▲ 120 ▼ Is WhatsApp safe? Not according to its ex-security chief | Proton (proton.me) submitted 1 year ago by Blaze@piefed.zip to c/privacy@programming.dev 35 comments fedilink hide all child comments
[+] monogram@feddit.nl 14 points 1 year ago (11 children) [deleted] permalink fedilink source hideshow 11 child comments replies: [–] DahGangalang@infosec.pub 8 points 1 year ago (5 children) Both being unsafe seems the most probably state of things. Still, something unsafe can still be safer than every other option ¯\_(ツ)_/¯ permalink fedilink source parent hideshow 5 child comments replies: [+] monogram@feddit.nl -4 points 1 year ago* (last edited 1 year ago) (4 children) [deleted] permalink fedilink source parent hideshow 4 child comments replies: [–] loudwhisper@infosec.pub 4 points 1 year ago What open standard (that are not used by proton too)? If anything proton uses GPG while tuta uses a custom system (which is why they also encrypt the subject). permalink fedilink source parent [–] Jason2357@lemmy.ca 3 points 1 year ago Proton does PGP for you. There are countless standards compliant mail services where you could use your own email client and do your own PGP -Thunderbird is probably the easiest but It’s a trade-off. permalink fedilink source parent [–] onlinepersona@programming.dev 1 point 1 year ago* (last edited 1 year ago) (1 child) Tuta also locks you down with their lack of IMAP support. You can only use their client. At least Proton has a bridge and allows you to use your own GPG key. Anti Commercial-AI license permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] popcar2@programming.dev 17 points 1 year ago* (1 child) Proton’s official account said the company was “alerted by a CERT that certain accounts were being misused by hackers in violation of Proton’s Terms of Service,” Proton’s CEO later announced that the accounts were reinstated, following another post by the company that said the company does “stand with journalists,” but that it “cannot see the content of accounts and therefore cannot always know when anti-abuse measures may inadvertently affect legitimate activism.” Sounds reasonable to me? It's not a good look but it sounds like they quickly re-instated the closed accounts. The article title is misleading. permalink fedilink source parent hideshow 1 child comment replies: [–] Forbo@lemmy.ml 8 points 1 year ago The only reason they reinstated the accounts was because people blew them up on social media. If the appeals process failed them, it will definitely fail the average joe who doesn't have the same level of influence online. I've been a paying Proton user for years, and had already been looking for the exit, but this is the straw the broke the camel's back. Using Nym for my VPN now, looking to migrate my other services soon. permalink fedilink source parent [–] BananaTrifleViolin@lemmy.world 2 points 1 year ago That doesn't make WhatsApp safe. Proton having it's own issues does not invalidate what they're sharing about WhatsApp concerns. permalink fedilink source parent [–] Fontasia@feddit.nl 2 points 1 year ago This does feel like a random lash out after this story, the reports of the CEO earlier this year and the reports that they were going to move out of Switzerland. Let's just randomly punch down at something the vast majority of our users wouldn't trust already? I'd understand writing something like this if they were about to launch their own messenger product. But even then, this article doesn't offer anything new. permalink fedilink source parent [–] 6nk06@sh.itjust.works 1 point 1 year ago Even their CEO did not practice safe sex when he sucked the dick of Trump without a condom. permalink fedilink source parent
[–] DahGangalang@infosec.pub 8 points 1 year ago (5 children) Both being unsafe seems the most probably state of things. Still, something unsafe can still be safer than every other option ¯\_(ツ)_/¯ permalink fedilink source parent hideshow 5 child comments replies: [+] monogram@feddit.nl -4 points 1 year ago* (last edited 1 year ago) (4 children) [deleted] permalink fedilink source parent hideshow 4 child comments replies: [–] loudwhisper@infosec.pub 4 points 1 year ago What open standard (that are not used by proton too)? If anything proton uses GPG while tuta uses a custom system (which is why they also encrypt the subject). permalink fedilink source parent [–] Jason2357@lemmy.ca 3 points 1 year ago Proton does PGP for you. There are countless standards compliant mail services where you could use your own email client and do your own PGP -Thunderbird is probably the easiest but It’s a trade-off. permalink fedilink source parent [–] onlinepersona@programming.dev 1 point 1 year ago* (last edited 