• amzd@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      8 hours ago

      Yeah Signal requires a phone number which is PII so the app does not belong in a “privacy” pack

      • Nightrider@lemmy.ca
        link
        fedilink
        arrow-up
        3
        ·
        21 hours ago

        This is the best rebuttal. I might change my opinion a little bit on this. But as a service that still passes data through someones centralized network, there is no real guarantee for full privacy. But it does look to be ran by a rockstar with a descent view on privacy first. So I will yield to signal.

        The problem with proton is that centralized service. Proton has given up user data before and ideally if your trusting a platform for privacy reasons then you dont want them to have a mechanism for handing over your data. So proton is still a platform that needs work before it can be what it promises to be. That said it is probably still better than using non privacy centric services like gmail and so on.

        • NaibofTabr@infosec.pub
          link
          fedilink
          English
          arrow-up
          3
          ·
          17 hours ago

          Yeah, I trust Whittaker’s conviction on this because she’s been tested multiple times by the governments of multiple countries at this point. When pushed, her response is “OK, we just won’t support your country, bye”… and then the government ends up using Signal internally anyway. She is more than just talk, and so far she’s been unwilling to sell out or compromise Signal for anyone. At the moment, there’s no other secure communication project that I know of that is similarly effective, well audited by third parties, and has trustworthy leadership.

          Proton is more complicated. There are more tradeoffs and compromises, but it is also more complex and offers more functionality than just a messaging platform. I recommend this video by Reject Convenience: https://www.youtube.com/watch?v=xFKSKjyBVDU He used Proton services for awhile and has made some different choices since, so he has some useful criticism from experience (not knee-jerk reactionary stuff).

          At some point you have to make decisions about what your risk tolerance is, how much manual effort you can reasonably put in to sustain your tools, and how much money you’re willing to spend on it. Proton is the right choice for many people not because it’s a perfect company, but because providing equivalent functionality for yourself is a full-time job.

          • amzd@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            8 hours ago

            and then the government ends up using Signal internally anyway

            Which is terrible for national security because everything is hosted on centralized American servers