Every company says they “care about your privacy.” It’s in every privacy policy, every marketing page, every investor deck. But if I can reset your password via email, I know who you are. If I log your IP, I know where you are. If I require phone verification, I have leverage over you.
That’s not privacy. That’s performance art.
This is definitely a though provoking article. Everyone should read it.
I won’t talk much about it much outside of this in this in this specific thread, but I am disappointed that people are quick to judge this new service that’s been officially launched for only a few weeks. I hope to see some trusted, honest reviews of this from people who actually use the service before critiquing it.
I get what you mean. I am not sharing bad news about it to mean I don’t like it because I have already made my mind about it. I am only sharing info for others to know as an FYI only. Nothing more.
To me, this is a good solution along with others available. The quality of the product, solution, etc. is to be properly determined as more people use it.
Yeah, he wasn’t as measured in his “review” as one could be. He may not be wrong with everything he says but he also didn’t seem to account for some easy to see reasons for why something may be the way it is. A little shortsighted if you ask me.
Anonymity is something quite difficult to achieve. I think the way @ybceo/Servury run their project is quite nice, but since this is PrivacyGuides it is worth stressing the importance of understanding what anonymity is and how difficult it is to achieve. @maqp is likely in a far better position of knowledge to offer critique but I will mention a few things I don’t think are covered by the blog post:
Connecting to the service must be anonymised from a network perspective. EDIT: See @maqp’s various comments on metadata-resistance.
Maybe it is a little frowned upon here, but I think the cryptocurrency community have a lot of ideas for identity/account recovery that does not depend on the product/service provider.
The issue with that is it doesn’t work when the service needs to show you account-specific data, like Netflix showing what shows you’ve already watched for example. It works when the service is the same for everyone and it’s just a matter of allowing you in or not, like Mullvad just needs to check if you’re a paying customer before letting you in. Kagi’s implementation of privacy pass doesn’t allow you to save your settings for this reason.
I’d say other than offering an onion service, there’s not much to be done on Servury’s end for this, it’s out of scope imo. It’s the job of your software on your device like your VPN to protect your IP address.
Thank you for the caveats/explanations. I think given those facts it is not hard to say Servury is class-leading from a privacy perspective, but any service is difficult to make completely anonymous because of case-by-case constraints.
I definitely agree there, I wouldn’t say any service storing data associated with an account is in any position to claim to be anonymous. But I think what they’re doing is a huge boost to user privacy for sure.