My current security setup: LOCAL: Pihole - Block all ads and malicious content OMV - for shared storage locally. Only I need access to my data so it never leaves the safe network at home Syncthing - for automatic device syncing, I have videos, music files, images, app data and backups constantly syncing in the background to the OMV via network drives / NAS / SMB Hardedend firefox - Firefox runs a lot of custom plugins and has been specifically configured to containerize big companies and keep a very close eye on fingerprinting attempts, automatically erase cookies, account data and history any time I close firefox and also clean cookies on a periodic basis (every few seconds!) LineageOS on mobile - to evade Android’s attempts to get my data, I have also disabled every option for data collection in Google, if I need to save something I just use browser bookmarks or getpocket (which is how I save important information on the web, never rely on history) ONLINE: Protonmail Plus - paid subscription for encrypted email service Hosted TOR instance - In case India turns into China Hosted VPN - Again same issue as above (WireGaurd, OpenVPN) Matrix - Encrypted chat using ttrss - how I get most of my updates (RSS reader hosted online) Nextcloud - This is where I backup my video game data (Minecraft etc) Hosted Bitwarden - I don’t use it much because it’s kind of still tricky to harden an online server… so I try not to host very sensitive data like passwords and prefer offline methods (like encrypted file backups) Search - I use a distributed search service of sorts that automatically redirects me to meta search engines hosted all over the world that way no single search entity (duckduckgo, google whatever) will never have full data about my browsing patterns Transmission - I do host some legal torrents like books that are public domain for the sake of longevity and prosperity! Web Proxy - for filtering web traffic, modifying web page data on the fly as I browse, and controlling access and removing ads if I am on the go (local network never touches internet so I need proxies outside so that my devices always connect through my own servers to encrypt data 🙂)

Relevant 🙂

From HackerNews - TrackerControl is an android app that pretends to be a VPN to capture your traffic, but is not a real VPN), you will see which apps try to talk to tracking services and thus also which ones talk to Google. https://trackercontrol.org/

Google’s internal Federated Learning system design https://arxiv.org/pdf/1902.01046.pdf

Via HN https://github.com/0x192/universal-android-debloater

nice writeup about self hosting data https://chaidarun.com/dropbox-syncthing

Planning to switch away from Gmail to a more private email service. Confused between Protonmail vs Fastmail. Has anyone tried them? Which one should I go for?

https://tosdr.org/. It stands for Terms of Service; Didn’t Read. The website sums up all of a website’s terms and conditions and the privacy notice and all of that stuff into simple sentences that are easy to understand.

Felix Krause on Twitter: “Instagram & Facebook tracks everything you do on any website in their in-app browser https://t.co/dj5CMJUwHc https://t.co/LvWXGa34N2" / Twitter

Been using this, works quite well for anonymity over new sites, subscriptions etc without changing your original mails https://spreadprivacy.com/protect-your-inbox-with-duckduckgo-email-protection/

https://twitter.com/skiffprivacy/status/1526595033918410761 https://twitter.com/balajis/status/1574984940827029504 Interesting skiff email via ETH addresses etc

Cloudflare offers all of their customers YubiKey at a very discounted rate https://blog.cloudflare.com/making-phishing-defense-seamless-cloudflare-yubico/

Just installed AdAway on my android and life became so much better. No ads on phone at all. My phone is rooted. But the app might work with non-rooted phone.

https://www.techradar.com/news/whatsapp-data-breach-sees-nearly-500-million-user-records-up-for-sale 😮

I've seen a lot of folks raising privacy concern especially for android, do u folks avoid to keep any bank/fintech related mobile apps on your phone?