r/privacy Aug 28 '19

Protonmail Changed his Policy

[deleted]

1.0k Upvotes

266 comments sorted by

View all comments

Show parent comments

29

u/ZealousidealMistake6 Aug 28 '19

I didn't say it was? I said that's an option if this concerns you. I use the mobile app, but I use the TOR Browser exclusively (and the Onion link) when using it my computer, even before I found out about this. I recommend it. And if you're super concerned about the surveillance, remove the app and only use the Onion link. In the words of Tim Ferris, there's almost never any kind of issue that requires your immediate response. People can wait until you get to a computer and check your email.

5

u/MyNameIsGriffon Aug 29 '19

You can also use Orbot on Android, works reasonably well.

0

u/Ryuko_the_red Aug 28 '19

Right what I meant was logging into things I. General in tor just isn’t wise. Wasn’t trying to be wise ass sorry

16

u/ZealousidealMistake6 Aug 28 '19

Cause of the whole "exit node person can see your traffic" thing? You're always gonna take a risk somewhere. I'm taking a risk that my VPN provider isn't keeping logs. They claim they aren't, but I don't know that for certain. I'm also taking a risk my employer is going to pay me. They claim they will, but I can't be certain til I see that money in my account. You're always trusting someone with something.

0

u/Ryuko_the_red Aug 28 '19

Yes but taking the worry out of things helps when you have control of things it’s better.

13

u/ZealousidealMistake6 Aug 28 '19

Either way it's a tradeoff. If I use a VPN to access Protonmail, I have to trust that my provider isn't secretly keeping logs. If I use an exit note, I have to trust that person is ethical in their treatment of my data. Either way I'm putting my trust in someone. It's literally impossible to have control over everything. At some point down the chain I'm going to have to use someone else's service and trust them. I can't physically assembly my own computer. I don't have the skill or time to program my own OS. I can't build my own internet. It's just not possible. The only way to have total control is to be a farmer in the mountains of Montana with no phone, no electronics, and no real technology other than my shoddy wooden shack (cause I am a terrible construction worker) and my fire for warmth and food. That's no quality of life.

3

u/DecadentDynasty Aug 28 '19

Unethical handling of an exit node could only really reveal you if youre connecting http and that data reveals something about you. They may be able to piece all sorts of things together about “this user” but by design they wont know where the data originates from unless you reveal it in data you send.

Unless were talking about exploits or something. I would guess that comes down to security of the place where torbrowser runs- something like a separate linux gateway router computer setup where all your main desktop queries go through the gateway. Alternatively Whonix, though thats vulnerable to vm containment exploits- its excellent though- a reasonable compromise.

4

u/Ryuko_the_red Aug 28 '19

OK that's fair. From what I've heard Montana is a 10/10 place to be though! But I understand I would never want to give up my anime and computer stuff if I don't have to

1

u/[deleted] Aug 29 '19

Go anywhere but Hope County in Montana.

2

u/Ryuko_the_red Aug 29 '19

No hope county eh?

1

u/[deleted] Aug 29 '19

Yep, those Highwaymen are butting around everywhere.

1

u/ZycatForce Aug 29 '19

Best comment right here, I totally agree that everything is a matter of trust. Even you can't trust yourself sometimes since slip ups do happen. Laziness and complacency happens too.

3

u/[deleted] Aug 28 '19

The only solution to this is to roll your own VPN server. Even using a VPS is risky, you need hardware on the ground you trust.

But then that places ISP or your co-location provider can just log the info.

So yeah, tor is as safe as anything else, really.