this post was submitted on 07 Jan 2025
3 points (100.0% liked)

Privacy

0 readers
57 users here now

Everything about privacy (the confidentiality pillar of security) -- but not restricted to infosec. Offline privacy is also relevant here.

founded 1 year ago
MODERATORS
 

I'm checking out various "personal knowledge management" tools in a sandbox to see if it be an upgrade my ragtag collection of text file-based notes.

First candidate is #Logseq, supposedly "privacy-first".

How #privacy friendly is something based on Electron (aka Chrome)? Debatable, but then they also do this:

  1. Have "Send usage data" on by default
  2. Start with an example page that embeds a YouTube video, and accepts all cookies

tcpdump and mitmproxy go wild when starting the program.

Shows that the "Send usage data and diagnostics to Logseq" setting is enabled by default.
Shows the services being contacted by Logseq over HTTPS right after starting it for the first time.  Hosts that are being contact: www.youtube.com, googleads.g.doubleclick.net, jnn-pa-googleapis.com, play.google.com, app.posthog.com, o416451.ingest.sentry.io

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 3 weeks ago (29 children)

Next up is #Obsidian, a tool I'm hesitant to consider because of the developers' view on open source. Hence, the source is not available except the obfuscated JavaScript that's ran by Electron.

Despite that, Obsidian itself only does a version check (which can be disabled) and starts in "restricted mode" by default, which disallows third-party plugins (but does still embed external content when asked to.)

There's some phoning home by Chrome but far less than with Logseq.

Color me surprised.

The program defaults to "restricted mode."  "Would you like to exit Restricted Mode to enable community plugins?   We strongly recommend making backups of your data before doing so."

[–] [email protected] 1 points 3 weeks ago (1 children)

@[email protected] Huge fan of opensourse, but I do use Obsidian as my main notes tool these days. It's so pretty, just works, and while the core tooling isn't open, I have peace of mind that I can leave any time and move to any other text/markdown based tool.

That's a big win over other polished note-taking tools like Evernote, for instance.

I'd love to see open tools like Joplin get to the level of visual appeal Obsidian has.

[–] [email protected] 1 points 3 weeks ago

@[email protected] That's definitely a big plus for Obsidian (and the current version of Logseq.)

Anytype hides everything away in a database blob that can be somewhat exported, but when doing it in Markdown format the "relation" metadata (think Dataview) is lost, where with Obsidian Dataview's metadata is just there in the Markdown.

Despite the misgivings I had about Obsidian it's looking like a very good option indeed.

load more comments (27 replies)