this post was submitted on 08 May 2024
265 points (94.0% liked)

Privacy

31975 readers
648 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 6 points 6 months ago

All valid points made in an academic setting. I think the general consensus, and the points other users are trying to make, involve more transparency and proper presenting of the facts in their statements. I have parroted the "oh you should try proton, they're more private and secure" to other people. This is a factual but misleading statement without the nuance of higher OPSEC fundamentals.

Just look at their main landing page for proton mail.

  • Proton Mail's end-to-end encryption and zero-access encryption ensure only you can see your emails. Not even Proton can view the content of your emails and attachments.

  • Proton Mail protects you from these digital spies and prevents companies from monitoring you.

  • your data is protected by some of the world's strictest privacy laws.

  • From newsrooms, activists, and international organizations to academics, Nobel Prize winners, and movie characters, Proton Mail is the trusted choice for secure and private communication. Join over 100 million people worldwide who believe their online privacy is worth protecting.

A common user will look at this and believe that by just having this account, they will be protected. There is no asterisk* beside e-mail recovery explaining the dangers of linking to another e-mail. In fact, a lot of their services promote linking e-mail because you can't use third party verification if you haven't setup your recovery e-mail and/or cell phone verification. I ran into this trying to help an older relative who's paranoid about online accounts, ended up being more hoops and they were dissuaded because it always come down to "enter more information to continue...privately ;)"

The front landing page should have a section explaining everything that's being said here with vpn's, alternative e-mails, and how to really protect yourself with anonymity. To a lot of people, Private+Secure=Anonymous. It's not accurate, but unless you already know the things you have to do to protect your identity, it's not very clear on what the average person should do.