I read their article but didn’t understand their methodology. This is pretty much in contrast to this video where a bunch of apps got audited and to everyone’s surprise Google Authenticator seemed like one of the most private alternatives.
Really not trying to defend Google here because… they’re fucking Google, but I’m wondering why the results are so different.
IMO because it’s a Signal group and you can’t separate user profiles and have to register with a phone number (yeah I know I know you have a username now). Some people including me won’t join therefore
Come to think of it, would it also be possible to remove (or at least physically disconnect on motherboard) microphone and camera from an ideapad?
Yeah it’s an M1 16GB, sounds awesome I’ll try, thanks a lot for the guide it’s super helpful. I just got the Mac Mini for jellyfin but this is an unexpected use case where the server comes in very handy.
I run a Mac Mini as a home server because it’s great for hardware transcoding, I was wondering if I could host an LLM locally. I work with python so that wouldn’t be an issue but I have no idea how to do CUDA or work on low level code. Is there anything I need to consider? Would probably start with a really small model.
Very interesting. How secure is this against having a compromised device? I‘m really paranoid that someone would somehow have a backdoor into my systems and snatch stuff I host on my own
Yeah not doing Signal with randos.
Ah got it: https://simplex.chat/downloads/#desktop-app
You can link your mobile device with desktop to use the same profile remotely, but this is only possible when both devices are connected to the same local network.
That’s cool I’ll look into that, any alternative to a centralized service that requires phone number auth is appreciated and I think competition will make these apps only better.
I like SimpleX because you can self host, create hidden profiles and even throwaway invite links. What platforms are you missing for SimpleX? I think you can run it on Android, iPhone and through Fdroid plus you could even run it on Tails. I don’t really need interconnectivity so never tried it, but I think it exists. Anyway, for me it really doesn’t matter, just stumbled upon SimpleX and liked it.
Simplex works without a phone number though.
Yeah tbh if you’re a software engineer there’s barely a way around using LinkedIn, I got almost all my jobs through being contacted by recruiters on LinkedIn. I kinda hate that my info is out there but otoh with every switch you get more money and I guess unless you’re some kind of whistleblower or government dissident you’ll have to live with exposing yourself to an extent or miss out on good opportunities.
Page not found :(
Yeah I think it’s cool that you can even take control of your private keys. Although I’m thinking it also adds another point of failure / exposure if not done correctly.
Somehow I always end up hating Proton. I was using TOR Browser to create an account and they wouldn’t let me. I had to give either another email or my phone number, and I’m not willing to do either. I even tried creating a throwaway with mailbox.org (works using TOR) and sending the confirmation email there but it never arrived, so I gave up on Proton.
I also tried Tuta and they wouldn’t let me create an account at all using TOR. So eventually I’m sticking with mailbox.org
Yeah what can be done is create a clean Google account registered through an anonymous phone number and a throwaway user name & password, and best to secure it with a hardware key just to make sure no one can get into your OTPs by somehow getting access to those credentials. That should allow you to save credentials in an account at least if you make sure to not login to it on the same device as your other accounts.
But also not blaming anyone for not trusting Google in the first place.