• BCsven@lemmy.ca
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    They also have been a bit shady, many of the app settings (security and privacy) have telemetry turned on. And as a default the pass app has icon and provider lookups turned on. This means when you use your password app it checks with tons of servers, like google, Paypal, zoom, etc to go and find if you have icons to fetch or passwords to fill. The google one was grabbing IP address. So for a privacy app this is really doing a beaconing type thing where a malicious govt admin could be tracking server logs to see when you connect, and what accounts you have (since it reaches out based on your stored password websites).

    This type of stuff should be off by default, for people like journalists that might have to be totally anonymous online.

    Proton is just becoming the next google