My (often unpopular) opinion is: none. Our government agencies should exert their efforts improving privacy and security rather than subverting it. We should be a nation of white hat hackers.
My (often unpopular) opinion is: none. Our government agencies should exert their efforts improving privacy and security rather than subverting it. We should be a nation of white hat hackers.
It's not just about it being open source, it's about the mentality of the people running it.
It's about both. Because, if it isn't open source, there is no wayit is substantially more difficult to verify that the people running it aren't lying.
Well, if they hadn't posted here, I, for one, would never have become aware of the issue, and I'm glad I have!
Fun fact: Brussel sprouts taste better now because the bitterness was intentionally selectively bred out of them in the '90s. They were, apparently, only bitter for a period of time because the ones that were easiest to mechanically harvest were bitter. Pre-mechanical harvesting, less bitter varieties were more popular.
https://www.mentalfloss.com/posts/do-brussels-sprouts-taste-better-now-yes-here-s-why-01ghed9q8dr8
Yeah, but $5m sounds kind of low. That'll buy, what, 10 homes?
I don't think that's fair. I've taken gun/hunting education classes from some volunteer instructors that seemed to me to be about the most serious, responsible people I've ever met.
... So... Is it true or not?!
This is pretty compelling. I vote "solved".
I have solved this problem! The trick is to use two Docker containers:
Here is an example docker-compose.yml:
version: "3"
services:
gluetun:
image: qmcgaw/gluetun
container_name: gluetun
# line above must be uncommented to allow external containers to connect.
# See https://github.com/qdm12/gluetun-wiki/blob/main/setup/connect-a-container-to-gluetun.md#external-container-to-gluetun
restart: unless-stopped
cap_add:
- NET_ADMIN
devices:
- /dev/net/tun:/dev/net/tun
volumes:
- ./gluetun:/gluetun
environment:
- VPN_SERVICE_PROVIDER=airvpn
- VPN_TYPE=wireguard
- WIREGUARD_PRIVATE_KEY=xxx
- WIREGUARD_PRESHARED_KEY=xxx
- WIREGUARD_ADDRESSES=xxx
- WIREGUARD_MTU=1320
- SERVER_COUNTRIES=United States
# See https://github.com/qdm12/gluetun-wiki/tree/main/setup#setup
# Timezone for accurate log times
- TZ=America/New_York
# Server list updater
# See https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list
- UPDATER_PERIOD=24h
tailscale:
container_name: tailscale
cap_add:
- NET_ADMIN
- NET_RAW
volumes:
- ./tailscale/var/lib:/var/lib
- ./tailscale/state:/state
- /dev/net/tun:/dev/net/tun
network_mode: "service:gluetun"
restart: unless-stopped
environment:
- TS_HOSTNAME=airvpn-exit-node
- TS_AUTHKEY=xxxxxxxx
- TS_EXTRA_ARGS=--login-server=https://example.com --advertise-exit-node
- TS_NO_LOGS_NO_SUPPORT=true
- TS_STATE_DIR=/state
image: tailscale/tailscale
That's an absolutely absurd claim. The fraction of gun owners that ever shoot a human being is very close to zero.
I have found Nginx Proxy Manager to be a huge time-saver for configuring nginx and certbot.
Even better, so it mutates into superior data!
Rural western Virginia has fiber internet to your home in a lot of places.
For example: https://www.alleghanyhighlandsbroadband.com/
I got his meaning. Isn't that the purpose of language, in the end?
I don't see Cryptomator in the comparison. Doesn't it have a similar feature set?
I just spent an hour trying to get this installed in a Proxmox VM. No dice. After install, it just boots to the GRUB rescue prompt. Oh well, seems like a cool idea.
Let me know how it works out for you! I'm happy to be able to share this. I was very pleased with myself but had no one to tell haha. I actually have several copies of this set up with each Gluetun instance connected to different countries. Then, changing country is as easy as changing your tailnet exit node!
