protonmail blocks account creation through tor

a year ago by cookie019 to c/privacy

so now proton completely blocking account creation through their onion adress? I have standard protection, javascript enabled. Time to swith for those who use this service as they are ditching tor and switzerland?

Duke_Nukem_1990 93 points a year ago

A lot of push against Proton on here lately. Makes me suspicious.

path: 0 18703883, hotness: undefined, score: 93, children: 26
geneva_convenience 17 points a year ago

Valid criticism is suspicious?

path: 0 18703883 18712260, hotness: undefined, score: 17, children: 0
Ilandar 13 points a year ago
path: 0 18703883 18705191, hotness: undefined, score: 13, children: 1
Ilandar 7 points a year ago

I am deeply sorry to whichever moderator i offended so much that they needed to delete my comment. Thanks to your guidance I have now learned to hate Proton like a good lemming and will boycott them for the rest of my life as penance for making you cry.

path: 0 18703883 18705191 18718552, hotness: undefined, score: 7, children: 0
lemmyknow 10 points a year ago

Not saying it's some sort of conspiracy theory, but it do be kinda sus. People are just quick to hate Proton over anything. It's like bias confirmation. They seem to be justifying their hatred, or looking for reasons to do so. I mean, "leaving Switzerland"? Really?! I thought that was because Switzerland was considering a privacy-unfriendly law. That's bad, now?

path: 0 18703883 18716481, hotness: undefined, score: 10, children: 0
not_IO 2 points a year ago

it should be possible to criticize a mail provider without being flooded by it's evangelists. Especially proton, their image of privacy does not reflect reality at all

path: 0 18703883 18731411, hotness: undefined, score: 2, children: 0
BluescreenOfDeath -20 points a year ago

There's been evidence in their github repo that they're using LLMs to code their tools now.

It's making me reconsider using them.

path: 0 18703883 18704542, hotness: undefined, score: -20, children: 20
Zetta 40 points a year ago

Theres evidence they use the very popular tool cursor that many devs and large companies use.

path: 0 18703883 18704542 18706049, hotness: undefined, score: 40, children: 16
limer 25 points a year ago

LLM is avoided by many experienced developers and competent medium and small companies.

Tools like cursor are sometimes ok for small things like people learning, or to generate boilerplate.

But it is seen by some as a warning flag when it’s in source code for larger projects

path: 0 18703883 18704542 18706049 18706425, hotness: undefined, score: 25, children: 3
3abas 5 points a year ago

This comment is meaningless.

What red flags? Why is it a red flag is an be experienced developer used cursor on a larger project? Put it into words.

path: 0 18703883 18704542 18706049 18706425 18713959, hotness: undefined, score: 5, children: 2
lerky 20 points a year ago
path: 0 18703883 18704542 18706049 18706652, hotness: undefined, score: 20, children: 11
irmadlad 9 points a year ago

No wAy something popular and megacorp-embraced could be bad. Asbestos, lead pipes, 2-digit dates, NFTs, opiates, sub-prime lending, algorithmic content, pervasive surveillance, etc must have just been flukes.

All technology weilds a double edged sword.

path: 0 18703883 18704542 18706049 18706652 18707315, hotness: undefined, score: 9, children: 9
Zetta 4 points a year ago

As the other guy said, double edged sword. Asbestos was fucking great, and is still used for certain things because it's great. The poor interaction with human biology was the other side of the sword.

An aside, I just pulled a fuck load of vinyl asbestos tile out of a house a year ago and while it wasn't actually all that dangerous because I took proper precautions it's sorta scary anyway cause of the poor interaction thing.

path: 0 18703883 18704542 18706049 18706652 18711537, hotness: undefined, score: 4, children: 0
Valmond 5 points a year ago

Bullshit.

path: 0 18703883 18704542 18710805, hotness: undefined, score: 5, children: 0
fluffy 4 points a year ago

I think you don’t know what “evidence” means. It’s barely a clue.

path: 0 18703883 18704542 18716032, hotness: undefined, score: 4, children: 1
BluescreenOfDeath 0 points a year ago

It's a single data data point, nothing more, nothing less. But that single data point is evidence of using LLMs in their code generation.

Time will tell if this is a molehill or a mountain. When it comes to data privacy, given that it just takes one mistake and my data can be compromised, I'm going to be picky about who I park my data with.

