Right, there are many more unofficial builds and also lits of forks available. But at least for me, I’d rather not download builds directly from XDA.

I don’t think that graphene builds on Lineage OS. If this would be the case, then the Android 15 release of Graphene OS wouldn’t be 3 month before the release of Lineage OS 22.

I currently use both (with different phones).

Graphene is way more polished. It even features a browser-based installer. It comes with countless security and privacy improvements that can be non-trivial, but very nice (e.g. contact scopes). And they have an update process that wirks completely in the background, without any further action from the user. But of course the main downside is that you need a pretty expensive Pixel phone.

Lineage OS is less polished, but is compatible with many phones. It is also used as a base for many custom roms that alter the OS in specific ways.

The list of supported devices is impressive, currently 65 phones have a recent version available.

However, as not every device is supported, if you buy a new phone, check the list in the blog post first.

The Pixel 8 Pro is supported from day one. It might take a week or so until all builds are available in the download portal.

There is also Impress Remote for Libreoffice Impress

I use this pin feature when I give my phone to my kids. They can only use the pinned app and nothing else.

You’re right. This came handy when my phone’s screen broke and the touch sensor didn’t work. With USB mouse and keyboard, I could make a backup.

(Bluetooth would have worked too, if the devices are already paired).

Android has support for keyboards. Both USB and Bluetooth keyboards work well and can be used for longer typing.

The DNS record must point to cloudflare, not the instance IP

I’m glad that development is getting more stable, the regular updates with breaking changes were not so great.

The documentation notes that “toolkits can optionally disable [AI writing tools] where not relevant e.g. passwords, number input, etc.”

seems correct

There is no way to be 100% sure, but:

• bitwarden and ente have open source clients that ecrypt all data locally in a way that the provider can’t restore data
• nextcloud isn’t optimal, while you can encypt data at rest, the provider might be able to spy on you
• With mail providers it is difficult, but mailbox.org has my (personal) trust by building their business model on data protection and open source

I can and do self host, but I’m not willing to provide these services for free. I don’t want to be responsible for other peoples passwords or family photos.

Thats where good, privacy-respecting services come into play. Instead of hosting for my neighbours, I would recommend mailbox.org, bitwarden, ente or a hosted nextcloud.

The blog post contains an interesting tineline. Apparently, the first fix was not sufficient. So if you have updated Vaultwaren before November 18, update it again.

Copy of the timeline:

• End of October 2024: ERNW assesses Vaultwarden for the customer.
• November 08, 2024: ERNW discloses the vulnerabilities to the Vaultwarden team.
• November 10, 2024: Fix and release of Vaultwarden v1.32.4.
• November 11, 2024: ERNW retests the software and identifies that the fix is not sufficient.
• November 11, 2024: Public merge with fix and request for feedback by the Vaultwarden team.
• November 12, 2024: ERNW acknowledges that the fix is complete.
• November 18, 2024: Release of Vaultwarden v1.32.5.

My HP has a 65 watt CPU built in, when it’s running at full load it is quite loud.

Small, 10 inch rack, with some 3D printed rack mounts.

Maybe try some TLS-based VPN? This should work almost anywhere, because it looks like a standard HTTPS connection.

Wireguard - even on port 443 - is special as it uses UDP protocol and not the more widely used TCP protocol.

I like it :) Can you provide a link to the sensors you used?

You‘re supposed to host this yourself.