smiletolerantly

Funny, I’ve also already read that 😄 Good blog and article.

What blog?

Ha, thanks, I’d already read that. And I do, mostly, agree; the OMEMO implementation is not great both from the security perspective discussed in the post, as well as the UX (not being able to decrypt old messages on new devices at all). That being said, I primarily want a selfhosted, federated messenger which also takes privacy and security seriously, and at least for the former, XMPP is really refreshingly good.

Ugh. I’ve always liked Matrix (and was not bothered too much by the metadata leaks because my home server was not federated anyways), but after noticing some issues and finally reading up on the actual protocol spec a couple of weeks ago… oof. Yeah. No. Set up XMPP for now. Works really well and the protocol seems so much saner. Unfortunately, it too has some annoyances that are unacceptable to me in the long term. I’m this close to saying “fuck it” and wasting the next couple of years of my life on a new protocol that no one is gonna use. (Cue the XKCD here.)

I mean, how can we feel superior if we are not wasting huge amounts of time setting things up!? Why, by boasting that it’s so easy, just look at that, it is only two options you need to set thanks to the 80 custom modules I’ve written to abstract the abstractions from nixpkgs! I WISH I could put an /s here, but I cannot.

Ehm… I’m also on Nixos and I’d say it’s super trivial. services.openssh = { enable = true; settings = { PasswordAuthentication = false; PermitRootLogin = "no"; }; }; users.users..openssh.authorizedKeys.keys = [ list of pubkeys ideally read from file in repo ];

h, the machine is actually in one of my wireguard nets anyways, but for different purposes.

The nice thing about SSH key-based access is, I either have the key and login succeeds, or I have no business trying to log in. That’s why my remote root server bans via fail2ban after a single failed login. Yes I’ve had to write support to get a KMS. Yes it’s still configured like this.

Yeah the UX for setting it up was not great. Conversely though, the UX for using it has been fantastic so far. My biggest concern was that the clients would feel dated (on Android esp), but no, they’re surprisingly polished!

Yeah, but unfortunately, the keyboard does not look promising. I’m sure we will get there, eventually. Just an uphill battle… As always.

Hardware wise, we’re basically there. Especially since there’s multiple recently-ist mainstream phones on which you can install Linux. UI/UX seems to be a nightmare though, plus missing software

Awesome haha. ALmost exact same setup here, incl. OpnSense with an isolation vlan in which (brother) printer and TV are.

I only use the Nvidia Shield remote. It obviously does everything on the Shield, plus tv on/off, and volume. Then I remapped the Netflix button on it to open a little quick actions menu to select brightness/picture mode levels. Haven’t touched the lg remote since

Incredible. What a shit idea. Anyways, kids, remember: never let your smart devices talk to the internet. We actually love our LG OLED - it’s fantastic hardware. But it has not once, and never will, get the chance to phone home.

Oh god yes German?

I’ve actually been having a great time with simple-nixos-mailserver. Running with a dedicated ipv4 at a highly reputable hoster, to my knowledge, I haven’t landed in a spam folder yet!

Wait, why? I thought I was generally gold at spotting these things, but here I’m struggling. The only thing that looks a little out of place to ne is the ring on his pointing hand, but that might genuinely be a dark band + shadow. What else have I missed?