techlore / channel-content Goto Github PK

The snap store is closed source and snaps automatically collect data, see this: https://snapcraft.io/docs/snap-store-metrics#:~:text=The%20Snap%20Store%20web%20UI,new%20snapd%20client%20it%20sees.

Librewolf is an open-source, tweaked version of Firefox that comes hardening pre-configured. Detailed explanation can be found in their site.

I made a little repo on Linux hardening Documents from the NSA (which is mostly on RHEL as apparently the NSA uses that stuff but these would work on almost any distro). There is some stuff from red hat about security and hardening in there too!
https://github.com/shaurya-007/NSA-Linux-Hardening-docs

Source: https://youtu.be/WUG57ynLb8I

Thank you for mentioning my NextDNS guide, @henry-fisher. Seeing the video on my feed made my week 🥹

Your video guide is great! I wanted to add a few notes that you may not be aware of:

• 13:30 NextDNS recently internalized many of their lists. However, I have footnotes beside each category that links to the NextDNS Github repository where hosts their entries or blocklists. Where a category has been internalized, I provide the an older commit showing the list(s)/domains that were used.
• 14:46 Allow Affiliate & Tracking Links: For whatever reason, NextDNS is overly strict when this is disabled and breaks opening some email links. (I know from a security perspective that we shouldn't click email links, but the guide is for folks who don't want to deal with many inconveniences.) So it goes beyond Affiliate links.
• 19:33 As recently as the end of May 2023, I did a lengthier analysis of the Hagezi lists and why Light is now recommended for most users.
• 21:10 Unlike adding more filters to ad blockers and HOST files, enabling more settings / blocklists to NextDNS does NOT affect speed for the end user. This is addressed in FAQ.
• 38:39 I have a few of your videos referenced. I wonder if you can find them all 🤣

TechLore Forum:

• Question about iCloud Private Relay: I address that here; you have to disable the Block Page.

I think you should add community enterprise linux distros like Rocky Linux as Enterprise kernels are much more maintained for security and you get features like SE Linux as well. Besides the Red Hat Security Bulletins also apply to Rocky Linux (as it is 1 on 1 binary compatible) and you get enterprise grade Security, but the downside would be older software, some of that can be fixed with flatpaks.

@techlore-official we can use firejail to setup sandboxing for applications like our web browser. Additionally, apparmor can also be used to setup profiles for applications. Apparmor already comes with a lot of profiles which can be either downloaded as a separate package or is usually bundled with the main apparmor package.

At the end, add the line "As we have mentioned before, Linux is Open Source, so the only limits are your time and effort in securing it. There is much more which can be done and there is no way we can cover all of that in one video so some rabbit-holes, you'll have to go down yourself if you're willing to." Or something along those lines.

As of https://discuss.techlore.tech/t/matrix-community-closure/200, the matrix room has been closed. https://github.com/techlore/channel-content#what-else-do-we-do needs to be updated

The AUR might be "fun" but one should remember that the majority of it is maintained by "untrusted" maintainers and there have been previous instances when some packages in the AUR were compromised and malicious updates were pushed out to the users.

Debian is also recommended by PrivacyTools.io and is a very nice distro when it comes to Privacy/Security. Linux mint can be a nice alternative to ubuntu for new users as its UI is familiar and its history with privacy is really good (unlike ubuntu).

Hi!

In the show-notes, it's awesome that you link to your source. Would you add context to those links, please, like a story title or something. Many of the links do not contain a good description of what it talks about in the URI.

Thanks.

Guide here: https://github.com/rusty-snake/firejailed-tor-browser

Flatseal is a super easy GUI tool to sandbox flatpaks: https://flathub.org/apps/details/com.github.tchx84.Flatseal

Since you guys have mentioned fedora, you should also mention SE Linux and Cockpit. Cockpit is a great tool to manage SE Linux and Firewalld graphically, besides it can also manage qemu/kvm vm's at almost no resource usage. Its meant for servers but works perfectly with desktops and laptops with almost no expenses in terms of resources (50 megs of ram at the most extreme). Besides cockpit is made by Red Hat.
https://cockpit-project.org/

I used ufw before and portmaster now on linux and i must say portmaster performs better at blocking stuff. Or this seems to me but wont actually be the case. But still, a recomendation.

New users might be intimidated about magaging firewalls from the terminal, gufw can help as its a simple gui fir the most common linux firewall (ufw).

This should go without saying but one should never sign into their online accounts on their DE (unless its nextcloud) as they certainly provide the option to.

Awesome work. I'm watching through your videos and I am trying to change everything step by step to privacy and security.

In your iOS video you mentioned and showed a PDF with every configuration on the iPhone (with menues, submenues, ...) but sadly the iOSGuide.pdf is not possible to open by different ways for me (iOS/Linux).

Any idea how to solve it?
Thank you very much.

sup @henryistaken f^cking nice video bro

source: https://www.youtube.com/watch?v=9t6jImyvnQk

owner and maintainer of arkenfox here. I just saw the video, and I want to link to it in the arkenfox wiki

• this page: https://github.com/arkenfox/user.js/wiki/1.1-To-Arkenfox-or-Not
• in the "A FEW SETTINGS & EXTENSIONS" section

Some people just don't read, maybe a video is easier. I especially like how the unified messaging of AF (arkenfox) and PG (privacy guides) and let's not forget LW (librewolf), is starting to take affect - and resonates with what Tor Project has said and shown by Arthur's https://privacytests.org/.

Your video is almost a perfect match (to be expected since you base it on AF & PG)

However, there is a bit of a GIANT flaw in your recommended steps

• at the 2.22 mark you recommend users change to "Never remember history"

This makes your browser start in Private Window Browsing mode. This is not good.

• first: your site exceptions for not deleting cookies and site data will not work
  • you went to all the trouble of showing that and even how to manage exceptions
  • PB mode sanitizes in full regardless of any settings - that's the whole purpose of PB mode
• second, extensions by default are not enabled in PB mode
  • there goes your uBlock Origin, by default - yikes
• third: nitpick: it removes the ability to use "new private window" as a separate isolated self-sanitizing one off
  • note PB sanitizing happens when all PB mode windows are closed, hence it's useless if you start in PB mode
• fourth: nitpick: PB mode already uses ETP Strict so that would be redundant (sorry, but I like to pad my lists to look important)
• edit: fifth: PB mode (for now) doesn't utilize indexedDB or service workers and will lead to more site breakage

So ... can you edit the video? I would really like to link to it in arkenfox to help unify the messaging

Regards
Pants

The Peertube link links to your channel on the BitcoinTV instance instead of the Tilvids instance, in which Techlore is now active.