Josh 🌯

Security, Tech, and YouTube.

Built Yellowball (https://yellowball.fm) — dont' just host your podcast. own it.

Podcast: https://intheshellpodcast.com

Public Key

npub1cz86rc4txpvyufnldj3c6r4wmgqwcluyhzt77hmv6eelqtr053hsacgert

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsvprapu24nqkzwyelkegudp6hd5q8v07zt39l0takdvuls93h6gmcpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qz9thwden5te0wfjkccte9ekk7um5wgh8qatzkmkrzx

Publishing to

relay.ditto.pub

relay.mostr.pub

Author Public Key

npub1cz86rc4txpvyufnldj3c6r4wmgqwcluyhzt77hmv6eelqtr053hsacgert

Show more details

Last Notes

2026-05-07 01:41:05 UTC

- reply

@nprofile…yfly it's wild that it's 0 or 1, absolutely no middle ground. It also makes me wonder if it's also a method to extort people into paying for Premium. Pay for Premium and you get an extra layer of “protecting your profile”. Don't pay, and any report gets you a permanent ban. It's a very “Google” style way of handling things. Account locked for X reason, automated appeal failed, nothing you can do.

2026-05-05 16:30:03 UTC

- reply

@nprofile…yfly It’s pretty unfortunate it came to that. You’re basically left with either giving up your identity and hoping for access, or losing the account entirely. It doesn’t even seem like account age factors in. It's just a gamble whether you hit the right decision tree in the unattended process or not and get access back.

2026-05-05 15:11:34 UTC

- reply

@nprofile…yfly That's wild. Did someone report your account or something to trigger that? Or are they actually going after accounts that don't have a full name and a picture of a face attached?

2025-11-25 20:56:55 UTC

Recently finished listening to this interview. Fantastic job @nprofile…5ww2 ! Whether you've used GrapheneOS for years or are thinking about trying it, it's a must-watch/listen.
#grapheneOS #android #privacy #security
https://www.youtube.com/watch?v=eUEtc6gblK0

2025-11-14 13:45:01 UTC

Do you have 2 minutes?
Please consider nominating GrapheneOS and Accrescent (submit the form once for each) for the 2025 Proton Lifetime Fundraiser.
Direct link to form: https://form.typeform.com/to/XixQrG8Q
Learn more about the fundraiser: https://proton.me/blog/lifetime-fundraiser-survey-2025
#grapheneOS #opensource #accrescent #android

2025-11-08 22:08:56 UTC

- reply

@nprofile…5ww2 Warhammer 40000, good times with those little plastic figurines

2025-10-08 14:21:34 UTC

- reply

@nprofile…crtx I've been self-hosting this for the past two years for notifications, it's been great.

2025-09-09 16:57:43 UTC

Most people think they need to prepare for a sophisticated software attack, but your biggest risk is your habits. Exploiting people is often the easiest way in.
Anyone can fall for phishing, it’s happened to me.
#privacy #security #phishing #npm
https://krebsonsecurity.com/2025/09/18-popular-code-packages-hacked-rigged-to-steal-crypto/

2025-08-20 18:29:01 UTC

- reply

@nprofile…fzvr I guess I should clarify. The actual installation is super quick.
But getting to a point where I understand everything running enough to troubleshoot, monitor, and feel comfortable using it in production took a while.

2025-08-20 15:27:59 UTC

3 things I learned migrating from Docker Swarm to K3s:
- K3s setup can be complex, but management and monitoring is much easier
- Infrastructure as Code (IaC). Use Ansible.
- Configuration and secrets management are much better in K3s.
Bonus
- The larger the community, the easier troubleshooting is.
#kubernetes #k3s #ansible #linux #docker

2025-08-09 16:58:15 UTC

The only device I would trust using @nprofile…3dcq
#grapheneos #privacy #security #defcon #defcon33
https://files.sideofburritos.social/media_attachments/files/114/999/855/376/217/994/original/3a55900ae906ede8.jpg

2025-07-08 17:42:59 UTC

- reply

@nprofile…gjuk I've been using it for ~6 months and it's been fantastic. The mobile app is great as well.

