The platform has said its legally obliged to deny information requests from foreign authorities under Swiss law
You must log in or register to comment.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 84 users / day
- 537 users / week
- 1.5K users / month
- 6.58K users / 6 months
- 1 subscriber
- 2.31K Posts
- 53.5K Comments
- Modlog
Everything you need to know about so-called ‘Swiss Privacy’ we learned decades ago from Operation Thesaurus, AKA, Operation Rubicon. We learned that CIA operations and black budget banking are actually headquartered in the Swiss underground.
Operation Rubicon
https://en.wikipedia.org/wiki/Operation_Rubicon
Crypto AG
https://en.wikipedia.org/wiki/Crypto_AG
If you trust any third-party server to protect your privacy, you’re a rube. If you trust Proton Mail to protect your privacy, you’re a rube getting ‘crossed’ by the Swiss Rubi-con. Either you own your keys and your data on your computer or else you have no privacy. Someone else’s promise that your data will be ‘encrypted’ so they can’t decipher it is a hollow pledge. If you send any form of plaintext to a remote server, no matter how much they claim to encrypt it, you have zero assurance of data privacy.
Watch the phan boiz rage outlet!
#Cryptography #Cryptology #Encryption #Crypto #Protonmail #CryptoAG #Switzerland #CIA
So what should we do then? switch to something else? Host our own email service?
I really don’t know.
It depends upon your security needs and risk assessment.
Are you a whistleblower?
Are you handling confidential business, financial or legal communication?
Are you being monitored by state agents?
Are you sharing love letters with someone?
Are you discussing or transferring confidential records?
You have to look at and assess your use case before you can decide on a solution.
No matter what your risks are, every solution should ALWAYS include end-to-end encryption in which the parties own and control their own encryption keys and identity on their own devices, not in the cloud.
That is the baseline. Then depending on your situation there are other factors and solutions to consider on top of the baseline.
When you own and control your encryption keys on your own device, then no third party can turn over your keys to a hostile entity. If you encryption is dependent upon a third party, they own your encryption and you have zero security, no matter how much they promise you.
Here are a few secure communication software examples for consideration:
Onionshare: https://onionshare.org/
Retroshare: https://retroshare.cc/
Bitmessage: https://bitmessage.org
The website is trash can someone summarize?
In February, numerous schools in Chennai were targeted with hoax bomb threats sent via encrypted email service Proton Mail. The Indian government sought action against Proton Mail due to its misuse by malicious individuals. Swiss authorities intervened to prevent the platform from being blocked in India. Despite police efforts to trace the origin of the threats, Proton Mail’s encryption hindered investigations. The company refused to comply with Indian authorities’ requests for information, citing Swiss law. Proton Mail argued that blocking the service wouldn’t deter cybercriminals and could impede legitimate users. This incident isn’t the first time Proton Mail has faced controversy; it was previously blocked in Russia for similar reasons.
So they have also no idea how email works or this was political and the bombing was just a convenient excuse.
The site is trash my DNS blocked all their garbage so that’s good.
Jesus fucking christ this website is trash. Here i copy pasted the entire article so you don’t have to accept their privacy policy
It took the intervention of Swiss authorities to prevent the blocking of end-to-end encrypted email platform Proton Mail in India after the government sought action against the platform, which was being abused by bad actors to send hoax bomb threats.
In February, a senior Tamil Nadu Cyber Crime Wing police officer requested the Ministry of Electronics and Information Technology to block Proton Mail. An order was also sent to the platform.
This was after several schools in Chennai received hoax bomb threats on February 8. A police investigation found that the mails were sent through Proton Mail.
Even though the police sought information about the users who sent such emails, the cops faced a roadblock as the platform is encrypted end-to-end, which means users’ emails, files, calendar entries, and passwords had strong privacy protections.
