I can only see three ways to get FOSS firmware on your printer:

1. If someone reverse engineers the firmware to create a FOSS version.
2. If the Software Freedom Conservancy, who recently raised funds to tackle Bambu Labs’s license violations finds a violation in BL firmware and succeeds in legally compelling BL to release the corresponding source code.
3. If you sell your BL printer and replace it with one that already has FOSS firmware.

I read them before writing my OP. I’m still not sure what you’re getting at.

I would be grateful if you could say what you mean, instead of initiating an oblique guessing game.

Yes. Here are some common self-hosting scenarios:

• Home server containing family files: scans, photos, device backups, …
• Office server containing business files: sensitive documents, device backups, …
• Web or email server containing websites, Fediverse instances, emails, etc

In all those cases, full disk encryption (FDE) is a sensible precaution to protect the data in case the server is physically stolen.

Linux is probably the most common OS kernel for self-hosting. On Linux, LUKS (Linux Unified Key Setup) is probably the best FDE system. It’s mature and reliable. But anyone self-hosting a Linux server with LUKS FDE is faced with the question of where to store the keys.

Hardware security tokens (HSTs) are widely considered a safer place for keys than SSDs, HDDs, or USB storage. They follow the smartcard principle: a private key can be written to an HST but not read from it (security vulnerabilities excepted). Instead, they implement cryptographic algorithms to prove possession of the private key. So, anyone self-hosting a Linux server with LUKS FDE should strongly consider storing their private key(s) on an HST.

However, there is more than one way to do that. Hence the question in my OP.

I agree about needing a backup hardware token (or paper recovery key) to restore access if the primary hardware token is lost or broken.

Also agree about requiring a passphrase.

Any specific recommendations on protocol or setup steps?

Which of the 4 recipes I posted are you referring to as “this”?

Thanks, please post relevant steps if you have specific recommendations.

Many thanks for this clarification - and for hosting The Brain Bin!

‘A “blatantly incompetent chud” and a “Kremlin asset” who plotted to “overthrow the government” on January 6, 2021.’

I’m sympathetic to many parts of the despair you shared. As for naming it as a whole:

Gnosticism? (Belief in a malevolent deity…)

Nihilism?

Fatalism?

Misanthropy?

As you said, though, “there is room for human connection even in a gulag”. Positives can be found in life. Look for the good bits. Play to your strengths. Help others when possible. Maybe look for charities or state agencies that can help you with the job-hunt? Stay healthy.

Great to see Europe leading the way here. If other jurisdictions pass similarly responsible legislation, then those jurisdictions will gain similar benefits.

Press coverage: https://news.sky.com/story/industrial-poultry-farming-leads-to-100-fold-increase-in-food-poisoning-bacteria-study-finds-13567573

“MAHA MAHAHAHA!”

For plain text & Markdown, you don’t even need Collabora. Since 2019, NextCloud has a built-in collaborative text editor.

it’s the only way!

TBF I was trying to follow the docs, aber ich spreche kein Deutsch.

I overlooked this line from the docs:

Benötigt werden cmake, git, libgd und libusb - bei manchen Distributionen (z.B. Ubuntu) sind die Header-Files in separaten Paketen “libusb-dev” die ggf. noch nachinstalliert werden müssen.

I should have done sudo apt install libgd-dev libusb-1.0-0-dev before attempting compilation.

@[email protected], what’s up with this? It doesn’t seem in any way justifiable.

@[email protected]

It would be trivially detected by widely distributed standard forensic software including the non-Premium variant of Cellebrite able to run on a laptop.

By “duress profile”, I mean that if user has enabled a “duress profile” feature in Settings, then entering the duress PIN would:

1. Erase (the encryption key for) all profiles and storage outside the duress profile; then
2. Unlock the duress profile.

So, how would forensic software detect that the unlocked profile is a duress profile?

@[email protected] everyone seems to be clamouring for the same thing: add “duress profile” to the roadmap. Keep up the good work.

On 18 Jan 2025, before Proton and Mullvad CEOs came out in support of the far right, Freedom of the Press Foundation (FPF) recommended:

• Mullvad (Sweden)
• Mozilla VPN* (USA/Sweden)
• Proton VPN (Switzerland)
• Tunnelbear (USA/Canada; owned by McAfee in USA)
• IVPN (Gibraltar)
• Windscribe (Canada)

I’ve crossed out the first three, since Mozilla VPN uses Mullvad, and Mullvad’s and Proton’s CEOs support extremists.

Nym is not on the list, so presumably didn’t meet FPF’s requirements.

if you follow a user their future posts will be sent to your server. We were talking about implementing a backfill option, but there is no eta yet

Thank you for explaining. That must indeed be the reason I couldn’t see those toots on Mbin.

so no guarantee it will be implemented at all. But since it is an annoying problem, maybe it will

Backfill would be great! Server capacity concerns notwithstanding.

In the meantime, clearer wording for the info banner would be an easy, helpful UX improvement:

• Before subscribing: “This Fediverse profile is hosted on a different server than yours. If you, or another user on your server, were to subscribe to this profile, the profile’s subsequent posts would be displayed here. The profile’s older posts can be viewed on their server”

• After subscribing: “This Fediverse profile is hosted on a different server than yours. Now that you have subscribed, the profile’s future posts will be displayed here. The profile’s older posts can be viewed on their server”