Saki

joined 2 years ago
MODERATOR OF
[–] Saki@monero.town 5 points 2 years ago (4 children)

Also, one should consider using Bridges (obfs4), so that your local ISP may not know you’re on Tor. Tails suggests that too. Using a VPS is not necessary a best option for that, though it might be a good option under some situation.

[–] Saki@monero.town 2 points 2 years ago

Actually, Proton + your local key = don’t work very good. Usually you’ll have to use a key pair generated by Proton—sharing your sec with the provider is not good.

Nevertheless, Proton is 100 times better than Google to be sure. Those who are trying to ditch Google, Proton and Tuta are two good options to consider, also recommended by PrivacyGuides. For those who had ditched Big Tech and now starting to wonder if Proton is okay… that’s a bit tricky, still I say Proton is nod bad. I had recommended Proton to my friends until the French activist incident, followed by a few more bad incidents. Yet it’s understandable that Proton must obey it if they get a valid court order… If you’re a normal, daily user, Proton is good enough (if not the best), albeit a bit overpriced.

[–] Saki@monero.town 2 points 2 years ago* (last edited 2 years ago)

Not a recommendation but I too trust Disroot pretty much. You can get a custom domain there without “buying a paid plan” once you make a donation. Would that be an option for you?

Using multiple providers (having multiple accounts) is a good idea, though. Don't put all the eggs in one basket. I’ve never heard the two providers you mentioned, so I can’t tell. If you can sign up anonymously via Tor, if they’re Google-free + not behind CF, and (most importantly) if you feel them “good” (subjective but gut feeling…), I think they’re usable.

If their support use PGP, that’s a good sign too. (Proton even doesn’t share its pub key iirc.) If they also accept the privacy coin like Disroot and Tuta do, that’s nice too. Ultimately, though, believe your gut feeling, because everyone has different priorities, different threat models, etc.

[–] Saki@monero.town 6 points 2 years ago (6 children)

While doing this is generally not recommended, EFF does indeed suggest this option in some context: https://ssd.eff.org/module/choosing-vpn-thats-right-you#things-to-consider-what-vpns-don-t-do

[–] Saki@monero.town 3 points 2 years ago* (last edited 2 years ago) (3 children)

Don’t worry about e2ee: Even if you get the most expensive plan from e.g. Proton, it’s not e2ee unless both parties use Proton. There is a free, “easy” way to realize true e2e: OpenPGP in Thunderbird (convenient), GnuPG (more secure), etc.

As for mailbox.org: I used it before but it showed Google reCaptcha, which was an obvious red flag:
cf. [Security and GDPR Issue] ProtonMail includes Google Recaptcha for Login, every single time. #242

Also, technical score of mailbox.org has been relatively low, not improving: https://internet.nl/mail/mailbox.org/1080449/ (Don’t worry too much about this score, though. It’s only technical; human factors (philosophies, trust, etc.) are more important when it comes to privacy.) This is not a recommendation. DYOR; ultimately, believe your own intuition.

[–] Saki@monero.town 8 points 2 years ago (6 children)
  • Tuta (free): you can send only like 6 email per day. Otherwise, Tor-friendly. No onion. Support forum on Reddit 😞 Germany.
  • Posteo.de: 1 €/mo affordable. Nothing fancy. Support via PGP like that’s common sense. Germany. Non-crypto anonymous payments w/ various options (e.g. a prepaid CC): they don’t even ask your name (much less address, cell phone number).
  • Disroot.org: Free, pop/smtp, community-based, trusted even by the Tails team. w/ onion. Netherlands.
  • Cock.li: Free, pop/smtp etc. Very Tor-friendly w/ fast onion. It’s good if you think it like disposal. Irresponsible in a way (aka Freedom), but actually 10-year-old & stable. Romania.
  • Proton (free): bloated, very mixed opinions, yet better than Google. w/ onion (slow). Switzerland. A simple feature like Plain Text view is missing (HTML by default: not serious about privacy).
[–] Saki@monero.town 3 points 2 years ago

If you mean this article on Wired itself, it’s not pay walled, though annoying. Click the V (chevron) to hide the Subscribe Now thing.


