Skip Navigation

mjr

@ mjr @infosec.pub

Posts
2
Comments
174
Joined
11 mo. ago

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • Nothing in their marketing says they'll refuse to comply with lawful orders.

    Maybe not now, but it used to say 'your privacy comes first' which certainly gave the impression privacy would be more important than blindly believing and obeying courts.

    Thanks for the link to their report.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • Most of those still rely on some company to host a server, except Briar, and in practice most Briar users are still relying on companies to access Tor to connect.

    They are more robust, not perfect.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • I don't know about 'should' but wasn't that the impression their marketing tried to give? Or at least that they would fight to defend user privacy for noble activists? But when challenged, its owners seem to have folded quicker than a strapontin.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • And yet, legal entities are often found guilty of not complying with the law. I think people were expecting Proton to at least try to fight a morally-questionable court order.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • There are hundreds of truly-private alternatives, many with no company involved at all.

    Such as...? I bet some ISPs or hardware maker companies are involved at some point.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • Do Swiss courts not allow any defence to be presented?

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • The popular myth is that Swiss privacy law is so strong that banks can hide gold and profits for major criminals. It wasn't to Proton's benefit to correct that.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • There seems to be no suggestion yet that any crime was committed on/using ProtonMail itself. Just that it was a tool to track someone accused of offline crimes. So this comment feels like misdirection because there are probably options between being liable and effectively telling the cops where users are.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • They said things that led the unwary to trust they wouldn't. Remember, this isn't some terrorist mass-murderer they handed over, but apparently an anti-gentrification youth activist linked to Greta Thunberg's campaign groups.

    Edit to add: in particular, Proton used to claim 'your privacy comes first' but this case suggests in reality, the Swiss government's help for French police comes first.

  • ProtonMail Logged IP Address of French Activist; Should You Be Worried About Your Privacy?

    Jump

  • Tuta are also a for-profit company, aren't they? Just one that currently has better published positions than most. Use them, but make sure you keep a path to the exit door in view.

  • How often do you update software on your servers?

    Jump

  • Those apt commands are in a less-good order. It's usually better to update apt, then upgrade the system.

    I upgrade as soon as reasonably possible after the notification appears, if the system isn't on auto-upgrade.

  • Satellite Snooping Reveals Sensitive Unencrypted Data

    Jump

  • It reads like "definitely should not happen" was indeed happening!

    I wonder if some techs got a basic unencrypted test working, then a pointy haired boss moved them on to another project and it got deployed into use with no-one setting up the encryption.

  • "It’s not about security, it’s about control" – How EU governments want to encrypt their own comms, but break our private chats

    Jump

  • You literally wrote that they don't represent you, so what else could I reasonably infer (not assume) from that? I bet you'd be more offended if I assumed you were lying in everything you wrote... but great thanks to you for petitioning them. It's up to us all to make our representatives care.

  • "It’s not about security, it’s about control" – How EU governments want to encrypt their own comms, but break our private chats

    Jump

  • Sorry, that's not how representative democracy works. You should tell them that, not us, and why.