Thinking about some basic privacy/offline principles for computer development

  1. If something can be done entirely locally on the user’s own device…it should be built that way!
  2. If something needs outside information, but it can be collected passively (ex. GPS location), it should be built so that it can.
  3. If something needs to interact with another system to do what it’s supposed to do, it should only connect with those that it needs to.
  4. Corollary to that: trusted peer-to-peer is usually preferable to over client-server-client. A trusted server may be better than untrusted peer-to-peer.
  5. If something needs to interact with another system to do what it’s supposed to do, it should only send information that’s needed.
  6. Any system should only keep the data needed to do its job, and possibly for troubleshooting.

Some examples:

Firefox’s local get-the-gist-of-a-webpage translation vs. Google’s send-the-text-to-Google-Translate.

OSMAnd can download a regional map ahead of time and do all the navigation routing on the device without a network connection. (You can’t get live traffic that way, though – that’s something that does require a network connection.)

eBook readers usually have no problem letting you read a book offline once you’ve downloaded it. The same should be true of text files, PDFs, email, locally stored music and video, RSS articles, etc.

Anything that is available over a LAN should be reachable even if there’s no remote connection to the internet.

Speech recognition should be done entirely locally.

I should be able to sync my laptop or tablet or phone, then pop onto a boat or a plane or into a diving bell or onto an underground train or go out into the middle of nowhere for a weeklong camping trip, or just turn off the network…and as long as the device still has power, I should still be able to read old emails, write new ones (and queue them up to go out when I get back to a connection), read a book, use the map, read articles I’ve saved up to read, take photos, review photos, delete the ones that didn’t come out well, crop or adjust the ones that need something extra, play a multiplayer game with my kid on two devices in the same room, write a draft of something…

The old always-offline and the new always-online are not the only design models available, and they’re certainly not the only situations people find themselves in. Just imagine tethering your laptop to your phone in an area with spotty connection. There are places and devices where I can barely get the Nextcloud login screen to render. And that’s my own server.

The idea that everything is going to have a constant internet connection makes surveillance tech even worse, because

  1. It’s easy to offload processing to your server even when the phones can handle it.
  2. It’s easy to build in things like update checks and news.
  3. Once you’re already doing that, why not pass a little more info for analytics or targeting.
  4. If they’re always online, you don’t need to wait for them to open it up, you can pop up a notification to grab their attention.
  5. If they’re always online, you can collect data more simply. You don’t need to wait for a connection, you don’t need to queue up multiple batches of telemetry, you can just send it.

TL;DR:

Run locally, sync remotely.
Only sync what the user needs you to.

And this is why I’m finally replacing Chrome with Vivaldi

And this is why I’m finally replacing Chrome with Vivaldi as my backup mobile browser. (Currently using Firefox as primary on both desktop & mobile, already using Vivaldi as secondary on desktop, which is why I started there for the mobile replacement.)

#privacy #google #vivaldi #chrome #GoogleTopics #adware #tracking #SurveillanceCapitalism

https://vivaldi.com/blog/news/alert-no-google-topics-in-vivaldi/

On Wandering.shop

TIL there is a #StarTrek #LowerDecks character creator.

TIL there is a #StarTrek #LowerDecks character creator.

https://www.startrek.com/replicateyourself/constructor

On Wandering.shop

Note: In Firefox, the save feature was broken and only saved the background. (It worked fine on my wife’s phone.) I took a screenshot rather than starting over in another browser.

On Wandering.shop

Interoperability

Realized that my tinkering with #GoToSocial, #Takahe, #CalcKey and #Snac2, continuing to use #Pixelfed, #Lemmy and #Bookwyrm, and looking for compatibility problems are part of the same impulse that had me trying out every web browser I could find in the early 2000s and deliberately using Firefox and Opera on Linux as my daily drivers instead of IE on Windows.

It’s a drop in the ocean, but it’s my push for interoperability over #monoculture.

#Fediverse #BrowserWars

*sigh* my main desktop’s heat issues have caused it to shut itself down during …

*sigh* my main desktop’s heat issues have caused it to shut itself down during akmod compiling twice now.

I think I’ve reached the limits of replacing thermal paste and adding fans.

Probably time to bite the bullet and upgrade to a newer cpu/mobo combo that can either handle the higher temperatures or produce less heat under the same load. It makes more sense than water-cooling a (checks release date) 10-year-old CPU.

On Wandering.shop

Followup the next day after Rimu pointed out that something’s got to actually be *wrong* with the hardware for this to happen.

You’re absolutely right!

