Your ISP can see what websites you visit. But even if you change DNS server it can still see that if you don’t use either a VPN or DoH/DoT.
So it’s a good idea to use DoH or DoT. It’s an improvement but it’s far from perfect because the DNS server you’ll pick will see what site you visit, you have to trust them. And your ISP still has other ways to see which site you visit.
Depends on what you need a VPN for.
I don’t know them but they seems to be from Estonia marketing themselves for evading censorship. Are you in a country that censor VPN? If not why do you think the tradeoff might be worth? The 2 hops should have an impact on bandwidth and latency and there is probably no port forwarding.
Using a VPN is just moving your trust from your ISP to the VPN. Why would you trust a VPN you know nothing about giving them access to all your internet traffic?
You’ll need to read the documentation to understand its concepts first. You don’t use mkfs but zpool to create a pool then use zfs to create the fs on it. ZFS is usually used with some sort of raid configuration so most doc will show this but you can create a pool with no replication using a single drive.
For ZFS check the instruction for your distribution here: https://openzfs.github.io/openzfs-docs/Getting Started/index.html
Why do you keep ads on youtube?
NixOS so I can keep my config in git. I have a single nix config for all my machines (desktop, laptop and server) so I can share configuration between them. I use it to configure both my system and my user config, my dotfiles, with home-manager. Even my neovim config is in nix thanks to nixvim.
I don’t think I could go back now. It can be a bit of a pain from time to time and the learning curve is steep but it has so many advantages. Being able to rollback between config versions (called generations), having a consistent config between my machines, having it all in version control… The repo have so many packages and when there is a module it’s really easy to add a service. Writing new packages (derivations) and modules is also not that hard. It can be as simple as calling nix-init.
Had my main ssd fail on me a few month back and it was very simple to just replay the config and just get everything working as before. I only had to do the partitioning by hand (it can be done by nix but I’ve not gotten around to it yet). That’s why I only backup data and home partitions, not system partitions.
You need someone to change the cable for you without you knowing which one it is, otherwise the test is worthless.
Telegram never was the private alternative to anything, unless you took their advertisement at face value. It was always known to not use e2ee by default.
Signal is not a problem, the US gov things were very dumb users issues. It was not caused by Signal itself.
So the goalpost has not moved in years, Signal was and is still good, Telegram is only fine if you do not care about privacy.
That’s not my claim.
Lol, “do your own research”.
This is not about me but about the advice you give to people. If you give advices you need to back them up, you can’t just answer “I disagree” to contradiction.
I’m not saying you said it was precise. I’m just saying that not every layer is important, or even good.
What if there are less people using that VPN IP than using that ISP IP, now your are giving more information with a VPN than without. How do you verify the claim that a VPN does not log? Spoiler, you can’t verify, it’s just trust. You have to chose who you trust enough to give them access to the website you visit.
You’re dodging the issue. Why would an IP that’s shared and does not give precise location be as important as precise GPS location?
No, those are not “layer of abstraction” and they do not have equal importances, claiming otherwise is counter-productive. Each data does not reveal the same quantity of information and their hierarchy depends on your threat model.
I don’t think that’s true for mobile IPs since they are shared.
That’s actually vx-underground source for this post: https://xcancel.com/vxunderground/status/2032562782248349793#m
And it’s very handy for this, I have the same config for all my devices (desktop, laptop and server). Enabling and disabling different modules depending on the host it’s deployed to.
That’s why they are asking for a self-hosted solution, not a Google one.
Yes, that’s why I ended with:
Even with secure DNS they can still see the domain name with the SNI, which is probably more reliable than an IP address. Last I checked very few websites used ECH. I would still argue that it’s better to have encrypted DNS requests than non-encrypted ones.