I have a ReoLink camera that streams to my Synology NAS that’s joined to my Tailscale network that I can access from anywhere!

I’m surprised not to see https://cryptpad.fr/ here, a FOSS, self-hostable E2EE web based office suite. Not as feature rich as GDocs but offers the basics in a more secure manner.

I pay for Kagi.com for search, I use NextDNS over my personal Tailscale network that blocks all the commercial social networking sites and their CDNs, as well as a ton of ad networks. I use uBlock Origin in firefox to further remove content that may be served 1st party. Opted out of as many analytics services as I can and frozen my credit with all four US credit agencies. I alternate between using a VPS as a Tailscale exit node, or ProtonVPN for country-specific location egress.

I work mostly from home, so no commute. I do pay for 2 days/wk at the co-working space either 7 or 30mi away (so 15-35min). I have an electric scooter that goes 65mph and an incredible view on my commute (see attached from Tuesday’s drive), so I enjoy it and the chance to be social with the people at the cowork space.

He has been stepping back from Signal over time.

While Chromium itself is a very solid platform, and correspondingly Chrome is a hard exploitation target, it’s quite easy to screw up a fork of it. Comodo Secure Browser was a chromium fork that was fixed to an old version of the renderer with known security issues and was built to disable the sandbox. It also added libraries that were compiled without ASLR that worsened security for every application that loaded them.

Chrome has an enormous security team behind it in addition to P0, so bounties on Chrome exploits are around $500k. FF bounties are a fifth of that, which is probably a portion of less security, and a portion of lower target market. Brave could be doing terrible things that without an audit would be unknown. Web3 code is pretty terrible on the whole, so adding that to a secure base may not be great…

Supernote is the alternative I went with. They have a pretty responsive dev team and the cloud integration is optional, you can push stuff over the local WiFi network.

Arrested Development

I find these types of PRs pretty much pure hype when they are expecting to start delivering end of 2026. I get sick and tired of these pre orders for things that will likely never show up as if this company has done some amazing engineering and brought it to market.

Pretty niche, but a citrus squeezer. I cook a lot of Asian food and it’s much better to put half a lime in the squeezer at a time than try and hand squeeze the juice out.