305
Proton has handed over 32,076 users' data to governments since 2017. Their own transparency report states a 94% compliance rate in 2024. (infosec.pub)
submitted 7 months ago by to c/privacy@programming.dev
120 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 62 points 7 months ago (4 children)

I don’t think that’s bad on Proton’s part. They are obeying the law they are obliged to obey.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [+] 9 points 7 months ago* (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 23 points 7 months ago (1 child)

    Privacy is not anonymity. In this case they were required to supply IP addresses of users logging into a certain account in an active investigation.

    As usual, the devil is in the details—ProtonMail’s original policy simply said that the service does not keep IP logs “by default.” However, as a Swiss company itself, ProtonMail was obliged to comply with a Swiss court’s injunction demanding that it begin logging IP address and browser fingerprint information for a particular ProtonMail account.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 7 months ago (1 child)

    If you think all 30k plus were for legitimate reasons and not government control, I have a bridge to sell you in Brooklyn.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 7 months ago (1 child)

    I didn’t say that. I said they’re obeying the law they are obliged to obey. In other words, they’re not defying the courts. In a perfect world, they could defy the courts and get away with it in the interest of user privacy, but this is not a perfect world.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 7 months ago*

    You are right, they can argue that the government does not have sufficient reason. Many companies push back, but Proton is not one of them. I.e. Proton will not fight for you at all and they will follow court orders from other countries that are often questionable at best because "Interpol".

    I think my original point stands which should make most people seriously reconsider using them as they are not in the business of protecting their customers. In other words it is bad on their part and hand waving that away is pretty gross.

  • permalink
  • fedilink
  • source
  • parent