Wow, this is exactly what I was looking for. Thank you.
Original, I thought “hey, everything will work”… but then I started to look into the details. For example, Revolut, it works, then it doesn’t work (due to attestation), then works (after people complain).
I really need to ask myself, if this is the kind of experience I want with my daily driver. On the other hand, I know this is just Google strong arming me into their walled garden. Man, I really hate this dystopian future.
If you do opt for OpenVPN, I believe UDP is generally better for performance. TCP support is mainly there for scenarios where UDP is blocked, or on dodgy connections where TCP’s more proactive handling of dropped packets can reduce the time before a lost packet gets retransmitted.
It’s great that you brought up TCP vs UDP. And you are totally right about TCP being a bit slower, higher overhead, but it’s there for situations where UDP is blocked.
I’ve used my VPN at all sorts of hotels, coffeeshops, etc. I’d say 1 in 10 places block UDP (or more likely don’t properly route UDP). If you’re using a SIM card, you won’t have any issues.
However, it’s worth mentioning that WireGuard is UDP only. There are some hacks/workarounds to have it work over TCP, but then you’re going to need to find WireGuard clients that also supports these hacks (which is possible on computers, but harder on cellphones/tablets).
If you want something that “just works” under all conditions, then you’re looking at OpenVPN. Bonus, if you want to marginally improve the chance that everything just works, even in the most restrictive places (like hotel wifi), have your VPN used port 443 for TCP and 53 for UDP. These are the most heavily used ports for web and DNS. Meaning you VPN traffic will just “blend in” with normal internet noise (disclaimer: yes, deep packet inspection exists, but rustic hotel wifi’s aren’t going to be using it ;)
Lemm.ee: It’s the Switzerland of the fediverse. ;)
The Operations Team are a stand-up group. Their focus is on delivering stability.
You’ll basically get access to all content (and all “features”, like up-vote and down-vote - I’m looking at you beehaw).
What I’ve heard from other people is that they want automagic curated content… so you won’t find that a lemm.ee, but for me - I’m happy to find the content that’s meaningful to me.
Can I install my bank app on it yet? I remember having problems with attestation in the past.
What about full application backups? I’ve got a few offline apps, I’d like to transfer the data to/from. However, I thought grapheneOS needed the application developer to “approved” this backup/restore method - or you needed root (which invalidated attestation)… I don’t recall which it was (but I really miss titanium backup).
There’s a great (and overly detailed, but interesting) breakdown of the problems with the hitboxes and other bugs for this level.
I’d definitely add a +1 to lemm.ee
The admin is open and honest, he’s got a clear set of goals, which is to make lemmy accessible - nothing more, nothing less.
Lemm.ee doesn’t participate in the whole “federate vs non-federate” drama or crippling features (ie: removing downvotes) because it goes against their ethos/mantra.
There are instances that lemm.ee defederates from, but they are usually due to extreme vore, cp, or other content that could expose lemm.ee to some legal problems.
I agree in principle, but try explaining that to your grandmother.