Andy Yen's values are incompatible with Proton's mission. He advocates for poor security practices, supports fascists, and he verbally abuses his subordinates. As such, I can no longer in good conscience continue to financially support a company with such terrible leadership.

Unfortunately for me, my subscription just renewed last month on a multi year plan, but it does give me time to browse for and experiment with alternatives.

If you're able, I encourage you to do the same and cite Andy Yen as the driving factor for your decision. We can't let these tech bro fascists destroy what little semblance of privacy we have left.

you are viewing a single comment's thread
view the rest of the comments
[–] 21 points 2 days ago* (last edited 1 hour ago) (41 children)

where do you migrate to? especially password manager and web storage?

I used to self host those, but nextcloud is a pain to keep updated, and password management is to important to do half assed.

edit: thanks for the suggestions. i'm gonna try out filen, and after that maybe keypass via filen

  • source
  • hideshow 41 child comments
  • [–] 14 points 2 days ago* (26 children)

    I said this before, will say it again: do not migrate to another subscription service.

    People went through all the trouble to migrate from Google to Proton, then now they must migrate from Proton to whatever else, and the cycle will repeat again.

    Subscription services, cloud software, they all strip you of agency and control. You don't have direct access to the files, you don't control the GUI, they are filled with proprietary formats, you are at their hands if they decide to change something you like, or pricing, or if they simply go nuts.

    Keep your things in your computer. Need they synced? SyncThing will do that for you on any device imaginable.

  • source
  • parent
  • hideshow 26 child comments
  • [–] 26 points 2 days ago (5 children)

    Totally disagree. Self hosting a mail server is a world of pain, and not all subscription services are equal.

    If you're a masochist try self-hosting your own email service. Otherwise, shop around and find a service that is compatible with your threat model.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 2 days ago* (1 child)

    Hosting your own email is actually not that hard. It takes a fair amount of initial setup but if you do it right, it is very stable and functional. Email servers are very mature, and things like Postfix hardly need anything once set up. Getting a static IP is the hard part, but if you run it on a VPS with a good IP you can just hang onto it.

    Filtering traffic via (e.g.) pfblocker feeds and spamassassin kills most spam, and it is awesome to just create and destroy your own mailboxes at will.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 hour ago

    the problem is that your outgoing mail will be rejected every now end then. and its a major hassle to get unblocked, if you end up on some blocklist accidentally, which will happen occasionally over the years, even with no fault of your own.

  • source
  • parent
  • [–] 0 points 2 days ago* (1 child)

    Sure, that might be true for email, but definitely not for the rest of the list that you conveniently ignored

    On top of that, while shopping around dont look for one service doing it all

    There is absolutely 0 reason for my email provider to also handle my passwords and photos, but many reasons the opposite way

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 1 day ago

    I wasn't ignoring anything or suggesting people should put all their eggs in one basket. Doing that would be ridiculous. Im assuming people would have the common sense not to do that.

  • source
  • parent
  • [–] 11 points 2 days ago (6 children)

    The vast majority of people don't know the difference between 2FA and passkeys, and you want them to manage their own self hosted solutions for everything? Yeah, keep repeating this I guess...

    You might as well move out to the mountains and live off grid and pretend like that's a real solution.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 2 days ago (3 children)

    The vast majority of people don’t know the difference between 2FA and passkeys, and you want them to manage their own self hosted solutions for everything?

    I didn't mention self hosting nor do I think it's necessary, unless you consider any service running in your desktop as "self hosting".

  • source
  • parent
  • hideshow 3 child comments
  • People need/want/are used to active sync. For that one either needs a true self-hosted solution and/or a service that requires opening port(s) on the firewall/router, which most people either have no idea how to do or can't due to ISP lockdown. Self-hosting can very quickly turn into a 2nd job and not everyone wants that. Or they have no required techical knowledge and no desire or time to learn. Plus, you still have to set up proper backups, even if the service is just running on your desktop. Unless, of course, you're fine with a single point of failure.

    On the topic of mail hosting, as someone who works in IT and self-hosts a whole stack of things: I do not ever want to self-host my email. Personally, I was considering just getting another domain for email and switching backend services as needed, but I liked the package Proton offered, so I chose that instead. I might need to rethink that domain option, but at this rate, soon no backend service will be safe from fascists and/or AI.

  • source
  • parent
  • [–] 1 point 1 day ago*

    You need subscriptions when you are getting an actual service. Cloud storage isn't cheap, it will always cost something and offer unique redundancy you can't get storing everything at home.

    Things like cloud storage, VPNs and VPSs will always cost something.

    That said you don't necessarily need any of those.

  • source
  • parent
  • [–] 3 points 2 days ago

    Need they synced

    yes. at least desktop <-> notebook <-> phone. Also I want friends to send me files and vice versa.

    SyncThing

    I tried that when before i migrated from selfhosted nextcloud to proton. it was pretty annoying to keep running. And I couldnt easily use it to send files to friends. That was some years ago though. maybe things changed idk.

