A court record reviewed by 404 Media shows privacy-focused email provider Proton Mail handed over payment data related to a Stop Cop City email account to the Swiss government, which handed it to the FBI.

[404mediaco@mastodon.social]

A court record reviewed by 404 Media shows privacy-focused email provider Proton Mail handed over payment data related to a Stop Cop City email account to the Swiss government, which handed it to the FBI.

https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

[littlepolarbear@freeradical.zone]

@404mediaco
I guess I need to move to @Tutanota

[iampytest1@infosec.exchange]

@404mediaco It's not ProtonMail's fault; they have to follow the law.
If they just handed data over without being legally required to, that would be concerning, but that doesn't seem to be the case here.

[egonw@mastodon.social]

@iampytest1 @404mediaco it's was Proton's decision to move to USA jurisdiction, not?

[marion_grau@climatejustice.social]

@iampytest1 @404mediaco international law? why does that override the Swiss in this case?

[jrdepriest@infosec.exchange]

@marion_grau @iampytest1 @404mediaco

Edward Shone, head of communications for Proton AG, the company behind Proton Mail, told 404 Media in an email: “We want to first clarify that Proton did not provide any information to the FBI, the information was obtained from the Swiss justice department via MLAT. Proton only provides the limited information that we have when issued with a legally binding order from Swiss authorities, which can only happen after all Swiss legal checks are passed. This is an important distinction because Proton operates exclusively under Swiss law.” Functionally, though, the material was provided to the FBI.

[sylvie@gabriel.havfruefestning.com]

@iampytest1 @404mediaco For those who are threat modeling risks it’s worth noting this person was not charged with any crimes. So the US will request sensitive info that doesn’t lead to anything worth criminal charges, but Proton and the Swiss will hand it over without seemingly much protest

“404 Media is not publishing the person’s name because they don’t appear to have been charged with a crime, according to searches of court databases.”

Put another way, Proton and the Swiss will hand over user info of folks free of criminal charges to the US government.

[seb13@mamot.fr]

@LittlePolarBear @404mediaco @Tutanota

Or pay in cash or crypto and don't use a recovery adress but recovery codes instead.
Nothing new here. It's the same issue for all mail providers. Proton is pretty clear about those issues and provides some solutions at least.

[davecb@hachyderm.io]

@404mediaco Hmmn, I have a free account there, but there are arguably other ways for a Swiss court to identify me. IP would, but I use TOR.
Any thoughts folks, on how to de-anonymise me?

[proscience@toot.community]

@iampytest1

Wrong.

@404mediaco

[halfredgreenapple@mastodon.social]

@404mediaco It's worth reading

https://www.ivpn.net/blog/your-vpn-provider-wont-go-to-jail-for-you/

[halfredgreenapple@mastodon.social]

@404mediaco Your VPN provider will not go to jail for five dollars

https://www.ivpn.net/blog/your-vpn-provider-wont-go-to-jail-for-you/

[nomad@domum.social]

@iampytest1 @404mediaco You can't reveal what you don't know—that's where the mistake lies.

[iampytest1@infosec.exchange]

@egonw ProtonMail isn't based out of the US. The government of the country it is based out of demanded this information, and provided it to the FBI under a MLAT.

[azuaron@cyberpunk.lol]

@LittlePolarBear @404mediaco @Tutanota And if you pay for Tuta with your credit card, Tuta will also provide those payment details when compelled by a court order.

The key, with either service, is to pay anonymously.

[egonw@mastodon.social]

@iampytest1 ah, right. sorry, my bad

[iampytest1@infosec.exchange]

@NoMAD they can't not have payment information. They offer anonymouspayment options, and the free version doesn't require any PII at all.

[iampytest1@infosec.exchange]

@proscience in what way am I wrong?
I might have misread the article; if I did, I can edit my post.

[pierrette@mastodon.uno]

@LittlePolarBear @404mediaco @Tutanota
Same

[bill_halcyon1@mastodon.social]

@404mediaco so, even the respected Proton no longer guarantees privacy or security!