Technology

59578 readers

3015 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

509

Proton Mail Discloses User Data Leading to Arrest in Spain (restoreprivacy.com)

submitted 6 months ago by RedditEnjoyer@lemmy.world to c/technology@lemmy.world

108 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] TheTimeKnife@lemmy.world 51 points 6 months ago (1 children)

Doesn't look like Proton did anything wrong, they can't fight these requests and he was caught by identifying information he linked to his account.

[–] crewman_princess@lemmy.sdf.org 2 points 6 months ago (3 children)

They could disclose the fact that they might need to give that info to authorities and warn users of that.

They never mention it here for example https://proton.me/blog/protonmail-threat-model

[–] nous@programming.dev 15 points 6 months ago* (last edited 6 months ago)

They do mention it on that page:

However, if presented with a valid order from a Swiss court involving a case of criminal activity that is against Swiss law, Proton Mail can be compelled to share account metadata (but not message contents or attachments) with law enforcement.

The only ever claim to encrypt message contents and attachments. And explicitly call out account meta data here as something they can hand over if requested by law enforcement. They also mention they are not good vs targeted and governmental level attacks:

There are, however, some risks for users facing a strong adversary, such as a government focusing all its resources on a very specific target.

And explicitly mention they might be compelled to log and give up information like ip adresses:

if you are breaking Swiss law, a law-abiding company such as Proton Mail can be legally compelled to log your IP address.

[–] sudneo@lemm.ee 7 points 6 months ago

https://proton.me/legal/law-enforcement

Here the mention clearly the data mentioned in the privacy policy which in turns clearly states that you MAY provide a recovery account which will be associated with your account. I also think that anybody that should be concerned for this should understand that law enforcement can get ALL the data the company has on you.

[–] SaltySalamander@fedia.io 2 points 6 months ago

It's basic common sense. I understand that some people simply don't have any.