  • source
  • parent
  • [–] 2 points 2 days ago (1 child)

    Will SyncThing sync photos from an iPhone to a Linux desktop?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 days ago

    Yes, with Möbius Sync. You'll have to copy the photos on the iPhone to a directory where Files can see them because of a security thing on Apple's side, then connect Möbius to the Linux desktop running syncthing, and point Möbius to the photos location in Files to make the share.

  • source
  • parent
  • [–] -1 points 2 days ago (8 children)

    Keep your things in your computer.

    That advice is not helpful, though. Most of us used to store passwords on our computer: In our internet browsers. In plain text for anyone to grab. It was the dumbest idea ever and password managers became popular quickly in recent years as more people realized they need to protect their credentials somehow. So no, I genuinely do not believe in just storing passwords somewhere without any safety measures.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 1 point 1 day ago (1 child)

    Depends on what you're trying to defend against. If it's against a burglar, full disk encryption is plenty, and you can go ahead and save those passwords in the browser and it doesn't matter at all. If it's against your own government you're probably screwed no matter what you do, just a matter of how long it takes them to notice you. Eventually you'll get tired of being in jail and will cough up what they want to know.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 21 hours ago

    I'd definitely use some way of encryption and never store anything in a browser. Nearly nobody does keylogging anymore. Trojans just get your emails and passwords from the browser files and bounce. And you can never be sure if someone might sneak something in. Not as a regular user. Maybe one of the mods in that Minecraft modpack you play with friends suddenly has something in it and you won't know until notifications are rolling in about attempts to log into your accounts. So I definitely would never save passwords in a browser in 2026. Now, I know there are looooots of password managers out there but you need one that can be trusted.

    So yeah I want a handy tool that can quickly fill in my credentials but encrypts everything just well enough to protect me from automated kind of attacks and maybe a burglar too just to be sure. Lots to choose from but I loathe doing all the research to get something that is actually safe, user friendly, reliable and works on Arch. Everything comes with it's up and downs.

  • source
  • parent
  • [–] 4 points 2 days ago (5 children)

    hat advice is not helpful, though. Most of us used to store passwords on our computer: In our internet browsers. In plain text for anyone to grab. So store them in a safe password manager in your computer.

  • source
  • parent
  • hideshow 5 child comments
  • [–] -2 points 2 days ago (4 children)

    See? You're almost helpful. But I do have to ask you if that password manager has a name? You see, at this point most people would've already given up or just ask ChatGPT or Google AI about it, which in this case would be hypocrite but I digress.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 2 days ago (3 children)

    See? You’re almost helpful. But I do have to ask you if that password manager has a name?

    Sure, had you asked about a solution rather than trying to write some sort of gotcha. KeePassXC is a fully complete password manager, better than whatever subscription crap you'd rather push, and it stores everything into an encrypted local db file you control. Now guess what I'd recommend for syncing that file across other devices.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 21 hours ago (2 children)

    better than whatever subscription crap you’d rather push

    Okay now you have to give me a source on that too.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 20 hours ago (1 child)

    Do you understand a source is? How can one provide a source to a subjective statement with a comparison that doesn't name a particular service? Provide me a source that my favorite dish is yakisoba.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 19 hours ago

    I was just calling out your antagonism because making wild assumptions about me is pretty wild. Sorry if I'm being perceived as help vampire for asking for directions. Please, if you only wish to give information with a side dish of hostility then you can keep your secrets.

  • source
  • parent
  • [–] 11 points 2 days ago* (4 children)
    • Filen.io encrypted notes and camera roll backup and cloud drive
    • Tuta email
    • Bitwarden password
    • Aegis 2FA
    • Windscribe VPN
    • Addy.io email alias
    • privacy.com credit card aliases
    • Cryptpad productivity suite
  • source
  • parent
  • hideshow 4 child comments
  • [–] 11 points 2 days ago (4 children)

    especially password manager

    KeePassXC on desktop, KeePassDX on a phone. The KDBX files are encrypted, and unless you store other files inside of there, they are also pretty tiny (<1MB), so you can put it anywhere. Of course, in that case, don't store cloud login details in that password database.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 1 day ago*

    I was considering moving to it but was unsure if KeePassDX was as reliable for the phone. Kinda annoys me how many different apps there are and why KeePassXC doesn't support one within.

    I dont want to use Valutwarden and be dependent on Bitwarden in any way. Private equity will always enshitify and I'm not gonna wait to find out.

  • source
  • parent
  • [–] 2 points 2 days ago (2 children)

    can i sync pw between desktop and phone automatically?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 days ago*

    Self hosting vaultwarden is pretty easy, standalone, and lightweight. It doesn't need anything like next cloud and has an alpine container option

    If your server is down you just can't save new passwords but the local copy on your phone or computer is still up

  • source
  • parent