• herrcaptain@lemmy.ca
    link
    fedilink
    arrow-up
    100
    ·
    2 months ago

    What we’re begging for: A Linux client for Proton Drive

    What we get: A fucking Bitcoin wallet

    • th3raid0r@tucson.social
      link
      fedilink
      arrow-up
      4
      ·
      2 months ago

      Even on Windows, Proton drive is hot garbage. It never syncs my files correctly. Has a tendency to leave half encrypted uploads just lying around. Eating up desk space.

      Don’t even get me started on how long it takes to upload anything. Got a 1 GB file? Good luck!

      And that’s before getting into the fact that it’s proton’s third product. It was announced in 2019. 5 years and they still don’t have proton drive as a working product.

      Another gripe I have is that the Linux VPN client still doesn’t support wireguard. Sure, you can download wireguard configuration files. And they work just fine. But changing servers is a pain in the ass because of it.

      It’s made me seriously consider dropping my visionary plan and moving to a more competent provider.

      That being said, proton mail has been fantastic. And I have a ton of domains on it. So it would be a pain to move. I guess I’m just in a stalemate.

      • herrcaptain@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        2 months ago

        Good to know. I’ve only been using Proton for like 4 months now and have thus far generally liked the experience, but that’s too bad about your experiences with the Drive client. I’ve used several paid business suites over the years through work and they all have their issues though. The only one that was generally solid was Google’s and I’ve gradually taken steps to remove their products from my life so there’s no going back to them for me. It was also almost 10 years ago since I last used Google’s paid email/Drive, so maybe it’s also gone to shit.

      • herrcaptain@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        2 months ago

        I’ve actually meant to try that but haven’t yet gotten around to it. I’d still love an official app though, as sometimes 3rd party solutions don’t work great with cloud storage (at least in my experience).

    • Handles@leminal.space
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 months ago

      I’m petty enough to downvote anything remotely endorsing shitcoin, this one’s for you 🤝

  • T (they/she)@beehaw.org
    link
    fedilink
    arrow-up
    26
    ·
    2 months ago

    It seems everyone here think an organization can’t have multiple teams working in more than one thing at the same time

    • wholookshere@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      14
      ·
      2 months ago

      That assumes dev resources are limitless. And for a company the size of proton that’s certainly not true.

      They can only have X amount of devs. So how they allocate them says a lot.

      Also given that most complaints I’ve seen at the top are about specific missing features for ages, I think it’s safe they’re putting their eggs into too many baskets.

    • ElectricMachman@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      46
      ·
      2 months ago

      This and the new LLM “feature” in ProtonMail suggests that someone higher up has had a sniff of the techbro kool-aid.

      • catastrophicblues@lemmy.ca
        link
        fedilink
        arrow-up
        6
        ·
        2 months ago

        Yeah. Part of what I get for paying is the Bridge app so I can use Thunderbird instead of the website. I don’t want or need the LLM thing.

        • ElectricMachman@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          8
          ·
          2 months ago

          I pay for it because I thought it was a trustworthy service that had earnt my money. Instead, if they continue with stuff like this then I’ll go back to not trusting subscription services again.

    • GenderNeutralBro@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      14
      ·
      2 months ago

      Are there any that are cloud-hosted, secure, and private? My experience is limited, but I’ve never found an easy way in. I can’t imagine anyone who’s not tech-savvy getting started without walking through a minefield of scams.

      Every now and then I look at options for how I might actually use crypto, and everything looks either outrageously scammy or way too much trouble. Pretty much every exchange I’ve looked at holds the keys to your account, and several have gone under or outright stolen their users’ funds.

      The question is, when Proton embraces bitcoin, should it make me trust bitcoin more, or trust Proton less? I don’t know. I’m still skeptical. Their blog post is interesting, but also doesn’t answer a lot of questions. https://proton.me/blog/proton-wallet-launch

      I mean, look at this:

      Buy Bitcoin securely in 150+ countries

      If you are new to Bitcoin, Proton Wallet also has integrations that make it easy to buy Bitcoin in 150+ countries, and we have also put together a comprehensive Bitcoin guide for newcomers.

      That “comprehensive” guide spends three paragraphs talking about the “Blocksize War”, and makes absolutely no mention of how a user can actually buy bitcoin using Proton Wallet. WTF, Proton? Who is your target audience here exactly?

      • jarfil@beehaw.org
        link
        fedilink
        arrow-up
        4
        ·
        2 months ago

        cloud-hosted, secure, and private

        Until homeomorphic encryption becomes a thing, cloud can’t be secure or private.

        every exchange I’ve looked at holds the keys to your account

        Exchanges, are not wallets. You’re supposed to move the coins out of the exchange for safekeeping. If you can’t, then it’s not a crypto exchange, it’s an ETF peddler.

        how a user can actually buy bitcoin using Proton Wallet.

