you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 6 months ago (4 children)

in that particular case the people involved were identified through their recovery email which they did not hash like 'safe' other providers do. they have positioned themselves as safe even for activist and journalists and have failed to deliver in that account consistently.

no surprise since their CEO is a MAGA guy

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 6 months ago (2 children)

    recovery email which they did not hash

    How do you recover an account on the other providers? Do you have to provide the same recovery email you set before during account recovery? If you hash the email, you have no way of reading it anymore, so someone has to provide it to you again.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 6 months ago

    you ask the user for it if they want to recover the account and hash it. if the hash matches your previously stored hash then you send the email

    other providers that position themselves as secure for activists or journalists do exactly that and they cannot handle that information

  • source
  • parent
  • [–] 1 point 6 months ago*

    That's the only way I can imagine it working.

    People frequently confuse privacy with anonymity. Proton never claims you can't be identified. Only that your communications are as private a possible. Though they provide tools for you to ensure your anonymity if that's important to you.

  • source
  • parent
  • [–] 0 points 6 months ago

    When you say MAGA guy, do you mean that one time he said a single little policy of Rumps, might possibly not be terrible for everyone? Does that make him MAGA?

    Am I MAGA for not hating the Space Force, because it gave us 2 seasons of a fun comedy show?

  • source
  • parent