Live data from Hacker News

Proton Mail discloses user data leading to arrest in Spain

restoreprivacy.com

1–10 of 283 posts

Re: Proton Mail discloses user data leading to arrest in Spain

#7
> Proton provided us with an explanation that inbox contents remain secure.

Yup, until they receive a court order asking them to mitm an inbox, if they haven't already...

This entire system of "receive email in clear text but store it encrypted at rest" is smokes and shadows, really.

Re: Proton Mail discloses user data leading to arrest in Spain

#8
The heart of the issue is this:

> Under Swiss law, Proton Mail was compelled to collect and provide information on the individual’s IP address to Swiss authorities, who then shared it with French police.

They can claim all the privacy guarantees they want, but unless the privacy is guaranteed by cryptography, it's an empty gesture. Nobody is willing to do prison time to protect your privacy.

Re: Proton Mail discloses user data leading to arrest in Spain

#9
> Use a good VPN service to hide your IP address whenever possible. (Failure to do this is what compromised a Proton Mail user in France who was arrested after after police obtained IP logs.)

If your VPN is tied to a payment method then all you've done is give police one extra hop to follow to get at you, which wouldn't have saved this activist. Their list of VPNs only includes Mullvad in position 9 of 10, but as far as I'm aware it's the only one that offers payment methods that preserve your anonymity.

Re: Proton Mail discloses user data leading to arrest in Spain

#10

The heart of the issue is this: > Under Swiss law, Proton Mail was compelled to collect and provide information on the individual’s IP address to Swiss authorities, who then shared it with French police. They can claim all the privacy guarantees they want, but unless the privacy is guaranteed by cryptography, it's an empty gesture. Nobody is willing to do prison time to protect your privacy.

I think they should do like Mullvad claims and keep zero logs. You cannot share what you do not have.
Post reply on HN