search

standardnotes / forum

Support from other community members. For 1-on-1 help, please contact help@standardnotes.com.
https://forum.standardnotes.org
196 stars 9 forks source link

Use of extensions requires connections to US military contractor (GitHub) to download executable code. #1018

Closed sneak closed 1 year ago

sneak commented 4 years ago

I have GitHub firewalled at my router. None of my themes work now.

I subscribe to Standard Notes for privacy and security. I find it unacceptable that it is using a military contractor and active partner in the US surveillance state to a) leak my IP/location, and b) download executable code.

This gives Microsoft (GitHub's owner) and the US military by extension the ability to subvert Standard Notes' encryption and compromise my data. I never signed up for that.

moughxyz commented 4 years ago

As of today, we do have a dependence on GitHub for many of our operations. While our plan is generally to reduce dependencies over time, I can't yet say when we will be 100% GitHub free for our CDN. I'd say it's on the mid-term horizon.

sneak commented 4 years ago

https://github.com/standardnotes/forum/issues/1017

cyb3rz3us commented 4 years ago

I think the more salient question here is this --- Is there any credibility to the suggestion that using GitHub for one's open source projects in any way exposes that software and\or its users to surveillance or other malicious activity by the US military?

My gut tell me No but I would like to hear from others...

sneak commented 4 years ago

There is also the more mundane point that when extensions are enabled and GitHub (and the sync service) are inaccessible due to being offline that the client will lose data. I ran into this issue, despite the sync service being accessible through my firewall.

cyb3rz3us commented 4 years ago

"...GitHub (and the sync service) are inaccessible due to being offline that the client will lose data..."

Perhaps...but a totally separate point from the one being discussed here...

JaspalSuri commented 4 years ago

There is also the more mundane point that when extensions are enabled and GitHub (and the sync service) are inaccessible due to being offline that the client will lose data. I ran into this issue, despite the sync service being accessible through my firewall.

Hi @sneak, please look at Mo's reply here: https://github.com/standardnotes/desktop/issues/567#issuecomment-646113605