Proton Mail provided user data that led to an arrest in Spain

⁨130⁩ ⁨likes⁩

Submitted ⁨⁨6⁩ ⁨months⁩ ago⁩ by ⁨AnActOfCreation@programming.dev⁩ to ⁨technology@lemmy.world⁩

https://www.techspot.com/news/102981-proton-mail-provided-user-data-led-arrest-spain.html

Proton Mail assisted Spanish authorities in identifying and arresting a member of the Catalan independence organization Democratic Tsunami.
The company’s end-to-end encrypted email platform aims to protect user data, but recent events suggest potential vulnerabilities.
Proton Mail was also required to provide user data to Swiss authorities for a separate case involving a French climate activist, emphasizing the importance of proper Operational Security measures.

Also obligatory video: www.youtube.com/watch?v=iH626CXyNtE

source

Comments

Sort:hotnew top

fartington@lemm.ee ⁨6⁩ ⁨months⁩ ago
Proton CEO

The name/address of the terrorism suspect was actually given to police by Apple, not Proton. The terror suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can’t decrypt data, but in terror cases Swiss courts can obtain recovery email.

source
- barkingspiders@infosec.pub ⁨6⁩ ⁨months⁩ ago
  Thanks for posting this, it’s important people catch more than just the headline. This is clearly another example of proton delivering on their promise. Fucking headlines gonna headline.
  
  source
- cheese_greater@lemmy.world ⁨6⁩ ⁨months⁩ ago
  I mean, Proton was the necessary link. Not even like I fault them, people should realize email or any other 2-sided activity has 2 points of weakness.
  
  Dunno, just hate the way we lie without even lying nowadays. Mot sorry that Rubes get rubed
  
  source
  - just_another_person@lemmy.world ⁨6⁩ ⁨months⁩ ago
    There is no lying here. Adding real world identification that can be correlated to other accounts is the fault of the user. That’s being said, I’m glad Proton follows the letter of the law.
    
    source
Maven@lemmy.sdf.org ⁨6⁩ ⁨months⁩ ago
He got got because the user used an Apple ID that was linekd to their real identity, which is one of the things Proton is obligated to provide in cases like this.

Proton says all the time, they are obligated to comply with the letter of the law, so do not store anything identifiable anywhere they’re legally required to provide it. They tell you exactly what not to do, to avoid this precise case.

source
FaizalR@kbin.social ⁨6⁩ ⁨months⁩ ago
How many times I want to see this news? It ha been more than a week.

source
CaptnNMorgan@reddthat.com ⁨6⁩ ⁨months⁩ ago
What were the alleged crimes?

source
- cyrus@sopuli.xyz ⁨6⁩ ⁨months⁩ ago
  activism.
  
  source
helenslunch@feddit.nl ⁨3⁩ ⁨months⁩ ago
Not news. Proton complied with a lawful order. They do this thousands of times a year because they have no choice, nor does any other company.

source
jimmydoreisalefty@lemmy.world ⁨4⁩ ⁨months⁩ ago
Thanks for posting!

source
ThunderDevTesting@lemmy.ca ⁨6⁩ ⁨months⁩ ago
[deleted]
source
- possiblylinux127@lemmy.zip ⁨6⁩ ⁨months⁩ ago
  shutters
  
  source
ThunderDevTesting@lemmy.ca ⁨6⁩ ⁨months⁩ ago
[deleted]
source
- irreticent@lemmy.world ⁨6⁩ ⁨months⁩ ago
  You’ve passed the test!
  
  source