I used a win2k reg editor in wine years back to do nondestructive forensics on a windows partition.

you probably can’t use them simultaneously anyway?

You can, BT >5.0 supports up to 2 simultaneous devices.

Hey, you’re the one on the journey of de-googling, it’s your decision.

However, one of the reasons many ppl degoogle is because we are lied to all the time by software companies.

Iris keyboard also says “network permission is optional until triggered by translation”, and the iris keyboard immediately asks for network permission on install, so trust that as much as you like.

• iris keyboard integrates Copilot, doesn’t sound like you want that
• gmaps wv is out of development for 4 years now and doesn’t work very well anymore.

It’s more useful to consider a container an administrative separation, and as others have mentioned here, being vigilant means not trusting any one technology implicitly.

Cgroups2 and libcontainer do a decent job now of separating child processes from host processes and resources, but with ai-assisted tooling will eventually come the discovery of more vulns and escapes at a more accelerated pace. In those times, when everyone is panicking, having cultivated other good security habits will bring you some measure of understanding what exactly your risks are.

Containers are somewhat separated from the host os in a functional way, I don’t think your mental model is wrong, per se, but that separation shouldn’t be relied on by itself.

Connections to apple streaming source CIDR blocks, connections to apple auth CIDR blocks, and a bunch of ips in apple blocks I have no idea what they do.

Apple domains are easy to identify. https://support.apple.com/en-us/101555

A lot of it associated with iTunes and apple store stuff like mzstatic.com but also https connections to unknown domains. It’s almost all https, so impossible to say what’s being sent.

The content streams are easy to pick out, because only a handful of stateful sessions go to known CDNs.

Why starting a movie or show on an apple TV requires a check to siri and search is probably explainable, but certainly 1400 requests during movie play to diagassets.apple.com (the “diagnostics” domain known to be a black hole of Apple mystery) is probably reporting data of some kind.

It goes on like that, mysterious connections that occur during video play and at startup to domains like Apple Education raise a few eyebrows.

And then there are the plugins, which do a lot of phoning home.

very little base level telemetry

tcpdump on an appletv I did in 2024 disagrees. I can’t imagine it’s any better today.

Caldav? Or CardAv+Caldav? Something else or a bespoke service?

We need more info.

Blueray have anti-copying built into non-data areas, plus Cinavia DRM on the content most of the time. This means your 1-to-1 copies won’t play.

If you are hoping to make a playable bluray, use one of the tools that reads past both and creates a non-drm image.

Depending on where you live, this likely breaks copywrite, but isn’t illegal.

deleted by creator

You can’t run your own snap repo. That goes against the entire point of openness.

Behest means request.

From the gitlab front page:

Lepton disables various Android services that are not required to run games possibly breaking compatibility with some applications.

It is probably possible, but just as using Proton to run MS Office is a real bear to configure, this tool is also pretty specific in application and environment.

This is annoying, you don’t seem to understand what you’re being told.

Again, the SIM only grants token access, it has nothing to do with your phone’s localization. Your equipment needs to conform to local standards, and your LTE radio is likely locked to certain channels. For example:

These are the LTE bands for North America.

These are the LTE bands used in Asia.

They aren’t the same. If your phone is baseband-locked to the USA, you aren’t getting on certain LTE networks no matter what esim or SIM you have.

Because you bought your phone in the USA, and because “international” phones are not sold by USA carriers because that is how manufacturers create separate markets for smartphones and connected devices, you are very unlikely to have a phone that can work at all in Asia, Australia, half of Europe, South America, and Africa. There are even some incompatible bands between Canada and USA.

What people are trying to tell you is that unless you bought an explicitly “international” smartphone, your phone will be locked at the baseband level, meaning it won’t connect in the above mentions regions over LTE.

That means you’ll be likely restricted to WiFi only in those areas.

This opt out is a positive, likely carved out by litigation, in a very very negative space for privacy rights.

It’s not, it’s less than Google used to do for these requests. In 2009, I requested my house be taken off streetview. They removed it by skipping mine and a few houses on each side.

Then they went down my back lane, so everyone got a good look at my back yard anyway.

Privacy today is a never ending battle, but Google started this nonsense a long time ago.

Good effort.

Your grasp of DNS needs some refinement, especially in distinguishing the concepts of IP, routing, and name resolution.

100% of the time.

My VPN turns on automatically when I leave my home lan. I don’t use split-tunneling, so all my traffic goes back to home before going to internet.

I mean, most of the success of Linux comes from the freedom to solve local issues the way you want.

There have come lots of issues solved with a departure from the project from a need that drove the change. Want Debian without systemd? Devuan.

So yes, literally, if it’s important to you, you can fork it. Whether that takes a big lift or not doesn’t mean you’re any less free to do so.

You make it sound like no one can just go keep the older hardware alive by forking.