Live data from Hacker News

Climate activist arrested after ProtonMail provided his IP address

twitter.com

121–130 of 619 posts

Re: Climate activist arrested after ProtonMail provided his IP address

#121

Earlier quoted context omitted.

The terrible crime of squatting, according to some comments in that thread

Has your home in France been squatted? No? Or maybe you do not own a house in France? If so, on which basis do you ironically call squatting a "terrible crime"? Squatters in your house in France means that you you have zero rights on this place until a lengthy process gives it back to you, ruined. You are then expected to be grateful and can forget about any reimbursement from the poor people who stole your property.

[deleted]

Re: Climate activist arrested after ProtonMail provided his IP address

#122
post #103
post #30

I guess there isn’t much Protonmail can do if the prosecutor shows up with an ~Interpol~ Europol warrant. I wonder what this “activist” did to earn himself Europol attention. At least before the world went insane, that would only happen for serious crimes.

If you don’t collect data, you can’t give it even if you wanted?

I suspect that you can order to collect it going forward.

Re: Climate activist arrested after ProtonMail provided his IP address

#123
post #88
post #18

So with FastMail under Australian privacy-bashing laws and now this, what are our options for secure, private e-mail?

One option not mentioned yet is Posteo. They don't keep your IP and strip it in case your mail client sets it in the headers. They also don't take any personal identification for signup or billing (you can even send them letters with money to pay for a mailbox).

I don't know what came of it, but they've been told by the German constitutional court that their approach ("we're using NAT, we don't know the IP on the actual server") doesn't fly and does not protect them from complying with a court order.

Re: Climate activist arrested after ProtonMail provided his IP address

#125
post #60

Earlier quoted context omitted.

We do not kill people except the people we kill I see that you want to protect Protonmail, but if they want to stop being misleading they can just remove the IP log sentence

Put "By default we don't keep IP, but may be required to by local laws. We suggest you connect through Protonmail through Tor". I would much prefer this, as a Protonmail paying customer.

Tor helps, but is not especially robust against state-level actors / APTs. An actor running a sufficient number of entry/exit nodes could perform at least some traffic analysis.

Tor is an improvement. It's still a limited tool.

Re: Climate activist arrested after ProtonMail provided his IP address

#126
post #103
post #30

I guess there isn’t much Protonmail can do if the prosecutor shows up with an ~Interpol~ Europol warrant. I wonder what this “activist” did to earn himself Europol attention. At least before the world went insane, that would only happen for serious crimes.

If you don’t collect data, you can’t give it even if you wanted?

Certain organizations can compel you to start gathering data.

Re: Climate activist arrested after ProtonMail provided his IP address

#127
post #113

Earlier quoted context omitted.

Occupied Germany is worse[1] Germany will handle your data as fast as you can order an hans schnitzel. [1] - https://militarybases.com/overseas/germany/

well posteo didn't. they tried to fight it as long as possible.

There is no fighting.

When you have 21 bases in your land.

Re: Climate activist arrested after ProtonMail provided his IP address

#128

Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…

TBH in 2021 people engaging in potentially dangerous activities should be literate enough to understand, that no business will guarantee them full security and decline all requests from authorities to disclose their identity. The wording you suggest is equivalent of „do not dry your cat in microwave“ instruction - a legal protection from dumb customers, that does not contribute meaningfully to safety.

For the non-Swiss customers working with a Swiss provider can be a good enough protection to avoid inconvenience of Tor. After all, even in the mentioned case it required review and approval of 3 agencies before request came to Proton - from French police, from Europol, and then from Swiss authorities. If this is not enough barriers to protect from politically motivated prosecutions and corruption, then we have much bigger problem in Europe.

Re: Climate activist arrested after ProtonMail provided his IP address

#129

Earlier quoted context omitted.

Technically correct but misleading. They tout that off-by-default statement on their homepage, underneath the header of "Anonymous Email," with the closing sentence of "Your privacy comes first." So why even market that? It provides no meaningful security.

Were _you_ mislead by this? Did you really expect a Switzerland-based company not to comply with law of the land? There is a difference between "available to police, not retroactively, and only with a valid warrant" and "available to any government agency constantly and in bulk, as well as to data-collecting commercial entities, Russian and Chinese hackers, and their dogs". Don't you agree?

Really solid explanation of what you’re paying for as a proton customer - and despite this unfortunate situation for the French advocate is why myself and others will continue their paid ProtonMail plans
Post reply on HN