• According to Whittaker, the bill requires the encrypted messaging app Signal to install so-called backdoors in the software.
  • harsh3466@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 months ago

    Is this law broad enough to also catch up Proton and its services?

    This attack by governments on encryption is getting more and more concerning.

    • philpo@feddit.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 months ago

      Proton is a company claiming to operate under Swiss law (which is doubtful,as the company itself is US based).

      Sadly Swiss data privacy laws are shit and it’s intelligence agencies are known for overreach, especially when it comes to cross border data traffic.

        • sudneo@lemm.ee
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          3 months ago

          Sci-fi writing in here I see

          EDIT: For the downvoters:

          • He clearly didn’t support Trump in general, but he did praise Trump’s pick for the antitrust position.
          • Proton code for the clients is opensource, so it’s not possible to add backdoors without being discovered (encryption happens in the clients).
          • Proton business model is inherently disincentivizing them to do so. They are a profitable company with a clear profile that would lose so many customers if they decide to do so.
          • Proton is incorporated in Switzerland, it’s unclear what the benefit would be to “appease” Trump.
          • Proton is controlled by a nonprofit. In the board of this nonprofit there are people like Carissa Veliz (author of “Privacy is power”) and Tim Berners Lee. So even if Andy Yen was a full on MAGA, he still wouldn’t have autonomy to decide that. Note that he ceded control himself.
          • There is absolutely nothing in the history of Proton that suggests they would be open to backdooring their software.
          • There is a long track record of choices to protect users’ privacy. This also includes yearly substantial donations to nonprofits who work in this space.

          If this is not enough, I don’t know what is, but for sure the baseless accusations of a random user shouldn’t be enough as well.

          • rumba@lemmy.zip
            link
            fedilink
            English
            arrow-up
            0
            ·
            3 months ago

            He clearly didn’t support Trump in general

            lie

            so it’s not possible to add backdoors

            lie

            Proton business model is inherently disincentivizing them to do so. They are a profitable company with a clear profile that would lose so many customers if they decide to do so.

            Didn’t work on you

            Proton is incorporated in Switzerland, it’s unclear what the benefit would be to “appease” Trump.

            Straw man

            So even if Andy Yen was a full on MAGA, he still wouldn’t have autonomy to decide that.

            being a non profit and him owning enough of it to do what he wants are unrelated.

            There is absolutely nothing in the history of Proton that suggests they would be open to backdooring their software.

            https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/

            There is a long track record of choices to protect users’ privacy.

            Tell that french activist they turned logging on for and gave up to the authorities.

            • Miaou@jlai.lu
              link
              fedilink
              English
              arrow-up
              1
              ·
              3 months ago

              If y’all are expecting (and relying on) legal businesses to tell police raiding their offices to fuck off, then you clearly don’t understand secops.

            • sudneo@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              ·
              3 months ago

              lie

              We have the tweet, the context, his direct statements saying he didn’t. You have your own interpretation. See also https://medium.com/@ovenplayer/does-proton-really-support-trump-a-deeper-analysis-and-surprising-findings-aed4fee4305e

              so it’s not possible to add backdoor

              lie

              Quoting an incomplete sentence is peak bad faith. Please, elaborate on how they can backdoor the email communication without the change be visible in the clients. Take a proton to proton communication, and show me how they can backdoor the PGP encryption. I will propose 2 ways:

              • maliciously patch the JS code of the webmail client, which will show the change in the browser, network communications etc.
              • simply backdoor the client which will make it visible in the repo.

              Didn’t work on you

              Because they didn’t do anything that indicates they are violating my privacy. If they would, I would redirect my domain and drop them in a blink of an eye.

              Straw man

              It’s not a strawman lol. Pointing out the fact that it’s not evident what the advantage would be is an actual argument against saying that they would backdoor the software in compliance with trump’s wishes. Asking what the benefit is for such an immoral and illegal action seems reasonable to me?

              being a non profit and him owning enough of it to do what he wants are unrelated

              False. He gave away his stocks of the for profit company, which is now controlled by the nonprofit where he is 1 out of 5 (or 6?) In the board. A decision like this realistically will need to be approved by the board. Explain how he “owns enough to do what he wants” please.

              Tell that french activist they turned logging on for and gave up to the authorities.

              what would you expect any organization could do in that position? If there is a culprit there, it is the government. Complying with legal orders (which BTW they are transparent about and they challenge lots of them too) is a requirement for a company to operate. There are 2 cases that I know of so far (in the other they have been forced to give all the data they had about a user, and the only data they gave was a recovery email address), and they are 100% expected. Unless you want to be a rogue organization, there is nothing you can do in those cases. This if anything is a good test that shows how little data they collect or have. Unfortunately for logs of VPN connection there is no technical solution that will ever prevent from logging data again (mullvad is now experimenting with a double tunnel, but that is just a small nuisance for law enforcement), like there is for encryption (I.e., encryption happened with keys we cannot retrieve, sorry can’t help you).

          • yyprum@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            0
            ·
            3 months ago

            How dare you go against the lemmy hive mind. We need to shit on Proton or you will be punished with negative numbers!

            • sudneo@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              3 months ago

              you will be punished with negative numbers!

              Thanks for making me chuckle.