French75

Test it. Seriously.

There are likely roadblocks you haven't seen. For example, it is increasingly true that login & password aren't good enough to access most commercial systems. So many businesses rely on active session cookies to determine identity, and if that's missing, they'll fallback to email or SMS based one-time passwords. And if they don't have access to your laptop or phone, it might be impossible for them to gain access.

I do, and it's probably the main reason I started self hosting.

Managing parents estate made me want to get my shit in order for my own kids in the event I die. There's a good chance that if I die, my cell phone is gonna die with me. And commercial services from Apple, Google, banks, and other institutions are increasingly tied to a single cell phone as "identity." If you try to login on a device with no session cookies, they treat it as hostile, and do all sorts of oddball stuff that almost always requires the cellphone to access. And if you don't have that phone, it's incredibly hard.

By self hosting, I can choose to make access to that most of that data much easier for my family if I die and my cellphone dies with me. I don't expect them to continue self-hosting, but I do want them to have easy access to files so they can move them to some system they are comfortable with.

Harris did pretty bad during the Primary back in 2020

Harris actually dropped out months before the primaries in 2020. She was something like 16th most popular candidate at the time she withdrew. She was a pretty unpopular AG in California at the time and likely would not have even won her own state primary.

couldn’t get my small group of gamer friends to switch

The hardest part of any change right there.

I've had pangolin running for a while, doing tunneling to some self hosted resources, and I'm confused by this announcement and update. It seems like they're suggesting to use an Android/iOS client to connect to Pangolin protected resources, which seems like a shitload more work and overhead than just using wireguard to do the same thing. Am i missing something here?

Agreed. Wrong word choice. And its an important, major correction. Not a small one. :-)

I don't know about intentionally designing that. It would violate contracts and have to be a hidden, but broadly conspiratorial activity. I have some professional experience in consumer electronics, and I remember when TPMs started becoming a required component for CE. It took several years to become commonplace; a slow transition from security by obscurity to sensible practices when devices started to be internet connected.

Nevertheless, from my experience, I'd say the TPMs aren't there for user security, they are there to keep Hollywood movies safe.

+100. People forget, or chose not to pay attention to the fact that Google sensor vault data was key evidence in convicting the January 6 insurrectionists (who were exonerated to become ICE). Surveillance capitalism doesn't care which side you are on.

Just to clarify... my question wasn't "do sleepers exist" it was should we continue to call them sleepers when they have broad access to the administrative branch of the US government.

And then, unless you jumped through hoops to disable it, your PC sends the key to Microsoft so they can just keep it linked to your account.

You'd probably also have to jump through the hoops to disable windows recall too.

Are they really sleepers any more?

I've got a few domains. I use Porkbun as registrar. They're awesome, and the domains were pretty cheap. Under $10 a year each.