▲ 296 ▼ Proton has handed over 32,076 users' data to governments since 2017. Their own transparency report states a 94% compliance rate in 2024. (infosec.pub) submitted 10 months ago by cm0002@infosec.pub to c/privacy@programming.dev 113 comments fedilink hide all child comments
[–] Atelopus-zeteki@fedia.io 4 points 10 months ago (10 children) My nose keeps pointing towards selfhosting. TY! permalink fedilink source parent hideshow 10 child comments replies: [–] iAmTheTot@sh.itjust.works 7 points 10 months ago (8 children) I mean, you need to abide by laws even when you self host. I'm not saying it's likely, but if you self host and the authorities legally demand records from you, are you prepared to go to court or prison over it? permalink fedilink source parent hideshow 8 child comments replies: [–] kami@lemmy.dbzer0.com 0 points 10 months ago (7 children) Lol what? If I am in control of the data and I have a reason to don't disclose said data, guess what's gonna happen as soon as they demand it? permalink fedilink source parent hideshow 7 child comments replies: [–] iAmTheTot@sh.itjust.works 6 points 10 months ago (6 children) Destruction of evidence is also a crime in most places. permalink fedilink source parent hideshow 6 child comments replies: [–] kami@lemmy.dbzer0.com 1 point 10 months ago (5 children) What evidence? permalink fedilink source parent hideshow 5 child comments replies: [–] lka1988@lemmy.dbzer0.com 5 points 10 months ago (4 children) Evidence: "We know you had this data based on emails between you and X entity, who already gave us emails and confirmed it was with you who they were communicating. We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena. Cough up the data or face prison time." It's not hard to solve for X when you know the rest of the equation. permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent [–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent [–] Telorand@reddthat.com 2 points 10 months ago The !selfhosted@lemmy.world community has lots of info and helpful people! permalink fedilink source parent
[–] iAmTheTot@sh.itjust.works 7 points 10 months ago (8 children) I mean, you need to abide by laws even when you self host. I'm not saying it's likely, but if you self host and the authorities legally demand records from you, are you prepared to go to court or prison over it? permalink fedilink source parent hideshow 8 child comments replies: [–] kami@lemmy.dbzer0.com 0 points 10 months ago (7 children) Lol what? If I am in control of the data and I have a reason to don't disclose said data, guess what's gonna happen as soon as they demand it? permalink fedilink source parent hideshow 7 child comments replies: [–] iAmTheTot@sh.itjust.works 6 points 10 months ago (6 children) Destruction of evidence is also a crime in most places. permalink fedilink source parent hideshow 6 child comments replies: [–] kami@lemmy.dbzer0.com 1 point 10 months ago (5 children) What evidence? permalink fedilink source parent hideshow 5 child comments replies: [–] lka1988@lemmy.dbzer0.com 5 points 10 months ago (4 children) Evidence: "We know you had this data based on emails between you and X entity, who already gave us emails and confirmed it was with you who they were communicating. We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena. Cough up the data or face prison time." It's not hard to solve for X when you know the rest of the equation. permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent [–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent
[–] kami@lemmy.dbzer0.com 0 points 10 months ago (7 children) Lol what? If I am in control of the data and I have a reason to don't disclose said data, guess what's gonna happen as soon as they demand it? permalink fedilink source parent hideshow 7 child comments replies: [–] iAmTheTot@sh.itjust.works 6 points 10 months ago (6 children) Destruction of evidence is also a crime in most places. permalink fedilink source parent hideshow 6 child comments replies: [–] kami@lemmy.dbzer0.com 1 point 10 months ago (5 children) What evidence? permalink fedilink source parent hideshow 5 child comments replies: [–] lka1988@lemmy.dbzer0.com 5 points 10 months ago (4 children) Evidence: "We know you had this data based on emails between you and X entity, who already gave us emails and confirmed it was with you who they were communicating. We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena. Cough up the data or face prison time." It's not hard to solve for X when you know the rest of the equation. permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent [–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent
[–] iAmTheTot@sh.itjust.works 6 points 10 months ago (6 children) Destruction of evidence is also a crime in most places. permalink fedilink source parent hideshow 6 child comments replies: [–] kami@lemmy.dbzer0.com 1 point 10 months ago (5 children) What evidence? permalink fedilink source parent hideshow 5 child comments replies: [–] lka1988@lemmy.dbzer0.com 5 points 10 months ago (4 children) Evidence: "We know you had this data based on emails between you and X entity, who already gave us emails and confirmed it was with you who they were communicating. We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena. Cough up the data or face prison time." It's not hard to solve for X when you know the rest of the equation. permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent [–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent
[–] kami@lemmy.dbzer0.com 1 point 10 months ago (5 children) What evidence? permalink fedilink source parent hideshow 5 child comments replies: [–] lka1988@lemmy.dbzer0.com 5 points 10 months ago (4 children) Evidence: "We know you had this data based on emails between you and X entity, who already gave us emails and confirmed it was with you who they were communicating. We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena. Cough up the data or face prison time." It's not hard to solve for X when you know the rest of the equation. permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent [–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent
[–] lka1988@lemmy.dbzer0.com 5 points 10 months ago (4 children) Evidence: "We know you had this data based on emails between you and X entity, who already gave us emails and confirmed it was with you who they were communicating. We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena. Cough up the data or face prison time." It's not hard to solve for X when you know the rest of the equation. permalink fedilink source parent hideshow 4 child comments replies: [–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent [–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent
[–] Telorand@reddthat.com 4 points 10 months ago (2 children) It very much depends on your local laws. Despite the current administration, the law in the US, for example, is that you do not have to divulge passwords (a Fifth Amendment right to silence). You can hand over your entire encrypted database intact, no destruction needed, and unless the authorities can decrypt it, it's useless evidence in court. Prosecutors may still try to build a case without that evidence (as you pointed out by getting decrypted correspondence with an accomplice), but it's not illegal to hand over encrypted data, even if they demand that you decrypt it; you are under no legal obligation to help incriminate yourself. That right may not exist in other countries, so as always, one should know their individual rights and threat model. permalink fedilink source parent hideshow 2 child comments replies: [–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent
[–] Orygin@sh.itjust.works 2 points 10 months ago (1 child) In Belgium, a judge can order you to give your phone password (and I would guess a decryption key too) and not complying with it risks imprisonment and a fine. So like you say it entirely depends on the local laws. Most of the discussion around Proton here should focus on Swiss laws instead of projecting based on their own local laws permalink fedilink source parent hideshow 1 child comment replies: [–] Telorand@reddthat.com 1 point 10 months ago Oof, that's rough. permalink fedilink source parent
[–] kami@lemmy.dbzer0.com 1 point 10 months ago LMAO We know you destroyed hard drives based on the fact that we found hard drive remains in your trash within 24 hours of receiving the subpoena Why should I have to destroy the hard drives and throw them in the trash? 🤣 permalink fedilink source parent
[–] Telorand@reddthat.com 2 points 10 months ago The !selfhosted@lemmy.world community has lots of info and helpful people! permalink fedilink source parent