Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Climate activist arrested after ProtonMail provided his IP address

twitter.com

Post reply on HN
Print view View original

291–300 of 619 posts

Re: Climate activist arrested after ProtonMail provided his IP address

#291

Post by SV_BubbleTime »

bickeringyokel wrote: post #132
londons_explore wrote: post #117

Cryptographers and developers need to step up their game... There needs to be a messaging service where as well as the messages being encrypted, the graph of who is talking to who and when must be encrypted. I'm imagining a system where your device forwards hundreds of messages for other people , hiding your own message flow. I perhaps send a few hundred messages per day, and even multiplying that by 1000, and the ty…

Interesting idea, but is that not a liability to yourself if nefarious or illegal messages are passing through your device?

Isn’t this what Section 320 was intended for?

But yes, the problem with an encrypted tor-for-email would be the exit node would get all the emails and probably be responsible for the final content.

Re: Climate activist arrested after ProtonMail provided his IP address

#292

Post by IncRnd »

monkey_552 wrote: post #253
istingray wrote: post #77

Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…

Protonmail did not provide the authorities with the users IP address...they did allow the account to monitored which they are required by their laws to allow. It was the users sloppy OPSEC that allowed the authorities to eventually track them down. In the end, I believe, it was linking the user to a past Gmail account that finally did him in. Listen to this podcast episode, the presenter does a fairly good job summar…

> ProtonMail is a well-known and well-regarded mail service and is often recommended to users looking to distance themselves from Google's less-than-ideal security practices. Unfortunately, however, ProtonMail was recently forced to cooperate with Swiss authorities in providing user data (date of account creation), which was subsequently handed over to American security authorities and enforcement agencies.

and

> Proton reached out to us to confirm that the only data provided to Swiss authorities was the date of account creation. [1]

[1] https://proprivacy.com/privacy-news/protonmail-authorities-u...

Re: Climate activist arrested after ProtonMail provided his IP address

#293

Post by TedDoesntTalk »

Barrin92 wrote: post #173
sigmoid10 wrote: post #96

Earlier quoted context omitted.

People really don't seem to understand that Protonmail is a western company in a western country with pretty generous surveillance laws. Yes, your email text may be encrypted, but everything else is free game to the authorities unless you use additional protection.

I wonder how long the 'Swiss privacy' brand, which seems to be fairly valuable will hold if these things keep happening, I had to immediately think of Crypto AG https://en.wikipedia.org/wiki/Crypto_AG

A lot of people don’t know about Crypto AG. It’s an amazing story!

Re: Climate activist arrested after ProtonMail provided his IP address

#294

Post by istingray »

OrvalWintermute wrote: post #266
istingray wrote: post #93

Disclaimer: Paying Protonmail customer I wanted to test how Protonmail is doing for new users I created an account from scratch just now over Tor. 1. Am asked to verify new account by entering a cell phone (edit: this is horrible. They lie and say account creation is anonymous, as pointed out by the poster below) 2. Upon login, "Basic" logs are selected which do not display IP. You can enable "Advanced" logs to log I…

I really appreciate the distinctions you made. Welp.......Now, please excuse me, I need to go check my Protonmail settings pronto....

Suggest "Disable" on the logs. Setup Brave preferences to default to Onion sites when available. And use Tor: https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7...

Re: Climate activist arrested after ProtonMail provided his IP address

#295

Post by cutemonster »

georgyo wrote: post #214
anothernewdude wrote: post #197

Earlier quoted context omitted.

"Also, our VPNs are useless"

_all_ VPNs are useless. They are the biggest security theater and a massive success of marketing. But really, it's completely bazaar to trust a VPN provider. They provide protection from your local network, but you they can do all the same things and more.

Your local network might be a dangerous country

Re: Climate activist arrested after ProtonMail provided his IP address

#296

Post by pphysch »

sneak wrote: post #255
pphysch wrote: post #223

Earlier quoted context omitted.

"Open source" means literally nothing for the majority of Tor users that are downloading prebuilt binaries from US Government-funded www.torproject.org/download/

So now you're asserting that the binaries are backdoored, or built from something other than the published source. Again, provide evidence or stop spreading FUD.

That's sadly not how (cyber)security works.

The USG persecutes and imprisons journalists for exposing its war crimes, anyways I'm going to download this Tor binary from them because it says 'totally legit' on the packaging and there's no "hard evidence" to the contrary...

Re: Climate activist arrested after ProtonMail provided his IP address

#297

Post by istingray »

monkey_552 wrote: post #253
istingray wrote: post #77

Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…

Protonmail did not provide the authorities with the users IP address...they did allow the account to monitored which they are required by their laws to allow. It was the users sloppy OPSEC that allowed the authorities to eventually track them down. In the end, I believe, it was linking the user to a past Gmail account that finally did him in. Listen to this podcast episode, the presenter does a fairly good job summar…

Is this the same case? Maybe I'm missing some crucial info.

A week ago: "Proton reached out to us to confirm that the only data provided to Swiss authorities was the date of account creation." [1]

Today: Article published claiming Proton gave up user data. Did Proton officially now state they "allowed the account to be monitored"?

Am I getting this right?

[1] https://proprivacy.com/privacy-news/protonmail-authorities-u...

Re: Climate activist arrested after ProtonMail provided his IP address

#298

Post by 2OEH8eoCRo0 »

ivan_gammel wrote: post #128
istingray wrote: post #77

Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…

TBH in 2021 people engaging in potentially dangerous activities should be literate enough to understand, that no business will guarantee them full security and decline all requests from authorities to disclose their identity. The wording you suggest is equivalent of „do not dry your cat in microwave“ instruction - a legal protection from dumb customers, that does not contribute meaningfully to safety. For the non-Swi…

What kind of "climate activist" draws this much heat?

Re: Climate activist arrested after ProtonMail provided his IP address

#299

Post by hex4def6 »

dogma1138 wrote: post #6
bawolff wrote: post #3

Earlier quoted context omitted.

I think the argument is that their advertising is misleading (i.e. if they really didn't keep logs, there would be nothing to hand over)

They never advertised that they don’t keep logs they just said they aren’t permanent, in fact you can view your own connection logs if you enable it in which case they are maintained forever. https://protonmail.com/privacy-policy They also provide a report of all warrants received https://protonmail.com/blog/transparency-report/

In their blog they mention cases in which they enabled logging after the swiss government requested it.

Re: Climate activist arrested after ProtonMail provided his IP address

#300

Post by LdSGSgvupDV »

shiado wrote: post #189
istingray wrote: post #77

Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…

I once tried to create a Protonmail account over TOR and I believe they require a phone number from 'malicious' IPs so if you want anonymity Protonmail is not the service for you.

I try to sign up a protonmail through tor with brave browser at 2021/09/06. Everything goes well until last step.

  Are you human?

  If you are having trouble creating your account, please request an invitation and we will respond within one business day. Request an invite
Post reply on HN