I heard the wisdom once that you should self host everything except for email. I’m sure there are great tools to make it manageable but the effort/gain is just very high.

I find it irretating that you speak on the matter with hearsay without having even tried it with modern tools or project.

With projects like Mailcow its a simple setup. Rspamd handles spam better than many professional industry spam filters i have encountered.

Yes there are some pitfalls someone should be aware of and some know how required, but as of right know, it very easy with very little maintenance.

Not every order providers recieve is rightfull or legal or even fullfill the requirements of the law, or the legal forms are just not filled out correctly by the officer or department.

Fighting does not really mean, go to court, that would only really make sense for precedence, but more like “only do as much as you are required by law” and maybe “delay everything as much as you are allowed by law”.

Any legal hoster will have to give up the data to local LEA, eventually. I would rather go for a hoster that has proven to use encryption and is legally fighting any order they receive.

So, when you activate simple versioning, and keep the last 20 Versions, then an error occurs (or malicious actor) and overrides the file 20 times. Then the simple versioning is gone.

Yes with the correct setup you could probably backup via syncthing BUT no one in the comments ellaboborated and mostly just says “i sync to multiple devices via syncthing”

I am shocked how many ppl think synchronization like syncthing act as a backup.

No synchronisation is not a backup. If you accidentally delete the database and it syncs across all devices then the database is gone. If something is broken and overrides multiple times then the history if it is enabled is also gone.

Pls use proper backup methods to backup your database.

Edit: I sync my database also with syncthing across devices. But to back it up i have on multiple clients system backups running that include the database.

The Pin is not designed and used for such an authentication. Also can be changed at any time:

How do I manage or change my PIN?

On your phone, go to Signal Settings > Account > Change your PIN

Its not about being complicated, its about dumping the whole chat history with just a few seconds of physical acceas to the device.

LEA has used this method with messangers like Whatsapp for years to quicly exfiltrade the data from a victims phone to other software.

It is less intuitive to set up, but it is extremely lightweight and very fast. That is the one I recommend.

I highly question the decision process to only include the lightweight and speed. There are much more important criterias to consider, like for example stability, maintainability, support etc.

I do not need yet another service that gets abonded 1-2 years after launch or goes subscription only etc.

While lots of ppl will hate on Nextcloud, its pretty good. When you do the setup right, with cache and so on set up it’s fast and serves its purpose not only as cloud storage but as a collaboration platform where you can edit files with other ppl and much more.

If you only want a simple Web App to up and download files there are probably other solutions for that.

Have you been on social media? A lot of ppl acting up participating in racism, transphobia, hate speech etc. do not give a shit about protecting their identity. If the real name is not already on their profile, then their post makes them easily identifiable.

Also, there are enough laws out there that force social media providers to give out information about the users who do illegal stuff online. That would make almost everyone identifiable.

The reality is that law enforcment gives a shit about doing their job. And Social Media providers give a shit about actively protect users of those points, even tho they are obliged to in many jurisdictions.

And those handwritten notes are secure random passwords and never repeat?

Just too much work for the average person and too inconvenient to type.

This is not really a weakness in the bitlocker encryption but in the TPM used to store the secrets if you set it up like that.

Different to most at least somewhat popular software futo is involved in, immich is foss. It’s AGPL licensed and community driven.

Yep, there even was a standard that would have been sufficient, Do Not Track. https://en.m.wikipedia.org/wiki/Do_Not_Track

I don’t use browser extensions and I manually copy/paste my passwords to fill in entries.

On most systems copy pasting is heavily insecure since a lot of processes have access to the clipboard. autotype and thinga like browser extensions are considered more secure.

And how often. have you said stuff that you have not received advertising for? You will notice it when you get a positive match but not on a negative.

Data collecting companies can predict/rate your behavior for more then 20 years based. Since then. it has been perfected. They know that you are interested in those topics without having the need to waste resources on recording and analyzing every single audio stream.