Every other day I see the the world turning into a cyberpunk hellscape with no privacy. I am starting to feel what’s the point of trying to claw back privavy.
However I am not givong up as the need for privacy is more important than ever.
It the spirit of continuing the fight how should what should I Improve next?
Currently running Fedora 40 and use only open source apps. When browsing I try and use Mullvad browser and use my regular logins on a hardened Firefox with arkenfox. I have proton unlimtes for mail, passwords, drive and a VPN which is always on. I have filen as a back for redundancy and my most import files are encrypted with Crypomator and uploaded to both clouds.
On my mobile I use a pixel 4, I tried Graphene OS but my banking failed so back to stock Android. The only I have replaces most android apps with Fossify apps and use Obtanium, Aurura and F-Droid for apps. I use ente Auth for authentication except for my work as I have to use Microsoft Authenticator. The only proprietary apps I use are Facebook messenger, spotify, google maps and my bank. I use Facebook messenger and maps through shelter .
For browsing on Android I use Mull and on my android Proton VPN is always on. I visit twitter and twitter ocasionly but always through mull browser.
For keeping in contact with freinds I use Aliucord in Android and Vesktop on my PC
Before anyone asks my bank is App only and it is the only way I have been able to successfully manage my finaces so I have to stay with that for now.
For spending habniys I try to use Google pay as little as possible and use my master card.
My Apologies for my english I am a little stupid when it comes to spelling and grammar.
Set your system-wide DNS to a provider in a country with better privacy laws. I use quad9. Disable DNS over HTTPS (DoH) in Firefox if you have it enabled, as it sends DNS queries to cloudflare, which may be even worse than sending your DNS queries to your default ISP servers (also disable DNS prefetch). If you’re hosting a DNS server, you can also set up a DNS blocklist if you use something like unbound or unwind.
I would get away from proton, they’re too popular and too much of a target, and most critically they fucked over a climate protestor, and then removed “we do not keep any IP logs” from their privacy policy. If they’re willing to lie about that, what else are they willing to lie about? If you want a fun project, set up your own mail server. Easy (relatively speaking) to do on OpenBSD with a cheap VPS provider like buyvm. Password manager is easy enough to write yourself with an openssl script, or you can use some other open source password manager if you hate scripting. Storage should be cheaper on a VPS than whatever proton is providing, and you can even host your own VPN (though this has potential to be easily routed back to you unless you serve multiple users with your VPN).
Disable javascript everywhere you don’t need it. I use qutebrowser, and javascript is disabled by default, and I only reluctantly enable it per-domain when I absolutely have to.
Use 3rd party open source clients for propietary apps, or move to open source ecosystems (like lemmy!).
I would get off of Android all together, and switch to a real Linux phone, if you can tolerate the jank. I don’t trust Google not to put a backdoor in the Android kernel (which forked all the way back at Linux 2.something). You could also try switching to a dumb phone, but those still run some amount of spooky blackbox software and I wouldn’t totally trust it from any major phone manufacturer.
They have a onion service. If the climate activist used that, then proton wouldn’t have any details to give LE.
Use the privacy tools they tell you to use. they literally tell you how to prevent this from happening.
Use TAILS for activism
Also, they have to follow Swiss law if they want to stay in business.
Perhaps trusting law-abiding businesses is bad for privacy
Well, it usually is a good sign when an org actively breaks laws…choosing morality over law