They're using Cloudflare which is a bit weird for a "private" service.
this post was submitted on 22 May 2022
16 points (86.4% liked)
Privacy
31833 readers
111 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
IMO if you're starting with your project is understandable, they seem to have a shit ton of money put on it, thought, so that may make it a bit unforgivable, but things can change.
Of all the commercial networks they could use, surely CloudFlare is less evil than e.g. Google
Cloudflare isn't less "evil" than Google by any means. Both are equally bad and should be avoided at all cost
I would disagree. I understand the issues people have with Cloudflare and how their man-in-the-middle as a service business model compromises privacy and internet decentralization in general, but there's just no comparison to Google, whose business model is to build personalized advertising profiles for all of their users.
Some may make more money than others, but if they spy on you it means that they spy on you and eventually sell your data. You're the product. And as someone already said in this thread, you cannot self-host. This appears to be neither decentralized nor private.
If I were the CIA and I wanted to create a honeypot, it would look exactly like this.
You might says that of most comercial privacy services...
Yes, which is why I don't trust most of them ;)
Granted, even the likes of uberspace.de/en need you to trust their builds of Free software.
It is very interesting that they use the IPFS protocol, but it is disappointing that only the front-end is open source and that there is no self-hosted solution.
It's actually fairly concerning. I trust encryption but it is still always wiser to practice defense in depth. I'd rather not hand out the cyphertext of my messages to anyone who wants to do sidechannel analysis, encryption implementation failures or even just archiving my messages to crack in 50 years when quantum computers become popular.
the software looks really good for an open source project, and would probably be very useful for collaborating on documents.
they store your encrypted data on ipfs, so in theory it's decentralized and there's no reliance on any one party. except in ipfs you still need a host to keep your file alive while the rest of the network doesn't care about it, which would be this company, hence why there's a storage limit. i don't see any options to self-host or switch host, though technically the software is open source so you can just change the default host in the code. there might have been an easier option that i missed, in fact i really hope there is