3WolfMoon's recent activity
-
Comment on Motorola’s GrapheneOS phones will launch in 2027 priced higher than Pixels in ~tech
-
Comment on Motorola’s GrapheneOS phones will launch in 2027 priced higher than Pixels in ~tech
3WolfMoon Link ParentThey have specific requirements which the vast majority of low end devices don't currently meet. This is stated most succinctly by this sentence in their FAQ: and is further expanded upon...They have specific requirements which the vast majority of low end devices don't currently meet. This is stated most succinctly by this sentence in their FAQ:
The goal of the project is not to slightly improve some aspects of insecure devices and supporting a broad set of devices would be directly counter to the values of the project.
and is further expanded upon throughout.
As @fxgn mentions, a recent-ish Pixel A series is comparatively affordable and will be supported for years to come, thanks in part to the aforementioned requirements. They mention support for lower end devices taking more time, requiring more changes and support from Motorola and/or Qualcomm. It's clear they are pushing for non-flagship devices which support their requirements in the future.
-
Comment on What are your favourite anime and/or manga? in ~anime
3WolfMoon LinkPlenty of mentioned series here I would consider some of my favorites, so here's a few that haven't been mentioned and might be a bit more obscure: Kaleido Star - A girl travels from Japan to...Plenty of mentioned series here I would consider some of my favorites, so here's a few that haven't been mentioned and might be a bit more obscure:
Kaleido Star - A girl travels from Japan to California to join the circus
Katanagatari - An isolated man becomes a sword for an ambitious woman
Symphogear - Idols bash aliens while singing
Samurai Flamenco - A hero never gives up -
Comment on What are your favourite anime and/or manga? in ~anime
3WolfMoon Link ParentYou might want to look at iyashikei anime. 3/4 of your listed series are likely considered iyashikei or adjacent. MyAnimeList description of iyashikei The Japanese word "iyashi" (癒し) means...You might want to look at iyashikei anime. 3/4 of your listed series are likely considered iyashikei or adjacent.
MyAnimeList description of iyashikei
The Japanese word "iyashi" (癒し) means healing, and the term "iyashikei" refers to anime and manga that "heal" the audience by instilling a calming feeling or evoking emotional catharsis. Almost always, Iyashikei stories have peaceful, somewhat mundane, and nostalgic atmospheres. The settings are idyllic with little or no conflict, and the narratives focus on personal reflection, heartwarming moments, a vague sense of melancholy, and/or an appreciation for the small things in life.ARIA, Mushishi, and Natsume's Book of Friends would be my personal recommendations. They will be most similar to Frieren's vibe. Calm, uplifting, melancholic. All 3 are truly fantastic series, and have enough content to last you a while.
-
Comment on GOG confirm they are working towards GOG Galaxy on Linux in ~games
3WolfMoon Link ParentI've been wanting Playnite on Linux for a long time. Their extensions and integrations are really great if you buy from a variety of sources. The dev posted an update more directly confirming a...I've been wanting Playnite on Linux for a long time. Their extensions and integrations are really great if you buy from a variety of sources.
The dev posted an update more directly confirming a Linux version soon™ several months after that article. It's indirectly linked in the article, sourcing his previous post, but I suspect some would miss it. Hopefully the timeline of "in 2026" is still accurate, but Playnite 11 isn't out yet, so I wouldn't be surprised if it takes a bit longer than his initial estimate.
-
Comment on Thoughts on graphene OS? in ~tech
3WolfMoon (edited )LinkWorks as expected, which is like stock Android. I have very rarely needed to change defaults to make apps work, but it will depend somewhat on how you use your phone. The major cons for most...If any of you run graphene OS, what are your long-term experiences with it?
Works as expected, which is like stock Android. I have very rarely needed to change defaults to make apps work, but it will depend somewhat on how you use your phone. The major cons for most people are probably that Google Wallet NFC payments won't work and your bank might not allow you to use their app
is there a plausible risk I need to worry about of the project losing support and eventually becoming less secure than stock Android?
I'm significantly more worried about changes to the AOSP and the push for Play Integrity adoption than the Graphene devs randomly deciding to close up shop. If Graphene were to stop development before your phone's support window expired, I guess you'd just back up your data and swap back to stock in order to keep up with security updates.
