aiui apt will compare downloads from repositories against the repository signing key, whereas downloading a deb and installing it manually with dpkg bypasses that.

So theoretically the Debian website could get compromised and provide you a malicious deb package. That has happened to other Linux distros before so it’s not entirely unrealistic.

Practically I think that’s very unlikely.

I know apt has the --download option if you’d like to fetch deb packages on the commandline, though I’m not sure if apt compares the package with the key during this process. I hope it does. You could probably run apt in verbose mode and hopefully see this happen.

Some references:

• https://askubuntu.com/questions/131397/what-is-a-repository-key-under-ubuntu-and-how-do-they-work
• https://wiki.debian.org/SecureApt

Only if I can drive the spaceship with a Logitech wireless controller.

Can you force all DNS via TRR (aka DNS-over-HTTPS)?

I don’t know what Pi-Hole is capable of but that’s possible on open source routers like OpenWrt.

I’ve had a Racknerd VPS on a LEB special for a couple of years. It work works and is always there when I need it. The control panel is good. If you want to pay less than US$1/month for a small VPS they’re great.

Not really, there are already “quantum proof” encryption algorithms that systems are already moving to.

It won’t be an apocalypse where all your personal data is suddenly available at the click of a button. You need to be a billionaire launching a new social network to get that level of privacy invasion.

I prefer whatever codec my hardware supports. Currently Pi 4 does both your options so I don’t care which. x265 has slightly smaller file size for the same quality wish is nice.

4G: Fast phones. 5G: Faster phones. Neither of them can give you cancer or cause Covid or are Bill Gates mind control or whatever else the cookers are coming up with these days. The best explanation I’ve seen is this hilarious and educational video from ElectroBoom: https://youtu.be/i4pxw4tYeCU