Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
79 Indlæg 57 Posters 1 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • evacide@hachyderm.ioE evacide@hachyderm.io

    If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

    johnlogic@sfba.socialJ This user is from outside of this forum
    johnlogic@sfba.socialJ This user is from outside of this forum
    johnlogic@sfba.social
    wrote sidst redigeret af
    #59

    @evacide

    @protonprivacy would you please comment on this?

    1 Reply Last reply
    0
    • evacide@hachyderm.ioE evacide@hachyderm.io

      If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

      nbailey@mstdn.caN This user is from outside of this forum
      nbailey@mstdn.caN This user is from outside of this forum
      nbailey@mstdn.ca
      wrote sidst redigeret af
      #60

      @evacide I’m no fan of ProtonMail, or its trumpy ceo “andy88”, but I don’t think they should be expected to put themselves in legal danger for the sake of their customers. Maybe their marketing should make that clear, but no sane person should expect a for-profit company to go to jail for you.

      The law is wrong here, as it usually is with stuff like this. But they have to obey one way or another.

      chewie@mammut.gogreenit.netC 1 Reply Last reply
      0
      • evacide@hachyderm.ioE evacide@hachyderm.io

        If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

        awws@mastodon.socialA This user is from outside of this forum
        awws@mastodon.socialA This user is from outside of this forum
        awws@mastodon.social
        wrote sidst redigeret af
        #61

        @evacide I get Proton had little choice here complying with a legal Swiss court order and recording the data… my big question here is why the Swiss authorities complied with the FBI request on what looks like a (not across the details) legit protest group?

        Surely the fault here is at the feet of the Swiss government for cooperating with the FBI request?

        Sorry… much as I am not a big fan of Proton, this looks like they direct they were forced to, legally and only after court order.

        1 Reply Last reply
        0
        • schroedingerspossum@mastodon.socialS schroedingerspossum@mastodon.social

          @maya_b @evacide @cliffle

          All email providers that operate legally - including Tuta - must provide this info if they have it upon court request. If your threat model includes this risk, then having owners in a different country does not protect you at all.
          To be clear, I like Tuta, but I haven't seen any evidence yet that they wouldn't be forced to do the same if they operate there.

          choomba@social.tchncs.deC This user is from outside of this forum
          choomba@social.tchncs.deC This user is from outside of this forum
          choomba@social.tchncs.de
          wrote sidst redigeret af
          #62

          @schroedingerspossum @maya_b @cliffle This is exactly it. It's bad opsec to leave data your provider can hand over. Any company must and will comply with local law. It's your responsibility to not leave a paper trail. Proton, like a few other service providers like Mullvad, offers cash payments via mail. If you don't use that or stick to a free plan, that's on you.

          1 Reply Last reply
          0
          • caitp@mstdn.socialC caitp@mstdn.social

            @evacide so the only real solution is to run your own mail server, because corporations will always do this if pressured?

            de_treias@livellosegreto.itD This user is from outside of this forum
            de_treias@livellosegreto.itD This user is from outside of this forum
            de_treias@livellosegreto.it
            wrote sidst redigeret af
            #63

            @caitp @evacide it is not a solution because you have to pay someone to deploy your own server, such as the internet provider, or the VPS provider. The solution could be to pay corporations without a tracked method, if available.

            1 Reply Last reply
            0
            • rashunda@mastodon.socialR rashunda@mastodon.social

              @evacide It's even worse if you pay for Proton Mail and live in CH like I do (also citizen). It means they'll just turn my sh*t over to Bern. I wonder if they'd even inform me.

              nohillside@smnn.chN This user is from outside of this forum
              nohillside@smnn.chN This user is from outside of this forum
              nohillside@smnn.ch
              wrote sidst redigeret af
              #64

              @rashunda @evacide *Any* Swiss company will comply with a court order (as will other companies in other countries).

              1 Reply Last reply
              0
              • nbailey@mstdn.caN nbailey@mstdn.ca

                @evacide I’m no fan of ProtonMail, or its trumpy ceo “andy88”, but I don’t think they should be expected to put themselves in legal danger for the sake of their customers. Maybe their marketing should make that clear, but no sane person should expect a for-profit company to go to jail for you.

