So, I don’t use OpenWRT (for main router), but generally in each vlan you will need:

• The WG interface in that vlan so all hosts can send their traffic to it.
• DHCP server that sends the WG (local side IP) as the default route. Can also set statically on all devices. When a device on that vlan wants to send a packet to the internet it will do an ARP request for the local vlan IP then forward the IP packet to the router.
• You will need to do some NAT as you have many private IPs for your devices in the vlan mapped to one IP given through WG. Packets that hit the WG interface should be forwarded down the tunnel with a translated source address of the local WG IP and whatever ports are in use publicly. Return packets reverse this operation.
• Repeat for additional vlans.

I use passkeys for my Google account managed by BitWarden.

Just use another PassKey provider besides Google.

Unless they plan to force you to use Google’s implementation.

The cremlings emerge.

As a final thought, why is protection from malicious apps from the play store being performed on the phone instead of in the store?

In addition, why is known spyware on the top of the recommended list if I were to open the play store: temu, snapchat.

Or getting pissy if I use an ad blocker when their platform has served malicious ads.

I ended up just building a box after looking for the perfect NAS and finding it didn’t exist. The software is usually just crap or the hardware is underwhelming. Got a Node 804 case to slap in plenty of HDD space. Running NixOS so I’m in control of the software. In retrospect I wish I had gotten a rackmount type case. Tossed in an Arc GPU for better transcoding shortly after the initial setup.

If half your employees aren’t acting the way they do in private, they’re putting on a mask and not being their true selves

But you’re making this point in defense of someone aligning themselves with a group who targets trans, women, and whoever else they can bully not like them for being their true selves… Do you not see the hypocrisy of such a point given the context of the quote?

Major desktop environments are KDE as you mentioned and Gnome.

Arch wiki is a good resource even if not running arch. You may want to look into their dotfiles page to back up your settings: https://wiki.archlinux.org/title/Dotfiles.

NixOS ended up being my distro of choice for reproducible installs but it has a high learning curve and poor documentation so I wouldn’t recommend to start with. That said you can still use Nix on other distros with home manager to manage dotfiles and install non-system apps.

Distros just pick the default things to install. You can always use the package manager to install something else like a better file manager.

A lot of choices are simply subjective so its hard to recommend any one distro. Mint is close to windows, based on Ubuntu and uses Gnome. Ubuntu based on Debian I find to be user friendly. Not used a Fedora based distro in ages but there is also Silverblue I’ve heard mentioned positively.

Distros like Arch and NixOS are more design your own system setups. Pick what you want. I used arch for a bit, but got annoyed at keeping all my systems in sync. Had a huge wiki of all the tweaks I made. Then scripts to automate some of it. I started looking at automation tooling like ansible when I found nix.

Not tried it myself: https://disroot.org/en

I’m still wired headphones. I use FiiO JadeAudio KA3 DAC and Letshuoer S12 wired earbuds. Not as impressive as I hoped for the price. Mostly wish it went a touch louder.

Could be the battery. My 5a5g died after 3 years and it was the battery. I couldn’t get it to boot that I could tell even while charging. Didn’t try calling it though to see if it rings.

Sounds odd, but have had similar issues with a Nest cam. Main powered doorbell camera resets when someone rings it until I replaced the battery.

Can’t remember if the 5a5g had a headphone jack (using 7 pro now), but you can kiss that goodbye. Fingerprint reader is in the screen now instead of the rear, but otherwise its been functionally similar.

The 8 line has extended support. If you care about security updates I’d check https://endoflife.date/pixel and pick what’s affordable. (a) models are at the lowest end, followed by the regular 8/9, then pro models for the best hardware.

Graphene also recently added some options like:

• Cap charging to 80% to extend battery life.
• Fingerprint reader + 4-6 digit pin. My normal pin is long so I’m happy with this change as forcing my biometrics won’t unlock it alone. Capped at 5 attempts.
• Kill switch pin. If forced to give up a pin it will factory wipe the phone.

That and old ass infected computers. I’ve used Linux almost exclusively for more than a decade. Fuck if I know how to fix your 10 year old windows desktop.

Pretty snappy. All the gnome APIs are written in C. It doesn’t run on node, it runs on gnome-javascript (gjs) which exposes all the C APIs through JavaScript. If you use the Astal wrappers its pretty painless but using the gnome APIs directly in gjs is a little weird since you have to consider things like memory management.

Never tested with gdrive but in Graphene I use storage scopes instead of full drive access.

I have it activate a layer when held where all the other keys are remapped.

I also use a 45% keyboard (https://wilba.tech/jd45) and its done in the keyboard’s firmware (https://qmk.fm/), so I need the extra keys.

I have an older model of the JD45 with a full bottom row.

It is gnome, but https://aylur.github.io/astal/showcases/ is pretty awesome if you’ve done any React development. Pretty much coded up my own desktop environment with typescript and tsx for layout stuff. Lot’s of fun widgets.

Note that I use nixos so pretty much everything is hand picked instead of a prebuilt ready to go environment. Hyprland for the basic desktop, Astal for my desktop shell with widgets, toolbars, etc.

It will no longer receive updates.

Another poster shared the blog post: https://divestos.org/pages/news#end.

Dev is no longer maintaining along with DivestOS.

Can confirm, it is information they already have. Below is likely the API the telco exposes to the bureau. Each data point queried returns true, false, or a confidence score.

It is intended as an anti-fraud tool. Not saying I agree with it. Something like PGP is sufficient for building out a web-of-trust without needing to share my personal information.

https://redocly.github.io/redoc/?url=https%3A%2F%2Fraw.githubusercontent.com%2Fcamaraproject%2FKnowYourCustomer%2Fr1.4%2Fcode%2FAPI_definitions%2Fkyc-match.yaml&nocors=#tag/Match/operation/KYC_Match