The whole thing is weird and the CEO especially so, and not weird in a good way: https://d-shoot.net/kagi.html

https://www.partykit.io/ sort of? maybe?

Gosh darn it I only just onboarded to Omnivore a few months ago Now I guess I need to find a new place to store bookmarks

One example I can think of is Widevine DRM, which is owned by Google and is closed source: https://en.wikipedia.org/wiki/Widevine

Google currently allows Mozilla (and others) to distribute this within Firefox, allowing Netflix, Disney+, and various other video streaming services to work within Firefox without any technical work performed by the user

I don’t believe Google would ever willingly take this away from Mozilla, but it’s entirely possible that the movie and music industries pressure Google to reduce access to Widevine (the same way they pressured Netflix into adopting DRM)

For disappearing messages to work, your conversation partner has to promise they won’t take photos of their screen, and they have to promise to use an app that actually implements the feature instead of just pretending to, and the app developers have to promise to have implemented the code to delete a message when the service says it should

Is there actually a cryptographically-sound and physically-complete method for ensuring that a message is only legible for a temporary duration once it leaves your own device and is delivered to someone elses?

Hmmm, is CloudFlare known for being a bad actor in terms of privacy?

Setting that aside, no matter what you pick, you’ll be exposing your IP address, from which your ISP and/or general location may be derived

If you don’t trust CloudFlare with that information then you basically cannot trust anyone else, so maybe you’d need to run your own service and ping that instead now that you’re in a situation where you can only trust yourself 🤷

The other issue that comes to mind is that you’re only testing reachability to one address, which means you could get a false negative where that address stops working but the rest of the internet is actually fine

Without being specific, I’d try to get something with firmware updates available on LVFS: https://fwupd.org/

And you might want to check for distribution specific notes on that model e.g.

• https://ubuntu.com/certified/laptops
• https://wiki.archlinux.org/title/Category:Laptops
• https://linux-on-laptops.com/
• https://www.linlap.com/doku.php

If Wayland is more important to you than AI/ML/LLMs then you probably don’t want anything with an nVidia GPU

We need a verified check-mark for true wayland users :P

I did actually do this already, separate from working on this issue, but can confirm the intermittent problems with the combination of wpa_supplicant and systemd-networkd

I’m not an expert, but my understanding of the Global Shortcuts portal is that it’s very much designed for the push-to-talk use case where an app is not focused but still receives button events for exactly the keys its interested in and no other keys: I think this would cause problems if an app requested every key (e.g. if the request was approved then no keys would work in every other app)

It’ll be interesting to see how the remaining compatibility/accessibility issues are tackled, either in portals or in wayland protocols

There’s a portal for Global Shortcuts: https://flatpak.github.io/xdg-desktop-portal/docs/doc-org.freedesktop.portal.GlobalShortcuts.html

KDE and Hyprland already implement it, and COSMIC seems likely to

On the app side, if we can get the major toolkits to adopt it, then hopefully that covers most actively-maintained apps (but it’s unlikely to cover legacy apps): https://github.com/electron/electron/issues/38288

Gosh, I’m so fascinated by the concept of removing/hiding the tabs implementation from every app and relying 100% on the window manager to provide this

Wayland breaks global hotkeys: I present to you: Hyprland (where you can get global hotkeys). Now, it is normally not allowed by design, as a security measure

Not disagreeing at all, but I’d like to add some information here to support your correction

There’s a GlobalShortcuts portal ( https://flatpak.github.io/xdg-desktop-portal/docs/#gdbus-org.freedesktop.impl.portal.GlobalShortcuts ), and this is implemented for hyprland in xdg-desktop-portal-hyprland ( https://github.com/hyprwm/xdg-desktop-portal-hyprland/blob/b2fc1110963fa583ad5348a9dc0101bd58ceac7a/hyprland.portal#L3 )

So, technically, there is nothing in the wayland collection of protocols that supports global keyboard shortcuts, but (along with lots of other supporting functionality), this is addressed via the collection of portal APIs

As it happens, KDE already supports the GlobalShortcuts portal: https://invent.kde.org/plasma/xdg-desktop-portal-kde/-/blob/master/data/kde.portal#L3

Any desktop can provide an implementation of the GlobalShortcuts portal, and any app can adopt it as required (although if it’s implemented within popular toolkits/frameworks, then app developers won’t have to even think about it)

Here are related tracking issues:

• https://gitlab.gnome.org/GNOME/xdg-desktop-portal-gnome/-/issues/47
• https://github.com/pop-os/xdg-desktop-portal-cosmic/issues/4
• https://github.com/emersion/xdg-desktop-portal-wlr/issues/240
• https://github.com/electron/electron/issues/38288
• https://github.com/tauri-apps/tauri/issues/3578

Proton emails are stored in an encrypted form that goes beyond the simple authentication that is part of the POP/IMAP specifications

Proton does have open-source bridges/proxies, so they aren’t hiding these details from us

Perhaps Thunderbird could be enhanced to support the Proton features directly?

https://thenib.com/mister-gotcha/

EFF still recommend Signal (and others) for people fitting various risk profiles: https://ssd.eff.org/

Google is also going with a combined approach: https://security.googleblog.com/2023/08/toward-quantum-resilient-security-keys.html

I encounter misinformation and other FUD about immutable distributions quite frequently

Imagine a root filesystem that is only modified when you expect, instead of at any time by any software on your system, the horror! </sarcasm>

I bought a sealed device, with the intention of doing development but have not yet done anything like that

I installed GadgetBridge on my Android phone, paired it with the watch, uploaded the latest PineTime firmware, all without looking at code or opening it up or anything

It works perfectly fine as a basic watch with step counter and heart-rate monitor (although, I am not sure how accurate these features are)

If you can browse the web, download files, and find that file again when using a different app, then I think you’ll be fine

I’m a huge fan of nushell