Josh 🌯

Security, Tech, and YouTube.

Built Yellowball (https://yellowball.fm) — dont' just host your podcast. own it.

Podcast: https://intheshellpodcast.com

Public Key

npub1cz86rc4txpvyufnldj3c6r4wmgqwcluyhzt77hmv6eelqtr053hsacgert

NIP-05 Address

josh@sideofburritos-social.mostr.pub

Profile Code

nprofile1qqsvprapu24nqkzwyelkegudp6hd5q8v07zt39l0takdvuls93h6gmcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds72qx2w

Publishing to

relay.nostr.band

relay.damus.io

nos.lol

Author Public Key

npub1cz86rc4txpvyufnldj3c6r4wmgqwcluyhzt77hmv6eelqtr053hsacgert

Show more details

Last Notes

2025-11-25 20:56:55 UTC

Recently finished listening to this interview. Fantastic job @nprofile…5ww2 ! Whether you've used GrapheneOS for years or are thinking about trying it, it's a must-watch/listen.
#grapheneOS #android #privacy #security
https://www.youtube.com/watch?v=eUEtc6gblK0

2025-11-08 22:08:56 UTC

- reply

@nprofile…5ww2 Warhammer 40000, good times with those little plastic figurines

2025-10-08 14:21:34 UTC

- reply

@nprofile…crtx I've been self-hosting this for the past two years for notifications, it's been great.

2025-09-09 16:57:43 UTC

Most people think they need to prepare for a sophisticated software attack, but your biggest risk is your habits. Exploiting people is often the easiest way in.
Anyone can fall for phishing, it’s happened to me.
#privacy #security #phishing #npm
https://krebsonsecurity.com/2025/09/18-popular-code-packages-hacked-rigged-to-steal-crypto/

2025-08-20 18:29:01 UTC

- reply

@nprofile…fzvr I guess I should clarify. The actual installation is super quick.
But getting to a point where I understand everything running enough to troubleshoot, monitor, and feel comfortable using it in production took a while.

2025-08-20 15:27:59 UTC

3 things I learned migrating from Docker Swarm to K3s:
- K3s setup can be complex, but management and monitoring is much easier
- Infrastructure as Code (IaC). Use Ansible.
- Configuration and secrets management are much better in K3s.
Bonus
- The larger the community, the easier troubleshooting is.
#kubernetes #k3s #ansible #linux #docker

2025-08-09 16:58:15 UTC

The only device I would trust using @nprofile…3dcq
#grapheneos #privacy #security #defcon #defcon33
https://files.sideofburritos.social/media_attachments/files/114/999/855/376/217/994/original/3a55900ae906ede8.jpg

2025-07-08 17:42:59 UTC

- reply

@nprofile…gjuk I've been using it for ~6 months and it's been fantastic. The mobile app is great as well.

2025-06-18 14:29:34 UTC

- reply

@nprofile…ljzw Thanks for the points, I will consider it in the future 🤓

2025-06-11 13:52:55 UTC

- reply

@nprofile…ljzw Hi there, I have considered it. YouTube offers the widest reach, and helps me reach people new to the privacy space. They aren't looking on PeerTube. It's also easier managing comments in one location.

2025-06-05 15:47:33 UTC

- reply

@nprofile…dc8g You're welcome! Good to know it's useful to mention.

2025-06-05 15:42:45 UTC

I've been using KeePass for ~5 months and it's been great.
#grapheneos #opensource #selfhosting #passwordmanager
https://youtu.be/sRi66okPdFM

2025-06-04 17:40:43 UTC

- reply

@nprofile…py8x @nprofile…c59v It can be easy to unlock your phone and get distracted for a while. This launcher just makes it 'boring' to use, so it's much harder to find yourself wasting time aimlessly.

2025-06-04 16:17:21 UTC

- reply

@nprofile…alsa Agreed! I stuck to the stock one for years, but decided to give this one a try.
I don't allow the launcher to lock the screen, I just use the power button. I personally don't feel comfortable giving an app that level of access. It's likely that the app isn't built to accommodate the 2-factor fingerprint, so it defaults to the passphrase.

