• 13 Posts
  • 45 Comments
Joined 1 year ago
cake
Cake day: June 6th, 2023

help-circle
  • Restricting access to files within a user is why sandboxing is useful. It in theory limits the scope of a vulnerability in an app to only the files it can read (unless there is a sandbox escape). Android instead prevents apps from accessing other apps’ files by having each app run as a separate user.

    One way to keep the encryption keys encrypted at rest is to require the login password (or another password) to open the app, and use it to encrypt the keys. That said, if an adversary can read Signal’s data, they can almost certainly just replace Signal with a password-stealing version.














  • IIRC the main reason it isn’t enabled by default is because >=1080p is only available via DASH. Normally Invidious can just point the client to fetch videos from Google’s servers, but for technical reasons DASH requires the Invidious instance to act as a proxy (the client asks the instance for video data, then the instance fetches it from Google and sends it to the client). The net result is that watching 1080p streams requires much more bandwidth from the server.












  • The main downside is that there is a lot less customization of filters short of using a different DNS. There is also the potential for logging DNS (present with normal DNS servers as well). LibreOps claims they don’t log requests, and personally I don’t think they have much reason to lie, but there is still that element of trust. Many of the more well known DNS servers don’t offer ad blocking DNS, so you’ll most likely be switching to a different provider.