Proton

Some feedback regarding Proton VPN documentation and some confusion regarding Firefox DNS configuration:

https://protonvpn.com/support/browser-extensions#firefox says:

"By default, Firefox does not route DNS queries through the HTTPS connection to our VPN servers" and then is mentioned a workaround to fix it.

That suggest alarming thing, that ProtonVPN Firefox user has to do some custom workaround in order to be private (prevent a DNS leak).

On another hand, https://protonvpn.com/support/dns-leaks-privacy says:

"DNS queries are routed through the VPN tunnel to be resolved on our servers"

these statements are a bit confusing/contradicting (though Proton later explains that this latest statement does not apply on a browser extension VPN apps) and Proton further adds at https://protonvpn.com/support/dns-leaks-privacy/#dns-over-https that the DNS leak can happen also due to enabled DoH feature in web browser.

Solution: ProtonVPN browser extension should (if possible) warn user in case it fails to process DNS and as a result, it is leaked. Vote for this feature request

Another "issue" is with the above mentioned/linked workaround (here I am speaking only about Firefox), this workaround: go to "about:config into the URL bar and hit . At the warning, click Accept the risk and continue → search for network.trr.mode"

In my case I had this set that variable to 5 which means DoH "Off by choice", Proton in said tutorial suggest value 3 instead, which means (According to https://wiki.mozilla.org/Trusted_Recursive_Resolver#DNS-over-HTTPS_Prefs_in_Firefox ) "Only use TRR, never use the native resolver.".

This confuses me since it looks like an opposite to what i have now, while any DNS leak site:

https://www.dnsleaktest.com

https://ipleak.net

does NOT report leak in my case nor in case i set network.trr.mode to 3. A bit weird but i guess no big deal?

Thanks for your feedback in advance.

cross-posted from: https://zerobytes.monster/post/2458702

The original post: /r/mullvadvpn by /u/Imaginary_Dot5703 on 2024-08-14 05:20:49.

from the team:

We’re thrilled to announce that Proton VPN’s browser extensions for Chrome, Chromium-based browsers, and Firefox are now available to all Proton Free users - a highly requested feature by our community.

• Download Proton VPN for Chromium-based browsers
• Download Proton VPN for Firefox-based browsers

Proton VPN browser extensions let you connect to a VPN server and encrypt your connection with one click—no app installation needed. Downloadable from our website or the Chrome and Firefox web stores, they help users access the uncensored internet, even where VPNs are blocked on app stores.

Proton VPN ensures access to a free and open internet because everyone deserves accurate information and privacy. The Proton Free plan is made possible by those who choose paid plans, enabling us to develop anti-censorship features and offer our services for free.

You can also propose, vote, and discuss feature requests on User Voice.

Find out more in our blog 👉

https://protonvpn.com/blog/browser-extension-free

Proton Team

cross-posted from: https://lemmy.ml/post/18959419

I am alone... or not? I don't know if it's a bug just for me or not... but anyone already have issues with TOP using ProtonPass?

Currently I can't use TOTP codes generated from ProtonPass on wesites like Lemmy.ml, Infomaniak, my CheckMK instance, and few others...

I put them on Proton Pass and Aegis, 'cause I don't want to put my Proton account 2FA in Proton Pass for security. So as I'm using Aegis, I put all of them into it too. But Proton TOTP code results as erros and Aegis one (which are differents) are ok... I was thinking about SHA256 and SHA1 but don't seems to be the reason...

Thanks and if your are in the case, don't worry... You're not alone!

from the team:

Hi everyone,

We are happy to hear that many of you are now using Proton Docs for collaborative document editing that is truly private. This week we also added a new 'shared with me' section to the Android app, as well as the ability to accept or decline invitations to files and folders on the web.

In today’s Proton Docs update, we’re adding a couple quality-of-life features, such as inserting divider lines and the ability to download your doc as a PDF.

Let us know what you think. You can also propose, vote, and discuss feature requests on User Voice.

Proton Team

from the team:

Hi everyone,

This week, we’re happy to share that two top-voted community-requests are gradually rolling out in Proton Pass:

🪪 storing and auto-filling identities

🧬 support for biometrics on desktop

Read the full announcement on our blog.

