Comment

Comment on Proton’s Lumo AI chatbot: not end-to-end encrypted, not open source

A_norny_mousse@feddit.org ⁨2⁩ ⁨days⁩ ago

For a critical blog, the first few paragraphs sound a lot like they’re shilling for Proton.

I’m not sure if I’m supposed to be impressed by the author’s witty wording, but “the cool trick they do” is - full encryption.

Moving on.

But that’s misleading. The actual large language model is not open. The code for Proton’s bit of Lumo is not open source. The only open source bit that Proton’s made available is just some of Proton’s controls for the LLM. [GitHub]

In the single most damning thing I can say about Proton in 2025, the Proton GitHub repository has a “cursorrules” file. They’re vibe-coding their public systems. Much secure!

oof.

Over the years I’ve heard many people claim that proton’s servers being in Switzerland is more secure than other EU countries - well there’s also this now:

Proton is moving its servers out of Switzerland to another country in the EU they haven’t specified. The Lumo announcement is the first that Proton’s mentioned this.

No company is safe from enshittification - always look for, and base your choices on, the legally binding stuff, before you commit. Be wary of weasel wording. And always, always be ready to move* on when the enshittification starts despite your caution.

* regarding email, there’s redirection services a.k.a. eternal email addresses - in some cases run by venerable non-profits.

source

Sort:hotnew top

Tetsuo@jlai.lu ⁨2⁩ ⁨days⁩ ago
Regarding the fact that proton stops hosting in Switzerland : I thought it was because of new laws in Switzerland and that they hzf not much of a choice ?

source
- DeathByBigSad@sh.itjust.works ⁨1⁩ ⁨day⁩ ago
  The law isn’t a law yet, its a just a proposal. Proton is still in Switzerland, but they said they’re gonna move if the surveillance law actually becomes law.
  
  source
loudwhisper@infosec.pub ⁨1⁩ ⁨day⁩ ago

Over the years I’ve heard many people claim that proton’s servers being in Switzerland is more secure than other EU countries

Things change. They are doing it because Switzerland is proposing legislation that would definitely make that claim untrue. Europe is no paradise, especially certain countries, but it still makes sense.

From the lumo announcement:

Lumo represents one of many investments Proton will be making before the end of the decade to ensure that Europe stays strong, independent, and technologically sovereign. Because of legal uncertainty around Swiss government proposals(new window) to introduce mass surveillance — proposals that have been outlawed in the EU — Proton is moving most of its physical infrastructure out of Switzerland. Lumo will be the first product to move.

This shift represents an investment of over €100 million into the EU proper. While we do not give up the fight for privacy in Switzerland (and will continue to fight proposals that we believe will be extremely damaging to the Swiss economy), Proton is also embracing Europe and helping to develop a sovereign EuroStack(new window) for the future of our home continent. Lumo is European, and proudly so, and here to serve everybody who cares about privacy and security worldwide.

source
ItsComplicated@sh.itjust.works ⁨1⁩ ⁨day⁩ ago
Switzerland has a surveillance law in the works that will force VPNs, messaging apps, and online platforms to log users’ identities, IP addresses, and metadata for government access

source
hansolo@lemmy.today ⁨1⁩ ⁨day⁩ ago
Really? This article reads like it’s AI slop reproducing Proton copy then pivoting to undermine them with straight up incorrect info.

You know how Microsoft manages to make LibreOffice pulls errors on Windows 11? You really didn’t stop to think that Google might contract out some slop farms to shit on Proton?

source