I'm not necessarily immediately looking to jump ship, but I consider it a red flag that they're using developer tools centered around using AI to generate code.

path: 0 18703883 18704542 18716032 18722458, hotness: undefined, score: 0, children: 0
JumpyWombat 55 points a year ago
path: 0 18702793, hotness: undefined, score: 55, children: 4
cookie019 30 points a year ago

I have tried a new circuite before publish this post - without success. but considering that I use their onion adress they could nit see my tor exit node as far as I now, anyway.

path: 0 18702793 18702825, hotness: undefined, score: 30, children: 2
JumpyWombat 19 points a year ago
path: 0 18702793 18702825 18702884, hotness: undefined, score: 19, children: 1
yetAnotherUser 9 points a year ago

Yeah, I've had to go through 20 or 30 circuits once to make Google's captcha allow me through. It just failed with the message "Unusual traffic from your computer network". Someone was probably running a botnet, as this only happens rarely. If Google wanted to block Tor, they'd have done so by now anyway.

path: 0 18702793 18702825 18702884 18704898, hotness: undefined, score: 9, children: 0
mp3 22 points a year ago

He used the onion address, which doesn't go through an exit node like regular darknet-to-clearnet traffic.

path: 0 18702793 18703739, hotness: undefined, score: 22, children: 0
upstroke4448 51 points a year ago

Have you actually asked proton support about this issue, if so what have they said?

It seems like you got frustrated and instead of trying to get help you decided to complain on lemmy.

path: 0 18708264, hotness: undefined, score: 51, children: 9
cookie019 -10 points a year ago

Hi, they have average response time 1 month. Probably it'is not useful when you want create account now, yes? "instead of trying to get help you decided to complain on lemmy" and what? proton blocked tor, it is their decision, it is not a bug. I have my other email provider so I do not need to beg proton to unblock tor registration. My objective was to inform lemmy users about this, I did not ask for help in my post as you noticed. If proton company is interested in their customers they can monitor such complaints but since they "cut their presence" on mastodon and opensource media platforms it will not happen.

path: 0 18708264 18716960, hotness: undefined, score: -10, children: 8
Lazhward 9 points a year ago

proton blocked tor, it is not a bug

How do you know?

path: 0 18708264 18716960 18717204, hotness: undefined, score: 9, children: 1
cookie019 -7 points a year ago

is it joke? please see the pic attached to the post, if you not believe try by yourserf

path: 0 18708264 18716960 18717204 18718974, hotness: undefined, score: -7, children: 0
upstroke4448 4 points a year ago

The average response time is nowhere near a month.

It seems more and more this was a bad faith post. I'm not sure I believe you even use proton.

path: 0 18708264 18716960 18720620, hotness: undefined, score: 4, children: 5
cookie019 -3 points a year ago

Look, for me it is not important if you believe me or not. I dont beg yout to ditch protonmail

path: 0 18708264 18716960 18720620 18720793, hotness: undefined, score: -3, children: 4
upstroke4448 3 points a year ago

You say that and yet you feel the need to respond and down vote.

If you didn't care about what others thought you wouldn't have made the post.

path: 0 18708264 18716960 18720620 18720793 18721305, hotness: undefined, score: 3, children: 3
artyom 29 points a year ago

What makes you think this has anything to do with Tor?

path: 0 18705467, hotness: undefined, score: 29, children: 7
cookie019 8 points a year ago

Because i can easely create account on clearnet

path: 0 18705467 18707283, hotness: undefined, score: 8, children: 6
artyom 2 points a year ago

That's it?

path: 0 18705467 18707283 18708341, hotness: undefined, score: 2, children: 5
dysprosium 10 points a year ago

What else should be tested? I think this guy deserves praise for his methods

path: 0 18705467 18707283 18708341 18709242, hotness: undefined, score: 10, children: 4
artyom 15 points a year ago

Definitely a lot more than that should be tested before declaring they're "ditching Tor". If that's what they were doing this site wouldn't even exist.

path: 0 18705467 18707283 18708341 18709242 18710116, hotness: undefined, score: 15, children: 3
coffeetastesbadlikecoffee 25 points a year ago

I previously commented I would write the support, now I actually read the docs first and found out why:

If you want to create an account over tor you can, just not via the clearnet URL, probably due to rate limiting by IP adress. However if you use their Onion Link as specified in this article by their support (https://proton.me/support/tor-setup) it works just fine (as far as I just tested). So great! Because using .onion services is far more secure than accessing clearnet over Tor anyway.

Here the url, verify it with the link in the support article tho: https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/...

path: 0 18721450, hotness: undefined, score: 25, children: 3
cookie019 13 points a year ago

The onion link was used, please see my screenshot first...

path: 0 18721450 18725258, hotness: undefined, score: 13, children: 1
coffeetastesbadlikecoffee 4 points a year ago

Huh, that's wierd. Because it worked for me... they must be rate limiting Tor.

path: 0 18721450 18725258 18725612, hotness: undefined, score: 4, children: 0
EngineerGaming 3 points a year ago

I checked that (together with the clearnet link) a few times recently, got a nondescript error like "sorry something went wrong" every time.

path: 0 18721450 18724243, hotness: undefined, score: 3, children: 0
coffeetastesbadlikecoffee 20 points a year ago

Just tested it, same here. Clearnet works but tor not. I will contact support since part of the reason I like to pay for unlimited is to subsidize free, anonymous accounts.

Edit: here is my other comment:

I previously commented I would write the support, now I actually read the docs first and found out why:

If you want to create an account over tor you can, just not via the clearnet URL, probably due to rate limiting by IP adress. However if you use their Onion Link as specified in this article by their support (https://proton.me/support/tor-setup) it works just fine (as far as I just tested). So great! Because using .onion services is far more secure than accessing clearnet over Tor anyway.

Here the url, verify it with the link in the support article tho: https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/...

path: 0 18718551, hotness: undefined, score: 20, children: 1
cookie019 3 points a year ago

Okay, if they will responder faster than in one month you could publish the respond here if you will like to do it. But I am surr they will say it is a "technical error". Every privacy leak now is described as technical error - apple, google, meta - all use this therm to justify their intentional action

path: 0 18718551 18742532, hotness: undefined, score: 3, children: 0
not_IO 10 points a year ago

Does anybody know valid alternatives to proton mail, I think they have been enshitified

path: 0 18715897, hotness: undefined, score: 10, children: 15
hanrahan 11 points a year ago

Tuta ? But only for mail AFAIK.

path: 0 18715897 18717749, hotness: undefined, score: 11, children: 0
markstos 6 points a year ago

There is a relatively small number of shared Tor exit node IP addresses.

So it’s more likely using Tor will trigger “too many attempts for IP” throttling for any service with bot protection.

It’s nothing against Tor, but is an expected side-affect of attempting to be anonymous by sharing the same IP address with many people.

path: 0 18715897 18721463, hotness: undefined, score: 6, children: 0
Ephemeral 5 points a year ago

Mailbox.org (option if you want custom domain) or Posteo.de

path: 0 18715897 18719493, hotness: undefined, score: 5, children: 0
cookie019 4 points a year ago

I use posteo.de provider, it costs 1 eur for month, 3 adress, they have inbound encryption of emails as proton, also they dont accept crypto but you can pay by cash and card and "All of our payment methods are anonymised using a payment system developed by Posteo. We do not link payment information with email accounts." You can learn more about their privacy features on their site https://posteo.de/en/site/features#featuresprivacy

path: 0 18715897 18717022, hotness: undefined, score: 4, children: 11
meta4 4 points a year ago

Why are you trying to sign up for Proton if you already use another provider?

path: 0 18715897 18717022 18718703, hotness: undefined, score: 4, children: 10
not_IO 1 point a year ago

i'm sorry can't you have multiple email accounts anymore? privacy and all that, remember?

path: 0 18715897 18717022 18718703 18731358, hotness: undefined, score: 1, children: 1
meta4 1 point a year ago

Sure you can. Wouldn't that have been an easy excuse for this guy to reply with instead of all this defensive bullshit?

path: 0 18715897 18717022 18718703 18731358 18734412, hotness: undefined, score: 1, children: 0
cookie019 -2 points a year ago

how this question is relate to my post about proton blocks registration through their onion site? sorry but I only interested in respond questions directly associated with this or other email providers. my decision to try proton as additional service should not be the problem...

path: 0 18715897 18717022 18718703 18718969, hotness: undefined, score: -2, children: 7
meta4 5 points a year ago

Seems a fair question to ask someone who makes a post to direct people away from a service under the presumption that they were trying to use it, only to find in the comments that they already use a different service that they not only enjoy, but are happy to freely advertise for.

