all 21 comments

sorted by: hot top controversial new old
[–] 23 points 8 months ago

Honest a case of "Well Duh".

Proton is for data privacy, not true anonymity. They'll keep your data safe from data collectors and the like, but they still have to comply with the law if they want to continue being a business.

So ofc if you pay for your Proton account by conventional means tied to your identity, then your details are tied to your account. Proton says as much on their website.

The only way around that is to use a service like Posteo that accepts posted cash or cryptocurrency - where they physically can't know who you are. But even then you're busted if you ever access that account without a VPN... which you would also have to pay for with cash or cryptocurrency, and hope to god they have a robust no-logs policy.

  • source
  • [–] 18 points 8 months ago* (last edited 8 months ago)

    I'm still relatively new to Proton, but I thought I read early on that they would still have to comply with legal requests. I believed that their system was mostly in the realm of two secure accounts being able to hide the messages themselves. I use a card, so I am tied to my account. Does using whatever coin they take (if any) help with this? I remember reading they wanted to open more doors to alternate payment methods. I think it was to help privacy but also in large part so that they could still collect money if they ever get slapped down by other processors for making someone big mad for their privacy setup.

    EDIT: I thought I had replied to something like this before. Found it. https://a.lemmy.world/lemmy.world/post/15148279 It seems to me that some just overestimate what the service is.

  • source
  • [–] 58 points 8 months ago (12 children)

    Bad opsec. Of course Proton will comply with court orders. It's your responsibility to not leave data they can hand over.

  • source
  • hideshow 12 child comments
  • [–] [S] 20 points 8 months ago* (8 children)

    they shouldn't pretend to protect your privacy if they can't

    one time they did this and only then after changed their website where it said they wouldn't log your info

    https://technologymagazine.com/cloud-and-cybersecurity/protonmail-under-fire-over-data-handover

  • source
  • parent
  • hideshow 8 child comments
  • [–] 25 points 8 months ago (7 children)

    Payments are very different. Any company is required to keep track of their finances, the tax authorities don't fuck around. If you electronically pay for something and expect anonymity, you are not very, um, educated. If you feel like you need their paid plans, pay cash and only ever access it through TOR running Tails. I feel like that's a reasonable level of opsec for most activists.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 8 months ago* (4 children)

    You know that, I know that, people here probably know that.

    But out in the real world where people are doing real world activism and are concerned about real world problems, they don't necessarily know that. They are concerned about a whole lot of things that are not digital infrastructure and technology.

    They should be able to trust a service that promises security and anonymity for payment. In particular one that is touted as well renowned.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 8 months ago (1 child)

    They should be able to trust a service that promises security and anonymity for payment. In particular one that is touted as well renowned.

    Especially since other groups can manage it properly, e.g. Signal can't link transactions to a specific user account

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 8 months ago (1 child)

    Should is doing too much work here. Its been doing too much work for our society as a whole. While I agree with your idealist sensibilities I regret to inform you that this needs to stop, you cannot trust institutions built on corporate profit seeking. Like that's just a hard no, it changes on a dime to seek profit somewhere else

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 8 months ago*

    Hence the romanticism of migrating to Proton needs to be argued every time somebody brings it up. Obviously Proton VPN too is easily compromised. Teach people to spend their money on Mullvad or another service that is able to decouple payment from service account activities.

  • source
  • parent
  • protonmail without PGP only has encryption for other protonmail users

  • source
  • [–] 6 points 8 months ago (1 child)

    I can't read the article because it's behind a paywall, so I'll ask here: What information was handed over specifically? The IP address of when the account was created? The payment details? Unencrypted data? Login information? Device data? Something else?

  • source
  • hideshow 1 child comment
  • [–] 3 points 8 months ago
    [–] 3 points 8 months ago

    I can't read the full article because of the paywall, but duh? If you aren't paying physically or in crypto you can assume your government (and probably others!) already has that transaction on record, and to my knowledge those aren't totally secure either.

  • source
  • [–] 2 points 8 months ago

    Everybody seems to confuse privacy with anonymity. If Proton doesn’t comply with the law, Proton will cease to exist.

  • source
  • 97 comments in c/privacy@lemmy.ml view that post
    43 comments in c/actually_infuriating@lemmy.world view that post
    37 comments in c/privacy@programming.dev view that post
    33 comments in c/world@lemmy.world view that post
    32 comments in c/protonprivacy@lemmy.world view that post
    14 comments in c/privacy@lemmy.ml view that post
    11 comments in c/news@lemmy.world view that post
    4 comments in c/hackernews@lemmy.bestiver.se view that post