What browser are you using?
(put an "!" in front)
brick it 4 times
I'd be impressed if the battery lasted long enough for that!
How well do they self-clean? How often do you need to clean it manually?
Awesome! You too.
And farts.
I was with you until you did potatoes dirty.
I agree with you strongly. We have the technology, it's just pointed at the wrong crowd. The eyes of the surveillance state should be on the rich and powerful, not the masses. The price of power should be the loss of privacy.
I don't know if that'll help. Most cars are internet-connected nowadays. They can just stream the data back home.
Same. It has really helped my neck, too. I used to need to prop myself up on a pillow so that my arms wouldn't fall asleep. Now, it's no problem.
Thank you. After reading up on it, this sounds awesome. I'm going to give it a try!
This sounds pretty rad. Can you point me to some docs for getting started with this myself?
Edit: I looked up Unraid. It looks like it is a commercial product. Do you pay for it?
I am currently working on this. Finally got the Docker working and am importing my 15GB mbox as we speak! I'll post back here about how it works out.
Does mutt have search capabilities? Is it optimized such that it would be effective with large mailboxes? Thanks!
They don't exist. Believe me, since I finally put my old LG V20 out to pasture, I've been waiting. The closest thing is the Fairphone, but it doesn't support all US LTE bands.
Alas, no! Things seemed to be going well: I got >90k messages imported from my Google Takeout mbox file before the import was interrupted (not mailpiler's fault). At this point, I logged into the "auditor" account and was able to see my emails and search them. But, then I resumed the import. By the end of today, the import was finished (~150k messages total). When I logged in with the auditor account, I got some error "No search results" and nothing I could do about it. This is actually what happened last time I tried mailpiler, too, now that I recall. All seemed fine, but, it seems, the database got corrupted or something along the way... So, now it's useless. I might try it one more time over the next few days. I'll keep y'all posted.
Thanks for this! I'm going to try to get this set up. It sounds perfect.
Yes, I'm coming to similar conclusions myself. To be fair, encryption is a configurable option with Mailpiler. But, yes, it is all digested and stored in a mysql database, which is definitely more opaque than plaintext in the filesystem. I might try the mutt + notmuch solution described by @marty_relaxes@discuss.technics.de below. Sounds like it might be a challenge to set up but would work great forever after. I'll need to figure out how to convert my mbox files to maildir, but Google suggests there are tools for that. Good luck to you, let us know what you ultimately figure out! I've been working on this off-and-on for a few months now without figuring our a good solution!
Edit: I guess, if you want fast full-text search, a database will have to enter the equation somewhere, though.
Unraid does not use systemd
Well, I've solved it! I now have a web interface (accessible via VPN, although, in principle, I could expose it to the internet) that allows fast, full-text search of all my old emails. Here is the recipe:
notmuch setup & notmuch new). This creates a new folder in your maildir directory containing full-text search info.python3 -m pip install netviel and then ran it via python3 -m netvielThat's it! This let's you search locally. I actually did a few more steps because I wanted to containerize this thing so I could run it on my NAS. I'd be happy to go into detail about that too, if you're interested. One hiccup was that, for some reason, netviel binds to 127.0.0.1 instead of 0.0.0.0, and there is no way to change that without compiling the project yourself. But, I found a workaround for my Docker container where you can use socat bound to 0.0.0.0 to redirect requests to netviel, so that requests from other computers appear local to netviel.
Anyway, that makes it all sound more complicated than it is. I am super-pleased to have solved this problem at last!
Yes
Is this OS actively developed (crystalOS)? Do you have a link to the project page?
It's too bad Android didn't lean more into it's relative freedom. Instead, almost all Android manufacturers have followed Apple's lead closely. I have to believe there'd be a sizeable market for a flagship Android phone with, say, a removable battery, headphone jack, SD card slot, and an easily unlocked bootloader.