• crispy_kilt@feddit.de
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        It’s basically Chrome. It’s not a real application, it’s a website pretending to be one. It uses a metric fuckton of RAM and eats your battery faster than Prince Andrew a minor.

        • TrickDacy@lemmy.world
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          1 year ago

          If Firefox could allow their engine to be packaged like this I’d use it. The problem I see here is chromium. Everything is a trade off and we need more ways to build maintainable cross platform applications.

          Slack, for example, is Electron and it runs great. One of the best apps I’ve used. And it works better than the browser version…

          The hate on Lemmy of electron is a bit of an overreaction if you ask me. Yeah it uses more ram than is necessary but again everything is a trade off. Not everything can be a hard to maintain rust app. Let’s try to embrace cross platform solutions, though yes fuck chrome/google, so sure criticize that part of it.

          • dan@upvote.au
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            The hate on Lemmy of electron is a bit of an overreaction if you ask me

            The issue is mainly developers using Electron when things like React Native and Flutter exist. I don’t know a lot about Flutter, but React Native uses native UI widgets and feels a lot nicer than Electron.

          • John Richard@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            Let me get this right… you’re complaining about Chromium, but you use Slack? You do realize Chromium had better Linux support for things like HW-accelerated decoding than Firefox? Also, the Chromium sandbox is superior to Firefox.

            • Pantherina@feddit.de
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              Chromium had better Linux support for things like HW-accelerated decoding than Firefox?

              Source? Experienced the exact opposite, especially on Wayland.

              • John Richard@lemmy.world
                link
                fedilink
                English
                arrow-up
                0
                ·
                1 year ago

                You can track the bug history here:

                https://bugzilla.mozilla.org/show_bug.cgi?id=1751363

                You can see here Chromium had support for this for several years prior:

                https://aur.archlinux.org/cgit/aur.git/log/PKGBUILD?h=chromium-vaapi

                Android being based on Linux prob has something to do with Chromium’s strong Linux support, but Mozilla has consistently prioritized Windows/Mac. Despite it still be challenging, building Chromium from source has always been a lot easier IMO than trying to create a custom build of Firefox.

                Regardless, when it comes to privacy, Chromium itself is pretty stripped down and has policy-based integrations that put it on par with Firefox in terms of security. Even with Firefox, you’d have to modify quite a few policies to improve security. Tor/Mullvad Browser though do a better job in many ways and there is no equal to those privacy enhancements on Chromium that I know of, unless you’re using something like GrapheneOS.

                Point being, people like to complain about Chromium a lot & act like Apple fan bois for Firefox, when in reality privacy is nearly the same with both with some minor configurations.

                • Pantherina@feddit.de
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  1 year ago

                  Chromium is not stripped down at all, just use googerteller and see. It contacts Google everywhere, on the password list, on the account list, in some settings pages, and just randomly sometimes.

                  It is very crazy. And also it is not fingerprint resistant at all.

                  I am using all flag settings, policies and GUI settings possibly existing and it still is like that. So no, it is not the same privacy-wise.

                • TarantulaFudge@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  1 year ago

                  What the heck are you talking about? Chromium is one of the hardest packages to build and it takes forever. Firefox has FAR fewer dependencies. Chromium’s privacy enhancements are a joke.

            • TrickDacy@lemmy.world
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              I realize Firefox business practices aren’t total garbage for humanity and that they are constantly working to improve it on like .1% budget of Google. And that they are the only real competition which keeps us in a situation where we actually have a choice in browsers. So yeah let’s only care about the technical aspects, or something

              • John Richard@lemmy.world
                link
                fedilink
                English
                arrow-up
                0
                ·
                1 year ago

                And that they are the only real competition which keeps us in a situation where we actually have a choice in browsers.

                That isn’t true. You’ve got WebKit-based browsers, LadyBird/LibWeb/LibJs, Goanna, and others. Why choose Mozilla to lead the efforts, when another open source community/foundation may be better? You can also participate in the various new web specifications yourself too if you’re not happy with the direction they’re headed.

                • myxi@feddit.nl
                  link
                  fedilink
                  English
                  arrow-up
                  0
                  ·
                  edit-2
                  1 year ago

                  They said competition, not alternatives. As things are right now, and knowing people, not just trying to make a technical point, Firefox is the only competition.

          • crispy_kilt@feddit.de
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            Rust is infinitely easier to maintain than mountains of untyped js garbage libraries built upon left pad

        • TheAnonymouseJoker@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          No, one Chrome tab does not eat that much RAM. Yes it is not as good as native, but it is more platform agnostic, and an Electron app does not really go above 300 MB RAM.

      • gencha@feddit.de
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        It’s what you deploy to your users if you want to work around ad blockers and browser extensions. It’s a great tool to get operating system level access to exfiltrate information about your users and identify them uniquely, even if they would prefer that not to happen.

        All that with the help of Google’s telemetry engine aka Chrome, which further helps Alphabet to manifest their interpretation of web standards in the world.

        We worked to move things onto the web. Now people bring the web back to your desktop with every application bringing it’s own browser shell. We have come full circle and we’re now using 10x the resources.

        Electron is the prime example of everything that is wrong in IT.

        • JetpackJackson@feddit.de
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          Wow. That sounds horrible. Do you have a source about the system level access statement? I would like to see people’s thoughts on it, if it’s as bad as it sounds, I’m surprised I haven’t heard about it before

          • dan@upvote.au
            link
            fedilink
            arrow-up
            0
            ·
            edit-2
            1 year ago

            Do you have a source about the system level access statement?

            Electron apps are native apps with the Chromium browser embedded in their windows, so they can do anything a native app can. It supports Node.js modules for things like filesystem access, and can interop with C++ code by writing an add on (https://nodejs.org/api/addons.html)

          • gencha@feddit.de
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            What source do you need? It’s almost literally the mission statement of Electron.

          • AProfessional@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            edit-2
            1 year ago

            Do you have a source about the system level access statement?

            It’s literally what it is… a native app bundling chromium. As a native app obviously it can do anything.

        • TrickDacy@lemmy.world
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          Slack desktop app is built with electron and works much better than the web app in my experience. So no it’s not actually always that simple.

          • Gallardo994@sh.itjust.works
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            Slack is one of those apps which lags in a week on any hardware, it might be better than web version but it still sucks ass compared to fucking ICQ clients. Source: using it in the company I work for, for about 7 years already.

            • TrickDacy@lemmy.world
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              I don’t often have trouble with slack being slow, or buggy. Been using it like 9 years myself. Interesting you’re comparing slack to icq. Are you referring to a current version of icq, or the one that existed in the early 2000s?

              I am not sure I understand comparing an app designed to do video/audio chat seamlessly, threaded conversations, channels, filesharing, plus has dozens of subtle nice features that make for a rich experience and a… Chat app, that worked fine for sending plaintext messages but didn’t really do anything else.

              • Gallardo994@sh.itjust.works
                link
                fedilink
                arrow-up
                0
                ·
                1 year ago

                I compare it to qip or similar with voice calling support about 10 years ago. But still, Slack loses to pretty much anything on the market regarding performance, be that Element, Telegram, Skype or even Discord. It literally battles with biggest IDEs lol

          • phar@lemmy.ml
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            It could be that simple. They just hinder their own website to get you to download the app.

          • John Richard@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            Now that Chromium has persistent File System Access permission support, what benefit does Electron have over a PWA other than “Native-looking” menu bars?

      • Pantherina@feddit.de
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Electron runs a core Chromium Browser + NodeJS + a bit more.

        Unlike Chromium itself it is not backwards compatible and removes a ton of things like its sandboxing capabilities.

        I am not sure how it is less secure, but it may use more RAM (also not always but generally yes of course), doesnt allow hardening (unlike android WebView apps) and breaks LD_PRELOAD-ing another memory allocator.

        This is only a big problem in special cases, in general it makes apps strictly dependend on GNU glibc and others, no idea how it works on Alpine or others (that actually try to make a secure system).

        If somebody knows more about security concerns about Electron, please add.

      • TherouxSonfeir@lemm.ee
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        There are other options like Tauri that do the same thing as electron, but instead of bundling chromium with the app, it relies on the OS provided web view. It’s also built with Rust, which tends to be faster.

