ProtonMail under fire for ‘sharing user data’ with Spanish police

Encrypted email company ProtonMail has faced criticism again after handing over user details to the authorities. The Swiss firm markets itself based on its privacy features, allowing users to “take control” of their personal data.
According to Proton, its “end-to-end encryption and zero-access encryption ensure only you can see your emails,” and “not even Proton can view the content of your emails and attachments.” However, news service VilaWeb reports that the mailing service allegedly handed over an account’s recovery email address information to Spanish police concerning a suspect believed to be supporting the Catalan independence organization, Democratic Tsunami.
Apple was then allegedly able to provide information about the suspect’s recovery email address, name, home address, and phone number. Under national security claims, ProtonMail handed over the details of an account belonging to an individual using the pseudonym ‘Xuxo Rondinaire.’
This individual is suspected of being a member of Catalonia’s police force, also known as Mossos d’Esquadra, and allegedly used their insider knowledge to support the Democratic Tsunami movement.
The requests were made under anti-terrorism laws, though the primary activities of the Democratic Tsunami were protests and roadblocks, raising concerns about the proportionality and justification of such measures.
Social media users criticized the move, stating that it essentially renders encrypted messages pointless as one security expert said, “whatever we know about you that isn’t encrypted end-to-end is fair game.”

This is your regular reminder that metadata matters.
In this case, the activist was deanonymized via the backup email for the Protonmail account that he used to set up Wire, which was an iCloud account linked to his real identity. https://t.co/sxGfCaAwIy
— Eva (@evacide) May 8, 2024

Climate activist exposed by protonmail.– Sure, your email is secure, but whatever we know about you that isn’t encrypted end-to-end is fair game when the government hands us a subpoena https://t.co/mYqVWf9A9H
— Christoffer Jerkeby (@Kuggofficial) May 13, 2024

In 2021, ProtonMail came under scrutiny for complying with a legal request that resulted in the arrest of a French climate activist. Under Swiss law, ProtonMail was obligated to provide the individual’s IP address to Swiss authorities, who subsequently shared it with French police. ProtonMail’s compliance with these requests is governed by Swiss law, which requires cooperation with international legal demands when properly channeled through the Swiss court system.
Why did Proton Mail reportedly provide user data?
Speaking to the advocacy group Restore Privacy, the messaging company said: “We are aware of the Spanish terrorism case involving alleged threats to the King of Spain, but as a general rule we do not comment on specific cases.”
A spokesperson stated that the Proton had “minimal user information,” pointing out that data about the suspect was obtained from Apple. They added: “Proton provides privacy by default and not anonymity by default because anonymity requires certain user actions to ensure proper OpSec, such as not adding your Apple account as an optional recovery method.
“Note, Proton does not require adding a recovery address as this information can in theory be turned over under Swiss court order, as terrorism is against the law in Switzerland.”
On its website, it states: “Under Swiss law, we’re required to cooperate with law enforcement agencies on criminal investigations within the framework of Swiss laws and privacy regulations.”
ReadWrite has reached out to Proton for comment.
Featured image: Canva / Proton
The post ProtonMail under fire for ‘sharing user data’ with Spanish police appeared first on ReadWrite.

Posted in Tech | Tagged | Comments Off on ProtonMail under fire for ‘sharing user data’ with Spanish police

