Protonmail a Flawed Privacy Strategy?

[@ralphmiranda2077]

When I first learned about email in the late 80s, the most succinct description for how it works is; "Don't write in an email what you wouldn't write on a postcard."

[@CarlJones14]

I am a truther, so I put everything out there's, so THEY know they've been had. Such as Porton Down making Covid, and MI6 exporting it.

[@nathanscarlett4772]

Good point

[@NameName-rk6ov]

I guess Hillary missed that memo 😆

[@nacosnacos]

One of the best episodes ever! Keep it up, Rob, excellent work!

[@jimcabezola3051]

Your videos are great for multiple viewings. They are reference-quality. Mahalo.

[@robbraxmantech]

Glad you like them!

[@mistyculous9644]

yes! Rob is a super high content broadcaster!

[@drewtonium]

Always view elsewhere first but click here to support you. Thanks for sharing

[@robbraxmantech]

Thank you for supporting!

[@sophiesmith5922]

Great video, Rob. I have to laugh at the GPG idea. Sure, I know how to encrypt. But literally NO ONE I know could figure out how to decrypt it. So if no one can read it, why bother for regular email? I only get concerned about things like medical records. Unbelievable how lax things have become

[@RonMDavis]

The general public needs to take their privacy more seriously than they do....until they do , nothing will really change.

[@ryanqvincent144]

That is an excellent discussion of all the issues with Internet email! The advice of assuming it can be read unless a lot of precautions are taken is incredibly important! ;-/ That you mention encryption used on its own still leaks a lot of information about you is really important. I like that you gave many useful techniques to be able to use email 'safely'. i.e. VPN and false names. This is an excellent introduction to the privacy issues of the internet and especially emails! And all in one place! :) So useful. This is the type of useful information that should be taught in schools. I like that you provide services that help people to be private in the current situation we all find ourselves. Thank you.

[@robbraxmantech]

Do you consider this a beginner level video? If so I will put it in the beginner playlist.

[@ryanqvincent144]

@@robbraxmantech Certainly worth while adding to the beginners list as to alert people to the issues! It may be useful to provide specific examples of each step then it would be useful to people who wanted to have personal privacy. An example using your own services would help 'ordinary' people who want privacy to set it up. I am aware of the tradeoff of providing people with means of being private as it can be used for 'naughty things'. However, the 'bad guys' already know and use this stuff. ;-/ What I like about your videos is that you explain the issues with the internet, which I really like, and the issues of having a private life! :) There is no easy way for the 'ordinary' person to learn all the issues and 'answers' that you provide for personal privacy. I am aware of all the work you have put in to understand and explain what you do! Thank you.

[@mistyculous9644]

@@robbraxmantech yes, I think this belongs in the Beginner playlist, because everyone uses email.

[@ketobygeorge7763]

@@robbraxmantech Yes

[@AshGreen359]

Turned into an ad about Braxmail but I'm sold

[@reggiep75]

I've always wondered if pre-encryption and sending complete gibberish to people would be the way around systems or email providers who's systems have eventually been compromised. Encrypting something to get it further encrypted via an email provider, would be something I'd happily engage in to ensure 2 step security of my emails.

[@klin1klinom]

If people intercepting your scramble know who you are, then it's simple enough to crack any kind of encryption with a torch, a pair or pliers and a hammer. Once you're on the radar, your encryption means nothing.

[@robbraxmantech]

Exactly. Meta data is powerful

[@terrydaktyllus1320]

Define your usage of the term "compromised" when it comes to email - because unless you are hosting your own email server just for you, how do you know you can truly trust the company providing the email service to you? And unless you trust them, then that's you treating the service as though it is "compromised". In which case, what would a "non-compromised" email provider look like? Other than the self-hosting option.

[@mistyculous9644]

@@terrydaktyllus1320 Rob Braxman designed "Braxmail" to address these issues.

[@TheOfficialArthurMorgan]

Really appreciate all your info Rob. I was wondering if you could maybe create a Teachable course or something like it that would encompass everything that someone would need to know in order to have maximum privacy all laid out in a simple and easy order. I would pay you for that 😏

[@asintonic]

Dude watch all his vids

[@robbraxmantech]

It's called the Beginner Playlist on this channel

[@mistyculous9644]

So - after you watch all the "beginner playlist" videos, you can send Rob money from Brax.me?

