Surely what matters here are the effects it may have for the Gentoo Foundation, Inc., no?

As an open source project maintained and mirrored by people from different sovereign countries under various legislation, the potential liability from a US law is to the legal entity incorporated in the US who ...

Koss Porta Pro seems to fit all your requirements. I have been using for several years with no complains. Outstanding sound quality for the price.

Hi.

I have been for several months now using NetGuard, an app that leverages Android VPN for rootless firewall, and I block all internet access by default, only allowing it for specific apps. It has been working great for me. I do this for privacy mostly.

I was thinking about doing the same on my ...

nginx zone config:


limit_req_zone $binary_remote_addr zone=req_limit:10m rate=5r/s;

...

limit_req zone=req_limit burst=10 nodelay;


fail2ban filter and jail (tailored to my log format, won't work on default nginx config):


[Definition]
failregex = ^"[^"]*";"<HOST>";"[^"]*";"[^"]*";"(400 ...

I have very aggressive rate limiting on nginx, my end-users are humans, so that filters out most bot traffic.

For the more patient bots I also have a very aggressive fail2ban filter and jail that bans anyone who gets 404s/403s in a row, which gets rid of most of the rest.

My home page is also ...

Thank you. How do I remove it? I don't need it.
Tried to mask it, but then world set upgrade fails because it is required but masked.

I was upgrading my world set today and noticed a new install of net-mail/mailbase, which is a bit surprising because I don't have any email software and equery says nothing installed depends on net-mail/mailbase, even indirectly?


# equery d --indirect net-mail/mailbase
* These packages depend on ...

I'm on X also, but I only use dwm, no desktop environment like xfce or anything like that. So I would assume it's related to your DE and not GTK
But it's just a guess, I don't really know how to help you further debug this.

More of a workaround than a solution, but if the AppImage is a viable option for you, it works great for me...

https://www.libreoffice.org/download/appimage/

In particular I use this version: LibreOffice-7.6.7.2.basic-x86_64.AppImage

Which was the first to work 100% for me, without any of the ...

Well after tweaking with the command line options I was able to reproduce the error with strace. I'm beginning to suspect it might be a race condition, due to the non-deterministic nature of the issue and the fact that it is less likely to happen under the slowed-down strace runs.

strace output is ...

Thank you for the suggestion, I hadn't thought of it! It does seem smoother/faster running as my user (just `apulse firefox-bin`), but it still freezes on Stripe checkout.

I'm using www-client/firefox-bin-134.0.2 and since a few versions ago have been getting frequent freezes on Gentoo, but not on Windows on the same machine (nor on a separate Mac machine).

The issue happens frequently but irregularly on sites like Zoom and Google Meet. On Stripe checkout I can ...

I have used a 512MB ThinkPad with Gentoo for several years, with suckless' dwm as the WM of choice, and no DE. Never had any issues with RAM or sluggishness.

Is it really the same hardware? What I'm trying to get at is disk, which hasn't been mentioned so far. Was Ubuntu and Gentoo tested on the same drive? Could be a bad disk.

Well, online privacy is a large topic, and as such one's approaches and their effectiveness depend on one's threat model. In this topic, where the browser itself is a threat actor, possibilities are eliminating either the threat (patching the browser) or the actor (using a different browser)... If ...

Did you concatenate the .crt files (PEM I assume) as szatox suggested? That would be `cat ELILABS.COM.crt SSL_BASIC_IntermediateCA_*.crt >server.crt`. What error did Apache give?

. Is there a VPN where I can use openvpn as a client without having to switch to a computer with a GUI and copy/paste into an xterm?


Yes, I use ProtonVPN for this purpose. They allow downloading the .ovpn files, you just need to call `openvpn the-downloaded-file.ovpn`:

https://account ...

Just in case it's useful for anyone finding themselves here through a web search, this is what I ended up doing and worked well for me:

1. Create a /home partition in a new drive

For this just follow the handbook: https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Disks#Partitioning_the_disk ...

Sorry to revive an old thread, but since I got here from Google this might be useful to someone else.

If using dnsmasq, simply


echo 'filter-AAAA' >/etc/dnsmasq.conf
rc-service dnsmasq restart


From the manual:


--filter-AAAA
Remove AAAA records from answers. No IPv6 addresses will be ...

So, my understanding is fscrypt is file-level encryption using the crypto support from the kernel.

This section from Arch wiki on fscrypt seems insightful:


Alternatives [to fscrypt] to consider

To protect an entire file system with one password, block device encryption with dm-crypt (LUKS) is ...

Thanks, I'll review that. I actually suggested some file-level encryption there myself, but I didn't remember the thread. I'll review your suggestion

Given recent events in my country, I believe it to be in my best interest to have my devices encrypted. My first instinct was to go with FDE, but AFAIK that would require a fresh install and has its own set of pitfalls. So I'm thinking about creating a separate partition for my /home and have only ...

Thank you very much.

app-misc/ranger is maintained upstream, but the release cycle is very slow (last release was in 2019), see discussion here https://github.com/ranger/ranger/issues/2702

There are several patches upstream already merged, but not yet released, which affect Gentoo users. For example https://github.com ...

I've recently read this blog post about a dubious opt-out feature added to Firefox 128 (current version in Gentoo):

https://blog.privacyguides.org/2024/07/14/mozilla-disappoints-us-yet-again-2/

I'm a user of firefox-bin so I don't expect it to be patched in any way, so I simply disabled it.

I ...