top 50 comments

sorted by: hot top controversial new old
[–] 199 points 7 months ago (7 children)

Once again - Proton is legally obligated to comply with the laws of the country in which they are based. This isn't specific to Proton, and they are not going behind your back to do this. In case it's not clear, this data is directly from Proton.

  • source
  • hideshow 10 child comments
  • [–] 48 points 7 months ago (1 child)

    Yeah, this is not really an own against Proton... There's other actual issues with the services and leadership that are more serious

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 7 months ago (6 children)

    The one comment by one person on the 5-person board who was supportive of one singular person that Trump had picked? That one?

    I'm not a fanboy here. I just hate misinformation.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 26 points 7 months ago (1 child)

    And thanked Trump for their effort against BigTech.

    You hate misinformation but you sure know how to cherry pick.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (5 replies)
  • [+] 16 points 7 months ago* (last edited 7 months ago) (7 children)
  • [–] 16 points 7 months ago* (1 child)

    I just want a low cost VPN to get around in-state censorship and the occasional bit of piracy. I'm not running a Wikileaks fork or trying to do OpSec for The Revolution.

    If you're spinning up your own version of Silk Road, maybe consider a home lab instead of relying on untrusted third parties.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (4 replies)
  • [–] 12 points 7 months ago* (last edited 7 months ago) (2 children)

    Imagine the Orange government demanding some delicate data for some political or pretty reason - should provider still comply? What if Chinese government does the same? Also I might be mistaken, but doesn't US force providers not to disclose the request to affected party, at least they can?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 13 points 7 months ago*

    Imagine the Orange government demanding some delicate data for some political or pretty reason - should provider still comply?

    Believe it or not - when legally obligated, even providers like Google and Apple can and do comply.

    What if Chinese government does the same?

    See above. If a company is operating in China, that company (or branch) has to comply with the local laws. There are no ifs, ands, or buts about it.

    Also I might be mistaken, but doesn’t US force providers not to disclose the request to affected party, at least they can?

    I wouldn't be surprised in the slightest if that was the case.

  • source
  • parent
  • load more comments (4 replies)
    [–] 62 points 7 months ago (6 children)

    I don’t think that’s bad on Proton’s part. They are obeying the law they are obliged to obey.

  • source
  • hideshow 9 child comments
  • [+] 9 points 7 months ago* (1 child)
  • [–] 23 points 7 months ago (1 child)

    Privacy is not anonymity. In this case they were required to supply IP addresses of users logging into a certain account in an active investigation.

    As usual, the devil is in the details—ProtonMail’s original policy simply said that the service does not keep IP logs “by default.” However, as a Swiss company itself, ProtonMail was obliged to comply with a Swiss court’s injunction demanding that it begin logging IP address and browser fingerprint information for a particular ProtonMail account.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • load more comments (3 replies)
    [–] 56 points 7 months ago (15 children)

    "From time to time, Proton may be legally compelled to disclose certain user information to Swiss authorities, as detailed in our Privacy Policy. This can happen if Swiss law is broken. As stated in our Privacy Policy, all emails, files and invites are encrypted and we have no means to decrypt them. "

  • source
  • hideshow 16 child comments
  • load more comments (14 replies)
    [–] 42 points 7 months ago (1 child)

    Proton threads are where the leftists equivalents to sovereign citizens pop up. Learn the technology a bit and about legal systems. That's what you have to operate within. If you want to feel more in control, encrypt everything yourself and only communicate/share in encrypted channels. At least then the primary sources of leaks is you and the receiver. If not, you're whining about streamlined performant services that will never be perfect enough for your standards because they operate legally rather than the user unfriendly solutions that you aren't willing to operate yourself for your life (maybe to be passed on) and/or won't run/can't afford to operate the illegal operation

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 40 points 7 months ago (13 children)

    I using proton more as a middle finger to google than anything else and at that it works fine.

  • source
  • hideshow 13 child comments
  • load more comments (13 replies)
    [–] 38 points 7 months ago

    Um...obviously, yeah? The alternative to complying with the authorities is to challenge it in court, which is extremely expensive. The important question is not how much information they do hand over, but how much information they have themselves. For example, if your keys are private, proton has nothing useful to share. This is why end-to-end encryption matters, the only avenue to real privacy is to make sure Proton has nothing useful to share. They're not going to host their servers on international waters.

  • source
  • [–] 23 points 7 months ago

    Granted, it’s been awhile since I read this, but don’t their subpoenas driven info essentially say yes, this is so and so’s email account with no discourse content due to encryption?

  • source
  • [+] 14 points 7 months ago* (last edited 5 months ago) (1 child)
  • [–] 14 points 7 months ago (1 child)

    This holds true for any kind of secure communication you want to do.

    Manually handling keys and encryption with GPG is the core of good opsec, and also a reason why 99% of "crime prevention" backdoors are probably not going to do much. But people are lazy, been a while since I saw a drug dealer hand out public GPG keys, ever since Telegram and the like got popular.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • [–] 5 points 7 months ago

    Have they also handed over private keys?

  • source
  • load more comments
    view more: next ›