Live data from Hacker News

Climate activist arrested after ProtonMail provided his IP address

twitter.com

31–40 of 619 posts

Re: Climate activist arrested after ProtonMail provided his IP address

#31

It seems the lesson here is to always use a VPN (or Tor) if you're under such threat.

and the lesson here is that everyone who called out Protonmail for being sus (suspect) on signup was correct.

try using Tor to create a protonmail account and they require both javascript and a phone number.

yeh yeh client side encryption requires javascript, but seems better to just have an unlinked email that can be read server side and there are plenty of Tor-only email providers for that.

phone number under an "anti-spam" guise is just suspect.

Re: Climate activist arrested after ProtonMail provided his IP address

#32

Is Javascript required to sign up or use ProtonMail. https://www.wired.com/2015/10/mr-robot-uses-protonmail-still...

No, you can use any SMTP/IMAP/POP3 capable client instead of using their web interface.

https://protonmail.com/support/knowledge-base/imap-smtp-and-...

But you are still making an IP connection. JS/no JS is not relevant to this discussion.

Re: Climate activist arrested after ProtonMail provided his IP address

#35
post #18

So with FastMail under Australian privacy-bashing laws and now this, what are our options for secure, private e-mail?

Your own self-hosted service on rented server / cloud instance? AFAIU (IANAL!!!) you can refuse to give evidences against yourself in most jurisdictions.

I don't thinks that dedicated server provider (like Hetzner) or cloud provider (like Digital Ocean or Vultr) stores traffic logs with enough details to be useful in such case.

But payment will be a problem...

Re: Climate activist arrested after ProtonMail provided his IP address

#37
Disclaimer: I have a ProtonMail account that I pay for.

I have seen a ton of disturbing pieces about ProtonMail. Every time I've looked into them, they seem to be maliciously motivated and usually not true, or otherwise twisting of the truth. This has been a confusing thing for me because why is there a small subset of people so vehemently against them?

In this case, I'm not surprised. They say quite clearly they can be compelled to collect IP addresses - including in the linked tweet. This seems like a pretty clear cut case of them being compelled to provide an IP address. What the authorities can't do, is read that person's email. And that's what I and others pay for.

I'm not sure what there is to be upset about here? Other than perhaps France prosecuting this individual to begin with? If we had faith that ProtonMail wouldn't hand over anything to the government, why would anyone even care about having encrypted emails?

Re: Climate activist arrested after ProtonMail provided his IP address

#38

Is Javascript required to sign up or use ProtonMail. https://www.wired.com/2015/10/mr-robot-uses-protonmail-still...

No, you can use any SMTP/IMAP/POP3 capable client instead of using their web interface. https://protonmail.com/support/knowledge-base/imap-smtp-and-... But you are still making an IP connection. JS/no JS is not relevant to this discussion.

[deleted]

Re: Climate activist arrested after ProtonMail provided his IP address

#39
post #30

I guess there isn’t much Protonmail can do if the prosecutor shows up with an ~Interpol~ Europol warrant. I wonder what this “activist” did to earn himself Europol attention. At least before the world went insane, that would only happen for serious crimes.

The terrible crime of squatting, according to some comments in that thread

Re: Climate activist arrested after ProtonMail provided his IP address

#40
post #18

So with FastMail under Australian privacy-bashing laws and now this, what are our options for secure, private e-mail?

Your own self-hosted service on rented server / cloud instance? AFAIU (IANAL!!!) you can refuse to give evidences against yourself in most jurisdictions. I don't thinks that dedicated server provider (like Hetzner) or cloud provider (like Digital Ocean or Vultr) stores traffic logs with enough details to be useful in such case. But payment will be a problem...

It’s certainly possible that they store IP addresses.

Even if they don’t, as long as they have the email address then they can probably find the mail server even if the payment is anonymous.

Post reply on HN