If you're interested in switching I would look through their documentation (FAQ/Usage) as they address many common questions and concerns in-depth. In most cases if you own a supported phone and are security/privacy conscious there isn't much reason not to use GrapheneOS.
-
Comment on Why emoji picker default on? in ~comp
3WolfMoon (edited )LinkTo put it simply, that's just how the GNOME devs roll. Support for the emoji picker was added in Firefox 150, likely when you began noticing it. Changing your extension's hotkey or the Firefox...To put it simply, that's just how the GNOME devs roll.
Support for the emoji picker was added in Firefox 150, likely when you began noticing it. Changing your extension's hotkey or the Firefox preference are probably the easiest solutions. Alternatively, you could unbind or change the binding for GTK3 apps (like Firefox) in
~/.config/gtk-3.0/gtk.css. I'm not sure if there is any choice from a user level for GTK4 apps unless one is provided by the app developers.Playing a bit of the devil's advocate:
Ctrl+.is likely a niche bind to have pre-existing, while easy access to emoji is desirable for many users these days, even if it may not be for the average Tildes user.edit: a user with your same complaint shared a gtk.css rebind snippet, probably more immediately helpful than the gtk docs link.
snippet
@binding-set EmojiSelectRemap { unbind "<Control>period"; bind "<Control><Shift>e" { "insert-emoji" () }; } entry, textview { -gtk-key-bindings: EmojiSelectRemap; } -
Comment on Announcing web serial support in Firefox 151 in ~comp
3WolfMoon (edited )LinkSeems like they didn't add a permissions section for this in about:preferences like they do with most similar features. Hopefully one is coming in the future. If you want to disable it entirely...Seems like they didn't add a permissions section for this in
about:preferenceslike they do with most similar features. Hopefully one is coming in the future. If you want to disable it entirely for now it looks like you'll have to go toabout:configand changedom.webserial.enabledtofalse -
Comment on Data centre fires take down anime piracy website? in ~anime
3WolfMoon LinkThese streaming sites come and go all the time. It should be easy enough to hop to a new one if they're your preferred method of anime piracy. The main tracker(s) for anime, where most of these...These streaming sites come and go all the time. It should be easy enough to hop to a new one if they're your preferred method of anime piracy.
The main tracker(s) for anime, where most of these sites source their material from, have been mostly unchanged for something like 20 years.
-
Comment on Is there a FLAC equivalent for digital comics? in ~comics
3WolfMoon (edited )Link Parent.cbz is convenient but the space saved on images purely by archiving them will be minimal as most of the compression for images is already handled by the image format itself. Using tools like....cbz is convenient but the space saved on images purely by archiving them will be minimal as most of the compression for images is already handled by the image format itself. Using tools like oxipng or pingo to losslessly compress images will often save you more significant amounts of space. There is a lot of variability in image compression, especially if you're willing to use lossy compression, in which case things become much more subjective.
e.g. a short manga (grayscale jpegs)
# zip with no compression (store) > 7z a -tzip -mx=0 mx0.cbz Test/* Archive size: 73635470 bytes (71 MiB) # zip with "ultra" deflate compression > 7z a -tzip -mx=9 mx9.cbz Test/* Archive size: 69705612 bytes (67 MiB) # lossless optimization + zip with no compression > pingo -lossless -s4 Test && 7z a -tzip -mx=0 mx0.cbz Test/* 61 files => 9.25 MB - (13.18%) saved Archive size: 63931803 bytes (61 MiB) -
Comment on Which covers did it better than (or put a fresh twist on) the original? in ~music
3WolfMoon LinkI prefer Purity Ring - Grammy over the original by Soulja Boy. Honorable mention: I think Ariana Grande - Emotions is a very impressive cover, but wouldn't say it's better than Mariah Carey.I prefer Purity Ring - Grammy over the original by Soulja Boy.
Honorable mention: I think Ariana Grande - Emotions is a very impressive cover, but wouldn't say it's better than Mariah Carey.
-
Comment on New Firefox features: Built-in free VPN, split view, tab notes in ~tech
3WolfMoon Link ParentIt's my understanding that a VPN server can only serve an end user at half of its rate, considering it needs to download the requested data and upload it to the user.It's my understanding that a VPN server can only serve an end user at half of its rate, considering it needs to download the requested data and upload it to the user.
