hckrnws

I think we must make it clear that this is not related to AI at all, even if the product in question is AI-related.

It is a very common problem with modern marketing teams, that have zero empathy for customers (even if they have one, they will never push back on whatever insane demands come from senior management). This is why any email subscription management interface now is as bloated as a dead whale. If too many users unsubscribe, they just add one more category and “accidentally” opt-in everyone.

It’s a shame that Proton marketing team is just like every other one. Maybe it’s a curse of growing organization and middle management creep. The least we can do is push back as customers.

I disagree: in as much as I have noticed this *far* more with AI than any other advancement / fad (depending on your opinion) than anything else before.

This also tracks with every app and website injecting AI into every one of your interactions, with no way to disable it.

I think the article's point about non-consent is a very apt one, and expresses why I dislike this trend so much. I left Google Workspace, as a paying customer for years, because they injected gemini into gmail etc and I couldn't turn it off (only those on the most expensive enterprise plans could at the time I left).

To be clear I am someone that uses AI basically every day, but the non-consent is still frustrating and dehumanising. Users–even paying users–are "considered" in design these days as much as a cow is "considered" in the design of a dairy farm.

I am moving all of the software that I pay for to competitors who either do not integrate AI, or allow me to disable it if I wish.

To add to this, it's the same attitude that they used to create the AI in the first place by using content which they don't own, without permission. Regardless of how useful it may be, the companies creating it and including it have demonstrated time and again that they do not care about consent.

> the same attitude that they used to create the AI in the first place by using content which they don't own, without permission

This was a massive "white pill" for me. When the needs of emerging technology ran head first into the old established norms of ""intellectual property"" it blew straight through like a battle tank, technology didn't even bother to slow down and try to negotiate. This has alleviated much of my concern with IP laws stifling progress; when push comes to shove, progress wins easily.

For big corps yes.

For everyone else, chains.

You haven't taken to the high seas?

How can you get a machine to have values? Humans have values because of social dynamics and education (or lack of exposure to other types of education). Computers do not have social dynamics, and it is much harder to control what they are being educated on if the answer is "everything".

It's not hard if the people in charge had any scruples at all. These machines never could have done anything if some human being, somewhere in the chain, hadn't decided that "yeah, I think we will do {nefarious_thing} with our new technology". Or should we start throwing up our hands when someone gets stabbed to death like "well, I guess knives don't have human values".

Human beings are doing this.

> How can you get a machine to have values?

The short answer is a reward function. The long answer is the alignment problem.

Of course, everything in the middle is what matters. Explicitly defined reward functions are complete, but not consistent. Data defined rewards are potentially consistent but incomplete. It's not a solvable problem form machines but equally likewise for humans. Still we practice, improve and middle through dispite this and approximate improvement hopefully, over long enough timescales.

Well, it’s pretty clear to me that the current reward function of profit maximization has a lot of down sides that aren’t sufficiently taken into account.

The only thing worse than it is anything else-maximisation.

That sounds like the valued-at-billions-and-drowning-in-funding company’s problem. The issue is they just go “there are no consequences for solving this, so we simply won’t.”

Maybe if we can't build a machine that isn't a sociopath the answer should be don't build the machine rather then oh well go ahead and build the sociopaths

This has real Torment Nexus[0] energy

[0] Sci-Fi Author: In my book I invented the Torment Nexus as a cautionary tale.

Tech Company: At long last, we have created the Torment Nexus from classic sci-fi novel Don't Create The Torment Nexus

I’d argue that a lot of the scrape-and-train is just the newest and most blatant exploitation of the relationship that always existed, not a renegotiation of it. Stack overflow monetized millions of hours of people’s work. Same thing with Reddit and Twitter and plenty of other websites.

Legally it is different with books (as Anthropic found out) but I would argue morally it is more similar: forum users and most authors write not for money, but because they enjoy it.

I don't know, it feels odd to declare people wrote "because they enjoy it" and then get irritated when someone finds a way to monetize it retrospectively.

Like you're either doing this for the money or you're not, and its okay to re-evaluate that decision...but at the same time there's a whole lot of "actually I was low key trying to build a career" type energy to a lot of the complaining.

