They throw out far more than that in unsold food at the end of the day.

Again, if the store is wasting food, boycott it (or persuade it to stop doing so).

Decent coffee shops partner with local homeless shelters, or food apps / messageboards (Olio, Too Good To Go, …), to find takers for their leftovers.

It’s not really about the cost of the cup.

Indeed, which is why I did not say that it was “really about the cost of the cup”. The latter is, as you correctly imply, only one factor.

Boycott those stores.

Decent coffee shops offer a discount if you bring a reusable mug, because it saves them a disposable one.

That doesn’t seem to be true in practice.

People on the secondhand market seem to be more drawn to other “premium” brands and to features that are less important for a smartphone than security (e.g. camera zoom).

Most places I’ve looked, secondhand Pixels are priced similarly to or lower than other brands’ secondhand “flagship” phones of similar age - even though Pixels have a killer feature the others lack: security hardware to run GrapheneOS.

I don’t judge but I do get annoyed…

Getting annoyed is a form of judgement.

… at US defaultism

Yes, U.S. defaultism is problematic.

Still, as long as companies, especially US-based ones like Google, are exporting their US-centric products & practices, people outside the US will be exposed to products & practices shaped by US law.

Because enforcement is rarely watertight, the above holds true even if the importing country’s laws forbid those products & practices.

Therefore, unless you wish to live in ignorance, it’s worth being aware of the laws that most strongly shape the technologies that in turn shape your society - even laws from jurisdictions outside your own.

Exactly how does it have implications in a country it’s not a law of?

Because it had, and continues to have, a significant bearing on the development of technologies that are used internationally, many of which shape the society you live in.

Not gonna dispute that.

However, someone like that not only probably wouldn’t want to submit residency evidence to Google, they probably wouldn’t have utility bills or land registry documents etc that could prove residency. Therefore, they’d be outside the scope of this post.

They might not know it.

But they would, if anyone with your name & address ever:

• Stored it on a Google server. (Maybe a business you once placed an order with uses GSuite?)
• Made a Google/GMail Contacts/Address-book entry with that info. (Maybe you invited a friend or colleague for dinner?)
• Made those details public (land registry, company officer registry, etc).
• Etc.

Somewhat relevant: https://thebrainbin.org/m/linux@lemmy.ml/t/1858588

It would probably be a better use of time for those people to vote and lobby their legislatures for decent privacy protections in law.

Yet another example of why US citizens would benefit from GDPR-equivalent privacy laws.

Where will you post updates?

How does resale value “support Google”?

If you want GrapheneOS without funding Google, why not get a secondhand Pixel?

This reminds me I need to have another look at Ledger, Beancount, et al. More info at https://plaintextaccounting.org/

Kdenlive is the top-ranked FOSS video editor on AlternativeTo.

I agree with that ranking, having also tried 5 or 6 of the other entries on the list.

If it’s a server for self hosting you definitely don’t want anything that requires interaction at boot.

Depends on use-case. If you only plan to boot it when you’re physically present, then it’s fine.

i believe a much better secure layer is something similar to what Novacustoms, Purism attempt to do: verify if somebody else not you try to access the laptop.

You’re thinking of Heads, which I agree is ideal for supported motherboards.

tang

Thanks. TIL about Clevis/Tang.

Yes. Here are some common self-hosting scenarios:

• Home server containing family files: scans, photos, device backups, …
• Office server containing business files: sensitive documents, device backups, …
• Web or email server containing websites, Fediverse instances, emails, etc

In all those cases, full disk encryption (FDE) is a sensible precaution to protect the data in case the server is physically stolen.

Linux is probably the most common OS kernel for self-hosting. On Linux, LUKS (Linux Unified Key Setup) is probably the best FDE system. It’s mature and reliable. But anyone self-hosting a Linux server with LUKS FDE is faced with the question of where to store the keys.

Hardware security tokens (HSTs) are widely considered a safer place for keys than SSDs, HDDs, or USB storage. They follow the smartcard principle: a private key can be written to an HST but not read from it (security vulnerabilities excepted). Instead, they implement cryptographic algorithms to prove possession of the private key. So, anyone self-hosting a Linux server with LUKS FDE should strongly consider storing their private key(s) on an HST.

However, there is more than one way to do that. Hence the question in my OP.

On 18 Jan 2025, before Proton and Mullvad CEOs came out in support of the far right, Freedom of the Press Foundation (FPF) recommended:

• Mullvad (Sweden)
• Mozilla VPN* (USA/Sweden)
• Proton VPN (Switzerland)
• Tunnelbear (USA/Canada; owned by McAfee in USA)
• IVPN (Gibraltar)
• Windscribe (Canada)

I’ve crossed out the first three, since Mozilla VPN uses Mullvad, and Mullvad’s and Proton’s CEOs support extremists.

Nym is not on the list, so presumably didn’t meet FPF’s requirements.