Collaborate Disseminate
Protonmail is the second encrypted email provider in the last week to find itself blocked from its Russian users, after authorities in the country said bomb threats had been spammed out claiming that bombs had been planted in public places. Telecoms wa… Continue reading ProtonMail and StartMail blocked as Russia hunts for bomb threat spammers
My (limited) understanding is that my password is used to encrypt the keys which are used to encrypt my mail messages on protonmail’s servers. Does that mean that knowledge of my password could potentially let an adversary find out what th… Continue reading If my protonmail password is compromised, does that potentially mean that my whole account is, permanently?
I am specifically thinking about why cant protonmail support IMAP without their bridge application?
They must not be encrypting all emails with zero knowledge encryption. IMAP/SMTP by default only works if the server can … Continue reading What part of an email needs to be in plaintext for an IMAP server to serve it?
Having read up on a bunch of different SRP implementations I understand that the session ID is generally not random, although it’s missing from the documented SRP write up they did. Anyone know how theirs work? It’s 32 hex ch… Continue reading Which algorithm is used ProtonMail SRP session IDs?
Is this value just used to log in or is it used as a key for anything else later on? I see that the pm-srp code does make a point of keeping it around but it isn’t clear for what purpose, and some unofficial clients like Hydr… Continue reading Is the shared secret from ProtonMail SRP actually used for anything after logging in?
A candidate for office from the United Kingdom’s Labour Party says Russian hackers sent him malware-laced email in what he deemed a “sophisticated” attack. Ben Bradshaw, who has spoken up about Russian interference in British politics, revealed Tuesday that he had received a suspicious email purporting to be from a Russian whistleblower. Cyber & security experts I consulted found a mysterious email I received from a Kremlin “whistleblower” last week contained sophisticated malware. Reported to the @NCSC. Still waiting for publication of that #RussiaReport, Johnson. #ReleaseTheRussianReport https://t.co/U3O3Bdp38l — Ben Bradshaw (@BenPBradshaw) December 3, 2019 The email included a ruse that used the signature of a Russian envoy and PowerPoint slide purportedly produced by Russia’s FSB intelligence agency, The Guardian reported. Bradshaw did not immediately respond to CyberScoop’s request for him to elaborate on the incident. The National Cyber Security Centre (NCSC), one of the UK’s main cybersecurity agencies, is investigating […]
The post Candidate in UK’s Labour Party says he was targeted by Russian hackers appeared first on CyberScoop.
Continue reading Candidate in UK’s Labour Party says he was targeted by Russian hackers
protonmail provides encrypted “zero-access” encryption mailboxes.
The way they explain “zero-access” is, at least for me, similar to zero-knowledge encryption.
However protonmail has in its servers my private keys.
They say that the keys a… Continue reading Can protonmail access my passwords and hence my secrets?
I am quite happy with, indeed grateful for, protonmail. There is one point I’d like to understand better regarding end-to-end encryption. I asked this twice at protonmail.com, and twice it was removed by the moderator. I ho… Continue reading Does plaintext reach protonmail server?
I was reading about Protonmail’s system and I couldn’t find an anwser to something. In PGP communication is encrypted using assymetric cryptography: public and private keys. If you want to send something securely to a recipie… Continue reading In PGP how can I be sure about the public key?
I would like to change from Google authenticator to FREEOTP.
However i don’t know how to setup FreeOTP in Protonmail.
If someone knows how, I would be glad if he manage to help me.