lemmyreader ,

https://mastodon.social/@protonprivacy/112401461102514792 May 07, 2024, 19:29

The name/address of the terrorism suspect was actually given to police by Apple, not Proton. The terror suspect added their real-life Apple email as an optional recovery address in Proton Mail. Proton can't decrypt data, but in terror cases Swiss courts can obtain recovery email.

pineapplelover ,

That's why second backup email is optional.

Alk ,

This is non-news, like all tech companies, they are bound by law to do this. It happens more than 6000 times per year for Proton. However, this user just had bad opsec. Proton emails are all encrypted and cannot be read unless law enforcement gets your password, which Proton does not have access to. Even if Proton hands over all data.

GolfNovemberUniform ,
@GolfNovemberUniform@lemmy.ml avatar

Often they just need the user behavior data such as login date and time

impure9435 ,

Yeah, OPSEC is really important and over the years many people got caught because of bad OPSEC. PomPomPurin, the guy who ran BreachForums is a pretty good example of this: https://youtu.be/1fZWHeHICws

haui_lemmy ,
@haui_lemmy@lemmy.giftedmc.com avatar

Oof. So you need a recovery email that is not easily traceable if you need one at all. Thats tough.

SaltyIceteaMaker ,

I just have none at all

However i have a recovery phone number and gave them my payment information so theres that

haui_lemmy ,
@haui_lemmy@lemmy.giftedmc.com avatar

Got it. So its a persec issue? I guess ist depends on your threat level. the persons they are arresting seem to be activists. The question is how destructive their activism was. Not because they somehow deserve to be arrested. i cant judge that. But because they should consider better persec in that case. Its still sad to read that a privacy oriented email provider gives our your info.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • kbinchat
  • All magazines