        As an example, Mac would use Safari, Windows would use Edge (chromium), and Linux would likely use WebKitGTK, which is what safari uses.

        By using the default browser, developers save a ton of space—at the risk of compatibility issues, which are very very rare nowadays.

      • BananaTrifleViolin@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        Each electron App is actually a full independent chromium browser install running a website. It’s easy to code for and works cross platform as a result, but it’s essentially just a website, although they can run offline depending on what’s been built in to the local app.

        Each electron app running on your system is a separate full chromium app running, with no sharing of resources between each instance. So they take up a lot of space each and duplicate all the resource usage, and potentially the security flaws.

    • sudneo@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      They generally require to have data visible on the server and/or handle independently encryption/decryption with related tools and key management (including key discovery).

      For some, it might be worth, for 99% of the population who wouldn’t be able to do this but also doesn’t want their content availablento the provider, it’s not.

  • psycho_driver@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Speaking of mail apps, has anyone used Thunderbird recently? I had used it for a year or two up until . . . a year or two ago (probably two or three, actually) and then switched to kmail to satisfy my masochism. Thunderbird just hadn’t been doing it for me with meh functionality and slightly more meh looks.

    Fast forward to yesterday when I’m updating my steamdeck desktop to use nix stuff instead of rwfus+pacman and I couldn’t get kmail from nix to behave right so I thought I’d give thunderbird another look. I’m several hours into tinkering with it and holy hell has it changed pretty much completely from a few years ago. Looks fantastic and works pretty much exactly how I want/expect it to. Good job mozilla!

    • Pantherina@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Thunderbird is fine.

      Tbh I have no idea what they are doing though, they have more funding than GNOME but after Supernova I didnt see any updates.

      See my list of flatpak repositories

      There is an unofficial Thunderbird nightly Flatpak, that will likely reveal what the hell they are doing.

      So Supernova is kinda nice, mainly a big overhaul of the underlying stuff, making it easier to maintain.

      It lacks a ton of things like Threads (the addon TB Conversation works though). Also their “spaces” bar is useless, as it just opens tabs, so it is redundant. Good idea, but only if it could replace tabs.

      Their search and filter stuff is still the same, really bad. Either displaced in the message list column, as the global search still opens a new tab which is kinda bad UI.

      Some addons broke too, not a big deal though.

      I have the feeling they removed nested filters, which is extremely bad, but filters still work.

      Thunderbird works well.

      • uncertainty@lemmy.nz
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        I’ve never found Thunderbird search bad compared to alternatives, as long as I’m not looking to find content inside attachments. Really fast and responsive and being a desktop client without paginated results makes moving and deleting in bulk so much easier. Would love it to be as powerful as Voidtools Everything to get a bit more granular sometimes but otherwise pretty happy with it.

        • Pantherina@feddit.de
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          I mean, I think their global search is not that useful, while their inline mail list search is. So I have a cluttered UI with 2 search bars, to supplement the incomplete inline search.

      • deweydecibel@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        I believe I read somewhere they’re focusing heavily on the mobile app at the moment (or rather turning K-9 into their mobile app). Once they get that out, we’ll see where the desktop goes.

    • BananaTrifleViolin@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Yeah I’ve started using it again the past year. I use Proton Bridge with Thunderbird, and it works well. Much prefer it to webmail interfaces.

    • Grimpen@lemmy.ca
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Just started using Thunderbird again a couple of months ago. Like it! I never really stopped liking it, just stopped using it because all the webmail interfaces and “appification”.

      Was just trying to get K-9 Mail working on my phone again (after years of using umpteen different apps) and it’s not as smooth as I remember.

  • Yerbouti@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    So, what is general concesus about Proton, is it safe or not? I dont use it because you need to pay for Bridge to use it in Thunderbird. Maybe I would use if it has a dedicated app.

    • philpo@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      It depends on what you want. If you want a solution that makes sure your provider won’t be able to read your data? It is sure safe for that.

      Generally I would distrust any company claiming that our swiss privacy laws are worth a dime - in fact they are shit and among the worst in Europe. Swiss intelligence laws actually force companies to cooperate in a much broader sense than even the national security laws in the US do. And of course there is no judge involved and they can basically share the collected data with whoever they want.

