Privacytools.io

October 8, 2021

I want to speak about this site. It’s not a ADS, just friendly reminder - there is no privacy if your computer connected to internet.

The privacytools.io using Twitter (link to nitter instance), that is the first ring. Privacy and security website using non-secure and propriatary service. The link on their website urges: “Follow on Twitter for Updates”. No, thank you. Even if there is non-serious posts, Twitter still can track you.

License is WTFPL. Nothing wrong with this license in general, it just doesn’t have any legal force. It’s not an GPL, it’s not even Apache or BSD, MIT, LGPL, and whatever license is copyleft nowadays. Anybody can do whatever the fuck they want with this license. This includes an opening clone of this website with links to malicious code, for example. Just my fantasies, but it’s possible, right?

There is bunch of statements on this website, that I’m consider bad advices in general. And there they is.

Browsers section

They said you can relay on browsers list, they provide, but there is no PaleMoon or WebBrowser. Instead, privacy-hell Firefox and even more evil Brave. No, they’re not privacy-friendly. Firefox and Brave will send your data to “partners”. Tor is a good choise if you want to bypass blocked resources, but not for security and privacy surfing.

Bromite based on Chromium, which is controlling by Google itself. If they do the job cut all the trackers - this is good alternative. Albeit it’s not even in F-Droid.

There is link to EFF site, which is not as good as it should be. By default selling your data to some sort of “third-party partners” (aka “test with real tracking company”), you can disable it, throught. In addition, they sign petision agains Richard Stallman, so fuck them.

Browser addons section is mostly fine, but I do not recommended to install Decentraleye (the fuck is this?), ClearURLs (because GreasyMonkey with script will be better, and this plugin can do whatever), Cookie AutoDelete - you can use built-in browser functionality, why another plugin, that can be listed and make you uniq?

xBrowserSync also not credible. How does it works? Can I host the server myself? Does servers can be decentralized?

VPN section

VPN can’t make you magically anonimous. Also, they can and will send your data to “third-party” partners.

Email providrs section

Mostly fine, but not ProtonMail. Never ProtonMail. They was sending data to govermens once, they will do it again.

Email clients - can’t recommended any. Just use your browser, because many clients even will not works with something like Tutanota. Also, Thunderbird is FireFox spin-off (see above).

Web search section

OK, again. Brave - ignore. DuckDuckGo… Well… It’s OK, but still, we know nothing about it, since it proprietary. SearX - only if you host it yourself, distance from your country. Otherwise, you don’t know if providers really anonimous.

Password managers section

Just use KeePassXC. Seriously. Any other alternatives are hosted online.

File encription section

OK, this is funny. There is NONE privicy, if you encrypt your files. I mean, programs can see processor cache (meltdown, spectre). Even if you’re on old processors, it’s no use. This is, also, no use it agains goverment, if 7zip encrypt files so well, their authors will be in jail, like Julian Assange.

Signed your files with GPG is fine, throught.

Clouds section

Don’t even. It’s not secure like at all. Also, can be blocked and you will lost all your “secure” files. Just buy a flash drive, it will cost you less, then rent a cloud service. Encrypt it and put in safe. Seriously.

Web hosting section

If you have an 5 to 30 euro in month for VPS (not even dedicated, just regular 1 cpu 1gb of ram and non-raid KMS), than this section is for you.

Instant messaging section

There is nothing wrong with these services, but what is wrong: nobody use them, because they’re decentralized. Albeit, Signal is required your phone number. How is this better, then Telegram, then? You can just use virtual number and use Telegram FOSS.

DNS networks section

There is nothing more secure, then your own DNS on router, which will block all the shit. Ether use built-in router functionality, OpenWRT or buy RasperryPi (or other mini-computer) and use Pi-hole. If you’re on Linux, just setup dns-loop on your machine and block ips with iptables\nftables. But never use “public” DNS’ses.

YouTube alternatives section

I can’t recommended NewPipe and FreeTube. They’re not using Invidious. I mean, you just host youtube on your device, but without ADS… That’s not the way. Of cource, you can’t even trust Invidious instances. However, you also can’t watch videos from YouTube on PeerTube or DTube - as they’re video sharing services, not YouTube frontends.

Digital notebooks section

Everything but Standart Notes is fine. Standart Notes using web, that’s mean it doesn’t secure by-default.

Operations System section

The fuck?! Fedora? Ubuntu? Are you crazy? Fedora is testing polygon for RedHat Enterprise Linux. Ubuntu is just testing polygon. Even on fucking PrivacytoolsIO reddit there is complaining about two this OSes. Debian will be better for security from that retrospective. Also, Arch Linux, but you need to really carafully choose your packages, because there is not non-free and free repos, just non-free and free in one repo.

Tools for Windows 10 and 11 section

No comments. Don’t. Use. Windows 10. Ever. If you really care about your privacy, of course.

Cleaners section

I don’t like “cleaners” and there is reason: Shredding files and wiping unallocated disk space to minimize data remanence. It will kill your SSD. Don’t have one? Doesn’t matter, the SSD’s will be common in next 5-10 years.