Or if it’s indeed pay-walled in your area, open it via Germany by search this -> https://metager.org/meta/meta.ger3?eingabe=A%20Controversial%20US%20Surveillance%20Program%20May%20Get%20Slipped%20Into%20a%20%E2%80%98Must-Pass%E2%80%99%20Defense%20Bill
find the article, and use the “OPEN ANONYMOUSLY” link. Many annoying things will be filtered too.

[–] Saki@monero.town 7 points 2 years ago* (last edited 2 years ago) (3 children)

@ShadowRebel = @SummerBreeze Could you avoid a clickbait-ish title, though? Some users do find (some of) your posts informative and good. Stay cool and don’t sensationalize it :)

[–] Saki@monero.town 4 points 2 years ago* (last edited 2 years ago) (1 children)

If you want us to join your Referral Program, explain why one wants to recommend your VPN, why one wants to use it, how it is different from generally more trusted other VPNs.

You’re only repeating, “Advertise us, and we’ll pay. Attractive, isn’t it?” No, it isn’t. We refuse to advertise a random service we can’t trust, with zero track record, even if you pay.

The number one sales point of your VPN is “We pay if you advertise it”? Is that the “best thing” about your VPN?

Choosing the VPN That's Right for You | Surveillance Self-Defense - EFF


Monero.town is a tiny Lemmy instance, only having like 20 (?) active users. Active users know each other more or less. Naturally we say “we” meaning fellow users.


But kuno.anne.com was being useful. Though ad-supported by an iffy company—big banner ads—, maybe any sponsor is better than no sponsors; although we could start our own similar platform, community-supported rather than supported by a sketchy company. Kuno was a bit like a Bait-and-Switch scam, initially pretending to be a clean, great, passion project. I felt betrayed. You’re using Monero to make a false impression that your service is equally idealistic.
You may be a good person. It might be just miscommunication. We’ll see… If you’re a sales person, though, be more professional; avoid saying unprofessional, rude things, even if you disagree. You’re talking to potential customers, potential affiliates.

[–] Saki@monero.town 1 points 2 years ago

Confusing but the official site is not monero.com but www.getmonero.org, where you can see the full list of officially suggested wallets. Official GUI is a safe option. Feather is also good, Electrum-like.

Cake (Monero.com) is one of the suggested options too & is popular, but certainly not “most private“. With Feather, you can do everything over Tor, more privacy-friendly.

Most Monero users only use non-custodial wallets; so they just say “wallets” meaning that. Technically running a local node yourself is the most secure & private—though this option is not for everyone.

[–] Saki@monero.town 3 points 2 years ago

https://www.getmonero.org/

The monero.com domain has been taken by a for-profit company, Cake. The Monero community is not wealthy (nor motivated) enough to buy it back.

[–] Saki@monero.town 2 points 2 years ago (1 children)

Let’s say I’m selling you a book B and accepting a crypto payment. What if you sent me your crypto C trusting me, but I exit-scammed, vanishing without sending you B you’re trying to buy? That’d be bad. But what if I sent you B first, trusting you’ll send me C as soon as you receive B? Now you could cheat and vanish without paying. That’d be bad too.

To prevent any of those things from happening, there are a few methods. One is a 2-of-3 escrow service. Another is 2-of-2. Both based on multisig. A simplified example follows.

The book costs you 100€. You’ll send, say, 200€ to address A controlled by both you and me via multi-signature. I too will send 100€ to A. Now Wallet A has 300€. When 2 persons (you and I) sign, there will be a 2-output transaction from A to you (100€) and to me (200€), but any single person can’t move fund from A. That’s multisig.

Now I must send you the book in a good condition, because I don’t want to lose my 100€. So I’ll act carefully and honestly, and sign when I ship the book. You too will be willing to sign when you receive the book, because otherwise you can’t retrieve your 100€ (you deposited 200, when the book only costs 100). Sometimes an unexpected accident may happen, but usually something like this will work pretty well. This is one way how a P2P platform works (not very accurate, but I hope you get the idea).

view more: ‹ prev next ›