obelus · HackerTrans

2 tahun yang laludiscuss

If you're already using Proton Mail, you can also replace Google Password Manager with Proton Pass.

2 tahun yang laludiscuss

If you weren't doing anything wrong, just send an appeal if you haven't already https://proton.me/support/appeal-abuse

2 tahun yang laludiscuss

What are your sources here? Aside from Proton VPN being no-logs already being proved in court, Proton has third-party audits to back up their no logs claims: https://protonvpn.com/blog/no-logs-audit

obelus

2 tahun yang laludiscuss

One is an AI feature that you have to opt-in to, and includes the option to run locally.

The other is an optional self-custody wallet. They’re not an exchange and your wallet/Funds aren’t locked in with them.

They’re offering alternatives to big tech solutions which is kind of what they do.

obelus

2 tahun yang laludiscuss

Sharing a summary posted on Mastodon:

- is opt-in. You must actively choose to use this feature

- is open-source

- uses an open-source model

- does not use your data to train the model

- doesn't break existing zero-access-encryption

- runs locally on supported devices

- can be run on a Proton-provided no-log server if you choose to

From my understanding Scribe doesn't do anything unless you enter a prompt. And before that you have still have to choose between local or server side before you can even use it.

There's also a toggle to remove it from the UI.

obelus

2 tahun yang laludiscuss

obelus

2 tahun yang laludiscuss

They only have to comply with Swiss courts, but they're pretty up front about what they can and can't do, including suggesting Tor for anonymity, and the difference between Mail and VPN in Switzerland (VPN is no logs).

obelus

2 tahun yang laludiscuss

"we’re also pleased to announce the standalone native Safari browser extension."

obelus

2 tahun yang laludiscuss

Not only did they put their real apple email, but the recovery email itself is an optional feature (of which there are a few to pick from).

obelus

2 tahun yang laludiscuss

Proton responded to this in 2021: https://proton.me/blog/climate-activist-arrest

"the identity and location of the activist was already known to the French authorities. The fact that Proton Mail was not able to hand over any messages even under legal order proves that our encryption works, and very likely of great assistance to the activist in this case. Had they been using any other email provider, the outcome would have been very different.

"we also provide an onion site for anonymous access (we are one of the only email providers that supports this)."

They also updated the blog: "Update: In October 2021, Proton won a Swiss court ruling that email services are not telecommunications providers. Consequently, email services are not subject to the data retention requirements imposed on telecommunications providers and are exempted from handing over certain user data in response to Swiss legal orders."

obelus

2 tahun yang laludiscuss

Looks like they used their actual apple email as an (optional) recovery method in Proton Mail.

obelus

2 tahun yang laludiscuss

The recovery email is optional, the rest of the information was provided by Apple.

obelus

2 tahun yang laludiscuss

But requests have to meet Swiss standards, which makes all the difference.

obelus

2 tahun yang laludiscuss

But didn't this prove the opposite? An optional email recovery.. I think other companies would have been obligated to provide far more information, including emails etc..

obelus

2 tahun yang laludiscuss

A recovery email is optional, and Proton VPN is no logs.

obelus

2 tahun yang laludiscuss

But Swiss law can't make a request like that.

obelus

2 tahun yang laludiscuss

I personally keep a Yubikey on my keychain (pin protected) with backups for critical webauthn/passkeys.

obelus

2 tahun yang laludiscuss

You can store passkeys directly in Proton Pass and access them via mobile or desktop (which doesn't require additional hardware).

You can also keep a backup on a Yubikey as a webauthn passkey, protected with a pin which will self destruct after enough failed attempts.

A passkey is a cryptographic key pair that stores a private key pair (encrypted) in password manager/server or on a Yubikey etc..) and a public key that is stored on the originating service.

comments