[@davidroynewby]

@@robbraxmantech each of your videos gives 3-4 key tips to maintain true privacy. To Bully’s point, if these key strategies were laid out in a text instruction manual, many people would invest $49 to $97+ for beginners, intermediate, and advanced level manuals. I know I would! For context, I have probably watched 4+ hours of your videos cumulatively, take notes from each video, and would gladly invest $97+ for an advanced manual summarizing your strategies for network, device, email, text, and call privacy.

[@bobstuart9716]

Yes, me too! There is so much information in these videos, I’d love to see it compiled into a textbook. I’ve got the money if you’ve got the book, Rob. Thanks for all you do.

[@m3sca1]

protonmail withheld mail between myself and another protonmail account holder that was about hydrogen research. its a honeypot for people who want to keep their information out of the google loop.

[@oahts5906]

Interesting it was on hydrogen!! I’ve been interested in this research myself

[@m3sca1]

@@oahts5906 yes, i am pretty sure whoever "they" are, are interested in stealing technology and making sure nothing leaks into public knowledge that could upset the planned hydrogen eCONomy that has been planned to use fossil fuel input in steam reformation plants, instead of green H2 from waste water and such. The brown and grey H2 from coal and gas is not as clean nor efficient but the plan is to keep big oil as the energy providers until 2050 in what is termed a transition fuel. truth is we could do simple things like use solar panels next to sewer plants and have the cheapest cleanest fuel on the planet with no waste from steam reformation plants. the silliest idea is to use H2 fuel cells to make electricity then use the electricity to turn electric motors for automobiles, when engines can simply be retrofitted to run on H2. Toyota wants to keep the ICE engine alive and not ruin the supply chain of all the industries that already make car parts and so recently ran a H2 powered Corolla for demonstration purposes. They literally went on record to say only very little changes are needed to modify the engines to work on the new fuel.

[@oahts5906]

@@m3sca1 Definitely curious. Stanley Meyer was certainly on to something. The HHO cell has been repeated, but scarcely the way Stanley Meyer had done it. People tend to forget that the electrolysis process was controlled by a central computational unit. If hydrogen couldn’t yield high energy, why would hydrogen bombs exist? As far as big oil and 2050, well of course it’s in the interest of big oil, but it’s also in my estimation because individual autonomy is under assault. In my opinion, there’s a massive push to get rid of individual vehicle usage BEFORE 2030. These rising gas prices are only the start of an energy war. We MUST figure out hydrogen technology if there’s any hope of saving and expanding our existing technology moving forward.

[@m3sca1]

@@oahts5906 yep you got it. trouble is everyone wants a return on their investment and try to patent it or sell stuff and then the system jist gobbles them up. i follow a bunch of researchers and quite a few had all sorts of trouble when they try to get investors or lay out patents. i started having email problems after i downloaded a j0e cell document of a fellow named stephen jones. he detailed his research into running a stationary honda type engine. not much to it. change the timing, clean the water 1st with electrolysis methods and filtration then DONT actually plumb the gas in... jist connect it to the block so the metal loads up with Hs that fit between the atoms of the metal🙃

[@rodneyb947]

Thank you Rob, I really appreciate all your doing and videos. They are very helpful.👍

[@cosmos_creater789]

Denial is being noticed. Thank you. This is a gift.

[@CheckTesting1]

…morning Mr B 🙏🏾 “Got a better understanding now, have a blessed week” Thank you 👍🏾🙏🏾😊

[@mathew12.9xxoo7]

Privacy man you keep me faith full in this dark world,Go bless u!

[@blaknificent09]

Mind blowing the information extracted just from the header...thanks for the info.

[@brendan1675]

Rob, do a video of spy tech in new vehicles

[@serenditymuse]

Encryption of email content is achievable and VERY IMPORTANT. Protonmail does this well. So does Tutanota and Skiff and Engimail within Thunderbird though the latter is only for recipients that have public PGP key. And you can send sensitive emails with encrypted content sending the symmetric key securely some other way. Protonmail is also PGP based so it can send E2EE to any user who has a PGP public key not just other Protonmail users. And anyone that sends PGP encrypted mail can send to a Proton user if they have their public key. So yes the metadata is pretty much hopeless but encrypting content originating from one of these systems and too a recipient that has the private key can certainly be done. Universal? No. Way better than nothing? Yes.

[@northernpacificrecoveryten4406]

I love u man! U are a diamond 💎in the rough! Tysm for all your hard work. Have a good day! Is that your boat? Badass!

[@robbraxmantech]

Thanks for watching!

[@RobertECheck]

@Rob Braxman Tech - Rough!! Nothing rough about him. He’s a brilliant diamond.

[@AlexeiTetenov]

Thank you for sharing!

