beeb

Got in touch with ProtonVPN support and asked about this. Here's their reply:

Our engineers have conducted a thorough analysis of this threat, reconstructed it experimentally, and tested it on Proton VPN.

We concluded that:

1. The attack can only be carried out if the local network itself is compromised
2. Our Windows and Android apps are protected against it
3. For iOS and macOS apps, you are completely protected from this as long as you're using a Kill Switch and a WireGuard-based protocol (our apps use them by default, and if a user wants to use something other than WireGuard derivates, they'd have to manually set it up). Note that Stealth, WireGuard TCP and Smart protocol on iOS/macOS are all WireGuard-based.
4. For our Linux app, we're working on a fix that would provide full protection against it.

an SQLite database

Genius! Why bother importing and exporting

I was pleasantly surprised to find a tauri app in the wild at my work. Our time tracking software uses it, at least for the Linux version.

The reason that 2fa exists is not to protect you if someone gets their hands on your device. It's to protect you if your "static" credentials leaked from a providers' database or you otherwise got phished. Using a password manager to handle mfa is totally reasonable.

Cool, didn't know that!

Proton pass does e-mail aliases if you pay up for the high tier subscription

I tried it now and could start a call without an account. Am I missing something?

I used it for a while but could not find good results for any kind of advanced query. Qwant in comparison is slightly better but still worse than duckduckgo unfortunately. For really niche stuff I still need to revert to Google..

https://friendlycaptcha.com/

Unfortunately the 99% that don't know about less popular options will still be affected

Signed and shared on Mastodon

The Proton offering is a great alternative imo