Also, your justification for their lack of crypto payments is that they use a payment system they designed themselves, which I find funny since most of the complaints I see about Proton (granted, not yours) is the unverifiability of their operations, leaning on "Just trust me, bro." which is the same thing as this site's payment processing system. 🤭

path: 0 18715897 18717022 18718703 18718969 18721120, hotness: undefined, score: 5, children: 6
evilcultist 9 points a year ago

A while back I tried to create an account with vpn and got notice that said something about how I couldn’t use it to validate other accounts without validating that account because other companies had threatened to label them as untrustworthy or spam.

path: 0 18703626, hotness: undefined, score: 9, children: 0
Fizz 6 points a year ago

I got that same error when I was setting up my account.

path: 0 18703372, hotness: undefined, score: 6, children: 0
XenGi 5 points a year ago

Proton always felt like a scam to me. Their claims on privacy and security are questionable at best.

path: 0 18704599, hotness: undefined, score: 5, children: 13
Jason2357 9 points a year ago

My issue exactly. Their marketing isn't careful, which I would expect from a security focused business.

path: 0 18704599 18711779, hotness: undefined, score: 9, children: 0
3abas 5 points a year ago

Their software is open source and you can verify it yourself.

path: 0 18704599 18713995, hotness: undefined, score: 5, children: 8
XenGi 4 points a year ago

You can't verify that they actually run that on their servers.

path: 0 18704599 18713995 18717186, hotness: undefined, score: 4, children: 7
meta4 5 points a year ago

So, they operate a repo of open source code as a cover for their internal repo of completely different code?

path: 0 18704599 18713995 18717186 18718601, hotness: undefined, score: 5, children: 6
XenGi 4 points a year ago

I'm not saying they do that. But you have to trust them that they don't do it. You can never proof it.

path: 0 18704599 18713995 18717186 18718601 18719127, hotness: undefined, score: 4, children: 4
ScoffingLizard 1 point a year ago

That is not entirely impossible. Owner spent time in US lobbying, and tech folks that do that are often horrible, careless, and unethical people.

path: 0 18704599 18713995 18717186 18718601 18780215, hotness: undefined, score: 1, children: 0
Taalnazi 3 points a year ago

They should fire their pro-Trump CEO.

path: 0 18704599 18801582, hotness: undefined, score: 3, children: 1
XenGi 2 points a year ago

Didn" t know they had one. In that case I wouldn't use them anyways.

path: 0 18704599 18801582 18807971, hotness: undefined, score: 2, children: 0
limer -11 points a year ago

Now with LLMs to provide extra security (not)

path: 0 18704599 18706646, hotness: undefined, score: -11, children: 0
umbrella 4 points a year ago
path: 0 18712266, hotness: undefined, score: 4, children: 0
francois 3 points a year ago

While on dread recently I stumbled across this old post regarding issues with their onion adresses https://encryp.ch/...

When a user makes a new account with Protonmail on TOR they are re-directed from Protonmail’s “.onion” to “.com” address. This breaks your secure encrypted connection to their onion address, enabling your identification. There are absolutely no technical reasons for this feature. In fact, the only other websites that operate like this are suspected NSA/CIA Honeypots.

path: 0 18737456, hotness: undefined, score: 3, children: 2
ScoffingLizard 3 points a year ago

Goddamn. We live in a nightmare. There is someone fucking us all every goddamn second of the day.

path: 0 18737456 18779860, hotness: undefined, score: 3, children: 0
cookie019 -1 points a year ago

Yes, I knew this info, there is a lot of strange things with company

path: 0 18737456 18742489, hotness: undefined, score: -1, children: 0
pheggs 0 points a year ago

that sucks, this means no more hiding metadata. However, they aren't ditching switzerland (yet) - this only happens if the government applies the new surveillance rules which is not set in stone yet.

I use pgp and host mail myself. It's not as hard, and it's by far less problematic than a lot of people make it out to be. Don't trust hosters.

path: 0 18718826, hotness: undefined, score: 0, children: 2
cookie019 0 points a year ago

I generally agree with you but my current threat model allows it

path: 0 18718826 18719023, hotness: undefined, score: 0, children: 0
cookie019 0 points a year ago

that sucks, this means no more hiding metadata. However, they aren’t ditching switzerland (yet) - this only happens if the government applies the new surveillance rules which is not set in stone yet. I could agree with you but my threat model currently allows me to use third party providers

path: 0 18718826 18719002, hotness: undefined, score: 0, children: 0
privacy
privacy

@lemmy.ml

login for more options
51414
5290
5096

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...