[Security Discussion] RogyHyde:
Very interesting and useful discussion, :laugh:.

I'm spanish (thus my typos - sorry about that) and a little technology savvy (I'm studying something related to that).

Choosing a server provider is so much difficult for me. How can we trust the server? I mean, how we can check they are using the source code they say they are using? :eek:

I usually think SaaS was impulsed to evade the growing FOSS philosophy.

These are my config ATM:

Services:

Mail: GMail (YES, I HAVE TO CHANGE THAT, but I depend so much of it nowadays).

I have an account in OpenMailBox.org (France) as a temporary solution with disgregation purposes.

Contacts & calendar: OpenMailBox inbuilt OwnCloud (CardDAV and CalDAV). I know, data is not encrypted. Hence my recently adquired RPi B+, in which I will install my own OwnCloud (got it? :D).

Cloud: MEGA.co.nz. I'm actually trying to understand completely this service and searching for an Open Source client (come on, noone out there? :(). If my data is encrypted and unencrypted locally by the client, my data should be safe... Privacy by design is a really good option or just a mere advertising?

For lightweight files I will use OwnCloud on my RPi when ready.

Search Engine: DuckDuckGo.

Desktop (familiar):

Operating System: Windows. I REALLY HATE THAT, but it's familiar...

Browser: Firefox + Ghostery + FF Sync. No 3th party cookies and always in Private Mode. I trust Mozilla Sync, but I'd like to have it in my future OwnCloud RPi instance.

I have an instance of Chromium for web developing purposes.

Antivirus: ClamWin Free Antivirus. It's more like a scanner. Open source.

Other programs: I usually choose FOSS before proprietary software when posible. I should give up Photoshop in benefit to GIMP. Working on that.

Android:

Device: mako, Nexus 4. I'd want an open hardware, but... you know.

System: TWRP + OMNI + AdAway (non-rooted after that).

Short time ago (6 months?) I was loyal to CM, but after the group became comercial oriented and I realize they have some proprietary software, I give up on they. I respect they, but not trust them anymore. Their Privacy Guard is something I'd like to have in OMNI instead of the App permission manager, but it's sufficient.

Market: F-Droid, of course. Blank Market from NOGAPPS, but a non-system fork (GitHub/cernekee/BlankStore).

Browser: Firefox + Ghostery + FF Sync. No 3th party cookies and always in Private Mode. Same as desktop, but I'd want a Private Mode BY DEFAULT, not choosing the tab or clearing data after outside link opening.

News Reader: OwnCloud News Reader from F-Droid.

Card/CAlDAV sync: DAVDroid from F-Droid.

Notes: MyOwnNotes from F-Droid.

Media: VLC from F-Droid.

Gaming: RetroArch from F-Droid and Pixel Dungeon (Great game recently open sourced, F-Droid built coming soon).

IM: WhatsApp, :(... and Telegram from F-Droid. Waiting for their server side code release. Same from server side trusting. XMPP is not useful for me, people not give a sh*t about privacy here and only use WhatsApp.

Social: From FirefoxOS Marketplace (autogenerated apk... It's great): DIASPORA*... if I had friends there.

From F-Droid: Twidere for Twitter, Tinfoil for Facebook and common sense.