rahaeli

I responded to the last question! It reduces systemic inflammation

I mean, your opsec decisions are yours, my dude, but I personally would not choose "the service where your login information is available to literally anyone and everyone for like $200 tops".

Like, if the Yandex account is old enough, which is usually 1-2 years because those dumps lose value *fast*, you don't even need to buy the dumpfile, it's just available for anyone who knows where to look. (DHS knows exactly where to look.)

...you know that Yandex is 100% suborned by the Russian government, which has loggers installed in every data center in Russia, and there is a thriving market for the passwords of anyone who uses it sold by enterprising datacenter and FSB employees, right? Please tell me you know that.

People are blaming Proton for an activist who should have known better having shitty opsec! And the dude didn't even get charged with anything! If you're going to do a thing cops might object to, you need to know the bare minimum like "don't pay for anything with your own credit card, Jesus Christ".

This is not Proton's fault. They have been exquisitely clear all along what legal scenarios would result in them disclosing payment information, and they've always made it incredibly clear that people who need to remain anonymous need to use cash or crypto payments.

I guarantee whatever answer you give me, their privacy practices are going to be a million times worse than Proton's.

Do you really think the full contents of your inbox is *less* identifying than a credit card? Also, I'm not just talking about Gmail, but okay, you need to create an email to do Things Cops Object To right this second, what "free webmail provider" are you gonna use?

also, as a Proton customer who actually read the text of the privacy policy and all their FAQs, I can confirm it was not "in the fine print"; they are very very explicit about what the threshold for domesticating a subpoena is under Swiss law and when it will apply.

Like, I genuinely don't know what else they could have done here to make people understand other than a giant banner across the payment page that says "IF YOU'RE DOING SOMETHING THE COPS MIGHT CARE ABOUT, CHECK YOUR OPSEC" in purple sparkly flashing lights.

I just can't agree with you that Proton's response is defensive. It's the plain truth! It's all over their signup process! They are incredibly candid about privacy, risk, and the intersection of Swiss and rest-of-world law, and they repeat it regularly!

Friend, the "generic free webmail" will hand over the entire contents of your entire email account including deleted messages to anyone who can sufficiently impersonate a law enforcement officer

It me, spending five years getting increasingly more frustrated by my father on gmail texting me and saying "your email's broken again" and me going "No it's not, yours just likes to make up new rules randomly"

Who have entirely too goddamn much of the market share and anything that pries people away from them is a good thing!

Alas, I live in the real world :(

I mean, I too would like court orders I dislike to not apply to me! My life would be so much less full of stress if I could just ignore them!

Oh, I see, you are simply angry that someone didn't firebomb the Walmart for you.

Cosigned on all of the above! What broke me was when gmail started randomly preventing people from emailing ME, not preventing me from emailing THEM. Did they say why? Indeed they did not.

You just can't do your own email anymore unless you're a masochist who can recite entire RFCs backwards and forwards and who has a spare 30 hours a week to troubleshoot when it breaks. It's literally impossible. And given that, Proton is the best choice by far.

We are, sadly, well past the days of self-hosted email being viable if you want to communicate with *anyone*. I held out long past where anyone rational would have given up, because I am stubborn as fuck, and it finally broke even me.

Google confirms fraudulent account created in law enforcement portal Google has confirmed that hackers created a fraudulent account in its Law Enforcement Request System (LERS) platform that law enforcement uses to submit official data requests to the company

Compared to what, say, Google will give out on users as long as someone can impersonate law enforcement convincingly enough (which has happened! Within the last six months, even! www.bleepingcomputer.com/news/securit...) there is absolutely no question, Proton is it.

Also, uh, "not following court orders obtained through due process as established by the rule of law just because we don't like them" is kinda what we're all mad at the current administration for

--but one "not the worst pick he could have made" tweet means someone is gung-ho all in on the MAGA express? Have you, uh, looked at any of the tweets the CEOs of other hosted email services have made in the last year? Like, at all?

So all that money both he and the company gave to left-wing causes, the creation of the nonprofit foundation, the population of the board of that foundation with left-wing people (and the most diverse board in tech), etc, weren't their "true colors"--

The way this story is being reported is actively driving people to less safe options! That's what frustrates me! Proton genuinely is the most privacy-protective commercial email service by *far*, and implying that they're doing something nefarious is going to drive people to services that aren't.

Proton has never claimed to be bulletproof e-mail hosting and they've always, in every workflow I've ever seen, emphasized that they are subject to Swiss law and explain what that means for the threshold at which a subpoena will issue.

--without mentioning that other email providers don't even always require the freaking subpoena in the first place *and* are not E2EE so the provider can even hand over the actual text of email if a judge can be talked into a Stored Communications Act warrant is actively disingenuous.

I think any news story that makes a big fuss about a company complying with a subpoena that's been through two countries' court systems and that still could only disclose the payment records the company clearly warns you may compromise your identity and offers multiple alternatives to pay them--

Like, Google has a portal for it! You don't even need to be a registered LERS user! requestrecords.google.com/forms/edr -- they're very clear that in an "emergency" they'll hand out data upon request, without a subpoena.

Google confirms fraudulent account created in law enforcement portal Google has confirmed that hackers created a fraudulent account in its Law Enforcement Request System (LERS) platform that law enforcement uses to submit official data requests to the company

Especially since a cybercrime group gained access to LERS within like the last six months! www.bleepingcomputer.com/news/securit...