-
Comment on New Firefox features: Built-in free VPN, split view, tab notes in ~tech
3WolfMoon Link ParentMozilla VPN is a reskin of Mullvad. One would assume their upcoming free offering makes use of the same partnership, but they aren't explicit in the blog post. Proton's free plan does have various...Mozilla VPN is a reskin of Mullvad. One would assume their upcoming free offering makes use of the same partnership, but they aren't explicit in the blog post.
Proton's free plan does have various restrictions, most notably for many users probably being limited to a single device and not supporting P2P, but it doesn't have data caps. The built-in Firefox one will be severely limited in comparison, proxying only your browser traffic with a 50GB cap.
-
Comment on Need help deciding if I need to replace my Pixel running grapheneOS in ~tech
3WolfMoon (edited )Link Parenthttps://grapheneos.org/faq#legacy-devices https://grapheneos.org/faq#device-lifetimeGrapheneOS aims to provide reasonably private and secure devices. It cannot do that once device support code like firmware, kernel and vendor code is no longer actively maintained. Even if the community was prepared to take over maintenance of the open source code and to replace the rest, firmware would present a major issue, and the community has never been active or interested enough in device support to consider attempting this. Unlike many other platforms, GrapheneOS has a much higher minimum standard than simply having devices fully functional, as they also need to provide the expected level of security. It would start to become realistic to provide substantially longer device support once GrapheneOS controls the hardware and firmware via custom hardware manufactured for it. Until then, the lifetime of devices will remain based on manufacturer support.
https://grapheneos.org/faq#legacy-devices
GrapheneOS can only fully provide security updates to a device provided that the OEM is releasing them. When an OEM is no longer providing security updates, GrapheneOS aims to provide harm reduction releases for devices which only have a minimum of 3 years support. Extended support updates at minimum will be done until the next Android version. [ ... ] Harm reduction releases do not have complete security patches because it's not possible to provide full security updates for the device without OEM support and they are intended to buy users some limited time to migrate to a supported device.
-
Comment on Need help deciding if I need to replace my Pixel running grapheneOS in ~tech
3WolfMoon Link ParentMaybe they're a Fi user referring to this promo?Maybe they're a Fi user referring to this promo?
To qualify for the $250 discount, you need to do all of the following:
- Purchase the device or currently be in a group plan with the purchaser.
- Activate the device on an existing full service plan (data-only SIMs do not qualify) within 30 days of the shipment confirmation.
- Remain active and in good standing on the qualifying device for 120 consecutive days. Pausing, changing, or suspending the account will void the promotion.
-
Comment on Can coding agents relicense open source through a “clean room” implementation of code? in ~comp
3WolfMoon LinkI guess this drama is the context behind this, presumably tongue-in-cheek, website?I guess this drama is the context behind this, presumably tongue-in-cheek, website?
-
Comment on I made a word game in ~games
3WolfMoon Link ParentThe solve video is really cool, great addition! It worked perfectly for me. I'd share it here, but don't want to spoil today's puzzle for others. This is minor, but you may want to limit the input...The solve video is really cool, great addition! It worked perfectly for me. I'd share it here, but don't want to spoil today's puzzle for others.
This is minor, but you may want to limit the input length of leaderboard names. There is no feedback that you're exceeding the limit until you see your beautiful name chopped off on the board.
-
Comment on <deleted topic> in ~tech
3WolfMoon Link ParentI'm not completely sure either, as I know little about Canadian law or Deimos's personal feelings, but I haven't seen anything to suggest discussion of piracy should be discouraged. I just comment...I'm not completely sure either, as I know little about Canadian law or Deimos's personal feelings, but I haven't seen anything to suggest discussion of piracy should be discouraged. I just comment in good faith and assume if something isn't welcome it will either be pointed out to me by a more longstanding community member or deleted by Deimos.
I avoid direct linking as it's more frequently frowned upon both by discussion sites like Tildes and sometimes the would-be linked communities themselves. In this specific case, if someone wasn't willing or able to do the last bit of research to find appropriate links on their own, they likely wouldn't do well on a private tracker anyway.
-
Comment on <deleted topic> in ~tech
3WolfMoon (edited )LinkAgreed with other comments here that you should interview to join your first private tracker(s), as it avoids risks from both ends: You end up as a bad actor, your inviter is associated. Your...- Exemplary
Agreed with other comments here that you should interview to join your first private tracker(s), as it avoids risks from both ends:
- You end up as a bad actor, your inviter is associated.
