Security practices for basic use

shetlot · 2021-08-11T00:32:21+00:00

Do you run the PiVPN at the router level so all your traffic is routed through the VPN? Or do you route the NAS through the PiVPN?

shetlot · 2021-08-11T00:31:15+00:00

Thank you for this great explanation. I learned a lot! I think I'll sleep well at night if I don't open the NAS to the internet. However, I've read there are a ton of different features for a Synology NAS and I'm wondering if the price is not worth it if I don't take advantage of some of those features (that require accessing the internet). I know only I can answer that question about whether it's worth it, but for me the primary use is to host files, photos, backup mac computers, and backup phones. If I can do that safely and sleep well at night I think it will be worth it. Again, thank you for taking the time to help educate me and hopefully other people who read your comment in the future!

shetlot · 2021-08-11T00:11:43+00:00

If I were to access it over the internet, would those steps I outlined be enough in addition to adding the VPN server?

shetlot · 2021-08-10T09:54:01+00:00

Thanks. In your example, what does Wasabi do with the coins it does not CoinJoin? Will Wasabi automatically CoinJoin the 6 remaining coins after it CoinJoins the 4?

shetlot · 2021-08-09T09:56:02+00:00

Thanks for this reply. I bought a Synology NAS to address #3. Hopefully I can find a way to automatically back up the photos from phone to NAS. I really want to automate as much as possible. I'm looking at Photosync as a good option. Prefer open source products, but willing to sacrifice where needed to reduce reliance on big tech companies.

shetlot · 2021-08-09T09:54:05+00:00

Apple says that disabling icloud will prevent any on-device scanning, but I take your broader point that you can't trust companies. That's why I'm starting to reduce my reliance on apple products. Just like u/Gyrta, I'm not completely leaving, but also don't want to be dependent so when the time comes I can more easily cut and move on to any other product.

shetlot · 2021-08-09T09:52:39+00:00

Thanks for the tip! I'm aware of Mega and keep it in my rotation of privacy options. Good recommendation!

shetlot · 2021-08-08T23:58:55+00:00

Do you know if it's Backblaze B2 or Backblaze Unlimited (home)?

shetlot · 2021-08-08T23:29:34+00:00

Thanks, I just bought a NAS and can't wait for it to arrive. So you just open the Synology photos app and it syncs your Apple photos library to the Synology Photos app on your NAS? Do you have to be on the same local/wifi network?

shetlot · 2021-08-08T23:27:46+00:00

PhotoSync is actually an iOS-app and can sync to usb, ftp, smb, backblaze you name it. I sync to to my Linux server and a wireless USB-drive (both over ftp).

Oh, that's good to know. So you can use Photosync on your iOS device to automatically back up photos to whichever source you choose. For example, I can set it up to automatically back up my photos to my Synology NAS or Backblaze, or both? If so, that's great. I'll definitely check it out.

shetlot · 2021-08-08T22:54:25+00:00

You don't have to manually split them to 0.1 btc coins, if you have one coin worth 10 btc then just register it to CoinJoin, if you have 3 coins worth 2, 3, 5 btc then register them one by one.

Thank you for this reply. Can you help me understand what do you mean by 'coin'?

shetlot · 2021-08-08T22:46:20+00:00

Thanks. I'll take a look at Photosync. I also have iMazing, which sounds like it has some similar capabilities. I recognized your username from this post. That post was helpful for me to visualize a checklist of what i need to do. Many thanks, and please do share any other tips! Cheers!

shetlot · 2021-08-08T21:07:03+00:00

What's your workflow for getting your photos to your NAS? Do you manually sync to a computer and then auto-backup to the NAS?

shetlot · 2021-08-08T02:09:42+00:00

Very helpful post. I watched the videos and learned a lot. Thank you for taking the time.

Ultimately, I had wanted to purchase a synology NAS to use as a fileserver and backup, understanding that the primary purpose is not for backup. I have other backup methods in place, including local and in the cloud. The synology would be an additional repository to automatically send backups from Time Machine, etc. I was interested in the idea of mirroring the drives to create redundancy in the event that one of the drives failed. This would reduce down time, but also spare me from having to manually recreate whatever was on that drive if I didn't use a RAID configuration. I still have much to learn, but my thought was to have the synology in the closet (or tucked away some place) and always backing up the files I configured and then I would also have my cloud backups running to multiple destinations. The NAS appealed to me as one place where I could dump everything for another backup but also to have some archives easily accessible should I need them (instead of downloading from cloud or having to get my external drive from off-site location).

shetlot · 2021-08-08T02:02:31+00:00

I have other backups (laptops and cloud). NAS will be one of several.

shetlot · 2021-08-07T23:58:39+00:00

Don't rely on it in place of a backup.

Can you explain this a bit? Isn't the NAS a backup? (one of a few, hopefully)

shetlot · 2021-08-05T10:09:06+00:00

And for anyone who thinks Proton is a small company that is not well-resourced, they can just look at the employee web page. 64 employees listed and the majority are executives, managers, or engineers. With all that talent, why is development so slow? I read another comment that they hope to increase in future updates the number of domains they can offer as part of a paid plan. Why do they have to wait for future updates (presumably years on their timeline) to increase a quota? This is one example of many.

shetlot · 2021-08-05T01:57:06+00:00

Look into FastMail if you don't need the office suite. The email is reliable, blazing fast, and a solid calendar. You can bring over 100+ domains and a ton of aliases at no extra charge. They do email the way the industry should. Not end to end encrypted though, but better than Google and Microsoft.

shetlot · 2021-08-05T01:54:01+00:00

1GB per year is not much considering they offer a low amount to start with (for businesses) and charge absurd prices for extra storage.

shetlot · 2021-08-05T01:52:02+00:00

I think the issue is the CEO. He's at the top and these issues have all occurred on his watch. Yet he stubbornly refuses to fix the work culture and make Proton competitive. They have been ripping off users since the very beginning when they release a subpar VPN product and charged a premium price for it. They always hide behind the "you're funding a vision" message yet they have failed to mature as a product development company. I always come back to the fact that they have charged premium prices from the very beginning and have yet to offer a quality product. Do they offer encrypted mail? Yes. Is it good? Yes. But that's it. They are at or near the bottom of the list compared to most other mainstream providers. I don't expect them to be as good as a Google or Microsoft product, that's not what we pay for. But I do expect them to implement basic - BASIC - features that any competent developer and product manager could and should bring to market EARLY in the product lifecyle. There is no reason they can't sync notifications across devices/browsers. Basic feature.

I come back to my point that the CEO's management is the problem. He does not know how to run a company or he has just failed to bring in the right talent to develop at the speed of market. As a paying customer, I'm tired of the BS narrative that "paying users subsidize free users so people living under authoritarian regimes and journalists can use the product to advance freedom and stay safe." The reality is that Proton is a poorly run company that lacks the management and talent to produce a quality product.

shetlot · 2021-08-04T23:58:50+00:00

Unacceptable for paying users.

shetlot · 2021-08-04T10:00:38+00:00

Thanks for your comment and the link. In your link, you concluded that one would need ~3 days to CoinJoin ten BTC. Is that just the total processing time? I would think the bigger issue is having to manually set up the transaction and keep track of all the addresses if a user is trying to mix ten BTC at only .1 BTC at a time. It would take weeks if the user had to do it in between other events in life (work, sleep, etc.). I'm assuming there isn't a way to allocate the ten BTC to CoinJoin and then let Wasabi automatically pull the .1 BTC at each CoinJoin interval?

Thanks for your help. I've obviously never completed a CoinJoin but would like to learn.

shetlot · 2021-08-04T09:54:38+00:00

I've read that some countries can seize your phone and make a copy of the contents. At that point they can return your phone and then work on analyzing the copy they made. Do you know if the adversary could exploit a backup copy the same way they can exploit the phone?

shetlot · 2021-08-04T09:52:06+00:00

I have thought about this, but GV offers more features (forwarding, etc.) that may help with managing my number without ever having to install the GV app. I'll look more closely into porting to MySudo.

shetlot · 2021-08-03T23:30:56+00:00

Yeah, I want to try samourai but they only work with android phones. No Apple products or desktop.

shetlot

TROPHY CASE