I believe they are claiming that with the new discoveries it’s pointless to keep trying. Whether that’s shared with other devs or not probably won’t affect their decision:

These three bugs basically ruin the whole point of arkenfox: // sec bugs: offscreencanvas / preconnect / cookie_exceptions

I’m not that familiar with them, but sounds like there’s no way to keep a sane balance between usability and privacy, and clearly upstream doesn’t help a bit, it’s like following the Borg advice “resistance is futile”. Battling the privacy fight is not an easy fight I guess. The only hope for those who are non experts as the arkenfox guys is that phoenix keeps up the good work. Overall I pretty much prefer arkenfox over phoenix, but fortunately Librewolf is neither arkenfox nor phoenix, even though they are discussing if they are better based of phoenix the are different projects making different decisions…

I wish frozen fennec didn’t die on the attempt, :( The current option is ironfox on LOS/AOSP based/…, and I don’t agree with several of their decisions. The amount of filter lists is so stubbornly huge, that there’s no time to deselect and/or remove them on low end phones for example, and the whole thing just slow things down. And I know it’s picky but I really like decisions like taking bad things off from build time if possible, even if they are opt-in… Any ways, to me it’s sad to see them closing the project, but I’m also hopeful some others as expert as they were on several of the topics they dealt with will fill up some of the the hole when they stop…

Unified push is great news in general for AOSP based ROMs phones for battery life, it’s an open notification standard and system. There are several providers or distributors. If you’re already using nextCloud with the unified push support on the server (murena has enabled this already because they want apps to consume less energy because of having to run in the background if not wanting to use the proprietary google services notifications) then you can use the unified push app already available on f-droid. If using conversations (xmpp client) it already supports working as an unified push provider and perhaps other xmmp clients already added such support and conversations is also available on f-droid. Or you can use the ntfy provided app also available on f-droid. There’s an apps list available to find out if particular apps already support unified push, and as you can see fennec is one of them. BTW, if one doesn’t want or need push notifications on fennec this can be disabled on its notifications settings, When installing an unified push notification provider, the apps supporting it will attempt to subscribe with a particular topic name on the provider, and usually the providers come with default settings to automatically accept subscriptions, and one can just check if the subscription is there already or not, one might need to stop and re-open the app for it to attempt to subscribe. Make sure the provider is running in the background without restrictions, I can tell conversations and ntfy are pretty low battery consumers so no worries about no restrictions on battery consumption.

Does that help? Otherwise I’m kind of lost with the questiosn.

Yyup, notmuch doesn’t sync folders AFAIK since it is an indexer (a fast one), one needs mbsync and/or imapnotify to keep mail up to date (the combination might be mbsync to sync on boot, and then imapnotify to keep things up to date based on such notifications) to keep mail up to date. Another options is khard which is menat for cardav contacts just as khal is meant for caldav calendar… mutt-ics sounds great for ics calendar invitations, which I sometimes get from non family and non organization parties, otherwise I receive caldav ones, which I’d like to integrate with the caldav calendar so it syncs, perhaps mutt-ics handles that as well, first time reading about it, :)

Many thanks for answering !

how does khal integrate with neomutt for received invitations? khard works pretty well AFAIK with neomutt. Also, have you tried alot (notmuch + afew + alot + …)? It sounds alot integrates much better than neomutt with notmuch, which in turn integrates much more better than mutt…

Please define suckless. See on under suckless.org one can find rocking software, meaning suckless alternatives not developed/maintained by them, and on the editors section I see:

• acme - Rob Pike’s framing text editor for Plan 9. Included in plan9port.
• ed - ED IS THE STANDARD TEXT EDITOR!
• ired - A minimalist hexadecimal editor and bindiffer for p9, w32 and *nix.
• mg - A portable version of mg.
• mle - A small, flexible console text editor.
• nano - A pico clone - this is small simple code and easy to use.
• neatvi - A minimal vi implementation supporting bidirectional UTF-8
• nextvi - A continuation of neatvi development with more features.
• nvi - A small, multiple file vi-alike.
• micro - A terminal text editor, written in go with common key bindings like ctrl-c to copy and ctrl-v to paste.
• sam - An editor by Rob Pike with inspiration from ed.
• sim - The sim text editor. Based on vim and sam.
• traditional vi - A fixed version of the original vi.
• vim (With the GUI, use :set go+=c to kill popup dialogs). It can be compiled to be as minimal as possible (see vim-tiny in Debian repos).
• vis - A modern, legacy free, simple yet efficient vim-like editor.
• wily - An acme clone for POSIX.

That said, also note there’s an emacs-nox package available in most distros, which only includes the editor able to run on a terminal emulator, if emacs OS is too much. And can you share URLs justifying why vim is a big security hole? BTW I don’t see neovim as part of the suckless.org/rocks software. What is suckless depends a lot about what one might consider it to be, even though there might be some common characteristics that can be recognized as not good such as bloated, too big code base and so on.

Not only those, it was google removing support for extractors, knowing that would affect frontends, particularly yt-dlp, and of course they had to react. BTW, libretube, what I prefer from f-droid was also affected. See this yt-dlp issue which was already fixed with a commit and the immediate release they provided. I grabbed the yt-dlp fix on artix Today and the libretube fix on f-droid Today as well.

I believe all frontends got affected (attacked?) in pretty similar ways…

• terminal: profanity (really cool, it became what I regularly use, no audio/video calls though in which case a gui like dino can be used, syncing between the two)
• gui: dino (there’s a fork called dinox)
• android: conversations (from f-droid)

Cool, it never came back to arch/artix, however I see it on aur. I actually don’t use gui for mpd, I use ncmpcpp, but good to know it has quite good gui frontend. ario is good as well, particularly if not much into Qt apps.

https://grapheneos.org/usage#sandboxed-google-play

I don’t know if your complain about serxng is something you’ll eventually get with 4get. Whatever works at any time. See google and other search engines had been playing awful to searxng. At some point google will notice 4get instances and will take on them as well. On searx[ng] on the side one can see what has been suspended, denied, timed out, etc.

Time wise, 4get allows for only 1 engine at a time. searx[ng] allows for several no wonders it can take time. BTW the user can choose any of the engines per search they want. That of course can take more time. The point is that right now all search engines have taken it on searx[ng], and options are welcome. Self hosting is working better maybe because the search engines don’t feel threaten by it.

The good thing is to have alternatives.

BTW, I thought google found the way to finally get rid of invidio, but it seems there are a couple of instances still working. Good !

DeGoogle doesn’t make sense if keeping google services and google play (this provides services any ways). For example grapheneOS as best as it is for security is not a DeGoogle experience. calyxOS would have been an option but it’s currently out of maintenance. LineageOS with f-droid basic, apkupdater (apkpure mirror) if needing proprietary stuff and maybe aurora store if apkpure doesn’t find something or you distrust it (it’ll be connecting to google play), and for them, if needing google push notifications (most of them do) and unavoidable services then microG.

Some FLOSS apps requiring push notifications allow to use unified push btw, like jami and davdroid (davx5), molly (signal client, though I no longer use signal), so no need for google push notifications, and for email imap has supported it’s own push notifications mechanism for way long (fairemail, thunderbird, etc). It’s on proprietary apps which mostly that’s not the case… Installing from official f-droid I believe gets rid of proprietary google stuff, including dependencies on google services library…

cantata is no longer maintained AFAIK, but as mentioned there are other clients such as ario, which on arch/artix it is build on gtk3, not gtk2

Flatpak’s use of bubblewrap (it comes from flatpak but then it became its own project) is not a good example, see:

https://madaidans-insecurities.github.io/linux.html#flatpak

But in general this is true. I talked out of memory, but firejail given its suid way is considered insecure (possible privilege escalation), that’s right

apparmor comes with several profiles, and if in your distro it doesn’t include one for librewolf, you can use the firefox one. And if there’s no available one and you would be interested in combine it with firejail then most probably firejail will come with with a profile for firefox or librewolf and usually with support for apparmor. Regardless of the distros, the arch wiki can guide you with apparmor and firejail. I recommend becoming familiar with both. Another option if there’s no profile on your distro is to look into another distro’s profile. ubuntu used include some software with apparmor out of the box so perhaps it’s a good source of profiles…

Also in this same community there’s an old post precisely about what you’re asking for, though it’s a bit dated, you may want to scroll for some time until getting to it.

Edit:

Firejail is insecure, my bad. Better to use bubblewrap (I didn’t know about bubblejail). The thing is that firejail offers profiles combined with apparmor which might have solved the lack of apparmor profiles. For my personal purposes I hope to take a look at bubblejail to have an easier way to do sandboxing. You can see the arch wiki bubblewrap examples to notice how bubblewrap doesn’t help with apparmor profiles though. According to the arch wiki for bubblejail or the GH page for bubblejail profiles are used and can easily be created, however I have no idea of the interaction with apparmor, and if as with firejail such profiles include apparmor stuff, but intuitively I guess it doesn’t.

Going back to apparmor, which is MAC enforcement, if no profiles available on your distro for librewolf neither firefox, then looking at other distros is OK, and also one can create profiles as well as one can also modify existent or available ones. See for example the arch wiki for apparmor.

Hmm, youtube-dl? I believe it’s no longer the one to use, it’s yt-dlp, and mpv has support yt-dlp for quite some time, but it could be any player as long as it supports yt-dlp. What I’ve noticed is that nothing gets as fast to fix these YT issues than yt-dlp. It’s working fine for me on Artix for quite some time. And unless wanting ton use a browser, that’s what freetube has been documenting every time receiving related bugs. See for example:

https://github.com/FreeTubeApp/FreeTube/issues/8083#issuecomment-3326565693

Papers or Zathura (+ required plugin)

Just so you know, if you like freetube, you can configure the external player to mpv, which underneath uses yt-dlp when streaming, and use the button to load the external player. Of course one can also launch smplayer, which underneath is using mpv, which underneath…

But the thing is content creators don’t move out of YT cause they’re there to monetize in the first place. So this thing seems never ending no matter alternatives like peertube exist.

Besides outertune there’s harmonymusic as well

None protect your IP if not using a non self hosted frontend like invidio or piped, cause if self hosted then you’re providing your IP any ways. So now a days actually private is kind of hard. But these applications for sure help a lot.

2025.09.26 can still do it without deno. Besides, when the change happens, node and bun (never heard about bun before) will be supported as well, not just deno, but they will require extra arguments passed to yt-dlp. If using yt-dlp directly, and already having node or bun installed, no need for deno then.

apkupdater installing from apkpure?