Live data from Hacker News

ProtonMail includes Google Recaptcha for login

github.com

271–280 of 308 posts

Re: ProtonMail includes Google Recaptcha for login

#271
post #257
post #250

Earlier quoted context omitted.

No, no. Now Google knows you are using ProtonMail, and by extension the NSA knows you are protonmail, the FBI knows you are using ProtonMail, and so on. This may or may not be a problem for you.

meh, if FBI is truly trying to track you down, they have an easier time accessing your ISP and mobile carrier logs to see what IPs you've been talking to.

Maybe yes, maybe no. The more information you leak the more opportunities to find easier ways.

Re: ProtonMail includes Google Recaptcha for login

#272

Earlier quoted context omitted.

I'm not saying you're wrong, but that particular source is well known for making big claims with insufficient evidence, and it reads like it was written by a conspiracy theorist. Many of the author's claims have already been (imo, pretty solidly) refuted by Proton. Disclaimer: using protonmail until my current subscription runs out, then selfhosting

Self hosting these days is almost impossible because most email providers like gmail and yahoo mail will automatically move your emails to spam. It’s all based on IP address and how reliable that IP address is. Self hosting guarantees that all your sent email will end up in spam folders.

That's what I used to think, but it does indeed seem to be possible to build a reputation over time. I've been running my own email server for something like 4 years now and emails seem to get through to gmail and outlook accounts almost always at this point.

From talking to other people who tried the same, my theory is that the main reasons for my success were having everything configured well from the very beginning, running on a single static IP for multiple years, hosted at reputable mid-range server provider (not the cheapest, not the most popular) and not sending any "broadcast" email whatsoever for a very long time.

Re: ProtonMail includes Google Recaptcha for login

#273
post #180

I can recommend Migadu. Worth it if you already pay for a domain (which you should, imo, to have a portable e-mail address). I pay for the $19 annual plan and find it sufficient, and I love the flexibility of the admin panel.

I considered Migadu, but saw their stance on freespeech and decided not to go with them: https://www.migadu.com/use/#anti-violence-commitment "Hate speech" is too vague and highly subjective and just leads to censorship.

Last thing I want is my email breaking due to "socially unacceptable activity" (whatever that means).

Thank you for posting this.

Re: ProtonMail includes Google Recaptcha for login

#274

A few comments about this. A very small fraction of logins get the CAPTCHA challenge. We, and other services, face unrelenting brute force attacks on our login endpoints. If you are seeing a CAPTCHA on login, chances are that something about your connection is suspicious to our system. It's far from perfect, and we continue to improve it, but at most a percent or two of users are seeing CAPTCHA at any time. The CAPTC…

Your statement does decrease my confidence with your company...

Re: ProtonMail includes Google Recaptcha for login

#275

Earlier quoted context omitted.

The points made in this post mirror my own, and this incident has caused my trust of sound privacy focus design and implementation on the part of Proton to diminish somewhat. Any small leakage of data/activity/identity is unacceptable to those of us who know how this information can be taken advantage of, and choice Proton specifically to avoid that happening.

As a community driven, open source company, resource allocation is determined through community feedback. As mentioned in another post, reCaptcha has been used for anti-abuse in Proton since 2014. The community cares about this, but it's never been the highest voted item [1]. However, it's something our team cares about. That's why 6 months ago, we started preparing to migrate to hcaptcha, even though removing reCapt…

This is an irresponsible statement to me. Each time you face such kind of issue, you can claim that community allows me to do that. But Protonmail is a professional company who should take the final responsibility. Please be professional.

Re: ProtonMail includes Google Recaptcha for login

#277
post #47

When I started my company we chose to use Protonmail. My advice to anyone who wants secure email: don't use protonmail. The email search is completely useless. I don't understand how it can possibly be so difficult to do a substring search on a corpus and rank them in some kind of sane way. Searching for old emails based on content is an exercise in futility. After a few years of using an email service, search become…

A few clarifications. There is an export tool that is available. The reason we must count disabled addresses towards your quota is because if we did not do that, we would be susceptible to an attack where a paid user could run through our address space by creating and disabling addresses continuously, so some limits are required. You can remove disabled addresses, but only by contacting support.

Oh I forgot to mention the customer service

Re: ProtonMail includes Google Recaptcha for login

#278
post #180

I can recommend Migadu. Worth it if you already pay for a domain (which you should, imo, to have a portable e-mail address). I pay for the $19 annual plan and find it sufficient, and I love the flexibility of the admin panel.

I considered Migadu, but saw their stance on freespeech and decided not to go with them: https://www.migadu.com/use/#anti-violence-commitment "Hate speech" is too vague and highly subjective and just leads to censorship.

Thanks, I didn't know about this. This is concerning, and I agree, very vague.

Re: ProtonMail includes Google Recaptcha for login

#279
post #257
post #250

Earlier quoted context omitted.

No, no. Now Google knows you are using ProtonMail, and by extension the NSA knows you are protonmail, the FBI knows you are using ProtonMail, and so on. This may or may not be a problem for you.

meh, if FBI is truly trying to track you down, they have an easier time accessing your ISP and mobile carrier logs to see what IPs you've been talking to.

Less likely to do that if you're not appearing in a "people who use protonmail" list.

Re: ProtonMail includes Google Recaptcha for login

#280
post #258
post #216

Earlier quoted context omitted.

Not questioning this dang, but would be useful to add something about trollish usernames in the guidelines, and perhaps clarify what qualifies as trollish.

That belongs to a category of subrules or heuristics which are too numerous to list. If we tried to make the guidelines comprehensive that way, they would just get so long (or worse, so bureaucratic) that people wouldn't read them. There's a limit to how much information one can get across that way, so we err on the side of explaining the spirit of the site and leave the 'case law' to specific moderation comments. On…

Impressive how you’re able to find these quickly and quash. Follows the model of cleaning up graffiti quickly, which causes incidents to reduce over time.
Post reply on HN