It has a built in ad blocker, so you don’t need ublock, even though it would work too.

Helix for a better default config. But you’ve probably already set up vim the way you like it.

I don’t think you need a VPN here since you’re using an already secure protocol. Sounds like you’re mostly wanting a static IP address. You can configure the local router to hand out static IPs. Local DNS works too.

Cloudflare supports NS records, which is what you’re looking for. Except it probably only lets you create a zone for the top level domain, so you can only delegate to other providers. AWS Route53 will let you create subdomain zones, and will let you create NS records to set up delegation.

People mentioned Quad9, Cloudflare, Mullvad, and NextDNS already. Controld.com is also available for free with different levels of blocking. They also support DoH and DoT.

You can use Yubikey Manager: https://www.yubico.com/support/download/yubikey-manager/

In my opinion the biggest problem with hardware keys is what happens when you lose them. You have to either provision the keys yourself, putting the secret on your computer. Or you have to buy backup keys and make sure to register both with all your services. You’ll end up using your phone or password manager as a “backup.” And then that backup becomes your primary 2FA.

How does NextDNS compare with controld.com?

How are you liking Controld vs NextDNS?

I tried Mullvad’s DNS service and found that it messed up sites that rely on geography based DNS routing. For example, I’d get sent to a service’s servers in Singapore instead of the US. This caused some noticeable lag.

yup. if you’re running untrusted apps on your phone, make sure to turn off background refresh AND notifications. apps can run arbitrary code when they receive a push message. usually its so they can provide a better notification for the user, but they can collect data and phone back to the mothership too.

I really wanted to like Matrix, but the clients applications are trash. This looks like it has a nice client app at least.

here’s a link to the script. its nothing fancy, but makes it easy to check: https://github.com/akamai/akamai-security-research/blob/main/malware/noabot/noabot_detect.sh

What does GC stand for? https://www.acronymfinder.com/Slang/GC.html

From a user perspective, Wayland is smoother and looks nicer.

Balls? Of course.

That TLDR is more of a thesis statement than a TLDR/summary.