Check out https://www.firefly-iii.org/

Do you find a beer gut sexy? How about Dad Bod?

I think you should reconsider Proton. It seems to tick all of your boxes except US-based. However, I know they have US-based VPN servers, so I expect they have US-based email servers as well. It’s worth asking their support team about.

Is it pronounced “jif” or “jif”?

I use Emacs’ Org Mode. It may not be exactly what you’re looking for, but it is highly versatile.

Me too. I could never get into nushell or fish because they’re not posix and I don’t need to learn two ways to do something.

I think the glass doors on the refrigerated coolers that were electronic displays that showed you an ideal image of the drink or whatever was supposed to be inside, but you couldn’t see through them to see if there were any actually on the shelf.

You could, but maybe a good shell makes it easier than the external tool. Or maybe you use the shell to effectively combine the inputs and outputs of the other tools.

He did say he was doing it to learn. Maybe when he’s done he will be able to appreciate what goes into making a viable browser.

Well, time to go watch Black Mirror again. You know, the one with the robot dog that hunts you, or the one with the quadcopters that kamikaze tap you on the head with explosives?

https://mbasic.facebook.com/ still works. It’s missing some modern niceties, but usable. That’s what I use for occasional messages.

In other words, if the sha matches, then it wasn’t corrupted during downloading. If the signature matches, then it wasn’t tampered with before you downloaded it.

There’s also a third check. Even if the certificate signature is valid, you have to have confidence that the certificate is authentic and trusted to be from the original author. This is usually done by having a trusted third party sign the certificate with another, more trusted, certificate.

If you get the sha256 from the same place you got the main file, then anyone tampering with the main file could also recalculate the sha256 to match the tampered file. A signature signed with a certificate uses complex math (public-key asymmetric cryptography) to give some certainty that the signed content (the sha256) is the same sha256 that the original file author created. It’s not mathematically feasible to recalculate the certificate signature. Why don’t we just sign the whole original file with the public-key crypto and skip the sha256? Because asymmetric crypto is much, much slower than plain symmetric crypto or hash functions. It’s faster and easier to generate the valid hash or key, then sign or encrypt just the smaller key.