I guess ProtonVPN also is not an exception to such "undeniable" requests. Bad day for company who bank on "no log" policy. Their marketing division will have a ton of work to fix reputation :)
ProtonMail deletes 'we don't log your IP' from website after activist arrested
11–20 of 352 posts
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#12This is just ridiculous.. If they receive a notice to log your IP address, they should notify you first. My trust in ProtonMail is gone.
I'm pretty sure in US law authorities can stop you from doing that, that's why these services have warrant canaries which are legally sound.
Not sure what swiss law is like, but I can imagine they might not be allowed to notify the user?
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#13For such a stupid thing too. I'm surprised Switzerland provided a warrant for a climate activist.
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#14It has been admitted. So they DO log your IP address when you use their service. So their customers have been lied to and have their privacy at risk. They cannot be trusted. So how long have ProtonMail kept this massive lie from its users then?
It is probably worth reading the clarifications made by ProtonMail [1] and their Transparency Report [2]. As a company based in Switzerland, it was clear to they could be compelled to do so and they never hid that fact.
IMO a breach of trust would be actually logging IPs by default and before a legal request is made.
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#15It has been admitted. So they DO log your IP address when you use their service. So their customers have been lied to and have their privacy at risk. They cannot be trusted. So how long have ProtonMail kept this massive lie from its users then?
It’s not a lie; it said “By default, we do not…”. So under any non-default situations they always could. I guess.
If that is the case, why did they remove this statement? It seems to me that if the statement remained true even though this guy got arrested, it would be true under the "by default" clause. By removing it, they indicate it was never true; or, I suppose, they discovered just how fun it is to get people arrested, and decided to change their policy on the fly!
I was even considering switching to them...
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#16This is just ridiculous.. If they receive a notice to log your IP address, they should notify you first. My trust in ProtonMail is gone.
According to their statement:
> Under Swiss law, it is obligatory for a user to be notified if a third party makes a request for their private data and such data is to be used in a criminal proceeding.
But the timeline is unclear to me. If they notified you via e-mail, and then immediately turned on IP logging. So... you'd go and check your e-mail, learn about the third-party request, but by then it's too late as your IP address has already been logged?
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#17My trust in them had been broken as soon as they asked me to honour a bill when my vpn subscription ended, instead of notifying me to renew. Respectable companies don't use such asshole design/wording. They're a fraud.
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#18For such a stupid thing too. I'm surprised Switzerland provided a warrant for a climate activist.
It seems the warrant went through Interpol; I'm not sure local authorities need to sign this off.
EDIT: They actually clarify this in their statement[0], the crime must be valid under Swiss law.
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#19PM was a hoax from the start. Just talk to the Lavabit guy Ladar Levison or look up Crypto AG.
Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested
#20Earlier quoted context omitted.
It’s not a lie; it said “By default, we do not…”. So under any non-default situations they always could. I guess.
If that is the case, why did they remove this statement? It seems to me that if the statement remained true even though this guy got arrested, it would be true under the "by default" clause. By removing it, they indicate it was never true; or, I suppose, they discovered just how fun it is to get people arrested, and decided to change their policy on the fly! I was even considering switching to them...
They clearly changed it because of the amount of backlash they got and because so many people called that statement deceptive. Just because it's true doesn't mean it's smart to say it and them removing the statement is absolutely reasonable.