    • illectrility@sh.itjust.works
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      It’s pretty great. Especially considering that you get a full ecosystem with Mail, Calendar, Drive, VPN and Pass.

      I would also like to take this opportunity to shout out murena.io. They host open source cloud solutions. You get a Nextcloud with OnlyOffice and lots of other goodies and their pricing is pretty good

      • Grangle1@lemm.ee
        cake
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        The people behind Murena are also the devs of /e/OS, a de-Googled Android OS that they also sell phones they pre-load it on. My one critique of it so far, owning one of the phones, is that I wish they would work on making it compatible with more well-known phone models available outside Europe. They sold this model I’m using, the Murena One (some Chinese OEM they slapped their name on), here in the US through their website, but I had to run around for two days trying to find a carrier whose service would work on it (or who would even try - eventually T-Mobile worked, the European-based carrier, what a surprise…) and I can’t get anyone to do repairs on it because it’s not one of the well-known brands. The case they gave me for it is essentially purely cosmetic, and only a week or so into owning it, I dropped it at a restaurant and it got a huge area of dead pixels at the bottom of the screen that nobody will fix because they can’t get a new screen for it. If I could install /e/OS myself on more than just the Google Pixel (paying Google to not have to use Android, fun…) that would be great and solve my problems.

          • Grangle1@lemm.ee
            cake
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            I’ve looked at the list. The only model that could give me what I’m looking for (5G, actually familiar to US-based carriers and repair shops) is the Pixel. I understand it’s not all the fault of the /e/OS devs since there’s factors like many bootloaders not being unlockable on US phones or other hardware complications, but I do get the feeling that the North American market does tend to be an afterthought. From what I can see, a majority of the list is either only available in Europe or will only work with very few carriers here, with lack of 5G capability being a big setback for carrier compatibility. That 5G requirement for many carriers really does hurt European based phone tech compatibility over here quite a bit.

      • John Richard@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        So how would you sync your Proton Passwords with NextCloud, or with VaultWarden? Or actively sync them locally to be used with an open source app?

        Oh, that’s right… you can’t. Proton will say… “Just trust our payloads bro! There is no way we’d ever deliver a modified payload to get your password. Sorry you can’t sync your calendar & contacts, just use our Windows apps.”

        • illectrility@sh.itjust.works
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          I wouldn’t? I suggested Murena as a Proton alternative. I don’t know if they have a password manager right know but you can always throw a KeePass database into your Nextcloud.

          • John Richard@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            My sincerest apologies. I misread the thread and thought you were advocating for Proton, which IMO is a questionable company. Thanks for the clarification.

            • illectrility@sh.itjust.works
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              I use both. Proton fits most of my needs, Murena does the rest. I’m not attached to any of them though, if I’m given good enough a reason, I’ll drop Proton immediately

              • John Richard@lemmy.world
                link
                fedilink
                English
                arrow-up
                0
                ·
                1 year ago

                At least you’re open to moving on. I think keeping an open attitude in any scenario is prob the best option. For most people, I’d recommend they keep using whatever works for them. If you’re happy with Proton then switching may just cause frustration. However, if you’re very much security focused and also care about things like being able to access your calendars/contacts in the apps you want, then I’d prob suggest just using SimpleLogin for email with their GPG feature, vaultwarden for passwords (you can still use the BitWarden phone apps), and Nextcloud for Calendar/Contacts which also supports DAVx for mobile.

                • illectrility@sh.itjust.works
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  1 year ago

                  I do use the SimpleLogin aliases, it’s one of my favorite services they offer. Most of my web storage (which I barely use anyway) and calendar and stuff is all Nextcloud

    • John Richard@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Neither. The single app that Proton has done somewhat right with is their VPN and only because they haven’t eliminated port forwarding. Everything else they’ve utilized non-standard protocols and failed to provide source code or API docs. They basically said that users are too stupid to protect themselves, and that you should just trust them to do it for you.

      They failed to provide CalDav & CardDav syncing for things like calendars & contacts, IMAPS for mail, and prioritized things like their cloud-only password store. They had no valid reason not to use standardized protocols other than to prevent their users from actively syncing local copies of their data to integrate with privacy-friendly open source software. They act like Apple & a lot of their users prob. are Apple fan bois who will trust a company no questions asked. I have no reason to trust them whatsoever.

