• 0 Posts
  • 44 Comments
Joined 3 years ago
cake
Cake day: March 28th, 2023

help-circle



  • I find this stuff interesting. It’s real distinction from Mullvad seems to be its “decentralized” model. Best I can tell, anyone can set up a server, stake some crypto collateral, and act as a link server in return for a share of pay.

    While I think this model can work, my fear is that it’s subject to the same vulnerability as the Tor network - If the five eyes control a big portion of nodes (and given they’re profitable to run, why wouldn’t they do this?), then they can follow your traffic easily.

    Chances are, like with Tor, that this fear is a bit overblown. But it’s very hard to know. I think the model (anyone can run a server) does have its own, probably equal weaknesses, compared to a single name (eg Mullvad) who stand to lose their entire business the second they’re suspected to be giving up data to authorities.


  • I think Proton are decent, but they aren’t great. Proton recently were legally forced to give up user information to the FBI by Swiss-US agreements after identifying a protestor’s email address. The VPN’s a slightly different ballgame, but the risk I’d say is meaningfully higher still.

    Mullvad’s cash and Crypto acceptance, as well as its determination to hold onto no information, makes it significantly better. Whereas Proton will and have to give up whatever they’ve got. Depends on your sensitivity to risk.











  • Yeah no.

    “Turning off a smart feature means your Workspace Content & Activity will no longer be used to improve the relevant smart features moving forward. The learnings developed from this improvement process may persist even after you turn off a smart feature.” “turning off a smart feature setting means that your Workspace Content & Activity would no longer be actively processed to improve the relevant smart features.”

    That includes GMail and basically all your Google stuff. So they’re absolutely free to “improve their features” based on all your shit, and that would pretty certainly include Gemini.


  • To be fair, a ‘strong’ password isn’t likely to help all that much.

    Those compromised account lists are almost exclusively from websites that were hacked to harvest passwords, or didn’t hash their passwords sufficiently in the first place.

    Making a strong password is obviously ideal. But people are generally better off with some basic in-browser password management - avoid password reuse is the real big deal. Maybe diceware is the thing to use if there’s a specific password you need to actually remember and re-type across devices