• 3 Posts
  • 53 Comments
Joined 1 year ago
cake
Cake day: March 19th, 2024

help-circle





    1. You shouldn’t “trust” as a basis for security or privacy. Eg for protonmail, Proton can still read your incoming emails if they arrive unencrypted; the only way to avoid that is to send E2EE email, which unfortunately most email is not. You should assume that if they can, then they are.

    2. If you have to use proton for whatever reason (can’t afford to pay to self-host things, don’t know how to and don’t have time to learn, etc), it’s perfectly fine for everyday use for things that are not particularly sensitive ie you don’t have a highly resourced state actor actively trying to obtain that data. Just always keep the first thing in mind. Too many people treat anything that calls itself “encrypted” as a silver bullet.






  • Yeah but in the past few months ive consistently found Swedish Mullvad servers to work (occasionally blocked but if you refresh the page it’s unblocked) whereas the Swiss servers, which I used to use, have been fully blocked for quite a while. I’m sure it’ll change in due time but for now that’s what’s been working. And I have found this for all the Swedish servers I’ve tried and all the Swiss servers I’ve tried. Only tried Mullvad servers as that’s the VPN I use.










  • Also, you can use a burner email and vpn if you want to add an extra layer of obfuscation in there for privacy.

    It’s still all tied to one account. They could say, for instance, the same person searched for “beans”, “onions”, and “rice”, as opposed to not being tied to an account where those 3 searches could have come from 3 different people. Of course, a search engine like DDG is only promising to not track you to try figure out if those 3 searches came from the same person, but various anti-fingerprinting measures could make it infeasible for DDG to do that. For a paid search engine, you’d have to pay for a new account per search if you didn’t want it tied to any other searches, if you don’t trust that Kagi isn’t logging searches (which you shouldn’t, because you shouldn’t rely on trust for any threat model).

    I really hope I don’t come off as a shill for them. It’s one of the few companies I actually really like.

    Don’t worry, I get where you’re coming from and I most certainly think some people have a use-case for it.