Josh

Josh

@sideofburritos.com

Security, Tech, YouTube Members: https://members.sideofburritos.com My podcast: In the Shell: https://intheshellpodcast.com don't just host your podcast. own it. https://yellowball.fm YouTube: https://youtube.com/@sideofburritos

226 followers34 following120 posts

Josh reposted

Our massive overhaul of the AOSP Messaging app has reached the Stable channel in our App Store after 3 releases. It's well on the way to becoming our own high quality GrapheneOS Messaging app instead. There are still parts of the interface to overhaul including widgets and important features to add.

I've never been happier that a drive is under warranty. I bought 4 (16TB) new in 2022 for ~$300 each. Now, they're going for ~$700 per drive. I've liked the WD Red Pro line (mostly for the warranty) but I don't know if I'd buy them again. This is my second drive to fail in ~4 years. #nas #ai #linux

How often do you clear your browser history, cache, cookies, etc.? - I keep nothing - Weekly - Never - Something else #privacy #security #iwishbskyhadpolls

Josh reposted

Join Josh from Side Of Burritos and our Community Manager spring-onion in a live conversation about everything GrapheneOS on July 20th! PDT - 10:00 / 10:00 AM EDT - 13:00 / 1:00 PM UTC - 17:00 / 5:00 PM BST - 18:00 / 6:00 PM CEST - 19:00 / 7:00 PM AEST - 03:00 / 03:00 AM / July 21st

I was testing a temporary number service for WhatsApp when I received the popup below. Temporary numbers can be useful for disposable accounts that do not contain private data. You should not use one for an account you plan to keep long-term or that contains sensitive information. #privacy #security

The service you used may have a policy against reusing numbers for the same platform, but they won't have that number forever. Once a block of numbers is released, another provider could acquire it and use it for the same platform.

On the plus side, you can click the earphones and type what it reads out loud. I don't know if they'll eventually get rid of that option, but I think they'll need to maintain something for accessibility purposes.

I had a great time chatting with Jay and Michael about a bunch of different topics. The link is below if you’d like to give it a listen. Thanks for having me on the show!

Signal Jam@signaljam.me

New episode! This month, we chat with @sideofburritos.com (Josh) about his YouTube channel, #podcast, and Yellowball. We also discuss what he’s working on these days, his thoughts about #privacy in 2026, the impacts of #politics on privacy, and more.

I got this email this morning, and I guess this is now a marketing point? Whether the FCC labels you a “trusted consumer router”? I wonder what requirements they met, or more likely, how much that cost them. For context, I don’t use NETGEAR. Just an old account email. #netgear #security #privacy

Josh reposted

Replying to @grapheneos.org

It doesn't stop there. It would require keeping data for auditing and providing a token for connecting age verification checks by apps and websites to the data. The law is a privacy disaster and exposes minors to being exploited by leaking their age bracket to apps and websites.

Josh reposted

Brazil's authoritarian age verification law became active this month. It won't be implemented by GrapheneOS. Complying would require integrating a mandatory process for each user where a third party service checks government identification and confirms a match using the camera.

Josh reposted

Pixel 10a Owners Changes since the 2026030700 release: • add experimental Pixel 10a support It's Go Go GrapheneOS Time!

GrapheneOS@grapheneos.org

GrapheneOS version 2026032000 released: grapheneos.org/releases#202... See the linked release notes for a summary of the improvements over the previous release. Forum discussion thread: discuss.grapheneos.org/d/33367-grap... #GrapheneOS #privacy #security

Josh reposted

re @anthropic.com: I've identified industrial-scale copyright violations on my content by Anthropic, OpenAI, Google, X, and more. These companies created thousands of crawlers incorporating the text of all my blog posts, open source code, and books into their paid AI models to profit exorbitantly.

Josh reposted

Someone mentioned /e/OS and GrapheneOS in the same sentence and I ask a reasonable question and...well... Truth hurts...

Josh reposted

Nothing like praising AI surveillance at a press conference for an unsolved case of a missing person disappearing under millions of dollars of AI surveillance.