2025-06-04 14:19:30 UTC

- reply

@nprofile…c59v You're very welcome! It's a fantastic launcher. I've really been liking it the past few days. It's nice to unlock your phone and not get sucked back into old habits.

2025-05-29 16:34:25 UTC

- reply

@nprofile…rg6r I use both still. I have a few domains on Proton, and some on Tuta. I like Tuta because they seem more in line with privacy and security above all else. Proton, to me, is trying to make privacy mainstream and accessible (which I also like). If you need the services that Proton offers, then stick with them. If you only need mail and calendar, then Tuta could be an option.

2025-05-29 15:06:56 UTC

Making an image of the drive, gotta keep it cool. The A+ course didn't have this in it years ago, but maybe they suggest it now.
#selfhosting #linux #ssd #nvme
https://files.sideofburritos.social/media_attachments/files/114/591/736/509/800/178/original/0b797f518580c987.jpeg

2025-05-26 00:58:47 UTC

- reply

@nprofile…cjvc @nprofile…x3lk In that case, I think you'll like it. Hope it works well for you!

2025-05-25 14:22:47 UTC

- reply

@nprofile…cjvc @nprofile…x3lk You're welcome! It takes a little getting used to, but I love that everything is stored as markdown files in folders. For anything I self-host, I've been trying to move to things that have simple file/infrastructure setups. SQLite over Postgres, simple files over convoluted storage methods etc. Makes it more portable and easier to fix if there's a failure.

2025-05-25 14:15:35 UTC

- reply

@nprofile…cjvc It is! I originally was using YNAB (which I really liked). Then I switched to Buckets when I wanted to get my budget out of the cloud, but it just never worked as well as YNAB. Actual has been fantastic, and fits what I've been looking for since YNAB.

2025-05-17 17:42:59 UTC

- reply

@nprofile…dc8g Hmm, never heard of it before. Looks interesting though.

2025-05-14 14:47:55 UTC

- reply

@nprofile…dc8g https://youtu.be/IAoCfrqxIEg?t=826 you can also swipe down with two fingers to show the full menu.

2025-05-13 15:25:33 UTC

- reply

@nprofile…dc8g I've had good interactions with people on both Bluesky and Mastodon.

2025-05-13 01:24:57 UTC

- reply

@nprofile…x3lk Someone recently mentioned this one to me - https://github.com/jrpie/launcher. You can install it from Accrescent. I haven't tested it out yet, but it's also minimal. Don't know if it supports PWA's.

2025-05-12 19:52:31 UTC

- reply

@nprofile…x3lk I really like it so far. It's very keyboard centric, so it's quick and easy to use on desktop. Sync has been reliable across devices. I like how simple, yet powerful it is. Notes are stored as markdown files, mobile is a PWA, and the interface is very clean.

2025-05-12 17:53:10 UTC

- reply

@nprofile…dc8g nope, sticking to Bluesky and Mastodon (and hopefully Nostr soon once I get that setup).

2025-05-12 16:48:27 UTC

Reminder to go through the apps on your phone & computer.
Don’t use it? Delete it.
Installed it and forgot (that’s me)? Delete it.
Too distracting? Delete it.
If you're curious, I made a page with the apps I use — https://sideofburritos.com/docs/setup-guides/what-i-use/
#android #grapheneos #selfhosting #security #privacy

2025-04-24 13:54:44 UTC

For the past 10+ years I've been using ZFS (FreeNAS/TrueNAS). For some reason, I only recently started using snapshots…THEY ARE AMAZING. So this is your reminder that if you're using ZFS, use snapshots.
#TrueNAS #selfhosting #nas

2025-04-10 21:51:08 UTC

- reply

@nprofile…dc8g If it did, I would surely upgrade my phone more often 😂

2025-04-10 18:43:37 UTC

- reply

@nprofile…5sdj Maybe a couple of times when I'm doing a bunch of things, but not typically.

