News for hackers. Stuff that matters.

A comment on ProtonMail logged IP address of French activist after order by Swiss authorities. Parent comment

Re:ProtonMail logged IP address of French activist after ord... by southerntofu on Monday September 06, 2021 @11:17AM (#28434509)
> Their selling point is also that they have end-to-end encryption that they can't breach

They technically could, by serving you malicious JavaScript. And they have proven that they are willing to do that in order to get cozy with law enforcement, even for a very obvious case of unfair political repression.

[ Parent | on HN ]
Re:ProtonMail logged IP address of French activist after ord... by geewee on Monday September 06, 2021 @03:12PM (#28436931)
That's a fair statement - I think it then comes down to: Can you by law in Switzerland order someone to serve malicious JavaScript, or only to e.g. deliver information you already have?
[ Parent | on HN ]
Re:ProtonMail logged IP address of French activist after ord... by southerntofu on Monday September 06, 2021 @04:20PM (#28437615)
In the present case, ProtonMail was compelled to backdoor its system to log an IP it did not log previously, so it's arguably closer to the former situation you presented.
[ Parent | on HN ]
Re:ProtonMail logged IP address of French activist after ord... by protonmail on Monday September 06, 2021 @06:00PM (#28438572)
No, this is not permitted in Switzerland.
[ Parent | on HN ]
Re:ProtonMail logged IP address of French activist after ord... by southerntofu on Sunday September 12, 2021 @05:20AM (#28499703)
Thanks for the clarification, and for making your homepage much more honest in regards to your privacy policy.

May i ask what's the difference in regards to the law between being compelled to modify your systems to record an IP address (which i heard was the fact in this case) and to backdoor OpenPGPJS? From my technical perspective it sounds exactly the same, but i'm unfamiliar with swiss law.

[ Parent | on HN ]