Identities

Take back control of your digital identity and securely autofill your personal information with a single click, saving you time when signing up, or checking out.

Identities include the following fields:

• personal details, including name, email, phone number, birth date, and gender
• address details
• contact details, including SSN, passport number, license number, website, and - social handles
• work details, including occupation, company, and job title
• add custom fields and custom sections (available on paid subscriptions)

All fields are searchable in Proton Pass except for custom fields.

Biometric Authentication *\

When Proton Pass for desktop was launched, we mentioned that biometric support was planned.

Starting today, you can quickly unlock your macOS or Windows Proton Pass apps by using fingerprint/facial recognition.

\Available on all paid subscriptions.*

We look forward to your feedback!

You can also propose, vote, and discuss feature requests on User Voice.

Proton Team

Wanted to share something I found out about today when I was troubleshooting Jellyfin, hopefully it will help people out. Jellyfin wouldn't connect when I had LAN Connections enabled on ProtonVPN, so I contacted support. They let me know that having Kill Switch enabled with LAN connection is incompatible:

"...the Killswitch and Allow LAN connections features are mutually exclusive due to their functionality differences, you will be unable to utilize both of them at the same time.

Unfortunately, due to compatibility issues within these features and some users experiencing issues when utilizing both of them, our team decided to make them mutually exclusive, therefore, at this moment you will not be able to utilize the Killswitch feature and have access to your LAN, therefore, if you wish to have access to your LAN, we suggest you keep the Killswitch feature disabled."

Not sure I understand how the two settings are related, but good to know! Another note is that Split Tunneling had no effect on this, so clearly Kill Switch also effects apps that are excluded in split tunneling also.

Since a Linux client for Drive doesn't appear to be in the works for anytime soon, having folder statistics (ex. # items in the folder, size of data in the folder) available from the web app would be pretty damn useful for figuring out if a given folder matches an offline backup.

(Yes I know that unofficially there's the rclone thing but I tried that and got an "unusual account activity" error).

More broadly, it would be really helpful if Proton worked on base functionality for their existing products rather continuing to launch new products.

from the team:

Hi everyone,

It has become increasingly common for authoritarian governments to go beyond purely online technical measures to discourage or block VPN use. Certain countries have even begun demanding citizens hand over their smartphones for physical inspection. Protecting free speech and fighting censorship is a core part of our mission and we're committed to doing what we can to help users around the world.

With today’s announcement, we hope to give people the tools they need to bypass censorship and access a free and fair internet wherever they are:

• Windows Stealth: Proton’s unique anti-censorship protocol, Stealth, comes to Windows, disguising VPN traffic as normal internet traffic, making it almost impossible to detect when someone is using a VPN: https://protonvpn.com/blog/stealth-vpn-protocol
• New servers: in 12 countries among those at the bottom of the Freedom House Index and the Democracy Index
• Discreet Icon: Android users can customize the Proton VPN app icon and name, and even disguise it to look like another unrelated application to protect users in authoritarian regimes where VPN users may be at risk.

Proton VPN's mission is to ensure freedom of speech and fight online censorship everywhere. Here’s how to get started with Proton VPN for free: ~https://protonvpn.com/free-vpn~

Let us know what you think. You can also propose, vote, and discuss feature requests on ~User Voice~.

Proton Team

Following the rollout of enhanced file and folder sharing for the web app, you can now securely and privately share files and folders with specific email addresses on Android.

Link to the Full blogpost: https://proton.me/blog/enhanced-sharing-drive

Hello!

As per the title, I think it would be really useful to have an automatic upload and attachment of any items over the 25MB limit to Proton Drive. This is something I sorely miss from Gmail which makes sending some types of emails a pain as I have to first upload it to Drive, create a public link, keep track of all my publicly shared files, and make sure the link works before placing it awkwardly in my email.

Here's the coupon: MAILPLUSINTROACQ

Only applies for the first month of Mail Plus, for the monthly subscription

Got this coupon from their Brave marketing campaign

Here is the link for the official campaign: https://proton.me/l/mail-intro-offer (only works if you create a new account, but you can use the coupon I provided and I believe it should work for existing accounts)

To enhance your productivity, Docs in Proton Drive now supports a range of keyboard shortcuts. These shortcuts are designed to help you navigate and format your documents efficiently. Below is a comprehensive list of shortcuts available for both Windows and Mac users.

