Nu har en del nya uppgifter framkommit om angreppen mot Protonmail. Ur en läsvärd
artikel där bland annat Andy Yen, en av Protonmails grundare, intervjuas:
Citat:
"We realized we were dealing with a different, far more scary attacker," said Yen, "that didn't fit the pattern of any previous attack. At this point we knew there were two attackers. And this one didn't care about financial gain or fame, but whose sole objective was to kill ProtonMail at any cost."
Efter att Protonmail installerat ett nytt DDoS-skydd så har det
uppdagats att det företag som tillhandahåller skyddet har kopplingar till den israeliska försvarsmakten:
Citat:
Likely the DDoS attack on ProtonMail was orchestrated to follow with an offer of generous "help" it could not refuse, necessarily a re-route of all traffic through third-party "anti-DDoS" systems. Now the "Switzerland" based privacy firm is proxied by an Israeli firm for traffic analysis, network exploitation of users, cryptographic monkeying. Israeli expertise in the latter is unmatched. Classic gov-mil cyber op with great PR happy ending for exploited asset. Users of ProtonMail must not fret; they got lucky with this fumble. Don't trust this security faker; don't trust the next one.
Det här har
bemötts av Protonmail på Reddit:
Citat:
A lot of mis-information about this, with people seemingly not understanding how BGP redirection and GRE tunnels work. All traffic that passes through Radware is encrypted. Both encryption layers (SSL and ProtonMail's OpenPGPjs) are intact in this solution. That's why we picked BGP redirection instead of something like Cloudflare where we would have to turn over SSL keys.
So Radware has access to no new information that your ISP wouldn't already have since they just see the encrypted packets.
Så det israeliska företaget som sköter DDoS-skyddet har inte tillgång till innehållet i kommunikationen, men borde rimligtvis ha tillgång till exempelvis kundernas IP-nummer. Knappast idealt, om ni frågar mig. Men är det tillräckligt för att helt sluta använda Protonmail?