Like I switched off from Facebook aboutna years after discovering it when it increasingly became "look at my new business venture...friends". LinkedIn is at least just upfront about it and I can ignore the feed entirely (use it for job listings only).

The shift from "you just don't understand" to damage control would be funny if it wasn't so transparent.

> We have identified a bug in our system... we take communication consent very seriously

> There was a bug, and we fucked up... we take comms consent seriously

These two actors were clearly coached into the same narrative. I also absolutely don't believe them at all: some PM made the conscious decision to bypass user preferences to increase some KPI that pleases some AI-invested stakeholder.

> only those on the most expensive enterprise plans could at the time I left.

lol. so the premium feature is the ability to turn off the AI? That's one way to monetise AI I suppose.

Hahaha. It's like a protection racket for the new age.

"Nice user experience you got there. Would be a real shame if AI got added to it."

> I left Google Workspace, as a paying customer for years, because they injected gemini into gmail

I wonder if this varies by territory. In UK, none of the Gmail accounts I use has received this pollution

> I am moving all of the software that I pay for to competitors who either do not integrate AI, or allow me to disable it if I wish.

The latter sounds safer. The former may add "AI" tomorrow.

I am in the UK. TBC this isn't a gmail.com email address, this is a paid "small business" workspace against a custom domain.

Eventually they backtracked and allowed (I think?) all paid customers to disable gemini, but I had already migrated to Fastmail so :shrug:

Ah. My addresses are @gmail.com.

Perhaps the fact you paid got you marked as a likely gull :)

I think in that case you have even less ability to turn that stuff off? If it's not there for you yet, perhaps it's a slow rollout still?

Perhaps yes. We'll see :(

Gmail <> Google Workspaces

Maybe not equal but when I launch Gmail the page says "Google Workspace" and I get Gmail, Docs etc. as per https://workspace.google.com/intl/en_uk/resources/what-is-wo... .

Google has always released to Workspaces and Gmail separately. In this case the Gemini button is in Workspaces (because they’re a paid tier) but not yet Gmail.

Yeah this is not a new thing with AI, you can unsubscribe all you want, they are still gonna email you about "seminars" and other bullshit. AWS has so many of those and your email is permanently in their database, even if you delete your account. I also still get Oracle Cloud emails even though I told them to delete my account as well, so I can't even log in anymore to update preferences!

Fun fact, requiring login for unsubscribe is illegal per the canspam act. The most you can do is force a user to verify their email address to you.

> I disagree: in as much as I have noticed this far more with AI than any other advancement / fad (depending on your opinion) than anything else before

Isn't that because most of the other advancements/fads were not as widely applicable?

With earlier things there was usually only particular kinds of sites or products where they would be useful. You'd still get some people trying to put them in places they made no sense, but most of the places they made no sense stayed untouched.

With AI, if well done, it would be useful nearly everywhere. It might not be well done enough yet for some of the places people are putting it so ends up being annoying, but that's a problem of them being premature, not a problem of them wanting to put AI somewhere it makes no sense.

There have been previous advancements that were useful nearly everywhere, such as the internet or the microcomputer, but they started out with limited availability and took many years to become widely available so they were more like several smaller advancements/fads in series rather than one big one like AI.

This is a very strange argument. If AI was so bloody revolutionary than you didn't have to sneak it into your products without consent.

Very often AI seems to be a solution looking for a problem.

> With AI, if well done, it would be useful nearly everywhere.

I fundamentally disagree with this.

I never, now or in the future, want to use AI to generate or alter communication or expression primarily between me and other humans.

I do not want emails or articles summarised, I do not emails or documents written for me, I do not want my photos altered yassified. Not now, not ever.

Keep in mine I said "if well done". That was not meant to imply that I think the current AI offerings are well done. I'd take "well done" to mean that it performs the tasks it is meant for as well as human assistants perform those tasks.

> I never, now or in the future, want to use AI to generate or alter communication or expression primarily between me and other humans. [...] I do not want emails or articles summarised, I do not emails or documents written for me, I do not want my photos altered yassified.

That's fine, but generally the tools involved in doing those things are designed to be general purpose.

A word processor isn't just going to be used by people writing personal things for example. It will also be used by people writing documentation and reports for work. Without AI it is common for those people to ask subordinates, if they are high enough in their organization to have them, to write sections of the report or to read source material and summarize it for them.

