Jimmycrackcrack

Or apple wallet for that matter. I'm pretty new to the concept of a digital wallet, and I'm guessing that if I eschew these google and apple offerings then I'm not really doing much beyond basically a folder called 'passes' but nonetheless a dedicated app that only opens pdfs and images and 'passes' rather than anything else still seems helpful.

Unfortunately so far I've now been offered the opportunity to add things to a wallet twice in 2 days and both times I'm provided only with a link to add to a google wallet or an apple wallet, I don't get .pkpass or .espass files. Those links, whether loaded on a desktop or an android smartphone don't directly link to a file in any way so there seems to be no obvious way to bypass being asked to sign in and use google's wallet. So far I've had to download a PDF, to add in to Pass Android but it only imported 1 of 2 pages so I had to then manually make 2 pdfs out of it at which point, if I'm keeping the pdf locally anyway, I'm not sure it was really easier even if the app is convenient access. I did manage to use Pass Android to make my own barcode to get around the fact that the membership card I was offered only had the google wallet links.

Is there a way to actually make use of these FOSS wallets? Because I'm not sure what they really do if it's so hard to actually get a hold of pass files.

DDG, to its credit, behaves like search engines used to, that is you just get results, not "answers" however for all the ways they annoy, Google has over the years made advances where "answers" actually are what I want.

Specifically, google search integrates very well with google maps so if I type the name of a business, the first thing I see is a formatted, sanitised presentation of the information I actually want from the business' website that is so rarely even on the site or at least not easy to find there: Where they are and when they open. DDG will usually find me the business' website if they have one and that's good and what you'd expect of a search engine but it takes much longer to go to that page, navigate through all the places they might have hidden that information only to discover they don't in fact include it at all anyway.

Is there any way to get that basic information very fast like Google has always provided? I'm talking specifically about browser based searches because this usually comes up when I'm using desktop, and even on my phone I don't want to open or obtain another app just for this.

I miss Dark Reader, UBO is pre-installed, but the only way I can see to install Dark Reader is through firefox add-ons page. I'm hoping that simply going to that page to install the add-on is relatively safe, I wouldn't feel too worried visiting the mozilla website generally, but given I'm installing extensions the browser I wonder if I'm somehow undoing the good that's done switching to LibreWolf.

With recent concerns about Firefox and the mozilla corporation I am starting to wonder if I should take stock of alternatives. A common recommendation seems to be Fennec, but given what F-droid describes as anti-features, I wonder if I'm essentially replacing the problem like for like.

What do they mean? What services? Optional ones? Can it be used without connecting to any mozilla services at all?

I only wonder because, while I know no one could advise per se that people deliberately make bad security decisions, I don't feel as a layman that the nature of the risk is adequately explained.

Specifically, if you use a really old OS or an old now unsupported phone. The explanations for why this is dangerous tend to focus on the mechanism by which it creates a security flaw (lack of patches, known hardware security flaws that can never be patched).

If we use an analogy of physical security whereby the goal is to prevent physical intrusion by thieves or various malicious actors, there's a gradient of risk that's going to depend a bit on things like who and where you are. If you live in a remote cabin in the woods and left your door open, that's bad, but probably less bad than in a high crime area in a dense city. Similarly, if you're a person of note or your house conspicuously demonstrates wealth, security would be more important than if it you're not and it doesn't.

I would think, where human beings are making conscious choices about targets for cybercrime some parralells would exist. If then, you turn on an old device that's long obsolete for the first time in years and connect to the internet with it, while I know you are theoretically at great risk because your doors and windows are essentially wide open, how risky is that exactly? If you just connect, at home on your wifi and don't do anything? Is someone inevitably going to immediately find and connect to this device and exploit it's vulnerabilities? Or does there have to be a degree of bad luck involved?

I've brought up the idea of malicious actors who are human beings making conscious decisions, (hackers), but I was once told the concern is more to do with automated means of finding such devices when they're exposed to the internet. This makes more sense since a theoretical hacker doesn't have to sit around all day just hoping someone in the world will use an outdated device and that they'll somehow see this activity and be able to exploit the situation, but I guess, it seems hard for me to imagine that such bots or automated means of scanning, even if running all day will somehow become aware the minute anyone, anywhere with an insecure device connects to the internet. Surely there has to be some degree coincidental happenstance where a bot is directed to scan for connections to a particular server, like a fake website posing as a bank or something? It just doesn't seem it could be practical otherwise.

If I'm at all accurate in my assumptions, it sounds then like there's a degree to which a random person, not well known enough to be a specific target, not running a website or online presence connecting an insecure device to the internet, while engaging in some risk for sure, isn't immediately going to suffer consequences without some sort of inciting incident. Like falling for a phishing scam, or a person specifically aware of them with mal intent trying to target them in particular. Is that right?