germans...
ProtonMail includes Google Recaptcha for login
41–50 of 308 posts
Re: ProtonMail includes Google Recaptcha for login
#42> I find this very absurd to see. This is absurd indeed. hCaptcha[0] is a better alternative though, and I wouldn't mind if they used that instead of reCaptcha. I never liked the carpal tunnel that reCaptcha introduces. [0] https://www.hcaptcha.com/
If you're script blocking, hcaptcha also only requires one reload of the page as opposed to two for Google (enabling Google then enabling Gstatic)
Re: ProtonMail includes Google Recaptcha for login
#43Their response on twitter [1]:
"The recaptcha, when it shows up (in rare situations), is sandboxed so that it doesn't send any data to Google. We are also in the process of replacing it with hcaptcha."
Not sure what possible sandboxing they could be referring to - if they load the captcha in an iframe from a different origin then it is true that Google's javascript can't access things on the Protonmail origin, but the concern seems to be that your data is sent to Google (which is still happening even with sandboxing, their tweet cannot be correct), not that Google's recaptcha javascript would have done something malicious on the Protonmail origin (which seems unlikely).
In any case, at least they're moving to hcaptcha.
[1]: https://twitter.com/ProtonMail/status/1398657423913668614
Re: ProtonMail includes Google Recaptcha for login
#44> I find this very absurd to see. This is absurd indeed. hCaptcha[0] is a better alternative though, and I wouldn't mind if they used that instead of reCaptcha. I never liked the carpal tunnel that reCaptcha introduces. [0] https://www.hcaptcha.com/
Even as recent as 5 years ago I liked the idea of a captchas. I still understand the purpose behind them but recently I've started getting really annoyed by them(whether that be reCaptcha or hcaptcha or anything else). They are just everywhere and it gets incredibly tedious to have to solve one every odd click or so. And it gets even worse if you use a vpn or tunnel or god forbid tor: there's no way to solve them there AT ALL. Which is the sad part: despite the tons of innovation in ML, captchas seem to rely on recursion of hardcoded rules which pile up indefinitely the moment you step outside your "start your computer and open up a browser" behavior. Kind of sad considering the abundance of information browsers pass on with each request.
Re: ProtonMail includes Google Recaptcha for login
#45Earlier quoted context omitted.
I'm not saying you're wrong, but that particular source is well known for making big claims with insufficient evidence, and it reads like it was written by a conspiracy theorist. Many of the author's claims have already been (imo, pretty solidly) refuted by Proton. Disclaimer: using protonmail until my current subscription runs out, then selfhosting
Self hosting these days is almost impossible because most email providers like gmail and yahoo mail will automatically move your emails to spam. It’s all based on IP address and how reliable that IP address is. Self hosting guarantees that all your sent email will end up in spam folders.
Not necessarily. Had been self hosting for decades and I move the server every two years to a new IP mostly because of server/os refresh.
Right now only hotmail bounces mail. Am using DO/Singapore. Other centers fare better.
Re: ProtonMail includes Google Recaptcha for login
#46I just tried logging into Protonmail in my regular browser and with a private mode window and didn't get a captcha in either case. Not saying it may not appear for others but I didn't see it.
Google's recaptcha does have an invisible mode, where it doesn't show you a captcha unless it thinks you are a bot. Which it determines by tracking your online activity...
Re: ProtonMail includes Google Recaptcha for login
#47When I started my company we chose to use Protonmail. My advice to anyone who wants secure email: don't use protonmail.
The email search is completely useless. I don't understand how it can possibly be so difficult to do a substring search on a corpus and rank them in some kind of sane way. Searching for old emails based on content is an exercise in futility. After a few years of using an email service, search becomes really important.
It is exceedingly difficult to pull data out. You need dev ops skills to do it.
They charge for users that are disabled, and you can only stop paying for them if all of the associated data is deleted.
So they effectively hold your data hostage (yes, you can get it out but it time-consuming and requires technical skills).
I finally bit the bullet and paid a dev ops person (and gave him access to all my data) and switched to fastmail (at least it's not google) a few months ago. It's been an incredible relief.
Re: ProtonMail includes Google Recaptcha for login
#48When I started my company we chose to use Protonmail. My advice to anyone who wants secure email: don't use protonmail. The email search is completely useless. I don't understand how it can possibly be so difficult to do a substring search on a corpus and rank them in some kind of sane way. Searching for old emails based on content is an exercise in futility. After a few years of using an email service, search become…
A few clarifications. There is an export tool that is available. The reason we must count disabled addresses towards your quota is because if we did not do that, we would be susceptible to an attack where a paid user could run through our address space by creating and disabling addresses continuously, so some limits are required. You can remove disabled addresses, but only by contacting support.
Re: ProtonMail includes Google Recaptcha for login
#49> I find this very absurd to see. This is absurd indeed. hCaptcha[0] is a better alternative though, and I wouldn't mind if they used that instead of reCaptcha. I never liked the carpal tunnel that reCaptcha introduces. [0] https://www.hcaptcha.com/
Even as recent as 5 years ago I liked the idea of a captchas. I still understand the purpose behind them but recently I've started getting really annoyed by them(whether that be reCaptcha or hcaptcha or anything else). They are just everywhere and it gets incredibly tedious to have to solve one every odd click or so. And it gets even worse if you use a vpn or tunnel or god forbid tor: there's no way to solve them the…
In some cases, it seems the companies deploy them to coerce and punish: 'logged out, did you? you deserve this captcha for trying to thwart our tracking, peasant! work this useless problem for us for free!' Looking at you, Meetup.
Re: ProtonMail includes Google Recaptcha for login
#50I can recommend Migadu. Worth it if you already pay for a domain (which you should, imo, to have a portable e-mail address). I pay for the $19 annual plan and find it sufficient, and I love the flexibility of the admin panel.
Yes, I second your recommendation of Migadu. I've helped set up dozens of email accounts for clients there, and we've been happy with their service.