RE: https://mastodon.social/@404mediaco/116178581339270397

Proton is a honey pot. If you are using it as an activist you should think twice about what its actually providing you.

heres the full article behind the paywall https://archive.ph/gx6U4 (yes I know archive.today has some serious issues too, but I don't have a better source to unpaywall links yet)
Proton doxxed @defendATLforest directly to the Swiss authorities which then handed the information directly to the FBI. The police have KILLED people defending the forest there. Tortuguita died for this movement https://en.wikipedia.org/wiki/Killing_of_Tortuguita
Killing of Tortuguita - Wikipedia

Hey @thefinalstrawradio, yall should probably cover this Proton situation...
@liaizon proton appears less a honeypot than a business that operates in legal jurisdictions under a TOS, required to give info they have to governments during investigations.
Movements and individuals shouldn't consider info they give up safe to such a project (payment info, legal IDs, contact info).
Such concerns require services where anonymous payment is possible or no payment is required
This thread gives some smart challenges to the question of security v useability
https://bsky.app/profile/activistchecklist.org/post/3mgdwg4zn5c2d
ActivistChecklist.org (@activistchecklist.org)

🧡 Today’s news: Proton turned over payment info for a Stop Cop City account. Not good β€” it's state repression in action. Controversial opinion: We don't think this means all activists should abandon Proton for docs/email. It depends on your threat model. Let's explore. (Long thread incoming πŸ‘‡) [contains quote post or other embedded content]

Bluesky Social
@thefinalstrawradio @liaizon so what's a good alternative?
@MousyAesthete @liaizon the link I edited in above gives a few options but more importantly suggests threat assessment to guide you to the option that makes the most sense for your needs.
Take away: the tradeoff between ease of use and likely need/threat needs to be balanced out
@thefinalstrawradio @liaizon thank you. Threat modelling is always the first step when thinking about privacy, and email seems like it's always the wrong tool for the kinds of communications that a hostile state actor would want to get access to. I think what's concerning about Proton (and I say this as a Proton user) is that their marketing has always made or at least implied claims that they can't possibly achieve given the nature of email