Thanks! TLDR spamhaus (a big spamlist provider) has them on their spamlist, or maybe not, and they are using some fancy CDN.
It is VERY likely just a technical error.
What do you mean?
To my knowledge they dont ship GNOME 46 but some old "LTS" variant (GNOME doesnt do LTS variants)
Yes I know, and I want to try DivestOS one time. But they do incomplete patches.
They cannot update the kernel themselves or even worse the firmware. The kernel needs to be built and patched for the specific hardware, GrapheneOS relies completely on Google here. And the firmware needs to be signed by the vendors, so no chance either.
And especially baseband, cellular stuff has extremely many vulnerabilities in the code.
I mean I already reported 2 issues, but it still works. I can use it without big problems, I use the beta Flatpak (as explained in my flatpak remotes list).
Using Wayland too, Idk about any problems but if it wouldnt work I would just disable Wayland for the Flatpak and the app automatically runs through XWayland
Dont use "stable" software people.
Gimp 3 is already very nice! Use it exclusively.
I think 3a is already too old. I think 4a is a better minimum, but this is still insecure of course.
Image toolbox is awesome, damn!
What, source?
How would you block an OS?
And btw there are some reasons why GrapheneOS may be criticised
Mailbox.org missing, pass
I dont get why people would care for influencers
In my Clevo Laptop with @novacustom@mastodon.online and @3mdeb@fosstodon.org Coreboot firmware I now have replaced another proprietary part!
The Intel AX200 previously installed waits for a new use case, while I swapped in the Qualcomm Atheros Y8512 pci-e Wifi card, which has #blobfree drivers and thus runs fully on Linux, not just on some #nonfree kernels (that basically break the open source philosophy by including proprietary code in the single most critical root binary on your system)
It works great, just downloaded a Firefox release. zip over wifi without a single stutter!
Not sure if VPN eliminates all risks with 2G and 3G, maybe it does.
Vanadium has sandboxing but its javascript blocking is useless (no granular control)
Mull has no process isolation at all, but support for UBO and Noscript. Bad situation
These cannot be written without TPM verification or stuff, ask GrapheneOS devs about that, I dont know. The firmware signing is required, the verification will not be done inside the OS, that would be totally flawed.
If they have the firmware signing keys, they can fuck you. If they dont, they can only write to the system partition, and Attestation can see that.
Reading data has nothing to do with that. They likely can, but that doesnt matter.
This will not include firmware and likely even the kernel.