596
Well, that seems bad (media.piefed.world)
submitted 10 months ago by to c/politicalmemes@lemmy.world
75 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 10 months ago* (last edited 10 months ago) (4 children)

One security/privacy feature touted by some companies is that they keep no logs and no records. Some even claim that their entire system runs in volatile memory so there is no possibility of data being recorded. Of course, you are trusting that they are both telling the truth and competently executing the system.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 5 points 10 months ago (3 children)

    Of course, you are trusting that they are both telling the truth and competently executing the system.

    that is the thing, you have to trust them. unless they are intentionally malicious actor and if the law of country where they resides allows it, then not keeping the logs is quite hassle-free and actually cheaper than otherwise, so there is a reason to trust them, but you never know.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 10 months ago

    They don't have to be malicious if they are incompetent.

    They could say they don't use logs and not realize that their tech stack is actually keeping some sort of metadata or maybe using swap or something. Probably not as likely as the other scenarios, but I wouldn't count it out completely.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 10 months ago (1 child)

    That's the thing with anything cybersecurity is trust. Unless you wrote all of the firmware and software and websites and webservers yourself you are ultimately placing trust in another entity.

    VPNs are just a technical means of shifting trust. Corporations use VPNs for remote work because the VPN connects the employee to the corporate network which they already trust, rather than trusting whatever wifi the employee happens to connect to. For a consumer using a commercial VPN the only thing you're doing is shifting your trust from the network provider to the VPN provider. You're not even really hiding anything from websites thanks to modern browser fingerprint techniques, they just see "user #64742258 but from a known VPN endpoint instead of the usual Spectrum residential network in Maryland, 86% match"

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 10 months ago

    That’s the thing with anything cybersecurity is trust.

    luckily not everything, but i think about this every time i am using android keepass implementation written by god knows who 😆

  • permalink
  • fedilink
  • source
  • parent