    • Darken@reddthat.com
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Using pidgeons since they can’t speak and no one would suspect you sending a pidgeon anymore in 2024

  • Spectranox@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    Proton Drive though 😭. The Windows app is so nice, wish we could get that for Linux.

    I’ve set up an Rclone for the time being, not great but it works well enough for basic bisynchronisation.

      • Spectranox@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        I would too, but after like a week I get bored of maintaining it myself when all the expenses summed together aren’t much cheaper than Proton or likewise. This is what I was doing before submitting my independence to Proton.

        Furthermore Nextcloud is just too damn sluggish. The web interface makes it seem like my server’s idea of a CPU is a kid with a calculator and WebDAV isn’t designed for cloud storage. I’ll take new features being slow over my whole experience being even slower any day of the week.

      • Molecular0079@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        You should do it. Easy to setup using either their official AIO image or the community-driven micro service one. I am using the latter and it’s been amazing. It’s completely replaced Google Drive, Calendar, and Contacts for me and with the DAVx5 Android App it feels like a drop-in replacement. I am also using the auto upload feature to back up my photos to it.

    • Kcg@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      The proton desktop app was pretty slow when i checked it. I might give thunderbird a go.

    • illectrility@sh.itjust.works
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      1 year ago

      Not only is this article three years old, it is also lacking in terms of sources. Additionally, the language and phrasing is quite inappropriate for the purpose of spreading the information. Lots of text is just mean and offensive without any actual purpose.

      It also seems to be largely based on speculation rather than actual solid evidence.

      I’m not against investigating the legitimacy of established and trusted privacy-first providers. However, this seems a bit lackluster.

      Also: Email is inherently insecure, we all know that. Proton services are open source, independently audited and verifiably E2EE, except for Mail, which uses PGP for the emails themselves and E2EE to store them.

          • Sybil@lemmy.world
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            they say plainly what they don’t know. what they don’t know, you don’t know. and if you don’t know, you are trusting on faith, not evidence.

    • notepass@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Yep. Installed it, started it, saw it is basically the website in an embedded browser, uninstalled it.

      Like, come on, you have a web version. Why should I use an extra application to view a website. This seems like a cheap excuse for a desktop app.

  • youmaynotknow@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Yeah, Proton is awesome, that’s for sure. Now, being a “security and privacy” company, it blows my mind that they put so much effort on making apps for Windows and Mac first, leaving Linux behind, and when they finally get to it, they just dump in a glorified PWA. This world is really weird 🤣🤣

    • summerof69@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      it blows my mind that they put so much effort on making apps for Windows and Mac first, leaving Linux behind

      Because most people use Windows and Mac, including their clients. It’s not the world that is weird, it’s people who don’t understand such basic things. You don’t focus on 5% of your users.

    • dco@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      And that they decided to go with RPM and DEB instead of just doing a Flatpak

      • BCsven@lemmy.ca
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        I prefer rpm over flatpak. at least I know any os dependency updates are happening regularly, flatpak may not get weekly dependency updates from proton

        • Euphoma@lemmy.ml
          link
          fedilink
          English
          arrow-up
          0
          ·
          1 year ago

          Its kinda annoying for anyone not on debian or fedora (and derivatives) though.

          • BCsven@lemmy.ca
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            I’m on OpenSuse which will take a Fedora RPM, and most will take deb, if they don’t you can uae the alien tool to convert it for your OS…extra steps which sucks

            • AProfessional@lemmy.world
              link
              fedilink
              English
              arrow-up
              0
              ·
              1 year ago

              OpenSUSE does not have Fedoras ABI or package names. The RPMs aren’t compatible.

              This one might work as its just Electron.