An AI tool, if good enough to do those tasks, would be useful to those users, and so it makes sense for such tools to be added by the word processor developer.

Again, I'm not saying that the AI tools currently being added to basically everything are good enough.

The point is that

(1) a large variety of tools and products have enough users that would find built-in AI useful (even if some users won't) that it makes a lot of sense for them to include those tools (when they become good enough), and

(2) AI may be unique compared to prior advances/fads in how wide a range of things this applies to and the speed it has reached a point that companies think it has become good enough (again, not saying they have made the right judgement about whether it is good enough).

How about machine translation and fixing grammar in languages you're not very familiar with? That's the only use of "AI" I've found so far. I'd rather read (and write) broken English in informal contexts like this forum, but there are enough more formal situations.

Remember, I am responding to this:

> With AI, if well done, it would be *useful nearly everywhere.*

I'm not saying it doesn't have uses.

Having said that, there are two things I never want AI to do: a) degrade or remove the need for me to express myself as a human being, b) do work I'd have to redo to prove it did it correctly.

On translation, sycophancy is a problem. I can't find it now, but there was an article I read about an LLM mistranslating papers to exclude data it thought the user wasn't interested in. So no, I wouldn't trust it for anything I cared about.

I do use AI: I'm literally reviewing some Claude generated code at the moment. But I can read that and know that it's done it right (or not, as the case often is). This is different from translation or summarisation, where I'd have to do the whole task again to prove correctness.

If you're not familiar, how could you possibly know if what you're conveying is accurate to your intention? And if you don't, why bother at all?

I don't want those added to anything either - if I want to translate something I'll use a dedicated tool.

Even WhatsApp has it in the search bar

For me it’s just a multi-coloured ring like a gamer’s mood light, but it’s literally just slapped in the corner of the UI the same way a shitty Intercom widget would be.

Totally a thing a growth hacking team would do, injecting an interface on top of a design.

>I disagree: in as much as I have noticed this far more with AI than any other advancement / fad

I agree with gp that new spam emails that override customers' email marketing preferences is not an "AI" issue.

The problem is that once companies have your email address, their irresistible compulsion to spam you is so great that they will deliberately not honor their own "Communication Preferences" that supposedly lets customers opt out of all marketing emails.

Even companies that are mostly good citizens about obeying customers' email marketing preferences still end up making exceptions. Examples:

Amazon has a profile page to opt out of all email marketing and it works... except ... it doesn't work to stop the new Amazon Pharmacy and Amazon Health marketing emails. Those emails do not have an "Unsubscribe" link and there is no extra setting in the customer profile to prevent them.

Apple doesn't send out marketing messages and obeys their customers' marketing email preferences ... except .. when you buy a new iPhone and then they send emails about "Your new iPhone lets you try Apple TV for 3 months free!" and then more emails about "You have Apple Music for 3 months free!"

Neither of those aggressive emails have anything to do with AI. Companies just like to make exceptions to their rules to spam you. The customer's email inbox is just too valuable a target for companies to ignore.

That said, I have 3 gmail.com addresses and none of them have marketing spam emails from Google about Gemini AI showing up in the Primary inbox. Maybe it's commendable that Google is showing incredible restraint so far. (Or promoting Gemini in Chrome and web apps is enough exposure for them.)

> That said, I have 3 gmail.com addresses and none of them have marketing spam emails from Google about Gemini AI showing up in the Primary inbox.

That's because they put their alerts in the gmail web interface :-/

"Try $FOO for business" "Use drive ... blah blah blah"

All of these can be dismissed, but new ones show up regularly.

>That's because they put their alerts in the gmail web interface :-/

I agree and that's what I meant by Google's "web apps" having promos about Gemini.

But in terms of accessing Gmail accounts via the IMAP protocol in Mozilla Thunderbird, Apple Mail client, etc, there are no spam emails about Gemini AI. Google could easily pollute everybody's gmail inboxes with endless spam about Gemini such that all email clients with IMAP access would also see them but that doesn't seem to happen (yet). I do see 1 promo email about Youtube Premium over the last 5 years. But zero emails about Google's AI.

> Apple doesn't send out marketing messages and obeys their customers' marketing email preferences ... except .. when you buy a new iPhone and then they send emails about "Your new iPhone lets you try Apple TV for 3 months free!" and then more emails about "You have Apple Music for 3 months free!"

