Does it have easy LUKS BTRFS + snapshots setup?

That is somehow really hard on Debian

The thing is, Kate has LSPs, debugger integration, inline hints, compiler integration and warnings, projects and more.

The ecosystem is just not huge and it doesnt have full 3rd party extension support like VSCodium etc

A way more trusted project is this

https://github.com/mvt-project/mvt

Just create a new bug, choose plasmashell and in the remplate scroll around to find the right component. If it isnt perfect not a problem, they can fix it.

Use kinfo to get infos about your system

They dont want to give control to platforms and their policies or update frequencies or some nonsense. Meanwhile they love Google

That depends on where you got the APK from

• the playstore apk only supports FCM
• the standalone, hidden (you only find it via search engines), apk on their website also supports websocket
• Twinhelix Signal-FOSS only supports websocket
• molly also supports blobfree FCM and UnifiedPush

But note that UnifiedPush is not supported by signal, so you need to register a fake device on a server running MollySocket. Which is very much additional attack surface and only worth it if you really rarely use signal

Use Verified-Apps from PrivacyGuides to verify the signature of the APK before installing.

Before Appverifier was a thing, it was very obscure how to even check that signature.

Yeah, since a month or so, and emphasis on 2 and not unlimited

Yeah unofficially… that is very much a bandaid. It is really bad of Signal to not have a blobfree reproducible build on F-Droid and Flathub, or even just external repos (for F-Droid and flathub).

Instead they have a hidden self-updating APK (which is a very cursed concept) with blobs, and a damn Appimage on Linux.

Session has removed forward secrecy. I dont know if they still have broken autodeletion and still store all messages in a blockchain (delaying actual deletion). Overall though, I would stay away from it.

Signal-FOSS as alternative

I use Signal-FOSS by twinhelix. It exists since many years and upatches are fully automated.

They are very simple, deblob signal, remove firebase messages and maps and whatnot.

Twinhelix has also added some of the jw patches, which are nice to have.

It does not

• remove donations (which is nice and kinda shit of molly)
• remove payments with mobilecoin (kinda useless sadly as very few exchanges support it)
• add blobfree firebase messaging
• add unifiedpush support
• support linking multiple phones
• support encrypting the database
• probably more

If you dont need those features, I highly recommend it. Signal shipping Google blobs and having no F-Droid repo is very bad and that shouldn’t be supported.

See the list of known 3rd party F-Droid repos

UnifiedPush issues

Note that UnifiedPush needs to be supported by the server. The server then sends the push message to a UnifiedPush distributor (like Conversations, ntfy or Sunup). That distributor wakes up the app, which sends you the notification.

There is a slight polling delay of about 1 minute, so notifications are delayed.

I measured the effect of this by comparing molly with UP and the Signal APK with websocket. On a Pixel 8a running GrapheneOS, 12 hours idle on Wifi, airplane mode on (as the modem uses by far the most battery). I configured to send 10 messages to the device using Signals “send later” feature.

Websocket used 3% of the batterylife. Thats it.

And that effect is only significant for people who rarely use Signal, so the likelyhood of a nerd configuring MollySocket falling into that category is pretty low. If you regularly open Signal, this only delays notification alerts for no benefit.

And because the Signal servers don’t officially support this you need to either selfhost MollySocket (which would be fine apart from potential update delays, what this post is about) or trust some server operator. MollySocket is registered as another device, so the Signal servers and any standard Signal client would treat it as a trusted device with its own decryption key.

Apparently MollySocket discards the key and only receives “you have a message” (and no other metadata? I have obviously not researched this a lot), and I suppose Molly ensures that the device will never get a decryption key either. Still, it increases attack surface for very limited benefit.

It would be great if Signal officially supported UP instead of Google FCM.

People buying apple phones in dictatorships are pretty stupid tho

But yes ofc we need to pressure monopolies

Check your autocorrect…

Report that on bugs.kde.org ;)

I appreciate the textured background but the nerd in me wonders how much of the size it takes up

Haruna is a nicer frontend for MPV

I would include the 2-letter and 3-letter code in your searches

That seems to be kinda standard. If Sonarr/Radarr have a more elegant solution than looking in the title, that might be preferred

I read a lot on printed papers these days

Well you are obviously not the norm XD

Though of course simple, fast pages are amazing. Or normal? They should be easy to convert to darkmode locally, use with a screenreader etc.

https://purecss.com/

Corpos do weird shit and call that attestation

Having integrity verification of the system is very useful and essential for things like Banking software to be potentially available on Linux.

If we want that proprietary malware… another question. Do we have a choice?

/etc is usually writeable XD

Unless you are on NixOS where you need to use nix for EVERYTHING