441–450 of 619 posts
Earlier quoted context omitted.
The canary is dead, and the fact is widely publicised, if not necessarily well known.
Our canary[1] - the very first one[2] - is alive and well. In fact, it turned 15 years old this past April[3]. [1] https://www.rsync.net/resources/notices/canary.txt [2] https://en.wikipedia.org/wiki/Warrant_canary#Usage [3] https://twitter.com/rsyncnet/status/1387090538273206274
Earlier quoted context omitted.
Anyone that uses ANY electronic device to plan and arrange clandestine opetations - IS AN IDIOT.
Do tell, how do you plan your clandestine operations?
that way the govt can demand from reddit that account ip but since the only ip available is from outside india, they cant do shit.
i was ready to dictate base64 image character by character but the internet blockade remained for only 2 days so yeah. there are plenty of ways
I’m a web developer, and I assume a lot of HNers are too. So I’m really confused by the lack of understanding around IP addresses in the comments here. Everyone realizes that, by default, literally just connecting to another service over the web, will expose your IP address? It’s trivial to monitor and report your IP to the authorities, as soon as you login to ProtonMail, despite lack of “logging”. Logs only matter f…
> Does anyone here have a feasible way to solve this? Current solutions like TOR, I2P, VPNs and/or mobile proxy services are just a matter of time and legality until they come obsolete due to their publicly known nature. I am convinced that the only way to solve this is by simply not downloading the website from its origin. The origin tracks you, so don't talk to them. Talk to your peers and receive a ledged copy of…
I’m asking if there’s any feasible way for ProtonMail to not have the ability to know which IP addresses connect to their services.
So with FastMail under Australian privacy-bashing laws and now this, what are our options for secure, private e-mail?
Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…
All the Protonmail customers out there, what did you do about this? For starters, I emailed Protonmail support. Here's mine: Hi, Your homepage reads "By default, we do not keep any IP logs..." This language is soft and misleading. Maybe in 2018 when I first began using ProtonMail it was good enough. But in 2021 it's not. I expect better from ProtonMail. Replace immediately with something clearer. "By default we don't…
They are thinking about them. They want to make sure such people don't get them in trouble with the US or China, so they sell them out immediately.
Earlier quoted context omitted.
I once tried to create a Protonmail account over TOR and I believe they require a phone number from 'malicious' IPs so if you want anonymity Protonmail is not the service for you.
If they don’t do this then spammers will use their service en masse and degrade the service for all customers by black holing their ips and domain through all other email providers.
Earlier quoted context omitted.
https://svn-archive.torproject.org/svn/projects/design-paper...
>A global passive adversary is the most commonly assumed threat when analyzing theoretical anonymity designs. But like all practical low-latency systems, Tor does not protect against such a strong adversary. Instead, we assume an adversary who can observe some fraction of network traffic; who can generate, modify, delete, or delay traffic; who can operate onion routers of his own; and who can compromise some fraction…
Earlier quoted context omitted.
It’s not protection FROM your customers. It is protection FOR your customers. Most customers are not technically astute
A corporation is a power centralization, and government authority can lean on power centralization. In general, regardless of what their TOS say, never believe that a corporation can't be compelled by the law to do anything they could physically do. CEOs can be jailed; when's the last time we heard of one actually going to jail over user privacy?
Earlier quoted context omitted.
Honest question, because I've been asking it of myself: what do you expect from such a service? I basically decided to just give up. Email is an insecure protocol and there's not much that can be done about it. Choosing a "secure" email provider feels like choosing a "secure" VPN provider: it's impossible to verify the provider's claims so it's a kind of security theatre.
It's impossible to choose a "secure" email provider, unfortunately. Email can't guarantee E2EE without a block cipher tool like GPG. Even if your provider stores and transmits only encrypted email data, once sent it does not maintain that guarantee while being passed by another entity's MTA. If you email google, google gets to do whatever googly stuff it would like to do with its algorithm. If you email exchange, rou…
Except that's not true. Often envelopes can be opened and resealed without any trace, meaning contents can be read or changed.
It always amazes me that there is this hardcore of people on hn who are so anti ProtonMail. If you use gmail, It is my understanding that google ai will routinely read all your messages and add anything interesting to your profile so they can target you for ads. Law enforcement also has open access to everything in your mailbox all of the time. ProtonMail don't read your email but will supply metadata to authorities…