What privacy friendly app/service/stuff makes your life simpler?
I am trying to re-adjust how much effort I want to put into privacy concerns. Too much stuff I'm using isn't working properly or using a lot of my mental resources that I need elsewhere.
For (a bad) example: I recently performed a half-switch from my self-hosted Nextcloud instance to ProtonDrive, in the hope that it would spare me the stress to maintain my private Nextcloud. Unfortunately, it doesn't, as basic functionality like cross-device-sync is not possible (there isn't even a client app for Linux, as of yet).
This brings me to the question: have you found any services/apps/stuff that significantly eases your life while still being privacy friendly? I know, this is a broad question, but I think this is for the best as this thread then maybe even has use for other users.
I’ve found Syncthing a better way to handle file sync than NextCloud. Much more set and forget and not a single point of failure. It also syncs a notes directory in flat .md format, so anything can edit them, in a simple directory hierarchy.
I've used it for years, across multiple devices, syncing 100gb. My average daily sync is probably 20gb.
It's been surprisingly good on battery - currently using 0.9% average. It's never been a significant battery hog for me.
I currently have 28 sync jobs (folders) on my phone, ranging from a few MB to 20gb, from a few files to 1200 files. Most only sync over wifi, but my DCIM folder (one of the larger ones) is over any connection.
Apps like Foldersync are much heavier on battery for me. Resilio is terrible for me (and it's also a memory hog because I have some large folders).
Maybe you have a stuck file that's causing it to hang. May be worth pausing all but one job, see if that affects battery. Then work though them.
Also, check out Syncthing-Fork, it has finer controls over individual sync jobs. For example, I let photos sync over any connection and on battery, but my media (music/video) only on wifi and while charging.
By default, the built in Photos sync job works as you describe. It essentially just has the "Backup" flag set (send, ignore remote deletes set on both ends). Even manually configuring that (send/no delete) in a job works fine for me.
I don't use that job because I like to use my computer to manage photos (all files really) on my phone. So I have numerous 2-way jobs, so I can move files around on my server, and those changes get reflected back to the phone. (There are a couple send-only jobs for other things).
My storage has a folder structure for users that reflects the folder structure on a phone:
Users//Phone
SD_Internal
SD_External
The sync jobs then keep those folders in sync in their respective phone structure. Makes it easier to manage a phone, especially when I switch phones, just export the config from the old phone, install ST, import the config, and my files all come back.
I also configure versioning on each folder based on what it does. Most folders have no versioning, important stuff gets a 30 day trash can (for example, on my "server", for photos).
I currently run SyncTrayzor on a Windows desktop that's always on, so any pics I take with my phone get synced nearly instantly. I'm currently moving ST to a Linux Container on a new Proxmox server. There's a container available from Turnkey (think it's turnkey.org)
I'll have to defer to your experience; I've set it up on a PC, a NAS and a phone. The phone was connected to an ethernet-equipped dock at the time of setup so the sync was quick and painless.
I don't see a hit on battery life on a Fairphone 4 running /e/OS after initial sync has completed.
I haven't had battery usage issues with it for years! Just checked now and it's below 0.4% - it doesn't even show up in the main app list in the battery settings.
Syncthing is brilliant, although for me it has had a heck of a learning curve to keep straight. Might just be me though.
It does have a bit of a learning curve, you have to think about what you're trying to do.
My biggest issue with Syncthing is that it becomes unusable for large amounts of data due to the lack of selective sync (ignore lists are cumbersome as hell) and lack of virtual file system support. I have about 8TB of data on my NAS that I want to access remotely and it is not feasible to have duplicate copies of that much data on all of my devices.
You could simply sync select subdirectories.
That's what i do. Work perfectly
Agreed.
Resilio sync works better. But the “sync identity” thing is broken, and configuring it declaratively is hard.
But 100% agree. Would love a virtual file system solution. Ideally one which you can use to fill available disk space and ensure you always have a minimum number of copies.
NewPipe is a killer app I would say, with nearly Youtube Red level functionality in something that's free and OSS. A bit afield from privacy, but you do get to access youtube stuff without logging in.
From what I understand, NewPipe has been abandoned and someone else forked it to Tubular which includes SponsorBlock.
That's completely incorrect. From NewPipe's Github:
polymorphicshade "stopped" development on their fork of NewPipe, which included SponsorBlock (because NewPipe did not want to include it) and started working on their rewrite of their own fork and/or NewPipe, which is now Tubular.
