[-] dazo@infosec.exchange 2 points 2 weeks ago

@jon@vivaldi.net I use a plethora of browsers.

I'm migrating fron Firefox to LibreWolf (sorry, I prefer non-chrome based browsers), but have a Ungoogled Chromium as a backup those times Firefox/LibreWolf doesn't cut it (I thought the world had learnt a lesson from the IE days; seems we need to educate a new generation web hipsters).

On Android I use the default browser (in @e_mydata@mastodon.social) for a few news/blog sites, Mull and Vivaldi for some other sites and DuckDuckGo when searching. Default browser is Mull with Privacy Mode enabled by default.

I honestly don't like that the Chrome based browsers seems to be dominating these days. We need a heterogeneous web render environment to ensure a single dominant player dictates how things will be for users.

And without such competition, I fear there will be a lesser drive to further improve browsers. Just like when Netscape seemed too complacent with their own browsers back in the days.

[-] dazo@infosec.exchange 3 points 3 months ago

@Dark_Arc @bl4kers

I can understand the confusion. But it kinda makes sense.... if my hypothesis is correct.

Proton Drive has the concepts of "My Files" and "Computers". Files stored under "Computer" (where you can have synced files for up to 10 computers, according to docs) tracks the files for each computer individually.

So when you uninstall Drive and delete the files, they are only stored in the cloud. But after reinstalling it again, it sees the files locally for that computer is gone ... so it gets removed in the cloud.

Had these files been moved to "My Files" in before the reinstall, this should not have happened.

At least, that's my theory.

[-] dazo@infosec.exchange 3 points 9 months ago* (last edited 9 months ago)

@Nelizea

So once again it is basically a premature announcement; since all of those features already available, already exists in the ordinary Proton Business plan ... As none of them are basically Pass specific.

And the difference then between "ordinary" Pass and business "Pass" is zero .... Both have unlimited vaults and 2FA in the more costly plans.

[-] dazo@infosec.exchange 3 points 10 months ago

@LunchEnjoyer

@protonmail could start by actually attending various open source conferences. There are several of them only in Europe. #FOSDEM is the largest one (actually happening this weekend), @devconf_cz is another one, with lots of #Linux distribution focus as well.

Sending HR folks and developers to these conferences, having a stand somewhere, meeting people is a solid way to find new hires with a specific skill set.

[-] dazo@infosec.exchange 2 points 10 months ago

@Nelizea

Yes, I'll be hanging around _here_ 😁​

I'll contribute when something interesting appears in my streams.

[-] dazo@infosec.exchange 2 points 10 months ago

@Nelizea Hey! We meet again 😉​

[-] dazo@infosec.exchange 2 points 10 months ago

@helenslunch

They reply when they have something to say. They don't reply just for the case of replying.

I've received several replies from them.

@Nelizea

[-] dazo@infosec.exchange 2 points 10 months ago
[-] dazo@infosec.exchange 2 points 11 months ago

@_Atlas_)@lemmy.world @Papanca
To fork what? The Windows or macOS Proton Drive and create a Linux version?

I would expect GUI interface is the least of the problems; that's most likely Qt based across all platforms.

One step up in the difficulty level is to implement the file synchronisation right. This would most likely need to be based on macOS, as that has a file system which shares more features to most Linux file systems. However, Linux supports many file systems and there are lots of corner cases to watch out for here (extended attributes). A synchronisation should ideally also synchronise all the meta-data about files, to ensure this is restored correctly on a different host later on.

And the most difficult and most different aspect is the "access on-demand". Here files are only downloaded from Drive as they are accessed. It's like a remote file system mounted locally. From the user experience, it looks like an "external harddrive", but it accesses data stored remotely. There are many ways to do this; an own kernel module or FUSE are the most common ways. FUSE is "simplest" and quite common - but might not give the best performance in many cases. A dedicated kernel module is tricky to distribute as they are hard-bound to the running kernel version. When you multiply those efforts to the Linux distributions available and the various kernel versions each distribution ships - it gets hard to get right. DKMS based distribution is more likely the best approach, but even that has challenges (Secure Boot system requires setting up signing keys, etc).

The difficult part is most likely not the UI aspect, but the "low level" code actually doing the file synchronisation and remote file access. That is very different between each platform.

[-] dazo@infosec.exchange 2 points 11 months ago

@8rhn6t6s There are some caching which need to be enabled with the protondrive rclone mounting. But it is still slow.

Remember that non-E2EE storages (such as Google Drive, AWS/S3, etc) can do the upload a lot faster as a starting point, as there is no client-side encryption of the data being uploaded (and the reverse; decrypting downloaded data). This decryption/encryption happens in the protondrive "module" in rclone. On top of that comes that files are split up into "chunks" which are transferred via separate HTTP calls. And I have no idea (aka "have not read the code) how the unlock key of the PGP key is handled in rclone. All of these things combined together impacts the performance.

That said, I've had a quick test on a Windows computer with Proton Drive installed. It wasn't blazingly fast there as well, but still felt faster than rclone.

My guess is that it's partly that the rclone implementation has room for improvements on how the Proton Drive server-side APIs are called and some of it is related to crypto implementation performance.

For example, I dunno if the Proton Drive APIs support HTTP/2 protocol or QUIC ... And I dunno if the rclone supports them as well. Just in this aspect there are lots of room to cut down on the "connection handshake" as HTTP/2 and QUIC supports more efficient handshakes and can also have multiple streams sending data in parallel - using a single handshake. If the native Proton Drive app on Windows implements this, that may explain some of the performance differences.

[-] dazo@infosec.exchange 2 points 1 year ago

@Mari @governorkeagan Having a built-in Proton Mail support (via an extension/add-on) to not require the external Bridge would be really nice.

[-] dazo@infosec.exchange 3 points 1 year ago* (last edited 1 year ago)

@otter @WQMan

For my own stuff, I do prefer Bitwarden over Proton Pass. Simply because having a lot of stuff in Proton and if then ending up being locked out feels like a too high risk.

I even have some stuff in https://www.passwordstore.org/ where it's synchronised to some (encrypted) locations and internal storage servers ... especially stuff which can help me if I get locked out of Bitwarden.

Don't put all your eggs into the same basket. Avoid the SPOF.

That said, for Proton accounts where I'm the admin - I would recommend Proton Pass these days, as it provides ease of convenience. Where less technical users has only one "platform" to relate to. If these users gets locked out; I have a chance to help them recovering again.

view more: ‹ prev next ›

dazo

joined 2 years ago