2025-06-18 14:29:34 UTC

- reply

@nprofile…ljzw Thanks for the points, I will consider it in the future 🤓

2025-06-11 13:52:55 UTC

- reply

@nprofile…ljzw Hi there, I have considered it. YouTube offers the widest reach, and helps me reach people new to the privacy space. They aren't looking on PeerTube. It's also easier managing comments in one location.

2025-06-05 15:47:33 UTC

- reply

@nprofile…dc8g You're welcome! Good to know it's useful to mention.

2025-06-05 15:42:45 UTC

I've been using KeePass for ~5 months and it's been great.
#grapheneos #opensource #selfhosting #passwordmanager
https://youtu.be/sRi66okPdFM

2025-06-04 17:40:43 UTC

- reply

@nprofile…py8x @nprofile…c59v It can be easy to unlock your phone and get distracted for a while. This launcher just makes it 'boring' to use, so it's much harder to find yourself wasting time aimlessly.

2025-06-04 16:17:21 UTC

- reply

@nprofile…alsa Agreed! I stuck to the stock one for years, but decided to give this one a try.
I don't allow the launcher to lock the screen, I just use the power button. I personally don't feel comfortable giving an app that level of access. It's likely that the app isn't built to accommodate the 2-factor fingerprint, so it defaults to the passphrase.

2025-06-04 14:19:30 UTC

- reply

@nprofile…c59v You're very welcome! It's a fantastic launcher. I've really been liking it the past few days. It's nice to unlock your phone and not get sucked back into old habits.

2025-05-29 16:34:25 UTC

- reply

@nprofile…rg6r I use both still. I have a few domains on Proton, and some on Tuta. I like Tuta because they seem more in line with privacy and security above all else. Proton, to me, is trying to make privacy mainstream and accessible (which I also like). If you need the services that Proton offers, then stick with them. If you only need mail and calendar, then Tuta could be an option.

2025-05-29 15:06:56 UTC

Making an image of the drive, gotta keep it cool. The A+ course didn't have this in it years ago, but maybe they suggest it now.
#selfhosting #linux #ssd #nvme
https://files.sideofburritos.social/media_attachments/files/114/591/736/509/800/178/original/0b797f518580c987.jpeg

2025-05-26 00:58:47 UTC

- reply

@nprofile…cjvc @nprofile…x3lk In that case, I think you'll like it. Hope it works well for you!

2025-05-25 14:22:47 UTC

- reply

@nprofile…cjvc @nprofile…x3lk You're welcome! It takes a little getting used to, but I love that everything is stored as markdown files in folders. For anything I self-host, I've been trying to move to things that have simple file/infrastructure setups. SQLite over Postgres, simple files over convoluted storage methods etc. Makes it more portable and easier to fix if there's a failure.

2025-05-25 14:15:35 UTC

- reply

@nprofile…cjvc It is! I originally was using YNAB (which I really liked). Then I switched to Buckets when I wanted to get my budget out of the cloud, but it just never worked as well as YNAB. Actual has been fantastic, and fits what I've been looking for since YNAB.

2025-05-17 17:42:59 UTC

- reply

@nprofile…dc8g Hmm, never heard of it before. Looks interesting though.

2025-05-14 14:47:55 UTC

- reply

@nprofile…dc8g https://youtu.be/IAoCfrqxIEg?t=826 you can also swipe down with two fingers to show the full menu.

2025-05-13 15:25:33 UTC

- reply

@nprofile…dc8g I've had good interactions with people on both Bluesky and Mastodon.

2025-05-13 01:24:57 UTC

- reply

@nprofile…x3lk Someone recently mentioned this one to me - https://github.com/jrpie/launcher. You can install it from Accrescent. I haven't tested it out yet, but it's also minimal. Don't know if it supports PWA's.

2025-05-12 19:52:31 UTC

- reply

@nprofile…x3lk I really like it so far. It's very keyboard centric, so it's quick and easy to use on desktop. Sync has been reliable across devices. I like how simple, yet powerful it is. Notes are stored as markdown files, mobile is a PWA, and the interface is very clean.

