The inner circle so to speak
The thing is, ownership of any of these can change at any time. Bitwarden, Mullvad, and Tutanota could be sold to very different owners.
That is up to and including something like uBlock Origin, which only has one developer, and would suddenly be very different if that developer died and the project had to be forked.
You can never trust that the person who takes on the reigns has the same ideals as the people running them now.
Hell, Mullvad was abused to the point they removed access to Port Forwarding on their VPN service, which has led to many people needing to switch to crummier, shadier VPNs that still offer port forwarding access. That’s not Mullvad’s fault, but it is an example of them having to change their philosophy and what they offer because of abuse.
Trust should only go so far, and loss of trust should be very easy. There’s not a good reason to keep “trusting” something when it has fundamentally changed from its initial ideals.
Hell, Mullvad was abused to the point they removed access to Port Forwarding on their VPN service, which has led to many people needing to switch to crummier, shadier VPNs that still offer port forwarding access. That’s not Mullvad’s fault, but it is an example of them having to change their philosophy and what they offer because of abuse.
It’s a real shame too. It was a nice feature.
Hell, Mullvad was abused to the point they removed access to Port Forwarding on their VPN service, which has led to many people needing to switch to crummier, shadier VPNs that still offer port forwarding access.
Could you explain what happened?
As clear as I can make it out, it seems like it was related to a search warrant that was executed on Mullvad.
Because just a little over a month after the news of the failed raid, there was news of them removing port forwarding.
https://mullvad.net/en/blog/2023/5/29/removing-the-support-for-forwarded-ports/
Emphasis mine.
Unfortunately port forwarding also allows avenues for abuse, which in some cases can result in a far worse experience for the majority of our users. Regrettably individuals have frequently used this feature to host undesirable content and malicious services from ports that are forwarded from our VPN servers. This has led to law enforcement contacting us, our IPs getting blacklisted, and hosting providers cancelling us.
The result is that it affects the majority of our users negatively, because they cannot use our service without having services being blocked.
The abuse vector of port forwarding has caught up with us, and today we announce the discontinuation of support for port forwarding. This means that if you are a user of forwarded ports, you will not be able to add or modify the ports you have in use.
They made a smart call that has probably increased the long term privacy of their users.
People were using port forwarding to host illegal shit, and governments were getting pissed off about it. Mullvad has been able to prove in court that they don’t keep logs, but that’s not a perfect deterrent; a properly motivated government, perhaps if somebody is using Mullvad to host CSAM, might attempt to legally force Mullvad to put logging in and add anti-canary clauses.
Preventing port forwarding keeps customers as consumers rather than hosters, and avoids this issue.
This is true and people should always be mindful of this. Additionally you should consider not just the ownership of the companies but also the infrastructure they rely on such as their rented servers, payment processors, on-site staff etc. However commercial VPNs remain a convenient compromise for many use cases. These services are probably fine for your shitposing needs but should not be relied upon for activism for instance.
Same thing just happened with IVPN :-\
I used to use proton until I saw them give info for a warrant. After that I gave up on the VPN thing. If I lived in a country with limited streaming options I might use them but
bruh, i can’t be the only one confused why state farm’s drive safe app was being touted…
allows their car insurance to spy on their location data and driving habits Is curious about privacy
Okay buddy
I love Mole, Shield and Road
Ah, the new pokemon game that just came out.
the mole creates the tunnel for the road, and the shield is for the travelers’ protection
Why do you trust a Germany based secure email over something like Proton? At least Mullvad is Sweden based.
Removed by mod
Here is an alternative Piped link(s): https://piped.video/watch?v=IeXaYR4ed9c
https://piped.video/watch?v=QCx_G_R0UmQ
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source, check me out at GitHub.
deleted by creator
https://www.engadget.com/protonmail-climate-activist-ip-swiss-french-authorities-233004304.html
Europol requested it. Even though you think your service is not under 14 eyes there still is gonna be many other problems.
You can always find problems with the service itself.
And that proves what exactly? Swiss law required them to hand over an IP address. Swiss ptivacy is not absolute. They have laws. An IP address didn’t grant them access to the encrypted emails. Proton openly admits they had no idea who the user was. The activist should have used a VPN, which Proton also offers as a service, and then whatever activity trail they linked to the IP would have died at Proton’s VPN network.
