You can

Wouldn’t the LGPL make more sense for an engine? Otherwise it would be hard to make a proprietary game (read almost every game) even if you publish any changes you made to the engine.

I started reading and thought that it isn’t that bad, just what I expected from closed source software but then came this:

Team Memory Sync, an unreleased internal project. There’s a bidirectional sync service (src/services/teamMemorySync/index.ts) that connects local memory files to api.anthropic.com/api/claude_code/team_memory. It provides a way to share memories with other team members within an organization. The service includes a secret scanner (secretSanner.ts) that uses regex patterns for around 40 known token and API key patterns (AWS, Azure, GCP, etc). But sensitive data that doesn’t match these regexes might be exposed to other team members through memory sync.

This seems like a great idea!

Murenas statement on the ids used for OTA updates:

For context, and I agree that this feature can be perceived with mixed feelings, especially because it was stupidly called „licence ID“ at the beginning of its implementation, we added it because we suffered from not having good statistics on /e/OS usage.

Of course we are not interested in tracking users at all, but we do want to know how many devices are running this or that build of /e/OS. This is very useful for making some decisions about device support and setting priorities for future development.

Just running statistics on OTA server request logs along with the device model didn’t give good results.

Now, and this is still part of our internal discussions, if we are able to find a way to get good quality stats without this OTA anon-unique identifier, we will consider it.

However, we sincerely believe that this anonID probably has no impact on user privacy (tracking IPs or device fingerprints would probably be much worse).

You can reset the id via ADB:

adb shell settings put secure ota_anon_hash <new value>

/e/OS is not fully degoogled, as DNS connectivity checks, hardware attestation provisioning, and eSIM activation all go through Google.

They are working on some of this, at least eSIM activation. Also do you have a source for DNS connectivity checks? AFAIK they have used their own for a while

It is often many weeks or months behind on security updates, especially in the WebView, which makes it easy to exploit.

This is a serious problem, however their update speed is comparable to a lot of default ROMs

It doesn’t support bootloader locking on many devices, and if you lock the bootloader on a phone that does support it, it could brick if /e/OS is on an older security patch than the stock ROM was

/e/os supports boot loader relocking on most official devices, however the community builds don’t support it. The bricking part has nothing to do with /e/os, it’s a hardware security feature of some devices. This would happen with any ROM including the official one

And finally, /e/OS’s text-to-speech sends what you say to OpenAI, despite local options being available.

I assume you mean speech-to-text? Anyway the feature is opt in and they have since updated it to include a prompt to inform you about what it will do. Their reasoning for a cloud option was that local options either are bad or have too high ressource usage (important as /e/os supports a lot of underpowered devices). Overall a stupid move, but they adjusted the feature to let users make an informed choice

If you can’t get a Pixel then iOS in lockdown mode is the next best option, however if you can’t replace your phone, LineageOS is much worse than Graphene although it is still much better than /e/.

Lineageos might have quicker updates, though it is even more connected to google, except for not including microg. However a lot of people will need google play services so they will have to install it anyway

Personally I am using /e/os, but I think GrapheneOS is technically superior. I would first research whether the apps you need (EG banking) work on either one and then decide

For webview Apple Maps is quite good. Its still Apple, but at least not Google

Honestly best thing I heard about Telegram in a while

Can I ask the moderators of this instance to delete my posts without a trace so that they are not in the federation database?

A instance admin can only delete your posts from that specific instances database, so you should assume that there will always be some sort of copy of your post (with things like search engine caching and the Internet archive this basically the case on any social media).

Is there a way to chat safely on Lemmy? Alas, I like to communicate with different people from different countries, because I can’t help myself, by the way, how then can I pass the keys to my matrix room to others or how can others give their keys?

Not a active matrix user, but the default Lemmy chat is definetly not secure. Lemmy allows you to add your matrix handle in your profile settings so it will appear when someone looks at your profile

I use https://f-droid.org/packages/me.zhanghai.android.files/. Looks good and does all I need it to

Do you have to use chrome or can you also use chromium (or another chromium based browser)? Practically the same, but less tracking then chrome

Wasn’t Frances problem with GrapheneOS specifically that law enforcement couldn’t hack it? I don’t think this applies to Peertube. Framasoft has a non profit status in France which Mastodon has a problem maintaning (that’s why they keep changing countries), which offers a significant financial benefit.

Well if what your reincarnated as dependent on how good of a person you are these odds make sense if you look at humanity as a hole

Make sure that the apps have access to your discrete graphics card. Flatseal allows you to manage flatpak permissions

Piefed does know in what communities you posted, which posts you liked, under which posts you commented etc. There could easily be a Piefed (or Lemmy) wrapped. The data is public so you don’t even need to be signed into an account to get its relevant data

Two? Don’t forget Kaffeine!

AFAIK it’s a desktop environment so using it via distrobox wouldn’t work, it has to be installed on a system level

Stremio Youtube

You can use pretty much anything you can with desktop Linux, however some apps may not work with a controller

Jellyfin is quite capable for music, however Navidrome has a much better client ecosystem. Personally I use the Finamp beta on mobile as it does everything I want and is quite stable, but if you want Android auto/apple carplay you will have to use a client that isn’t as reliable or proprietary (paid.