@protonprivacy@mastodon.social
@protonprivacy@mastodon.social avatar

protonprivacy

@protonprivacy@mastodon.social

A better internet starts with privacy & freedom.

Take control of your data with #ProtonMail, #ProtonCalendar, #ProtonVPN, #ProtonDrive, and #ProtonPass.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

skarfester, to random Spanish
@skarfester@framapiaf.org avatar

Sobre lo de estaría bien no perder de vista que la Guardia Civil se inventó cargos de terrorismo y un supuesto atentado contra el rey para solicitar la información.
https://elmon.cat/politica/tribunals/guardia-civil-ensarronar-apple-europolidentificar-xuxu-rondinaire-838172/

protonprivacy,
@protonprivacy@mastodon.social avatar

@xevhi @skarfester The name/address of the terrorism suspect was actually given to police by Apple, not Proton. The terror suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can't decrypt data, but in terror cases Swiss courts can obtain recovery email.

protonprivacy,
@protonprivacy@mastodon.social avatar

@sjoel No, login IP addresses are not logged by default, and yes, using Tor or a no-logs VPN like Proton VPN would effectively hide your real IP address. You can learn how to use Proton Mail more anonymously here: https://proton.me/blog/use-protonmail-anonymously

jonah, to random
@jonah@neat.computer avatar

If @protonprivacy is serious about the recovery email/numbers being optional, they should remove this non-dismissable (dark pattern) warning in their settings tbh

It's even worse now that it shows an orange dot on the security center sidebar icon in the inbox as well, there's no escape! Let me accept the risk!

protonprivacy,
@protonprivacy@mastodon.social avatar

@jonah

Thank you for the suggestion, we'll look into making this warning easier to dismiss.

You can also use an email address that you're not using for anything else as a recovery if your threat model requires it.

BrideOfLinux, to random
@BrideOfLinux@mastodon.opencloud.lu avatar

"As part of an investigation into people involved in the pro-independence movement in Catalonia, the Spanish police obtained information from the encrypted services Wire and Proton, which helped the authorities identify a pseudonymous activist, according to court documents obtained by TechCrunch": Encrypted services Apple, Proton and Wire helped Spanish police identify activist | TechCrunch https://techcrunch.com/2024/05/08/encrypted-services-apple-proton-and-wire-helped-spanish-police-identify-activist/

protonprivacy,
@protonprivacy@mastodon.social avatar

@BrideOfLinux @adingbatponder The individual in this case used their actual apple email as an optional recovery email.

Setting a recovery email is not required and we provide other options for recovery: https://proton.me/support/set-account-recovery-methods

delta, to random
@delta@chaos.social avatar

Delta Chat is an in-between project: often ignored as a messenger by e-mail companies/experts and then ignored by messenger companies/experts because of its use and interoperability with e-mail. As Heinz von Foerster once said: "If you are doing something genuinely new then don't ask the experts. If you do something that has already been done, then, by all means, ask the experts." FWIW many experts have verified Delta Chat's security mechanics https://delta.chat/en/help#security-audits :)

protonprivacy,
@protonprivacy@mastodon.social avatar

@adbenitez @jonah

Regarding 3rd party clients, you can do that on desktop, thanks to Proton Mail Bridge: https://proton.me/mail/bridge

On mobile, we cannot do that due to how our encryption works.

Regarding the case you shared, the name/address of the terrorism suspect was actually given to police by Apple, not Proton. The suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can't decrypt data, but in terror cases Swiss courts can obtain recovery email.

dilmandila, to email
@dilmandila@mograph.social avatar

Ever since I quit Google I've stopped receiving junk emails, used to come about 10 a day and would end up in promotions folder, or updates, or socials, which google created. Now, I get nothing. Only newsletters, some of which are industry related so I don't mind them.
#email #google #webdev

protonprivacy,
@protonprivacy@mastodon.social avatar

@carturo222 @dilmandila @thunderbird You can do it via Proton Mail Bridge: https://proton.me/mail/bridge If you have any questions, don't hesitate to contact us here.

