this post was submitted on 16 Jan 2021
64 points (98.5% liked)

Privacy

33590 readers
1050 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 15 points 4 years ago* (last edited 4 years ago) (2 children)

I might be late to the party, but I think I can point out some crucial things here.

They recommend a billion other bad things, like most VPNs that either track you by lying about policies, or have been hacked in the past. Privacy may be a gradient, but it is not a partial or full thing.

I was apparently silenced on r/privacytoolsio when I enquired about this page deployment: https://old.reddit.com/r/privacytoolsIO/comments/frz365/privacytools_delists_the_great_cloudwall/fm08anu/?context=10000

Digdeeper, a friend of mine lists more things. https://digdeeper.neocities.org/ghost/fake_initiatives.html#ptio

I do not know why I typed all this. Nonetheless maybe it can help.

load more comments (2 replies)
[–] [email protected] 9 points 4 years ago* (last edited 4 years ago) (2 children)

I dont think a 10 word passphrase for Keepass is necessary. Just 4 or 5 words already give plenty of entropy (assuming they were chosen randomly from a long enough list). Even better if you take words from different languages.

[–] [email protected] 3 points 4 years ago

Yeah I already type that shit ten times a day, I won't make it use double the time I already waste 😃

[–] [email protected] 3 points 4 years ago (2 children)

Here is another solution:

  • generate a full random 12 char password, write it down on a piece of paper that you keep safe
  • after a week or two of unlocking the password manager with it everyday you should be able to remember it
  • burn the paper, and you have the safest setup you can ever have.
load more comments (2 replies)
[–] [email protected] 8 points 4 years ago (3 children)

wasn't startpage bought by system1 (some weird mix between data analytics and advertising agency) 🤔?

[–] [email protected] 11 points 4 years ago (7 children)

Hrm I think it was... I haven't kept up to date on it tho. duckduckgo has lots of problems too iirc. Basically searx is the only good one privacy-wise and its barely functional imo.

[–] [email protected] 6 points 4 years ago (1 children)

yup, unfortunately the search engine niche is in bad shape to say the least: duckduckgo has gaslighted everyone into believing they are private and even bullied the tor devs to use as default search engine somehow lol

[–] [email protected] 5 points 4 years ago (1 children)

There's also Infinity Search which is completely libre, it's based in the USA, but I think it's a start and it's way better than the rest of the competitors and more functional than Searx IMO, it has some usability issues but they aren't that big of a deal.

[–] [email protected] 3 points 4 years ago

interesting, thanks, i'll definitely check it out

[–] [email protected] 3 points 4 years ago

You could test MetaGer.

[–] [email protected] 3 points 4 years ago* (last edited 4 years ago)

It was. Its parent company is based in Florida.

load more comments (4 replies)
[–] [email protected] 3 points 4 years ago

You know, I coulda also sworn I read that it was started in the US (New York).. but now it says it is the main branch is in the Netherlands. I do still use it ocassionally though.

load more comments (1 replies)
[–] [email protected] 7 points 4 years ago* (last edited 4 years ago) (3 children)

why there is no tutanota in your list? Do you know something compromising it? upd: tutanota is among recommended by https://www.privacytools.io/providers/email/

[–] [email protected] 8 points 4 years ago

I don't have any email providers in there, seems kinda risky because nearly every one after a few years seems to get compromised. Email wasn't really designed with encryption in mind like all of these new comms platforms like matrix.

[–] [email protected] 4 points 4 years ago (11 children)

Tutanota, anyways, is propietary in server side.

load more comments (11 replies)
load more comments (1 replies)
[–] [email protected] 6 points 4 years ago (2 children)

Just tried OpenBoard and I love it. I used Anysoft Keayboard before but the spell checking was a disaster.The only thing I will miss is the ability to have buttons to go back and forward one character:

Screenshot showing the buttons

[–] [email protected] 5 points 4 years ago (1 children)

I just noticed that it is possible to go back and forward with by sliding on the spacebar !

So this is no by far my favourite keyboard!

[–] [email protected] 5 points 4 years ago (2 children)

I used anysoftkeyboard for the longest time, but switched to openboard after like 5 minutes of using it, the auto-correct works really well, just no swipe.

[–] [email protected] 3 points 4 years ago

yeah I'm using anysoft right now and I mainly use it for the swipe, though without good autocorrect it isn't as useful as gboard swipe was.

[–] [email protected] 2 points 4 years ago

That sums up my experience pretty well!

load more comments (1 replies)
[–] [email protected] 6 points 4 years ago* (last edited 4 years ago) (4 children)

dess you recommend protonvpn but like... protonmail ~~takes money from~~ gives money to CIA-backed orgs & talks about "freeing" hong kong...

also what about git hosting? i see this is on github pages (which is mad convenient, no doubt) but is there a hosting provider you recommend?

*edited to fix misinformation

[–] [email protected] 8 points 4 years ago (5 children)

I didn't know that abt proton, I'll remove. I use mullvad myself.

For code hosting, codeberg.org seems okay, I have all my repos mirrored there. Otherwise self-hosted gitea. I don't have a good recommend for a VPS, except for maybe OVH.

I'll add this stuff.

[–] [email protected] 7 points 4 years ago (1 children)

Mullvad has been pretty good so far!

[–] [email protected] 5 points 4 years ago (1 children)

wireguard is wonderful for phone battery life too.