Your reply inspired me to try one more time to check the fans — and this time I noticed that the CPU fan didn’t seem to be drawing as much air as I’d expect.

I’ve always cleaned the outside of the heat sink. But the INSIDE was completely clogged with dust!

It took a while to clear it out, but now the box is humming along at temperatures in the solid *middle* of the range doing things that had made it spike up to well above max before! #

For future reference: I removed the CPU heat sink and fan, and fired bursts of compressed air through the sides until I could see through it clearly from either side and looking through the fan. #

Been stress testing it by running multiple BOINC tasks while simultaneously updating all the steam games on the Linux box and Windows in a VM, with Gmail, Mastodon, Pixelfed, Pinafore and OpenStreetMap tabs (plus others) open in Firefox, and it’s…just working. Like I’d expect it to.

Yay for compressed air and finally looking in the right spot! #

That’s weird. I woke up my desktop and the tab with the Linode control …

That’s weird. I woke up my desktop and the tab with the Linode control panel was on an oauth URL with “429 Too Many Requests”

Did Fedora (and/or the Linux kernel) add an equivalent to Apple’s “Power Nap” while I wasn’t looking?

I hope it wasn’t spending all day trying to refresh a graph while the system was mostly asleep.

Huh, maybe too many JS timers had stacked up when I suspended the box this morning and they all hit at once.

Either they blocked my IP or they’re having their own problems, because I get the same error in both Firefox and Vivaldi, and only one of those was running earlier.

Well, whatever it was, I’m back into the panel now.

🤷

Anyone know how to change the scroll wheel speed on Gnome Web or other Chromium browsers?

Anyone know how to change the scroll wheel speed on Gnome Web or other Chromium browsers?

I really like the way the Mastodon web UI works as a PWA installed to the desktop, but I’m really frustrated by the much slower scrolling compared to Firefox (which, annoyingly, won’t install a PWA)

#chromium #pwa #gnome #linux

On Wandering.shop

I am working on a Mac laptop with a Windows VM, a Linux VM, an RDP…

I am working on a Mac laptop with a Windows VM, a Linux VM, an RDP to a remote Windows server, and SSH shells open to remote Linux servers.

I have no idea what shortcut keys to use at any given time.

Also I think I’ve got websites open in at least 4 browsers, some Firefox and some Chrome, split across the host and the two VMs.

And I thought finding the right tab was bad under ordinary circumstances!

At one point I had a reference page open in a browser on the host for something I was doing on a VM and I just could not switch windows consistently.

Why am I doing this????

Looking forward to finishing this project so I can go back to just using the host system and SSH shells

But hey, now I know you can drag and drop a file from the LXQt file manager in an Ubuntu VM running on a Mac to the Windows file manager in another VM that’s accessing a network share on a Windows domain over a VPN that the Lubuntu VM doesn’t know about and it ACTUALLY WORKS!

Start on Wandering.shop

Telling Firefox to open Lagrange for Gemini links

Response to a question about telling Firefox to open Lagrange for Gemini links

I don’t remember exactly how I set that up, but I’ll see if I can configure a fresh profile and write it down this time!

What I remember: I either pasted a gemini: url into the Firefox URL bar or clicked on an actual hyperlink to a gemini: url and it asked what application to open it with.

Firefox also has a per-website security setting on whether a website is allowed to open links in other protocols.

On Wandering Shop

Yeah, that’s basically it. Paste the URL into Firefox, choose the application (either from the list or from the file picker), and check the “always…” box. Then gemini: links in web pages will open the confirmation box and you can click always-allow per site.

(It won’t work on Mastodon, unfortunately, because Mastodon doesn’t turn gemini: URLs into links.)

I’ll write this up on the #gemini capsule too!

Dialog box in Firefox: Choose an application to open the gemini link. Lagrange is selected. There is also a button to choose another application, and a checkbox for always using this application to open gemini links.

Dialog box in Firefox: Allow this site to open the gemini link with Lagrange? There is a link for choosing another application, and a checkbox for Always allow https://www.hyperborea.org to open gemini links.

Here it is: opening #gemini links in your preferred client from Firefox.

hyperborea.org/howto/follow-gemini-links-from-firefox.gmi

Found the always-open-in-apps setting on Firefox for Android & thought, hey, that might be useful….

Found the always-open-in-apps setting on Firefox for Android & thought, hey, that might be useful.

But now it wants to open links with tracking parameters in Nextcloud, which of course is saying, hey, I don’t know how to open that!