Link to the full blogpost: https://proton.me/support/docs-keyboard-shortcuts

I followed the steps, but it has not worked. It still only searches subject lines.

from the team:

Hi everyone,

Thanks to your ongoing feedback, we’ve enhanced the photo backup experience on iOS.

Here’s what’s new:

• preview live photos
• backup photos on mobile data

If you haven’t already started backing up your photos and videos with Proton Drive, here’s how to get started:

https://proton.me/blog/proton-drive-photo-backup-ios

Let us know what you think! You can also propose, vote, and discuss feature requests on User Voice.

Proton Team

Please clarify if ProtonVPN servers are also affected and what are the corrective actions?

https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/

• Proton VPN doesn't use RAM-only servers, arguing they offer no additional security over full-disk encryption on hard drives.
• Full-disk encryption ensures data on hard drives is secure and inaccessible without proper authentication, even when servers are powered off.
• Proton VPN prioritizes a strict no-logs policy, independent audits, and operating servers in privacy-friendly jurisdictions to protect user privacy.

yesterday Lemmy was in the list of Proton communities so I joined

today it's not there any more

does anyone know why?

edit: never mind, it's in a different section and I had a brain fart

as you were

Hello!

As per the title, Proton Calendar for Android does not appear to support multiple signed in accounts.

This means I can only get notifications for personal appointments or client meetings, but not both, and the web version never prompts to enable notifications on Android. I am thus liable to miss events on whichever calendar I am not currently signed into.

This is not an acceptable level of support for a professional suite. Is there a roadmap for when this feature will be added?

Is anyone else having this issue? I’ve tried mobile both app and browser and desktop but the option just isn’t there.

I at least appreciate that the very first header is "Why build Proton Wallet?".

from the team:

Hi everyone,

In Proton's 2024 user survey, it seems like AI usage among the Proton community has now exceeded 50% (it's at 54% to be exact). It's 72% if we also count people who are interested in using AI.

Rather than have people use tools like ChatGPT which are horrible for privacy, we're bridging the gap with Proton Scribe, a privacy-first writing assistant that is built into Proton Mail.

Proton Scribe allows you to generate email drafts based on a prompt and refine with options like shorten, proofread and formalize.

A privacy-first writing assistant

Proton Scribe is a privacy-first take on AI, meaning that it:

• Can be run locally, so your data never leaves your device.
• Does not log or save any of the prompts you input.
• Does not use any of your data for training purposes.
• Is open source, so anyone can inspect and trust the code.

Basically, it's the privacy-first AI tool that we wish existed, but doesn't exist, so we built it ourselves. Scribe is not a partnership with a third-party AI firm, it's developed, run and operated directly by us, based off of open source technologies.

Available now for Visionary, Lifetime, and Business plans

Proton Scribe is available as a paid add-on for business plans, and teams can try it for free. It's also included for free to all of our legacy Proton Visionary and Lifetime plan subscribers. Learn more about Proton Scribe on our blog: https://proton.me/blog/proton-scribe-writing-assistant

As always, if you have thoughts and comments, let us know.

Proton Team

from the team:

Hi everyone,

We know that there are quite a few myths and recurring questions, as well as a lot of anxiety about passwords and password managers. And it’s understandable - the more of our data is online, the more anxious we are to protect it.

Here are some articles to answer some of the common questions:

• 🥔 What is hashing and salting and how does it protect your passwords
• ⚠️ How can passwords become compromised?
• 🍏Is it safe to use “readily available” password managers such as Chrome’s and iCloud’s?
• 🔐 Is it safe to have your passwords auto-filled?
• 🎰 How can you be sure that auto-generated passwords are better than the ones you come up with?

We’ve also looked into some of the most common attacks that can compromise your passwords and what to do about them:

• 👊 Brute force attack
• 📖 Dictionary attack
• 🚿 Password spraying attack
• 🌈 Rainbow table attack

We hope you learn something new or share them with your loved ones to help improve their password security :)

Let us know in the comments what other questions you have about passwords and password managers.

The Proton Team