You can use your own self-hosted servers with this too.
If you want.
Self-hosting can create its own additional privacy and security issues… unless you totally trust not only the place where you put the server, but also yourself to be a security expert
Maybe they could even stop charging subscription fees for client-side features for the people who self-host…
Your bank probably wants to make sure your account isn’t being hacked. Either they think you’re using a VPN, and they believe it could be a malicious person from literally anywhere, or they think you’re in Sweden, and they have no idea how you got there.
It’s cases like these where you might want to temporarily disable the VPN or make a special exception for your banking app, but that’s up to you.
You assumed and misinterpreted everything you could assume and misinterpret in order to paint standard notes in the best possible light.
the old approach wasn’t very secure or scalable?
No, the older approach was more scalable, and they made it more difficult to do
95-99% of the Javascript that has ever run in your browser is open source frameworks or packages
No, I was not talking about frameworks.
Your response was so offbase and full of assumptions that I simply edited my original post.
All FOSS projects have a team of dictators…
And the Standard Notes team makes a lot of bad choices that make self-hosting harder.
“Just fork it and make your own” is a Hail Mary response… Because most people cannot.
Standard Notes wants to charge you money to run open source JavaScript code, including other people’s markdown and spreadsheet editors, on your own server. To do this, they go out of their way to make self-hosting harder.
Standard Notes went out of their way to make it harder to self-host extensions a couple years ago, which IMO was pretty tasteless on its own. Instead of letting you install a single bundle of extensions with one URL, you would have to manually add each extension and then manually update it later.
They opted for charging for other people’s work. Their editor extensions were other people’s work. For example, their rich text editor was somebody else’s rich text editor with a thin wrapper that allowed it to run in Standard Notes. (Using so many other people’s editors also led to a bit of a lack of stylistic direction.)
And then, more recently, they decided to shut off web app access to third-party servers entirely.
“FOSS” only means so much when they dictate what goes into the source code. Unfortunately.
Mozilla: Say hello to our biggest AI moments!
That’s an interesting connection.
The sparkle emoji is infamous for being associated with AI now.
Orion is a Kagi product, and Kagi is an AI company made to look like a search/browser/T-shirt company.
I have to assume a lot of people don’t understand how deep the AI rabbithole for Kagi goes, because I have seen people recommend Kagi to people frustrated with Google’s own AI bullshit… They’re launching AI features left and right, and they have fully bought into AI being the future of search.
All you need is a web browser running Snowflake to help people connect to Tor!
I bring up “the email incident” because it’s a reminder that Proton may record stuff that’s not encrypted, which includes the vast majority of emails.
And it’s not to say that you wouldn’t trust it with one individual service, but whether it’s wise to trust it with so many services at once, from a security, privacy, and even monetary perspective.
Not every concern is FUD, and I think you’ll start seeing diminishing returns every time you repeat it.
There’s a lot of metadata Proton passes around, and two of their oldest flagship products (email and VPN) require you to put a lot of trust in one company. For email, you trust them to encrypt them without snooping. For VPN, you trust them to not collect logs about where you’re going.
And in the former case, they were compelled to give up at least a little data in the not-so-distant past.
I remember when Telegram Inc was aware that could cause some massive issues down the line, and their response was to ignore it.
Then a state level actor abused this, and Telegram declared there was no issue, and they had fixed the issue.
In addition, a lot of Proton services are overpriced compared to third-party offerings.