Regarding Logseq’s encryption nowadays:
On-disk encryption is deprecated, they advise instead using Veracrypt or EncFS for that.
Logseq Sync was implemented for multi-device sync, which uses age for end-to-end encryption. It’s a paid subscription for this feature, however users can also just sync their Markdown files using Syncthing, Git, etc alternatively if they’re careful to avoid conflicts.
Sorry about necroing this post but are there any updates about the tools or the implementation of this new category?
I have been searching tools like this to “level up” my note taking strategy but I’m not sure what to choose because I mainly follow the criteria presented at the bottom of each tools category on the website (like full open-source requirement, EE2EE encryption, etc) but the “Knowledge Tools” category does not exists yet.
My 2 cents.
My first serious notes where OneNote, but they are cumbersome and when you have a chance to explore the world of note apps you can truly see how limited they are. Then I went to Evernote, but too late fund out about their privacy policy,… which is terrible and now I have to migrate about 5 years of notes. And I can note simply export, must do note by note. In the meantime, they will parade trough my private stuff.
So, I switched to Notesnook, which is OK, but has glimpses and cost me some notes when updates, sync etc. are not there yet – they need some time to develop it properly.
In the meantime, I have found Obsidian which was on the first rune too much for me, but now I do almost everything in it. I used cryptomator and OneDrive to sync it. I use some of the plugins that truly are extreme time saver (e. g. plugin that changes the url link into name of page automatically). The ability to tweek every part of notes and connect it is truly an option that helps to build a knowledge base. For privacy I trust reddit, this forum and other that thy when thru the code and see that is OK, the same for plugins.
Obsidian is local-first, Audited and has no telemetry. And you can sync it using Syncthing, their E2E sync is encrypted and an audit on for it is also planned as per the blog post.
Only thing it doesn’t tick is Open-Source clients.
If the files are stored in an open format, guaranteeing portability and low switching cost. It’s local-first with optional E2EE sync, removing any dependency or need of trust on Obsidian’s servers. And the clients have been audited by a trusted third party, so there’s reassurance that the clients aren’t doing anything shady and verifies that the E2EE claims are real. Honestly, I don’t know why at that point the client being open-source would be important from a privacy point of view.
Well, it ticks everything we both said. Being open-source is a requirement in the minimum criteria stated on the website not me. 
Notebooks - have to be open-source.
Password managers - can be proprietary just to keep 1Password.
We should either require for the software to be open-source or not have that requirement at all.
I am confused.
Edit :
or move them to the best case criteria like for Cloud storage.
I edited my post to make it clearer.
If we care about digital rights and freedoms, then open source should be a minimum requirement site-wide.
I like Obsidian, but if someone can explain to me why I got instabanned for this post I would really appreciate it.
Good afternoon.
I would appreciate anyone who is sympathetic to the fact that I am reviving this thread and would like to thank your team for bringing clarity and certainty to default plugins.
In light of the current trends in the security sector and the rapid development of AI in the context of helping coders, from those with good intentions to experts without honor and dignity.
It would make a lot of sense for this kind of information to be more public and reach standard users faster, maybe I’m lacking in sampling, but from my observations the topic of plugins, their potential threats and the fact that the Obsidian team vouches for the default plugins and their security is not made known when buying or reviewing a product on the main site, before investing money, during internal deliberations whether to start using the product, although this is Obsidian’s strong point, don’t get me wrong.
This information can be read in pop-up menus while using the application, most newcomers treat such warnings with a sleeve, for them it’s just another cookie window or user agreement that needs to be swiped and clicked OK, such are the realities of the small retention time era, it seems to me that this is not enough to ensure awareness, even if it’s a beginner, but a potential developing consumer of the product.
I think the emphasis on the fact that the default plugins are constantly being tested and audited for security would fuel the interest of beginners to what then the default plugin is different from third party solutions, it would increase the threshold for awareness of the importance of these basics of security in novice users, after all it is not some phantom threat - the application is trying to be your database, your center of ideas and useful information.
Every master of this or that tool was once a beginner. At this point, publicity like this, in my humble opinion, is only enough for a threat aware person.
The demand for privacy is increasing.
The need for information security is growing.
The request for software like Obsidian is rising.
So the call for initial educational pitch mechanisms from developers is also going up.
It’s a win win situation.
DM a staff member about your ban, otherwise that entire conversation would derail this thread.
You are not accepting incoming messages, so regarding that:
I would appreciate some quick advice on contacts.
Where to DM from and who to DM to if I got banned there after the only post I quoted.
The account was full, shouldn’t give the impression of a bot.
Obsidian has completed its third audit with two vendors this time focus on client and their Sync service.
They also streamlined their plugin ecosystem for Security and ease of use too via esLint checkers and vulnerability scanners without AI. It also states network requests made by extensions like App transparency report in App store.
I think it is fair to consider Obsidian at the least. I don’t know about Logseq.
Regarding Trilium, it is good in the case of UX. But It was resurrected by community. I am not sure about the stability of patches to its electron engine. While as obsidian has a dedicated team.
You can easily check for Network connections regards to privacy. If you disable automatic updates for apps & plugins and monitor network activity. I don’t see any traffic at all. Added to the fact that it uses a open format that is markdown.
I agree that Obsidian should be considered. I’ve decided it meets my requirements for work-related note taking: it’s local-first, and—now that it includes an audit feature—it provides a secure environment. I can also sync via my employer’s chosen cloud service.
Logseq’s development has been slow; my impression is the team has been prioritizing core functionality rather than security features, and I don’t believe security is a current focus.
Is Obsidian open source?
Obsidian is not open source, though it does appear they have had an audit, including “focus on client and their Sync service”.
It really sucks that Obsidian isn’t opensource. I’m always keeping an eye on the competition to switch but their app and sync is so good! I also hate their electron based app and opt for neovim.
Obsidian explained that they do not see the benefits in open sourcing their code and rather rely on security through obscurity, third party audits and their privacy policy.
Source: Why isn’t Obsidian open source
also lying
One way to do that is to get a third party security audit, and as of 2024 Obsidian has completed one such audit (and fixed four minor issues that this audit surfaced). This is a big deal, and I’m not aware of any other note-taking app that has completed such an audit.
When StandardNotes had multple audits, even before they existed Has Standard Notes completed a third-party security audit?