Transcript

A post by [object Object] (@[email protected]) saying: courtesy of @[email protected], Proton is now the only privacy vendor I know of that vibe codes its apps: In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure! I am once again begging anyone who will listen to get off of Proton as soon as reasonably possible, and to avoid their new (terrible) apps in any case. https://circumstances.run/@davidgerard/114961415946154957

It has a reply by the author saying: in an unsurprising update for those familiar with how Proton operates, they silently rewrote their monorepo’s history to purge .cursor and hide that they were vibe coding: https://github.com/ProtonMail/WebClients/tree/2a5e2ad4db0c84f39050bf2353c944a96d38e07f

given the utter lack of communication from Proton on this, I can only guess they’ve extracted .cursor into an external repository and continue to use it out of sight of the public

  • James R Kirk@startrek.website
    link
    fedilink
    English
    arrow-up
    29
    arrow-down
    13
    ·
    3 days ago

    Probably anti-Proton. I’m no conspiracy theorist, but the amount of pro BlueSky, anti Proton, anti Signal people I see on Lemmy make me wonder sometimes.

    • sunzu2@thebrainbin.org
      link
      fedilink
      arrow-up
      34
      arrow-down
      7
      ·
      3 days ago

      Proton CEO did it to the company…

      Signal requires a phone number… If you don’t see an issue with that… Then you live in a better place than the rest of us. I am happy for you.

      • Broadfern@lemmy.world
        link
        fedilink
        English
        arrow-up
        17
        arrow-down
        1
        ·
        3 days ago

        Signal is the sad compromise for the people I hold dearest because I refuse to use Messenger anymore and SMS is a joke with how glaringly unencrypted/de-facto wiretapped it is.

        I’d love to get everyone on SimpleX but they already look at me like a wacko over Signal. The convenience tax is just non-negotiable for them and I have no idea how to bypass it.

        • Blastboom Strice@mander.xyz
          link
          fedilink
          arrow-up
          13
          ·
          3 days ago

          I used to be a big proponent of simplex even if I dont use it with anyone, but I was told that the main developer supports tr*mp and m*sk… If you go to their github, they only link twitter as their social media and if you check their account…

          https://github.com/epoberezkin (dunno if were allowed to share twitter links)

          Talks about “far-left radicals”, says that nazis were socialist etc. etc. … Really yikes

          • EngineerGaming@retrolemmy.com
            link
            fedilink
            arrow-up
            2
            ·
            23 hours ago

            TBH I feel like so many project leaders are wackos that I don’t even judge the products by those, just by things they do. I still have hope in Simplex, but there were a couple of red flags, such as content scanning proposals, including clientside. Sure, it can probably be relatively easily forked to remove that specific thing, or you can choose the servers that don’t do that, but it’s still alarming that they try.

          • Mika@sopuli.xyz
            link
            fedilink
            arrow-up
            2
            ·
            2 days ago

            Yuck. Well then again we sit in Lemmy, and the lead dev is a proud tankiest tankie. Open source do be like that.

        • sunzu2@thebrainbin.org
          link
          fedilink
          arrow-up
          9
          arrow-down
          1
          ·
          3 days ago

          Simplex ain’t ready… So ain’t pushing it as of now.

          Once it is normie ready, I will start the move.

          Signal is a temp solution

          With that being said, I agree 100% with your comment. We work with what we got today!

      • алсааас [she/they]@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        8
        arrow-down
        1
        ·
        edit-2
        3 days ago

        For private communication Signal is the gold standard LOL

        Not everyone needs shitty xmpp extensions, Matrix that lacks PFS and is enshitiffying as we speak (I say as an avid user) or overkill like SimpleX or Briar.

        • sunzu2@thebrainbin.org
          link
          fedilink
          arrow-up
          2
          arrow-down
          3
          ·
          3 days ago

          Sure… But you are also feeding NSA meta data on your communications which is whatever I guess for most people but I don’t like it

          • алсааас [she/they]@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            8
            arrow-down
            1
            ·
            edit-2
            3 days ago

            You seem to be misinformed. Signals architecture is explicitly designed in a way to minimise metadata as much as possible. You can look up the data they had to hand over due to lawsuits, it was absolutely minimal

            • EngineerGaming@retrolemmy.com
              link
              fedilink
              arrow-up
              2
              ·
              22 hours ago

              First - I’m not sure Sealed Sender would help against the server being changed to be actively malicious and trying to build social graphs. Second - even metadata concerns aside, a centralized system is just not resilient. Proposals like Chat Control are A LOT more easily enforceable with them than with tiny selfhosted servers.

                • sunzu2@thebrainbin.org
                  link
                  fedilink
                  arrow-up
                  6
                  arrow-down
                  1
                  ·
                  3 days ago

                  There is such thing like national security laws.

                  So you don’t know shit.

                  If they are told to log, they will log. And there is enough meta data leakage to create heat map of your contacts

                • lambalicious@lemmy.sdf.org
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  2
                  ·
                  3 days ago

                  I know that Signal runs on US cloud infrastructure

                  And only that one.

                  Signal dev is quite adamant on not letting people have their own servers, select a EU provider (yeah, EU is nazifying, but at least it’s a large enough second-hand basket) or host the (suppossedly zero-knowledge) messages on one’s own infrastructure. I’d say that’s curious.

      • James R Kirk@startrek.website
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        2 days ago

        The question is not is Proton perfect in every conceivable way, the question is: is it more private than Google and the answer to that is yes.

        When you opine on social media that Proton is somehow just as bad as Google you are helping doing the work of Google and that’s the part that (again I don’t truly believe this) makes me wonder if Google/Meta/Twitter is sowing the social web with seeds of doubt about more private alternatives.

    • irelephant [he/him]@lemmy.dbzer0.comOP
      link
      fedilink
      arrow-up
      7
      arrow-down
      7
      ·
      3 days ago

      Genuinely most of the people against bluesky/atproto haven’t looked into it further than the blogpost by Christine lemmer-webber, and just want to be eliteist about being on the fediverse.