Hacker News new | ask | show | jobs
by trashburger 335 days ago
A lot of claims about being "privacy first", but is there any way to actually verify these claims? For example they claim "no logs", but unless I log into their servers and personally check there is no way I can be sure, right? Is there something I'm missing?
3 comments
midtake 335 days ago
They have shared IP address information before [1]. They have also shared information about the owner of a Proton Mail account with the FBI before.

In my opinion, Proton glows. If you're a nobody, they will protect your privacy, but if you matter then it seems they won't stand up for you. I still use Proton, but it's mostly for registering on sites for which I don't want to burn a Gmail account. I wouldn't do anything sketchy on it.

[1] https://www.vice.com/en/article/protonmail-under-fire-for-sh...

Note: my post is about Proton Mail, I have no idea about Lumo but I imagine the same hypocrisy applies.

link
DaSHacka 335 days ago
> They have shared IP address information before [1]. They have also shared information about the owner of a Proton Mail account with the FBI before.

Any other mail provider can, and most certainly has, done the same thing when forced by a court order.

No one is going to go to prison for you because of your $5.

> In my opinion, Proton glows. If you're a nobody, they will protect your privacy, but if you matter then it seems they won't stand up for you.

How does this differ from any other SaaS service? Unless you specifically target "bulletproof" services, that are oftentimes blocked anyway due to facilitating fraud, scams, and other illegal tranactions (since the whole point is them not obeying the law while operating, until they inevitability get shut down).

link
wilsonnb3 335 days ago
They've been audited by external organizations and had at least one legal request for log information where court was satisfied they couldn't comply due to their no log policy.
link
nicce 335 days ago
Even with external audits you need to trust them. Nothing prevents providing different software/configuration during audit.
link
mrcwinn 335 days ago
I’m not sure you’ll ever find what you’re looking for.
link
nicce 335 days ago
The point is that these kind of audits do not add similar value as security audits.
link
sephrenra 333 days ago
Yes, compared to the other offerings this one just says "trust us" with no way to verify if those claims are actually true
link