Just a regular Joe.

  • 0 Posts
  • 37 Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle
  • Surprisingly good, this one. One container, and it’s away! The apps lets you download the audiobooks for offline use (also to existing folders on Android, in-case you have a preferred audiobook app). This means that you can run the server on-demand (eg. when your laptop is on). Thumbs up.

    For some almost-certainly-anti-competitive-reason-that-should-be-investigated-by-the-EU-and-other-watchdogs, Amazon refused to let it onto the Amazon appstore, making it a no-go on Amazon Kid’s tablets/profiles.








  • wg-quick takes a different approach, using an ip rule to send all traffic (except its own) to a different routing table with only the wireguard interface. I topped it up with iptables rules to block everything except DNS and the wireguard udp port on the main interface. I also disabled ipv6 on the main interface, to avoid any non-RFC1918 addresses appearing in the (in my case) container at all.

    edit: you can also do ip rule matching based on uid, such that you could force all non-root users to use your custom route table.





  • Congrats for waiting this long - many parents don’t.

    Honestly, this will depend on your child. If they are prone to addictive or obsessive behaviour, a smart phone will only amplify the tendancy. We already know how hard it is for adults to put down their phones for any length of time, and kids typically have less will power.

    That said - digital communication is an important part of most people’s lives now. If all her friends are using a particular app to communicate, they will “need” it too. Some parental controls would be good for the first phone – which apps get installed, etc. Just be prepared to unlock most of them. ;-)

    You might want a phone “lockbox” at home to ensure they turn off. Hopefully the school is strict about phone usage and etiquette too - it can help.




  • AWS has JVs in China (one for each region, iirc), and China-AWS is a separate partition, with incompatible auth and no cross-partition communication.

    Microsoft has separate legal entities running their Azure cloud in certain regions, walking the legal tightrope despite the central portal & auth (edit: it is likely 100% independent in China too)

    Most risks (both digital security and political leverage) could be mitigated with sufficient legal requirements. Technical solutions can be developed to fill the gaps.

    The EU and its members should continue to support local initiatives, as well as 100% EU-national high-security clouds, staffed by EU/non-US citizens.