I heard that they require plaintext data to work. What are the other factors to this?

  • Steve@communick.news
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    2 days ago

    Not the real world. Just your imagination.

    Corporations lie for profit. Where’s the profit for Proton in keeping peoples AI queries, when they’ve been proven to not keep any other data? Literally they have nothing to gain, and everything to loose.

    Skepticism and pessimism aren’t the same thing. And baseless pessimism is just jaded. Jaded is the dark equivalent of naivety. They’re both equally simplistic ignorance.

      • Steve@communick.news
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 days ago

        Of course they have to keep some basic account data. And I think the last IP you logged in from. Also email data outside the BODY can’t be encrypted. That’s just how email works. So law enforcement can get all of that if they convince a Swiss court to order Proton.

        But no they don’t keep or turn over anything that isn’t technically required for the service to work. I don’t know what you’d expect.

        • sanzky@beehaw.org
          link
          fedilink
          arrow-up
          0
          ·
          1 day ago

          in that particular case the people involved were identified through their recovery email which they did not hash like ‘safe’ other providers do. they have positioned themselves as safe even for activist and journalists and have failed to deliver in that account consistently.

          no surprise since their CEO is a MAGA guy

          • TehPers@beehaw.org
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 day ago

            recovery email which they did not hash

            How do you recover an account on the other providers? Do you have to provide the same recovery email you set before during account recovery? If you hash the email, you have no way of reading it anymore, so someone has to provide it to you again.

            • sanzky@beehaw.org
              link
              fedilink
              arrow-up
              1
              ·
              23 hours ago

              you ask the user for it if they want to recover the account and hash it. if the hash matches your previously stored hash then you send the email

              other providers that position themselves as secure for activists or journalists do exactly that and they cannot handle that information

    • acido@feddit.it
      link
      fedilink
      arrow-up
      0
      ·
      2 days ago

      can you link me your source about Proton being “proven to not keep any other data”?

      • Steve@communick.news
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 days ago

        All the various 3rd party audits can be found here.

        Can you give me to a link to your source they’re lying about it?

        • acido@feddit.it
          link
          fedilink
          arrow-up
          1
          ·
          2 days ago

          have you ever checked them?

          could you point me to where any of them proves that Proton isn’t actually collecting any data?

          because I am only reading about penetration tests and such, which only tell me that their software is reliable against attackers, but that is not the point of the discussion.

          also it seems there is no audit for their AI assistant at the link you provided.