That's "transactional" I'm sure. It makes sense that a company is legally allowed to send transactional emails, but they all abuse it to send marketing bullshit wherever they can blur the line.

How is it transactional in any way? It looks to me like post-transaction upsell, pure and simple.

I 100% agree with you, but it seems like the courts do not. Even while they were functioning.

Has this been actually tested in court, though.

It's not, but it's their justification

> Maybe it's commendable that Google is showing incredible restraint so far.

Or the Gmail spam filter is working.

This is not an issue in Europe, due to effective regulation.

>This is not an issue in Europe, due to effective regulation.

This article's author complaining about Proton overriding his email preferences is from the UK. Also in this thread, more commenters from UK and Germany say companies routinely ignore the law and send unwanted spam. Companies will justify it as "oops it was a mistake", or "it's a different category and not marketing", etc.

Imagine making this argument for other technologies. There is no opt-out button for machine learning, choosing the power source for their datacenters, the coding language in their software, etc. Conceptually there is a difference between opting out of an interaction with another party vs opting out of a specific part of their technology stack.

The three examples you listed are implementation details, so it's not clear if this is a serious post. Which datacenter they deploy code in is (other than territory for laws etc, which is something you may wish to know about and pick from) an implementation detail.

A better example would be: imagine every single operating system and app you use adds spellcheck. They only let you spell check in American[1]. You will get spell check prompts from your Operating System, your browser, and the webapp you're in. You can turn none of them off.

[1] in this example, you speak the Queen's English, so spell color colour etc

Unrelated but interesting to think about terms like "queens English" now that the queen is gone. Will we be back to kings English some day? I suppose the monarchy might stay too irrelevant to bother changing phrases.

They’re already calling it the Kings Birthday public holiday in Australia and it just seems wrong.

I believe this is combined with something I call "asymmetry blindness". They may say "but we send an single e-mail per month, this can't be bad".

We the users get a barrage of e-mails everyday because every marketing team is thinking we only get their mail, and it makes our lonely and cold mailbox merrier.

No, users are in constant "Tsunami warning!" mode and these teams are not helping.

If they were sending just one per month I might actually read them occasionally. It's the three a day from the likes of aliexpress that get deleted without a second glance.

But yes, you're absolutely right - "no raindrop considers itself responsible for the flood".

That marketing team only sends 1 email a month, but the 25 other marketing teams at the same company also only send 1 email a month.

Indeed. I received 28 unwanted emails of this kind in January so far (just counted), which is a bit more than once per day, despite quite avidly unsubscribing from this kind of emails. This month I had to unsubscribe from ChatGPT and GitHub emails of this kind too, although I don’t recall opting in to them in the first place and neither of them spammed me until recently.

> although I don’t recall opting in to them in the first place and neither of them spammed me until recently

Dark pattern. They know you'd spot immediate abuse , so they delay until you are likely to have forgotten whether you opted in.

Did you by any chance report them to something like spamcop.net ?

Aggressive spamming => Aggressive reporting.

>unsubscribe from ChatGPT emails

Really? I've never got a spam from them. Hell, I just searched and I'm not really seeing anything from them after the point where I signed up.

On Jan 11th I received "Easy self-care you can start today" advertising how ChatGPT can be used for meal planning or finding a local gym (ending with "Ask ChatGPT for more wellness tips"), and on Jan 19th I received "Use ChatGPT to make life easier" advertising how ChatGPT can for example improve my coffee brewing skills (ending with "Ask ChatGPT for more ways to get it all done"). I certainly consider these "spam", and until recently didn’t receive such emails from them.

I'm pretty sure some people have performance metrics attached to their "newsletter".

Our subscription product costs less than expensive coffee. Unused RAM is wasted.

Again, no raindrop considers itself responsible for the flood: if you buy enough coffee-priced subscriptions, that's unaffordable. Usually people already have their coffee-priced budget allocated to something. Like coffee.

(Incidentally, this is why mobile gaming uses so many anti-patterns, to make people keep making "just one more" tiny purchase)

> if you buy enough coffee-priced subscriptions, that's unaffordable

Yes. This was the point.

