News for hackers. Stuff that matters.
Re:Clarifications regarding arrest of climate activist by panarky on Monday September 06, 2021 @12:22PM (#28435252)
Their marketing copy still says "Anonymous. Opt out of tracking or logging of personally identifiable information".

And "Unlike competing email services, we do not track you."

Nowhere does it say "Unless your government asks the Swiss government then we'll capture, log and report every IP address you use".

Source: https://protonmail.com/security-details

Screenshot: https://imgur.com/a/gfUcYme

And this marketing copy was rewritten after this incident.

Before this incident it didn't say "opt out of tracking". How does one "opt out", by using Tor?

It used to say, in bold print, "No tracking or logging of personally identifiable information".

No weasel words about requiring the user to take some unspecified action to "opt out". No asterisks or caveats or warnings of any kind.

It also used to explicitly promise: "we do not record metadata such as the IP addresses used to log into accounts".

Now that part is mysteriously gone.

Pretty shitty to quietly flush this down the memory hole, then pretend nothing's changed, blaming and gaslighting users for not understanding.

Source: https://web.archive.org/web/20210607023937/https://protonmai...

Screenshot: https://imgur.com/a/R1muChN

Re:Clarifications regarding arrest of climate activist by OrvalWintermute on Monday September 06, 2021 @03:16PM (#28436963)
Appreciate the analysis!

I think PM's approach is more lipstick on a pig. It may be a good looking pig compared to the other pigs (gmail), but it is still a pig. Blue ribbon pigs are still a pig.

Am expecting some real change if PM wants my $.

Re:Clarifications regarding arrest of climate activist by luckylion on Monday September 06, 2021 @12:31PM (#28435363)
This point is weird. No reasonable person would understand that sentence to include "and we won't even comply with court orders".
Re:Clarifications regarding arrest of climate activist by panarky on Monday September 06, 2021 @01:06PM (#28435768)
Seems reasonable to understand "no tracking or logging" to mean that in the event of a government demand to produce records, they could honestly reply that no records exist.

Other email providers keep logs that they provide to governments when there's a legal order.

What's the point of bragging about "no tracking or logging" if you're just going to track and log like every other email provider if the government asks for it?

Re:Clarifications regarding arrest of climate activist by luckylion on Monday September 06, 2021 @03:02PM (#28436854)
> Seems reasonable to understand "no tracking or logging" to mean that in the event of a government demand to produce records, they could honestly reply that no records exist.

And they would. They don't keep those records. However, when a government agency shows up with a court order that states they have to cooperate and provide those records going forward they must comply.

> What's the point of bragging about "no tracking or logging" if you're just going to track and log like every other email provider if the government asks for it?

Again: a reasonable person would not assume that their email provider is a criminal enterprise that does not comply with the law.

Re:Clarifications regarding arrest of climate activist by lordlimecat on Monday September 06, 2021 @08:37PM (#28439611)
>Seems reasonable to understand "no tracking or logging" to mean that in the event of a government demand to produce records, they could honestly reply that no records exist.

No one with the least understanding of the internet could suppose that Protonmail could not be forced to provide the IP address associated with a user's login, which I assume is what happened here.

Re:Clarifications regarding arrest of climate activist by orestarod on Tuesday September 07, 2021 @12:03PM (#28446367)
They did promise that, though. One lie leads to infinite more.