Sender | Message | Time |
---|---|---|
20 May 2019 | ||
02:04:31 | ||
23 May 2019 | ||
08:59:39 | ||
18:25:31 | ||
25 May 2019 | ||
10:39:39 | ||
12:51:39 | ||
26 May 2019 | ||
20:06:17 | ||
20:08:18 | ||
27 May 2019 | ||
ProtonVPN Blog: Which VPN protocol is the best? | 12:05:40 | |
29 May 2019 | ||
ProtonVPN Blog: ProtonVPN Reviews (list updated 2019) | 09:37:37 | |
ProtonMail Blog: Think you have nothing to hide? Filmmaker Marc Meillassoux says think again. | 13:19:50 | |
ProtonMail Blog: Response to false statements on surveillance made by Martin Steiger | 19:14:50 | |
30 May 2019 | ||
ProtonVPN Blog: Tell us where to install our next servers! | 12:32:37 | |
31 May 2019 | ||
14:12:19 | ||
18:11:26 | ||
1 Jun 2019 | ||
02:25:21 | ||
Redacted or Malformed Event | 02:26:24 | |
So what's up with this article? Does cast a shadow on services I pay a premium for? | 03:35:06 | |
In reply to @pr1sm:matrix.orgHopefully it will increase in the future :-) | 10:23:38 | |
In reply to @mpg:librem.oneWhich one? | 10:23:47 | |
If you refer to the article by Martin Steiger, well, as any service that you use (or any software for that matter), you have to put a certain amount of trust. If ProtonMail was a malicious actor, and discovered, they will lose their business in 1 day, because they focus on security (not necessarily on privacy). Can you limit the amount of trust to put into ProtonMail? Absolutely! Here is what you can do: -Fire up Tor, create a new account. It will ask you either for a telephone number, a donation (that must be done either with PayPal or Credit Card), or a mail verification. Choose the last one, search with DuckDuckGo or Searx temporary email, some are blacklisted, some will work. Take 10 mins time to figure out which one work, after that, you will have an account that is untied to you. -Now, the next logical step is to being able to move away from ProtonMail should the need arise, you can do that with a custom domain. As I understand you are already a paid user, well, for those who aren't this step is unfortunately only possible with a paid account (after all, they will not survive with free accounts only), contact ProtonMail and arrange a payment in cash (it's possible), include your account name (obviously, generate a pseudorandom name, like you would with a password). -Get a domain name untied to you, you can register one through Njalla (also available as onion website), so that your name won't be tied to it. Point the domain to ProtonMail. -If you are afraid about backdoors or them capturing your GPG password, this is also an easy, but tricky one. Generate a GPG key on an offline computer (in the best scenario and if you can afford it, keep it airgapped), don't upload the key to ProtonMail, distribute only the public key, move the messages to the airgapped device (or at the very least, copy them and decipher locally. Depending on your threath model, you can go more paranoid or less, feel free to ask if you have any question (but understand that I am not a member of the ProtonMail team, just a regular user), By doing that though, ProtonMail won't be able to know you identity, even malicious JavaScript code won't affect you since you do the encryption/decryption offline, you can move to another provider at any time (by changing the MX records of your domain provider). Even if you are put under surveillance, what can they give away about you? The IP address comes from a Tor exit node (if you are doing it right), they will know that and they can't do anything about it (UNLESS you use the .onion version, in that way they won't have any information at all about who you are), the messages are encrypted (unless you don't use PGP/GPG, but there is another solution even to contain damage in that case, ask if you are interested), payment in cash doesn't leave any trace. | 10:38:54 | |
Consider that, Switzerland DOES have a surveillance program, which is called Onyx, but as far as publicly know not as thorough as Prism/Tempora and tools like that. Probably it does even collaborate with other intelligence agencies (I don't know that), but it's outside of the 14 eyes, and Switzerland is not at the time being a police state like the US or the UK are becoming, so there also this advantage. Other providers that seem trusthyworhty are Tutanota, Mailbox.org, and Riseup (though you will have an hard time getting an account if you don't have a friend that has one, they only work with invite codes). ProtonMail seems at the time being, the ideal solution even if you are extremely paranoid (note that they won't defend you if they get a courd order, they will either close your account or collaborate, otherwise they will have to shut down). It won't last forever nor is the perfect solution, but is one of the best that we have right now, in order to put a band-aid over this insecure mean of communication that E-Mail inherently is. | 10:43:27 | |
11:28:53 | ||
11:42:18 | ||
Very good nice to see a someone just as passionate. I agree with all you said. Entirely the fact that there is no perfect solution. I support both projects p and t and will continue to. I think the articles as I mentioned do cast a shadow. That is their intent but hopefully a short lived one. It's a balance of ease of use and we all know security at times gets in the way of convenience or ease of use. I think they both proton and tutanota have done a wonderful job on delivering services to the masses. You have to wonder which fortune 1000 firms lines the pockets of some of these authors? As they make it too easy for the "common folk" to be empowered and take back control. Good conversation, have an awesome day mate! | 13:43:19 | |
In reply to @mpg:librem.oneWhat to say, thank you for your kind words! That's right, especially the part of bringing the services to the masses, PGP exist from a really long time, but how many people know that it exist, let alone, how to use it? ProtonMail (and Tutanota) are gaining supporters, "hiding" the technical details from the masses that just want to have a service that work. You too, have a magnificent day pal :-) | 14:29:30 | |
5 Jun 2019 | ||
21:18:05 | ||
6 Jun 2019 | ||
ProtonMail Blog: ProtonMail v3.16 Release Notes | 11:27:04 | |
7 Jun 2019 | ||
12:03:55 | ||
12 Jun 2019 | ||
01:17:13 | ||
13 Jun 2019 | ||
ProtonVPN Blog: Why you might want to use a second phone number app | 16:08:37 |