16

cross-posted from : https://lemmy.zip/post/60387297

Proton Mail provided Swiss authorities with payment data for defendtheatlantaforest@protonmail.com — the account linked to Stop Cop City protests in Atlanta. The FBI obtained this information through a Mutual Legal Assistance Treaty request on January 25, 2024, identifying the activist behind the anonymous account through their credit card identifier.

you are viewing a single comment's thread
view the rest of the comments
[-] floquant@lemmy.dbzer0.com 7 points 1 month ago

Again, they did not "aid" nor "give" that information. They were legally obliged to do so. There was never a choice. This could've happened with literally any company, E2EE stops them from being forced to turn over the emails themselves, but basic account metadata (creation date, payment methods, contact details, potentially IP access logs) will always be available. What you can do is limit the amount of information a provider requires/saves (for which Proton is a good choice) or don't rely on a company at all and roll your own email server.

[-] idlesheep@piefed.blahaj.zone 4 points 1 month ago* (last edited 1 month ago)

In fact, knowing that the only thing Proton was able to hand over was the credit card identifier is pretty solid proof that they in fact cannot access (and thus provide access to) your email account and its contents.

If full anonimity is the goal then stick to crypto or cash payments, because credit card always leaves a trail and not a single email provider is above the law in that regard.

This case is entirely the fault of the user's bad opsec.

[-] joe@lemmy.world 1 points 1 month ago

Yeah, it's the distinction between "anonymous" and "private".

[-] Venator@lemmy.nz 0 points 1 month ago

In this case, wouldn't rolling your own email server make it even easier to find you, since they'll just have to look up who registered the domain you used for your email address?

[-] floquant@lemmy.dbzer0.com 1 points 1 month ago

Depending on how you register the domain, there are some registrars that require no info at all. One of those paid with Monero creates no links to your identity.

But yes, self-hosting does not shield you from court orders. If they find you they can still access your shit, depending on how much your country's infosec police gives a shit and/or how closely they cooperate with US agencies.

this post was submitted on 08 Mar 2026
16 points (83.3% liked)

Technology

84275 readers
323 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS