Apiote
lock this document is signed

Privacy manifesto

Why?

As of the 7th of February 2016 in Poland the surveillance law became effective. Keeping in mind privacy of mine, my family’s, my friends’, and acquaintances’, and answering in advance the question (I’ve heard for real) “How to contact you when you’re not on Facebook?”, I herby publish a list of means anybody concerned about their privacy may contact me with the use of.

And no, I’m not on Facebook.

Email

Email is the main communication means used by me. Maybe it’s because nobody around seems to care to use anything else.

…@protonmail.ch 94F3 D05E A1CB 7EB9 6BAC 4FBF 2442 E277 76E0 A578

It’s my private email address provided by guys from Switzerland. The contact form on this website sends a PGP encrypted mail to that address. You can use it if You don’t know how to contact me.

…@student.put.poznan.pl F6DE 8FF8 003C 5CDE 7E58 324B A315 493A 5453 2E5B

I don’t trust this service at all so if You want any privacy use explicit encryption. Use only if emails concern university life.

IM

Mind that:

A note why XYZ is not there

Signal

Firstly, to contact me You need my phone number, which I’m unwilling to give away. Secondly, Signal creators keep the whole graph who’s-with-who. It’s also inconvenient—it can be used only on a mobile phone, i.e. desktop app requires Electron, which is huge (as it’s the whole of Chromium), and has licensing issues. Moreover Signal developers are against federation.

If You’re still not sure about this: further reading.

Wire

Wire requires proprietary Google Cloud Messaging which completely undemines encryption (and, of course, is unethical). It used to be gratis for personal use (although it did use freemium businness plan); now it’s unclear. Despite the fact that all code is free, federation is not supported nor planned.

XYZ (inclusion policy)

If You find a nice chat/messaging app and want to reccomend to/chat with me, it must satisfy the following conditions:

That is the miminum. It would be nice if it supported federation and had a CLI client.

“Hey! Wait…

…you don’t provide us with any ID.” No, I don’t. Above all, I don’t want bots to harvest my email and send me spam. Secondly, it’s not that You don’t trust me, but how could You trust me. You can meet me in person and ask for it, You can send me a message using the contact form (it’s encrypted with my PGP key). People I know personally know my IDs, my email address is attached to my PGP key—You don’t have to be a cracker to find it. So, invite me to Your key signing party, or something…