mjr

joined 1 month ago
[–] mjr@infosec.pub 0 points 1 month ago* (last edited 1 month ago) (5 children)

I don't know about 'should' but wasn't that the impression their marketing tried to give? Or at least that they would fight to defend user privacy for noble activists? But when challenged, its owners seem to have folded quicker than a strapontin.

[–] mjr@infosec.pub 0 points 1 month ago

And yet, legal entities are often found guilty of not complying with the law. I think people were expecting Proton to at least try to fight a morally-questionable court order.

[–] mjr@infosec.pub 12 points 1 month ago (28 children)

There are hundreds of truly-private alternatives, many with no company involved at all.

Such as...? I bet some ISPs or hardware maker companies are involved at some point.

[–] mjr@infosec.pub -1 points 1 month ago (1 children)

Do Swiss courts not allow any defence to be presented?

[–] mjr@infosec.pub 5 points 1 month ago (1 children)

The popular myth is that Swiss privacy law is so strong that banks can hide gold and profits for major criminals. It wasn't to Proton's benefit to correct that.

[–] mjr@infosec.pub 6 points 1 month ago (3 children)

There seems to be no suggestion yet that any crime was committed on/using ProtonMail itself. Just that it was a tool to track someone accused of offline crimes. So this comment feels like misdirection because there are probably options between being liable and effectively telling the cops where users are.

[–] mjr@infosec.pub 0 points 1 month ago* (last edited 1 month ago) (6 children)

They said things that led the unwary to trust they wouldn't. Remember, this isn't some terrorist mass-murderer they handed over, but apparently an anti-gentrification youth activist linked to Greta Thunberg's campaign groups.

Edit to add: in particular, Proton used to claim 'your privacy comes first' but this case suggests in reality, the Swiss government's help for French police comes first.

[–] mjr@infosec.pub 6 points 1 month ago

Tuta are also a for-profit company, aren't they? Just one that currently has better published positions than most. Use them, but make sure you keep a path to the exit door in view.

[–] mjr@infosec.pub 57 points 1 month ago (2 children)

Those apt commands are in a less-good order. It's usually better to update apt, then upgrade the system.

I upgrade as soon as reasonably possible after the notification appears, if the system isn't on auto-upgrade.

[–] mjr@infosec.pub 5 points 1 month ago (1 children)

It reads like "definitely should not happen" was indeed happening!

I wonder if some techs got a basic unencrypted test working, then a pointy haired boss moved them on to another project and it got deployed into use with no-one setting up the encryption.

[–] mjr@infosec.pub 2 points 1 month ago

You literally wrote that they don't represent you, so what else could I reasonably infer (not assume) from that? I bet you'd be more offended if I assumed you were lying in everything you wrote... but great thanks to you for petitioning them. It's up to us all to make our representatives care.

[–] mjr@infosec.pub 5 points 1 month ago* (last edited 1 month ago) (2 children)

Sorry, that's not how representative democracy works. You should tell them that, not us, and why.

view more: ‹ prev next ›