                The law is wrong here, as it usually is with stuff like this. But they have to obey one way or another.

                chewie@mammut.gogreenit.netC This user is from outside of this forum
                chewie@mammut.gogreenit.netC This user is from outside of this forum
                chewie@mammut.gogreenit.net
                wrote sidst redigeret af
                #65

                @nbailey @evacide maybe, but some people do the right thing.
                Without Ladar Levison, we may not have had the Snowden files: https://www.theguardian.com/commentisfree/2014/may/20/why-did-lavabit-shut-down-snowden-email

                This also vindicates why @Linux does not include them on his "outside US Jurisdiction" alternatives when people keep asking him why they aren't listed: https://codeberg.org/Linux-Is-Best/Outside_US_Jurisdiction/src/branch/main/Privacy_Focused_Email.md

                1 Reply Last reply
                0
                • evacide@hachyderm.ioE evacide@hachyderm.io

                  If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

                  tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                  tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                  tragivictoria@mastodon.catgirl.cloud
                  wrote sidst redigeret af
                  #66

                  @evacide@hachyderm.io what’s the full article? Because I am certainly not gonna make an account just to read this

                  mkljczk@pl.fediverse.plM riverpunk@defcon.socialR 2 Replies Last reply
                  0
                  • tragivictoria@mastodon.catgirl.cloudT tragivictoria@mastodon.catgirl.cloud

                    @evacide@hachyderm.io what’s the full article? Because I am certainly not gonna make an account just to read this

                    mkljczk@pl.fediverse.plM This user is from outside of this forum
                    mkljczk@pl.fediverse.plM This user is from outside of this forum
                    mkljczk@pl.fediverse.pl
                    wrote sidst redigeret af
                    #67
                    @tragivictoria @evacide that’s what an AI crawler would say
                    tragivictoria@mastodon.catgirl.cloudT 1 Reply Last reply
                    0
                    • chiraag@mastodon.onlineC chiraag@mastodon.online

                      @evacide This...seems perfectly normal? Like, what was Proton's alternative here?

                      tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                      tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                      tragivictoria@mastodon.catgirl.cloud
                      wrote sidst redigeret af
                      #68

                      @chiraag@mastodon.online @evacide@hachyderm.io Idk, to get shut down? People are pretending as if Tuta or Mailbox or other email provider would be different here.

                      1 Reply Last reply
                      0
                      • mkljczk@pl.fediverse.plM mkljczk@pl.fediverse.pl
                        @tragivictoria @evacide that’s what an AI crawler would say
                        tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                        tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                        tragivictoria@mastodon.catgirl.cloud
                        wrote sidst redigeret af
                        #69

                        @mkljczk@fediverse.pl @evacide@hachyderm.io You’re absolutely right — you got me!

                        1 Reply Last reply
                        0
                        • kdelta@ieji.deK kdelta@ieji.de

                          @evacide @Tekchip If you don’t want to be part of a conversation on an over dramatised news article maybe don’t post it then 🤔🤷‍♂️

                          kdelta@ieji.deK This user is from outside of this forum
                          kdelta@ieji.deK This user is from outside of this forum
                          kdelta@ieji.de
                          wrote sidst redigeret af
                          #70

                          @evacide @Tekchip Oh how petty that is. I think someone blocked me 😒🤭

                          1 Reply Last reply
                          0
                          • tragivictoria@mastodon.catgirl.cloudT tragivictoria@mastodon.catgirl.cloud

                            @evacide@hachyderm.io what’s the full article? Because I am certainly not gonna make an account just to read this

                            riverpunk@defcon.socialR This user is from outside of this forum
                            riverpunk@defcon.socialR This user is from outside of this forum
                            riverpunk@defcon.social
                            wrote sidst redigeret af
                            #71

                            @tragivictoria @evacide I will say that 404Media retains basically no info on you. They ask a name (you can lie if you want) and an email (if you're able, you can use a forward address to obscure your actual email). They don't save passwords, they just email a temp login code. And if you don't wanna risk being tracked across the site or the web, you can clear your site cookies afterwards to logout.

                            Still totally valid not to make the account, but i recently bit the bullet and did it, I was surprised how little info they accepted that might accidentally get leaked.

                            tragivictoria@mastodon.catgirl.cloudT 1 Reply Last reply
                            0
                            • riverpunk@defcon.socialR riverpunk@defcon.social

                              @tragivictoria @evacide I will say that 404Media retains basically no info on you. They ask a name (you can lie if you want) and an email (if you're able, you can use a forward address to obscure your actual email). They don't save passwords, they just email a temp login code. And if you don't wanna risk being tracked across the site or the web, you can clear your site cookies afterwards to logout.

                              Still totally valid not to make the account, but i recently bit the bullet and did it, I was surprised how little info they accepted that might accidentally get leaked.

                              tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                              tragivictoria@mastodon.catgirl.cloudT This user is from outside of this forum
                              tragivictoria@mastodon.catgirl.cloud
                              wrote sidst redigeret af
                              #72

                              @riverpunk@defcon.social @evacide@hachyderm.io so if they accept little to no info, why they require it in the first place?