2025-04-10 15:36:47 UTC

- reply

@nprofile…zyc6 the 'a' versions are typically 'lower quality' when it comes to build materials (glass vs. plastic). Lower quality screens, that aren't as good as the non-a versions. Less premium camera, less memory. All that being said, I like the 'a' versions from a cost perspective (I'm still using my 6a). Funny enough, it seems like the 6a is the only one without wireless charging, the versions after it, all seem to have it (including the 9a).

2025-04-10 14:59:51 UTC

The Pixel 9a was released today. If you're looking to upgrade your GrapheneOS Pixel (or make the switch to GrapheneOS), the 'a' series make for great devices. You can check the link below to see how long GrapheneOS is supported for on your current device — https://grapheneos.org/faq#device-lifetime
Obligatory, but you probably don't need a new phone.
https://files.sideofburritos.social/media_attachments/files/114/314/257/737/605/843/original/035c066423104e05.png

2025-03-11 21:19:02 UTC

- reply

@nprofile…dc8g Hi there, that video on how releases work is up-to-date. As far as the terminal app goes, yes that does function once you're updated to 2025030900. Once the virtualization features are a bit more featured, I'll be doing a video then. For now, I don't have much to share on just using the Terminal app.

2025-02-26 16:01:05 UTC

I was tuning some cache headers and had questions. I checked the usual—Stack Overflow, blogs, AI—but they all disagreed. Then I remembered: the best source is to RTFM! Aka, read the RFCs. RFCs are your friend (and the OG source of truth) — https://datatracker.ietf.org/
#rfc7232 #rfc #CacheRulesEverythingAroundMe #sysadmin #linux #caddy

2025-02-10 22:13:33 UTC

- reply

@nprofile…lpgr Wow, I had no idea this existed. Installed and I will be using it in the future, thanks!

2025-02-10 16:25:53 UTC

New rule: if something takes over 5 minutes to figure out, you should document it. I spent ~10 min figuring out how to SCP a file from a machine on fly.io. It takes extra time now, but your future self will thank you. Much easier than searching your bash history.
#linux #scp #backups #flyio

2025-01-15 15:39:49 UTC

I've been self-hosting Bitwarden for over a year. However, there's a critical feature missing from its 'Export Vault' functionality that could cause you to lose data—whether you're self-hosting or using the SaaS version.
#bitwarden #selfhosting #backup
https://youtu.be/OI_mElYmQ7w

2024-12-10 16:28:05 UTC

Ever wondered why your phone doesn’t get the latest GrapheneOS update right away? Learn the reasons behind it—and more.
#grapheneos #privacy #security #android #googlepixel
https://youtu.be/u0UDuNlrofU

2024-12-04 21:31:52 UTC

If you use SSH in your daily life, make a habit of using `screen`
Start a new screen session: screen
Start a named session: screen -S session_name
List active sessions: screen -ls
Attach to a session: screen -r session_name
Detach from a session: Ctrl+A, D
#linux #terminal #ubuntu #ssh

2024-11-26 18:16:21 UTC

- reply

@nprofile…xvky Thank you! That was my goal. I was hoping to take away one more reason why someone couldn't try GrapheneOS.

2024-11-26 16:05:01 UTC

I decided to test the GrapheneOS web installer to see just how safe it is.
https://youtu.be/ik0AiO0WtuU
#grapheneos #android #privacy #security

2024-09-17 14:45:23 UTC

Just published a video on how I install apps after 3 years of using GrapheneOS on my Google Pixel.
https://youtu.be/IAoCfrqxIEg
#grapheneos #android #security #privacy #accrescent #obtainium #tor

2024-08-16 16:38:05 UTC

🎉 I've spent the past year building Yellowball, a privacy-first podcast hosting platform because none of the existing options fit what I was looking for. You can check it out at https://yellowball.fm. I'll be back with new YouTube videos and launching my podcast, 'In the Shell,' soon™! You can find more details in my newsletter: https://newsletter.sideofburritos.com/archive/865bdd1b-e740-489b-88ca-586f271065f8