5 ms·

I support the motive, but it appears to have been hijacked to include companies that don't protect privacy. Happy to amend this response if creator finds a way

I support the motive, but it appears to have been hijacked to include companies that don't protect privacy. Happy to amend this response if creator finds a way to moderate it, but for instance MixPanel stole usernames and passwords earlier this year so definitely shouldn't be on this kind of list https://techcrunch.com/2018/02/05/mixpanel-passwords/ https://techcrunch.com/2018/02/05/mixpanel-passwords/ An alternative for those interested might be https://prism-break.org/en/all/ https://prism-break.org/en/all/

pieterhg 8y ago
Thanks, removed MixPanel. Any others you see that don't respect privacy?
- lucideer 8y ago
  I haven't done due diligence and checked each one, so maybe I'm been overly pessimistic, but some choice entries that I very seriously doubt don't track you: Dailymotion, Wordpress, Dropbox, Skyscanner, Here.com... I could go on. Mapbox for example definitely track you, but do provide an opt-out in their API, so some would describe that as "more" privacy friendly. Others may do similar. This seems more like a list of alternatives to Google (which is still incredibly valuable), rather than a list of privacy-friendly alternatives. That's still great though: I'm still happier to have some choice in who tracks me even if all alternatives do.
- commoner 8y ago
  Authy doesn't delete user accounts, despite claiming to do so upon request in their privacy policy. "Why do you refuse to delete accounts? It is my data and I want it to be removed. How can I feel safe about my data if I cannot remove it if I choose not to continue using your service." https://news.ycombinator.com/item?id=9100525 https://news.ycombinator.com/item?id=9100525 "Your personal information is generally stored until you advise us to close your Authy account and delete your records, and activity logs may be stored for up to a year for security purposes, or, if there is an ongoing investigation, until that matter is concluded." https://www.twilio.com/legal/privacy/authy https://www.twilio.com/legal/privacy/authy
- marichards 8y ago
  I don't appear to have an edit option, I thought comments could be edited. Thanks for removing MixPanel, I think centralised analytics are by default going to breach privacy as you only need a referer and an IP address to have enough data to put someone's privacy at risk. Also, third party JavaScript (not protected by code review and SRI) is an access control issue and can violate privacy at anytime as shown by instances of credit card theft and cryptomining this year. Simply Analytics lies about not being a GDPR concern (which requires consideration for access control and security (loading third party JavaScript) and under GDPR IP address can be considered an identifier.

pieterhg 8y ago

Thanks, removed MixPanel. Any others you see that don't respect privacy?

lucideer 8y ago
I haven't done due diligence and checked each one, so maybe I'm been overly pessimistic, but some choice entries that I very seriously doubt don't track you: Dailymotion, Wordpress, Dropbox, Skyscanner, Here.com... I could go on. Mapbox for example definitely track you, but do provide an opt-out in their API, so some would describe that as "more" privacy friendly. Others may do similar. This seems more like a list of alternatives to Google (which is still incredibly valuable), rather than a list of privacy-friendly alternatives. That's still great though: I'm still happier to have some choice in who tracks me even if all alternatives do.
commoner 8y ago
Authy doesn't delete user accounts, despite claiming to do so upon request in their privacy policy. "Why do you refuse to delete accounts? It is my data and I want it to be removed. How can I feel safe about my data if I cannot remove it if I choose not to continue using your service." https://news.ycombinator.com/item?id=9100525 https://news.ycombinator.com/item?id=9100525 "Your personal information is generally stored until you advise us to close your Authy account and delete your records, and activity logs may be stored for up to a year for security purposes, or, if there is an ongoing investigation, until that matter is concluded." https://www.twilio.com/legal/privacy/authy https://www.twilio.com/legal/privacy/authy
marichards 8y ago
I don't appear to have an edit option, I thought comments could be edited. Thanks for removing MixPanel, I think centralised analytics are by default going to breach privacy as you only need a referer and an IP address to have enough data to put someone's privacy at risk. Also, third party JavaScript (not protected by code review and SRI) is an access control issue and can violate privacy at anytime as shown by instances of credit card theft and cryptomining this year. Simply Analytics lies about not being a GDPR concern (which requires consideration for access control and security (loading third party JavaScript) and under GDPR IP address can be considered an identifier.