Live data from Hacker News

ProtonMail deletes 'we don't log your IP' from website after activist arrested

theregister.com

251–260 of 352 posts

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#251
post #68

Earlier quoted context omitted.

No, I'm referring to pcloud. I'm not saying they are necessarily a bad service or anything, just that their marketing is false.

This is extra problematic because pcloud doesn't encrypt files by default. (It does have its "secure vault" but you can't sync it to your computer and costs a significant extra fee to use. You may as well use cryptomator)

that's what I do, use cryptomator with gdrive.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#252
post #156

Earlier quoted context omitted.

I also dislike companies that use the label 'Made in [country]' as a prominent hook to promise users they will get enhanced privacy - which may or may not be true. I'd rather they be honest and say: these are the examples when we must comply with the law and must hand over the following details. We all need to make our own evaluation of the privacy promises of those services and whether they actually provide privacy…

As an Australian, I absolutely appreciate knowing an online company is located somewhere that isn’t here.

Yes but Australia, especially recently is becoming for totalitarian and surveillance oriented. Not really sure why people there are not voting those people and laws out while they still can, but I guess it's tribalism and limited number of parties just like here in the USA.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#253
post #242
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

Proton has always been as bad a hushmail

Got any proof of that? Can you decrypt my email that is sitting on their servers? If you are communicating something so precious that not even the sender/receiver and subject line shouldn't be seen then you best not be using ANY EMAIL at all without a couple more layers of security on top of it.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#254
Similar to Apple, Protonmail seems poised to redefine privacy as "privacy from advertisers" rather than "privacy from us too".

I for one am now only using Protonmail through Tor. Recommend Brave users enable "Automatically redirect .onion sites". If a site has an onion service, it will automatically redirect in case you forget.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#255
post #22

The ProtonMail guys always said that unless they were 20 miles from the littoral, in the sea side, they had to abide by national laws. So it was bound to happen. What makes me sad is how flimsy their entire premise (not necessarily "promise") turned out to be: all it took was some minor rascal in France to hug the wrong tree (so to speak), and ProtonMail is in the open saying they can't even protect the IP address of…

I would assume you'd also need to have some sort of armed forces too, otherwise whichever country wants you data can sail over with their Navy and take it.

If you have a navy capable causing halt to EU, CN, US, AU, etc you should go ahead and claim an entire island. Maybe collect some taxes, try to get UN recognition…

Operating outside of national protection requires either extremely small scale and high risk or it requires becoming a quasi-nation.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#256

Earlier quoted context omitted.

I remember being fooled by the whole "We're Swiss, isn't that great?" marketing at the beginning. It was disappointing, to say the least, when I learned that Switzerland is part of the N-eyes agreement(s). Truth is that Email is almost a dead protocol now, anyway. As much as that hurts me to say. It was never able to meet the moment- PGP is complicated and easy to mess up, it's pretty damn hard to host your own Email…

I agree in that, for me, e-mail is almost solely used for business communications and newsletters. However, I don't know of a "timeless", or otherwise decentralized, communication technology so ubiquitous that can be secured like e-mail. Signal seems to be the hip thing, but it's centralized. "Blockchain" communications, perhaps?

That is something I doubt I'll ever sign up for is my email on a blockchain lol unless it's just a hash of the email text or something for "proof" of it's origin/association.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#257
post #104

Earlier quoted context omitted.

The premise of "we'll never log your IPs" is something that no company can hold. - Local law enforcement can force the to do so. - Locals laws can change. - Guys with guns might barge in and demand it. Mostly, you can understand that they don't _intend_ to log IPs, and aren't in the business of collecting and redistributing data. But that doesn't mean you can count on absolute and unconditional secrecy.

>"we'll never log your IPs" is something that no company can hold. Four words: The Intercept, Secure Drop. A one-way mail (content submission) system that runs exclusively on Tor, and thus can't be supboenated for users' IP address. While I get your premise due to concerns of law, I think it is entirely feasible - and hinges on execution, marketing ability. We already have IP-hiding technology, whether Tor or Freenet…

I also have to wonder if the market size for this a truly anonymous email truly is. Who would go out of their way to pay for more expensive email that was untraceable? How many reporters? How many "freedom fighters"? How many large-scale criminal organizations? And does the very fact of using it bring unwanted attention?

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#258
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

The whole clarification they wrote was "As a Swiss company, they must comply with Swiss law when it relates to a Swiss citizen." So if you're not a swiss citizen, you've got nothing to worry about. The only thing they did different was notify the person they were being investigated and then began tracking. That's the major difference. It's not like some random company can just skirt all laws globally for the sake of…

The person whose IP they tracked was French.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#260
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

China-Email: Would be interesting to buy email hosting from a super secure email service based out of China. Basically a "trust in math" approach where they operate despite adversaries. With huge claims on the website:

- No physical security: our offices don't even have locks

- Pro-crime-CEO: our CEO is a known (and future) criminal

- Political: we seriously try to read your email for the cops but we cant :(

- None of that matters because our protocol is open source, blockchain enabled, and it doesn't matter if you trust us at all.

Seems like a joke but you get my point. In God we trust, for everyone else use math.

Post reply on HN