theroff

On one hand, the hate that's being directed to the e-Safety commish is disgraceful.

On the other hand she is effectively proposing an internet licence for all Australians to be able to interact online via mandatory age verification. It applies to all social media sites but the definition of social media is so vague it basically just says a digital service which can be used to communicate with other people. She is deserving of our scrutiny.

https://www.aph.gov.au/Parliamentary_Business/Committees/Joint/Social_Media/SocialMedia/Terms_of_Reference

Maybe a bit of a case of sour grapes on both sides? The Greens nearly took Fiona's seat last election at 47.7% to LNP's 52.3%. The ward office window was smashed and tensions were high. No excuse for it but the garbage that the LNP posted out was... truly garbage.

There have been many improvements in making documentation more inclusive across the IT industry which shouldn't be scoffed at. The first that comes to mind is changing "master" and "slave" to "primary" and "secondary" (or "replica" etc.) because references to slavery is inconsiderate to many.

I don't think pile-ons are productive, but I think inclusive language and thinking is important.

I stand corrected, thank you. I'll have to try that out.

The biggest issue I've had with I2P so far has been lack of content.

postman.i2p only permits torrents which includes its tracker in the torrent file, which means popular torrents from 1337x, TPB et al can't be uploaded there (at least not without changing the infohash). Torrent clients like qBittorrent and BiglyBT can cross-seed on I2P and clearnet networks which is a recent development since libtorrent 2.0 came out (software packages take a while to bump to.the latest library), but from what I've tested nearly all of the infohashes I put into my client from "clearnet" torrent sites have stalled, probably because I2P is a little too bespoke at the moment.

The potential is definitely there IMO, but unless you're just watching mainstream movies and TV it's not a replacement for clearnet/VPN.

If I'm missing something I'd like to know :)

You can absolutely download apps from F-Droid on GrapheneOS, what makes you think you can't, and how did you conclude that LineageOS is more private and secure?

I never said that GrapheneOS couldn't download apps from F-Droid. I didn't mention GrapheneOS being able to use F-Droid in my dot points but that was just an oversight, not intenttional.

GrapheneOS doesn't ship with any Google services by default. We do provide an easy and safe way to install the Google Play components if desired, they are run under the same sandbox and constraints as any other ordinary app you install.

The problem with this is that so many apps use Google Play Services. If I didn't want a phone that used Google, I wouldn't use an OS that bent backwards to make it work.

The sandbox model is OK in theory, except when your bank app asks for permissions for microphone, camera, contacts and files, and refuses to start without them.

The app model is a bit broken IMO and GrapheneOS both enables and perpetuates it.

LineageOS is pretty commonly behind on updates. As an example, it seems that LineageOS 21 (based on Android 14 QPR1) came out in February of this year. You cannot ship the full security patches without being on the latest version of Android, which is Android 14 QPR3 now.

I might be being a bit naïve here, but Android 14 came out in October, 4 months prior to LOS 21, which is not particularly long. Android 13 is still supported by upstream. This sounds a bit like running RHEL or Debian vs bleeding edge Arch, no? It's a common debate whether RHEL systems are constantly out of date, the counterargument being that vulnerabilities are often found in new software versions. Without real statistics about security vulnerabilities over time it's difficult to make an informed decision about software version policies.

LineageOS does make connections to Google by default, as does AOSP. GrapheneOS changes those connections while LineageOS doesn't.

That is excellent, I'm glad to hear GrapheneOS is changing some of the defaults to be a bit better.

Lineage is kinda bad privacy and security wise, from the little I know its not fully degoogled

My understanding is kinda the opposite:

• GrapheneOS ships with a sandboxed, FOSS Google Play Services which can optionally do a bunch of Google things (use their APIs, login to Google etc.) plus they have some hosted services that can substitute Google services (like geolocation).
• LineageOS basically doesn't ship with any Google Play style API/frameworks at all. It's a pure AOSP experience. Any apps on F-Droid work but third party apps (like ones found on Google Play) are hit and miss. If you can just use F-Droid for all of your apps then LineageOS is probably a much more private and secure offering.
• LineageOS for microG is an unofficial fork of LineageOS which includes a FOSS Google Play Services compatibility layer, a bit like GrapheneOS. As far as I know it doesn't have the same level of sandboxing as Sandboxed Google Play on GrapheneOS.

Both GrapheneOS and LineageOS publish monthly updates with upstream security patches for all supported devices.

Both GrapheneOS use network-provided DNS by default.

Apparently both GrapheneOS and LineageOS connect to connectivitytest.gstatic.com via http as a Captive Portal test by default,althoughh this was as of 2019-2020 and both might have changed since then.

It will use tons of public sector resources and attention regardless if it's PPP or a state asset.

Just look at the recent Logan/Gateway Motorway upgrade (Logan Enhancement Project) which Transurban financed for $512M. There was least $30M of government spending directly afterwards on an adjacent road, and likely more than $100M to come.

No doubt a $7b tunnel will similarly result in $100Ms or even billions in adjacent road spending.

There are different types of cycling. I would always wear a helmet to work because I live 6km away and it's a decent ride. There are hills and I often get to a reasonable speed.

Compare that to someone living in South Brisbane commuting to the CBD, or someone going for a leisurely bike stroll on the riverwalk - they may not go fast at all. We don't wear helmets whilst walking or jogging, but why is it mandatory for a slow ride?

The big reason helmets can be offputting is because they can mess up your hair. If the city wants to encourage people who live relatively close to their jobs to ride in, more flexibility on helmets could be a good thing.

FWIW I do think helmet safety should always be encouraged. Riding down a hill? Going more than a leisurely stroll? Wear a helmet. Makes sense. But it's really not that necessary for people who are riding slow.

You can definitely work in an office job, bring your clothes in your bag and get changed at work.

If that's not your thing, catch PT. Nobody's saying you have to do the cycling thing. But plenty of people ride into offices for work and wear their smart clothes just fine.

I ride all year round in Brissie. I find my comfort level depends on when I ride, distance, speed and my bike setup.

First, I ride to and from work in the morning and arvo when it's cooler, not in the middle of the day.

I ride 6km each direction which is manageable. In winter I barely break a sweat. In summer I have a shower on each side. I can and sometimes do get away without showering by riding slowly. Or I just catch PT if I'm going somewhere else after work.

The other thing I noticed is that not wearing a bag helps a lot with reducing sweat on my back. I have a basket on the back of my bike and just throw my bag in. A lot of other people use pannier bags.

Everywhere that I've worked so far has had an End of Trip facility except for my supermarket job as a teenager.