this post was submitted on 02 Feb 2025
38 points (89.6% liked)

Privacy

33413 readers
1521 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I saw Nubo mentioned in a thread a while back but there were only a few comments. Does anyone use Nubo? What has your experience been like?

https://nubo.coop/en/

all 23 comments
sorted by: hot top controversial new old

After registering I wasn't even able to pay for a sub to check out their offering for myself. English docs are lacking. I think they are focusing on fr and nl regions. Support e-mail autoreply also only replies in those languages. They are really small scale, ~2000 users by their own admission. Which is ok, but if you advertise a service, at least let people pay for it, so they can start using it, however janky it is.

[–] Imprint9816@lemmy.dbzer0.com 28 points 4 days ago (1 children)

Wait for them to be audited. Trusting a company just because they say the right thing is silly.

I know people are up in arms about Andy Yens silly comments, which is fair but, Proton is a proven service.

If your looking for an alternative go for another proven service such as Tuta or Mailbox.org

[–] EveryMuffinIsNowEncrypted@lemmy.blahaj.zone -2 points 4 days ago (7 children)

I heard Tuta is a honeypot. Is this not the case?

[–] Kiuyn@lemmy.ml 8 points 4 days ago

People will tell you that everything is a honeypot. In fact, I am a honeypot

[–] x00z@lemmy.world 1 points 3 days ago

It's actually a good question and you're getting a lot of shit for it from people who seem to not even know where this accusation comes from.

https://tuta.com/blog/tutanota-not-a-honeypot

“So, I was briefed on a storefront that was being created or had been created in order to attract targets – criminal targets to this online encrypted service that was being created, in order for them to – the criminals or the targets to use this service in order for intelligence to be collected by the agency that created the storefront. … It’s an online end-to-end encryption service called Tutanota.”

It can be a lie, a mistake, or truth. It can even be a false flag accusation to destroy their reputation. We don't really know.

When looking into this it's good to also know about Tor Mail: https://en.wikipedia.org/wiki/Tor_Mail
There might have been some confusion between Tutanota and Tor Mail.

I don't think anybody here will be able to actually answer it.

[–] hanrahan@slrpnk.net 2 points 3 days ago

No, a teapot, and Bertrand Russell wants a word..

[–] PoTayToes@sh.itjust.works 4 points 4 days ago

It's obviously not impossible, but you'll find people calling every single private messaging platform honeypots. I don't recall seeing any convincing proof for Tuta, personally.

[–] kekmacska@lemmy.zip 1 points 4 days ago

tuta is legit. there are many dumb people on the internet telling dumb things

Nobody knows. They've existed for a while, I haven't heard anything of such claims.

If you want to absolute be safe, only download open source clients complied by yourself (and hope that somebody is constantly looking through the source code for potential backdoors). F-Droid comiles the source for you for the Android client. Encryption is done on the client before sent to servers.

However, if Tuta were secretly evil, they could log IPs and know the email addresses you send/receive to/from. Anything in plaintext will be seen, and you are only relying on their promise to not keep a copy of it. And btw, most of your incoming emails from banks / other websites would be in plaintext, so they could theoreticallt store a plain text version before they encrypt and store it in your mailbox.

But even then, all encrypted emails are safe even if Tuta were a honeypot (which you could never know for sure.

Technically, Proton is the same category, if you compile your clients (and someone constantly checks the code for potential backdoors), then its still safe. People are only pre-emptively moving because they don't feel safe with Proton due to the CEOs comments, and Tuta has never made such political comments.

[–] Onyx376@lemmy.ml 2 points 4 days ago (1 children)

Tuta has already been through some cases linked to German court orders to decrypt emails received in the inbox of alleged criminals, just like any other company that is subject to the legislation of its respective country (I don't know the difference with Proton, which until now I only found out about the delivery of IPs, not the content of the emails themselves, based on Swiss court orders), but I don't believe it is a honeypot because Tuta has clarified the entire issue and still has credibility in the privacy community.

[–] refalo@programming.dev 0 points 3 days ago

Yes however they have also had servers seized before... I think it's not unrealistic for some to believe they could be compromised after that.

[–] CedarA64@lemm.ee 4 points 4 days ago

Seems like it is only for Europeans (and possibly even excluding non-EU citizens)? I have been using Zoho (free account) for many years (since I got rid of GMail) and while not explicitly privacy-focused they are not a data collection operation like Google/Alphabet or Meta. They make their money through providing paid accounts to businesses (competing with Google Suite). I have been very satisfied with them. They provide very good 2FA options and apps and I also use their WorkDrive (previously Docs) and Notebook.

[–] Termight@lemmy.ml 1 points 3 days ago

Consider this: when you were drawn to Proton, what was it that attracted you? Was it not some aspect of its promise or appeal? And now, as you move away from Proton, is it not the same discriminating mind that drives you to seek out another object of attachment?

[–] yuki@programming.dev 1 points 3 days ago

I haven't heard about nubo till now! Probably very few people here have experience with them. Looks promising, but kind of risky since we dont really know if its trustworthy or longstanding