All Proton Drive apps are now open source | Proton
proton.me
Proton Drive’s desktop apps are open source, meaning you can review the code of any Proton Drive app for yourself.
  • Lupec@lemm.ee
    118·
    2 months ago

    Very nice, I do hope that helps us finally get a Linux version sometime soon lol

    • Toribor@corndog.socialEnglish
      25·
      2 months ago

      Feels like this would be a bigger win for them than a lot of other companies. The people interested in privacy focused alternative to the Google/Microsoft/Apple offerings probably have a lot of overlap with Linux users.

      • Lupec@lemm.ee
        7·
        2 months ago

        It does, yeah. Still, having access to the official client too would be nice.

  • franiis@lemmy.world
    33·
    2 months ago

    Will they be now on FDroid? I think only one Proton app is there and it’s a little bit sad.

    • piracysails@lemm.ee
      24·
      2 months ago

      Proton VPN and proton pass

      IRRC they even removed all telemetry from pass but not VPN.

      They should definitely push drive and calendar there too.

        • loutr@sh.itjust.works
          13·
          2 months ago

          Telemetry is not bad in itself. It can be used for bug/crash reports, or usage statistics, without tracking or personal data collection.

          • utopiah@lemmy.ml
            4·
            2 months ago

            I’m curious, any advice on that? How does one do “good” telemetry? I’m the first to complain about Microsoft, Apple, (even worst) Google, Meta and now OpenAI collecting data to sell me stuff… but it’s true that also some data is needed to get some kind of introspection in terms of usage. Developers need to understand what is actually happening with the software they develop.

            Now I’m wondering specifically about 2 side :

            • how to do the data collection correctly (e.g local only, only send on crash, only send without PII, store only aggregate)
            • how to get informed consent from users (e.g off by default, UX that supports understanding of why it’s done and how)

            I’m genuinely glad that the mindset around privacy have changed since the last few years but I’m wondering how, when it’s a genuinely positive good case (to truly make better products), to do it.

            • PieMePlenty@lemmy.world
              3·
              2 months ago

              Your app has a button on its front page. No one ever presses that button. With good telemetry, you will know this and remove the button. The only thing you need to know is how many times each user opens the app and how many times they tapped that button. Crash reports can include the causes of errors. Without this data the app might have that unused button there forever and crash everytime anyone taps the donate button and you wouldnt know why you arent getting any dontaions.

              Telemetry is usually collected on non metered networks. Usually it is opt-out by default, set by the user in the apps settings. Personally, I’d inform the user of this and let them decice on first startup.

  • Rose56@lemmy.ca
    11·
    2 months ago

    I started with their email services many years ago, and today I user their email + free calendar. To be true, they went too much far with all these apps, but as long as it works for them thats fine.

  • bruhSoulz@lemmy.mlEnglish
    11·
    2 months ago

    Awesome! Cant wait for their wallet thing to become ready and i hope they have support for many types of coins… also i wish theyd make it so that proton drive work with joplin 😑

        • ReversalHatchery@beehaw.orgEnglish
          2·
          2 months ago

          I was listening to it a few weeks ago, but vaguely there are auditing companies in the Netherlands that need to verify companies above a certain size whether they are handling their money properly. As I understand it includes tax accounting.
          These auditing companies don’t like cryptocurrencies. There are several of these that don’t agree to audit Proton even because they are accepting Bitcoin, but none of the remaining would accept it if they were also accepting a second cryptocurrency.

          Now that I think of it, it might have actually been the reason they don’t accept Monero as a payment? In that case, the reason for Proton Wallet being bitcoin only has something to do with another wallet’s developers having been jailed recently for handling multiple cryptocurrencies.

          I recommend you to listen to it though, if you understand english speech. There were interesting topics (and Opt Out generally has interesting episodes).
          This episode is 54 minutes, audio only. You can find it here: https://www.buzzsprout.com/1790481/15505787-proton-wallet-w-andy-yen.mp3.

