this post was submitted on 07 Jan 2025
3 points (100.0% liked)

Privacy

0 readers
42 users here now

Everything about privacy (the confidentiality pillar of security) -- but not restricted to infosec. Offline privacy is also relevant here.

founded 1 year ago
MODERATORS
 

I'm checking out various "personal knowledge management" tools in a sandbox to see if it be an upgrade my ragtag collection of text file-based notes.

First candidate is #Logseq, supposedly "privacy-first".

How #privacy friendly is something based on Electron (aka Chrome)? Debatable, but then they also do this:

  1. Have "Send usage data" on by default
  2. Start with an example page that embeds a YouTube video, and accepts all cookies

tcpdump and mitmproxy go wild when starting the program.

Shows that the "Send usage data and diagnostics to Logseq" setting is enabled by default.
Shows the services being contacted by Logseq over HTTPS right after starting it for the first time.  Hosts that are being contact: www.youtube.com, googleads.g.doubleclick.net, jnn-pa-googleapis.com, play.google.com, app.posthog.com, o416451.ingest.sentry.io

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 3 weeks ago (2 children)

@trinsec Plain-files-on-disk is certainly is a big advantage compared to Anytype (and possibly the next version of Logseq), where everything is stored in a database blob.

Anytype "objects" are exportable as Markdown (but with loss of metadata) or as a Protobuf-parseable packet but I didn't find any CLI tool to do that in an automated way. So something I need to consider in my choice.

I'm pleasantly surprised by Obsidian so far, just need to keep an eye on the background activity of plugins.

[–] [email protected] 1 points 3 weeks ago (1 children)

@[email protected] @[email protected] thank you for your very informative thread !

have you heard about https://b3log.org/siyuan/ ?

[–] [email protected] 1 points 3 weeks ago (1 children)

@projetslibres_[email protected] @[email protected] Thanks!

I hadn't heard of it but it looks pretty good. A bit like Anytype with its templates and relations, but with contents just stored as plain files on disk and hopefully with less tracking.

I will give it try tomorrow, thanks :)

[–] [email protected] 1 points 3 weeks ago

@[email protected] @[email protected] I'd just heard about it recently (I'm an Anytype user) and wanted to give it a try also.

[–] [email protected] 1 points 3 weeks ago (1 children)

@[email protected] @[email protected] fyi : https://community.anytype.io/t/concerns-about-the-current-allegedly-severe-limitations-of-the-export-function/25258/4

"We are transitioning to a new storage foundation based on SQL, where all objects will be stored as JSON. This format is highly standard, making interoperability much easier. Our upcoming API will also be based on this structure."

[–] [email protected] 1 points 3 weeks ago

@projetslibres_[email protected] @[email protected] That's good to hear, I hope they'll just go with SQLite.

Also nice that there's an API planned to interact with the notes, because I was thinking of how you'd get a quick note in from, for example, the CLI.