Protonmail then went to court, and got the law changed so it doesn’t happen again https://www.reuters.com/technology/proton-wins-swiss-court-appeal-over-surveillance-rules-2021-10-22/
Five and eleven eyes doesn’t matter if the service is encrypted and open sourced. Also, did you know that Switzerland has no superior privacy laws comparing to Germany? It’s all marketing bluff.
Selfhosting an email is very hard but I think that at the end it’s worth it
Until Gmail/Hotmail decides your IP is a spammer and forever you have deliverability issues from then on
Interesting, is this a wild spread problem? I have heard of people that host email services for years and have no problems.
It’s a worry I see posted a ton, and have been advised numerous times that email is the one thing you don’t wanna selfhost.
I self-host (postfix and dovecot) and will admit of all the self-hosted stuff I have it’s the most annoying/time-consuming to manage but doable if you’re willing to spend a lot of time reading and updating things. I wouldn’t recommend it to the vast majority of people though.
I read some horror stories about folks who self-hosted for years and how they eventually quit and moved to an established email provider. It didn’t seem like something I wanted to deal with.
Do you think using one of those federated email networks where it’s invite only and between people you know would have any appreciable use cases in conjunction with an established provider? I can think of having a small org use it maybe but not between friends or family.
Removed by mod
Here is an alternative Piped link(s): https://piped.video/watch?v=IeXaYR4ed9c
https://piped.video/watch?v=QCx_G_R0UmQ
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source, check me out at GitHub.
KeePass is also a good password manager, it’s open source and you get to store the password database anywhere you like.
I have bitwarden and mullvad, but what’s the other one?
It’s Tutanota, an email service
deleted by creator
You do also kind of put all your eggs in one basket so to speak though. I don’t have anything against Proton and the pricing makes sense if you value all their services and pay for Ultimate (though by my estimate, less sense if you are only looking for a smaller handful of services). However, if you go fully into Proton for everything, you’re placing your trust into an entire stack of services and it can end up a single point of failure.
I trust their privacy claims but if you backup your email and calendar you can just as easily move elsewhere if Proton does go down. Having only one provider can make things a lot easier to manage.
deleted by creator
Still can’t bring myself to use proton pass. I’ll be much happier when proton drive better integrates with desktop machines as well but calendar, VPN, email and the bonus simplelogin premium are way too useful.
Removed by mod
deleted by creator
Here is an alternative Piped link(s): https://piped.video/watch?v=IeXaYR4ed9c
https://piped.video/watch?v=QCx_G_R0UmQ
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source, check me out at GitHub.
For anyone still using Mullvad and wants port-forwarding, I recommend AzireVPN.
Good list! I use all of them too.
I don’t get what you mean, Mullvad supports port forwarding
According to this blog post, they don’t seem to 🙂 https://mullvad.net/en/blog/2023/5/29/removing-the-support-for-forwarded-ports/
They very recently stopped supporting it.
I might swap bitwarden by passbolt as it uses a more recent programming stack, although vaultwarden looks to be a good alternative too.
Does a more recent stack translate to any real benefits?
Not necessarily, plenty of good programs written in C89 for example.
With something that is heavily library dependent, having a more recent development stack may mean better maintained libraries but definitely not a sure thing.
No love for KeePass?
I trust bitwarden, but android app doesnt trust me!
wdym?
That mole is sus to me, I am more like into Snakedragons.
Snakedragons
I heard it was a mythical creature
What’s bottom right? Top is Bitwarden and Left is Mullvad VPN
that’s Tutanota
Tutanota, an email service.
tutanota, an email service
As a US consumer, I can’t use a lot of these VPNs. When you dig into how local governments are trying to break encryption in many countries overseas it makes you slow to sign up for services. The worst case would be you use a service, get invested and a few weeks later new legislation you’re not following/in the know about gets passed and some of your data is now in some foreign governments jurisdiction more so than it was before.
It’s not that Germany or Sweden in particular do that today but I also haven’t quite looked into its bounds, if five-eyes alliance reaches them, etc. There is a lot you have to be cognizant of.
Also I like Bitwarden but Vaultwarden is the way to go; just make sure to donate/pay somehow for bitwarden if you use its clients.
Removed by mod
