is that inactive cache that you mentioned.
https://tux.social/system/media_attachments/files/113/330/280/607/064/084/original/eb7f79e0e4b2e378.png

2024-10-18 19:13:58 UTC

- reply

@npub1a5l…v5aa
Strange, because at least from the per-app-settings page the original 3 battery settings are gone.

2024-10-18 18:20:13 UTC

- reply

@npub1a5l…v5aa
Yes that was kinda understandable. But at least on my end, this setting is no longer available?
https://tux.social/system/media_attachments/files/113/329/806/545/875/322/original/a4310aa810b06e7c.png

2024-10-18 11:02:57 UTC

- reply

@npub1a5l…v5aa
Oh are you referring to the "stop app activity when not in use" setting?
I always turn it off because it changes random permissions without my interaction.
If this is the toggle that also decides *if* an app can ever be stopped from running, this is really bad.
I set permissions, storage scopes etc once on startup and never again. I remove apps when I dont need them.
This feels like Android being a babysitter, but correct me if I am wrong.
https://tux.social/system/media_attachments/files/113/328/087/205/711/671/original/493481aba6bbf746.jpeg

2024-10-18 10:59:10 UTC

- reply

@npub1a5l…v5aa
So if whatsapp can send me notifications in the background, does that mean it only runs because I gave it notification permission?
This is complicated, the only toggles I see are battery optimization levels (removed), battery optimized (removed), background data (only for cell data)

2024-10-18 07:17:39 UTC

- reply

@npub1a5l…v5aa
Yes this will be great!
But honestly my biggest issue is not app communication, but the init system. I have no idea how Android handles starting apps (Whatsapp always runs, Syncthing never runs :( ) and I use separate work or now private space to
1. Use a different VPN server
2. Stop the apps from running as much as possible
Do you know if this init system could be manipulated? Like a toggle in the app settings to simply stop it from running in the background?

2024-10-17 14:28:43 UTC

- reply

Thanks for the details.
So would a private space help protect against things that could escape a basic app sandbox in contrast to a layer-1 chromium sandbox?

2024-10-17 12:15:34 UTC

- reply

Thanks for the infos. I was specifically referring to Firefox using a weak sandbox for the main process, and no filesystem sandbox (just seccomp filters, like the Flatpak on Linux) for all processes.
This means the app sandbox is supposedly weaker than they could be, and processes could attack the browser and use its own weak isolation to also escape that.
The question then is, if separate spaces like work profile or private space, in the same user profile, could protect here.

2024-10-17 05:49:30 UTC

- reply

For Mull/Torbrowser users, would it make sense to just install the browser in the "private space"?
So that the badly sandboxed browser itself runs in an isolated environment and at least cant harm other apps?
Processes could still spy on others, but assuming you use Torbrowser Android with only a few Tabs and little persistent data.

2024-10-17 05:48:26 UTC

- reply

I switched yesterday!
So far, no issues.
The new "private space" is interesting. The setup screen is completely Google-Android, I wasnt yet able to install apps (context menu does nothing, "+" neither), but I was able to disable some system apps in there and unlock it.
You also cant place private space apps on the homescreen currently.
So far, great to have another way or isolating apps!
https://tux.social/system/media_attachments/files/113/321/215/610/047/654/original/bd11a54c39c6943b.jpeg