There's nothing like the illusion of choice when it comes to financial institutions and privacy. Of course, it's never opt-in, it's always opt-out (for the ones you can limit). #privacy #finance #dataprivacy

Josh reposted

The inter-financial/promotional capitalistic circle jerk by vendors promoting substandard privacy and security products in this space appalls me. It's the worst kind of human centipedal behaviour as they voluntarily swallow and regurgitate claims for each other to build SEO etc

What's the best way to make your phone more secure in one tap? When you see this notification, tap 'Reboot'. #GrapheneOS #android #privacy #security

Doesn't get much better than that!

MetropleX@metroplex.bot

Hey psst, you, yes YOU. How do fancy some of those early security patch updates we're famous for? You do? Well come grab the FULL October 25 patch level right now... #NobodyDoesItBetter

If your account holds your contacts, calendar, passwords, files, and email, you're SOL if it gets disabled. Diversify and keep offline backups. If it’s someone else’s computer, it’s not yours. #proton #privacy #security #email

I have no idea about the details of this situation, but it's good practice regardless to not depend on a single company for everything. A company also can't allow their services to be used for obvious illegal activity 🤷.

Most people think they need to prepare for a sophisticated software attack, but your biggest risk is your habits. Exploiting people is often the easiest way in. Anyone can fall for phishing, it’s happened to me. #privacy #security #phishing #npm krebsonsecurity.com/2025/09/18-p...

krebsonsecurity.com18 Popular Code Packages Hacked, Rigged to Steal CryptoAt least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved i...

👏👏👏

GrapheneOS@grapheneos.org

We've received the Pixel 10 we ordered and have confirmed it supports unlocking, flashing another verified boot key and locking again. Our Pixel 10 support will likely only be possible to complete after we finish porting to Android 16 QPR1 which is being released in September.

3 things I learned migrating from Docker Swarm to K3s: - Complex setup, but easier management - Infrastructure as Code. Use Ansible. - Better config and secrets management. Bonus - The larger the community, the easier troubleshooting is. #kubernetes #k3s #ansible #linux #docker

Making an image of the drive, gotta keep it cool. The A+ course didn't have this in it years ago, but maybe they suggest it now. #selfhosting #linux #ssd #nvme

🔥🔥🔥

GrapheneOS@grapheneos.org

We're going to add a secure way of working around this without breaking the app source security model. We'll be adding support for having the OS automatically verify the Play Store signing metadata and then inform Play services those apps were installed from the Play Store.

Josh reposted

Okay Bluesky Tech, let's see if you can do this before X. Can you help either personally or connect parties who can with us? Reach out please or repost and get the word out, it all helps. Let's make it a Bluesky success story!

GrapheneOS@grapheneos.org

We need an Android OEM or someone working at one to provide us with early access to the Android 16 sources in order to have a smooth port this year. We need this before June. We requested it to help with this very difficult situation and still need it. bsky.app/profile/grap...

Josh reposted

We need an Android OEM or someone working at one to provide us with early access to the Android 16 sources in order to have a smooth port this year. We need this before June. We requested it to help with this very difficult situation and still need it. bsky.app/profile/grap...

GrapheneOS@grapheneos.org

One of our two senior developers has been forcibly detained and conscripted to participate in a war. When they first went missing, we revoked their repository access as a precaution. We soon learned their disappearance was completely unrelated to GrapheneOS. Our priority has been keeping them safe.

I wanted to create a VLAN to keep my Mastodon server separate from my LAN. Two days later, I now have 8 VLANs. I think I have a problem. #opnsense #unifi #selfhosting #linux #security #privacy

For the past 10+ years I've been using ZFS (FreeNAS/TrueNAS). For some reason, I only recently started using snapshots…THEY ARE AMAZING. So this is your reminder that if you're using ZFS, use snapshots. #TrueNAS #selfhosting #nas

Josh reposted

GRAPHENEOS IS HIRING Are you an experienced AOSP developer? Interested in working full time, fully remotely on GrapheneOS? Can you hit the ground running? grapheneos.org/hiring. Global opportunity paid via Wise (local bank transfers), BTC, ETH or XMR.

The Pixel 9a was released today. If you're looking to upgrade your #GrapheneOS Pixel (or make the switch to GrapheneOS), the 'a' series make for great devices. You can check the link below to see how long GrapheneOS is supported for on your current device — grapheneos.org/faq#device-l...