Is Protonmail logging my email content?

Re:Is Protonmail logging my email content? by ProtonTeam on Monday December 13, 2021 @08:05AM (#29539184)

Please be aware that we don't log email content (and we are also not vulnerable to Log4j). Our anti-spam systems do check for malicious links from third party email services so we can proactively warn users about phishing attempts.

[ Parent | on HN ]

Re:Is Protonmail logging my email content? by vasuki on Tuesday December 14, 2021 @05:29AM (#29550199)

This is definitely not precise. I confirmed that the lookup is also performed by Proton servers for mails sent to third party mail services, not just from third party mail services. Are they also scanned?

Source IP I got in my test: 185.70.43.80

```

# whois.ripe.net

inetnum: 185.70.40.0 - 185.70.43.255

netname: CH-PROTONMAIL-20140915

mnt-by: protonmail-mnt

org-name: Proton AG

```

From privacy policy https://protonmail.com/privacy-policy

> We do NOT have access to encrypted message content, but unencrypted messages sent from external providers to ProtonMail are scanned for Spam and Viruses to pursue the legitimate interest of the protection of our users.

very disappointing.

[ Parent | on HN ]

Re:Is Protonmail logging my email content? by top_sigrid on Monday December 13, 2021 @10:20AM (#29540322)

If you are not vunerable to log4j, how did the screenshots come about?

[ Parent | on HN ]

Re:Is Protonmail logging my email content? by TYMorningCoffee on Monday December 13, 2021 @10:25AM (#29540383)

I believe ProtonTeam's claim is that the spam filter visits the links in the email content. As a result, it's not the log4shell vulnerability making the connection, it's the spam filter.

[ Parent | on HN ]

Re:Is Protonmail logging my email content? by adamhp on Tuesday December 14, 2021 @08:41AM (#29551348)

I.e. try to send some e-mails without the log4j vuln syntax (just put your IP) and see if you still get hit. It's just the fact that there is the IP, not that it happens to use the jndi syntax.

[ Parent | on HN ]

Re:Is Protonmail logging my email content? by YXNjaGVyZWdlbgo on Monday December 13, 2021 @10:35AM (#29540494)

Cum hoc ergo propter hoc

[ Parent | on HN ]

[dead]

Re:Is Protonmail logging my email content? by dang on Tuesday December 14, 2021 @05:03PM (#29558627)

You can't attack others like that on HN, regardless of how right you are or you feel you are. Please review https://news.ycombinator.com/newsguidelines.html and don't post like this again.

You may not feel you owe your target better, but you owe this community much better if you're participating in it. The damage this sort of poison causes to the ecosystem greatly exceeds any benefits it may have.

[ Parent | on HN ]