Live data from Hacker News

ProtonMail includes Google Recaptcha for login

github.com

281–290 of 308 posts

Re: ProtonMail includes Google Recaptcha for login

#282
post #107

Earlier quoted context omitted.

Check out TricepMail.com. I'm curious to see what HN thinks of it.

Services like email don't have a high barrier to entry and most customers don't have complex technical requirements, so much of choosing a provider is based on trust and instinct - rightly or wrongly. I remember a while ago someone promoting a new email service that "focused on privacy", etc. A few knowledgeable HN users quickly pointed out they were running Mail-in-a-Box on a single Digital Ocean droplet. Your open…

It is a brand new service still in the early stages of development. Building trust will take time, especially since it's new, but I think competition in the email space is a good thing.

Thanks for your feedback!

Oh, also, the open source repos are coming soon. Only so much time in a day. :)

Re: ProtonMail includes Google Recaptcha for login

#283
post #164

Earlier quoted context omitted.

Thanks for your feedback. I will touch on all your points. TricepMail is designed specifically for privacy, and not only privacy for your data on TricepMail’s servers but for preventing others from tracking and selling your information as well. The privacy policy specifically states that there is no collection of your personal information. TricepMail is based out of Colorado, US, but considering moving to another cou…

When Zuck says Facebook wasn't sharing our data with NSA/Prism, he has his company's and his own reputation on the line if he was lying... we don't know who you are and what this service is, so, sorry to say, but your 2nd paragraph doesn't mean much. I could promise you I'll send you a legit authentic fancy gold Rolex worth $20,000 if you transfer me $15,000, so you can re-sell it and make $5,000 in an instant. Would…

FWIW, Zuck/Facebook and every other shady company who uses dark patterns and takes advantage of their users disgusts me. It's one of the primary reasons I started TricepMail.

Re: ProtonMail includes Google Recaptcha for login

#284

Earlier quoted context omitted.

Perhaps a list of apps would be helpful, otherwise it seems kind of a vague deflection.

That's not something ProtonMail can provide you with. It's like asking them to list you all apps that use the Facebook SDK or something like that. What was described above is correct though. One popular app (which had legal troubles recently) made money with Luminati: https://torrentfreak.com/mobdro-luminati-proxy-service-suspe...

Something is clearly happening server-side, not client-side. The original post cites two weeks since this began, and I confirm. Surely we have not all contracted this problem in this time?

Re: ProtonMail includes Google Recaptcha for login

#285
post #199

Earlier quoted context omitted.

You can try https://www.hcaptcha.com as an alternative.

You can't use that sort of username on HN—see https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme... . I've banned the account for now, but if you want to use it with a different name, you're welcome to email hn@ycombinator.com and we'll get you fixed up. (btw, the GP mentions hcaptcha)

Why is HN against asian passerine birds? https://en.wikipedia.org/wiki/Japanese_tit

Re: ProtonMail includes Google Recaptcha for login

#286

A few comments about this. A very small fraction of logins get the CAPTCHA challenge. We, and other services, face unrelenting brute force attacks on our login endpoints. If you are seeing a CAPTCHA on login, chances are that something about your connection is suspicious to our system. It's far from perfect, and we continue to improve it, but at most a percent or two of users are seeing CAPTCHA at any time. The CAPTC…

I think a part of the problem is many people don't know what CAPTCHA really does and that even smaller numbers of people know exactly how much traffic is abusive in nature.

Good luck with the fight.

Re: ProtonMail includes Google Recaptcha for login

#288

A few comments about this. A very small fraction of logins get the CAPTCHA challenge. We, and other services, face unrelenting brute force attacks on our login endpoints. If you are seeing a CAPTCHA on login, chances are that something about your connection is suspicious to our system. It's far from perfect, and we continue to improve it, but at most a percent or two of users are seeing CAPTCHA at any time. The CAPTC…

There are countless alternatives. Why did you choose Google?

> TL;DR It's a small fraction of users who are affected

Yes, though any of your users can be affected, randomly, without warning.

Re: ProtonMail includes Google Recaptcha for login

#289

Earlier quoted context omitted.

> This sort of comment is frustrating. How many times has XYZ site had broken search? I can't even think of any? But also search isn't a core feature for the vast majority of sites. Something can be easy and still break if nobody cares very much. Edit: Actually I can think of search breaking on one site that was notoriously badly run and had 0 to 1 part-time devs. That's not a flattering comparison. Edit 2: So could…

Not a website, but...Windows 10?? Highest market share OS, billions of $ worth of engineering time behind it and due to recent changes, search is pretty much a core feature of the OS. And I'm not even talking about file search here, which is indeed a hard-ish problem (although `locate ... | grep ...` seems to do well enough on Linux) - this is just a simple word search through a list of programs that's usually under…

Windows 10's broken search is on Microsoft.

When you can download a freeware tool that will find any file in the system instantly after maybe a minute of indexing you know the file search is not the problem here.

Just a month ago the only reason I could start a recently installed MS Office package on Windows 10 was its tendency to list newly installed programs first in the start menu. It did not show up anywhere else, could not be found by the search and Word could not even be set as default program for a file because the OS didn't seem to know of its existence.

Re: ProtonMail includes Google Recaptcha for login

#290

Earlier quoted context omitted.

The points made in this post mirror my own, and this incident has caused my trust of sound privacy focus design and implementation on the part of Proton to diminish somewhat. Any small leakage of data/activity/identity is unacceptable to those of us who know how this information can be taken advantage of, and choice Proton specifically to avoid that happening.

As a community driven, open source company, resource allocation is determined through community feedback. As mentioned in another post, reCaptcha has been used for anti-abuse in Proton since 2014. The community cares about this, but it's never been the highest voted item [1]. However, it's something our team cares about. That's why 6 months ago, we started preparing to migrate to hcaptcha, even though removing reCapt…

If it’s security or privacy related that should be driven by your own threat-modelling and risk assessment. Not left to the fate of what the community decide. You’re the experts after all and that’s what people using your service pay for and expect.
Post reply on HN