2025-05-12 17:53:10 UTC

- reply

@nprofile…dc8g nope, sticking to Bluesky and Mastodon (and hopefully Nostr soon once I get that setup).

2025-05-12 16:48:27 UTC

Reminder to go through the apps on your phone & computer.
Don’t use it? Delete it.
Installed it and forgot (that’s me)? Delete it.
Too distracting? Delete it.
If you're curious, I made a page with the apps I use — https://sideofburritos.com/docs/setup-guides/what-i-use/
#android #grapheneos #selfhosting #security #privacy

2025-04-24 13:54:44 UTC

For the past 10+ years I've been using ZFS (FreeNAS/TrueNAS). For some reason, I only recently started using snapshots…THEY ARE AMAZING. So this is your reminder that if you're using ZFS, use snapshots.
#TrueNAS #selfhosting #nas

2025-04-10 21:51:08 UTC

- reply

@nprofile…dc8g If it did, I would surely upgrade my phone more often 😂

2025-04-10 18:43:37 UTC

- reply

@nprofile…5sdj Maybe a couple of times when I'm doing a bunch of things, but not typically.

2025-04-10 15:36:47 UTC

- reply

@nprofile…zyc6 the 'a' versions are typically 'lower quality' when it comes to build materials (glass vs. plastic). Lower quality screens, that aren't as good as the non-a versions. Less premium camera, less memory. All that being said, I like the 'a' versions from a cost perspective (I'm still using my 6a). Funny enough, it seems like the 6a is the only one without wireless charging, the versions after it, all seem to have it (including the 9a).

2025-04-10 14:59:51 UTC

The Pixel 9a was released today. If you're looking to upgrade your GrapheneOS Pixel (or make the switch to GrapheneOS), the 'a' series make for great devices. You can check the link below to see how long GrapheneOS is supported for on your current device — https://grapheneos.org/faq#device-lifetime
Obligatory, but you probably don't need a new phone.
https://files.sideofburritos.social/media_attachments/files/114/314/257/737/605/843/original/035c066423104e05.png

2025-03-11 21:19:02 UTC

- reply

@nprofile…dc8g Hi there, that video on how releases work is up-to-date. As far as the terminal app goes, yes that does function once you're updated to 2025030900. Once the virtualization features are a bit more featured, I'll be doing a video then. For now, I don't have much to share on just using the Terminal app.

2025-02-26 16:01:05 UTC

I was tuning some cache headers and had questions. I checked the usual—Stack Overflow, blogs, AI—but they all disagreed. Then I remembered: the best source is to RTFM! Aka, read the RFCs. RFCs are your friend (and the OG source of truth) — https://datatracker.ietf.org/
#rfc7232 #rfc #CacheRulesEverythingAroundMe #sysadmin #linux #caddy

2025-02-10 22:13:33 UTC

- reply

@nprofile…lpgr Wow, I had no idea this existed. Installed and I will be using it in the future, thanks!

2025-02-10 16:25:53 UTC

New rule: if something takes over 5 minutes to figure out, you should document it. I spent ~10 min figuring out how to SCP a file from a machine on fly.io. It takes extra time now, but your future self will thank you. Much easier than searching your bash history.
#linux #scp #backups #flyio

2025-02-05 16:26:59 UTC

Maybe you don't care about privacy, fine. But it's also possible that there are some industries you would prefer your data (photos/videos) not being used for.
https://techcrunch.com/2025/02/04/google-removes-pledge-to-not-use-ai-for-weapons-from-website/
#privacy #ai #google #security

2025-01-29 16:23:33 UTC

- reply

@nprofile…6l3c I might do one on this in the future. Typically, I don't do videos on features I don't use regularly, but I'll add it to my list.

2025-01-29 15:39:45 UTC

- reply

@nprofile…u36x I still like them and that's the only brand I use for drives. There are 3 others just like that one in my NAS that are doing fine so far. If another one dies, then I might start to wonder. I also use WD Black for some other projects and haven't had any issues with those in the last 3+ years *knock on wood*.

