Open letter to anyone with a protest or rights-based website:
PLEASE get rid of Facebook and Google SSO login options and analytic tracking codes from your sites.
You are literally handing over your user data to unscrupulous players that are in direct opposition to your cause. These sites can and do hand over user-specific data.
To everyone, stop using these options. Set a strong password. Use an alias email. Use a VPN.
On VPN usage...
Hypothetically, any system on the web that you interact with can "know" you. And while it is true that VPNs are no different, the reality is that using a paid ProtonVPN or similar non-US based service would require that service to cooperate internationally with a warrant. Proton does not store where you visited. Good luck getting that info operationally into the hands of ICE as part of a dragnet.
Agree 99% with this. Thank you.
The only thing I would cautony against is Proton given their CEO's pro maga statement.
Also, how do you know proton doesn't log where you went to via their vpn?
That's a significant statement to make.
Reading the other replies I'm glad to see others caution again VPNs that you personally don't know inside out.
For non-technical activists reading this, let me put it like this.
Hey I'm offering a VPN service. Use me!
All your interactions on the web go via me. That means I know which sites you went to.
And if I were hacked, or simply handed that info to a tyrant, you're compromised. And especially if I offer a "free" service, I gotta sell something to make money. Data about YOU.
And because ALL your internet activity is via me, it's easier to build a fuller picture of you.
Independent audits are reassuring.
@rzeta0 @theprivacyfoundation agreed but would still LOVE to know of a similar, non-right-fuckwad-leaning choice