this post was submitted on 08 Jul 2024
10 points (81.2% liked)

Cybersecurity

5662 readers
354 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago
MODERATORS
 

Before going to university with a Linux Laptop, Linux PC (Waterfox) and Graphene OS on the Phone with Mull as Browser, I wonder how I can get a more comfy or efficient life. I never had the idea to sign in to Firefox Pocket because I thought an entity would be able to read the bookmarks.

I wanna know details about it, why and why not should I use it? Is it even encrypted?

top 4 comments
sorted by: hot top controversial new old

From what I understand: your website history on their Servers, if its even encrypted, you don't hold the keys.

[–] onlinepersona@programming.dev -4 points 4 months ago (1 children)

I don't think the code is even opensource. They thus don't have my trust.

Anti Commercial-AI license

[–] sugar_in_your_tea@sh.itjust.works 1 points 4 months ago (1 children)

Open source and security are orthogonal concepts. I trust independent security audits, which can be done on FOSS and proprietary software.

I'm not sure if Pocket has done that, but that would be my benchmark. I don't use Pocket because the functionality doesn't interest me.

[–] onlinepersona@programming.dev -2 points 4 months ago* (last edited 4 months ago)

I never talked about security. I said trust.

Closed source can tell you something is encrypted but never encrypts it. Closed source can tell you it's never sent to third parties for processing and do that the entire time. Closed source can make any other claim and you will have to trust them because you can't verify it.

Open source is the first step of trust. Without that, I trust you much less. With it, I trust you a little more. Not completely. More. At least more than closed source.

Anti Commercial-AI license