Chinese authorities shut down illegal crypto service

Chinese authorities have shut down an underground bank that facilitated illegal currency exchange between the Chinese yuan and South Korean won, using cryptocurrency as a medium.
Police announced on local social media QQ that the operation — which involved transactions worth at least 295.8 million USD — was uncovered in Jilin province, Northeast China, leading to the arrest of six suspects.
The Mechanics of the Illegal Operation
According to the report, the criminal group exploited the inherent features of cryptocurrency, such as anonymity and decentralization, to conduct illicit foreign currency exchange activities.
They used domestic bank accounts to receive and transfer funds while engaging in over-the-counter (OTC) cryptocurrency transactions. OTC transactions occur directly between two parties, without the involvement of a centralized exchange, making them harder to trace and regulate.
The operation allegedly catered to various entities, including South Korean purchasing agents, cross-border e-commerce platforms, and import-export trade companies, helping them exchange funds between the Chinese yuan and South Korean won.
By using cryptocurrency as an intermediary, the criminal group aimed to circumvent China’s strict capital control policies and facilitate illegal currency exchange.
China’s capital control
China has long maintained tight capital control policies to regulate the flow of money in and out of the country. These policies are designed to prevent capital flight, maintain financial stability, and protect the value of the Chinese yuan.
However, some individuals and businesses have resorted to using cryptocurrencies as a means of bypassing these regulations.
Cryptocurrencies, such as Bitcoin (BTC) and Ethereum (ETH), offer a decentralized and pseudonymous way of transferring value across borders without relying on traditional financial institutions. This has made them an attractive tool for those seeking to evade capital controls and engage in illegal financial activities.
The Chinese government has been increasingly vigilant in cracking down on the use of cryptocurrencies for such purposes. In 2017, China banned initial coin offerings (ICOs) and shut down domestic cryptocurrency exchanges to curb speculative trading and prevent financial risks.
Since then, authorities have continued to monitor and suppress many crypto-related activities, including money laundering, fraud, and illegal currency exchange.
Implications and Future Outlook
The bust of this underground financial service in Jilin province highlights the ongoing efforts by Chinese authorities to combat illegal financial activities and maintain control over capital flows. As cryptocurrencies gain more mainstream attention and adoption, governments worldwide are grappling with the challenges of regulating these decentralized assets and preventing their use for illicit purposes.
China’s stance on cryptocurrencies has been one of the most stringent among major economies. While the country has embraced blockchain technology, the underlying technology behind cryptocurrencies, it has taken a hard line against the use of cryptocurrencies themselves.
Despite this, local regulators do not push cryptocurrencies completely out of their jurisdiction. It seems that Chinese authorities are for the most part opposed to the decentralized and uncensorable ways of using cryptocurrency.
The act highlights this that after Hong Kong fund managers sought approval for spot Bitcoin and Ethereum ETFs in mid-April, they saw them be approved just days later. Earlier this month, both those products became available on the local stock exchange.
The post Chinese authorities shut down illegal crypto service appeared first on ReadWrite.

Posted in Tech | Tagged | Comments Off on Chinese authorities shut down illegal crypto service

Microsoft and Amazon to invest $5.6 billion into France as Macron courts tech giants

Microsoft and Amazon are ploughing billions of dollars into France.

Posted in Tech | Tagged | Comments Off on Microsoft and Amazon to invest $5.6 billion into France as Macron courts tech giants

Aplazo is using buy-now-pay-later as a stepping stone to financial ubiquity in Mexico

Four-year-old Mexican BNPL startup Aplazo facilitates fractionated payments to offline and online merchants even when the buyer doesn’t have a credit card.
© 2024 TechCrunch. All rights reserved. For personal use only.

Posted in Tech | Tagged | Comments Off on Aplazo is using buy-now-pay-later as a stepping stone to financial ubiquity in Mexico

Vote for your Disrupt 2024 Audience Choice favs

We received countless submissions to speak at this year’s Disrupt 2024. After carefully sifting through all the applications, we’ve narrowed it down to 19 session finalists. Now we need your help to choose who will actually speak at the conference! Vote for the sessions you most want to see at Disrupt in October. You can […]
© 2024 TechCrunch. All rights reserved. For personal use only.

Posted in Tech | Tagged | Comments Off on Vote for your Disrupt 2024 Audience Choice favs

Squarespace to go private in $7 billion private-equity deal

Permira agreed to take Squarespace private less than three years after it first went public in 2021.

Posted in Tech | Tagged | Comments Off on Squarespace to go private in $7 billion private-equity deal

Google’s Demis Hassabis is the man tasked with turning bleeding-edge AI research into profits

Google has long counted on Demis Hassabis for his genius in artificial intelligence. But whether he can create products that customers love is a big question.

Posted in Tech | Tagged | Comments Off on Google’s Demis Hassabis is the man tasked with turning bleeding-edge AI research into profits

Booking latest to fall under EU market power rules

Booking.com has been designated a gatekeeper under the bloc’s Digital Markets Act (DMA), meaning the online travel agency will face regulation under the bloc’s market fairness and contestability framework — with the risk of major fines (of up to 10% or even 20%) for non-compliance. The travel platform has been given six months to comply […]
© 2024 TechCrunch. All rights reserved. For personal use only.

Posted in Tech | Tagged | Comments Off on Booking latest to fall under EU market power rules

‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

Estate is an invite-only website that has helped hundreds of attackers make thousands of phone calls aimed at stealing account passcodes, according to its leaked database.
© 2024 TechCrunch. All rights reserved. For personal use only.

Posted in Tech | Tagged | Comments Off on ‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

Marvel Rivals apologises after banning negative reviews

The game’s developers said the controversial terms gamers were told to agree to was a miscommunication.

Posted in Tech | Tagged | Comments Off on Marvel Rivals apologises after banning negative reviews