519
Proton Mail Discloses User Data Leading to Arrest in Spain
(restoreprivacy.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 07 May 2024
519 points (94.4% liked)
Technology
59438 readers
4166 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
What I am find curious about this is if a recovery email would have any weight in court. I can add whatever recovery email I want to an account. It doesn't have to be mine.
https://proton.me/support/set-account-recovery-methods#how-to-add-or-change-a-recovery-email-address
Ah, makes sense.
I still find it fascinating that you can go to jail because there's an IP address in a log file somewhere or because of a screenshot of a messenger communication.
Any more so than, say, fingerprints, DNA, or accounting records?
Definitely. I can just write a log file myself, change the creation date in the filesystem if I have to. There are websites that generate images of DM conversations on a myriad of platforms online. Manipulation of these artifacts is beyond trivial
Or, for that matter, surveillance video recordings stored on a server somewhere. It's all just ones and zeros, but some combinations of ones and zeros are quite informative.
As technology progresses it is a fact of life that AI will get better at forgery. Perhaps these items will be less permissible in the future.
Forgery is easy. Putting the forged document into the chain of custody is, and has always been, the hard part.
If we're talking about financial records, it's been trivially easy to create fake bank statements, or fraudulently place an old date on a newly created document, or even forge wet signatures, since before computers were invented. But getting that forged document into the filing cabinet of a bank or an accounting firm is the hard part.
I can make fake IP logs, sure. I can generate fake videos, I guess (under current tech, that takes a ton of effort and skill to be believable). But getting those logs onto Proton's servers, without Proton knowing? I don't know about that.
Why would anyone add a fake or invalid email to recover their account? That’s the question you need to answer for the courts. Not sure they’d buy “because I felt like it”.
If there is a very valid and conclusive reason they did this, maybe. But then Apple validated the email so it’s a moot argument anyway.
Because they want to frame someone else.