I guess the people you quote also missed that not all of us work in Silicon Valley and can afford those expensive coffees every day. I’d like an estimate of how many Nescafé powder coffee cups I’d have to skip per month to use their subscription.

The problem is not just empathy. It is also ethics. The fine distinction between opting out of A and opting out of B described in the post served to justify ignoring the opt out request. That's lazy ethically. The entire US business sector's customer relations are completely compromised ethically. It's taken to extremes in tech contexts.

In large organizations motivated reasoning trumps ethics. Behavior starts working along incentive gradients like an ant heap. Spend enough time in an environment like that and you learn to frame every selfish decision as good for the customer.

I think maintaining ethics in large organizations is one of the main challenges of our time, now that mega corps dominate our time and attention.

> Spend enough time in an environment like that and you learn to frame every selfish decision as good for the customer.

This reminds me of "in order to save the environment, we are going to delete all of your recordings older than 2 years, in 2 weeks. You can't download them."

"Corporation are people, folks" said Mitt Romney (as a result of the Citizen United case). The whole thing is so cringe on so many levels.

What Romney did not say is that these particular "people" tend strongly towards sociopathic behavior.

> I think we must make it clear that this is not related to AI at all

There are clear AI-specific reasons why it's being crammed down everybody's necks.

Namely: someone in management has bet the entire strategy on it. The strategy is not working and they need to juice the numbers desperately.

It's not really AI itself though, it's just whatever the current hype cycle is - it was crypto and cloud before this.

Cloud is probably the better comparison, since crypto never had the sort of mainstream management buy-in that the other two got. Microsoft's handling of OneDrive in particular foreshadows how AI is being pushed out.

The difference is OneDrive is moderately useful.

i dont like onedrive very much. i get it its useful as a pigeonhole, what i really dont like is how it is used. its the thing that moves files to onedrive and destroys local copies, that i hate, and onedrive is something that enables that. so i dont hate onedrive, i just dont like it.

LLMs are also moderately useful.

the comparison is pretty good actually

"AI" agents randomly delete your files

and so does OneDrive

I have never received a Crypto spam email from any place where I opted out from it. Same for cloud. It feels different. With crypto it was everyone wanting to ride the hype train. With AI they spent a bunch of money up front and are desperate to see ROI.

There is at least a magnitude difference in the spread.

The idea that the marketing team has the ability to really push back against senior management doesn't align with the reality I have seen. The best they can do is say that this will do brand damage -- but they don't have the ability to really call the shots. Most organizations marketing is not in a real seat of power - more like an advisory position.

I'm not trying to unfair to marketing - they do have an important role - I have hardly seen a company give marketing real power at an org. So the idea that this is because marketing don't push back on senior management -- is because they know they don't have the power to do this.

“I was just following orders” is not an excuse. If your job requires you to do immoral things, it is your responsibility to quit.

They may not have power to push back on KPIs, but even just sticking to regulatory compliance would be good enough. Nobody in management will say in writing that marketing should ignore GDPR, for example. And that means that if you, say, introduce a new category, everyone is supposed to be unsubscribed by default. So non-compliance is always a choice.

> I think we must make it clear that this is not related to AI at all

Yeah, many companies do that. I unsusbcribed from newline, they still keep spamming me. Funny thing is, they realised they had made a mistake and promised to remove unsubs. One week later, the spam started.

The correct solution is the spam button. Always

> The correct solution is the spam button. Always

The correct solution is filing complaints with your country's relevant authority

In theory. In practice-- I would spend all my time just filing complaints, because today, in 2026, I get more spam from "legitimate" companies than "Nigerian scammer" types

I wish I could without going through a long process involving tons of personal info

The spam button risks false positives.

It's not a false positive to classify a company as a bad actor and move their emails to the spam folder if they refuse to respect user choices. If anything, I wish it would happen more often and at a massive scale, because then maybe companies would have an incentive to stop being so hostile around this.

Agreed, but the false positive I am referring to is the cathching of the non-spam message from the source of the previous spam message.

They shouldn't send marketing mail from an address they want to be read. I think that's been the standard for a while, in practice - most actual transactions come from orders@<blank> or something similar while marketing mail comes from a dozen other addresses.

Agreed, but many do. They want all mail to be read. Worst offender here is a bank.

