On-disk encryption is deprecated, they advise instead using Veracrypt or EncFS for that.
Logseq Sync was implemented for multi-device sync, which uses age for end-to-end encryption. It’s a paid subscription for this feature, however users can also just sync their Markdown files using Syncthing, Git, etc alternatively if they’re careful to avoid conflicts.
Sorry about necroing this post but are there any updates about the tools or the implementation of this new category?
I have been searching tools like this to “level up” my note taking strategy but I’m not sure what to choose because I mainly follow the criteria presented at the bottom of each tools category on the website (like full open-source requirement, EE2EE encryption, etc) but the “Knowledge Tools” category does not exists yet.
My first serious notes where OneNote, but they are cumbersome and when you have a chance to explore the world of note apps you can truly see how limited they are. Then I went to Evernote, but too late fund out about their privacy policy,… which is terrible and now I have to migrate about 5 years of notes. And I can note simply export, must do note by note. In the meantime, they will parade trough my private stuff.
So, I switched to Notesnook, which is OK, but has glimpses and cost me some notes when updates, sync etc. are not there yet – they need some time to develop it properly.
In the meantime, I have found Obsidian which was on the first rune too much for me, but now I do almost everything in it. I used cryptomator and OneDrive to sync it. I use some of the plugins that truly are extreme time saver (e. g. plugin that changes the url link into name of page automatically). The ability to tweek every part of notes and connect it is truly an option that helps to build a knowledge base. For privacy I trust reddit, this forum and other that thy when thru the code and see that is OK, the same for plugins.
Obsidian is local-first, Audited and has no telemetry. And you can sync it using Syncthing, their E2E sync is encrypted and an audit on for it is also planned as per the blog post.
Only thing it doesn’t tick is Open-Source clients.
If the files are stored in an open format, guaranteeing portability and low switching cost. It’s local-first with optional E2EE sync, removing any dependency or need of trust on Obsidian’s servers. And the clients have been audited by a trusted third party, so there’s reassurance that the clients aren’t doing anything shady and verifies that the E2EE claims are real. Honestly, I don’t know why at that point the client being open-source would be important from a privacy point of view.
I like Obsidian, but if someone can explain to me why I got instabanned for this post I would really appreciate it.
first Obsidian forum message after registration
Good afternoon.
I would appreciate anyone who is sympathetic to the fact that I am reviving this thread and would like to thank your team for bringing clarity and certainty to default plugins.
In light of the current trends in the security sector and the rapid development of AI in the context of helping coders, from those with good intentions to experts without honor and dignity.
It would make a lot of sense for this kind of information to be more public and reach standard users faster, maybe I’m lacking in sampling, but from my observations the topic of plugins, their potential threats and the fact that the Obsidian team vouches for the default plugins and their security is not made known when buying or reviewing a product on the main site, before investing money, during internal deliberations whether to start using the product, although this is Obsidian’s strong point, don’t get me wrong.
This information can be read in pop-up menus while using the application, most newcomers treat such warnings with a sleeve, for them it’s just another cookie window or user agreement that needs to be swiped and clicked OK, such are the realities of the small retention time era, it seems to me that this is not enough to ensure awareness, even if it’s a beginner, but a potential developing consumer of the product.
I think the emphasis on the fact that the default plugins are constantly being tested and audited for security would fuel the interest of beginners to what then the default plugin is different from third party solutions, it would increase the threshold for awareness of the importance of these basics of security in novice users, after all it is not some phantom threat - the application is trying to be your database, your center of ideas and useful information.
Every master of this or that tool was once a beginner. At this point, publicity like this, in my humble opinion, is only enough for a threat aware person.
The demand for privacy is increasing.
The need for information security is growing.
The request for software like Obsidian is rising.
So the call for initial educational pitch mechanisms from developers is also going up.
It’s a win win situation.