        Wallets, are not exchanges. They can link to exchanges, like Metamask does, but their core function is to hold your keys.

        • cadekat@pawb.social
          link
          fedilink
          arrow-up
          3
          ·
          2 months ago

          Until homeomorphic encryption becomes a thing, cloud can’t be secure or private.

          Why do you need homeomorphic encryption? Isn’t client-side encryption good enough for most use cases?

            • cadekat@pawb.social
              link
              fedilink
              arrow-up
              2
              ·
              edit-2
              2 months ago

              I am aware. What processing is only possible in the cloud, and not locally?

              Edit: My apologies, I didn’t realize you weren’t the same person I originally replied to. Please disregard!

          • jarfil@beehaw.org
            link
            fedilink
            arrow-up
            1
            ·
            edit-2
            2 months ago

            Client-side is not cloud.

            Yes, you can keep client-side reasonably secure. You can’t send the data for cloud processing and seriously expect much security or privacy… for now. Encrypt client-side and use cloud as storage… maybe; encryption algorithms also have a “best by” date.

            My point is:

            • “Cloud hosted” can not be fully “secure and private” right now.
            • “With cloud storage”, has a “best by” date.
            • “Not cloud”… well, is not cloud 🙂

            Letting anyone with the ability to switch the software without you noticing, anywhere near the keys controlling some Bitcoin funds, is a really bad idea.

  • foreverunsure@pawb.social
    link
    fedilink
    arrow-up
    15
    ·
    2 months ago

    Funny how the free plan is not receiving any of the recently announced trash, making it more attractive than the paid options.

  • unexposedhazard@discuss.tchncs.de
    link
    fedilink
    arrow-up
    7
    ·
    edit-2
    2 months ago

    Proton and all they do was always an obvious attempt at making money off of non tech people that care about their privacy but dont know what to do.Their stuff might be free now but from how much vendor lock-in they are building into their software its quite obvious to me.

    Their services are counter to all the best practices of security by design. If they spent all this time on improving existing secure systems and making them more user friendly they would have a much more positive impact.

    • Myaa@beehaw.org
      link
      fedilink
      arrow-up
      2
      ·
      2 months ago

      Do you mind expanding on this? I recently moved away from Gmail to Proton in an attempt to be more privacy conscious and don’t really know of any alternatives. Even at a paid tier I only use Proton for their email services.

      I would say I’m generally tech savvy but new to the whole privacy space. What better alternatives are there?

      • unexposedhazard@discuss.tchncs.de
        link
        fedilink
        arrow-up
        3
        ·
        edit-2
        2 months ago

        Just use any other email provider that works for you and use standard OpenPGP to encrypt your emails. This is how email end to end encryption (e2ee) usually works.

        As long as the emails are properly e2ee, no email provider is “more private” than others. They can always see who your are emailing and when. Proton is still forced to give out all your metadata to the cops just like any other service.

        Also if whoever you are emailing isnt using protonmail, or another PGP compatible client, then your emails arent actually encrypted at all. For work emails the other party usually wont be using any of that so there is no point, for personal stuff i would honestly use standard messengers that have encryption built in like matrix, signal, session.

        If you want e2ee email tho, then on desktop Thunderbird has all the OpenPGP stuff built in and for mobile there is the K9-Mail client that can be coupled with the openkeychain plugin to offer encryption.

        There are also things like DeltaChat that allow you to use email in an instant messaging style format while using the same encryption keys that you use for standard emails. But tbh thats not what email is intended for, i would just use matrix for that.

        Protonmail is a decent attempt at offering “easy to use” encryption but by doing so, makes it overly complex from a software security and compatibility standpoint.

        With e2ee you want to have the absolute minimum level of complexity and code to make it easy to audit and understand. PGP has been the standard implementation for email encryption for decades. Any attempt to “expand” on this by implementing fancy web based shenanigans undermines the simplicity and inter compatibility of the preexisting email encryption ecoystem that everyone has been using.

        • Myaa@beehaw.org
          link
          fedilink
          arrow-up
          2
          ·
          2 months ago

          Thanks so much for sharing! You gave me some good info to start looking into. I appreciate your help! I was getting a little weary of Proton when they announced the AI nonsense and now the crypto wallet really seals the deal. Doesn’t feel good knowing my money is going to develop buzzword features instead of fixing the existing issues in their current products.

          • unexposedhazard@discuss.tchncs.de
            link
            fedilink
            arrow-up
            2
            ·
            edit-2
            2 months ago

            Good luck with your software endeavors!

            This stuff is hard to get into, especially so if you don’t already know all the specific terms to find what you are looking for. But having control over your own data and being able to decide where it resides is worth the effort to me.

        • oktux@beehaw.org
          link
          fedilink
          arrow-up
          1
          ·
          2 months ago

          The problem is that almost no one uses PGP, as this vice article points out: https://www.vice.com/en/article/vvbw9a/even-the-inventor-of-pgp-doesnt-use-pgp

          If your goal is secure communication with other tech-savvy, privacy conscious people, then I agree that PGP is a reliable, time tested solution.

