Live data from Hacker News

ProtonMail deletes 'we don't log your IP' from website after activist arrested

theregister.com

321–330 of 352 posts

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#321

Earlier quoted context omitted.

But what makes you think they don't log ips. They could too. If whatever country they are based on ask them too

It doesn't matter, what matter is what inside the message.

Metadata has been used to kill people.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#322
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

What’s the safest country originating IP address to use via vpn from prying eyes, Netherlands?

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#323

Earlier quoted context omitted.

Just to be clear, there's no reason to believe you aren't a Chinese bot trying to sow division among western countries with this comment. It's a pretty safe guess and we have no way of verifying otherwise, after all.

Actually, there is. I've met 10's of HN'ers in person, this account is many years old and in pretty good standing, on top of that I have regular contact with the mods and many others on here IRL. You probably should have picked a different account than mine to try this particular line with.

You missed, entirely, the point made by the person you responded to.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#324
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

China-Email: Would be interesting to buy email hosting from a super secure email service based out of China. Basically a "trust in math" approach where they operate despite adversaries. With huge claims on the website: - No physical security: our offices don't even have locks - Pro-crime-CEO: our CEO is a known (and future) criminal - Political: we seriously try to read your email for the cops but we cant :( - None o…

I kind of figure that since I don’t live in the Chinese sphere of influence I might be better off using a Chinese service if I had really sensitive communications.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#325
post #269
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

The USA thus has authority over servers that are in Texas, iirc.

The USA also has authority over servers that are anywhere in the world if there is a US company involved.

https://en.wikipedia.org/wiki/CLOUD_Act

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#326

Earlier quoted context omitted.

> Indymedia UK didn't log the IPs of website visitors. They used an Apache module that stripped IPs from Apache log messages. I know this, because I had root on the server. I believe you're confusing "is not actively logging" with "will not log, even when law enforcement takes over the server" (which a court order essentially comes down to, if you don't comply). The former is what ProtonMail also does. The latter is…

Our server was seized by the police. Nobody was arrested (well, they didn't really know who we were). We weren't even asked to make the server start up for them; we certainly weren't asked to circumvent the logging suppression; and had we been asked, we would have declined. But then we weren't a corporation. Between us, we had little to lose. We didn't have to help the cops. Protonmail is a business, so I suppose the…

I don't know, it looks fine to me. Switzerland isn't a super push-over state and has a reputation for valuing privacy (which is worth much more money than doing small favors for the US, RU or CN), so I don't expect them to go for "yeah sure that person leaked evidence of war crimes, we'll get right on getting you their IP". At the same time, to do business, you need to comply with the absolute minimum of laws.

If Rackspace just flat out refused to follow court orders, they wouldn't be able to run a data center. A DC that will comply with a court order is better than no DC imho.

Perfect is the enemy of good, and PM is definitely good at doing email with a high degree of privacy. Should you use it from your home dial-up while leaking the definite proof that reptilians are running the show? Probably not, but that doesn't make them unusable. For a lot of other threat models, they're perfectly fine, at least until proven otherwise.

Virtually no one (besides a few trained super spies) will resist and not comply once the first finger nail is coming off. Court orders are just the friendly foreplay, and they'll escalate from there depending on how important it is for them to get them to comply. If you're betting your safety on anyone withstanding that and not giving up their password, you're setting yourself up for disappointment (and pain!).

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#327
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

China-Email: Would be interesting to buy email hosting from a super secure email service based out of China. Basically a "trust in math" approach where they operate despite adversaries. With huge claims on the website: - No physical security: our offices don't even have locks - Pro-crime-CEO: our CEO is a known (and future) criminal - Political: we seriously try to read your email for the cops but we cant :( - None o…

> for everyone else use math.

Your code better be flawless.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#328

Earlier quoted context omitted.

China-Email: Would be interesting to buy email hosting from a super secure email service based out of China. Basically a "trust in math" approach where they operate despite adversaries. With huge claims on the website: - No physical security: our offices don't even have locks - Pro-crime-CEO: our CEO is a known (and future) criminal - Political: we seriously try to read your email for the cops but we cant :( - None o…

> for everyone else use math. Your code better be flawless.

And immutable.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#329

This is not surprising to me. I will still continue to use ProtonMail. I never signed up because of the "no IP logging" thing. In fact, if I had seen it before I just plain wouldn't have believed it, and still used ProtonMail. But hindsight is 20/20

What's important for you about using Protonmail then?

It’s not Google.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#330
post #34

Be careful when companies market themselves as Swiss or that due to them being located in Switzerland means there is some extra layer of security or privacy. Sure, it's a more stable country than many other countries in the world, but not much different from most EU countries for example. And privacy wise there is no difference. Be also aware of the fact that many companies market themselves as Swiss, but all it mean…

China-Email: Would be interesting to buy email hosting from a super secure email service based out of China. Basically a "trust in math" approach where they operate despite adversaries. With huge claims on the website: - No physical security: our offices don't even have locks - Pro-crime-CEO: our CEO is a known (and future) criminal - Political: we seriously try to read your email for the cops but we cant :( - None o…

> - Pro-crime-CEO: our CEO is a known (and future) criminal

Best to not have employees if they know the CEO is pro-crime. I mean why not eBay all of the company's equipment on my personal account? Just towing the company line.

Post reply on HN