Avatar
Islamic Audiobooks Central
51013526828bac6a18e07b94a0b4f3c3d337c9604fb5cd7bc9b3f444afbc96e1
Audiobook publisher and distributor. Find our books on Google Play (DRM-free), Apple Books, Spotify and Audible as well as in public libraries, our website and our YouTube and Odysee channels. We love and use #Linux and #OpenSource / #FreeSoftware for professional audio production! Looking in from the Fediverse? You're seeing a #Nostr profile via a bridge. Full profile at: https://primal.net/p/npub12yqn2f5z3wkx5x8q0w22pd8nc0fn0jtqf76u677fk06yftaujmsscfkjum XMR: 87T3MhEThNNDmGxRrPPUvW76upi4RzeAq2nVYErCgeJKdssoWiQWttegvCkzFvxCZBCXFzAjfrCBXF88rebjfFqP2F1pYty

It's unforunate that apart from #Tor Browser, #Brave Browser is arguably the only cross-platform #privacy browser...

Genuine question: If it's fully #opensource #selfhostable, and #decentralised, does it it matter who created it and where?

Pro/Con of Privacy Routers

The router you get from your ISP is designed to spy on you. It knows which devices are sending which traffic and what guests are connecting to it. If you don’t use a VPN every second, then when you take the VPN down, you’re vulnerable to hackers first hacking the router, to then install malware on your devices (phones/laptop). For example Wikileaks shows the CIA loves to do this. Ok, so how do you get a “private” router?

A privacy router is just regular hardware with a new operating system. But not all hardware supports flashing a new operating system. So either check the manufacturer’s website, or just ask their support “what routers let me flash my own firmware?”. Then just like a stock Android phone being “DeGoogled”, you flash on a new operating system.

The following list goes over SOME of the more popular open source router operating systems. It’s not complicated, they are grouped into “home router” or “firewall”. The firewall is faster and more secure, but costs a little more and is harder to setup.

DD-WRT

Type: Home Router w/ WiFi

Pro: This OS can be flashed on many home routers including Netgear and Asus. It’s fine for just routing traffic and it has WiFi. Support on forums is great, they are nice and friendly. A VPN can be put on it but…

~

Con: These home routers are much slower for VPNs to be put directly on the router. Also the DD-WRT website is volunteer run, so it often will be dated for your model. You’ll have to post on their forum asking for the new version.

Solutions: Use WireGuard instead of OpenVPN on home routers. If the 2-minute logging of WireGuard concerns you, then a home router isn’t for you and get a firewall.

OpenWRT

Type: Home or Travel Router w/ WiFi

Pro: This is similar to DD-WRT, but also has a Tor option. OpenWRT also can be flashed on travel routers (Glinet routers or Rasberry Pi).

Con: For VPNs, it’s a more complex setup than DD-WRT, and not worth it in my opinion unless you are doing a travel router or Tor. Only do Tor if you have fast internet to begin with, otherwise it’s unbearable. Support on OpenWRT forums sucks, these guys are rude.

PfSense

Type: Firewall WITHOUT WiFi

Pro: Enterprise Grade Firewalls have a higher level security than home routers and the ability to handle better hardware for VPN speed. Netgear runs this and they spend a lot of development. Firewalls are much better than home routers with their features and barely more expensive now. The costs for firewall hardware have come down significantly and are now in the $200 or under range! Support on pfSense forums is average.

~

Con: The free open source version is being phased out for a paid version. 2nd con is that pfSense takes more time to setup and learn than the others on the list. Remember, hardware firewalls don’t have WiFi. So you’ll need to do:

pfSense → DD-WRT or OpenWRT for WiFi.

OPNsense

Type: Firewall WITHOUT WiFi

Pro: This is a fork of pfSense, but more consistent with the open source/freedom aspect. This is my current recommendation as pfSense slowly shifts to a paid model . All the same pro as pfSense.

~

Con: Firewalls still mean you’re doing more learning than home routers. OPNsense redid the GUI from pfSense, so if you’re coming from pfSense then they created pointless learning work for similar features. Development wise, Less money is spent on OPNsense than pfSense.

Conclusion

If you want help with configuring or flashing your router, then reach out to us. Don’t accidentally brick or ruin your router. Save yourself hours of headache and hassle, and get the advanced configurations you need for VPNs/Tor, advanced security, and anonymity.

Session ID: Support / Signal #: +855 68 504 905 / SimpleX, email, or protonmail links on site

What do you think about #TurrisOmnia devices? Open hardware and firmware: comes with #TurrisOS which is based on #OpenWrt.

#killthenewsletter converts email list subscriptions to #rss feeds!

