PCCONTACTS - What do you think about this app? It safe?
from Onyx376@lemmy.ml to privacy@lemmy.ml on 05 Sep 06:40
https://lemmy.ml/post/52319481

Proton Mail contacts → Android system address book.

A GPL-3.0 Android app that signs in to a Proton Mail account, decrypts the user’s contacts client-side, and exposes them to ContactsContract so they appear in the system Contacts app (and any other app that reads contacts) the same way WhatsApp or Telegram surface their own contact directories.

🔗 Github link

#privacy

threaded - newest

lsjw96kxs@sh.itjust.works on 05 Sep 07:09 next collapse

Why not just add mail address to your regular contacts ? Simpler, safer.

BladeFederation@piefed.social on 06 Sep 00:45 collapse

Proton Mail can access your local contacts app, but not sync backwards with it on Android. This means that you do not have cloud sync for contacts if you are not signed into Google, or if you are kn a degoogled ROM. This app would be a way to get around this. Add a new contact to either Proton Mail or your local Contacts app, and it gets backed up to Proton & synced with both apps.

SorryImLate@piefed.social on 05 Sep 09:22 next collapse

I have no idea about this app.

That said, I use Tuta in part because they allow contact sharing on Android. It may be worth checking whether this app is using a similar approach to Tuta, as I trust that their method is secure.

dieTasse@feddit.org on 05 Sep 10:36 next collapse

It looks like it might be vibe coded, atleast thr detailed claude.md file suggests that. It even includes “no Co-Authored-By” clause, which would suggest the author tries to hide how much is actually generated. Personally I wouldnt trust it unless it is audited by someone or by myself - which I wouldn’t do with a ton of generated code…

Also a side question: are you still using Proton? I thought you said, and I quote, “never again” when there was the last hysteria…

Onyx376@lemmy.ml on 05 Sep 15:59 collapse

A friend is still using Proton because I recommended it a few years ago, and he doesn’t want to migrate because he said it’s too much work. I’m trying to get him to at least get out of Google contacts in the most convenient way, and Proton is unfortunately the viable alternative for him. And if you think that ideologically aligning yourself with politicians with anti-privacy principles and deactivating and reactivating accounts based on a CEO’s personal conviction is hysteria, you should go to Reddit. It’s more appropriate! And by the way, thanks for the comment, it helped me.

dieTasse@feddit.org on 06 Sep 13:07 collapse

I just think that if we blow out of proportion every mistake everyone makes we may as well start living in isolation in the woods. I think Proton did a lots of good and still does and they deserve benefit of the doubt. All the dramas are imo just a mistakes or misunderstandings echo-chambered by internet to death (and intentionally fed by competition as well). When you take a moment and look at the pure facts reasonably you will probably come to the same conclusion.

listless@lemmy.cringecollective.io on 06 Sep 14:34 next collapse

I wouldn’t do this. You’re leaking important information that was specifically protected by proton to any app that asks for it and to google.

floquant@lemmy.dbzer0.com on 06 Sep 17:49 collapse

Leaving the encryption part aside, are you sure that uploading your Proton contacts directly to Google is something you want?