• 0 Posts
  • 54 Comments
Joined 2 years ago
cake
Cake day: July 11th, 2023

help-circle


  • Transitioning Email is a hard thing to do. I suggest doing so gradually in a multi-step process:

    • Start using disposable emails for signing up for things TODAY. Addy.io, duckduckgo, mozilla, proton, whatever you trust. This can easily be switched from your Gmail address to your new address later.
    • Purchase a domain. Think hard on this, you want to keep this forever. Don’t forget to check those renewal costs. Buy several years. Just forward it to your Gmail or other free email account at first, and start sharing it instead of your Gmail address (you won’t be able to send with it yet).
    • Look at switching to a mail client for your day-to-day email use. Every device has decent multi-account mail client available. Add Gmail to it and start getting used to not using Gmail’s web interface anymore. This drastically reduces the amount of behavioural information you are sharing with Google.
    • Switch your custom domain to a paid mail provider. Lots of options in this thread. You can change this again at any time, as you are using a custom domain. Connect it to your multi-account mail client on your devices alongside Gmail.
    • Never delete your Gmail account -because then someone can scoop it up and impersonate you with that service or contact that doesn’t know you switched. Delete all your old mail from their system, and unsubscribe and disconnect everything sending mail to it -remember about 2-factor authentication. Eventually you can take it out of your mail client so Google no longer sees your device activity - just log into the web interface at progressively longer intervals to verify you didn’t miss anything important.

    Good luck, and take it one step at a time. Perfect is the enemy of good and all that.


  • Indeed. That tweet was just the icing on the cake. I agree that Proton is an issue in that it is far more vendor-locked-in than a standards compliant mail service, but in addition to that, over the years, they have very much over-sold the degree of security their system provides (military-grade encryption anyone?). Read any honest security researcher’s review of Proton and it’s full of caviates about a system where they both hold your keys and provide you with a web interface. If their marketing was more reasonable, I would maybe trust them more.

    If you absolutely need end-to-end encryption and have the ability to direct your correspondent to a particular service (like Proton), I wouldn’t choose Email at all. If it had to be Email, you are looking at PGP or S/MIME in a client, but an e2e messenger that is hard to mess-up and has some metadata protections will be far superior in practice.


  • I did a lot of analysis paralysis and comparisons when I was looking for a very low cost provider that works with my own domain so I can get off Gmail and avoid future vendor lock-in. I wanted 100% standards compliant email hosting that will work perfectly with an actual, old-school email client workflow, plus some sort of web client I can fall back on if needed.

    I also wanted EU or Canadian hosting and a non-US corp I’m sending my money to, plus lots of online indication they have been reliable for many years and have generally very good community reviews. I don’t actually see the value in the provider-based encryption of Proton/Tuta and think it creates a false sense of security because there is basically no reasonable threat model where their system seems to actually protect you - okay, come at me ;)

    In the end, it was down to Runbox and Migadu. Both are 20-ish bucks a year with my custom domain and satisfy all my requirements. Migadu seemed very good, and comes with more storage space, but I prefer to migrate my archived mail off the mail server over time anyway.

    Runbox has a really slick web client, doesn’t have the silly-low 20-email-a-day sending limit, and the clincher for me was that I can add secondary accounts on my domain for $8 a year! I may actually make some accounts for family on my domain at that price. I switched the domain over to Runbox a few months back, and regret all the time I procrastinated doing it.


  • Yeah, despite the wording, I suspect they are looking at the patterns of use with smart meters rather than just “high amounts?” Grow op houses would be easy to see, as they only use power when the lights are on, flat usage, because no one is actually living there. Do you run lights 24x7 with indoor growing? idk. The trouble is, any system like this will catch a few, then they will relax the constraints to “catch more” and boom, now you have false positives. The criminals will also figure it out and mask their usage better by cycling banks of lighting, using batteries, parking some EVs in the driveway or whatever. That cat-and-mouse game will just see increasing privacy invasion and more false positives.


  • fyi, the way you write seems like you are upset over something. It’s somewhat odd to write that on a website that is hosted by volunteers on a shoestring budget for thousands of users “against the onslaught on the net.” So you better understand, anything besides youtube videos (i.e., the majority of the content on the net) is fairly economical to host. Of course it depends on the system, but a small group can easily stand up something dynamic like a lemmy instance, and an individual can host their static blog for basically free -open to the wide internet. Youtube is hard because video uses an incredible amount of bandwidth. Google looses money on it, despite it being plastered with advertising. So even capitalism hasn’t figured out how to do it yet without being subsidized by another revenue stream.












  • The software tech bro thing started with a letter from Bill Gates to the hobbyists that despite learning to program on freely available software, and copying a freely available language with his new version of Basic, everyone needs to stop sharing and pay to use software. They all have wet dreams of pulling out the ladder and owning everything. I wouldn’t put it past them to try to nullify copyleft or something like that.