[@MV-wv8xz]

Excellent video by the way!

[@MV-wv8xz]

I use gmail but not the gmail app. What's the benefit of using gmail (or other mainstream emails) through Thunderbird, FairEmail, or K-9 Mail? How can someone use gmail in the same manner John McAfee used gmail?

[@terrydaktyllus1320]

Because the Gmail app requires the presence of Google Play Services on a mobile device which in turn means that you have to provide an identity to log into that device - and that in turn means that Google is then tracking the location of that identity through wifi triangulation, which you cannot disable. If your real name is "John Smith" but you have an email account named "Paul Jones", then using a non-Google email client does not necessarily reveal your "real" identity or your location. It's therefore easier to obfuscate your data with a non-Google email client. Rob has covered all of this is previous videos.

[@makaismith2071]

Mitch V - There are no benefits from using gmayl! You really need to stop usin that now!

[@RobJuneau]

Thanks, Rob.

[@rayofsun7680]

Excellent video! If you use your email from your app but it's connected to apple id so you can create on KZbin does it still help or defeat the point, meaning apple/goog can read email since it's connected to them even though your email app is private? In order to even download app on apple you have to put in id what do you suggest?

[@crimestoppers1877]

Excellent quality discussion.

[@terrydaktyllus1320]

No, a discussion requires at least two people feeding points back and forth to each other. You can describe it as a "lesson", "lecture" or simply a "video". You're welcome and you can thank me later.

[@makaismith2071]

Terry Daktyllus - Wow! Jus saw you in Mitch V thread rambling about somethin weird, unnecessarily to him! And here you are bein rather rude & arrogant Terry! Wtf!😱

[@makaismith2071]

@@terrydaktyllus1320 Won't be thanking you for your abrupt arrogance! You can take a runnin jump, pmsl😆🤣

[@lyfandeth]

The government specifically bans any use of email by health care providers under the HIPAA legislation, considering it to be inherently unsecure.

[@terrydaktyllus1320]

Incorrect. This is easy to do an Internet search for also. HIPAA does not ban the use of email, it makes recommendations on the types of information that should and should not be sent over email. And before you argue with me, I'm a cyber-security veteran of some 15 years experience now (with an additional 25 years on top of that in telecoms and IT) and I have these types of discussions with customers every working day of my life.

[@rayofsun7680]

Where is the xmpp free feature you're talking about on your app and how do you get it?

[@SirPrancelot1]

Thanks Rob. Great advice as always.

[@ThisisFerrariKhan]

How come you don’t cover Dark Mail (DIME) protocol at all?

[@rayofsun7680]

Also if I use your brx email service but it's sent to person who doesn't use your email (uses Gmail Hotmail etc) is the email exchange then not secure either?

[@zita-lein]

This was E X C E L L E N T !

[@YuraJayRJay]

It's possible to hide your phone number from other users on Telegram and mostly rely on username instead. The way it works, the phone number is hidden from everyone except for your contacts.

[@raymitchell9736]

So basically what you're saying is that encryption of the body of the message is as useless as using a screen door for a hatch on a submarine.

[@nemonada3501]

Curious what you would think about using the onion network instead of a VPN? I may be misunderstanding it but doesn't it anonymise or misrepresent the IP?

[@robbraxmantech]

TOR is great but slow and blocked by a lot of sites.

[@YadraVoat]

You're talking about SMTP when you say "email" right? Any particular reason you don't say the name of the protocol? (I've been tracking this anomaly for several videos. 🙃 )

[@YadraVoat]

Oh, my apologies. It is in this video in which you do name SMTP! 😅😅😅

[@InfoSecGuardian]

Email in-Transit typically moves over the SMTP Protocol to disparate email providers. Email can stay inside a company. Like, you can send your bank a message using their website in an "email" like application, and they can respond to it like an email but the response is only available to you on the bank application. Some Doctors offices also do this. In these cases, email never went through the SMTP protocol. You might also access your emails at a web-server. Your access is via an IMAP (Internet Message Access Protocol) when the app you use is reading/writing directly to the web-server. If you download emails to your computer, you might use POP3 (Post office 3 Protocol). Microsoft has an Exchange ActiveSync protocol that syncs Exchange mailbox with your email, calendar, contacts, tasks, and more.

[@ArtOfHealth]

Do you remember saying "Mobile Internet such as Tmobile through the SIM is more secure than going through a router?" Rob, do you use bytzvpn on your Tmobile service? Do others on mobile sims only need bytzvpn and braxmail?

