I am a Chinese American liberal, heck I think Xi Jinping should be overthrown, and I just unboxed by first Huawei phone - P40 Pro today, and copied all my apps from my old Galaxy S10 phone onto it. IMO this is not about politics, this is about supporting the legitimate rights of private Chinese citizens to contribute to the technological advancement of mankind. After doing some research I decided to replace Chrome with Firefox, Gmail with Protonmail as my mail email (using mail forwarding), and Google Search with DuckDuckGo as my default browser search.
China does not offer a good international browser (I don't support subsidizing bad products; besides the inconvenience it won't work), email client or search engine, but there are still reasons to switch:
Firefox because it's an open source browser that does not go to a for-profit US corporation and isn't part of the Google ecosystem.
Protonmail because it's Swiss and not American, so not likely to be subject to entity list orders, plus it's more secure.
DuckDuckGo because it's not part of Google and doesn't keep track of your data.
Edit: For those with problems with Protonmail, got any good alternative?
Coolgadget
Protonmail is most likely CIA... But doesn't matter I'm still using it only because I have many custom domains and protonmail supports multi-domains and it works well for my purposes. It also has a Bridge application that I can download all my Protonmail emails to offline Outlook pst. My biggest gripe with Tutanota is that their search (inbox) is broken, you cannot bulk backup or export emails, there is no "bridge" eq. so therefore you are locked into them... and cannot easily take your stuff out or migrate. I also used Lavabit back in the day before the FBI raided that guys Dallas apartment (he was hosting it in his home) because he said no to putting a backdoor and well that was that... Startmail is okay except they don't have a phone app which in this day and age is not acceptable, fastmail doesn't have any end to end encryption and is based in AUS a bona fide 5EYES etc... Countermail is cool concept except they claim their server is ran entirely in memory on livecd and doesn't even write to harddrive but they charge a boatload for very limited storage and not really worth it, if you that paranoid then use BitMessage wrapped inside a PGP wrapped inside a One Time Pad, lol, and send the BitMessage via TOR over VPN.
So if Protonmail is CIA why am I still using it? Because so is Gmail, and at least with Protonmail I have more control than with Gmail.... but I'm not naive in that Protonmail "its a Swiss and not American, so not likely to be subject to " yeah.... hahahaha nope... They are CIA honeypot
About DuckDuckGo, I use it too but just know they are tied to NordVPN and other VPN providers whom have been known and exposed to selling your data for data mining... ("NO Log" VPN is a lie, they all log) I'm pretty sure DuckDuckGo is selling data... but I like it better than plain old vanilla Google Search (for various reasons) and I do believe they don't track /report your IP address to the government (which Google obviously does) but at the same time they anonymize your search data and do sell that in aggregate to other third party... still I'd rather just DuckDuckGo vs Google Search or Bing/yahoo any day.
Firefox has slide down the slippery slope... I prefer to use their ESR versions to the normal versions, but also check out NoMoreGoogle.com they recommend the UnGoogledChromium browser which is Chromium striped of all Google...
With either browser I add the NoScript extension and also Ad Block Plus and UBlock Origin extensions and have a local ad block host file in my hostfiles.
I do all my web surfing inside a virtual machine, and Virtualbox is free but I prefer Vmware workstation and its easy to revert to snapshot and then not having to worry about if they machine got infected by the last browsing session etc... I also use Multihash and Multipar to ensure the integrity of my VM files that it wasn't somehow got tampered with...
I have a baseline image set up and whenever I'm in doubt just reimage the entire harddrive with Clonezilla in DD mode (bit by bit), the only thing is to worry about firmware exploits, and many other things outside of strict software integrity... for example all Intel CPU have NSA backdoor but I think you knew that already Mr Semiconductor guy
Last edited: