3 ms·

My comment still applies regardless of any level of “explaining” [1]: 1. Either Nord/Teso are loose with keys (horrible) Or 2. Proton isn’t being truthful.

My comment still applies regardless of any level of “explaining” [1]: 1. Either Nord/Teso are loose with keys (horrible) Or 2. Proton isn’t being truthful. I don’t think it’s a conspiracy or anything that it is Tesonet/Nord. Rather, the problem is you cannot trust someone with your privacy if they can’t even manage their own keys. [1] The explanation is poor at best and doesn’t explain why they worked so hard to try to delete all of the evidence (all of which was archived already). Additionally, nothing can explain away the lack of security with key management across these two orgs.

InsideOutSanta 1y ago
The people who couldn't handle their keys were at Nord. The people you trust are at Proton. > worked so hard to try to delete all of the evidence The cert is still there. Apparently, they didn't work nearly hard enough.
- rasengan 1y ago
  They worked pretty hard as detailed in an archived article changing names and any records they could [1], but you're right - not good enough [2]. As pointed out on this reddit post [3], Proton's appears to contradict itself a number of times. It's a good thing trust based VPN's are obsolete. After all, trust isn't constant [4] as seen in this article showing how Proton supplied IP addresses to "authorities." [1] https://archive.ph/wG8t8 https://archive.ph/wG8t8 [2] https://archive.ph/4bzBm https://archive.ph/4bzBm [3] https://www.reddit.com/r/technology/comments/8x9aik/protonvpn_is_being_operated_by_a_data_mining_firm/ https://www.reddit.com/r/technology/comments/8x9aik/protonvp... [4] https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/ https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre...
  - InsideOutSanta 1y ago
    > Created by supposed MIT and CERN scientists This is a hilarious way to start an ostensibly serious investigation. It's not as if you could easily figure out the answer to that. At some point, you have to acknowledge that you're a clown.

InsideOutSanta 1y ago

The people who couldn't handle their keys were at Nord. The people you trust are at Proton. > worked so hard to try to delete all of the evidence The cert is still there. Apparently, they didn't work nearly hard enough.

rasengan 1y ago
They worked pretty hard as detailed in an archived article changing names and any records they could [1], but you're right - not good enough [2]. As pointed out on this reddit post [3], Proton's appears to contradict itself a number of times. It's a good thing trust based VPN's are obsolete. After all, trust isn't constant [4] as seen in this article showing how Proton supplied IP addresses to "authorities." [1] https://archive.ph/wG8t8 https://archive.ph/wG8t8 [2] https://archive.ph/4bzBm https://archive.ph/4bzBm [3] https://www.reddit.com/r/technology/comments/8x9aik/protonvpn_is_being_operated_by_a_data_mining_firm/ https://www.reddit.com/r/technology/comments/8x9aik/protonvp... [4] https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/ https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre...
- InsideOutSanta 1y ago
  > Created by supposed MIT and CERN scientists This is a hilarious way to start an ostensibly serious investigation. It's not as if you could easily figure out the answer to that. At some point, you have to acknowledge that you're a clown.