2025-01-28 20:15:30 UTC

- reply

@nprofile…lczr I've been debating on this, might do a video on my NAS

2025-01-28 17:15:08 UTC

- reply

@nprofile…u36x ~1053 days, which is actually kind of disappointing. Luckily it has a 5-year warranty, so maybe it was just a defective one.

2025-01-28 17:04:10 UTC

You served well HDD 🫡. For a while now, I've been thinking that going with RAID-Z2 was a waste of space. But while I'm waiting for the warranty replacement with a degraded pool, I couldn't be happier with my choice.
#storage #truenas #selfhosting
https://files.sideofburritos.social/media_attachments/files/113/907/047/703/591/209/original/017b6fe46a4f7cc3.jpeg

2025-01-16 04:30:37 UTC

- reply

@nprofile…lcuv I agree. Since I was moving between instances, I saw it as an easier option since I was starting with a fresh install and not a restore. I have regular backups of the volumes, but they're inaccessible (due to a mix-up on my part).
If you use the hosted vault version, there's no easy way to get your attachments out of Bitwarden, except manually downloading each one. Hopefully they add the feature.

2025-01-16 04:26:28 UTC

- reply

@nprofile…py8x Not a fun time! With KeePass, as long as you have a copy of the database file you'll have everything.

2025-01-15 15:39:49 UTC

I've been self-hosting Bitwarden for over a year. However, there's a critical feature missing from its 'Export Vault' functionality that could cause you to lose data—whether you're self-hosting or using the SaaS version.
#bitwarden #selfhosting #backup
https://youtu.be/OI_mElYmQ7w

2024-12-13 15:54:10 UTC

I’m not a fan of generic block pages for VPN users. It smells like 'security through obscurity,' which I don’t support—and it likely creates more support tickets for them. One of my banks just redirects you to the login page after you submit your credentials without explanation.
#vpn #privacy #security #sysadmin
https://files.sideofburritos.social/media_attachments/files/113/646/320/602/135/101/original/9594dd317a84382a.png

2024-12-12 03:00:25 UTC

- reply

@nprofile…3kch @nprofile…p0z2 You can enable the setting to 'Require device to be charging'. Then it will only download/install updates when it's charging.

2024-12-12 03:00:12 UTC

- reply

@nprofile…p0z2 Releases are listed here - https://grapheneos.org/releases and you only get the ones that make it to stable (if you're set to stable). Twice a day installing? Maybe once in 3 years, but I can't even remember. You can also enable the setting to 'Require device to be charging'. Then it will only download/install updates when it's charging.

2024-12-11 17:46:04 UTC

- reply

In case my sarcasm wasn't clear, I like it. Especially the groupings.

2024-12-11 17:37:30 UTC

- reply

@nprofile…88lj 😂
It's nice to have groups of settings now. Before it was one long list which made it a bit tougher to find things.

2024-12-11 17:24:32 UTC

Hello Material You themed settings. Courtesy of Android 15 QPR1. Let the 'I hate everything about this' comments commence.
#android #grapheneos #googlepixel #privacy #security
https://files.sideofburritos.social/media_attachments/files/113/635/350/078/095/826/original/b93a36a1dbeb1edc.png

2024-12-10 17:05:10 UTC

- reply

@nprofile…09wa Great point, thank you!

2024-12-10 17:04:44 UTC

- reply

@nprofile…e7y7 @nprofile…d5jm Diese Logik ist dieselbe wie: „Ich habe nichts zu verbergen, warum sollte ich mich um Datenschutz kümmern?“. Es geht darum, dass sie es tun, nicht darum, ob man die Apps braucht.

2024-12-10 16:28:05 UTC

Ever wondered why your phone doesn’t get the latest GrapheneOS update right away? Learn the reasons behind it—and more.
#grapheneos #privacy #security #android #googlepixel
https://youtu.be/u0UDuNlrofU

2024-12-06 04:03:40 UTC

- reply

@nprofile…g63p @nprofile…7t2l @nprofile…ssde very useful, thank you!

2024-12-06 04:02:50 UTC

- reply

@nprofile…dws4 that is very useful, thank you for sharing!