- Your inviter ends up as a bad actor, you are associated.
Reputable trackers will often have official recruitment to other trackers in their invite forums, which can be accessed after reaching certain user classes. This is the recommended path to future trackers if you don't know and trust someone who already has access.
Don't fall for much of the newbie misinformation you will see many places outside of the trackers themselves. It's often spread by those who are upset they were unable to gain access or lost access to trackers, usually because they broke the rules and are arrogant or straight-up dumb:
Spending money for tracker access
No reputable tracker offers paid access. At most, they may offer small (often cosmetic) benefits for donators. In no way is paying a requirement for use, any site pressuring you towards payment is not reputable.
Being intimidated by tracker staff
The vast majority of tracker staff are in the position because it's their hobby. If you're genuinely attempting to contribute, they will probably be willing to help, but you're expected to read the rules, wikis, etc., be respectful, and use your brain. You can also use trackers longterm with minimal to no community interaction if that's what you desire, but the communities are often informative and helpful.
Ratio is too difficult or requires a seedbox
It's entirely possible to use private trackers on a poor home connection. They often encourage uploading and long term seeding through bonus point systems, allowing you to improve ratio over time even if nobody downloads from you directly. Don't immediately download as much as you can upon getting access. Download things you're actually wanting and seed them for as long as possible (forever would be best.) Competitive trackers with small filesizes will take you much longer to build a comfortable buffer. Make use of any freeleech, tokens, bonuses, etc. where possible.
If you want, you can set up a seedbox of some sort to improve buffer faster, but it's not a requirement or cure-all. There may be some discussion on relevant topics in the tracker forums.
Luckily, you're looking for a music tracker, and what I would consider the best current music tracker offers both an interview process and a high quality invite forum. You may have to idle in IRC for quite a while before given an opportunity to interview. They offer a preparation site which you should study beforehand. Answer to the best of your ability, but do not try to cheat the interview.
Here is a spreadsheet with some information on many trackers. I'd recommend looking at RED and MAM as starting points given your mentioned needs.
-
Comment on Lawsuit alleges that WhatsApp has no end-to-end encryption in ~tech
3WolfMoon (edited )Link ParentSignal details how they handle attachments somewhat in this blog. full text of relevant section The simple guess would be that WhatsApp uses a similar process, since they use the Signal protocol....Signal details how they handle attachments somewhat in this blog.
full text of relevant section
When something big needs to be sent through Signal, we send it as an attachment. Big things include photos, videos, files, and really long text messages. Even the end-to-end encrypted archives that are transferred from the primary device to the new linked device — as mentioned in the previous section — are sent as attachments.
Let’s say that someone wants to send a friend a picture of their cat on Signal. To make this happen quickly and easily, instead of sending the large image directly inside a Signal message, Signal encrypts the cat pic and uploads it to a file server. To ensure that the intended recipient (and only the intended recipient) can see the cat pic, the sender shares a decryption key and the download location for the uploaded cat pic in a specially formatted Signal message. The sender can re-use the same location and key across multiple messages for each of the recipient’s linked devices, but the sender only needs to upload the large file once.
This speeds up the process of sending big things on Signal, while ensuring that only the intended recipient with the decryption key for the attachment can ever access it. We’re so serious about this level of privacy that all encrypted attachments are also padded to prevent those without the decryption key from determining the exact size of the encrypted attachment.
That’s how attachments are sent in Signal, to ensure privacy and speed. But of course we don’t want to hold onto that cat picture on our file servers forever, even if it’s end-to-end encrypted. The Signal servers automatically delete encrypted attachments 45 days after they are uploaded.
This follows from how Signal delivers your messages. Each device on a Signal account has its own mailbox. Devices are always retrieving messages from their mailbox when they are online, and as soon as the device confirms they’ve gotten a message, it is deleted from the Signal servers.
If a device has been offline for a while, it may have a lot of messages waiting in its mailbox when it returns. Today, Signal will hold a message in a device’s mailbox for up to 45 days, giving an idle device a chance to wake up and fetch it.
Since we know a message is only available for 45 days after it is sent, we assume that if a device hasn’t retrieved the attachment after 45 days, it won’t ever retrieve it.
