Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.”

In a follow-up message, Yen reiterated his point: “only losers think like that.” His ultimate message for the team was to “stop lovingly handcrafting all our code and use AI more.”

all 83 comments

sorted by: hot top controversial new old
[–] 118 points 1 week ago (13 children)

I'd like to thank Andy for introducing me to Proton's competitor Tuta.

  • source
  • hideshow 13 child comments
  • [–] 31 points 1 week ago* (6 children)

    Tuta, funnily enough, makes it very hard to send encrypted mail to people who aren't also using tuta. Maybe also look at Mailbox.org and Posteo. They have a lot less marketing/hype/fearmongering compared to tuta and Proton, but have similar features regarding encryption and security, with less walled-garden like restrictions.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 3 points 1 week ago (2 children)

    Do you have experience with the office software or cloud drive from Mailbox.org? Proton’s spreadsheet app can’t even handle my modest flashlight collection and their Drive won’t mount as a drive on my Linux machine.

  • source
  • parent
  • hideshow 2 child comments
  • For something like a personal flashlight collection, you might try LibreOffice Calc. Esp since you mentioned using your Linux machine. I use librecalc for random things kinda like what you described. It works great, and your files stay local.

  • source
  • parent
  • [–] 3 points 1 week ago (1 child)

    I just took mailbox.org for a spin and wasn't impressed, I have to say. No apps, which I can live with, I guess. There was an option for installing the various functions as apps - but apparently Firefox isn't compatible. So sadly it's a no from me, I need a bit more functionality from a paid service.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 82 points 1 week ago (2 children)

    Every time this asshole speaks it just throws the entire company even further off a cliff lmao

  • source
  • hideshow 2 child comments
  • [–] 21 points 1 week ago* (last edited 1 week ago) (1 child)

    As someone who has been an Executive Director, I couldn't imagine taking a political stance on anything. Good way to alienate your customers and lose profit. Anyone with a couple of brain cells to rub together knows this.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 77 points 1 week ago (1 child)

    “Loser talk” is something a fucking 4chan basement dweller would say. I hate how society is just the stupidest fucks at the forefront now.

  • source
  • hideshow 1 child comment
  • [–] 61 points 1 week ago* (last edited 1 week ago) (1 child)

    Maybe I'm a particularly sensitive, spiteful snowflake, but if the boss of my company accused me of being a "loser" because I cared about the quality of the product, I'd be looking to deliberately sabotage the product. And for a new job, of course.

  • source
  • hideshow 1 child comment
  • [–] 47 points 1 week ago

    Stop giving Proton money

  • source
  • [–] 33 points 1 week ago

    RIP Proton.

    Privacy minded people tend to also want security.

  • source
  • [–] 31 points 1 week ago* (1 child)

    WTF? Is he 12 years old?
    Is this really true?

  • source
  • hideshow 1 child comment
  • [–] 29 points 1 week ago* (10 children)

    Alright, that's enough for me. What's the best mail, calendar and drive alternatives? Preferably the ones that aren't slop-coded.

    Also, has anyone had any experience with Migadu?

  • source
  • hideshow 10 child comments
  • [–] 10 points 1 week ago (5 children)

    Mail: Tuta, Posteo
    Files, calendar: Nextcloud. Self-hosted or managed. Mine also does my contacts and task sync.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 6 points 1 week ago (4 children)

    Nextcloud is slop-coded, unfortunately.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 1 week ago (3 children)

    Define "slop-coded" with regard to Nextcloud. The self-hosted sub has presented a useful terminological framework to pin down what software "made with AI" can entail:

    Hint - AI suggested solution, human does the task. Assisted - AI acts on part of a task, but a human handled the bulk. Pair - About a 50/50 split of human made and generated. Generated - Human prompted, AI generated.

    Where on this scale do you see Nextcloud?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 1 week ago* (last edited 1 week ago) (2 children)

    Nextcloud is assisted, but it is still slop. That's why I didn't use vibecoded.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 week ago (3 children)

    the best are the ones you host yourself. quite doable, except email if you don't want to send emails straight into the spam folder.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 1 week ago* (last edited 1 week ago) (2 children)

    I don't trust my skills enough to spin up a mail server. Or honestly any server that will be exposed to the internet.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 week ago

    Neither do I trust my uptime/maintenance of a mail server. I pay 1 EUR a month to Posteo, & it’s the only subscription to anything I have. Email ends up being an important access point for recovery & contact, so I keep it separate—paying to keep the lights on somewhere that posts it encrypted & responsibly.

  • source
  • parent
  • [–] 26 points 1 week ago (4 children)

    Ah shit balls! 3 months into a paid up email, calendar, drive and VPN suite. Have moved a lot of files over. Will start looking again, but definitely separating everything from now

  • source
  • hideshow 4 child comments
  • [–] 19 points 1 week ago (1 child)

    Andy Yen sounds like an asshole.

    I still need to move away from Gmail, but it's probably not going to be to Proton.