1 year ago) (1 child) Tuta also locks you down with their lack of IMAP support. You can only use their client. At least Proton has a bridge and allows you to use your own GPG key. Anti Commercial-AI license permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[+] monogram@feddit.nl -4 points 1 year ago* (last edited 1 year ago) (4 children) [deleted] permalink fedilink source parent hideshow 4 child comments replies: [–] loudwhisper@infosec.pub 4 points 1 year ago What open standard (that are not used by proton too)? If anything proton uses GPG while tuta uses a custom system (which is why they also encrypt the subject). permalink fedilink source parent [–] Jason2357@lemmy.ca 3 points 1 year ago Proton does PGP for you. There are countless standards compliant mail services where you could use your own email client and do your own PGP -Thunderbird is probably the easiest but It’s a trade-off. permalink fedilink source parent [–] onlinepersona@programming.dev 1 point 1 year ago* (last edited 1 year ago) (1 child) Tuta also locks you down with their lack of IMAP support. You can only use their client. At least Proton has a bridge and allows you to use your own GPG key. Anti Commercial-AI license permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] loudwhisper@infosec.pub 4 points 1 year ago What open standard (that are not used by proton too)? If anything proton uses GPG while tuta uses a custom system (which is why they also encrypt the subject). permalink fedilink source parent
[–] Jason2357@lemmy.ca 3 points 1 year ago Proton does PGP for you. There are countless standards compliant mail services where you could use your own email client and do your own PGP -Thunderbird is probably the easiest but It’s a trade-off. permalink fedilink source parent
[–] onlinepersona@programming.dev 1 point 1 year ago* (last edited 1 year ago) (1 child) Tuta also locks you down with their lack of IMAP support. You can only use their client. At least Proton has a bridge and allows you to use your own GPG key. Anti Commercial-AI license permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] popcar2@programming.dev 17 points 1 year ago* (1 child) Proton’s official account said the company was “alerted by a CERT that certain accounts were being misused by hackers in violation of Proton’s Terms of Service,” Proton’s CEO later announced that the accounts were reinstated, following another post by the company that said the company does “stand with journalists,” but that it “cannot see the content of accounts and therefore cannot always know when anti-abuse measures may inadvertently affect legitimate activism.” Sounds reasonable to me? It's not a good look but it sounds like they quickly re-instated the closed accounts. The article title is misleading. permalink fedilink source parent hideshow 1 child comment replies: [–] Forbo@lemmy.ml 8 points 1 year ago The only reason they reinstated the accounts was because people blew them up on social media. If the appeals process failed them, it will definitely fail the average joe who doesn't have the same level of influence online. I've been a paying Proton user for years, and had already been looking for the exit, but this is the straw the broke the camel's back. Using Nym for my VPN now, looking to migrate my other services soon. permalink fedilink source parent
[–] Forbo@lemmy.ml 8 points 1 year ago The only reason they reinstated the accounts was because people blew them up on social media. If the appeals process failed them, it will definitely fail the average joe who doesn't have the same level of influence online. I've been a paying Proton user for years, and had already been looking for the exit, but this is the straw the broke the camel's back. Using Nym for my VPN now, looking to migrate my other services soon. permalink fedilink source parent
[–] BananaTrifleViolin@lemmy.world 2 points 1 year ago That doesn't make WhatsApp safe. Proton having it's own issues does not invalidate what they're sharing about WhatsApp concerns. permalink fedilink source parent
[–] Fontasia@feddit.nl 2 points 1 year ago This does feel like a random lash out after this story, the reports of the CEO earlier this year and the reports that they were going to move out of Switzerland. Let's just randomly punch down at something the vast majority of our users wouldn't trust already? I'd understand writing something like this if they were about to launch their own messenger product. But even then, this article doesn't offer anything new. permalink fedilink source parent
[–] 6nk06@sh.itjust.works 1 point 1 year ago Even their CEO did not practice safe sex when he sucked the dick of Trump without a condom. permalink fedilink source parent