• 0 Posts
  • 7 Comments
Joined 12 天前
Cake day: 2024年6月18日
  • trickster@infosec.pubtoPrivacy@lemmy.ml•Session vs simplex or other alternatives?
    11·
    5 天前

    It depends on many things, such as a threat modeling, opsec, etc. In terms of privacy and security !simplex@lemmy.ml seems to be superior.

    Several reasons to that:

    • SimpleX doesn’t have IDs, unlike Session. Which makes it more anonymous and private;
    • Ofc things like E2E encryption, forward secrecy and others;
    • Message mixing is and underrated feature, as well as content padding;
    • It has amazing security features such as self-destruct passwords, and a couple of others;
    • Can be self-hosted;
    • No need for phone number;
    • Leverage several ‘accounts’;

    I have read their white paper, and is worth the time. Also, one of the episodes of the Opt Out podcast is with the SimpleX creator. I suggest listening. I personally liked the way he conceptualizes decentralization, and problematozes protocols.

    I found SimpleX to be the best of all private messengers. Better than Session, Signal, XMPP, DeltaChat, and others. It is also more convenient than Briar and Threema.

  • trickster@infosec.pubtoPrivacy@lemmy.ml•OneNote alternative to make a knowledge base
    6·
    8 天前

    I had almost the same question. So let me quickly share what I came up with.

    I have a ton of notes in different areas. By I was not happy with the way Obsidian worked – synchronization specifically. I didn’t want to pay for it. So I got on a quest for the perfect note-taking system. It had to be:

    • Markdown-first. Because we all know why;
    • Interoperable. That is as few additional flavors and things added as possible;
    • Portable. Such that I could open my Notes folder in any app;
    • Synchronization. With as few additional crutches as possible.

    Main text editor

    Desktop. I use !helix@programming.dev. It has marksman LSP (meaning markdown support out of the box). This is how I know no other app is involved into writing process (no telemetry, etc). Also zero task switching this way. I still use !obsidianmd@lemmy.world from time to time. I don’t use Logseq because it has opinionated file structure, which doesn’t meet my interoperability need. Also, I don’t always need an outliner. You can turn this feature on in Obsidian, but you can’t turn it off in Logseq.

    Mobile. I use the simplest markdown-capable apps for iOS and Android. Also, don’t forget Cryptomator.

    Sync. For the most part I use !syncthing@lemmy.ml to sync all the notes. Such that they are not uploaded into any cloud storage. I don’t use iCloud, or rather almost never use it.

    As for your question. Obsidian is a pretty good choice because of its extensibility, portability, and interface. Although it easy to get lost in the plugin rabbit hole. Its desktop and mobile (if you go for it) privacy policy is pretty solid. Client-first markdown app – nothing more and nothing else.

    Lastly, there is this idea that one needs to sync notes via some cloud. Not true. You should consider your threat model first. Cloud sync is not must. In some cases, Syncthing is more than enough, is more private, and might be a more secure option (as it reduces your surface of attack to some extent).

    I guess that’s all

  • trickster@infosec.pubtoPrivacy@lemmy.ml•Is the Proton (Mail, VPN, Password Manager) ecosystem any good?
    52·
    12 天前

    I agree with what others have already said about Proton being “good enough” for some threat models. And I second the argument about other options – such as Tuta for email, Mullvad for VPN, etc.

    I’d just add one more thing. Once a company offers me to “handle” my digital privacy toolkit, I loose trust. Because a) it’s less resilient b) less secure c) less private. I would think twice before trusting emails, calendars, contacts, passwords and network security — to a single company.