Recent comments in /f/Privacy
smooth_jazz wrote
Reply to comment by !deleted261 in The Truth About Protonmail - Privacy Watchdog by Rambler
Although some points are worded a bit... extreme, they make sense.
Protonmail DOES redirect you to their clearnet site for signing up, but this doesn't mean they are compromised.
And as far as E2EE is concerned, this depends on your threat level. You could use a different email provider (or self-host) and manually encrypt your messages. Or you could trust somebody to do this for you. And as far as a normal user is concerned, protonmail is a good start. Other claims in the article do seem far-fetched.
Rambler OP wrote
Reply to comment by smooth_jazz in The Truth About Protonmail - Privacy Watchdog by Rambler
Possibly. I'm just using it on my Debian desktop. Let me take a look at the settings again. If you don't mind testing it out with me (sending me an email, me sending one back) then shoot me a PM. If not, no worries.
smooth_jazz wrote
Reply to comment by Rambler in The Truth About Protonmail - Privacy Watchdog by Rambler
That's odd. I use it via thunderbird on tails everyday, via their onion servers. Maybe it's because thunderbird on tails comes pre-configured to use Tor? Also I think they use imap and not pop3.
Rambler OP wrote
Reply to comment by smooth_jazz in The Truth About Protonmail - Privacy Watchdog by Rambler
I also have a paranoid.mail address, but it's unclear to me if they're still "around". Although I was able to get the clearnet mailservers working fine, and I love the pop3 access, I wanted to use it over TOR and no matter what, with the information provided, I couldn't get Thunderbird to accept the TOR mailservers.
Rambler OP wrote
Reply to comment by RichardButte in The Truth About Protonmail - Privacy Watchdog by Rambler
The next step is rather to have personal end-to-end, peer-to-peer communication systems.
Which some platforms have, it seems, but then you're stuck communicating to only those within that platform. I believe ZeroNet has something similar, where you could technically email me at nxm9c2wjbjlhjsrc@zeroid.bit but I never check it because no one ever uses it. You can also mail me on I2P's network as well, at (I forget) @mail.i2p, but once again, it's network specific.
Whoever can get the major networks and up-and-comers to agree upon some sort of standardized P2P E2E encrypted mail system that can be accessed from anywhere, then you'd have a winner.
But I doubt that's possible with all the various networks working hard to implement their own vision.
Rambler OP wrote
Reply to comment by !deleted261 in The Truth About Protonmail - Privacy Watchdog by Rambler
This article reads like an NSA operation to convince you to move away from a Swiss based provider (where they can't intercept) to a provider that is based in Germany (a 14-eyes country) or similar jurisdiction where US intel has easy access.
It very well could be, and it's hard telling in this day and age. I just stumbled across the article and thought it was worth sharing and discussing.
For what it's worth, I use protonmail myself.
RichardButte wrote
Reply to comment by boobs in What form of secure messaging is practical for every day use? by Rambler
They updated and users can now send invites on a secondary text messaging platform.
RichardButte wrote
Reply to comment by Rambler in The Truth About Protonmail - Privacy Watchdog by Rambler
E-mail is outdated, the steps required to get truly safe e-mailing is beyond regular users reach and trusting third parties to handle the technical security isn't the right way forward. Look at Tutanota and the recent forced backdooring.
The next step is rather to have personal end-to-end, peer-to-peer communication systems.
smooth_jazz wrote
Reply to comment by diriel in The Truth About Protonmail - Privacy Watchdog by Rambler
Actually, any email provider+PGP is good, but incoming mail may not always be encrypted, and trusting the provider with your keys is a REALLY bad idea. Paranoid does this without storing your private keys like protonmail. They have a no-webmail policy (you'll need a mail client) and encrypt all incoming mail (if unencrypted) with your public key which is the only key they store.
mr4channer wrote
xmpp omemo, irc 6697 port, its all you need. maybe element/matrix if you like normie/zoomer style messaging.
mr4channer wrote
Reply to [Australia] Troll, bully or OFFEND anyone online and you could cop a $110K fine under TOUGH new laws by Rambler
bunch of losers, internet is going to shit
mr4channer wrote
xmpp is superior
mr4channer wrote
Reply to comment by diriel in The Truth About Protonmail - Privacy Watchdog by Rambler
tutanota or mailbox/posteo few bucks a year
Rambler OP wrote
Reply to comment by diriel in The Truth About Protonmail - Privacy Watchdog by Rambler
Unsure, honestly. I use ProtonMail as well. Hoping to see some suggestions by others.
diriel wrote
Reply to The Truth About Protonmail - Privacy Watchdog by Rambler
Thank you for this. Do you know of any actually good Email providers? I have both a Protonmail account and a Tutanota account. Ok, I also have a Gmail as well, I think world plus dog does right?
Rambler OP wrote
Reply to The Truth About Protonmail - Privacy Watchdog by Rambler
What are your thoughts?
boobs wrote
Reply to comment by razorsedge in What form of secure messaging is practical for every day use? by Rambler
briar only works if you have IRL friends that you can meet in person.
boobs wrote
i have legitimately never heard of this service, it sounds like a honeypot.
z3d wrote
If you're looking for an end-to-end encrypted chat app that also handles file transfers and doesn't rely on intermediate servers, you might want to look at I2PChat (formerly I2PMessenger).
It's had an interface overhaul recently and is straightforward to use. No signup required, no metadata to log, a settings folder that's easy to migrate, and cross-platform.
To compile, you'll need to have Qt 5.14 or later installed; the source code is available at: https://vituperative.github.io/i2pchat/
If you're on Windows, a pre-built CI binary is available from: https://ci.appveyor.com/project/wipedlifepotato/i2pchat/build/artifacts
MrBlack wrote
Reply to comment by Rambler in [Australia] Troll, bully or OFFEND anyone online and you could cop a $110K fine under TOUGH new laws by Rambler
Was just a dude named Joey.
Rambler OP wrote
Reply to comment by MrBlack in [Australia] Troll, bully or OFFEND anyone online and you could cop a $110K fine under TOUGH new laws by Rambler
Looks like you caught the attention of the Aussie Special Forces.
RIP
MrBlack wrote
Reply to [Australia] Troll, bully or OFFEND anyone online and you could cop a $110K fine under TOUGH new laws by Rambler
Well that's gay.
BRB, a kangaroo is at my door.
RichardButte wrote
Nothing. There is no secure messengers or services that regular people use. Sure I'm on both Telegram and Signal but "it's another app!" to people. Fine, SMS or nothing then and don't expect me to respond to anything but the most satin of vanilla text. Fuck off with your Facebook messengers!
RichardButte wrote
Reply to comment by razorsedge in What form of secure messaging is practical for every day use? by Rambler
I want to love Briar so much, but as long as it doesn't support backup or exporting user data you're stuck on your current device.
There is literally no way of migrating devices without manually sending new contact info to everyone, you WILL lose everything in your profile and if you lose your phone?
"For journalists who needs security" - Well, I guess you just have to contact your secret sources directly again.
Yes, Briar is currently being worked on. But not the export/migration/backup system, the original issue ticked is FIVE YEARS OLD! Because of that I'm actively warning everybody about this critical issue.
For what it's worth, Briar GTK has direct messaging working on linux desktops.
smooth_jazz wrote
Reply to comment by RichardButte in What form of secure messaging is practical for every day use? by Rambler
If have rooted your phone, you can use something like OAndBackup and copy the backup files to another phone and restore it there. But I don't think a lot of people have root. Would be great if they implemented it though.