[@robbraxmantech]

typically yes

[@lynxoffinland]

I recently swapped email just to get away from google as service provider. Movement towards more decentralized services is required.

[@idcrafter-cgi]

what are you thoughts about Lora and using it to send sms but encrypted

[@robbraxmantech]

Lora itself is not a threat.

[@noway742]

The video's of Rob force just one conclusion. There must be laws to prohibit the access and storage of all private data. That won't happen, the 3 letter organisation doesn't want this, but we could at least have OUR private data secure for commercial use or profiling.

[@beachboardfan9544]

Why is the privacy industries order of operation, build, market, acquire user base, sell to government or google and completely negate the purpose of the service in the first place?

[@FajorMuckup]

What do you think of communication over Bitcoin Lightning?

[@stevekemble8911]

If you like what Thunderbird is doing, don't forget to donate if you can.

[@jimbo4310]

what vpn do u reccomend

[@jaydee177]

How can I sign up for a brax mail email?

[@robbraxmantech]

On brax.me Store

[@jillw892]

Do you think people will be find phones in hyperinflation?

[@jillw892]

That's just an honest question. If you can't afford to buy food or gas what fool would buy a phone that cost $1,200?

[@robbraxmantech]

In this new society, people will buy the phones before gas (which in my neighborhood is $7.03)

[@robbraxmantech]

BTW a BraX2 phone is $399

[@jillw892]

@@robbraxmantech dude that is crazy!

[@jillw892]

@@robbraxmantech not going to lie I bought a Walmart phone for $35 3 years ago and it's still working fine

[@bertplank8011]

With my Proton Mail VPN...."they" have substituted the real heading page with a fake page.....somehow perhaps getting to my unattended phone...

[@maximilianhuebner3558]

Explain

[@grizzlypaws461]

This just stressed me out unnecessarily. I don’t even send emails. I just need a service to use to enter my email everywhere

[@ronrouyer2069]

Wait what? Let me think about that...well what about single use of a new phone to a proton to proton comm? Secure?

[@robbraxmantech]

Encrypted. Except you paid for protonmail so there's metadata. So what are you hiding?

[@robbraxmantech]

Just to compare. Let's say you arranged to talk with your contact over XMPP (just as you arranged to do protonmail). Result: No meta data + encryption. So how is protonmail better then?

[@cjlowe1650]

Does a VPN hide your real I.P. address?????

[@dakara4877]

The amount of diligence required is very high. Not sure what the solution is, but this means almost all of society will continue to be watched and tracked. Even with high diligence, all it takes is one mistake and all your effort was for nothing.

[@robbraxmantech]

Not that much diligence is required after you've planned it. Have multiple emails. Limit the purpose of each. Assume someone can read it so be smart about what you put on it. And have a backup way of communicating that's not based on email or texting. I've planned this for myself for decades.

[@terrydaktyllus1320]

In other words, what you're saying is "It's too difficult and I can't be bothered to make any changes myself". That's fine, just be honest with yourself - if you can't be bothered to learn and put in effort yourself, nothing will change for you for the better.

[@dakara4877]

@@terrydaktyllus1320 I'm making a realistic comment about society.

[@terrydaktyllus1320]

@@dakara4877 So you're talking about everyone else but not you?

[@dakara4877]

@@terrydaktyllus1320 Do you want to make the case that the proposed statement is wrong? or are you just interested in making this conversation all about what you think you know about me?

[@nv0us]

Too late if Been doing it for years?

[@robbraxmantech]

No. Just understand that you're not getting the benefit you expect other than an alternative to Gmail

[@radornkeldam]

I guess a more proper way to refer to that system would be "e-postcard" rather than "e-mail"...

[@crimestoppers1877]

1) Yes, I agree. I have literally hundreds of FREE email addresses that are used ONE time only. These email accounts are set up months or years before from different IP addresses and different type faces. I never get spam from these since I do not bother "checking in" on the old single use email addresses. 2) I use other bogus email addresses that are identified with at one time the "real me". These emails contain zero content of value, since they are close to published junk text from a boring article. This is done to "help" to add TONS of bloat and disinformation that identifies me as a boring idiot normie.

[@terrydaktyllus1320]

So if you've only used them "one time only", then they must all be completely useless email addresses now, right? In which case, what is the point of keeping them? Oh, I just noticed, it's *YOU* again - the person that, despite its pseudonym, has never stopped any crimes.

