• exanime@lemmy.world
    link
    fedilink
    English
    arrow-up
    30
    ·
    3 months ago

    Just signed up today for the family plan in my ongoing degoogling process

    It’s a bit pricey but so far loving it. Specially Proton Pass, coming from bitwarden (which I liked), it’s nicer and faster, much faster

    • John Richard@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      24
      ·
      3 months ago

      And so what happens to your passwords if Proton were to go offline and you needed to continue using Proton Pass? Do they have an open source server you can use like Bitwarden does or vaultwarden? Or are you essentially locking yourself into a new walled garden for no reason other than name recognition? Why not just use KeePassXC which is encrypted locally rather than share your password with a third party who can easily capture your private key password?

      • nutsack@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        edit-2
        3 months ago

        I think a lot of these cloud-based password vaults will have a local database that syncs with the cloud. I think you can unlock them and access your passwords without internet access

        • John Richard@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          11
          ·
          3 months ago

          Keyword… unlock, not add information or use them offline where they can sync to an open source backend. They are cloud-based password managers that are designed to operate online. The backend is not open source. It is designed to lock you into a walled garden.

          • nutsack@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            3 months ago

            The unlocking happens locally. it’s simply decrypting. also, i think you can export the data from proton pass.

            it’s a cloud solution. keepassxc works great and I don’t know why you want something else to replace it

            • ruse8145@lemmy.sdf.org
              link
              fedilink
              English
              arrow-up
              1
              ·
              3 months ago

              Browser integration with quality biometric login is a beautiful thing. Keepass’ implementation of both is trash, and keepassxc’s browser integration may actually be worse than the original.

              That having been said I always recommend to people they use two managers, with keepass being the secure base for things you don’t often need convenient access to like savings accounts, password manager passwords, tax services, etc.

              bitwarden, proton, et al I use for the day-to-day…I don’t give any fucks if my Lemmy account is lost for example.

        • John Richard@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          7
          ·
          3 months ago

          It will cache credentials for a short time so you can still access some of your passwords. It will not let you add new credentials. It’s like a web browser working in offline mode for a period of time. It is a cloud-based password manager with a closed-source server backend.

        • ruse8145@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          “A walled garden is a garden enclosed by high walls, especially when this is done for horticultural rather than security purposes, although originally all gardens may have been enclosed for protection from animal or human intruders.”

          Agreed proton isn’t this

          "A closed platform, walled garden, or closed ecosystem[1][2] is a software system wherein the carrier or service provider has control over applications, content, and/or media, and restricts convenient access to non-approved applicants or content. "

          Try using thunderbird and id argue proton is this

          • asdfasdfasdf@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 months ago

            Still, that seems like a combo of “comes with the territory of encrypted email” and “their software could use some major improvements”. I think closed platform is closed by design.

            • ruse8145@lemmy.sdf.org
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              3 months ago

              Nah, fundamentally proton uses the same encryption as everyone else, they just have a central server to exchange keys rather than one of the open servers.

            • dan@upvote.au
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              3 months ago

              comes with the territory of encrypted email

              AFAIK they haven’t tried to standardize their implementation, which to me implies that they’re not interested in interoperability. That’s unfortunate. I wouldn’t want to be locked in to a vendor like that.

              At least some providers do try. FastMail published the spec for their modern, stateless replacement to IMAP through the IETF as “JMAP”, and built on top of existing RFCs where possible.

    • ruse8145@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 months ago

      Does pass support custom url filters yet? I self host and so I have a lot of 192.168 bookmarks…when I tried pass it had no way to organize them by url prefix (port number).

    • Manalith@midwest.social
      link
      fedilink
      English
      arrow-up
      10
      ·
      3 months ago

      My only gripe with Proton Pass so far is that I’m used to Bitwarden’s right-click autofill menu and some sites’ 2FA codes don’t automatically pop up for some reason.

    • BenPranklin@lemmy.world
      link
      fedilink
      English
      arrow-up
      49
      ·
      edit-2
      3 months ago

      Don’t put all your eggs in one basket again, that’s what makes degoogling such a difficult thing. There’s several proton services I intentionally avoid and use alternatives for so I don’t have to uproot my entire digital life to leave them if they start being shitty. If you go from using all google services to all proton you’re setting yourself up to need the same sort of big migration down the road. 15 years ago google was also an awesome company that kept making incredibly useful things for users just because they could and look at them now.

  • MisterFrog@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    11
    ·
    3 months ago

    They’re just too expensive. Like, sure, it costs money to run, but 3.49€/month (the discounted 24 month rate) for the mail only plan, 15 GB storage. (41.88€, $45.17 USD, $67.28 AUD per year)

    That’s really expensive if you just want mail.

    The other stuff, is also really expensive. To the point that makes you think, “there is no way google is making THIS much to make up the difference in advertising to me for a comparable plan”.

      • ruse8145@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        3 months ago

        Switched to them in 2022 after a 2-year of proton precisely because the revised proton plans were weird and because id heard a lot of negative stories about getting locked out (from the proton side, not losing password). Ironically I almost just went thru the lockout process but thankfully the email support guy was able to get things sorted.

        Tbh I miss nothing and since I use simple login or anonaddy for most misc things, switching was easy. My proton account is de facto dead…I wouldn’t refuse to return, but I’m really just an a la carte guy.

    • aquafunkalisticbootywhap@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      11
      ·
      3 months ago

      remember, it’s not just about making up the difference per user in advertising, it’s about getting and keeping as many people into their ecosystem as possible.

      then they make some cash from selling data, and having more data to scrape to train their models and such. proton isnt making any off your data

      it’d be great to be able to easily compare cost and expense, but companies obscure so much in the backend. rental car companies buy discounted in bulk, then sell the cars tens of thousands of miles later at a profit, and that’s before any income from rental

    • Mac@federation.red
      link
      fedilink
      English
      arrow-up
      4
      ·
      3 months ago

      You get mailserver capabilities with that tier as well though. You shouldn’t be using the plus plan unless you need the email storage or host custom domains and don’t want to deal with the admin.

      • nieminen@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 months ago

        To be fair, it’s not as clear as it could be that there are other “plus” plans. If you happen to land on the proton mail page when looking, they only show you the mail plus option (and unlimited). And even then really truncate what exactly you get for each paid option. There’s a page that I was only able to find after opening my free account (it exists when not logged in, just never found it) that explains in depth all the options and differences.

        Annoyingly, most of the individual upgrade pages don’t give the 2 year purchase option either.

  • flop_leash_973@lemmy.world
    link
    fedilink
    English
    arrow-up
    14
    ·
    3 months ago

    Doesn’t appear you can do anything of that via the Drive mobile app. Maybe one day they will make that possible.

    If they can ever get a spreadsheet application I could fully get away from Google for that kind of thing without losing out on anything I care about.

  • gccalvin@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    1
    ·
    3 months ago

    I know there are different use cases for each, but generally do people prefer self hosted nextcloud, proton docs, or libre office?

    • variants@possumpat.io
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 months ago

      probably depends what youre into, I have my own home lab so I setup nextcloud with collabora for my personal stuff

    • fmstrat@lemmy.nowsci.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      Nextcloud and OnlyOffice. Collabora is basically a VNC session over LibreOffice. While OnlyOffice is web-native and has much better compatibility.

    • Lem453@lemmy.ca
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      FWIW collabora and open office can integrate with other clouds like Seafile and owncloud Infinite scale. So even without NextCloud it can be used. It can also be used stand alone.

    • John Richard@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      92
      ·
      3 months ago

      They act just like Microsoft. Lot’s of people think Microsoft is successful. If you think Microsoft is the champion of privacy though you might be in a cult.

      • conciselyverbose@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        34
        ·
        3 months ago

        I’ll tell you what. When proton ships a product that takes a screenshot of my desktop every 5 seconds and stores it in an unsecured DB any user on my computer can access, we’ll call them even.

        • John Richard@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          32
          ·
          3 months ago

          I’ll tell you what. If you can prove to me by pointing to the specific source code that would prevent Proton from capturing your private key password when you login or decrypt using their standard clients then I’ll join the Proton cult.

          • nomous@lemmy.world
            link
            fedilink
            English
            arrow-up
            18
            arrow-down
            2
            ·
            3 months ago

            prove to me by pointing to the specific source code that would prevent Proton from your private key password

            You want them to point to code (that’s not publicly available) that prevents Proton from capturing credentials?

            What a dumb hoop to tell someone to jump through. Do you expect someone to actually post a block of code? Would you even be able to read it?

              • Grippler@feddit.dk
                link
                fedilink
                English
                arrow-up
                11
                arrow-down
                1
                ·
                edit-2
                3 months ago

                Yes I can read it. You think I’m an f’ing idiot?

                I mean, you’re certainly not providing much proof that you have any measurable software skills that enables you to do the proper evaluation even if you received the code from proton. Why should anyone believe this unsubstantiated claim from you?

                Edit: for the record, I’m don’t give a shit and I’m just yanking your chain here.

                • John Richard@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  16
                  ·
                  edit-2
                  3 months ago

                  I’m a black belt in TypeScript, JavaScript, Go, Rust, C, C++, Python & can read and write assembly with my eyes closed, okay?😉

          • conciselyverbose@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            6
            ·
            edit-2
            3 months ago

            Such source code isn’t possible with the general audience service they offer, even if being open source were a requirement for credibility in any way.

            You’re comparing them to a company with a long history of actively hostile behavior despite the fact that there’s never been a single hint of anything resembling hostile behavior from them, they operate from a country with meaningful privacy protections and only surrender data when compelled by their own courts (who only do so in circumstances that actually warrant it), and haven’t actually given up information that’s useful when required to because they don’t have it.

          • ArchRecord@lemm.ee
            link
            fedilink
            English
            arrow-up
            16
            arrow-down
            1
            ·
            3 months ago

            This simply isn’t really possible.

            Even if they published open-source code for their backend, it wouldn’t prove that it’s actually what their systems are running.

            And when you are storing your data on their servers, and decrypting it by sending over your password, there’s no way you can actually truly prevent them from accessing your data, if they were to modify how their systems function overall. (this is true for every company)

            Even if they were using zero-knowledge proofs to verify and prove to you the computation done on the server matched what would be expected from published open-source code, then either their very own systems (and by extension, their administrators), or a different company’s proprietary TPM module, would be the root of trust for those ZK proofs, and would still have the same underlying trust assumptions of at least 1 company having the ability to potentially steal your information.

            If you want to rail against Proton for this, you have to be against every single cloud-based instance of code that hosts encrypted data, by any company, for any user.

            Saying Proton acts just like Microsoft is a laughable comparison to make in order to justify claiming a lack of privacy or security on Proton’s part.

            Why? Is it because they’re both companies that offer online services? Guess what, loads of companies do that. But you know what Proton doesn’t do? Give away the contents of people’s files, like Microsoft states they do in their own transparency reports, that they conveniently stopped publishing in 2022. Microsoft handed over the content (not just IP, email, etc, but actual docs, communications, stored files, etc) of thousands of people’s accounts to law enforcement. Proton hasn’t given out content once.

            And this doesn’t even consider the fact that Proton’s business model is privacy. For Microsoft, their users will keep using their services regardless of their privacy, but for Proton, if it comes out that their services are no longer private, nobody will use them anymore, because nobody who got them for privacy would need them at that point.

      • Muscar@discuss.online
        link
        fedilink
        English
        arrow-up
        29
        ·
        3 months ago

        I’d almost believe you were paid to hate on proton, but you’d get fired for how fucking dumb your arguments are.

        • John Richard@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          19
          ·
          3 months ago

          Really? So Proton saying that they can’t open source the backend code to improve security isn’t something Microsoft would say as well? Proton sells statements, but they don’t back up those statements with proof.

          • nieminen@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            3 months ago

            Exposing their backend code to the public would be inviting bad actors to find loopholes in the logic. Your excuse for how they’re not secure is in fact one of their security features. No code is perfect, and you give enough people enough time to peruse through your software they’ll find a flaw to exploit. So they only provide their code to 3rd party audit companies they trust.

  • Bali@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 months ago

    Interesting. I will try to find out if it’s 1:1 in handling .docx like OnlyOffice which i hope it is. It sucks that OnlyOffice won’t run natively on Wayland.

  • 👍Maximum Derek👍@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    39
    arrow-down
    2
    ·
    3 months ago

    When I was degoogling a couple years ago I had a heck of a time choosing between protonmail and fastmail.

    I went with the fastmail and, while I have no complaints, I’m starting to glance at greener grass.

    • John Richard@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      36
      ·
      3 months ago

      If you were on Proton then you wouldn’t be able to sync your calendar & contacts and you’d have to share your private keys.

    • alansuspect@aussie.zone
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      I degoogled to Proton mail initially. I didn’t like that I couldn’t search my emails (a security thing or something? But annoying) and then their Drive was absolutely useless on macos. I had about 100gb and it couldn’t sync even half of it.

      After much help from support I eventually moved away to a combo of Fastmail, Mega and OnlyOffice.

      • Blu@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        3 months ago

        I did the same thing. The first privacy-oriented service I heard about was Proton. And, to be fair, they’re quite good. But the email search issues and struggles I had with their bridge eventually turned me off.

        I left for mailbox(.)org and haven’t looked back. It’s great Proton has so many cool services, but the last thing I want is to get dependent on one company again, not after how hard it was to get away from Google.

    • DesolateMood@lemm.ee
      link
      fedilink
      English
      arrow-up
      39
      ·
      3 months ago

      I love Proton and will advocate for it any chance I get, but I can also see that it might be good to have people like you who don’t put all their eggs in one basket

    • Blackmist@feddit.uk
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      1
      ·
      3 months ago

      Only if they start shutting all their services down if they don’t become the world leader within the first 3 years.

  • AwesomeLowlander@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    68
    arrow-down
    2
    ·
    3 months ago

    The only open source mentioned in the post is their encryption. Not the document editing software. OP please remove your change to the article title, it’s extremely misleading.

    • Muscar@discuss.online
      link
      fedilink
      English
      arrow-up
      8
      ·
      3 months ago

      Most “free” things aren’t free, you pay by them collecting your information and selling it. Anyone that automatically thinks something is bad because it isn’t free is dumb as fuck.

    • Jin@lemmy.world
      link
      fedilink
      English
      arrow-up
      26
      ·
      3 months ago

      Get started by creating a free Proton Drive account today (if you don’t already have one). We are rolling out Docs starting today, and the feature will be available to all users over the next couple of days.

      You can use it for free ¯⁠\⁠_⁠(⁠ツ⁠)⁠_⁠/⁠¯

        • not_amm@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          3 months ago

          Specify that, “free” means two things in English, otherwise use “libre”, which means freedom in Spanish and it’s sometimes used to refer to free or libre software.