                              riverpunk@defcon.socialR 1 Reply Last reply
                              0
                              • tragivictoria@mastodon.catgirl.cloudT tragivictoria@mastodon.catgirl.cloud

                                @riverpunk@defcon.social @evacide@hachyderm.io so if they accept little to no info, why they require it in the first place?

                                riverpunk@defcon.socialR This user is from outside of this forum
                                riverpunk@defcon.socialR This user is from outside of this forum
                                riverpunk@defcon.social
                                wrote sidst redigeret af
                                #73

                                @tragivictoria @evacide idk. I doubt they're selling it on the data brokerage market though, if that's what you're worried about.

                                I suspect it's a marketing on-ramp to convince avid readers to purchase a paid subscription (some articles have an actual paywall). Or maybe it's anti-scraping? Idk.

                                FWIW, they tend to be pretty radically pro-privacy, and they're like a 4 person crew, so pretty small independent news organization.

                                1 Reply Last reply
                                0
                                • evacide@hachyderm.ioE evacide@hachyderm.io

                                  If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

                                  bigpaperbag@infosec.exchangeB This user is from outside of this forum
                                  bigpaperbag@infosec.exchangeB This user is from outside of this forum
                                  bigpaperbag@infosec.exchange
                                  wrote sidst redigeret af
                                  #74

                                  @evacide

                                  Nobody wants to go to jail for you.

                                  Wasn’t it it the @thegrugq speaking about this tiny breadcrumbs leading to you in his #OPSEC presentation years ago….

                                  https://m.youtube.com/watch?v=L3j1AhS0iKI&pp=ygUiT3BzZWM6IGJlY2F1c2UgamFpbCB0aGUgZ3J1Z3Egc29ueQ%3D%3D

                                  1 Reply Last reply
                                  0
                                  • caitp@mstdn.socialC caitp@mstdn.social

                                    @evacide so the only real solution is to run your own mail server, because corporations will always do this if pressured?

                                    mhloppy@hachyderm.ioM This user is from outside of this forum
                                    mhloppy@hachyderm.ioM This user is from outside of this forum
                                    mhloppy@hachyderm.io
                                    wrote sidst redigeret af
                                    #75

                                    @caitp I guess in theory you could find a service that will shut down before complying (ala 2013 Lavabit), but I can't imagine there are many of them at any given time because, well, they'll shut down (by design) on a frequent basis. Not sure if better or worse than the headache of running it yourself. @evacide

                                    1 Reply Last reply
                                    0
                                    • waffles@masto.yttrx.comW waffles@masto.yttrx.com

                                      @caitp @evacide I run my own mail server and spammers have made deliverability impossible for lil guys like me.

                                      I run my own server out of Germany, but I also have to text all of my friends to check their spam folders whenever I email them 🥲🥲🥲

                                      eq@mas.toE This user is from outside of this forum
                                      eq@mas.toE This user is from outside of this forum
                                      eq@mas.to
                                      wrote sidst redigeret af
                                      #76

                                      @waffles

                                      It is possible to make it work even to google and hotmail but it takes dedication and constant upkeep sadly. And it does not anonymize you at all, rather the opposite.

                                      1 Reply Last reply
                                      0
                                      • cliffle@hachyderm.ioC cliffle@hachyderm.io

                                        @evacide I've been following the articles on this, and was curious -- you would know this better than I -- does it sound like they were in a position where they had a legal alternative?

                                        publicwondering@mastodon.me.ukP This user is from outside of this forum
                                        publicwondering@mastodon.me.ukP This user is from outside of this forum
                                        publicwondering@mastodon.me.uk
                                        wrote sidst redigeret af
                                        #77

                                        @cliffle @evacide All companies have to comply with the jurisdiction in which they are registered. In this case they complied with Swiss law, not the FBI directly, so the headline seems a bit misleading.

                                        The takeaway is: If you pay for any service in a traceable way, you are not anonymous. If you want to be anonymous, consider cash or Monero.

                                        1 Reply Last reply
                                        0
                                        • evacide@hachyderm.ioE evacide@hachyderm.io

                                          If you pay Proton Mail for a service, they may hand over the payment data in response to a court order: https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

                                          dnavinci@genomic.socialD This user is from outside of this forum
                                          dnavinci@genomic.socialD This user is from outside of this forum
                                          dnavinci@genomic.social
                                          wrote sidst redigeret af
                                          #78

                                          @evacide
                                          Governments of the world take note:
                                          A treaty with the US government is just voluntary compliance.
                                          It's clear they would only do the same for you if you donated to their ballroom bribe fund.

                                          #uspol

                                          1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper