Bring privacy under your control again

Took me a while, but when Google fired James Damore for his memo, that was a tipping point for me. It was also a day when I entirely dropped Google Search. And also a day when I decided to start using more and more “independent” alternative services that are more privacy focused. Some are easier to switch to, some are not. But let me tell you, it’s worth it when you realize how these mega corporations are just straight up evil.  From their fucked up internal politics to endless meddling with politics worldwide to how they handle our sensitive private info with next to no regard for anything or anyone. Sure, they offer services for free in exchange for our privacy, but there will be a point when you’ll ask yourself, is my private info and data really worth so little that I trust it to Google instead of paying a relatively small subscription for a secure encrypted private mailbox with nearly same features as found on GMail? It takes some time to realize that, but take some time and think about it.

To make final decisions easier afterwards, here are some tips on what services to use in order to break free from mega corporations mining your personal data…

UPDATED: 2020-07-10

Web Browser

Mozilla Firefox
Brave
Tor Browser
Vivaldi

Opera removed due to privacy concerns. Its Chinese owners doing questionable things and business practices.

DNS Service

NextDNS (USA)
Cloudflare DNS* (USA)
SecureDNS (Netherlands)
Neutopia 89.234.186.112 / DoT: dns.neutopia.org (France)

* For now there is no evidence that Cloudflare could pose an immediate risk to privacy. They claim they are private and they also do external audits to have their claims verified.

Web Search

DuckDuckGo (USA)
SwissCows (Switzerland)
Qwant (France)
Lilo* (France)
Ecosia* (Germany)

* Alternative search engines to big corporate ones like Google, but have slightly questionable privacy statements. They do allegedly convert your searches into charity support…

StartPage removed after it was taken over by Privacy One Group which is a targeted marketing company.

e-Mail Service

ProtonMail (Switzerland)
Tutanota (Germany)
Hushmail (Canada)
Mailfence (Belgium)
PrivateRelay (France)
Posteo (Germany)
Kolab (Switzerland)
Criptext (USA)
Vivaldi Mail (Norway)

* FastMail is not on the list because it’s an Australian company and Australia has recently (December 2018) passed an encryption bill that demands companies to hand over backdoors or master encryption keys to Australian government. I wouldn’t trust any such company or government for that matter even if “I don’t have anything to hide”.

StartMail removed due to questionable ownership by targeted advertisement company Privacy One Group.

Instant Messaging

Signal (USA)

Wire removed due to weird ownership, HQ location and operation changes. People also raised concerns over communications encryption which is apparently severely flawed.

Data Storage

pCloud (Switzerland)
MEGA (New Zealand)
DropBox (USA)
AllSync (Netherlands)
Degoo (Sweden)
Koofr (Slovenia)

Online maps/navigation

HERE WeGo | HERE Maps for Android | HERE Maps for iOS
OpenStreetMap
Apple Maps (searching for locations in DuckDuckGo uses Apple Maps)

Two-Factor Authenticators

FreeOTP
Authy*

* While not open source or anything, it’s not owned by corporation like Google and it has certain features that are very useful in securing your access to services that you own and pay for. What good is all security if you can’t access your stuff…

VPN

ProtonVPN (Switzerland)

Disclaimer

Company country doesn’t always mean they absolutely fall under their jurisdiction only. For example, some companies have HQ in Switzerland, but host data elsewhere, like for example pCloud which hosts data in Texas, USA. Others like ProtonMail have HQ and hosting in same country. Do further research if that is important for you.

Summary

After long hours of research and investigation, I’ve dug up these services that are highly focused on privacy and security, are mostly located in countries with most rigorous privacy laws or they are designed in such a way no one can even force them to uncover your data, because only you have the decryption keys. They may not be free, but can you really put a price tag on your privacy when you think about it? Some services cost a bit more a year, others less. Some are even free but with certain limitations like e-mail storage space and less features which kinda forces you to upgrade. But you can evaluate them cost free this way and decide which ones you like.

Suggestions?

If you know any other services that you feel they need exposure here, leave them down below in the comments and I’ll check them out. If I feel they are worthy, I’ll include them on the list above.

9 thoughts on “Bring privacy under your control again

  1. Thank you for the info

    -Jack

    On Tue, Mar 27, 2018 at 6:23 AM, RejZoR’s Flock of Sheep wrote:

    > RejZoR posted: “Took me a while, but when Google fired James Damore for > his memo, that was a tipping point for me. It was also a day when I > entirely dropped Google Search. And also a day when I decided to start > using more and more “independent” alternative services that ” >

    Like

  2. fastmail.com fills the criteria, australian company not required to retain meta-data, big on security, big on privacy, free trial, very reasonable t&c and pricing, various domains, etc, etc

    Like

    1. Unfortunately, due to recent passing of a ridiculous encryption law in Australia, I’d recommend to stay away from FastMail. I’d consider Australia a part of civilized world, but going such route is what a dictatorship would pass, not a democratic western country. And since FastMail is located in Australia, they are automatically required to obey the law which isn’t the case for companies outside Australia. Which makes FastMail a no-no by default. Even if you don’t have “anything to hide”, you may just as well stay with GMail then and save some bucks.

