Gina1d ago

Well, this is unfortunate.

"Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the [US] government when asked. Proton hid them from their privacy policy."

#proton #protonmail #digitalsovereigty #opensource

https://www.sambent.com/proton-meet-isnt-what-they-told-you/

Proton Meet Isn't What They Told You It Was

Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the government when asked. Proton hid them from their privacy policy.

Sam Bent
Show threadLatte macchiato  23h ago
@Gina will people ever learn proton is a massive fed honeypot or will this continue
Show threadTroed Sångberg21h ago

@privateger

Tell us more about these "feds" that break the encryption the linked article says is perfectly fine.

@Gina

Show threadLatte macchiato  20h ago
@troed @Gina
You don't need to break any encryption when E-mails arrive at your mailserver in perfect plain text lol
You are one swiss court order away from getting all of that stuff intercepted as it arrives.
Show threadTroed Sångberg20h ago

@privateger

I assume you think that "lol" somehow makes your post true?

Tell me more about how the Swiss privacy laws enable this "fed" honeypot. You know, for them to actually intercept they'll need a whole lot more than "someone wants to".

Or maybe you're simply posting FUD on a subject you have absolutely no knowledge of?

@Gina

Show threadLatte macchiato  20h ago
@troed @Gina
There is more than enough documentation on Proton sharing extensive metadata with authorities leading to arrests, multiple times. Do one search. At that point it doesn't matter whether you share message content, metadata is just as important.
Show threadTroed Sångberg19h ago

@privateger

I don't need to "do a search" since I know the subject. That's why I'm calling out your FUD.

@Gina

Show threadLatte macchiato  19h ago
@troed @Gina Okay bro. I'm sure you believe that.
Show threadTroed Sångberg19h ago

@privateger

Absolutely everyone who has any knowledge about the Swiss legal system and Proton's ownership knows they by definition cannot be a "massive fed honeypot" - which were your words.

"bro"

@Gina

Show threadLatte macchiato  19h ago
@troed @Gina Yeah, because no Swiss company has ever turned out to be a front.

Oh wait, Crypto AG. Whoops. How convenient too that Protons entire backend is fully closed source.
Show threadTroed Sångberg

@privateger

If we're just throwing out random accusations I guess you're FBI? I mean. Persons have been, before.

@Gina

Apr 3 at 5:59pmWeb
Show threadLatte macchiato  19h ago
@troed @Gina Last I checked I don't offer an email service offering privacy guarantees you cannot possibly keep while being based in a nation that has an MLAT agreement with the US. But I see this is going nowhere, so I guess we'll disagree forever.
Show threadTroed Sångberg19h ago

@privateger

Nah, this is not disagreement. You're simply wrong on the facts and the "massive fed honeypot" statement was incredibly stupid and you got caught out.

Take it as a lessons learned.

@Gina

Show threadLatte macchiato  19h ago
@troed @Gina
Uh-huh. ​​
Show threadTrev 11h ago

@troed @privateger @Gina

I moved my wife and I to Proton last year to avoid contributing to a company that builds systems for ICE and US Mil right before they started bombing school children

They may be able to figure out who I'm speaking to and when given any number of hazardous indicators of using the web, but are they actually able to intercept me via Proton? I expect that somebody, preferably Proton, would cross reference the article's claims. Google isn't welcome to my data any longer.

Show threadTroed Sångberg3h ago

@trevdev

Yeah I'm somewhat worried about the claims in the article - I would've expected Proton to be a bit more careful regarding where metadata ends up.

It seems to rely a lot on Livekit, and that's where I'm thinking the article might be assuming a bit too much. The French government are running their own open source project to replace Teams' video conferencing, named Visio, and they're also using Livekit. I doubt very much that the French aren't keeping all data inside the EU.

@privateger @Gina

Show threadgrrl_aex17h ago

@privateger @Gina @troed

"while being based in a nation that has an MLAT agreement with the US"

What encrypted service, based where, do you suggest then?

(List of countries with MLAT with the US for reference) https://www.justice.gov/criminal/criminal-oia/file/1498806/dl