• According to Whittaker, the bill requires the encrypted messaging app Signal to install so-called backdoors in the software.
      • sudneo@lemm.ee
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        3 months ago

        Sci-fi writing in here I see

        EDIT: For the downvoters:

        • He clearly didn’t support Trump in general, but he did praise Trump’s pick for the antitrust position.
        • Proton code for the clients is opensource, so it’s not possible to add backdoors without being discovered (encryption happens in the clients).
        • Proton business model is inherently disincentivizing them to do so. They are a profitable company with a clear profile that would lose so many customers if they decide to do so.
        • Proton is incorporated in Switzerland, it’s unclear what the benefit would be to “appease” Trump.
        • Proton is controlled by a nonprofit. In the board of this nonprofit there are people like Carissa Veliz (author of “Privacy is power”) and Tim Berners Lee. So even if Andy Yen was a full on MAGA, he still wouldn’t have autonomy to decide that. Note that he ceded control himself.
        • There is absolutely nothing in the history of Proton that suggests they would be open to backdooring their software.
        • There is a long track record of choices to protect users’ privacy. This also includes yearly substantial donations to nonprofits who work in this space.

        If this is not enough, I don’t know what is, but for sure the baseless accusations of a random user shouldn’t be enough as well.

        • yyprum@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          0
          ·
          3 months ago

          How dare you go against the lemmy hive mind. We need to shit on Proton or you will be punished with negative numbers!

          • sudneo@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            3 months ago

            you will be punished with negative numbers!

            Thanks for making me chuckle.

        • rumba@lemmy.zip
          link
          fedilink
          English
          arrow-up
          0
          ·
          3 months ago

          He clearly didn’t support Trump in general

          lie

          so it’s not possible to add backdoors

          lie

          Proton business model is inherently disincentivizing them to do so. They are a profitable company with a clear profile that would lose so many customers if they decide to do so.

          Didn’t work on you

          Proton is incorporated in Switzerland, it’s unclear what the benefit would be to “appease” Trump.

          Straw man

          So even if Andy Yen was a full on MAGA, he still wouldn’t have autonomy to decide that.

          being a non profit and him owning enough of it to do what he wants are unrelated.

          There is absolutely nothing in the history of Proton that suggests they would be open to backdooring their software.

          https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/

          There is a long track record of choices to protect users’ privacy.

          Tell that french activist they turned logging on for and gave up to the authorities.

          • Miaou@jlai.lu
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 months ago

            If y’all are expecting (and relying on) legal businesses to tell police raiding their offices to fuck off, then you clearly don’t understand secops.

          • sudneo@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 months ago

            lie

            We have the tweet, the context, his direct statements saying he didn’t. You have your own interpretation. See also https://medium.com/@ovenplayer/does-proton-really-support-trump-a-deeper-analysis-and-surprising-findings-aed4fee4305e

            so it’s not possible to add backdoor

            lie

            Quoting an incomplete sentence is peak bad faith. Please, elaborate on how they can backdoor the email communication without the change be visible in the clients. Take a proton to proton communication, and show me how they can backdoor the PGP encryption. I will propose 2 ways:

            • maliciously patch the JS code of the webmail client, which will show the change in the browser, network communications etc.
            • simply backdoor the client which will make it visible in the repo.

            Didn’t work on you

            Because they didn’t do anything that indicates they are violating my privacy. If they would, I would redirect my domain and drop them in a blink of an eye.

            Straw man

            It’s not a strawman lol. Pointing out the fact that it’s not evident what the advantage would be is an actual argument against saying that they would backdoor the software in compliance with trump’s wishes. Asking what the benefit is for such an immoral and illegal action seems reasonable to me?

            being a non profit and him owning enough of it to do what he wants are unrelated

            False. He gave away his stocks of the for profit company, which is now controlled by the nonprofit where he is 1 out of 5 (or 6?) In the board. A decision like this realistically will need to be approved by the board. Explain how he “owns enough to do what he wants” please.

            Tell that french activist they turned logging on for and gave up to the authorities.

            what would you expect any organization could do in that position? If there is a culprit there, it is the government. Complying with legal orders (which BTW they are transparent about and they challenge lots of them too) is a requirement for a company to operate. There are 2 cases that I know of so far (in the other they have been forced to give all the data they had about a user, and the only data they gave was a recovery email address), and they are 100% expected. Unless you want to be a rogue organization, there is nothing you can do in those cases. This if anything is a good test that shows how little data they collect or have. Unfortunately for logs of VPN connection there is no technical solution that will ever prevent from logging data again (mullvad is now experimenting with a double tunnel, but that is just a small nuisance for law enforcement), like there is for encryption (I.e., encryption happened with keys we cannot retrieve, sorry can’t help you).