[@crimestoppers1877]

@@terrydaktyllus1320 Lets take your speculations one at a time. Yes the one time emails each on a different ip address are "totally useless" after each use. Just like electronic toilet paper. I thought this was obvious to all? One time means use only once, just like toilet paper. Are you suggesting that a square tissue of TP can be used more than once? Yecch! The fact is that the definition of crimestopper never reveals information about stopping crime but only increasing awareness of crime won't stop your speculation. I posit that you may not have reached the concrete operational phase of childhood ( Jean Piaget) where children learn that each word has a context and also may have different definitions. I specifically used the word "discussion" because KZbin AI tries to detect declarative sentences which YT thinks can be dangerous to Woke thinking and the Deep state. Actually the context of the word discussion is accurate in that these responses produce an asynchronous discussion instead of a full duplex one. I suggest the next time you burp from eating too much ice cream you can call out to mommy upstairs that your tummy hurts?

[@diva555sg]

Email: use VPN always

[@robbraxmantech]

If your email provider is like Braxmail (my service), that strips the header, then a VPN is not necessary anymore.

[@JNET_Reloaded]

you never show what your on about, how to get ip for email sender from an email?

[@robbraxmantech]

I have many older videos that show this. It's called the email header and you can display it on many email clients like Thunderbird

[@snax_4820]

The security of Protonmail is even contra-productive. Once the user forget his old password and sets a new one, he can not access the old emails anymore, because the encryption is still tight to the forgotten password. The user is completely screwed.

[@serenditymuse]

Nothing can protect against incompetence or other foolish behavior. Not a fair criticism.

[@ClassicRiki]

While you are correct that ultimately ‘If Man can make it, Man can Break it’…I personally think you miss the point overall. It’s all well and good pointing all of these potential issues and I’m not disagreeing…but ultimately you continuously point out how every single service has flaws, but you know full well that using something with terrible flaws is worse than something with some potential flaws which aren’t great. If anything; please take notice of the following…you seem to think that your own personal product is superior and somehow unique. Do I really need to point out each and every issue with your own service? Does someone (I’ll certainly be willing) need to develop then demonstrate a vulnerability and exploit against it or are you going to make a video where you point out the flaws in your own service? Even a few words start the mind thinking…free account? It’s stored where? How do you pay for that? Are you using AWS, Azure or is the entire infrastructure self contained? Of course it’s not. No identification needed…ok so I’ll use one of the browsers you’ve explained the flaws on to set it up, on one of the devices that have a unique identifier and are connecting continuously to devices all around me through cellular, WiFi and BLE protocols shall I? You’re not wrong about much of what you say but honestly I find it laughable that you would then go on to promote your own product/service in a way that frames it as not vulnerable in similar or the same ways all the others are. There’s no way on Earth that you don’t know I’m correct and I genuinely find it pretty underhanded to behave as if yours is perfect…why would I trust you? Nothing personal…but honestly, why? It’s free to use, it costs you money and you refuse to tear down your own product in the slightest while criticising everyone else’s. Your points are generally correct; however your overarching argument (which happens to be correct as well) is that nothing is really secure. Yet you decide to make your own service. Why? What’s the point? If you claim it’s not vulnerable I’m more than willing to write up a report on every aspect where compromise is certainly possible on your very own service. Care to explain if I’m wrong? If so it’s only fair that I should demonstrate why I disagree, yes?

[@bruceli9094]

Protonmail is Honey Po+

[@ИльяТарасов-в8о]

try utopia p2p ecosystem

[@cajal6]

ProtonMail is not a honeypot. Stop spreading this nonsense.

[@wartlme]

two male servers connect. Seems woke. LOL.

[@terrydaktyllus1320]

So you're saying that gay people are woke? That's a bit childish, isn't it?

[@tabithajones108]

I'm sorry but more s... sherlock

[@phobos6389]

IP address tracking within 200ft is pretty much impossible. I'm always open to learn new things, but at the current state of my education you are sometimes not even able to get the city you're in correct by using ip tracking. 200ft is very very close. This is simply not a true statement in this video, which weakens my trust in the expertise of this youtuber.

[@robbraxmantech]

You have no idea. Go watch my tracking video recently. You have a lot to learn. IP addresses are SOLD with locations. Not the generic locations the average person sees. It is subscription based.

[@phobos6389]

@@robbraxmantech despite the quite unfriendly seeming approach of yours I took some time to watch your video half through. What you seem to talk about is general tracking by combining many factors that only big tech companies have access to. I personally understood you wrong in this video, as I believe you were talking 100% IP tracking. Tracking your exact location is impossible for someone who ONLY has your IP and nothing more. Of course google knows where I live, as I told google by adding my home address to Google maps for example.