The meteoric rise of nostr
The brand new protocol is seeing a huge early adoption driven by discontent with established social networks
After the acquisition of Twitter by the South African con-man and billionaire the free and open source social network world is generating a lot of heat. The number of users and nodes of Mastodon in particular and the Fediverse at large has been climbing steadily for months now. However, there is no shortage of people who voice their concerns about the federated nature of such services, which rely on centralized instances governed by small dictators with absolute power.
Use Syncthing to synchronize your files
Forget about third-party cloud solutions that invade your privacy
These days almost everyone uses services like Dropbox or mega.nz to store their important files and have them accessible wherever and whenever they need them. I’m told it is not uncommon to use these external services to back up all one’s files, from photos to sensitive and private documents. Well, good news. If you actually care about your files and feel uneasy to have them all in other people’s servers, you may want to have a look at Syncthing, an open source and free (as in free beer) continuous file synchronization program that synchronizes your files between your computers without being stored or ever going through third parties. In this post I’ll talk about how it works and how to set it up to sync directories between your computers, laptops and phones.
Upgrade your old RSA SSH key to Ed25519
The RSA algorithm has some problems and you should update to Ed25519
If you work regularly with remote machines or use online services like Gitlab, you are probably using an SSH key. And if you have not updated it recently, chances are you are using an RSA key, or, god forbid, an ECDSA or DSA key. Well, bad news: in order to be on the safe side, you should probably upgrade. A presentation at BlackHat 2013 reported significant advances in solving the problems on which DSA and some other key types are based. The presentation suggested that keys based on elliptic curve cryptography (ECC) should be used instead: ECDSA or Ed25519. Additionally, ECDSA and DSA have nasty additional issues, so you should probably just stick to Ed25519. Here’s how to upgrade.
Create your static photo gallery with thumbsup
Do not post your photos in online services that do not respect your rights, create your own static HTML photo gallery for your website with thumbsup
It is nowadays commonplace to upload your valued photos to online services that don’t respect your rights like Flickr, Google Photos or Instagram. While these sites have a social component that may help you build an audience and have a wider reach, usually their terms and conditions are abusive to end users. In this post I’ll be discussing how to create your own static HTML photo gallery that you can host on your website using
thumbsup, a static gallery generator written in Python that produces totally customizable photo galleries. You can host your high resolution photos in your private server and have the gallery link to them. The photo gallery on this very site is generated using this method.
Searx: moving away from DuckDuckGo
The metasearch engine open source project Searx might be what you are looking for in terms of private web search
I have been using DuckDuckGo as my search engine of choice for the last few years. Howerver, DuckDuckGo seems to have a few problems:
- It is based in the US, arguably not the most privacy-respecting jurisdiction in the world.
- Only part of their source code is open.
- Uses Amazon Web Services (AWS) as a cloud provider and Cloudfare CDS.
- It looks like their browser was caught tracking visited websites per user.
- At the end of the day, you can’t really know that they are telling the truth when they promise not to track you.
In this post, I’m discussing Searx, a better alternative to DuckDuckGo that is truly open and driven by the community.
Bye bye Twitter (almost)
Quick note on why I removed my Twitter account
It’s been a while since I started trying to decouple myself from big tech companies that sell my data to third parties, give them away freely to governments, or feed them to huge, unsupervised AI systems to target me better with ads – what is commonly known as degoogling. Today I’m taking another step in this process by deleting my personal Twitter account. twitter.com/jumpinglangur is no more!