That’s truly as lightweight as you’re going to get. Cool little script.

If you like Heimdall you could run it without Docker. It’s a PHP app, you could run nginx and it would be pretty lightweight.

It’s right there in the first part of the description:

This application uses the AudD® service as a Music Recognition API.

The Android app is horrible btw. If I had to guess it’s just a desktop web page scaled down and packaged in an app.

You can run your own mail server and keep your emails on a device you control instead of e.g., gmail.

It’s non-trivial so most people stick with letting someone else handle it. Just like you’re probably not running your own Lemmy instance, but Lemmy is still decentralized.

Specifically for attempting to bypass certificate pinning you’re solidly in the realm of reverse engineering. I haven’t attempting it myself but I have read the efforts of others over the years and the process was quite evolved and ever changing. If you are interested in going down this rabbit hole you may use these links as starting points but be prepared to adapt them.

https://felipe-herranz.medium.com/uncertify-a-tool-for-recompiling-android-apps-bypassing-different-certificate-pinning-techniques-de3d30ded2c6

https://gist.github.com/approovm/e550374428065ff1ecafca6a0488d384

https://frida.re/

https://codeshare.frida.re/browse

Best of luck.

From one of your devices can you check what DNS server they are using? It sounds like the router is setting itself as the DNS server. This would mean all your devices would list your router’s IP address and the DNS server. This is a different setting than the DNS server that your router is using.

If that’s the case you tell your router to tell your devices to set the DNS server to the IP address of your AdGuard Home device. Alternatively, you can manually set the DNS server on your devices.

Yeah, unfortunately it’s a huge barrier if you’re wanting to see why your devices are phoning home and the data being sent. It makes it extremely difficult if not impossible for most people to bypass.

I’ve been working on a fun little project, similar to the watch party website, where you can enter a YouTube link and have it synchronised so you can watch and chat with a friend. Very basic functionality at the moment, and I’m hoping to add more functionality over time.

I completely agree and can’t recommend this app enough. There’s so many things going for it compared to everything else out there. I use it every day also after churning through all the other ones out there and never feeling satisfied. The total app size is like 25MB and doesn’t even request the internet permission. With not having the internet permission you don’t even have to worry about what data is being sent back to the developer - the answer is none. Despite being incredibly lightweight it’s somehow got more features than many other apps, and implemented extremely well.

It’s free but you do get a couple extra advanced features for a small IAP such as a ChromeCast plugin and auto playlists (Most Played etc). Despite not even needing any of the features I paid for the lifetime access simply because I find that much value in this app and when you come across a diamond like this app it makes you want to give back.

Oh, I’m sorry. I completely missed that! Yes you are completely correct and I will correct the post. Thank you.

No, not at all. The request never hits the cache. The certificate is stored within the app and all internet communication is specifically pinned to said certificate. It doesn’t even ask your certificate store.

deleted by creator

UPDATE: Sorry, this app is not open source. I completely didn’t notice the community. 100% my mistake. I have removed the comment but for reference the recommendation was for Musicolet.

There are some cases where this would not work by the way. It’s called certificate pinning and it’s basically when an application comes with the trusted certificate for a host built-in. Even if you were to override it with a root certificate in the certificate store, the app simply wouldn’t use it.

It’s not about preference. It’s about what every single other email client does, including their own on different platforms, and this is even fixed in their upcoming beta of this same app.

Thank you! The stupid thing is I’m literally enrolled in the beta program through the Google Play store… apparently that’s the fake beta and you have to know this link for the real beta. I can confirm this issue does not exist on the “real” beta. You just saved me a lot of time.

I’d be surprised if anyone did! I have asked them what the use case for this is and will reply back if they answer.

For context, this is the “feature”: