this post was submitted on 30 Jun 2026
808 points (98.8% liked)

Technology

86682 readers
4546 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] digital_alchemist@discuss.tchncs.de 23 points 3 weeks ago (3 children)

ffs - first Proton, now this.

I've never liked the idea that I have to trust my VPN, and this news raises a pretty significant trust issue. Makes me think I've been approaching this from the wrong angle.

Anyone have experience with the TOR daemon?

[–] rumba@lemmy.zip 4 points 3 weeks ago

I've been looking at TOR, I2P, Reticulim, Freenet, Snowflake, IPFS

Tor get's blocked a lot. It's the fastest of the options. The level of anonymization is ok. If you piss off a nation-state, it may not protect you sufficiently. It's had a history of leaks, If an intelligence ag owns enough of the exits, timing attacks might out you.

I2P is more secure, harder to block, but it's really slow and has very limited access to the clearnet. It's also super easy to DDOS. There are some torrents, forums and chatrooms out there on i2p, latency is rough.

Reticulum is pretty cool. It's a protocol and you access things like nomad net on it. It's crypto is good, there's no clearnet access. It may have issues when/if it scales

Snowflake is slow AF, mainly used to get anonymous access out from restricted nations-states.

IPFS web3 crypto storage. you can host files/sites on it. It's kinda hard to make stuff on there go away, it's also kinda hard to get stuff to stay. If you're not paying a pinning service, even daily scripting the pins to keep data up there is a losing battle. It's slow, fragile, not very anonymous.

[–] joker125@lemmy.world 2 points 3 weeks ago (2 children)

I’m out of the loop. What happened with proton?

[–] digital_alchemist@discuss.tchncs.de 17 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

Public statements of support from its CEO for a regime actively weaponizing technology to build a mass-surveillance state.

Removing its no logging policy after being compelled by court order to log and disclose a user’s IP and browser fingerprint.

Personally, I gave up on Proton after they amended their TOS to include a mandatory arbitration clause, including a ban on class action lawsuits. IMO only the dirtiest of corporations rely on mandatory arbitration clauses. Without the spectre of a class action lawsuit, if a VPN were to get caught breaking its promises to its users, the only real damage the company would likely suffer would be reputational. These are for-profit corporations. The only way we can hold them accountable is to put their profits at risk.

edit: looks like @oce beat me to it

[–] caschb@lemmy.world 1 points 3 weeks ago (1 children)

I do wonder what could they have done in the email case? I don't think that there's any country where they could just let you not comply with a court order. And due to how email works they can't just encrypt the subject lines or the sender/receiver.
In that one case I lean more into pointing more fingers to the Swiss government, rather than to proton. They're still not blameless tho, maybe they could have used some sort of canary to let people know they were being surveilled, and be more clear on how to avoid these situations.

[–] rumba@lemmy.zip 3 points 3 weeks ago

Don't log it, you can't be compelled to hand over data you don't have. They said outright that they didn't log it.

Run SMTP purely on IO sockets. Don't make files. You draft your email into your own cryptographically secure blob, When it's time to send it, you fire it through an SMTP daemon built to use memory only, once it's gone it's gone. If the govt wants that data, they can go to the ISP for it. Maybe it communicates securely with SMTP servers set up in countries that are actually good at observing privacy.

Good Guy security provider could also terminate your account or lose your password.

The thing is, they oversold their security. They're STILL overselling their security. The release rabid PR dogs / Trolls out there to discount/discredit people bitching about the situation.