2024-12-05 17:16:53 UTC

Just published a new episode this week! Would love to hear your thoughts on the content or style of the show.
New episode - EP 8: Agent.BTZ — A sophisticated worm that penetrated U.S. military networks through a simple USB drive. This attack exposed critical vulnerabilities in military cybersecurity, leading to the creation of USCYBERCOM.
#podcast #security #malware #cybersecurity
https://share.yellowball.fm/s/GnsLBxux

2024-12-05 03:11:08 UTC

- reply

@nprofile…tvh9 @nprofile…y54t that's amazing, thanks for sharing! Talk about learning the hard way 😂

2024-12-05 03:07:48 UTC

- reply

@nprofile…frca 🤔 this looks very interesting

2024-12-05 03:06:23 UTC

- reply

@nprofile…lnnt 🤔 I shall have to check this out

2024-12-05 03:04:04 UTC

- reply

@nprofile…6xvm I knew of tmux, but I never took the time to look into it. But after 4 different people have mentioned it, I think I will. Thanks!

2024-12-05 03:03:39 UTC

- reply

@nprofile…dmys @nprofile…jrmm I knew of tmux, but I never took the time to look into it. But after 4 people have mentioned it, I think I will. Thanks!

2024-12-05 03:02:22 UTC

- reply

@nprofile…7t2l @nprofile…ssde Exactly what Christian said. It's great especially if you have unreliable internet and your session disconnects often. You don't have to worry that some long-running process/command is going to end abruptly.

2024-12-05 02:59:35 UTC

- reply

@nprofile…5maf Y E S. It's a beautiful thing not having to worry that your session will disconnect, or you have a network blip.

2024-12-05 02:54:45 UTC

- reply

@nprofile…rkdl Interest, thanks! Never tried -x, that's pretty handy.
`-x Attach to a not detached screen. (Multi display mode).`

2024-12-04 21:31:52 UTC

If you use SSH in your daily life, make a habit of using `screen`
Start a new screen session: screen
Start a named session: screen -S session_name
List active sessions: screen -ls
Attach to a session: screen -r session_name
Detach from a session: Ctrl+A, D
#linux #terminal #ubuntu #ssh

2024-11-28 14:54:30 UTC

- reply

@nprofile…v9lf 🤔 what app do you use to mount your network storage? I know Material Files does it (that's what I usually use for quick access). I really like it from a simplicity aspect.

2024-11-28 03:46:16 UTC

- reply

@nprofile…88lj @nprofile…5nnd I'm using the official unified deployment beta. I didn't want to go with a fork for my password manager.

2024-11-28 03:38:22 UTC

- reply

@nprofile…77jn I wasn't away this even existed, thanks for sharing!

2024-11-28 03:33:56 UTC

- reply

@nprofile…u6qf I had no idea that feature existing in keepas2android, I'll have to consider that option. Thanks!

2024-11-28 03:33:10 UTC

- reply

@nprofile…v9lf Hmm, that's not a bad idea either. I didn't think about throwing it on a network share. I have a similar setup for my storage (VPN in to access). Do you mount the share on your phone to access the database, or you only do it from your laptop?

2024-11-28 03:32:16 UTC

- reply

2024-11-28 03:27:50 UTC

- reply

@nprofile…g53v very true, and one of the big downsides to self-hosting. I feel like I need to put an “Oh sh*t” plan together, just in case.

2024-11-27 16:15:30 UTC

- reply

@nprofile…g53v that's the biggest draw for me! It's a pain backing up a docker volume, or having to remember to manually run an export in Bitwarden.

2024-11-27 16:02:14 UTC

- reply

@nprofile…g53v Hmm, I recently set up SeaFile, maybe I'll have to try the syncing with that. Thanks for sharing!

2024-11-27 15:59:21 UTC

- reply

@nprofile…5nnd I've been using the Unified Deployment beta version for over a year, and it's been pretty solid. A few hiccups here and there that required some troubleshooting, but nothing major.
https://bitwarden.com/help/install-and-deploy-unified-beta/

2024-11-27 15:53:44 UTC

- reply

@nprofile…5nnd and that's what I was afraid of 🤣. My self-hosted Bitwarden is working fine, but I like the idea of KeePass (and pain apparently).

