I use Pixel with GrapheneOS as my phone, and I just have a separate profile that only has WhatsApp installed and nothing else. Since the profiles are completely separated, it doesn’t have access to anything else I do on the phone and it’s not running in the background (the profiles are basically sandboxed fresh slates, and switching it can be set-up to behave in a same way as basically turning off the phone as far as the profile is concerned).

When the bridge asks me to log in again or refresh a session, I simply switch to the second profile for a minute and re-log in. I’ve heard iIt might be possible to set up an emulator and leave it running on the server, but that felt like too much effort.

Yeah, that’s my experience as well. In addition to being lazy with updating, so if some kind of supply chain attack happens, I usually sorts itself out before I get to updating :D

But I did limit my browser extensions, after I a cause with Nano Defender taught me a lesson - it was a mildly popular anit-anti-adblock killer that worked where other adblocks were detected, but the developer sold the extension to a company that turned it into a info-stealer malware and pushed an update through chrome store, which got accepted and propagated, and some of my social network sessions got compromised. So, I just stick to more popular projects where something like this shouldn’t happen, and don’t use random extensions.

Yeah, that part about WhatsApp is annoying. I just have a spearate profile on Graphene that has only WhatsApp installed, and whenever it wants me to refresh a session I just switch to the profile and log in.

There is, but it requires you to log into the app every two weeks to maintain a session. You can setup a emulator to do it for you. I just have a separate profile on my Graphene with Only WhatsApp that I switch to and login whenever I get a warning.

I’ve been using it for almost a year by now, and so far I didn’t have any problems. I’ve not considered that problem though, so it might be happening and I was just lucky.

WhenI was setting it up, it took me only like two hours tops. The ansible project is well documented, has a clear setup guide, and the process is really just getting server with ssh access, changing DNS, changing around 5 values in the ansible config and running it.

As far as I know the Discord bridge has some limitations, the major one being that IIRC it doesn’t atually support calls. But just for chatting across servers it has worked well for me.

There’s also the fact that you have to either trust the project with your password (as in, the the bridfe adds a matrix bot that runs on your server, but needs your pssword), since I think it uses the web version in the background (but then you can also use it for DMs and any server), or set up a bot on the discord server you want to bridge, which obviously cant be done if you’re not an admin. It’s a foss project, but there’s always a small risk of it gping rogue.

https://github.com/spantaleev/matrix-docker-ansible-deploy

Its pretty well documented and easy to follow, it took me only like an hour to setup.

I’m hodsting my own Matrix server with WhatsApp, Telegram, Discord (you don’t need a bot for that, you can just share your login with the bridge) and Messenger bridge. I have all my IMs in one app, don’t have to install spyware on my phone, and I can make bots that troll annoying people that message me on any platform.

Hosting it was super simple, thanks to the Ansible project that’s extremely robust and well done, I literally just got a hosting, domain amd changed like 5 config values to enable the bridges I wanted, gave it an IP and ssh key, and ran it. And if I need to update, I literally “just update” (it’s all wrapped up into “just” tool), and it eve handles cases where I didn’t update for a while, failing graciously and telling me what I need to do maually, usually just rename some config values.

I wholly recommend it. You probably wont convince your friends to switch from <insert app here>, and this is the best compromise.

I’m using a small instance on Hetzner, for 6$ a month. You could in theory get a free oracle cloud instance for it, but I didn’t manage to get one.

And you can easily share it with anyone interrested, make them an account, so they can also consolidate their DMs. I’m sharing it with a few friends and colleagues.

I’d also add that IMO, it’s also heavily caused by misalignment of social network personalization algorithms. It’s very probable that someone developed a ML algorithm during the early years of FB/YT/Google (not LLM, just some kind of feedbacky ML), that takes data they have about you as input, and selects what posts to show you next to maximize your time spent scrolling on the app.

You have unimaginable amount of data (with literally billions of active users), and it could’ve been running and getting better for the last decade.

The algorithm gets better and better at gluing you to the screen, at manipulating and changing people. My theory is that one of the best ways how to keep someone glued to a social network is radicalization and introduction into a conspiraci theory. It probably removes you from “normal” people around you IRL, because you’re now wierd, you feel smart because you’ve “figured out the truth”, you don’t spend time with people around you or read “traditional” media, because they are lying and don’t get you, and the only safe space you have is the echo chamber on the social network. That sounds like a pretty good recipe how to keep people interacting on the platform, and there’s not really a way how to prevent it, assuming it’s a ML algorithm driving it. No one knows how it works, and it only works with one goal - maximize app time at all costs.

Just take a look how good some ML models are at the task of “text -> image”. Now imagine it has billions of people and a decade to experiment, with a task “person -> next content to show”. It’s horrifying to think about what it would be able to manipulate you into, and it is even better at it that the image models, because it had exponentially more data and room to experiment in real time on real people.

Also - there’s no way how to fight back. Even if you know about it, there are tens of thousands people like you, who are also “immune” to this approach. But the ML algorithm gets to experiment on them, and if there is a way how to manipulate even them, it will figure it out. Because it knows what approach won’t work on people like you. The only way you can prevent this is by not using anything that has a personalized feed - no Google search, no FB wall, no YT recommendations, etc. This probably doesn’t lead to radicalization in this case, because the goal is to keep you in the app, not radicalize. For now, at least. Thankfully, people managing the biggest social networks are reasonable people who are just running a business, and they have no reason to change the goal of the algorithm into something else than screen time, right?

O(fuck)

I’m actually glad for it. It made me switch to Linux, discover Mullvad Browser and their VPN combo, get a GrapheneOS phone, find an amazing Freetube YT desktop client, and dabble with Home Assistant and PIHole. Plus I migrated to Protonmail and Kagi as my search, and Lemmy instead of reddit is also an amazing change, the discussions I’ve seen so far feel better and more in depth, and I’m enjoying my time here so far. The lack of endless content is also great, to help with implementing Digital Minimalism.

So, while I hate any large corporation and their greed with more and more passion, it has lead me to a nice privacy journey, for which I’m glad.

Add-ons are a pretty huge security risk, though. Someone was just posting an article about how tempting it is to sell out with your extension, and how many offers you actually get.

And I’ve already been burned once, and it’s not pretty. Also nothing you can do against this.

The best solution is actually not Firefox, but Mullvad. No need for extensions, based on Tor Browser and can be bundled with a VPN that’s full of other people using the same browser - so you have exactly the same fingerprint, and they can’t tell you apart. Not by extensions, not by IP.