          But if your goal is to keep email providers from data mining your inbox, then Proton is an easy way to do that, no matter who you’re communicating with.

          • unexposedhazard@discuss.tchncs.de
            link
            fedilink
            arrow-up
            1
            ·
            edit-2
            2 months ago

            How can proton protect your unencrypted emails? Unless you are writing someone that also uses protonmail or pgp, the emails wont be encrypted. This is barely an advantage at all over the existing system. You are just telling people to depend on this single point of failure, which is proton.

            You cant expect everyone to use protonmail, that would be unwise from a decentralization standpoint. The real solution is only using email for people that are unwilling or unable to use something other than email. For everyone else you should simply switch to different communications protocols that were made with e2ee in mind.

            • oktux@beehaw.org
              link
              fedilink
              arrow-up
              1
              ·
              edit-2
              2 months ago

              I think we mostly agree, and I appreciate you advocating for secure alternatives and privacy in general!

              How can proton protect your unencrypted emails? Unless you are writing someone that also uses protonmail or pgp, the emails wont be encrypted.

              That’s true. Proton can only encrypt your inbox in that case.

              This is barely an advantage at all over the existing system.

              I disagree. Having my inbox encrypted and using an email provider that doesn’t mine my data is certainly worthwhile for me.

              You are just telling people to depend on this single point of failure, which is proton. You cant expect everyone to use protonmail, that would be unwise from a decentralization standpoint.

              I’m not advocating Proton over other, more secure and private communication methods. My point is that, if you’re choosing an email provider, Proton is a good choice. They’re a nonprofit whose mission is privacy, and they spend considerable technical effort to ensure it.

              I would hate to see someone switch from Proton to Gmail or some other provider that doesn’t offer any privacy because they mistakenly think all providers are the same.

              The real solution is only using email for people that are unwilling or unable to use something other than email. For everyone else you should simply switch to different communications protocols that were made with e2ee in mind.

              To the extent that’s practical, I strongly agree. As you correctly point out, email is a plaintext protocol, and there’s nothing Proton can do about that.

              But if you do use email and not all your contacts have exchanged PGP keys with you, which I’m sure is true for many people, then I think there’s a lot of value in using a provider that offers an encrypted inbox and doesn’t mine your data.

  • Ilandar@aussie.zone
    link
    fedilink
    arrow-up
    6
    ·
    2 months ago

    Why build Proton Wallet?

    Early in our journey, we experienced first-hand what it’s like being cut off from the financial system and at the mercy of large banks and institutions — an ordeal that affects millions of people across the globe. In the summer of 2014, as the original Proton Mail crowdfunding campaign was in progress, Proton had a near-death experience when PayPal froze our funds(new window), questioned whether encryption was legal, and whether Proton had government approval to encrypt emails.

    Fortunately, in that instance PayPal returned the blocked funds, and Proton was able to start the journey that we’ve been on for the past decade. However, that dangerous moment has always stayed in our minds, and we still keep a proportion of Proton’s financial reserves in Bitcoin.

    Having experienced firsthand the unreliability of the traditional financial sector, building Proton Wallet is an important strategic move to make Proton more resilient and independent in the future. By enabling us and the entire Proton community to more easily adopt means of payment that deliver on the promise of financial freedom for all, we better insulate Proton from the risks posed by traditional finance.

    • Mind Ya Beez Wax@beehaw.org
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      2 months ago

      Having experienced firsthand the unreliability of the traditional financial sector

      *Under very specific circumstances that no user could possibly come across on their own

      Incredible the lengths people go to to justify their shit.

  • Gamers_mate@beehaw.org
    link
    fedilink
    arrow-up
    4
    ·
    2 months ago

    It starts with a Bitcoin wallet. Cryptofication is just another flavour of Enshitification. They could of at least used a crypto that is more energy efficient than Bitcoin not that there is really any green cryptos in the first place.

  • Virkkunen@fedia.io
    link
    fedilink
    arrow-up
    4
    ·
    2 months ago

    Instead of focusing efforts into maintaining and improving their current products, of which many lack basic features, Proton decides to (in less than a month it seems) expand their portfolio into crypto bro and AI grifter territory.

    I was already quite annoyed and unhappy with Proton’s services lacking things and the steep price (13€ a month and I can’t even use unlimited addresses for my custom domain), but this is the last straw. Fortunately I was already planning to move out so I’m able to just set everything up tomorrow and be done with it. I’m planning to get Migadu’s micro plan, move back to Bitwarden and get that Hetzner 1TB StorageShare, the three combined will be cheaper than 13€ a month and I’ll be getting more bang for my buck

  • emerald@beehaw.org
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 months ago

    Ah, timely as ever, really riding that crypto hype

    At least they’re not launching their own token yet