This one appears to be a good deal right now:

https://www.gl-inet.com/products/gl-mt6000/

The stock OS is based on #OpenWrt and reflashing vanilla OpenWrt is super easy.

There's also the fully open hardware #TurrisOmina which comes with #TurrisOS based on OpenWrt but can be pretty expensive unless you're in Europe.

About #OPNsense, I heard on a #cybersecurity or perhaps a #selfhosting podcast that their #openssl package is pinned to an end-of-life version which lacks critical security patches. I haven't verified this myself though.

Degoogled OS projects like #CalyxOS, GrapheneOS, /e/OS, etc... plus #opensource app distribution projects like F-Droid, Aurora Store, Obtainium, etc...

Calyx Institute also operates Tor servers so by contributing to them you're helping the network as well.

The year has been a wild ride. Looking back, here's 7 articles we got the most positive feedback on. Maybe you missed something and you're missing out...

7) Big Tech Abuses Medical Privacy

They are selling your problems, you won't believe this,

https://simplifiedprivacy.com/big-tech-abuses-medical-privacy/

6) SimpleX vs Session (animated video)

The animation helps make this crystal clear, so you can get the most benefit,

https://video.simplifiedprivacy.com/simplexsession/

5) Facebook is Corrupt Evil Spyware

Did you know they are tracking you OFF the platform? Even whose standing next to you?

https://simplifiedprivacy.com/facebooks-corrupt-off-platform-surveillance/

4) Pro/Con of DeGoogled Phone Operating Systems

If you're thinking of DeGoogling, this is the best place to start,

https://simplifiedprivacy.com/degoogledphones/

3) VPN Mistakes to Avoid

People think they are getting more privacy than they are. Don't be that guy,

https://simplifiedprivacy.com/vpn-mistakes-to-avoid/

2) Pro/Con of “Privacy” Phone Numbers/Services

Where do you go to get those burner numbers? These aren't blocked,

https://simplifiedprivacy.com/burners/

1) Google’s Surveillance: The Shocking Truth

How much data can Google really see? You'd be really surprised to learn,

https://simplifiedprivacy.com/googles-surveillance-the-shocking-truth/

Happy New Year

Best privacy wins of 2023 could also be a great read :)

Does bridged #fediverse content count?

Also, without using and following #hashtags, it's easy to miss good content on no-algorithm social media.

Also, #Purism's #Librem5 cannot be a scam if people have received it. It's the only x86 device on the list.

Pro/Con of DeGoogled Phone operating systems

Graphene

Pro: Good optional sandbox for Google push. And advanced security features such as:

1) Hardened to resist memory attacks

2) Better sandboxing (access policies)

3) Enhanced verified boot

4) Attestation tool to diagnose Pegasus malware

5) Browser reducing “just in time” JavaScript

/

Con: Only Google manufactured hardware, which is the most likely to have hardware backdoors. Titan-M security chip is closed source and therefore untrusted to protect me from Google/Government

Calyx

Pro: Similar DeGoogled experience to Graphene, but supports a wide group of phone manufacturers outside the 5 eyes including Fairphone, OnePlus, Vivo, Xiaomi, ZTE, and Huawei. LOL, Do you trust Google or the Chinese? Calyx also has a great built in Firewall app to cut off apps from the internet

/

Con: While Calyx is better for avoiding Google’s unknown hardware backdoors, it doesn't have Graphene's advanced security against known targeted attacks. Additionally, if you need Google push notifications, then it uses MicroG instead of Graphene's sandbox, which isn't as good at isolating Google from the core system data.

Lineage

Pro: Works on an even larger variety of hardware, so you got a lot of choice. Lineage is also great for fake android virtual machines on your desktop PC. You can easily spin up a VM with this and use spyware apps. While as Graphene won't allow this under current builds, and Calyx requires "annoying to use" Android developer kits to do it.

/

Con: Can't lock the bootloader. Controversial security issues.

Pinephone (Linux phone)

Pro: It's good to see alternatives to Android. Hardware "brains" are open source.

/

Con: Low amount of apps because it's not using Android's ecosystem. Not as good performance as Android. Lacks Android's good security model, and it still uses closed source hardware to communicate: WiFi and LTE modem (they had to)

Purism's Librem 5

Scam. They won't ship it, don't buy it.

Summary,

Graphene - Extra Security, IF you trust Google's hardware

Calyx - Good for non-Google hardware & app firewall

Lineage - Great for VMs

Pinephone - Boycott Google

SimplifiedPrivacy has lowered custom consultations to $30/hour. Reach out and we'll help you with flashing phones, routers, Linux, any tech support.

There's also #Vollaphone, #FXtec and other devices that support #UbuntuTouch.

I'd be quite uncomfortable with #Ubuntu for myself but I do love it for others :)

As in managing a large fleet of machines.