CIRCLE WITH A DOT

@mattly @janl I agree!

@janl this - but also I appreciate how the LLM bubble also helps onboarding normal developers by providing on point introductions.

@paco in my opinion you can only create a partial threat model and you pushed already in your answer you will need context to complete the model.

@dey @buherator @Viss @bhhaskin

This probably wouldn't have changed anything because the victim paid using credit card details finally leading to de-anonymization. In that regard mullvad offers the same as proton.

@Viss @bhhaskin I don't know if the user was a us citizen and I would like to hope that for an eu citizen it would be any different.

But the problem is that were completely dependent from the us. Let's think of Nicolas Guillou (https://www.heise.de/en/news/How-a-French-judge-was-digitally-cut-off-by-the-USA-11087561.html) and this was just a single pointed act of revenge.

@Viss @bhhaskin well I guess it's not that easy - there are mutual legal agreements to speed things up. And as far as I can tell european won't easily reject a request from us authorities because they fear punishment.

@Viss i can't access the article so I don't know to which logs you are referring to.

In general proton has a no logs policy but I guess they might be forced logging access to specific accounts on demand.

To mitigate this they offer Tor access. I personally don't use Proton and I think if some state actor is after you probably can't stay anonymous using convenient services.

I don't trust any VPN providers because it is the best Crypto AG like business appliance I can think of.

It's easy to tell the people to avoid Proton VPN because they might track you down when authorities walk in their offices and pull the business files out of the folders - but I can't think of any VPN this is better protected in that regard.

@Viss you can pay Proton by cash via mail to stay anonymous.