Maât

@maat
18 Followers
147 Following
210 Posts

Privacy Hardening Guide 2026 — Browser, DNS, VPN, OS settings with copy-paste commands

https://discuss.tchncs.de/post/56788604

Privacy Hardening Guide 2026 — Browser, DNS, VPN, OS settings with copy-paste commands - tchncs

Wrote a comprehensive privacy hardening guide with actual commands you can copy-paste: - Firefox about:config settings for privacy - systemd-resolved DNS-over-HTTPS setup - UFW firewall VPN kill switch - WireGuard kill switch config - sysctl hardening - NetworkManager MAC randomization Also has Windows and macOS sections. And a Privacy Audit tool [http://5.78.129.127/privacy-audit] to test your setup. Free, no tracking. Feedback welcome.

Quand un magistrat de la cour des comptes parle de Linux (audition de la commission rapportée par @cyrielle_chatelain) à l'Assemblée Nationale ce jour.

#Linux #LogicielsLibres #FreeSoftware

Distro-Specific Implementations — Ageless Linux Docs

Age verification laws are really just censorship mandates clothed as child safety proposals—here’s why. https://www.eff.org/deeplinks/2026/03/rep-finke-was-right-age-gating-isnt-about-kids-its-about-control
Rep. Finke Was Right: Age-Gating Isn’t About Kids, It’s About Control

What’s at stake is whether “protecting children” becomes a legal pretext for embedding government control over the internet to enforce specific moral and religious judgments—judgments that deny marginalized people access to speech, community, history, and truth—into law.

Electronic Frontier Foundation

Is this the first time a major service has removed end-to-end encryption instead of adding it? Why Instagram?

#instagram #socialmedia #privacy #infosec #technology #enshittification

Vrai coup de pouce pour le logiciel libre dans l'administration ou nouvelle déclaration d'intention sans concrétisation factuelle ?

https://www.zdnet.fr/blogs/l-esprit-libre/ladministration-etudie-un-poste-de-travail-sous-linux-une-circulaire-prone-lopen-source-quand-cest-pertinent-491866.htm

#logiciellibre #Linux #dinum

L’administration étudie un poste de travail sous Linux, une circulaire prône l’open source quand «c’est pertinent» - ZDNET

La Dinum étudie le développement d’un poste de travail sous GNU/Linux. Sébastien Lecornu a publié le 5 février une circulaire qui «recommande de privilégier, lorsque c’est pertinent, le recours à des produits open source».

ZDNET

MidnightBSD has updated its license to ban users in regions mandating OS-level age verification, starting with Brazil (March 2026) and California (January 2027) 🌍.

The open-source BSD project cites privacy and legal risks, warning that more areas like Colorado and New York could follow 🔒.

🔗 https://itsfoss.com/news/midnightbsd-age-verification/

#TechNews #MidnightBSD #BSD #OpenSource #Privacy #Security #FOSS #Regulation #Compliance #UserRights #Freedom #Software #Internet #Policy #Innovation #DigitalRights

MidnightBSD Bans Users in Brazil and California, Warns More Regions Could Follow

Colorado, Illinois, and New York could join the list if their proposed age verification bills pass.

It's FOSS

The Ageless Linux project launches a Debian-based system designed to test how new age verification laws could affect Linux distributions and open-source software.
https://linuxiac.com/ageless-linux-launches-to-challenge-age-verification-rules/

#linux #opensource

C'est tellement puissant et riche, la communauté du monde libre ! 🔥
Grâce à @nicolasvivant je viens de découvrir https://cal.rs/ , c'est vraiment top comme solution de gestion de calendrier et de planification de rendez-vous ! J'en ai également profité pour faire une soumission auprès du catalogue @yunohost , en espérant qu'ils valident la demande et que l'on puisse retrouver un paquet qui s'installe comme le reste, c'est-à-dire facilement ;-) poke merci aussi @olivier
Cal.rs — Self-hostable scheduling in Rust

Connect your CalDAV calendar, define bookable meetings, share a link. No Node.js, no PostgreSQL, no subscription.

Question for the haproxy users:

Does anyone have a working configuration for reverse-proxying HTTPS URLs
- using "mode tcp" (no TLS certificates on the Haproxy) AND
- using the "use_backend" configuration do decide which backend to use based on SNI?

So we have https://foo.example.org and https://bar.example.org, both DNS entries pointing to the haproxy.

use_backend foo if { FOO_CONDITION_GOES_HERE }
use_backend bar if { BAR_CONDITION_GOES_HERE }
default_backend foo

No matter which condition we try, we always fall back to the default backend.
Removing the `default_backend` we get errors for all connection attempts. So clearly the conditions are wrong.

We tried `req_ssl_cni foo.example.org` as the condition inside the curly braces.
We tried `ssl_fc_sni_end foo.example.org`.
We tried `req.ssl_cni foo.example.org`.
We tried with -i and with "-m end".
We tried the complete URL (some.service.foo.example.org) or only the domain.

Any ideas, anyone?

#Haproxy #TLS #Linux #Admin #homelab #DevOps #ReverseProxy