Comment on Proton launches privacy-focused Google Docs alternative: Docs in Proton Drive is an open-source, end-to-end encrypted collaborative document editor

• micka190@lemmy.world ⁨4⁩ ⁨months⁩ ago

  They can’t finish a single solution

  Gee, it’s almost as if that’s the whole point of an ever-evolving SaaS platform.

  source

  • slooopy_potatoe@lemm.ee ⁨4⁩ ⁨months⁩ ago

    Releasing unfinished products and expect users to just make do while they launch the next product can’t be the solution either.

    source

    • micka190@lemmy.world ⁨4⁩ ⁨months⁩ ago

      Then it’s a good thing all of their products are fully functional and working as advertised, I guess.

      source

      • slooopy_potatoe@lemm.ee ⁨4⁩ ⁨months⁩ ago

        Sure, whatever you want to belief :)

        source

        • -> View More Comments
  • timewarp@lemmy.world ⁨4⁩ ⁨months⁩ ago

    A SaaS solution that claims to be private but won’t provide the backend code to prove it. You don’t find it at all suspicious that they claim releasing backend code would make it less secure? What kind of security product is not open for inspection? The same kind of “security” you get from Microsoft.

    source

    • Gestrid@lemmy.ca ⁨4⁩ ⁨months⁩ ago

      I imagine it probably is inspected, just not by the public. They probably do it themselves.

      And they may have contracts with certain companies specializing in this sort of security that also inspect it.

      And there’s also the cybersecurity companies that test it whether they’re contracted or not. At some companies, their entire job revolves around finding bugs (especially security bugs) in other companies’ software.

      Just because it’s not on GitHub doesn’t mean it’s not a good product that hasn’t been thoroughly tested.

      source

      • Excrubulent@slrpnk.net ⁨4⁩ ⁨months⁩ ago

        Surely we’re not gullible enough to accept “we inspected ourselves and determined we are secure and you should use our services”?

        source

        • -> View More Comments
      • timewarp@lemmy.world ⁨4⁩ ⁨months⁩ ago

        You realize that Microsoft code is inspected as well, even more heavily and regulated… and yet they still end up with major breaches. Security evolves through open source collaboration and inspection by experts that aren’t being paid to say you’re doing a good job.

        source
    • deezbutts@lemm.ee ⁨4⁩ ⁨months⁩ ago

      Yeah because enterprises primarily use a ton of open source security tools…

      ಠ_ಠ

      source

      • timewarp@lemmy.world ⁨4⁩ ⁨months⁩ ago

        Enterprises are using a plethora of open source tools at this point. They may still utilize closed source solutions, but they definitely have quite a bit of open source solutions tied in.

        source
    • micka190@lemmy.world ⁨4⁩ ⁨months⁩ ago

      You don’t find it at all suspicious that they claim releasing backend code would make it less secure? What kind of security product is not open for inspection?

      No, because Proton has 3rd party audits all the time and they share the results openly.

      source

      • timewarp@lemmy.world ⁨4⁩ ⁨months⁩ ago

        Microsoft has third party audits all the time and say they’re secure, and then you learn of new backdoors every 6 months. Audit companies are unreliable and paid to give good feedback while doing the least work possible.

        source
• Cyberjin@lemmy.world ⁨4⁩ ⁨months⁩ ago

  All Their services are online based right? I don’t understand why using their proprietary servers is an argument here.

  source

  • claudiop@lemmy.world ⁨4⁩ ⁨months⁩ ago

    So, if you want to have any sense of a service respecting you, it should be hosted on a server you can control?

    No difference at all between the server of the world’s biggest advertiser and a server by a company that opens itself for audits and is in a country whole laws require no bullshit? Are you sure those two are the same? All or nothing?

    source

    • Cyberjin@lemmy.world ⁨4⁩ ⁨months⁩ ago

      Was that reply for me?

      source
  • timewarp@lemmy.world ⁨4⁩ ⁨months⁩ ago

    Because their primary audience is those gullible enough to believe they somehow can’t read your messages, yet they can easily capture your private password.

    source

    • Excrubulent@slrpnk.net ⁨4⁩ ⁨months⁩ ago

      It is entirely possible to keep secure data on a server that only someone else with the password can access. They don’t store your password in plaintext, they don’t test whether what you typed is the same thing they keep on their servers. If the password works to decrypt your data then your client can read the emails. If not, your client gets gibberish and knows your password was wrong. With a secure system our password should never be sent to the server at all.

      Now, that doesn’t mean it’s trustworthy. There could be holes in the security, and I certainly would feel better controlling my own server, but it’s not automatically insecure just because it’s hosted by them.

      source