      Like

  3. DNS
    DNSCrypt Uses OpenDNS and Quad9 (official OpenDNS will log traffic)
    https://simplednscrypt.org
    https://github.com/jedisct1/dnscrypt-proxy

    Email
    https://www.vfemail.net
    https://webmail.vivaldi.net (IMAP and POP) (stored in Iceland)

    Use storage sites with 1 3rd party GUI
    Uploads
    File & Image Uploader – http://z-o-o-m.eu
    Management
    http://www.airexplorer.net
    http://www.cloudbuckit.com
    https://www.odrive.com
    https://www.odrive.com
    Total Commander Cloud plugin – https://www.ghisler.com/plugins.htm
    (Android versions available)

    Download from advert/tracker filled hosting sites without using a browser
    http://www.mipony.net (droid version available)

    Google chat (also FB)
    https://pidgin.im (PGP/OTR available)
    https://www.miranda-ng.org (PGP/OTR available)
    https://www.trillian.im (droid and iOS version available)

    App store replcement
    https://f-droid.org (only Open Source apps)
    https://f-droid.org/packages/fr.kwiatkowski.ApkTrack/ (find updates for apps)

    Inspect and rate apps for plugin and permissions risk
    https://public.addonsdetector.com
    https://www.appbrain.com/app/appbrain-ad-detector/com.appspot.swisscodemonkeys.detector

    Encrypted SMS
    https://silence.im

    Block trackers at the network level in mobiledevices (No ROOT needed)
    https://disconnect.me/mobile/disconnect-malvertising
    VPN app also available

    Like

  4. AdGuard Family DNS is the best, Yandex Family DNS is a close second – but may be KGB-spied.

    Yandex e-mail is good, but sometimes kinks out on frequently-spoofed e-mail sources, leading to some frustration with signup/recovery – even if I add the source to contact book before requesting anything.

    Browser: Brave promised (but never delivered) an option to watch ads before using sites then “spend” watched ads to remove ad pop-ups and such.
    Yandex Browser is good, but doesn’t mate well with CCleaner. Firefox in minimal-junk mode is suggested.

    Like

  5. StartMail is suspicious for the same reason you mentioned FastMail is: Dutch law around data protection is currently being revised (and the government is actually ignoring a referendum that showed that the population is against the revision of the law), so it will soon allow much more more in-depth and broader surveillance. In addition, the various Dutch intelligence services are known (or have the reputation) to be very cooperative with other countries intelligence services in regard to information exchange. I’d consider both StartMail and FastMail as okay for a junkmail account, but considering both are ‘pay-for-play’, I’m not sure junkmail is worth paying for. One not mentioned is mail1click.com, which has a weird security protocol I found too much to deal with. For true email security i’d look to the providers on the DarkNet, if one is eager to fool with PGP, and all that stuff.

    Like

  6. In fact, sometimes you can’t use the country as a judgment. Haha, I am too lazy to write articles. Because of my personal literacy, I will take privacy and security into consideration, and my ideas are too extreme. This It is also caused by my personality. Regarding rejzor Angry Sheep, I will tell you my understanding of privacy and security. If I have the opportunity, I would like to talk to you again, and I will use this website as the core element of communication. Threat model: Distrust everything, including hardware and software layers (from the idea of ​​the founder of Qubes OS)

    Any environment must be treated as an environment that has been threatened by attacks, so there is no need to add additional passwords to the password library, verify private keys, or password-protect pgp. Because the attacker will wait for you when you enter your password or log in to yubikey…

    Regarding other tool recommendations, I’m not a tool expert. Because of tools, you have to accept the reality. According to my observation of changes in network security in the past 20 years, tools have changed or been updated. The knowledge and concepts you already know, as well as the extensions and security policies you believe in in the browser will all change. If it disappears, it is better not to remember it, such as Turecrypt disk encryption software. Or some security strategies, such as Selinux.

    For Tor purposes, there is maximum privacy and security. It is limited to Qubes. The Tails system is vulnerable to BIos attacks. The text comes from the X86 paper of the founder of Qubes OS.

    For general human use, I recommend using Mullvad browser + arkenfox settings and Cromite both browsers for maximum privacy. Cromite is based on Bromite, a project that also involves the Graphene OS browser.

    Like

  7. Next, any ad blocker, one of the culprits of the risk of attacks, like U-block, or any alternatives like Angry Sheep if you prefer to use adguard, these are written in js which I think is better The solution is to block ads through DNS. The better one currently is mullvad DNS

    If you really need to use Youtube and similar services, you can try using invideous, Piped, or any of Freetube’s better alternatives

    Like

Leave a comment