Comment on Standard notes: what about don’t put all your eggs in one basket rule?
furrowsofar@beehaw.org 5 months agoSecurity audits do not guarantee security. They are just the best we have. Just as code reviews do not guarantee good and trustworthy code. In the end, we do not know what we do not know. In the end, every system has its weaknesses.
Sure I believe Proton is a reasonable supplier. Even with that Proton for example is on the record of giving out user info to governments. I am sure they did not meet the expectations of that activist.
Imprint9816@lemmy.dbzer0.com 5 months ago
My point is Proton did something every legit business would do.
If your threat model is such that governments are going after you, you should be aware enough to not create an email with an IP that identifies you.
furrowsofar@beehaw.org 5 months ago
Well that is the point isn’t it. Companies are not very reliable. The only thing they can be relied on to do is whatever butters their bread and that can change at any time. There is also a PR component and a fact component and they do not always agree.
Proton is really no different. I seem to remember they changed what they said on their website after outing that activist. Presumably to be a little less misleading. Again, I am impressed with Proton but not infinitely impressed.
Imprint9816@lemmy.dbzer0.com 5 months ago
You seem to be avoiding the fact component, which is they have proven through audits their security is what you would want in a service that hold your data and have decided to instead rely on one instance, that has nothing to do with the issue and your own feeling of how companies operate (FUD).