Live data from Hacker News

Climate activist arrested after ProtonMail provided his IP address

twitter.com

501–510 of 619 posts

Re: Climate activist arrested after ProtonMail provided his IP address

#501

Earlier quoted context omitted.

Where can I pay to have my provider say "nope" to the french police force a case like this?

Set up your own encrypted email server If anyone has specific recommendations for which open source encrypted platforms to set up, I am all ears

Where are you gonna host your server?

Why setting up a server vs simply using a vpn?

Re: Climate activist arrested after ProtonMail provided his IP address

#502

Earlier quoted context omitted.

_all_ VPNs are useless. They are the biggest security theater and a massive success of marketing. But really, it's completely bazaar to trust a VPN provider. They provide protection from your local network, but you they can do all the same things and more.

Yes. Yes! I’ve never understood how people argue that they are somehow better than an ISP by default.

In Sweden we got the "datalagringsdirektivet" that says that every operator must keep their traffic for 6 months. VPN-providers are not bound to this law so that's my reason.

Re: Climate activist arrested after ProtonMail provided his IP address

#503
post #398

Earlier quoted context omitted.

In other words, your information is safe from the police if the police doesn't want it, but the second they want it, they're getting it and Proton can't do anything about it. The "default" is only useful for hiding your past actions before the police took interest in you, but not for any action since it happened.

this is inaccurate, no one can't fetch the the body of emails.

Unless you use end-to-end encryption (like PGP) then that's not true.

Re: Climate activist arrested after ProtonMail provided his IP address

#505
post #18

So with FastMail under Australian privacy-bashing laws and now this, what are our options for secure, private e-mail?

Protonmail and fastmail are different offerings. Proton offers encryption features, while fastmail makes no effort to promote encryption. So tutanota would be a good alternative to protonmail. And mailbox.org is a good alternative to fastmail. Both are based in Germany.

From tutanota:

> Storage only takes place for IP addresses made anonymous which are therefore not personal data any more.

What the heck does "IP addresses made anonymous" mean?

Re: Climate activist arrested after ProtonMail provided his IP address

#506

Earlier quoted context omitted.

I'm also a Protonmail customer. Tor solves this. Protonmail's Tor support is lukewarm. They have a Tor based login without captchas. It's mentioned on their homepage in the bottom menu under "Onion Site", (/tor). And there's one blog post from 2017 that still promotes their v2/shorter onion address. I expect Protonmail to push its users to login through Tor. "Don't trust us, trust math". Embed Tor support in their ap…

Aren't a big part of Tor entry/exit nodes considered to be monitored or even operated by the authorities?

Sure, but if that becomes a problem for you depends on

1. whether or not your request stays within the tor network or not (if you use the .onion address, no need for an exit node)

2. given both entry and exit nodes can be literally all over the world: your threat opposition level. I doubt the NSA will be happy to help French authorities trying to catch a teenager who blockaded a government parking garage).

Re: Climate activist arrested after ProtonMail provided his IP address

#507
i'm swiss. i think it's interesting to contemplate that, in 2021, being a pacific climate activist, namely sitting in front of a bank with massive investments in fossil fuels or that sort of things to attract attention on the science, will result in you getting the full treatment reserved to terrorists.

Re: Climate activist arrested after ProtonMail provided his IP address

#508
> IANAL, but I have a hard time seeing how young people squatting buildings in Paris is an extreme criminal case. In any case, I have an issue with this lack of transparency from ProtonMail, if any police service can ask them to log IP addresses, that is not anonymous

(Quote from the Twitter thread, by same author.)

Yeah, that is the problem. We don't know who, we don't know why, we don't know shit. All we know is that the request took place. We don't know if the request was or is justified. Those who trust police or dislike climate activism might say 'of course' and those who distrust police or like climate activism might say 'of course it wasn't justified'. Meanwhile, police (Europol in this case) are not releasing details for the neutral readers to make up their mind, because they're still fully in the investigation.

I'm very much pro-privacy, and actually I find the environment very important, but I also want to give Europol the benefit of the doubt. So I suspect a climate activist, using Protonmail, might've gone a step or two too far. And if Protonmail just runs some VPS in some other countries, they'll have to abide by the law in these, on top of Swiss law. That a Swiss company has to cooperate with Europol because Europol has mandate in Switzerland is also a no-brainer.

Re: Climate activist arrested after ProtonMail provided his IP address

#509

Disclaimer: Paying Protonmail customer Their homepage says "By default, we do not keep any IP logs" In 2021, any soft language like this should be a red flag for anyone who is against surveillance. Maybe in 2018 it was good enough. But in 2021 it's not. Come on, Protonmail, you're supposed to be leading the way -- don't make me figure it out myself. Replace immediately with "By default we don't log IP, but may be req…

TBH in 2021 people engaging in potentially dangerous activities should be literate enough to understand, that no business will guarantee them full security and decline all requests from authorities to disclose their identity. The wording you suggest is equivalent of „do not dry your cat in microwave“ instruction - a legal protection from dumb customers, that does not contribute meaningfully to safety. For the non-Swi…

> people engaging in potentially dangerous activities

These seem to have been climate activists engaging in sit-ins.

Surely these are the very sorts of people that secure accounts are intended to protect?

Re: Climate activist arrested after ProtonMail provided his IP address

#510

Earlier quoted context omitted.

All the Protonmail customers out there, what did you do about this? For starters, I emailed Protonmail support. Here's mine: Hi, Your homepage reads "By default, we do not keep any IP logs..." This language is soft and misleading. Maybe in 2018 when I first began using ProtonMail it was good enough. But in 2021 it's not. I expect better from ProtonMail. Replace immediately with something clearer. "By default we don't…

I simply closed my (free) account. Their page is full of what are now obviously lies. They admit that in the cases of "extreme crimes" they might be forced to give up information. _By no stretch of the imagination are these peaceful political protests "extreme crimes"._ I specifically advocate for the sorts of people that Protonmail ratted out and had arrested - climate change activists.

FWIW, what they were accused of was squatting, not protesting climate change. I still think that's a ludicrous abuse of police powers, but it's worth being accurate.
Post reply on HN