I don’t know but I would use a keep alive property such that the data can be tossed when for example: – the true person makes 2-3 additional data points with an “alert” time t_alert to deprecate all potential nodes with t > t_alert. Potentially affected transaction/interaction partners need be warned/informed (or not, if suspected culprit). – all potential nodes “die” after a delay of x hours after the last generated data.

Now my critique: palm scan can be 3D printed accurately. IMHO the only viable scan in terms of trust/confidence is from the eye as video with a bunch of samples watching some kind of a moving dot on the phone or whatever. The lens need be good enough and the min amount of samples need to be in relation to potential image quality right? Potato camera infinite…

I think remembering some kind of no-no regarding something, not Foss or such, regarding Grafana? I might be mixing up things, I am honesty unsure, sry for that.

Probs to OP though.

“429 Too Many Requests You have sent too many requests in a given amount of time.”

? Unaccessible.

Good take. I trust you on this, if you mind me asking: What is now the alternative? A system of setting up once, let it work until hardware dies etc.

You heard of this? https://dearrow.ajay.app/ I am not affiliated. You just reminded me, I share the same hate.

AFAIK you can’t be in two profiles at once (in GOS). I would use a 2nd device that I keep online, easy solution?

Not everyone can use Briar because of that. Not even Matrix does it in most instances. If practically no one goes p2p approach, how is it an argument? You don’t even provide a solution so why bring attention to a ‘problem’ in the first place?

Every way is a security risk in itself. For example if my home burns down I lose x% of the ways. y% can potentially break. z% can potentially be lost to my stupidity. What if I get in a car accident and hit my head and get amnesia and forget a mandatory password: for these cases there are different retrieval strategies, but obviously are ‘stressful’ to set up to stay relatively secure. What can I say, these are the thoughts I have about this topic.

FIDO2 is great. Only thing I am scared of is losing it/them. So a backup access becomes the issue IMHO.

200€ used market if not even less. Look on grapheneOS website for compatible devices.

Demand of criminals/journalists/activists/curious\ people seem to dictate the price. Think of a repressive regime hunting down the opposition. They track every phone via cell tower handshakes and map out individuals using “metadata”.

With calls and SMS you can login/register on apps/services and when doing so “reset” towards a fresh profile if done right. That’s a new dot on the map. With internet you can only access these services.

That’s just my guess though.

What are the prices like? These esims are often legal so thats explains the high availability. I am not a lawyer.

Telegram is not encrypted at all and they use your texts/data to train Elon Musk’s AI.

What about isolated VLANs?

My community is in the process to migrate to fluxxer, self-hosted.

Vanadium on grapheneOS and using a privacy-preserving VPN.

You can tunnel your DNS requests via wireguard to your pihole server. If it has good bandwidth even the full traffic. Why would that be insecure?

There are cases where Iranian feminist authors and freedom fighters live in exile — for instance in Germany — and use their phones completely normally, whether Apple, Android, or whatever else. Yet Iranian agents still manage to track them. The reason is that the data is simply bought from data brokers: the Iranian regime purchases it and then sends people to observe these women in person.

Data broker tracking can be curtailed with a VPN, but a VPN alone does relatively little. What matters more is blending into the largest possible crowd. The point of using something like a default Firefox setup isn’t the browser itself — it’s that you end up with the same screen resolution, the same fonts, the same default settings that the largest number of people on the planet also have. If your browser deviates from that baseline, then details such as when you’re online, which apps you’ve installed, which websites you visit, which fonts and add-ons you have, your browser settings, your user agent, and so on, can uniquely identify you or single you out. The whole game is to keep the indistinguishable mass as big as possible: if someone knows the person they’re hunting is in a certain group, you want that group to be huge.

Once that fingerprint is known, you can be re-identified even under a different IP. So the data brokers who buy data from Facebook, Instagram, or wherever still have what they need. It’s also been shown that apps communicate with each other in ways that allow unique attribution across them. And depending on which country you live in, default regional versions — US builds, Apple US, and the like — aren’t necessarily privacy-compliant; whether that’s actually illegal depends on the jurisdiction.

On a desktop PC, the situation is similar. There it depends heavily on which browser you use. If you take a browser with completely default settings and then surf either with or without a VPN, you’ll be recognized all the same — meaning users can be de-anonymized regardless. So it really doesn’t help much at all.

And while we’re at it — go on, tell me what exactly in my last message you think I didn’t come up with myself. Be specific. Which sentence, which idea? I’d genuinely like to know what you think was put in my head.

VPN-alone is weak opsec. It changes your exit IP and that’s the whole trick. Meanwhile your browser leaks entropy everywhere: user agent, screen size, timezone, installed fonts, canvas/WebGL hashes, audio fingerprint, and your extension list — each add-on detectable through web-accessible resources, injected DOM, blocked bait requests, or timing tells. uBlock + Privacy Badger + Stylus + some niche translator + Vimium = probably a globally unique signature that follows you across every VPN exit you use. EFF’s Cover Your Tracks has been showing this for a decade. Customization is identity. And WebRTC just hands your real IP over anyway. STUN requests for peer discovery go straight through the tunnel in most default setups and leak both your local and real public IP to any page that asks — VPN connected, doesn’t matter. DNS leaks work the same way: if the OS resolver isn’t forced through the tunnel, you’re querying your ISP while pretending to be in Romania. Add OS telemetry, background apps phoning home, clock skew, TLS fingerprints (JA3/JA4) — none of which a VPN touches — and the “I’m anonymous because VPN xyz” idea falls apart. Tor Browser exists exactly because the only winning move against fingerprinting is to look identical to everyone else. Anything custom is a name tag.

Not necessarily. For example if your browser is fingerprinting you towards the webpage, a VPN will be useless when it comes to privacy.