5 ms·
Please be aware that we don't log email content (and we are also not vulnerable to Log4j). Our anti-spam systems do check for malicious links from third party e
by ProtonTeam 5y ago
Please be aware that we don't log email content (and we are also not vulnerable to Log4j). Our anti-spam systems do check for malicious links from third party email services so we can proactively warn users about phishing attempts.
- top_sigrid 5y agoIf you are not vunerable to log4j, how did the screenshots come about?
- TYMorningCoffee 5y agoI believe ProtonTeam's claim is that the spam filter visits the links in the email content. As a result, it's not the log4shell vulnerability making the connection, it's the spam filter.
- adamhp 5y agoI.e. try to send some e-mails without the log4j vuln syntax (just put your IP) and see if you still get hit. It's just the fact that there is the IP, not that it happens to use the jndi syntax.
- YXNjaGVyZWdlbgo 5y agoCum hoc ergo propter hoc
- aleister_777 5y agoNobody believes you. Your track record is trash and I was happy to cancel all services and never pay you anymore money.
- dang 5y agoYou can't attack others like that on HN, regardless of how right you are or you feel you are. Please review https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html and don't post like this again. You may not feel you owe your target better, but you owe this community much better if you're participating in it. The damage this sort of poison causes to the ecosystem greatly exceeds any benefits it may have.
- aleister_777 5y agoYour contrast is visible. Your poison actually hurts people. You don't care who it impacts so long as people are polite/police.
- vasuki 5y agoThis is definitely not precise. I confirmed that the lookup is also performed by Proton servers for mails sent to third party mail services, not just from third party mail services. Are they also scanned? Source IP I got in my test: 185.70.43.80 ``` # whois.ripe.net inetnum: 185.70.40.0 - 185.70.43.255 netname: CH-PROTONMAIL-20140915 mnt-by: protonmail-mnt org-name: Proton AG ``` From privacy policy https://protonmail.com/privacy-policy https://protonmail.com/privacy-policy > We do NOT have access to encrypted message content, but unencrypted messages sent from external providers to ProtonMail are scanned for Spam and Viruses to pursue the legitimate interest of the protection of our users. very disappointing.