Proton is a honey pot.

[thefinalstrawradio@chaos.social]

@liaizon proton appears less a honeypot than a business that operates in legal jurisdictions under a TOS, required to give info they have to governments during investigations.
Movements and individuals shouldn't consider info they give up safe to such a project (payment info, legal IDs, contact info).
Such concerns require services where anonymous payment is possible or no payment is required
This thread gives some smart challenges to the question of security v useability
https://bsky.app/profile/activistchecklist.org/post/3mgdwg4zn5c2d

[mousyaesthete@transfem.social]

@thefinalstrawradio@chaos.social @liaizon@social.wake.st so what's a good alternative?

[thefinalstrawradio@chaos.social]

@MousyAesthete @liaizon the link I edited in above gives a few options but more importantly suggests threat assessment to guide you to the option that makes the most sense for your needs.
Take away: the tradeoff between ease of use and likely need/threat needs to be balanced out

[shadowwwind@fosstodon.org]

@liaizon @hipgnose huh, proton also only handed data after haven gotten a valid Swiss court order, they had to follow the law. And as far as I understood the statement of the proton person, they also only handed the data to Swiss officials and they gave it the fbi

[shadowwwind@fosstodon.org]

@liaizon @hipgnose trusted and secure still isn't anonymous. The never claim to not know who you are, just to protect your content. No email content changed hands here

[shadowwwind@fosstodon.org]

@liaizon @hipgnose agreed, that they don't surface it well sucks ass

[mousyaesthete@transfem.social]

@thefinalstrawradio@chaos.social @liaizon@social.wake.st thank you. Threat modelling is always the first step when thinking about privacy, and email seems like it's always the wrong tool for the kinds of communications that a hostile state actor would want to get access to. I think what's concerning about Proton (and I say this as a Proton user) is that their marketing has always made or at least implied claims that they can't possibly achieve given the nature of email

[liaizon@social.wake.st]

@thefinalstrawradio I think you miss what I mean by honey pot. They are advertising themselves as a secure safe place for journalists and activists. If that was actually the case they should not be collecting credit card information that they can be forced to hand over in the first place. I agree in an ideal world that people should know better then to give credit card information linking themselves to such a thing, but that is simply not the world we live in.

[liaizon@social.wake.st]

Pretty interesting comment thread on the @404mediaco's Instagram post about this story https://www.instagram.com/p/DVhXbQfjMH-

[thefinalstrawradio@chaos.social]

@liaizon ah, seeing your point. Yup, not the perfect world and these points need to be repeated

[liaizon@social.wake.st]

an "article" about this situation on X https://x.com/DoingFedTime/status/2030108076531995016 that has some information I hadn't seen. I say "article" cause it seems like its def all put together by an AI but regardless has sources I hadn't seen mentioned here