  • source
  • hideshow 1 child comment
  • [–] 19 points 1 week ago* (last edited 1 week ago)

    Well...some people are linux distro hopping and me...email hopping...f*uck

  • source
  • [–] 18 points 1 week ago (3 children)

    Every company seems to be rolling out software with no testing these days. Why? Is this what they think their consumers prefer? Why would we want glitchy accounting software with a chat bot that can’t actually do anything? I think they broke supply and demand with AI somehow

  • source
  • hideshow 3 child comments
  • [–] 4 points 1 week ago

    I think that Libre Office and /e/OS are still avoiding use of AI. Maybe mailbox.org as well. However, when the user base is growing, they all probably get more pressure to be catching up with the competitors.

  • source
  • parent
  • [–] 17 points 1 week ago*

    Yen said this is the last year that Proton will hire engineers at all, and instead only hire people to build things with AI.

    Bro is all in on AI and even he doesn't seem to consider "prompt engineers" actual engineers.

  • source
  • [–] 27 points 1 week ago

    Ah, yes, once again the old adage "When they show you they are, believe them" has proved it never fails.

    A happy Proton paying customer, I bailed within a week when Andy made his pro GOP/trump comments some time back.

    Folks said I over reacted. I handed them that adage. It was right.

    Protons top "loser" engineers will find themselves welcomed elsewhere. What a disaster Proton has become under Yen.

  • source
  • [–] 11 points 1 week ago (1 child)

    guess its time to host my own email

  • source
  • hideshow 1 child comment
  • [–] 3 points 1 week ago* (last edited 1 week ago)

    I'm on a 2 year family plan in proton that has to be around 1 year in. Now, in the last few months I've been upping my game in self-hosting, even for our family business (moved from Zoho Workplace to a VPS with Nextcloud and MXroute for email, with mandatory PGP for internal emailing and all files in next loud encrypted, and it's been great, but it does come with some extra work for me).

    I spent the last 2 days deploying stalwart in the same VPS with a domain I wasn't using to test it as a potential email server to self-host when Proton's subscription ends. It seems to be working well, I even got it to e2ee between that and my Proton email (can't get Tuta to accept a single email from it though, still need to tinker a bit it seems). Using SMTP2Go for outbound emails (free gives me 1,000 emails sent every month, ans I know my 6 family users together don't send even 500 emails in a month combined) to avoid the VPS IP address from being blacklisted if something goes wrong.

    I urge everyone to try it. It is not as easy to implement as they try to make it in YouTube videos, specially if you try to use as many security and privacy features as possible, but it is the easiest email server I have ever tried to implement, and I believe it is absolutely feasible for personal stuff (not too sure about business, so I'll stick to MXroute for that for now).

    If you have an unused domain (maybe a used one that you don't rely on for emailing) and some space in your homelab or in a VPS, Stalwart + SMTP2Go is a fun and potentially productive project to give a shot.

    Edit: I just went into my Tuta account and the emails are there. Seems it was an impatience issue more than it was technical 😁

  • source
  • parent
  • [–] 11 points 1 week ago

    Get rid of Andy Proton

  • source
  • [–] 10 points 1 week ago

    I already think proton mail is pretty slow to render/load, they don't have much room to make it worse before it's too much-in other words they better be real careful with that vibe coding.

    In general these events have me thinking of switching providers (and I have a paid tier).

  • source
  • [–] 8 points 1 week ago

    Thanks for sharing! Good post, totally worth the read.

    And I know which company to stay away from, and will solidly recommend this to others as well.

  • source
  • [–] 8 points 1 week ago (1 child)

    Proton is legit, they said.

  • source
  • hideshow 1 child comment
  • [–] 8 points 1 week ago

    Horrible stuff. I've been using Proton since 2020 and back then Proton's thing was just an encrypted email service. Year after year, they've started adding all these other apps and services to Proton's platform, and some of them fits nicely with the core email service (calendar, cloud for files, VPN). But lately they've began adding apps and services such as AI LLM chat (which is pretty crappy and inaccurate), remote video meeting software (which is really barebones feature wise) and apparently now they are working on Chromium based "privacy" browser (as if we don't have enough browsers already, let alone Chromium based). All of this requires a lot more developers and takes more time to develop and maintain, which is probably why Andy is so keen on making progress faster by using AI.

    But why does Proton need to add all of these apps? To fight big tech in all fronts? To create same kind of ultra loyal, "will buy anything" fanboy culture around Proton products like Apple has (and to lesser extent Google has)? Or is it to grow bigger company much faster than originally intended (because the investors want that) all the while taking bigger financial risks in doing so?

    In any case, Andy needs to step down as the CEO. The next CEO needs to take a good hard look at what's relevant to their customers. I don't think anyone is asking for a vibe-coded Proton web browser, just because it's "Proton".

  • source
  • [–] 8 points 1 week ago

    I commented before from the summary. Read as much of the 404 story as I can now.

    It's bad. If I didn't trust 404 Media, I might think this was a hit piece. But 404 does good work and I trust their journalists. I should really subscribe!

    Social media is prone to instant lynch mobs, one of its worst aspects. I do not intend to rage quit. But I WILL re-evaluate in 3 months. Just marked my calendar. They need to very publicly reverse course, AND restore my trust. I believe in giving ppl and co's a chance to learn from mistakes, or nobody ever gets wiser. But I need to see that happen, or me and my $ are out.

