They should not be worried, they should be educated.

If you worry a new user enough they'll go back to Windows or Apple because there's less scary warnings there.

We need to make the transition as pain free as possible. Learning about the joys of kernel compilation and SELinux can come later.
The first step is "Hey, this is as usable as Windows, without stupid ads in the start menu.

Ah, you "work" in "marketing"?

That's the equivalent of leaving the door open and hanging a sign "Internet over there" pointing at a wall.

Programs don't need to respect those registry keys. If you're worried about internet access, set up a firewall.

Also, if you're worried about malware, the damage is probably done before anything connects to the internet.

B stands for Billion (Parameters) IIRC

Noch ein Fan des Entgenderns hier. Freue mich jedesmal, wenn ich -ys in freier Wildbahn sehe.

Okay, you got me there. In all fairness, as instruction videos go, that one is on the tame side.

Thanks for posting the instructions here.

The good thing is that you don't need to know which ports to block. You just set your firewall up to deny by default and then start whitelisting the things you want to allow.

Even easier if you put your "smart" devices in a separate network, then it's just:

• Allow traffic from home net to Internet
• allow traffic from home net to iot-net
• drop the rest

Now you can surf the internet, control your devices and they can't phone home

I'm hopeful that reencoding on the fly or even merging preencoded files into a single stream is too expensive because it needs a lot of compute power and invalidates caches .

The problem is that android auto is restricted to apps installed from the play store.

The F-Droid Version supports Android Auto, but it's blocked by Google.

I managed to enable it by spoofing the installer-package during installation.

For me, the navigation is near unusable. Location tends to lag behind by a few seconds when running on Android Auto. On my phone it's fine.

Yeah, from an actual usability and privacy standpoint, that's horrible design. It does make for good visuals with the actor and the display in frame at the same time. No more "closeup of a message on a phone display"

I'm personally hoping for smart stuff to get a bit more distributed. A phone-like CPU unit in my pocket streaming display content to my watch and AR glasses or a full size screen on the seat in front of me on the subway. Simple visual and vibration notifications from a smart ring.

Die API wäre dann vermutlich nicht besser, aber mein Gefühl bei einem Dienstleister (?), der zu faul / planlos ist, seine Webservices auf Standardports ansprechbar zu machen ist nicht gut. Das riecht nach "da hat der Praktikant mal was mit nem Framework auf gebastelt und das ist jetzt produktiv"

Ist mehr ein Gesamteindruck-Bauchgefühl als eine ganz stringente Herleitung, aber ich kann OPs Bedenken durchaus nachvollziehen.

Insbesondere, weil es halt mit "Port auf" nicht getan ist. Da wollen dann noch SSL-Inspection und der Rest vom Regelwerk angepasst werden.

Mein erster Gedanke bei "unpatchbar" war die Wii, mit einem Bug in der Signaturprüfung im ROM, hat die Switch ein ähnliches "Feature"?