Well, this is unfortunate.
-
@Gina@fosstodon.org will people ever learn proton is a massive fed honeypot or will this continue
Tell us more about these "feds" that break the encryption the linked article says is perfectly fine.
-
Well, this is unfortunate.
"Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the [US] government when asked. Proton hid them from their privacy policy."
#proton #protonmail #digitalsovereigty #opensource
https://www.sambent.com/proton-meet-isnt-what-they-told-you/
-
Well, this is unfortunate.
"Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the [US] government when asked. Proton hid them from their privacy policy."
#proton #protonmail #digitalsovereigty #opensource
https://www.sambent.com/proton-meet-isnt-what-they-told-you/
-
@Gina Irrelevant question, but is there an actual private video-call platform and if yes which is it?
-
I need to get off their email. I assume the feds get everything anywhere, but I read Proton's now using my inbox to train AI. No thanks. Do you have any recommendations?
-
@regendans @JakeKb @Gina
Signal works for those who have a cell phone only I believe.I use @hostpoint and KMeet from Infomaniak for individual video calls (ex. My Mom).
@bentley_lucas @regendans @JakeKb @Gina @hostpoint Now I believe you can have accounts that are not tied to a phone number.
-
@Gina is this blog format some sort of template? or ai slop? i feel like i've seen the same UI before, paired with incredibly slop writing a few times before. It *feels* like an llm wrote this
@danvolchek @Gina I can say with high certainty that those visual 'widgets' on the blog post are AI, they're indeed that 'style of ui' that AI likes to make.
The actual blogpost itself, I dunno, text llm detectors suck and it's often hard to tell -
@bentley_lucas @regendans @JakeKb @Gina @hostpoint Now I believe you can have accounts that are not tied to a phone number.
@Kyebr @bentley_lucas @regendans @JakeKb @Gina @hostpoint (someone please correct me, I would love to be wrong but)
You still need that phone number to set up or (IIRC) log back into an account from scratch on a new device. What changed is that you no longer have to *reveal* that phone number so people can contact you (usernames), and you can disable "people can contact me by phone number". -
Proton don't have access to your inbox. Don't trust everything you read on the Internet.
-
@Uair All your email on Proton's servers are stored client side encrypted. They don't have the information needed to decrypt it.
Also, being owned by a Swiss non-profit means they can't lie about what they do or don't do since they would be shut down immediately by European - thus functioning - legal system.
-
@Uair All your email on Proton's servers are stored client side encrypted. They don't have the information needed to decrypt it.
Also, being owned by a Swiss non-profit means they can't lie about what they do or don't do since they would be shut down immediately by European - thus functioning - legal system.
-
Well, this is unfortunate.
"Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the [US] government when asked. Proton hid them from their privacy policy."
#proton #protonmail #digitalsovereigty #opensource
https://www.sambent.com/proton-meet-isnt-what-they-told-you/
-
@Brentguernsey a great option, has been around for a while.
I have nothing against Proton, I'll still use it for my email, but I'll hold off on using their videocalling service until they've addressed this blogpost.
-
Tell us more about these "feds" that break the encryption the linked article says is perfectly fine.
@troed@swecyb.com @Gina@fosstodon.org
You don't need to break any encryption when E-mails arrive at your mailserver in perfect plain text lol
You are one swiss court order away from getting all of that stuff intercepted as it arrives. -
@troed@swecyb.com @Gina@fosstodon.org
You don't need to break any encryption when E-mails arrive at your mailserver in perfect plain text lol
You are one swiss court order away from getting all of that stuff intercepted as it arrives.I assume you think that "lol" somehow makes your post true?
Tell me more about how the Swiss privacy laws enable this "fed" honeypot. You know, for them to actually intercept they'll need a whole lot more than "someone wants to".
Or maybe you're simply posting FUD on a subject you have absolutely no knowledge of?
-
I assume you think that "lol" somehow makes your post true?
Tell me more about how the Swiss privacy laws enable this "fed" honeypot. You know, for them to actually intercept they'll need a whole lot more than "someone wants to".
Or maybe you're simply posting FUD on a subject you have absolutely no knowledge of?
@troed@swecyb.com @Gina@fosstodon.org
There is more than enough documentation on Proton sharing extensive metadata with authorities leading to arrests, multiple times. Do one search. At that point it doesn't matter whether you share message content, metadata is just as important. -
@troed@swecyb.com @Gina@fosstodon.org
There is more than enough documentation on Proton sharing extensive metadata with authorities leading to arrests, multiple times. Do one search. At that point it doesn't matter whether you share message content, metadata is just as important.I don't need to "do a search" since I know the subject. That's why I'm calling out your FUD.
-
I don't need to "do a search" since I know the subject. That's why I'm calling out your FUD.
@troed@swecyb.com @Gina@fosstodon.org Okay bro. I'm sure you believe that.
-
@troed@swecyb.com @Gina@fosstodon.org Okay bro. I'm sure you believe that.
Absolutely everyone who has any knowledge about the Swiss legal system and Proton's ownership knows they by definition cannot be a "massive fed honeypot" - which were your words.
"bro"
-
I don't need to "do a search" since I know the subject. That's why I'm calling out your FUD.
@troed@swecyb.com @privateger@plasmatrap.com @Gina@fosstodon.org
https://web.archive.org/web/20210123101755/https://eprint.iacr.org/2018/1121.pdf
https://web.archive.org/web/20210907033657mp_/https://protonmail.com/blog/transparency-report/Upon receiving a judicial order, ProtonMail is obliged to provide any user information readily available that would help identify a user that is subject to a criminal investigation that has been validated by Swiss authorities. In addition to the items listed in our privacy policy, in extreme criminal cases, ProtonMail may also be obligated to monitor the IP addresses which are being used to access the ProtonMail accounts which are engaged in criminal activities.
http://web.archive.org/web/20210907022818/https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/?guccounter=1So, in the specific case, it looks likely that ProtonMail was either under legal order to delay notification to the account holder — given what appears to be up to eight months between the logging being instigated and disclosure of it — or it had been provided with information by the Swiss authorities which led it to conclude that delaying notice was essential to avoid a risk of “injury, death, or irreparable damage” to a person or persons (NB: it is unclear what “irreparable damage” means in this context, and whether it could be interpreted figuratively — as ‘damage’ to a person’s/group’s interests, for example, such as to a criminal investigation, not solely bodily harm — which would make the policy considerably more expansive).
It’s that IP monitoring component which has caused such alarm among privacy advocates now — and no small criticism of Proton’s marketing claims as a ‘user privacy centric’ company.
It has faced particular criticism for marketing claims of providing “anonymous email” and for the wording of the caveat in its transparency disclosure — where it talks about IP logging only occurring in “extreme criminal cases”.
