Josh 🌯

Security, Tech, and YouTube.

Built Yellowball (https://yellowball.fm) — dont' just host your podcast. own it.

Podcast: https://intheshellpodcast.com

Public Key

npub1cz86rc4txpvyufnldj3c6r4wmgqwcluyhzt77hmv6eelqtr053hsacgert

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsvprapu24nqkzwyelkegudp6hd5q8v07zt39l0takdvuls93h6gmcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds72qx2w

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1cz86rc4txpvyufnldj3c6r4wmgqwcluyhzt77hmv6eelqtr053hsacgert

Show more details

Last Notes

2026-05-07 01:41:05 GMT

- reply

@nprofile…yfly it's wild that it's 0 or 1, absolutely no middle ground. It also makes me wonder if it's also a method to extort people into paying for Premium. Pay for Premium and you get an extra layer of “protecting your profile”. Don't pay, and any report gets you a permanent ban. It's a very “Google” style way of handling things. Account locked for X reason, automated appeal failed, nothing you can do.

2026-05-05 16:30:03 GMT

- reply

@nprofile…yfly It’s pretty unfortunate it came to that. You’re basically left with either giving up your identity and hoping for access, or losing the account entirely. It doesn’t even seem like account age factors in. It's just a gamble whether you hit the right decision tree in the unattended process or not and get access back.

2026-05-05 15:11:34 GMT

- reply

@nprofile…yfly That's wild. Did someone report your account or something to trigger that? Or are they actually going after accounts that don't have a full name and a picture of a face attached?

2025-11-25 20:56:55 GMT

Recently finished listening to this interview. Fantastic job @nprofile…5ww2 ! Whether you've used GrapheneOS for years or are thinking about trying it, it's a must-watch/listen.
#grapheneOS #android #privacy #security
https://www.youtube.com/watch?v=eUEtc6gblK0

2025-11-14 13:45:01 GMT

Do you have 2 minutes?
Please consider nominating GrapheneOS and Accrescent (submit the form once for each) for the 2025 Proton Lifetime Fundraiser.
Direct link to form: https://form.typeform.com/to/XixQrG8Q
Learn more about the fundraiser: https://proton.me/blog/lifetime-fundraiser-survey-2025
#grapheneOS #opensource #accrescent #android

2025-11-08 22:08:56 GMT

- reply

@nprofile…5ww2 Warhammer 40000, good times with those little plastic figurines

2025-10-08 14:21:34 GMT

- reply

@nprofile…crtx I've been self-hosting this for the past two years for notifications, it's been great.

2025-09-09 16:57:43 GMT

Most people think they need to prepare for a sophisticated software attack, but your biggest risk is your habits. Exploiting people is often the easiest way in.
Anyone can fall for phishing, it’s happened to me.
#privacy #security #phishing #npm
https://krebsonsecurity.com/2025/09/18-popular-code-packages-hacked-rigged-to-steal-crypto/

2025-08-20 18:29:01 GMT

- reply

@nprofile…fzvr I guess I should clarify. The actual installation is super quick.
But getting to a point where I understand everything running enough to troubleshoot, monitor, and feel comfortable using it in production took a while.

2025-08-20 15:27:59 GMT

3 things I learned migrating from Docker Swarm to K3s:
- K3s setup can be complex, but management and monitoring is much easier
- Infrastructure as Code (IaC). Use Ansible.
- Configuration and secrets management are much better in K3s.
Bonus
- The larger the community, the easier troubleshooting is.
#kubernetes #k3s #ansible #linux #docker

2025-08-09 16:58:15 GMT

The only device I would trust using @nprofile…3dcq
#grapheneos #privacy #security #defcon #defcon33
https://files.sideofburritos.social/media_attachments/files/114/999/855/376/217/994/original/3a55900ae906ede8.jpg

2025-07-08 17:42:59 GMT

- reply

@nprofile…gjuk I've been using it for ~6 months and it's been fantastic. The mobile app is great as well.