Dug into the phone settings & Nextcloud says it can handle “*” – presumably because you can point it to any Nextcloud server you want. I wonder if there’s a way to limit it to the ones you’ve actually configured?

Anyway, turned off the setting for now.

On Wandering.shop

Hmm, I wonder if there’s an Android-compatible Firefox add-on that strips out tracking parameters…

On Wandering.shop

Argh, forgot that Firefox had limited the Android version to a dozen “recommended” add-ons. I mean they include things like ublock origin & privacy badger (and apparently there’s a privacy possum add on as well!), There’s just not much selection.

On Wandering.shop

Apple/Safari/accessibility gripes

Safari doesn’t let you tab to radio buttons or checkboxes…because of an OS setting!?!?

WHY would this be a default?

For that matter, why selectively turn off tabbing to them at all?

https://www.scottohara.me/blog/2014/10/03/link-tabbing-firefox-osx.html

They’ve finally changed it in Catalina (which I don’t have on my work system), but it’s apparently been a thing since at least the early 2000s.

It’s a perfect example of an “unbreak my app” setting.

Probably some ancient UI guideline from 1986 when the idea that someone might want to use the keyboard for something in the UI would garner a “why don’t you just use DOS, loser?” reaction

Thread start on Wandering.shop

All my Firefox add-ons are disabled…

Ah, so that’s what’s going on. All my Firefox add-ons are disabled because the intermediate signing cert expired, so it can’t verify ANY of them.

Not too thrilled at having my privacy add-ons remotely disabled, mind you. I appreciate checking signatures on installation/upgrade, but that shouldn’t introduce a remote dependency on a single point of failure to keep using things that have *already* been verified.

https://www.engadget.com/2019/05/03/firefox-extension-add-on-cert/

#firefox #broken

On Wandering.shop

Followup article:

Technical Details on the Recent Firefox Add-on Outage

Flashback to last summer: a red panda (sometimes called a fire fox)…

Flashback to last summer: a red panda (sometimes called a fire fox) at the San Diego Zoo. I made a point to look for them and the penguins on that trip. For reasons. 😉

#photography #photos #redpanda #firefox

On Photog.Social

Sadly I didn’t get to see them doing much. There were several in the enclosure, maybe three or four, but the rest were either hiding in the tree or sleeping. This one was just sort of perched up there, looking around.

On Photog.Social

Facebook Container Extension: Take control of how you’re being tracked – The Firefox Frontier

This is pretty cool: Firefox has a new extension that isolates your Facebook session from the rest of your browsing. That way Facebook isn’t able to track you as you visit every website that happens to have a Like button or embedded FB comments.

Facebook still knows what you do *on* FB, but this cuts down on their ability to track you elsewhere.

Facebook Container Extension: Take control of how you’re being tracked – The Firefox Frontier

The Facebook container extension helps you control more of your web activity from Facebook by isolating your identity into a separate container. This makes it harder for Facebook to track your activity on other websites via third-party cookies.

Saw several links to this article on Facebook deliberately ignoring the fact that people present …

Saw several links to this article on Facebook deliberately ignoring the fact that people present their identity differently to different groups (family, friends, work, interest-based groups, etc.) & how that impacts social interaction. https://boingboing.net/2018/01/22/facebook-is-sad.html

It got me thinking about exploring other Mastodon instances again, and an article I read ages ago on a contextual identity project at Mozilla. Looks like I should check out Firefox Containers. https://wiki.mozilla.org/Security/Contextual_Identity_Project/Containers

On Mastodon.social
Incorporated into K2R Post

Reconciling Mozilla’s Mission and W3C EME

Tough choices: Users want to watch media from the entertainment industry. The industry is only willing to provide it with DRM, which goes against Mozilla’s goals of transparency, openness, and user control. It used to be easy to let plugins deal with it, but Flash and Silverlight are slowly giving way to built-in browser functionality, and leaving it out means lots of users will just switch browsers when they can no longer watch Netflix etc. with Firefox.

Reconciling Mozilla’s Mission and W3C EME

With most competing browsers and the content industry embracing the W3C EME specification, Mozilla has little choice but to implement EME as well so our …

Non-Standard = Ambiguous

So, have you got some specs for exactly the way IE and Gecko handle every single case of non-standard code? Including cases where it’s clear the code is broken, but it’s not clear what the author meant, and multiple interpretations are equally valid?

No? There’s no specification? They’ll have to reverse-engineer it by visiting every page on the internet with IE and Firefox and seeing what those browsers do with them? Gee, that sounds workable!

On Slashdot