There have been multiple* court cases where law enforcement agencies submitted a subpeona to signal. And signal replied "Sorry, we have no data" If it were a front for the US govt the result SHOULD be different. HOWEVER if enough people were made to believe that Signal was insecure, they might abandon an actual secure platform.
Thank you for making this video. The message here isn't letting these vendors off the hook; it's a reality check for the digital frontier as a whole. More specifically "due process". It's the only 'real' sense of security we need to focus on, "did an agency use due process?" But also (and more importantly) are software vendors 'only' providing information under circumstances of due process? As a systems administrator, I applaud the message of User responsibilities and as a personal privacy advocate, I salute the message of due process. Fear mongering and baseless accusations run rampant over social media outlets as it is. Thank you for providing a voice of reason and a means of laying a basic framework of the legal challenges.
Thank you so much, many people need to hear this and use their minds before making judgements!
The reality is this: If you are online, there is no way to be completely secure from online threats. Proton and Signal give you better tools to safeguard your privacy than others, by a significant margin. They are still however online. It took a multi-national government order with proof of terrorism to just get the recovery email address. If that isn't secure, then what is? Well created video, thanks for sharing.
If your goal is to hide from government then using any of these services is not enough because they are legally compelled to hand your data over. If your goal is to protect yourself from other kinds of threats then absolutely use these services.
Couldn’t agree with you more. There are a lot false information on the internet creating FUD. Be smart, question everything and do the research if you have to!
It amuses me how people seem to be worried that Proton provided an email address in response to a court order and yet didn't seem to care about the subsequent apprehension of a terrorist 🤔 I also saw a YouTuber recently bemoaning the fact that Proton do NOT mine and analyse your emails so that they can serve targetted ads 🤦🏻♂ Thank you Josh for being a voice of reason in an increasingly crazy world!
Do people not read the TOS and Privacy Policy? I recently read Proton's, and this is not new information to me.
Good job on this video! You eliminated all the diagrams or explanations for HOW these 2 companies encrypt your data, reducing or eliminating unnecessary confusion in order to make your larger points. You made the whole video accessible to a consumer level audience, The exact group who do not know how to evaluate the accusatory assaults made by telegram or by privacy advocates objecting to there being any form of legal compliance with the country you're operating in. Good choices, resulting in very easy to understand video about something very important and critical.
One thing that I feel like people never mention is the extensive list of terms and conditions for iOS & Android, considering that’s where proton and signal appear to be used the most. Although signal and proton themselves may never store any information, how are we suppose to feel secure in the fact that the operating system we’re running these apps off of aren’t spying on us equally as bad as people would fear one of these messaging apps would? I’m curious for your take on that
I believe in the case of Signal, it was an OS level zero-day that allowed the attacker to add a hidden member to a chat, turning it into a "group" chat. Encryption wasn't broken or backdoored, the chat key was just shared with a hidden third party.
Unless I suddenly need to run from the law, these particular things don't really worry me too much. Yes, if Proton was hacked, they could see my recovery email, but I have a strong password and use security keys to sign in to my account. I am still learning how to become better at cyber security (my anxiety suddnely made me hyper aware of it). While I am very concerned about privacy, I would want law enforcement to be able to find a dangerous criminal.
Thank you for thorough clarification. Keep up the good work, you just earned a new subscriber for the amazing content!
I agree with ya on nearly everything. Except the (Im paraphrasing you here) "its safe cause it's open source". Open source is awesome for that kind of thing. But it means nothing if no one is actually looking at the code in an auditing sense. I am an open source zealot personally, but we need to stop using this point in our arguments unless we can form a security group that is actively doing audits of code. Maybe it could give these projects a "seal of approval" or "security audit passed on..." type of badge of honor.
Finally some good and level-headed explanation about security instead of the usual fearmongering or a far-fetched, almost entirely theoretical, security risk.
The same people complaining about companies legally being required to hand over data they have are here in a YouTube channels comment section… a Google app.
Thanks for the balanced video, I couldn't agree more, that security start with what you do - the right tools are just a part of that! I wish the title was as balanced / not that click-baity... but I'm honestly not 100% sure if I would have watched it then 😬
Two red flags for me regarding content creators. 1. Clickbait. 2. Excessive hand gesturing.
Great video! I would love to see a video on how we can develop habits for using the internet and social media in a safe and responsible way. It would be really helpful to get some tips on protecting our privacy and avoiding common online risks. Thanks for all your awesome content!
@AllThingsSecured