It's apparently rootable, although I haven't done that personally. It's Google Play certified so anything from the Play store works, and side loading Android apps works too. I use it with the open source KOReader app and in tandem with Calibre Web Automated. I did a writeup[0] with some details if you're interested.

[0] https://blog.eldrid.ge/2025/03/12/self-hosted-ebook-manageme...

Comments URL: https://news.ycombinator.com/item?id=46209612

Points: 3

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=45051869

Points: 2

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=44447419

Points: 5

# Comments: 0

It ignores periods so you could also use your.address@gmail.com or y.ouraddress@gmail.com or whatever.

Some sides block plus addressing but that's what I use a lot of the time.

Comments URL: https://news.ycombinator.com/item?id=41631253

Points: 2

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=41613337

Points: 6

# Comments: 0

This meant the specialists were on a ladder with often lower pay than a standard SWE, and I couldn't shift the bureaucracy enough to change that. People left for all sorts of reasons but a big part was being able to get 2x-4x the total compensation at other companies.

Comments URL: https://news.ycombinator.com/item?id=41267490

Points: 2

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=40978834

Points: 1

# Comments: 0

But I use Portainer and store my files on Github so Portainer can auto-update a deployment if I submit a code change, so kind of rudimentary CI/CD which could be fleshed out more with some GitHub Actions probably.

I use iSCSI mounted storage from my NAS on the host and k8s volumes storing configs there. Actual app data is on the NAS accessed via NFS from the relevant apps.

So a new deployment is usually test locally on my laptop, once it's good commit the code to github and either let the deployment auto update or go to Portainer and do it manually if it's a new deployment. Ingress traffic is done via Cloudflare Tunnels deployed in k8s.

I keep most apps in a single namespace called prod unless they need more than 1-2 pods. If I was doing this again I'd use a namespace per app, I do use a dedicated namespace for anything with a Helm deployment or needs a lot of pods (e.g. Immich)

However with DNS increasingly being encrypted with DoH and DoT, the TLS handshake was one of the only places you could eavesdrop on the destination hostname, until it was removed in 1.3.

Of course network monitoring will still give you the destination IP, but those are increasingly overwhelmingly destined for a major cloud or CDN provider which doesn't provide much context about the actual destination.

If you'll forgive the shameless self-promo, I covered a decent amount of this in my Blackhat talk about encrypted DNS a few years back: https://www.youtube.com/watch?v=XCnE2o2pfxs

0: https://blog.cloudflare.com/encrypted-client-hello/

Comments URL: https://news.ycombinator.com/item?id=39767616

Points: 3

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=39643376

Points: 2

# Comments: 0

https://www.theverge.com/2023/12/6/23991183/google-drive-los...

Comments URL: https://news.ycombinator.com/item?id=38927532

Points: 3

# Comments: 0

Although I always thought it would be a nice feature for security conscious folks to be able to ennable. Or go ahead and use it on more sensitive sites only, e.g. banks.

Passkeys in Firefox also work for me on mobile but not with Bitwarden, Bitwarden's blog says passkey sync on mobile is "coming soon".