Live data from Hacker News

Proton Mail discloses user data leading to arrest in Spain

restoreprivacy.com

281–283 of 283 posts

Re: Proton Mail discloses user data leading to arrest in Spain

#281

I hate when companies mislead, they claim email encryption. but the question is how they know the email is suspicious. it means they monitor emails and obviously, Proton Mail is (not) the trusted choice for secure and private communication.

What email was suspicious? From what I can read. Proton provided the Spanish authorities with a recovery email address, which the latter then used to find an associated Apple account. While I agree this makes Proton unreliable for many things, there's no indication they were reading any emails.

No service can read all emails of a platform, but spying is still not good anyway, if someone is misleading it's a government problem to find and punish them, communication should be safe anyway, old face-to-face communication is good then internet.

Re: Proton Mail discloses user data leading to arrest in Spain

#282

Earlier quoted context omitted.

Privacy is also meant to protect you from the state, or more specifically state abuse. It's an essential aspect of privacy. Like privacy is also meant to e.g. not disclose topics you have communicated about so that it can't be abused against you. For example there is a long history of states persecuting people for idk. being gay, believing in a certain religion or being a journalist which was involved in a unpleasant…

Some interesting facts about Proton Mail. It generates OpenPGP keys on their own servers, and if you want to use your own keys their instructions show users how to upload upload their entire OpenPGP secret keychain to Proton Mail. Not just encryption/signing subkeys, the master key also needs to be included. I've emailed them to ask that they fix this. I also created a post on their user voice thing about it. https:/…

[dead]

Re: Proton Mail discloses user data leading to arrest in Spain

#283
post #210

Earlier quoted context omitted.

I wouldn’t call it reasonable. If you’re trying to evade LE because it’s illegal to be gay in your country, and you get caught because you’d listed an Apple address in your ProtonMail account - can’t we design better products to make this less likely?

Who gets to decide which specific sorts of evasion of law enforcement are acceptable? Should we consult your personal moral preferences for that, as applied to each of the 200+ countries on the planet? Why do your preferences overrule those jurisdictions' decisions?

I think there is a fairly straightforward answer to this question. It is always acceptable to evade law enforcement for anything related to laws restricting human rights as outlined in either the Universal Declaration of Human Rights, or the International Covenant on Civil and Political Rights.
Post reply on HN