2025-06-18 14:29:34 GMT

- reply

@nprofile…ljzw Thanks for the points, I will consider it in the future 🤓

2025-06-11 13:52:55 GMT

- reply

@nprofile…ljzw Hi there, I have considered it. YouTube offers the widest reach, and helps me reach people new to the privacy space. They aren't looking on PeerTube. It's also easier managing comments in one location.

2025-06-05 15:47:33 GMT

- reply

@nprofile…dc8g You're welcome! Good to know it's useful to mention.

2025-06-05 15:42:45 GMT

I've been using KeePass for ~5 months and it's been great.
#grapheneos #opensource #selfhosting #passwordmanager
https://youtu.be/sRi66okPdFM

2025-06-04 17:40:43 GMT

- reply

@nprofile…py8x @nprofile…c59v It can be easy to unlock your phone and get distracted for a while. This launcher just makes it 'boring' to use, so it's much harder to find yourself wasting time aimlessly.

2025-06-04 16:17:21 GMT

- reply

@nprofile…alsa Agreed! I stuck to the stock one for years, but decided to give this one a try.
I don't allow the launcher to lock the screen, I just use the power button. I personally don't feel comfortable giving an app that level of access. It's likely that the app isn't built to accommodate the 2-factor fingerprint, so it defaults to the passphrase.

2025-06-04 14:19:30 GMT

- reply

@nprofile…c59v You're very welcome! It's a fantastic launcher. I've really been liking it the past few days. It's nice to unlock your phone and not get sucked back into old habits.

2025-05-29 16:34:25 GMT

- reply

@nprofile…rg6r I use both still. I have a few domains on Proton, and some on Tuta. I like Tuta because they seem more in line with privacy and security above all else. Proton, to me, is trying to make privacy mainstream and accessible (which I also like). If you need the services that Proton offers, then stick with them. If you only need mail and calendar, then Tuta could be an option.

2025-05-29 15:06:56 GMT

Making an image of the drive, gotta keep it cool. The A+ course didn't have this in it years ago, but maybe they suggest it now.
#selfhosting #linux #ssd #nvme
https://files.sideofburritos.social/media_attachments/files/114/591/736/509/800/178/original/0b797f518580c987.jpeg

2025-05-26 00:58:47 GMT

- reply

@nprofile…cjvc @nprofile…x3lk In that case, I think you'll like it. Hope it works well for you!

2025-05-25 14:22:47 GMT

- reply

@nprofile…cjvc @nprofile…x3lk You're welcome! It takes a little getting used to, but I love that everything is stored as markdown files in folders. For anything I self-host, I've been trying to move to things that have simple file/infrastructure setups. SQLite over Postgres, simple files over convoluted storage methods etc. Makes it more portable and easier to fix if there's a failure.

2025-05-25 14:15:35 GMT

- reply

@nprofile…cjvc It is! I originally was using YNAB (which I really liked). Then I switched to Buckets when I wanted to get my budget out of the cloud, but it just never worked as well as YNAB. Actual has been fantastic, and fits what I've been looking for since YNAB.

2025-05-17 17:42:59 GMT

- reply

@nprofile…dc8g Hmm, never heard of it before. Looks interesting though.

2025-05-14 14:47:55 GMT

- reply

@nprofile…dc8g https://youtu.be/IAoCfrqxIEg?t=826 you can also swipe down with two fingers to show the full menu.

2025-05-13 15:25:33 GMT

- reply

@nprofile…dc8g I've had good interactions with people on both Bluesky and Mastodon.

2025-05-13 01:24:57 GMT

- reply

@nprofile…x3lk Someone recently mentioned this one to me - https://github.com/jrpie/launcher. You can install it from Accrescent. I haven't tested it out yet, but it's also minimal. Don't know if it supports PWA's.

2025-05-12 19:52:31 GMT

- reply

@nprofile…x3lk I really like it so far. It's very keyboard centric, so it's quick and easy to use on desktop. Sync has been reliable across devices. I like how simple, yet powerful it is. Notes are stored as markdown files, mobile is a PWA, and the interface is very clean.

2025-05-12 17:53:10 GMT

- reply

@nprofile…dc8g nope, sticking to Bluesky and Mastodon (and hopefully Nostr soon once I get that setup).

2025-05-12 16:48:27 GMT

Reminder to go through the apps on your phone & computer.
Don’t use it? Delete it.
Installed it and forgot (that’s me)? Delete it.
Too distracting? Delete it.
If you're curious, I made a page with the apps I use — https://sideofburritos.com/docs/setup-guides/what-i-use/
#android #grapheneos #selfhosting #security #privacy

2025-04-24 13:54:44 GMT

For the past 10+ years I've been using ZFS (FreeNAS/TrueNAS). For some reason, I only recently started using snapshots…THEY ARE AMAZING. So this is your reminder that if you're using ZFS, use snapshots.
#TrueNAS #selfhosting #nas

2025-04-10 21:51:08 GMT

- reply

@nprofile…dc8g If it did, I would surely upgrade my phone more often 😂

2025-04-10 18:43:37 GMT

- reply

@nprofile…5sdj Maybe a couple of times when I'm doing a bunch of things, but not typically.

2025-04-10 15:36:47 GMT

- reply

@nprofile…zyc6 the 'a' versions are typically 'lower quality' when it comes to build materials (glass vs. plastic). Lower quality screens, that aren't as good as the non-a versions. Less premium camera, less memory. All that being said, I like the 'a' versions from a cost perspective (I'm still using my 6a). Funny enough, it seems like the 6a is the only one without wireless charging, the versions after it, all seem to have it (including the 9a).

2025-04-10 14:59:51 GMT

The Pixel 9a was released today. If you're looking to upgrade your GrapheneOS Pixel (or make the switch to GrapheneOS), the 'a' series make for great devices. You can check the link below to see how long GrapheneOS is supported for on your current device — https://grapheneos.org/faq#device-lifetime
Obligatory, but you probably don't need a new phone.
https://files.sideofburritos.social/media_attachments/files/114/314/257/737/605/843/original/035c066423104e05.png

2025-03-11 21:19:02 GMT

- reply

@nprofile…dc8g Hi there, that video on how releases work is up-to-date. As far as the terminal app goes, yes that does function once you're updated to 2025030900. Once the virtualization features are a bit more featured, I'll be doing a video then. For now, I don't have much to share on just using the Terminal app.

2025-02-26 16:01:05 GMT

I was tuning some cache headers and had questions. I checked the usual—Stack Overflow, blogs, AI—but they all disagreed. Then I remembered: the best source is to RTFM! Aka, read the RFCs. RFCs are your friend (and the OG source of truth) — https://datatracker.ietf.org/
#rfc7232 #rfc #CacheRulesEverythingAroundMe #sysadmin #linux #caddy

2025-02-10 22:13:33 GMT

- reply

@nprofile…lpgr Wow, I had no idea this existed. Installed and I will be using it in the future, thanks!

2025-02-10 16:25:53 GMT

New rule: if something takes over 5 minutes to figure out, you should document it. I spent ~10 min figuring out how to SCP a file from a machine on fly.io. It takes extra time now, but your future self will thank you. Much easier than searching your bash history.
#linux #scp #backups #flyio

2025-01-29 16:23:33 GMT

- reply

@nprofile…6l3c I might do one on this in the future. Typically, I don't do videos on features I don't use regularly, but I'll add it to my list.

2025-01-28 17:15:08 GMT

- reply

@nprofile…u36x ~1053 days, which is actually kind of disappointing. Luckily it has a 5-year warranty, so maybe it was just a defective one.

2025-01-16 04:30:37 GMT

- reply

@nprofile…lcuv I agree. Since I was moving between instances, I saw it as an easier option since I was starting with a fresh install and not a restore. I have regular backups of the volumes, but they're inaccessible (due to a mix-up on my part).
If you use the hosted vault version, there's no easy way to get your attachments out of Bitwarden, except manually downloading each one. Hopefully they add the feature.

2025-01-16 04:26:28 GMT

- reply

@nprofile…py8x Not a fun time! With KeePass, as long as you have a copy of the database file you'll have everything.

