Privacy Questions and Answers

[Sprout3425]

Key takeaway: It seems the optimal solution is for people to understand the technology better.

This is why I think this should be a key focus for the developers of this site. Thanks to @overdrawn98901 I have got one resource to help me accomplish this, are there any other recommended resources? I have been recommended the Hitchhiker’s Guide to Privacy as well, along with other resources in my post here: Data Privacy and Security Educational Resources - #5 by Paranoia.

@overdrawn98901

Personally, VPNs don’t have to be your first step in privacy, and are slightly overhyped in my opinion. Great for security on unsecure networks like public WiFi, but there better first free options to anonymizing yourself. I’d say pay for a VPN once you understand the use case for it.

I am using Proton VPN for free, it seems to work fine, would you suggest paying for it? Regardless, I already have access to a VPN and from what you said, it appears that I should be using one, especially on public networks.

@overdrawn98901

Pretty much impossible. But again, whats your threat model? Are you worried someone has breached our e-mail secretly and is monitoring all of your e-mails? That some high class level attacks (if you’ve secured your accounts), you probably don’t need to worry about that. Worried that Gmail is analyzing your emails or something? Switch to a paid e-mail provider, there are suggestions in the guide.

If these order confirmation details are not E2EE, doesn’t this mean that any of the infrastructure relaying the message in the middle of the pathway (sender to receiver), will be able to see the contents of this email, and if they are breached all my information could be stolen?

@overdrawn98901

Security <> Privacy. More extensions, the more unique your fingerprint, but the more likely you can block malicious content. uBlock Origin is the only one you need in my opinion as the best bang-for-buck for privacy + security.

So, you reckon I ditch skip redirect? I then I will probs use Bitwarden extension for convenience.

@overdrawn98901

I haven’t used Orbot. I generally don’t like to trust free VPNs (whats in it for them?), so I pay for mine. Don’t use free VPNs.

Afaik, the Tor project themselves recommend Orbot. I am using Proton VPN for free, as for what is in it for them, under their freemium model, potential subscribers is what is in it for them, plus I assume it’s like bait, they want to reel customers in.

@overdrawn98901

• I have a backup physical key to unlock Bitwarden in case my phone explodes.

How does this work?

@overdrawn98901

One time process, so I’d just recommend doing it. Feel free to double check its still configured after major updates though.

@overdrawn98901

This is more-so a security issue. Single file encryption != full drive encryption. Single file encryption has different use cases than full drive encryption. Full drive encryption is useful is someone steals your computer, than cannot arbitrarily read everything you have stored (i’ve recovered data easily from computers that were unencrypted); however, if your computer is left unlocked or a hacker has the password, they can read everything. Single file encryption is just that - even if a hacker stole your computer, knows your computer password, the single file encryption is used with a different password, so that is a whole separate issue to crack it. You can also pass around the encrypted file anywhere - email, copy it on an enencrypted drive - the works, and it’ll be secure so long as your password is secure.

Interesting…

Thanks for clarifying this!!!

Key takeaways I got from your detailed reply which I truly appreciate:

• Preferably, go to stores and pay with cash.
• Use email aliases, for everything? Including important stuff like bank accounts … Wherever allowed. I noticed Apple would not allow me to use an addy.io alias for my Apple ID.
• Use Apple Mail over canary for non-proton mail accounts.
• After reading up on OpenPGP it looks like you need two people to use it, and it is a hassle, so it seems I should forget about it for now. However, OpenPGP is the best way to encrypt emails.
• Buy a new router. Sigh, this will likely be very beneficial (improving itnernet speeds + privacy), but expensive money and time wise.

One question that remains unanswered is whether using a client like thunderbird or outlook is different privacy-wise, when using a non-proton mail email account.

Again, thanks to you and sha123, for clarifying a lot of my questions!!!