              • BCsven@lemmy.ca
                link
                fedilink
                arrow-up
                0
                ·
                1 year ago

                I installed it and it works. i have also installed other Fedora RPMs. RPM can contain repo links to dependecies needed. or just contain all the libraries needed. OpenSUSE will install it and just treat them as Orphaned Packages (in the later case)

      • QuandaleDingle@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        Are you kidding me? Doesn’t bother me that much, as I use Thunderbird with Protonmail bridge. I’m still waiting on Proton Drive for linux. Well, I’m gonna end up self hosting at this point. :(

    • You999@sh.itjust.works
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      1 year ago

      Proton being a “security” company is like calling TSA a “security” department. It’s technically true so long as you don’t look behind the curtain into the security theater.

      Let’s not forget they Gave law enforcement IPs of activist while claiming they don’t keep IPs Only to scrub those claims after getting caught

      Proton was also accused of giving out email meta data (which is unencrypted)

      If you want security only use services and applications that are open sourced and where you control your encryption keys.

      • linearchaos@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        I mean, if you want secure/private communication, email should not be your go-to. It’s a horrible platform by today’s standards. It was never designed to have any serious level of security. Once they have an unencrypted email on the target with timestamps and mail headers, all they need to do is see who was communicating with Proton at that point. I don’t know if anything has changed since the PRISM days, but back in the 2000s, they definitely had that level of insight into the web.

      • sudneo@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Companies have to comply with law enforcement. If anything, the little amount of data they were able to give after being forced is a good proof of their overall claim. If there is someone to blame here are courts using antiterrorism laws to catch environmental activists.

        • You999@sh.itjust.works
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          I’m not, the comment I was replying to literally called proton a “security and privacy” company.

        • pixelscript@lemmy.ml
          link
          fedilink
          English
          arrow-up
          0
          ·
          1 year ago

          They mutually imply one another.

          If something was private, but not secure, well, that implies there are ways to breach the privacy, which isn’t very private at all.

          If it’s secure, but not private, that implies it’s readable by someone other than the consenting conversational parties, which makes it insecure.

          • CosmicTurtle@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            Privacy: I have blinds on my windows. I control whether they are open or closed, but they aren’t secure. You could break a window and look inside if you really wanted to.

            Security: my glass storm door has a lock. But privacy is only there when I close the front door.

            There is overlap between these two concepts but one does not imply the other.

      • TheAnonymouseJoker@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        If you just did this little thing, you would convey your point very well. Proton is unfit for activist and journalist tier threat models. You could link Moon Of Alabama blog articles. Proton is better than Gmail and Outlook, but it is no saint. It is enough to achieve good basic privacy and security, but not bulletproof in worst cases.

      • youmaynotknow@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        That’s why I put “security and privacy” between quotes. I have absolutely Jo way to confirm if they are secure and private or if they’re not, other than all the contradicting mentions all over the internet. Also, while security and privacy may not be mutually dependent in the physical world, it stands to reason that something insecure cannot be private, and something not private is inherently insecure, as @pixelscript@lemmy.ml clearly pointed out. As for controlling my own email infrastructure, I’d love to, as everything else I do self-host, and only with FOSS software. However, email hosting is a seriously complicated animal that requires too much effort and maintenance, and most of us dont have the knowledge and time to invest in that, so compromises need to be made. I am well aware that there’s always risk on using something I have no real control over, but the alternative meets the reason for the phrase “the treatment is worse than the decease”.

          • youmaynotknow@lemmy.ml
            link
            fedilink
            arrow-up
            0
            ·
            1 year ago

            I had no idea. That’s good information to have. And my wife doesn’t get why I spend so much time in Lemmy. I learn more here than with all the online courses I take regularly put together. I love this community.

  • baritone_edge@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Closed source honeypot. There’s no safe email protocol. Just use Gmail and call it a day, it has better free features anyway.

    • Possibly linux@lemmy.zip
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Gmail requires that you use proprietary software. Anyway just because email is insecure doesn’t mean you should jump into the pot

      • John Richard@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        No it doesn’t. You can use free Gmail with IMAPS & GPG-encrypt all your messages if you want to. I don’t know why you’re spreading lies, other than you’re just too oblivious to know better.

          • John Richard@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            This is the dumbest argument. You can’t create a Proton account without non-free JS either. Once you enable IMAP in Gmail, you don’t have to sign in using the browser. Are you really going to argue this? I mean, you can just admit you don’t know enough about security and that you trust Proton just cause they make you feel warm & fuzzy or whatever.