It’d be nice if we could know when everyone has received your cat picture so we could delete the attachment earlier. But, we really don’t want to know who’s downloading a particular attachment and when, so we don’t track that. In general, we can’t tell who received an attachment pointer, how many received it, which message(s) included it, and who downloaded it — we’d like to keep it that way. So we always delete end-to-end encrypted attachments 45 days after they are uploaded.
The simple guess would be that WhatsApp uses a similar process, since they use the Signal protocol. Exact implementation may vary of course.
that doesn’t seem e2ee, as it would be trivial to intercept.
Only insomuch as your typical Signal text messages are trivial to intercept, as the content of your messages should be E2EE. In this case, that should be the attachment containing the media location and decryption key.
I'm far from an expert, so this is an educated guess based on available information. Feel free to correct if you have experience in this domain.
Semi-related post from GrapheneOS: Pixel 11 doesn't meet the GrapheneOS security standards and may be skipped
full text
We have a partial port of GrapheneOS to the Pixel 11 series after a week of work on it. We're unable to complete the port due to lack of support for ARM hardware memory tagging in software, firmware and near certainly hardware. It appears Google cut an important security feature to save money.ARM hardware memory tagging (MTE) is used by GrapheneOS across the entire base OS including the kernel and every standard base OS process. It's only temporarily disabled for a few device-specific processes. It greatly improves protection against nearly all remote exploits and many local exploits.
Pixel 8 launched with hardware MTE support in October 2023. We integrated it into our hardened_malloc project and began using it across the OS later that month. Android and the Pixel OS never started using it by default. Android Advanced Protection Mode in Android 16 enables it for a few processes.
Apple's Memory Integrity Enforcement (MIE) is an always enabled feature on the iPhone 17. It's simply a high quality implementation of MTE using the latest standard extensions. It uses MTE in the most secure mode in the kernel and a large portion of userbase. They did a very good job integrating it.
Apple's MIE and Android 16+ AAPM don't use MTE for user installed apps unless those explicitly opt in. GrapheneOS enables it for more apps automatically and has a toggle for users to opt-in for every user installed app. There's a per-app toggle to opt-out for incompatible apps which is uncommon.
Neither iOS or Android encourage app developers to opt into MTE and other more aggressive security features used in the base OS. Apple's docs warn developers of performance and stability issues. Even Signal doesn't opt-in. Our approach enables forcing using MTE in the standard allocators regardless.
Pixel 11 does have security improvements including moving to post-quantum secure verified boot (ML-DSA) and replacing Samsung Shannon IMS with AOSP IMS. Titan M3 should significantly improve protection against data extraction in Before First Unlock state. It's too bad they ruined it by cutting MTE.
Pixel 11 series is a lot more expensive for an incremental improvement to the CPU, the same underpowered GPU and reduced RAM for the Pro base models. They finally caught up to the last generation of Qualcomm cellular radio. It's overpriced, the upgrades aren't impressive and losing MTE is appalling.
Compared to the Pixel 11, a Snapdragon 8 Elite Gen 5 has 40% higher single threaded CPU performance, 80% higher multi threaded performance, over 100% higher GPU performance and a far better cellular radio. It also finally has MTE. The next gen is what will be in the first Motorola with GrapheneOS.
Pixel 9a and earlier (including Nexus devices) were the Android Open Source Project reference devices. Pixel support was removed from AOSP with Android 16. It's now harder to support Pixels than many other devices and massive progress towards open source firmware and driver libraries was discarded.
Compared to the stock Pixel OS, GrapheneOS ships AOSP patches months earlier and Linux kernel patches many months earlier. However, we rely on them for firmware and most driver updates. We also want to move to new kernel branches earlier. These things can be improved with our Motorola partnership.
We strongly recommend against buying Pixel 11 devices. Pixel 8, 9 and 10 have much better overall security for GrapheneOS. Pixel 10 is cheaper with similar hardware and MTE. Pixel 11's Titan M3 should improve BFU security for users without a strong passphrase, but losing MTE craters AFU security.
We haven't determined what to do about this situation. It may be best for us to skip the Pixel 11 series devices. We can shift our focus entirely to the upcoming Motorola devices instead. Pixel 10a was really a 9th gen Pixel, so hopefully the Pixel 11a does the same with 10th gen and includes MTE.