    • Possibly linux@lemmy.zipEnglish
      1·
      2 months ago

      If it is running on the server you have no way of verifying the code or the execution environment.

      Theoretically you should now be able to self host proton

        • moonpiedumplings@programming.dev
          1·
          2 months ago

          There is concern amongst critics that it will not always be possible to examine the hardware components on which Trusted Computing relies, the Trusted Platform Module, which is the ultimate hardware system where the core ‘root’ of trust in the platform has to reside.[10] If not implemented correctly, it presents a security risk to overall platform integrity and protected data

          https://en.m.wikipedia.org/wiki/Trusted_Computing

          Literally all TPM’s are proprietary. It’s basically a permanent, unauditable backdoor, that has had numerous issues, like this one (software), or this one (hardware).

          We should move away from them, and other proprietary backdoors that deny users control over there own system, rather than towards them, and instead design apps that don’t need to trust the server, like end to end encryption.

          Also: if software is APGL then they are legally required to give you the source code, behind the server software. Of course, they could just lie, but the problem of ensuring that a server runs certain software also has a legal solution.

                • moonpiedumplings@programming.dev
                  1·
                  2 months ago

                  I cannot find anything related to that in their documentation, their about page, or their whitepaper.

                  They talk a lot about decentralized computing, but any form of secure enclave or code verification isn’t mentioned.

                  Compare that to this project, which is similar, but incomplete. However, quilibrium uses it’s own language instead of python or javascript, like golem does. The docs for golem do not explain how I am supposed to verify a remote server is actually running my python/javascript code.

    • macniel@feddit.org
      12·
      2 months ago

      Yeah I don’t understand why they don’t have a codeberg or similar that they host themselves.

      • Tja@programming.dev
        4·
        2 months ago

        How would that help? If you release something as GPL code, you cannot prevent it from being used to train a model, no matter where it’s hosted.

        • null@slrpnk.net
          3·
          2 months ago

          There’s a difference between handing something to someone and leaving it somewhere they happen to be able to take it from.

          • Tja@programming.dev
            3·
            2 months ago

            There’s nothing in GPL that would forbid it. Only distribution without code publication is forbidden.

            • macniel@feddit.org
              2·
              2 months ago

              mhm, and how would the distribution inside an LLM work? Are those code snippets CoPilot et al produce come with dedicated license sections?

              And regarding how it would help selfhosting the code: it wouldn’t be on the GITHub servers owned by Microsoft, which owns/operates CoPilot. Its akin to feeding the LLM directly by pushing it to their servers.

  • cultsuperstar@lemmy.world
    7·
    2 months ago

    I want to make the jump from Google apps but I can’t because I use GCal heavily and Proton Calendar doesn’t (yet) sync to GCal. I can enter in something in GCal and it’ll appear in Proton Calendar, but I can’t enter in something in Proton Calendar and it shows up in GCal. Hopefully they add that soon.

    • cyberwolfie@lemmy.ml
      2·
      2 months ago

      If you want to move away from Google apps, why keep using Google Calendar? Maybe someone has a suggestion for a way to work with it if you say what your continued use case for it is and what kind of limitations you are working with.

        • cyberwolfie@lemmy.ml
          2·
          2 months ago

          Ok. The way I’m set up with my partner is to have two calendars, one on Nextcloud (me) and one on Google Calendar (my partner). We subscribe to each others calendars, and I’m also formatting it the same so it appears to be one. However, we cannot edit each others entries, but for our use case that is not needed, we just need to share certain events between us. So while this is not Proton, I believe the same is doable there.

          I can see how this is not a very practical with multiple people (but potentially doable, it has been set-and-forget in my case), and if you need the ability to edit each others entries, then it is a non-starter.

          • cultsuperstar@lemmy.world
            1·
            2 months ago

            Oh gotcha, I see what you’re doing. Samsung Calendar (I use the S24 Ultra) has 2-way syncing with GCal. Everyone else is on iOS and they all have Google accounts so GCal was the easiest way to handle it.