In a blog post in March, Proton Mail said, “In response to hoax bomb threats that were sent through Proton Mail, some members of the Indian government suggested taking the extreme measure of blocking Proton…”
Mastek bags supplier spot in Digital Services Framework for UK’s Defence Ministry Mastek bags supplier spot in Digital Services Framework for UK’s Defence Ministry Government issues advisory on CCTV cameras over security concerns Government issues advisory on CCTV cameras over security concerns MeitY issues advisory on CCTV security, asks ministries to avoid suppliers with past breaches MeitY issues advisory on CCTV security, asks ministries to avoid suppliers with past breaches “The issue has been raised to the attention of the Swiss federal authorities, who have been in contact with the relevant Indian authorities to prevent the blocking of Proton Mail in India. Thanks to this assistance, Proton Mail apps and other Proton products are available in India,” the post said.
Moneycontrol has reached out to Proton with further queries and the article will be updated when a respond comes in.
In the blog, the encrypted email service provider also explained why it did not comply with information requested by Indian law enforcement authorities.
Under Swiss law, Proton is not allowed to transmit any data foreign authorities and had to reject requests “that are directly addressed to us”.
“However, Proton is legally obligated to respond to orders from Swiss authorities, who do not tolerate illegal activities conducted through Switzerland and may assist foreign authorities in cases of illegal activity, provided they are valid under international assistance procedures and determined to be in compliance with Swiss law,” the blog said.
The company added, “Blocking access to Proton Mail simply prevents law-abiding citizens from communicating securely and does not prevent cybercriminals from sending threats with another email service, especially if the perpetrators are located outside of India.”
This is not the first time that the Switzerland-headquartered company has courted controversy, especially for being abused by threat actors.
In 2020, the Russian government blocked the encrypted email provider after emails claimed that bombs were planted in public places.
Russia’s Federal Service for Supervision of Communications, Information Technology and Mass Media (abbreviated Roskomnadzor) said the bogus emails were responsible for “creating a real threat of mass disturbance of public order and causing great concern among citizens and public outcry”.
Seeing only the cookie selector already gave me eye cancer.
I can’t believe such abominations are even legal.
Thanks. I read the article in firefox so uBP removed most of the ads but in chrome I can see how trash this website is.
Pretty weird that so many people in a privacy community apparently use neither Firefox nor a decent ad-blocker when browsing the web. Like you, I had no problems accessing the article…
Mobile and Firefox with uBlock, but still a trash site. And on desktop it redirects you to some login page first, wtf.
I don’t know what’s happening in India. I heard they blocked VLC & all VPN, some time back. Now they have blocked Protonmail.
When I read VLC I thought it was a typo. Then I searched for it. Couldn’t find any official reason, is it known it or only speculated?
removed by mod
Just FYI, in India the president (head of the state) is more or less a ceremonial figure. It’s the prime minister (head of the government) that you’re probably talking about.
Probably trolls being trolls or just the usual things governments like to do: ban anything and everything they don’t understand or like.
Soon the goons from the govt will create a made up case (a big one this time), so they can get an excuse to ban proton. Then vpn…then tor…if modi and his bf amit get a 3rd term, india will go from electoral autocracy to proper dictatorship.
What? I’m pretty sure encryption does not work that way, does it? Can someone explain this?
They basically can’t see/display any of the contents of your emails/calendars/etc. is the super short answer.
But if someone sent a threat using their platform all that is really required is the information who owns the account that sent it which is information that should still be available even with an end-to-end encrypted service.
We can debate all we want but clearly it’s enough of a hurdle that the Indian government tried to block Proton’s services entirely. Legal standards and what we consider “logical conclusions” aren’t always the same thing either so I imagine that’s where a lot of the nuance lies here. Without knowing exactly what happened I don’t think either of us can really parse this beyond what we now know about the Indian government’s efforts to block Proton’s services.
It’s stored with zero-knowledge encryption, which means the server only receives enough information to authenticate the user, but otherwise has no ability to decrypt the user’s files. Proton has an explainer.
What a crap site.
https://web.archive.org/web/20240419051951/https://www.moneycontrol.com/news/technology/swiss-authorities-intervene-proton-mail-not-blocked-in-india-12672231.html