Live data from Hacker News

ProtonMail deletes 'we don't log your IP' from website after activist arrested

theregister.com

341–350 of 352 posts

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#341
post #280

Earlier quoted context omitted.

Ironically, I am in Zurich right now supervising upgrades and capacity increases in ZH4. Our terms of service[1] Explicitly state that your data will never leave the location you’ve chosen. So if you’re still in the market for cloud storage in Zürich, email us. We’ll give you a “screwed by pcloud” discount. [1] rsync.net/resources/notices/tos.html

Just fyi, clicked the "pricing" link from the TOS page and got a 404.

I am told this has been fixed ...

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#342

Earlier quoted context omitted.

Ironic since the US is more or less the world leader for money laundering and tax evasion. It also bothers me that the US has spent billions of dollars over the past several decades fighting narcotics just to turn around and make them legal. They must have passed the "It's Ok When We Get Our Cut" Act when I wasn't looking.

Yeah weird that so many American companies set up headquarters in places like Ireland when it’s so easy to evade corporate taxes here.

That is mostly for access to the European market. Tax evasion on the domestic market works too, but differently.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#343

Earlier quoted context omitted.

> - Pro-crime-CEO: our CEO is a known (and future) criminal Best to not have employees if they know the CEO is pro-crime. I mean why not eBay all of the company's equipment on my personal account? Just towing the company line.

Even people who are pro-crime tend the be anti-being-a-victim-of-crime, and extent that to organizations they lead unless they are the perpetrator of the crime.

It's silly to think your kids will do as you say rather than what you do.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#345

Earlier quoted context omitted.

They can force you to implement functionality if it doesn't exist? Like logging?

Your service is connected to the internet, isn't it ? An IP is a fundamental component of it. It's impossible for you to say that you cannot have the IP. Even if it involves you going to your edge server and reading everything with Wireshark to find out the IP, you will still have to comply. EDIT: To add to this, this is why ProtonMail recommends using a TOR node to protect your address.

I know the technical aspects I was just curious what they were allowed to do legally.

Are they legally allowed to force someone to implement nonexistent functionality?

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#346
post #11

I guess ProtonVPN also is not an exception to such "undeniable" requests. Bad day for company who bank on "no log" policy. Their marketing division will have a ton of work to fix reputation :)

Would you trust any VPN provider in that regard? I sure don't.

Mullvad is definitely the ones I'd trust the most.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#347
post #127
post #77

Earlier quoted context omitted.

As far as I know Tresorit has actual offices and staff in Zurich, Switzerland. They also appeared clear to me in the past that they have multiple offices around the world (I listened to a presentation from them recently at a conference).

I was referring to pcloud and pcloud also have an office in Switzerland. But similar applies to Tresorit I believe, thy just have it for tax and marketing reasons. The issue is both Tresorit and pcloud store the data outside of Switzerland. If you start using pcloud on the expectation that it's stored in Switzerland you are wrong, it will be stored in Texas or in Luxemburg. So, how can Swiss law really apply once it…

I got you - I was just replying to kylehotchkiss. Either way, if the data is properly client-side encrypted, it shouldn't really matter much where the data is stored, since they would need access to your device to decrypt the data. So I don't see how this is an issue.

My expectation here would typically be that the company itself is governed by a stable, democratic government. It matters, because different legislations can impose different requirements (see recent changes in Australia for example).

Yes, banking secrecy has nothing to do with this and doesn't really apply, since that is more about someone not spilling your information, while here you already ensure on your device that the data is not visible to anyone.

I think you are right - it's a marketing element, but most companies do that, don't they? See for example Apple with "Designed in California", which is really just trying to not only say "Made in China". People have known associations with certain countries (such as Switzerland), which are used for marketing, yes.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#348
post #47

For such a stupid thing too. I'm surprised Switzerland provided a warrant for a climate activist.

Are you sure he was arrested due to climate activism-- or is it possible that the irrelevant description has been added to manipulate people into a target reaction?

Then the manipulation runs counter to the prevailing narrative.

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#349
post #103

Earlier quoted context omitted.

I think signal approach is the best. You can't be forced to turn in something you don't have.

You can be forced to collect the data.

I'm not sure it applies here?

Signal uses an OTR variant (I believe OTR masks the identity of the sender/receiver) -- not sure how thorough their implementation and protocol are[1]. Although if authorities already have the IP of one user they might gather a list of contacts.

[1] https://en.wikipedia.org/wiki/Signal_Protocol

Re: ProtonMail deletes 'we don't log your IP' from website after activist arrested

#350
post #314
post #302

Earlier quoted context omitted.

> And yes, I would say an order from Swiss courts that was unappealable is an extreme criminal case. Anything that could threaten Protonmail qualifies. So before this case, if I told you is someone in France trespassing enough for ProtonMail to log and provide IP, you would say sure? My point is that this is not what most people would expect by reading extreme criminal case. If it's not what they expect, it is thus m…

Note that I have not even mentioned France. Protonmail was forced by Swiss courts, period. Protonmail will not risk themselves for you. No client of Protonmail is worth fighting the Swiss courts over. Protonmail bowed down to the laws of the country they operate in, a smart move if they wish to continue legal operations. If you still do not understand this fact, or that I am speaking strictly about the repercussions…

> If you still do not understand this fact, or that I am speaking strictly about the repercussions that a Swiss company could face by ignoring a court order from Swiss courts in Swiss law in Switzerland, then we have nothing else to discuss.

Where did I say they shouldn't have done this? I do understands that fact.

The issue isn't on what they did, it's on how they said they were protected against this but actually wasn't. We are talking about their marketing materials promising anonymity that they can't legally provide.

If that was a mere misunderstanding from their parts and they thought they could actually get away from providing the IP but couldn't actually, sure it was a simply mistake from their part to say that, I would agree with you, but you provided the proof that they knew, and you even said it was "abundantly clear" that it was the case.

I'll say the same as you, if you don't understands that part, we have nothing else to discuss. Even more so if you believe that it's fine to promise stuff that you can't legally provide.

Post reply on HN