    I also no longer trust Andy's judgement. The Proton engineers are saying the right things. Again I trust 404's homework, or I would be much more skeptical of all of this.

  • source
  • [–] 8 points 1 week ago* (last edited 1 week ago)

    For those of you that care enough, I suggest letting Proton know in their community voice platform/forum. You can also email thier foundation.

  • source
  • [–] 6 points 1 week ago

    Ugh.

    I've heard Andy interviewed. Couple times. He came across as personable and likable. But that takes a backseat if he's gonna steer his company off a cliff and I have to stop trusting their products. Even smart people can make dumb choices. Esp when no one is empowered to push back. It can get pathological, when the CEO starts to believe they walk on water.

    Frankly I think the Proton Foundation needs to sit Andy down and have a heart to heart.

  • source
  • [–] 5 points 1 week ago (1 child)

    Guess I need to make sure I get my email server up before the next renewal. Since that was recent, hopefully way before next renewal.

    I'm not sure I can win the war for deliverable self-hosted email, and I send almost no email ever anyway, so I'm considering setting up a server that accepts email directly but relays outgoing mail through a relay that's actually trusted by email providers. Can anyone recommend good relays for that?

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 week ago

    I did exactly this (except relay), started a few months ago as I don't have a ton of time to sink into it. Went with Mailcow Dockerized (Tried Stalwart, too much behind paywall) on my VPS. My renewal is next month and since I was already paying for a VPS I figured I should tinker with this instead of paying for Proton. I already had domain(s) so that part was fine, I almost never send either but tested sending to gmail and proton. Initially had issues with gmail but was able to resolve them by adding my domain at https://postmaster.google.com/

    So far no other issues hampering the project, been receiving all emails fine including catchall. I do have in the back of my mind if I ever need to back out of self hosting to look into migado.com.

  • source
  • parent
  • [–] 5 points 1 week ago (3 children)

    What recourse do we have other than switching to a competitor and waiting until someone over there does something I disagree with?

  • source
  • hideshow 3 child comments
  • Hosting your own mail server. But unless you're really certain you want to do that, and are very clear on what you need to do to keep your setup secure and your mails out of spam, don't. It's not impossible, but probably not worth the effort.

    I am personally probably going to switch to mailbox.org when my Proton contract is up, already using it with an org I sysadmin for, and all in all pretty happy. Of course no guarantees that they don't enshitify, and they recently raised prices, but they're a lot less publicity/marketing focused compared to Proton. Less silicon valley energy, if you get me.

    I am also setting up my own Mailserver with a throwaway domain to test the waters, but I'm not expecting to use that for anything serious in the near future.

  • source
  • parent
  • [–] 4 points 1 week ago

    goodbye proton vpn, hello airvpn

  • source
  • [–] 4 points 1 week ago (1 child)

    The issue is he's correct in regards to business: the vast majority of people are clueless and will buy/use anything if the advertising is good enough.

  • source
  • hideshow 1 child comment
  • [–] 10 points 1 week ago

    "Yen, a former CERN particle physicist"..so his career as a physicist bombed and he figured he would try IT?

  • source
  • [–] 3 points 1 week ago

    I have six months left on my protonmail. Started the move to mailbox.org yesterday. Signed up for oscura and need to set up my vaultwarden

  • source
  • [–] 2 points 1 week ago (4 children)
  • [–] 2 points 1 week ago (3 children)
  • [–] 1 point 1 week ago

    Considering what he said, I am a bit pissed that the AI stuff is basically the only thing that matters. Like he (and the first image) mentions that he spoke to an employee badly, but it is almost forgotten about with the larger part pleading that people don't think they use AI for everything. But if he can express so many repetitive things about AI, then he could address the actual human that wasn't "using AI more". I know the part that people are mad about is the idea of speed-running security with too much potential AI involved causing some profit drops from current and potential customers. Just kind of weirds me out how even in this plea he is using the topic of AI more than the fucked human behavior.

  • source
  • parent
  • [–] 2 points 1 week ago

    Goddammit... I just switched to Proton. I really don't know if I can handle switching again so soon.

  • source
  • [–] 2 points 1 week ago

    While I like AI, this fundamental rule is no different from a human coder: Do QA before letting it go live.

  • source
  • [–] -2 points 1 week ago (1 child)

    I mean, he ain't wrong.

    Shareholders don't value stability.or the lobg term. They value short term profit. What happens to the company or products after is less than an afterthought.

    Even though it dies with the person affected by it, cancer always wins by killing its host in the end. And clearly, in the CEO's eyes, so should Proton.

  • source
  • hideshow 1 child comment
  • [+] -8 points 1 week ago

    I'm OK with supporting fascists, Nazi's and Americans, but AI is where I draw the line

    -Lemmy, probably.

  • source
  • 212 comments in c/technology@lemmy.world view that post
    86 comments in c/protonprivacy@lemmy.world view that post
    32 comments in c/fuck_ai@lemmy.world view that post
    12 comments in c/privacy@lemmy.world view that post
    2 comments in c/privacy@lemmy.world view that post