Comment on Proton’s Lumo AI chatbot: not end-to-end encrypted, not open source
loudwhisper@infosec.pub 3 weeks agoThey compare it to proton mail and drive that are supposedly e2ee.
Only drive is. Email is not always e2ee, it uses zero-access encryption which I believe is the same exact mechanism used by this chatbot, so the comparison is quite fair tbh.
DreamlandLividity@lemmy.world 3 weeks ago
Well, even the mail is sometimes e2ee. Making the comparison without specifying is like marketing your safe as being used in Fort Knox and it turns out it is used for payroll documents like in every company. Technically true but misleading as hell. When you hear Fort Know, you think gold vault. If you hear proton mail, you think e2ee even if most mails are external.
loudwhisper@infosec.pub 3 weeks ago
Email is almost always zero-access encryption (like live chats), considering the % of proton users and the amount of emails between them (or the even smaller % of PGP users). Drive is e2ee like chat history. Basically I see email : chats = drive : history.
Anyway, I agree it could be done better, but I don’t really see the big deal. Any user unable to understand this won’t get the difference between zero-access and e2e.