Infrastructure

In this page, I note my current infrastructure, justify it, and suggest alternatives based on my preferences.

Mobile

Rather a careless choice, but all my 3 phones are Apple devices. As of today's date, I use only the iPhone 16 Pro, and keep both the iPhone 11 and iPhone 11 Pro in inventory, may necessity strike. When it comes to phones, I value convenience and feel over mostly anything else. Privacy is stupidly important to me, don't get me wrong... I just don't care enough to leave the ecosystem, buy a Pixel and install GrapheneOS on it, which is still the OpSec freak's safest bet. On the flip side, I select software carefully, as per my usual privacy standards.

Desktop

Here's where things get interesting. I've got two thinkpads: a X1 Carbon Gen 12 and a X220. ATM, I do not use the X220, as I am still upgrading its hardware (check the full plan here).

That said, this is what I can fetch from the X1:

• Distro: arch
• Compositor/WM: hyprland
• Status Bar: waybar
• Launcher: rofi
• Notification Daemon: mako
• Terminal: kitty
• Shell: zsh

And here's what it looks like:

Fun, fun stuff...
This is the palette btw:

• #56bf70
• #8cff96
• #fff3f2
• #acaab2
• #434c5e
• #745380
• #3b3366
• #1a181a

Software (gotta improve)

Now comes the political stuff, all in all (SPOILER ALERT), an average privacy stack comprised of easy decisions, if one cares to make them.

• OS: dual-booting Arch and NixOS on my main machine; dying to try out Void!
• Email: started with Tuta Mail and Mailfence, now on Proton Mail; gotta say, it is wonderful, but I fear not for long...
• VPN: tried both Mullvad VPN and Proton VPN — the first is great, however a bit less performant for my setup; do not recommend using the latter alongside their email client, beware.
• Browser: Tor when needed, Brave usually; would still suggest a hardened Firefox or simply LibreWolf.
• Password Manager: Bitwarden, because trying to move away from the Proton ecosystem; recommend Proton Pass if you don't use anything else from them.
• Authenticator: Ente Auth, same reason and suggestion as above when it comes to Proton Authenticator.
• Cloud: keep rockin Proton Drive, but recommend you just use NextCloud (RIP me ATP); I am a little lazy, you know...
• File Sharing: got OnionShare just for show, because I always use my custom script beam.sh — more here.
• Git: use both GitHub and Codeberg; truthfully, the second is superior, but not mature yet; GitHub is getting scary, man...

Additional goods:

• DNS: Quad9's nice
• Metadata: ExifTool
• Payment: disposable cards for the most part, Monero where possible
• Hosting: for I feel shame, will simply suggest Njalla and Bitlaunch — pay with crypto.
• Remote Access: Tailscale works great and pairs well with Termius (not much experience here)

Will leave it at that for now. B-bird!