I think the thing with open source (re: your free labour point) is that it’s entirely voluntary free labour - I know that wasn’t the thrust of your point but there are pros and cons to it. The lead dev could one day say ‘fuck it’ and walk away, but for a project of any size/popularity there’s a lot of people ready and willing to fork it or ask for ownership to be transferred. It’s not very often a very popular bit of code is totally abandoned.

Open source, to me, offers a sort of peer review system. Most people developing open source stuff already care about code quality and privacy, contributors also do and the myriad of people using it have a core set of people who also do. That’s a lot of eyes. There’s also tools to diff code so its pretty easy to spot changes. And I do do that.

But I take your wider point - it all eventually comes down to trust. But that’s true of legal requirements too. And also organisation behaviour. Brave for example have been caught at least 3 times doing very dodgy stuff and yet as far as I can tell they continue to grow. I don’t necessarily accept that one instance of law breaking or otherwise poor behaviour is instant death for a company. If it was, G and Meta would be long gone.

All I can do is reiterate that all of us have different things that we choose to place some trust in and we all have different ways of assessing what leads us to trust. But at the end of the day, there are no cast iron guarantees.

I self host just about every service I can, including search.

You’re asking for a guarantee, which I’ve repeatedly admitted I can’t offer because absolutely no one can provide that. No provider, no service, no software. All we can do is decide what we each consider to be actions/behaviours indicative of trust and use their offering in a way that maximises privacy for us as individuals. I put more trust in software/services that has code that anyone can read, that has been independently audited, that is trusted by the community and possibly tested in a legal environment. You might put more trust in things like privacy policies and other legally binding documents. Neither of us can guarantee anything however. I’ve lost count of the number of companies who’ve violated privacy laws and users only find out years or even decades after the fact.

But I’ll say it again - whats right for me might not be right for you and that’s fine.

That’s absolutely your call mate. I’m not here to tell you you’re wrong. I just know what it is that I personally consider to be active steps towards establishing trust and that I base my opinion on them. If yours and mine don’t align, so be it - to each their own.

Again, I’m not considering them to be intentionally malicious or deceptive, I’m saying without the basics in place, we’re being asked to just trust them.

I’m aware of the limitations you describe and you’re right that there’s no way to 100% guarantee anything, there has to be some element of trust. So the services/software I choose to use have done all the things I mention, or I run them locally. Does that mean they’re 100% perfect? No, of course not but the fact they’ve gone to great lengths to establish at least a basis for trust means a lot to me. Some of them have gone on to be tested in some sort of legal encounter where again, they performed well.

Trust is a personal thing, we all have different perceptions of what makes an org trustable - if Kagi match yours, good for you.

I don’t suspect or accuse them of anything. Quite the reverse - what I’m saying is that without things like open source code, privacy audits etc, we’re being asked to take their word for it all. They might well be the most privacy respecting company ever and they equally might not be. If you’re happy to take their word for it, that’s entirely your call. I’m not trying to change anyone’s mind, I’m just answering OP’s question with my own opinion.

That’s a security audit, looking at its vulnerability to attack.

Deciding to trust a provider - any provider - isn’t just any one thing. So, the most basic step to me is all the relevant code being open source. The next step is getting their infrastructure audited. The step after that is seeing what happens if they get court ordered to provide data.

They do none of that and I’m just too cynical to accept ‘trust me bro’ as a convincing sales tactic.

Because claiming they don’t is not the same as being able to verify they don’t by making their code open source.

It’s ridiculously expensive. It’s not private if you have to link your searches to a paid account and none of those payment providers are private. They don’t seem to have open sourced any of their key functionality, meaning you have to trust them to not be collecting your activity data.

I spent a long time getting rid of software and using services that I either no longer trusted or was unable to make an informed choice due to their lack of open source code and I’m not going to take a retrograde step now. And that’s without the issue with their choice (a continued choice I believe) to use Brave results, a company I’m personally not prepared to support.

I have one as a ‘last resort’ option. It’s got backups of BitWarden, Aegis and Standard Notes and is only connected to my machine during backups.

I think they probably did it at first as its quick and easy to set up. And they did strongly recommend anyone mailing them encrypted the emails. I would also assume it was always the plan to self host them but it was the least important part of the whole system so they left it until last to address.

Yep, could well be. I ain’t knocking Mullvad at all .

You’ve got to understand the ‘average’ British psyche at this point in history. The majority simply don’t care that people they see as troublemakers and/or scroungers are having their rights dismantled. They lack the empathy to give a shit for these people and they lack the foresight to see that it’ll be their rights gone one day too. What stirs the average british gammon off their collective arses these days is the rumour there might be an immigrant in a hotel somewhere or that a drag queen exists.

More like fascist-adjacent. And we started the process of underdeveloping ourselves when the fascist-adjacent leaders persuaded the terminally ignorant that Brexit would be great when it was obvious it was going to lead exactly where it is leading right now.

An argument that might carry weight if you weren’t setting up hotlines for people to snitch on anything or anyone vaguely LGBTQIA+, removing books from libraries, allowing huge orgs to buy political favour, enslaving people in for-profit prison systems etc etc etc.

It’s not even that - the people this is directly affecting (for now) are the people who, if they raise their head above the parapet, it’ll get shot off - the people least able to protest. 95% of the country are not lacking resistance, they’re lacking empathy and foresight. They show plenty of resistance to media driven culture war bullshit like immigration and LGBTQIA+ issues.

Climate change is not something any one country can mitigate. It’s going to take all of us - the world.

It’s a comparison of mainline browsers - they haven’t included any forks in it.

I’ve been using them for nearly 3 years now and never used (or even knew they offered) email support.

Not ideal they use GMail of course but they could be using private keys (as most business users do I believe) which means Google couldn’t see a thing anyway.

ISPs pass on your data to various authorities in quite a lot of countries. My own country (UK) has such a terrible privacy reputation I wouldn’t be at all surprised to find ISP’s hand over data for every request.