Very good to know. After following your Github link, I found my way to the blog post that it looks like you are quoting:
https://newpipe.net/blog/pinned/announcement/State-of-the-Pipe-2023/
You mean the quote block where I said it was undergoing a large rewrite and don't submit any feature PRs? That was actually the first two sentences of the README.md on the TeamNewPipe GitHub link I gave lol.
Bitwarden, Aegis, Syncthing are probably the most impactful
When I search aegis there’s so many different results, which one are you referring to?
Edit: likely the 2FA that’s just for android
Ntfy - no more google reading notifications
Jellyfin - media served without questionable Plex account
Arch - on so many levels allows me a private computing experience
Posteo - simple but efficient email service
Resilio sync - cloudless syncing
NTFY looks intriguing.
If I'm reading the description properly, it uses an HTTP server as the middleman for the notifications?
Pretty
neatnifty idea. (Yea, had to come back and edit because I missed a great opportunity).It's based on unifiedpush standard https://unifiedpush.org/. So a central notification middleman like google firebase for all your apps (that support it). There's messengers like mercurygram, fluffychat, Molly that support it and you can also send notifications yourself via a simple curl command.
Wow, I really appreciate how they use animations to show how it works (and I generally despise any animation on a home page).
That's how it should be done.
Also, what they've done is impressive. Smart. I had no idea this existed, though I've seen another open solution to Unified Messaging (just can't recall what). This is really promising.
The most impactful are probably browser (Firefox), adblocker (uBlock Origin), DNS over https (Mullvad), and password manager (Bitwarden), because these are used every single day.
https://rethinkdns.com/ the android app is also an excellent firewall with logging. I use a custom config on my router. I can't say enough good things about this.
https://simplex.chat/ Android/ iOS/ macOS/ Linux/ Windows getting people to switch is a pita though.
I look forward to SimpleX development - it's already come a long way.
It's unfortunately heavy on ram for me.
Bitwarden, PiHole, Proton Pass/VPN/Drive, BlueWallet to name a few
NextDNS - I use it on my router and all mobile devices.
Is NextDNS really a good privacy tool? I use it myself because it's convenient, but I always assumed that they would collect data about me since it's a free service
I pay for mine, not sure how it differs from the free version but you can turn logging off, or if you have logging on you can specific how long to store logs and what jurisdiction to keep them in (I keep mine for a few months in Switzerland). You of course have to place some trust in NextDNS the company that they are actually doing what they claim to do as far as respecting user privacy but I trust them more than Google and Cloudflare, which is what I was using previously.
You can turn off logging in settings
Freetube on PC has really changed it up for me. Vencord over Discord is another I've not seen mentioned yet, basically strips out the telemetry and sandboxes the application.
Pair Libre redirect with Freetube and that's been my worry free YouTube experience during all of this anti adblocker business.
Oh yeah totally forgot to mention that! An absolute must if you have freetube indeed 🙌
Which paywall-bypassing addon would you recommend?
I can't get behind Android Firefox/Gecko-based due to their lack of security:
Ref: https://grapheneos.org/usage#web-browsing
To me, that depends on what you use the phone for. I sometimes use mine for banking as well as logging into various sites, so I want to reasonably minimize the security risk I am taking. If I wasn't, then sure.
I've used Firefox mobile for a while now and I've had zero issues. The attack surface may be "much more," but that doesn't mean that it's completely open to hackers.
Plus let's be real: Gecko-based browsers are, what, 1% of the browser market? Guess which browser is the most targeted by malicious actors? Not the one having 1% of the market, that's for sure.
Last I checked, Firefox was close to 3%, but you right, still not a large number.
It doesn't have to attract the most attackers, especially if it is notoriously weak. You shouldn't choose software that is easier to exploit simply because it's more obscure. Do you also choose weaker encryption algorithms because no one uses them? I sure hope not.
And your comment would probably ring a little more true, except we just had the xz debacle, and guess how much Linux has of a market share? Probably close to Firefox's, both in the single digits.
No, I use Firefox because it's an excellent browser. It doesn't fit GrapheneOS's security requirements, but then, I'm not too concerned, because it's quite secure regardless. Even to the point in which it's more annoying than Chrome for certain things (like HTST.) You're trying to paint Firefox as "easy to exploit" when that's not true. Easier doesn't mean easy. The Kremlin might be easier to sneak into than the Pentagon. But that doesn't mean it's easy. Hell, Tor uses it to build its Tor browser. They could very well use Chromium for that.
You're probably referring to desktop Linux. Linux is used in billions of devices all over the world, and it reigns in the server space. So, no. Not "in the single digits" usage.
Two I use a lot daily are KeePass 2 in various versions, computer as well as tablet. I used KeePass "original" 1 for years, but moved to 2/XC/DX. Occasionally also used for storing notes and not just passwords.
My notetaker, all hands down, though. Joplin, with encryption activated, the file stored for syncing on my privacy oriented community's encrypted NextCloud. I am an avid notetaker, both digital and analogue, and Joplin really fits my needs.
OK, third, honourable mention: Veracrypt
Nextcloud all the way. I especially love the calendar, contacts and notes integrations besides the file sync, and it's extensibility in general. Such a powerful tool.
I love my Nextcloud instance, too. Zero problems in the past 4 years. I don’t run many extensions on it, though. The mobile app works great as well.
Trillium plus its sync server in a VM is my goto for notes. Mobile isn’t a problem (I usually drops everything into my notes app, then expand on it when I’m in front of a full keyboard at home).
Not sure how I could get through my day without either of these two.
Have you gotten any recipe integrations to work with nextcloud? Can't find a satisfactory apk to enter and edit recipes correctly, kinda turning me off to the entire nextcloud thing.
I just use a bunch of markdown files for that. Guess you could also use Notes and its category feature.
NC isnt perfect imo but its like having an open source car or house. Its not emergency ready like no downtime, no bugs, no issues but it will do 95% uptime if configured correctly and its is insanely versatile. I cant imagine any other app being this versatile. You can check my setup if you want.
What's NC? Got a link?
Edit: Ah, NextCloud, I'm assuming...
Nextcloud, yes. It is insane. Its a full cloud experience. Documents, bookmarks, pictures, whiteboards and more.
Monero. No more fighting with banks locking me out of my accounts or blocking my transactions.
i wonder why this happens. are you from somewhere where this is common or were your transactions shady? i only got my bank block one transaction for me and that was because i didn't know i had to 'activate' the ability to send money to accounts in the eu
Likely its because of all the other privacy tools that I use. Banks don't like it when they can't track you. Every time they think I have a new device. They interpret "oh shit we can't track this person between sessions" as "its suspicious! Lock the account!" ...even though I use the correct username & password on the very first try. Smh
Ultimately this is the result of Machine Leaning algorithms, but terrible ones because they never learn that they false positive 100% of the time on my account.
Anyway, this is never an issue with monero. The transactions can't be blocked. It literally works every time. And I hold the keys, so I don't have to worry about loosing my money because my bank gets hacked (or someone calls them with the knowledge of my mother's maiden name and the last 4 street addresses I had, and uses this public information to reset my password and steal my money)
Monero ftw! Limitless Peace
I don't understand. How does this bring you peace? Can you pay groceries with monero?
Pi-hole and Simplewall, everything except my phone is running Ethernet
e/os on the phone was a game changer but mostly just accepting that digital privacy is not going to work if you cannot take a step back from tech and accept that the transaction is your data in exchange for access to new shiny toys you don't need that will never belong to you no matter what they cost.
Niether are open source, but the full versions of AdGuard for each platform, Adguard Public DNS and DuckDuckGo.
Vaultwarden, linkding, Snikket, Miniflux, and some more.
Revanced Manager
KitchenOwl, an Android app to organize recipes, ingredients and shopping lists, it's FOSS and available on f-droid.
DNSCrypt has been working pretty well for me.
I never heard of it, but reading their website I find it kind of strange that 2/3 testimonials are from online casino websites...
That is not the DNSCrypt official website.
Official site: https://dnscrypt.info/
Official repo: https://github.com/DNSCrypt/dnscrypt-proxy
Apple
It seems to get derided a lot here, but none of your data is harvested and tied to you or sold. It’s aggregated and anonymised if it’s sent off device, and I stopped using Proton drive when you could finally encrypt iCloud storage. I even use their email as default now since it’s not reading my messages and selling my info like outlook started doing.
I was considering to switch to apple for this reason, but I've read that in terms of privacy, there's no significant difference between a Pixel Android with Stock OS and an iPhone. This made me hesitant. I really just want things to go smooth and hasslefree without being spied on and coerced... Do you, by chance, have any reading material on the privacy of apple services I could read up on?
Apple really doesn’t advertise. The data never leaves apple. Everyone else sells your information.
“Apple… is the most privacy-conscious firm out there. Apple only stores the information that is necessary to maintain users’ accounts. This is because their website is not… reliant on advertising revenue. “
Source: https://9to5mac.com/2022/08/25/apple-collect-less-data-than-other-companies/