I checked now, and apparently there is none - but LibrePay claims to accept “direct debit from an euro bank account”, so small donations over Librepay should not feed any banks. :)

Regarding e-mail: “riseup.net” requires that a long-time user vouch for a new user and invite them. If the new user quickly turns into a complaint magnet (there’s a coming-of-age period after which their actions are considered their own), both the user and the inviter will be held responsible (kicked off the service). I think (hope) they aren’t so strict with VPN, but they have limited people and could not administer a mess made by a big bunch of people.

Needless to say, none of my (anarchist) comrades have ever been kicked off RiseUp, but they don’t send spam or threats, they just send their cat pictures encrypted with GPG, causing the authorities endless work. :)

Just like every reasonable service, RiseUp has a few technical mechanisms to ensure they aren’t compromised (disk and inbox encryption, etc) but obviously those can’t help against a dedicated and well-resourced adversary.

So, whatever e-mail server you use - use PGP / GPG. :) Then the adversary must compromise your device. If you are hardcore, encrypt and sign on an offline device. Then the adversary must breach the air gap.

(I used to sign releases for some anonymity-related project years ago. Those were the times when I seriously took measures because others depended on me. Currently, not so much.)

P.S. As for the lack of resources at RiseUp: this can be alleviated by donating to them. Which reminds me, I should set up a small regular donation to their representative organization in the EU.

Under the divine guidance of Elon Musk, I strongly doubt if emperor Trump will break any big tech. More likely he’ll pat them on the back (while requiring more surveillance data to be submitted).

As a happy user of Signal (no bugs or incidents from my viewpoint), I regardless chime in to say a word for decentralization. :)

Signal is centralized:

• there is a single Signal implementation, with a single developing entity
• you have to install its mobile version before you may run the desktop version

There exist protocols like Tox which go a step beyond Signal and offer more freedom -> have multiple clients from diverse makers (some of them unstable), don’t have centralized registration, and don’t rely on servers to distribute messages - only to distribute contact information.

In the grand comparison table of protocols (not clients), Tox is among the few lines that’s all green (Signal has one red square).

If they overcome / disable ad blocking, they will lose browser market share - and people don’t design websites for marginal browsers with exotic features.