[–] [email protected] 4 points 4 years ago

I have set up a wireguard tunnel on my VPS (german so I can't use it for torrents) and it works very well. Way better than openvpn,

[–] [email protected] 4 points 4 years ago (1 children)

cool, thank you for the recommends! and i love your essays, btw. i think you do a really good job of summarizing socialist ideas in a way that is easily accessible.

[–] [email protected] 3 points 4 years ago

Thank :heart suit:

[–] [email protected] 3 points 4 years ago

Mullvad (Sweden) and AirVPN (Italy) seem to be the best for respecting privacy from my research. The AirVPN guys are a bit dogmatic though.

load more comments (2 replies)
[–] [email protected] 5 points 4 years ago (3 children)

any more info on where protonmail gets their money?

[–] [email protected] 3 points 4 years ago (2 children)

Protonmail is a little sketch, too. Much of their funding comes from Silicon Valley, and they, in turn, are all in bed with the intelligence services. When it comes to Protonmail, it does sound too good to be true, but they may be the real deal. See: https://www.ic3.gov/Media/Y2021/PSA210115

load more comments (2 replies)
[–] [email protected] 3 points 4 years ago

i'm sorry -- i mixed up two facts. it is protonmail who monetarily (and publicly) supports CIA-backed orgs, not the other way around (afaik). protonmail does have a big US backer but i forget who it is so i will do some digging (and fix my original post) sorry again!!

[–] [email protected] 2 points 4 years ago (4 children)

Certainly some of their funding comes from paid memberships. Beyond that, here is what my (not remotely extensive) research found:

In 2014 ProtonMail is listed as a Boston finalist for MassChallenge, (the same MassChallenge Boston who runs a US Air Force Lab), through whose programs start-ups

participate in a four-month, industry-agnostic accelerator where they receive:

  • Hands-on support from top mentors and experts
  • Free co-working space
  • Access to MassChallenge’s unrivalled network of corporate partners
  • Tailored workshops and office hours
  • The opportunity to win a portion of more than $2M in cash prize

I am unsure if the MassChallenge application resulted in a grant, though there are finance sites that suggest it did.

Also in 2014, they raised $550,377 from backers on IndieGoGo In their campaign they said this:

We firmly believe that ProtonMail can only succeed in its mission if it remains independent. By raising money through crowd funding, we can ensure that our first and only priority is protecting the privacy of our users.

There are certain powerful governments and corporations out there who are in the business of controlling and exploiting personal data that will try to hinder us. If we want to live in a future where privacy on the internet is respected, we must stand together now and fight for those rights. With your support, we can make this brighter future a reality.

And yet...

They took 2 Million USD from venture capitalists at Charles River Ventures (CRV) and from FONGIT, described by ProtonMail as "a foundation supporting innovation on behalf of the State of Geneva and the Swiss Federal government". The head of ProtonMail's Advisory Board also serves as Director of FONGIT.

There have been people who claim to connect CRV to In-Q-Tel, the venture capital arm of the CIA, but my (very brief) research only came up with a loose connection through an employee. I did, however, find out an unrelated piece of information I would not have otherwise: In-Q-Tel lists GitLab in their portfolio. There is another (stronger) connection to the US government through CRV; a partner was appointed by Obama in 2012 to represent the US at the UN General Assembly.

It is also of note that Protonmail is advised by the MIT Venture Mentoring Service which is exclusively for the MIT community. I mention this because Protonmail has scrubbed much of the MIT influence, presumably because they think it will harm their business. This is the "about" now:

ProtonMail was founded in 2013 by scientists who met at CERN and were drawn together by a shared vision of a more secure and private Internet. Since then, ProtonMail has evolved into a global effort to protect civil liberties and build a more secure Internet, with team members also hailing from Caltech, Harvard, ETH Zurich and many other research institutions.

And this was that same page in 2014:

ProtonMail was founded in summer 2013 at CERN by scientists who were drawn together by a shared vision of a more secure and private Internet

ProtonMail is developed both at CERN and MIT and is headquartered in Geneva, Switzerland. We were semifinalists in 2014 MIT 100K startup launch competition and are advised by the MIT Venture Mentoring Service

load more comments (4 replies)
[–] [email protected] 5 points 4 years ago (1 children)

I don't know anything about the protests in honk kong, why is it a problem? (it's a real question, not a troll)

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 5 points 4 years ago

was going to fork and do a spanish translation and add some libre apps I use for terminal but is on github… one will think at least they will use gitlab or gitea etc. :(

[–] [email protected] 4 points 4 years ago (2 children)

I would recommend Riseup VPN here.

[–] [email protected] 3 points 4 years ago (1 children)

how's the speed on riseup?

[–] [email protected] 2 points 4 years ago

The test at max speed I know was a friend with 100 Mbps who told me he didn't notice any slowdown.

Also in LTE I made tests in the mobile version without issues.

load more comments (1 replies)
[–] [email protected] 3 points 4 years ago
[–] [email protected] 3 points 4 years ago

Some solid recommendations here, a lot overlaps with my own research. Good to know I'm on the right path.

[–] [email protected] 3 points 4 years ago (1 children)

This is amazing! Thank you! (I love Lemmy btw <3) I'm just wondering about github, as mentioned by @[email protected]. I love github, but the idea of foss code being hosted by Microsoft is weird... I'm gonna give gitea a try, but how do you think gitlab compares to github?

[–] [email protected] 4 points 4 years ago

in my research about protonmail i discovered that GitLab is in In-Q-Tel's portfolio (In-Q-Tel is the venture capital arm of the CIA) so if that is concerning to you for any reason, i would stay away from GitLab. dess did mention codeberg as an option

load more comments
view more: next ›