TechCrunch, to random
@TechCrunch@mstdn.social avatar

Encrypted services Apple, Proton and Wire helped Spanish police identify activist https://tcrn.ch/3JQDI07

protonprivacy,
@protonprivacy@mastodon.social avatar

@stux @TechCrunch Setting a recovery email is optional.

We also provide other optional recovery options outside of email, more on this here: https://proton.me/support/set-account-recovery-methods

protonprivacy,
@protonprivacy@mastodon.social avatar

@stux @TechCrunch Nope, once it's gone, it's gone. 👍

1HommeAzerty, to random French
@1HommeAzerty@mamot.fr avatar

I know I can import my Firefox passwords into @protonprivacy, but what would be very cool is to be able to sync both. Proton pass has great features but is not as convenient to use as integrated Firefox password manager, even with the plugin installed. (In particular on Android.)

protonprivacy,
@protonprivacy@mastodon.social avatar

@1HommeAzerty Thanks for sharing your thoughts, we'll pass on the feature suggestion to the team for future consideration.

protonprivacy,
@protonprivacy@mastodon.social avatar

@lemmyreader Yes, the name/address of the terrorism suspect was actually given to police by Apple, not Proton. The terror suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can't decrypt data, but in terror cases Swiss courts can obtain recovery email.

cygnathreadbare, to random Spanish
@cygnathreadbare@retro.pizza avatar

@protonprivacy: "la legislación suiza nos permite rechazar cualquier orden judicial porque no tenemos obligación legal de almacenar logs, no almacenamos logs de nada, protegemos tus datos como dice nuestra FAQ."

Also @protonprivacy: Bueno a ver tu email alternativo no son "datos", no? Además eres activista de algo que no le gusta a tu gobierno, se siente jeje <enviando datos, borrando la frase sobre no almacenar logs de la FAQ>.

protonprivacy,
@protonprivacy@mastodon.social avatar

@cygnathreadbare You seem to confusing Proton VPN with Proton Mail. Proton VPN is no-logs as has been proven in independent audits and in court (https://protonvpn.com/blog/transparency-report - we don't have any info to share with law enforcement).

Proton Mail, being a communication service, is legislated differently, and we have always been clear what data we can and cannot protect, see: https://proton.me/legal/privacy and: https://proton.me/support/proton-mail-encryption-explained

posthumouspoet, to random
@posthumouspoet@hachyderm.io avatar

@protonprivacy Do you plan to update language on your products to be more clear about what is and isn't encrypted? Also, do you store change logs on your servers? For example, if I remove my recovery email, is it actually deleted, or is it still stored on your servers?

protonprivacy,
@protonprivacy@mastodon.social avatar

@posthumouspoet Yes, recovery addresses are only kept as long as they are needed by the owner of the account - as soon as you remove it from your account, it's removed from our systems too. You can also replace it with a different recovery method: https://proton.me/support/set-account-recovery-methods

You can learn what is and is not encrypted here: https://proton.me/support/proton-mail-encryption-explained

Regarding IP logging, you can find the details here: https://proton.me/legal/privacy (they are not logged by default)

protonprivacy, to random
@protonprivacy@mastodon.social avatar

deleted_by_author

    •
    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @pacogens Hi there, setting a recovery method is optional, more on this here: https://proton.me/support/set-account-recovery-methods

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @jik @jonah @AIBrain @doomy Setting a recovery email is also optional, more info here: https://proton.me/support/set-account-recovery-methods

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @jik @jonah @AIBrain @doomy Hi Jonathan, email is just one of several recovery options, rest assured your feedback has been passed along to the team.

    protonprivacy, (edited )
    @protonprivacy@mastodon.social avatar

    @pacogens Thanks for clarifying! We outline this in the first paragraph here: https://proton.me/mail/privacy-policy

    Note that It’s also important to differentiate that VPN is not classified as a communication tool in Switzerland — Proton VPN does not log IPs and there are no existing Swiss laws that can compel us to do so.

    Also, nothing is delivered easily: Swiss law is very restrictive, and there are many hurdles to jump through to get a court order.

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @leberschnitzel Proton stores minimal data and almost all data is end to end encrypted. You can find details in our privacy policy: https://proton.me/legal/privacy You can also check this article to see which data is stored encrypted and which cannot be: https://proton.me/support/proton-mail-encryption-explained

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @doomy From a technical perspective, one can't end-to-end encrypt or hash a recovery email as it needs to be accessible to send the recovery email, which is typically initiated by an unauthenticated user who has lost their password. In brief, if we did that, one wouldn't be able to use the recovery address for its intended purpose.

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @doomy Recovery addresses are also used to inform users in case suspicious login attempts or something of that sort has occurred, and for that we need to have access to the address itself. For the majority of users, anonymity is not a priority, but keeping attackers out is.

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @leberschnitzel The swiss law has limits which are quite strict, especially after our 2021 court victory: https://proton.me/blog/court-strengthens-email-privacy. We limit data retention, so support tickets are not stored forever, either. They have also never been requested.

    activeruser, to tech
    @activeruser@mastodon.social avatar

    @mullvadnet
    @protonprivacy

    Is ProtonVPN & Mullvad affected by this attack? I use both of these services on daily basis. If they affected how can I mitigate this? #tech #privacy #linux #proton #mullvad

    https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @activeruser We've looked into it and here are the results: https://mastodon.social/@protonprivacy/112411129477213219

    Mushi, to random
    @Mushi@col.social avatar

    https://restoreprivacy.com/protonmail-discloses-user-data-leading-to-arrest-in-spain/ anything to say @protonprivacy ?

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @Mushi The name/address of the terrorism suspect was actually given to police by Apple, not Proton. The terror suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can't decrypt data, but in terror cases Swiss courts can obtain recovery email.

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @Mushi There was no leak, Proton's services are not compromised. The recovery email is not mandatory, as you can see above. Proton stores minimal data and almost all data is encrypted in a way that we cannot access. You can find details in our privacy policy: https://proton.me/legal/privacy

    joeo10, to security
    @joeo10@mastodon.sdf.org avatar

    Nearly all VPNs are reportedly affected by this 22+ year old vulnerability per researchers at Leviathan. https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/

    I sent my preferred service in ProtonVPN (at @protonprivacy) an email about this and hope they respond to this serious claim. You should do the same for your preferred service (consumer, enterprise, self hosted too).

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @narunya @joeo10

    We've looked into it, here are the results: https://mastodon.social/@protonprivacy/112411129477213219

    leoboulton, to random
    @leoboulton@mastodon.social avatar

    I just read that @standardnotes was acquired by @protonprivacy . I am disappointed given I've been a happy user for over 5 years, with over 800 notes archived privately and used daily.

    I am looking for alternatives, and evaluating @obsidian @cryptee and (which I am very impressed with). Other suggestions, welcomed.

    protonprivacy,
    @protonprivacy@mastodon.social avatar

    @leoboulton Hi Leo, if you have additional info to share on what you were expecting on the roadmap and any issues with our marketing, we can pass it along to the team.

    We have a lot planned for 2024 across all the Proton products, and we're supported solely by subscribers, rather VC investors, advertisers and selling user data.

    You can also filter by 'completed' on User Voice to check out all the implemented community feature requests: https://protonmail.uservoice.com.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • anitta
  • mdbf
  • khanakhh
  • Youngstown
  • everett
  • slotface
  • rosin
  • vwfavf
  • hgfsjryuu7
  • kavyap
  • osvaldo12
  • thenastyranch
  • DreamBathrooms
  • PowerRangers
  • Leos
  • magazineikmin
  • Durango
  • GTA5RPClips
  • InstantRegret
  • tacticalgear
  • cubers
  • ngwrru68w68
  • ethstaker
  • cisconetworking
  • tester
  • modclub
  • normalnudes
  • provamag3
  • All magazines
    •