2025-01-15 15:39:49 GMT

I've been self-hosting Bitwarden for over a year. However, there's a critical feature missing from its 'Export Vault' functionality that could cause you to lose data—whether you're self-hosting or using the SaaS version.
#bitwarden #selfhosting #backup
https://youtu.be/OI_mElYmQ7w

2024-12-13 15:54:10 GMT

I’m not a fan of generic block pages for VPN users. It smells like 'security through obscurity,' which I don’t support—and it likely creates more support tickets for them. One of my banks just redirects you to the login page after you submit your credentials without explanation.
#vpn #privacy #security #sysadmin
https://files.sideofburritos.social/media_attachments/files/113/646/320/602/135/101/original/9594dd317a84382a.png

2024-12-12 03:00:12 GMT

- reply

@nprofile…p0z2 Releases are listed here - https://grapheneos.org/releases and you only get the ones that make it to stable (if you're set to stable). Twice a day installing? Maybe once in 3 years, but I can't even remember. You can also enable the setting to 'Require device to be charging'. Then it will only download/install updates when it's charging.

2024-12-11 17:46:04 GMT

- reply

In case my sarcasm wasn't clear, I like it. Especially the groupings.

2024-12-11 17:37:30 GMT

- reply

@nprofile…88lj 😂
It's nice to have groups of settings now. Before it was one long list which made it a bit tougher to find things.

2024-12-11 17:24:32 GMT

Hello Material You themed settings. Courtesy of Android 15 QPR1. Let the 'I hate everything about this' comments commence.
#android #grapheneos #googlepixel #privacy #security
https://files.sideofburritos.social/media_attachments/files/113/635/350/078/095/826/original/b93a36a1dbeb1edc.png

2024-12-10 17:05:10 GMT

- reply

@nprofile…09wa Great point, thank you!

2024-12-10 16:28:05 GMT

Ever wondered why your phone doesn’t get the latest GrapheneOS update right away? Learn the reasons behind it—and more.
#grapheneos #privacy #security #android #googlepixel
https://youtu.be/u0UDuNlrofU

2024-12-06 04:03:40 GMT

- reply

@nprofile…g63p @nprofile…7t2l @nprofile…ssde very useful, thank you!

2024-12-06 04:02:50 GMT

- reply

@nprofile…dws4 that is very useful, thank you for sharing!

2024-12-05 17:16:53 GMT

Just published a new episode this week! Would love to hear your thoughts on the content or style of the show.
New episode - EP 8: Agent.BTZ — A sophisticated worm that penetrated U.S. military networks through a simple USB drive. This attack exposed critical vulnerabilities in military cybersecurity, leading to the creation of USCYBERCOM.
#podcast #security #malware #cybersecurity
https://share.yellowball.fm/s/GnsLBxux

2024-12-05 03:07:48 GMT

- reply

@nprofile…frca 🤔 this looks very interesting

2024-12-05 03:06:23 GMT

- reply

@nprofile…lnnt 🤔 I shall have to check this out

2024-12-05 03:04:04 GMT

- reply

@nprofile…6xvm I knew of tmux, but I never took the time to look into it. But after 4 different people have mentioned it, I think I will. Thanks!

2024-12-05 03:03:39 GMT

- reply

@nprofile…dmys @nprofile…jrmm I knew of tmux, but I never took the time to look into it. But after 4 people have mentioned it, I think I will. Thanks!

2024-12-05 03:02:22 GMT

- reply

@nprofile…7t2l @nprofile…ssde Exactly what Christian said. It's great especially if you have unreliable internet and your session disconnects often. You don't have to worry that some long-running process/command is going to end abruptly.

2024-12-05 02:59:35 GMT

- reply

@nprofile…5maf Y E S. It's a beautiful thing not having to worry that your session will disconnect, or you have a network blip.

2024-12-05 02:54:45 GMT

- reply

@nprofile…rkdl Interest, thanks! Never tried -x, that's pretty handy.
`-x Attach to a not detached screen. (Multi display mode).`

2024-12-04 21:31:52 GMT

If you use SSH in your daily life, make a habit of using `screen`
Start a new screen session: screen
Start a named session: screen -S session_name
List active sessions: screen -ls
Attach to a session: screen -r session_name
Detach from a session: Ctrl+A, D
#linux #terminal #ubuntu #ssh

2024-11-28 03:46:16 GMT

- reply

@nprofile…88lj @nprofile…5nnd I'm using the official unified deployment beta. I didn't want to go with a fork for my password manager.

2024-11-28 03:38:22 GMT

- reply

@nprofile…77jn I wasn't away this even existed, thanks for sharing!

2024-11-28 03:33:56 GMT

- reply

@nprofile…u6qf I had no idea that feature existing in keepas2android, I'll have to consider that option. Thanks!

2024-11-28 03:32:16 GMT

- reply

@nprofile…v9lf Hmm, that's not a bad idea either. I didn't think about throwing it on a network share. I have a similar setup for my storage (VPN in to access). Do you mount the share on your phone to access the database, or you only do it from your laptop?

2024-11-28 03:27:50 GMT

- reply

@nprofile…g53v very true, and one of the big downsides to self-hosting. I feel like I need to put an “Oh sh*t” plan together, just in case.

2024-11-27 16:15:30 GMT

- reply

@nprofile…g53v that's the biggest draw for me! It's a pain backing up a docker volume, or having to remember to manually run an export in Bitwarden.

2024-11-27 16:02:14 GMT

- reply

@nprofile…g53v Hmm, I recently set up SeaFile, maybe I'll have to try the syncing with that. Thanks for sharing!

2024-11-27 15:59:21 GMT

- reply

@nprofile…5nnd I've been using the Unified Deployment beta version for over a year, and it's been pretty solid. A few hiccups here and there that required some troubleshooting, but nothing major.
https://bitwarden.com/help/install-and-deploy-unified-beta/

2024-11-27 15:53:44 GMT

- reply

@nprofile…5nnd and that's what I was afraid of 🤣. My self-hosted Bitwarden is working fine, but I like the idea of KeePass (and pain apparently).

2024-11-27 15:28:50 GMT

Has anyone here ever migrated from Bitwarden to KeePass*?
How are you handling syncing between devices, specifically desktop/mobile?
Any regrets?
#privacy #security #bitwarden #keepass #android

2024-11-26 18:16:21 GMT

- reply

@nprofile…xvky Thank you! That was my goal. I was hoping to take away one more reason why someone couldn't try GrapheneOS.

2024-11-26 16:05:01 GMT

I decided to test the GrapheneOS web installer to see just how safe it is.
https://youtu.be/ik0AiO0WtuU
#grapheneos #android #privacy #security

2024-11-21 01:49:35 GMT

- reply

@nprofile…w2dc @nprofile…0p0d Now that I look, I forgot to re-add it to my site when I switched themes. So that verification was cached. Just added it now. You can put it inside the footer.html partial, and it should pass verification then. This blog has a good explanation of it -https://haseebmajid.dev/posts/2022-11-30-til-how-you-can-verify-your-hugo-blog-on-mastodon/

2024-11-18 03:30:28 GMT

- reply

@nprofile…tx2f thanks for the shout-out!

2024-10-30 13:44:58 GMT

- reply

@npub10gq…pfq3 Nice setup!

2024-10-24 01:39:15 GMT

- reply

@npub15tn…kxhq Yes! Planning to make one on a few of the new features/changes.

2024-10-22 23:55:20 GMT

- reply

@npub1y2g…d454 Nice! How do you like the setup? I'm guessing my overall setup will remain the same, but I might figure out a use for it. The downside is it's only available in the Owner profile.

2024-10-22 23:52:04 GMT

- reply

@npub15tc…j00a I have it on my list for a future video. Probably in a month or so once some more experimenting and testing is done with it.

2024-10-22 23:50:05 GMT

- reply

@npub178f…3584 hmm, I saw a couple of minor things, but didn't see any major issues. Smooth sailing for me and the others I know that upgraded.