2024-11-27 15:28:50 UTC

Has anyone here ever migrated from Bitwarden to KeePass*?
How are you handling syncing between devices, specifically desktop/mobile?
Any regrets?
#privacy #security #bitwarden #keepass #android

2024-11-26 18:16:21 UTC

- reply

@nprofile…xvky Thank you! That was my goal. I was hoping to take away one more reason why someone couldn't try GrapheneOS.

2024-11-26 16:05:01 UTC

I decided to test the GrapheneOS web installer to see just how safe it is.
https://youtu.be/ik0AiO0WtuU
#grapheneos #android #privacy #security

2024-11-25 14:31:07 UTC

- reply

@nprofile…5elm I'm not. I haven't got around to looking into it, signing up, and managing another social account. I plan to someday.

2024-11-21 01:49:35 UTC

- reply

@nprofile…w2dc @nprofile…0p0d Now that I look, I forgot to re-add it to my site when I switched themes. So that verification was cached. Just added it now. You can put it inside the footer.html partial, and it should pass verification then. This blog has a good explanation of it -https://haseebmajid.dev/posts/2022-11-30-til-how-you-can-verify-your-hugo-blog-on-mastodon/

2024-11-18 19:55:52 UTC

Episode 7 is live.
EP 7: Zeus (Money Mules) — The Zeus botnet and its variants stole tens of millions of dollars. But instead of talking about Zeus, I want to talk about what Zeus and every scam rely on: Money Mules.
https://share.yellowball.fm/s/mkiioPAB
#scammers #podcast #malware #botnet

2024-11-18 03:30:28 UTC

- reply

@nprofile…tx2f thanks for the shout-out!

2024-10-30 13:44:58 UTC

- reply

@npub10gq…pfq3 Nice setup!

2024-10-24 01:42:11 UTC

- reply

@npub1y2g…d454 Yes, that part is annoying, having to switch to activate it.
Very true as well. It's nice being able to “end session” on your main user profile and just have the empty owner running. Glad to hear it's working well!

2024-10-24 01:39:15 UTC

- reply

@npub15tn…kxhq Yes! Planning to make one on a few of the new features/changes.

2024-10-22 23:50:05 UTC

- reply

@npub178f…3584 hmm, I saw a couple of minor things, but didn't see any major issues. Smooth sailing for me and the others I know that upgraded.

2024-10-22 19:17:07 UTC

- reply

@npub15wa…w8d8 🥳🥳🥳

2024-10-16 17:37:36 UTC

I've been using @npub1n0m…z5ld for over a decade, and it's been solid. If you're looking for a VPN, I highly recommend them. This week, I covered some settings and features I like about Mullvad VPN.
#privacy #security #vpn
https://youtu.be/yoHPaw1-ti0

2024-09-20 15:24:02 UTC

I try to make my videos as useful as possible because every view takes up time. Five minutes might not seem like much to one person, but collectively, in four days, 676 hours of human life has been spent watching what I created. Create responsibly.
https://files.sideofburritos.social/media_attachments/files/113/170/562/850/380/723/original/c9c7590d8c6bec9d.png

2024-09-17 14:45:23 UTC

Just published a video on how I install apps after 3 years of using GrapheneOS on my Google Pixel.
https://youtu.be/IAoCfrqxIEg
#grapheneos #android #security #privacy #accrescent #obtainium #tor

2024-09-14 14:32:17 UTC

I was configuring cache-control headers today, I knew I would need stale-while-revalidate, but I thought that covered me if my origin was down. Turns out it doesn't. I found there's also stale-if-error, that will serve stale cache if your origin is down. #webdev

2024-08-30 02:32:43 UTC

I obviously have commit(ment) issues.
#programming
https://files.sideofburritos.social/media_attachments/files/113/048/605/034/329/428/original/a2217a967c179252.png

2024-08-17 05:21:02 UTC

- reply

@npub127n…8y2n thank you very much!

2024-08-16 18:59:35 UTC

- reply

@npub1e2s…4krm Yes, I do plan on setting one up. Also, your username 😂