[–] 8 points 3 weeks ago

Aylo’s lawsuit does not challenge SB 73’s provision prohibiting the websites covered by the law from sharing information about VPNs.

So mentions of VPNs on their websites still have to be policed?

  • source
  • [–] 3 points 3 weeks ago

    Open source means you can audit how the application transfers data. Of course you can't audit parts of infrastructure and data retention, but you would be able to know if they're using an outdated dependency or if they're not using a good encryption algorithm if they're running an open source project.

  • source
  • parent
  • context
  • [–] 5 points 3 weeks ago (1 child)

    So that's all they had on him? Or all the gov asked for?

    I will have to re-visit telegrams privacy policy at some point, but aren't they known for storing quite a lot of info (at least when compared to other private messengers like Signal?)

  • source
  • [–] 13 points 3 weeks ago* (last edited 3 weeks ago) (2 children)

    From a purely opsec standpoint, it doesn't really matter whether the backend is open source or not. Either way you can't know what kind of data is being shared and whether metadata is being deleted or not. What actually matters is that the client is open source and thoroughly reviewed by independent 3rd parties. With a good messaging app, it shouldn't matter what runs on the server. And it is known that Telegram's client uses some weird in-house crypto and doesn't encrypt chats by default.

    This is why I'm not going to ditch Threema, even though its backend isn't open source. I think they have a solid business model, which is why I support them. I still prefer Signal though.

  • source
  • parent
  • context
  • [–] 1 point 1 month ago (1 child)

    I'm trying to understand your thinking. I don't see the evil in buying a company to learn what they know. Buying standard notes resulted in proton docs, but standard notes is still there. Simplelogin is still there. I don't see how they are "destroyed".

  • source
  • parent
  • context
  • [–] 2 points 1 month ago* (last edited 1 month ago) (2 children)

    Let's turn our attention back to "what about Proton's business model is evil", where I told you two evil things Proton did that apparently aligned with its business model: Destroying two competitors.

    The only apparent defense you have for these two evils is to say a different thing is not apparently evil (vendor lock-in?) but a lack of evil does not absolve evil . I'd rather focus on that than being dragged down into a pedantic debate about which types of Proton emails really do lock users in (as anyone who has ever signed up for a website with an email address will tell you, it does).

  • source
  • parent
  • context
  • view more: ‹ prev next ›