2024-10-22 23:46:04 GMT

- reply

@npub1tfw…kym9 that was the first change I noticed 😂

2024-10-22 19:17:07 GMT

- reply

@npub15wa…w8d8 🥳🥳🥳

2024-10-22 17:41:19 GMT

Android 15 has arrived.
#android #privacy #security #grapheneos
https://files.sideofburritos.social/media_attachments/files/113/352/301/800/126/568/original/86ddd7965db89453.png

2024-10-16 17:37:36 GMT

I've been using @npub1n0m…z5ld for over a decade, and it's been solid. If you're looking for a VPN, I highly recommend them. This week, I covered some settings and features I like about Mullvad VPN.
#privacy #security #vpn
https://youtu.be/yoHPaw1-ti0

2024-09-24 02:50:15 GMT

- reply

@npub178f…3584 That's interesting it was that close to what you use on desktop. It's not the easiest setup to move to if you have something existing. I waited until I got a new device to do it, it can't be pretty tedious. I would recommend taking notes as you go through the setup for future reference.

2024-09-20 15:24:02 GMT

I try to make my videos as useful as possible because every view takes up time. Five minutes might not seem like much to one person, but collectively, in four days, 676 hours of human life has been spent watching what I created. Create responsibly.
https://files.sideofburritos.social/media_attachments/files/113/170/562/850/380/723/original/c9c7590d8c6bec9d.png

2024-09-17 14:45:23 GMT

Just published a video on how I install apps after 3 years of using GrapheneOS on my Google Pixel.
https://youtu.be/IAoCfrqxIEg
#grapheneos #android #security #privacy #accrescent #obtainium #tor

2024-09-14 16:16:42 GMT

- reply

@npub1stl…wdtg Hello, hmm, I'll look into this. It looks pretty interesting.

2024-09-14 14:32:17 GMT

I was configuring cache-control headers today, I knew I would need stale-while-revalidate, but I thought that covered me if my origin was down. Turns out it doesn't. I found there's also stale-if-error, that will serve stale cache if your origin is down. #webdev

2024-08-30 02:32:43 GMT

I obviously have commit(ment) issues.
#programming
https://files.sideofburritos.social/media_attachments/files/113/048/605/034/329/428/original/a2217a967c179252.png

2024-08-20 16:33:56 GMT

- reply

@npub1l6k…df4q I've reviewed quite a few user reported phishing emails, and I haven't seen that. I don't know why, that's super creative 😂

2024-08-17 05:21:02 GMT

- reply

@npub127n…8y2n thank you very much!

2024-08-16 18:59:35 GMT

- reply

@npub1e2s…4krm Yes, I do plan on setting one up. Also, your username 😂

2024-08-16 18:58:41 GMT

- reply

@npub1e2s…4krm Thanks! Yea, I'm excited to get back and start covering some new things that have come out.

2024-08-16 17:17:13 GMT

- reply

@npub173f…8z2p That's a fair point, I listed my rationale under the FAQS
https://yellowball.fm/#faq

2024-08-16 16:38:05 GMT

🎉 I've spent the past year building Yellowball, a privacy-first podcast hosting platform because none of the existing options fit what I was looking for. You can check it out at https://yellowball.fm. I'll be back with new YouTube videos and launching my podcast, 'In the Shell,' soon™! You can find more details in my newsletter: https://newsletter.sideofburritos.com/archive/865bdd1b-e740-489b-88ca-586f271065f8

2024-07-04 15:17:25 GMT

- reply

I've been working on a large side project, which should be done soon™. Like most things, it took way longer than anticipated.
I'll also be at Def Con in Las Vegas next month. If you're attending, feel free to say hi.

2024-07-04 15:17:17 GMT

I saw a post yesterday on the GrapheneOS discussion forum titled "Whatever happened to Side Of Burritos?". Since I only lurk there, I thought I would provide a public update.
If you have low expectations, but high standards, I've been sending out my email newsletter monthly for the past two years (https://sideofburritos.com/newsletter). As for videos, I plan to resume those in the next couple of months.