• dingdongitsabear@lemmy.ml
    link
    fedilink
    arrow-up
    16
    ·
    16 hours ago

    anyone dunking on the article, this is pretty far away from a how-to-lilst; it’s more of a “think about these things if you haven’t up until now” and as such a net positive. wrong community for it, though.

    • Dessalines@lemmy.ml
      link
      fedilink
      arrow-up
      33
      arrow-down
      1
      ·
      1 day ago

      I read through the whole list, and monero was the only decent privacy recomendation I could find. Everything else was US-hosted. A lot of it was just recommendations from Apple and Google on “privacy” services they offer.

      No mention of syncthing, matrix, xmpp, even with sections dedicated to those categories.

    • stembolts@programming.dev
      link
      fedilink
      arrow-up
      7
      ·
      1 day ago

      You’re right, ha, I’m totally not… they, I mean they are totally not! You got it guy! Everyone listen to this guy! I’d go as far as to say anyone reading this article is innocent of ALL crimes!

  • surph_ninja@lemmy.world
    link
    fedilink
    arrow-up
    25
    arrow-down
    1
    ·
    1 day ago

    Too bad private email access is essentially dead. Any service not requiring another email or phone number to sign up gets quickly shut down. A casualty in the war on whistleblowers.

    • uncrme@lemmy.world
      link
      fedilink
      arrow-up
      12
      arrow-down
      1
      ·
      1 day ago

      email is never private, if its that sensitive it just shouldn’t go on the internet

      • Em Adespoton@lemmy.ca
        link
        fedilink
        arrow-up
        4
        ·
        1 day ago

        Exactly; email is digital post cards and always has been.

        Of course, that means I can encrypt a message and use someone else’s email account to send it :)

    • xapr@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      2
      ·
      1 day ago

      You can sign up for Proton mail without providing email or phone number, as far as I recall.

        • red@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          2
          ·
          13 hours ago

          you still can, it was a bug in past that they fixed long ago

          • refalo@programming.dev
            link
            fedilink
            arrow-up
            2
            ·
            12 hours ago

            it’s not a bug and it’s still not possible, it’s for tracking who created the account of course.

          • surph_ninja@lemmy.world
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            12 hours ago

            Try it now. Load up a tor tab in the Brave browser, and try signing up for an email without providing any info.

            • red@lemmy.zip
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              10 hours ago

              yes I just did, not brave but tor browser and I was able to create account

              • surph_ninja@lemmy.world
                link
                fedilink
                arrow-up
                1
                arrow-down
                1
                ·
                11 hours ago

                I just loaded up a Linux vm with Brave, and tried to sign up in a tor window. It requires a verification email to sign up.

                Maybe you’re using a browser or OS that it’s tracking.

                • red@lemmy.zip
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  10 hours ago

                  yeah I’m using tor browser, also don’t forget you can get fingerprinted even on tor

        • tekato@lemmy.world
          link
          fedilink
          arrow-up
          14
          ·
          1 day ago

          They do store it and have provided it to authorities in the past. In their defense, modern laws require you to hand over any data you have or get shut down. But they already knew that, yet choose to ask for it anyways knowing that they have to give it away if asked to.

          • sunzu2@thebrainbin.org
            link
            fedilink
            arrow-up
            4
            ·
            1 day ago

            i guess corpos gonna corpo folks… even the “good” ones

            i did not realize you needed anything to create rando emails. i know google started that shit 5 years ago tho

            • tekato@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              1 day ago

              I don’t think you are required to provide a secondary email, but you get less features without it.

              • sunzu2@thebrainbin.org
                link
                fedilink
                arrow-up
                2
                arrow-down
                2
                ·
                1 day ago

                i see… that is a dark pattern in of itself, why does proton need this info and why are they willing to incentiveze users sharing it.

          • hugealligator379@lemmy.ml
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 day ago

            As far as I understand it, this is only recovery emails and I think it explicitly has some sort of warning about this when setting it. This is different than the email prompt on sign up.

            • EngineerGaming@feddit.nl
              link
              fedilink
              arrow-up
              1
              ·
              12 hours ago

              I wouldn’t trust them not to store the initial one as well tbh. Nothing technically stops that and it’s in their interests.

            • tekato@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              1 day ago

              I didn’t even know it asked for an email for sign up. I just remember the recovery email.

  • shortwavesurfer@lemmy.zip
    link
    fedilink
    arrow-up
    13
    arrow-down
    1
    ·
    1 day ago

    I’m glad they mentioned Monero in the article, but sad that they mentioned it alongside Zcash since Zcash is not private by default and not many people opt into the privacy and Zcash has shown willingness to be bad to their users by helping exchanges. Primarily because they are run by the Electric Coin Company, which is registered in the United States, and therefore they have to obey the laws of the United States. So, Zcash is not a good option.

    • toastal@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      22 hours ago

      Shielded addresses & transactions are private using zero-knowledge proofs like Monero. You can also have transparent addresses & transactions like how Bitcoin operates on Zcash as well which is true. But there isn’t a default, some wallets autoshield by default making your comment misinformation.

      • shortwavesurfer@lemmy.zip
        link
        fedilink
        arrow-up
        2
        ·
        15 hours ago

        Some wallets shielding their transactions by default is still not nearly as strong as everything being shielded by default at the protocol level, but they couldn’t have that because then they would not be on exchanges.

        • toastal@lemmy.ml
          link
          fedilink
          arrow-up
          1
          ·
          10 hours ago

          It does add a level of convenience for the type of transaction you might want to actually be tracked all being on the same currency. Most don’t even offer the option. Zcash can do the thing—it’s just not the only way.

          • shortwavesurfer@lemmy.zip
            link
            fedilink
            arrow-up
            1
            ·
            10 hours ago

            Monero has view keys for exactly this reason, so that if you need to make a transaction public for like an audit or something, you can do so. But on the protocol level, absolutely everything is always private.

            • toastal@lemmy.ml
              link
              fedilink
              arrow-up
              1
              ·
              3 hours ago

              That’s good too. Not a Monero hater or a Zcash fanboy—I just think we need to be honest about the capabilities even if the methods of getting there are different.