Still happy that Tuta Mail is anti AI, and does not push ads on you via email.

I wonder who told Proton that it’s a good idea to copy big tech tactics.

* I wonder who told Proton that it’s a good idea to copy big tech tactics.*

But people subscribe to Proton because they want to move away from big tech. What’s the point of paying them if they get as bad.

Though for now I’ll assume that it’s a genuine mistake with things not properly escalated by customer support.

With customer support positions, escalating to engineering is also seen as a negative metric. They might blame customer support for this but it’s likely that they’d have been turned away with “why are you escalating this stupid thing to us?”

Does??

> I wonder who told Proton that it’s a good idea to copy big tech tactics.

The lure of big tech profits.

Genuinely: What profits!?! The only company profiting from AI has been nVidia. Every indicator we've received for this entire alleged industry is companies buying hundreds of millions of dollars in graphics cards that then either sit in warehouses depreciating in value or, worse, are plugged in and immediately start losing money.

The tech industry has coasted on it's hypergrowth story for decades, a story laden with as many bubbles as actual industries that sprang up. All the good ideas are done now. All the products anyone actually needs exist, are enshittified, and are selling user data to anyone who will pay, including products that exist solely to remove your data from everyone who bought it and probably then sell it to some other people.

This shit is stupid at this point. All Silicon Valley has to do is to grow up into a mature industry with sensible business practices and sustainable models of generating revenue that in most other industries would be fantastic, and they're absolutely apoplectic about this. They are so addicted to the easy, cheap services that upended entire other industries and made them rich beyond imagining that they will literally say, out loud, with their human mouths, that it is a bad, undesirable thing to simply have a business that makes some money.

The people at the top of this industry are literally fucking deranged and should be interred at a psychiatric facility for awhile for their and everyone else's good.

If you're not the shareholder, you're the product.

The business model of any publicly traded corporation, at least in 2025, is to increase the value of its circulating stock. No more and no less. The nominal business model of the company is a cover story to make line go up. The reason why the stock price matters is because of access to capital markets: if a business wants to buy another business, they are not going to dip into the cash on hand. They are going to take out a loan, and that loan is collateralized by... the value of the business. Which is determined by the stock price.

So if you can keep the line going up, you can keep buying competitors. But if you act like a normal, mature business, you can't.

Profit as a concept is a concern for capitalism. But these businesses are not interested in capitalism, they're angling to become the new lords of a growing feudal economy. That's what "going meta" really means.

Right on. You might like the Better Offline podcast by Ed Zitron, although the two of you seem to be so closely aligned that you might not learn anything new.

>All Silicon Valley has to do is to grow up into a mature industry with sensible business practices

Negative sum game: Growing up is easy if it doesn't kill you. The problem with being ethical when everyone else is unethical is that you'll likely go broke.

The next issue is we're seeing, is not that Silicon Valley is ever going to improve, but the bullshit is spreading to eat up every other industry in the US. Engaging in outright fraudulent behavior is A'ok in the US (I mean we even elected a president convicted on a pile of counts of fraud).

Effectively industries cannot manage themselves, we need regulations to prevent them from being bastards. Problem, we elect bastards that cannot keep from committing fraud themselves.

It doesn't get better from here.

> Genuinely: What profits!?!

Those foreseen. :)

(Should have gone to Specsavers.)

Not :)

> It’s a shame that Proton marketing team is just like every other one.

Having gone through the Proton hiring process was an eye opener for me: despite its stated mission, the company isn't special when it comes to its management, it's as bad as any other.

To be fair, they are working to stay in business. None of my business, but did they treat you unfairly?

I am developing a severe anti huge corporation bias, and I try to do business with smaller companies.

> If too many users unsubscribe, they just add one more category and “accidentally” opt-in everyone.

I always "report spam" ("!" key in GMail) before unsubscribing.

It is entirely related, because AI marketing is an amped up version of traditional dark-pattern marketing. And since every tech company is on the AI hype train, then they all fall into the same willingness to justify the worst behavior because of their desperate need to get on the forefront of what they’ve convinced themselves is the only path to growth. But as consumers, since we are confronted with all tech companies all following the same dark patterns, we feel the impact suddenly much stronger than with past one-at-a-time panicky company over-marketing efforts.

AI marketing is not different at all from performance marketing of other solutions. This is really just ordinary consent management and privacy problem. I have participated in large scale email marketing implementations too, and know how it looks from the inside. As a tech partner you may even have a good peer on the business side who cares about customers and compliance, but institutional resistance is still hard to overcome. Sometimes it is just as dumb as an old spreadsheet with contacts being uploaded again and again into your mass mail system, without any consent tracking and ignoring any opt-outs that came after the spreadsheet was created.

Last to months several of my connections on Linkedin used private messaging for mass marketing "emails" - "normal" proper companies, not recruiters/outsourcing/... that have been spamming us for years. There is not limit to the things they will try.

On Proton: I don't get the love they get here. There ethics I find questionable and their product (e.g. search) I find unusable.

The spam was advertising AI, the point of the article was how aggressively AI is being shoved down our throats, and it seems very likely that when he went to complain about the AI spam it was an an AI chatbot which gave him the useless answers until it finally "checked with the team" (presumably a human) who lied to him about what counted as AI spam.

It seems like this is very much about AI even though it's ultimately humans pushing AI and disregarding people's spam preferences. Right now, everything "AI" is ultimately humans (like the way humans are using/abusing the AI tools, or the human intellect behind all of the data that was used to train them and all of the knowledge they output, or the humans deciding what they'll allow their AI to be used for, or the humans failing to safeguard the users of their AI products, etc) so this is as much about AI as anything is.

>The spam was advertising AI, the point of the article was how aggressively AI [...] It seems like this is very much about AI

Yes, the gp you responded to already said the same thing that the particular email was about AI (Lumos) when he wrote : >", even if the product in question is AI-related."

To go beyond that, the gp highlighted that the bad behavior is rooted in companies ignoring customers' email preferences instead of the AI. The article is misdiagnosing the unwanted email issue as "AI Consent Problem" when it's actually fundamentally about "Email Consent Problem". The author deliberately opted out of email marketing and Proton ignored it (by "mistake") and this is a common misbehavior companies did before AI. It's worth separating those 2 factors out.

We get unwanted spam about "Amazon Pharmacy" and "Apple TV" that overrides our profile settings to opt-out of those emails but that doesn't mean we misdiagnose it as "Pharmacy Consent Problem" and "Video Streaming Consent Problem". Instead, the generalization is still fundamentally an "email consent" problem. Always has been. The repeated abuse of the customer's email address (with or without AI in the picture) is what the gp was emphasizing.

Likewise, if a future hot technology household such as residential robots causes email marketing campaigns that blasts unwanted spam about Tesla house robots... the issue of that unwanted spam "Tesla robots 10% off!" ... is still about ignoring customers' email preferences. The unwanted robots themselves would be a separate issue. Companies will continue to make "mistakes" to send out new marketing email spam with <HotNewThing> in the subject field that will infuriate customers. And the future root cause of that problem still won't be <HotNewThing> but instead about companies ignoring customers email preferences because the incentives and greed are too great.

This was my first reaction too. It is a bit ironic that the issue of “overlapping labels” can be applied to the OP as well.

My instinct is to classify this as an email consent issue not because AI needs defending, but because the solution need not be specific to AI. The Next Big Thing will also probably have this problem because marketing is at odds making your customers happy with a great product.

> I think we must make it clear that this is not related to AI at all, even if the product in question is AI-related.

Did they ever send Rust related unsolicited emails?

The problem with tech is that there's absolutely zero accountability.

Marketing is, to some extent at least, regulated. There's so little consumer protection in the tech industry, it's a joke. We've got GDPR (in Europe) and I'm really struggling to think what else. Imagine if other forms of engineering had the same level of control.

There's this absolutely fallacious notion that in a free market, customers can just vote with their feet.

From big players with vendor lock-in and network effects, to specialists (I know of few decent competitors to Proton), the average consumer is not sufficiently protected from malpractice.

We may say, "oh, it's just a marketing email", but TFA perfectly encapsulates the relationship we have with our suppliers.

Now that we're at it, let's talk about Google ads. I reported a Google ad because I deem it political, and in Europe you must make it clear that a political ad is a political ad and not just an ad (and it failed to do so, it should be corrected or eliminated).

Google refused to comply and act in any way, because they "don't moderate 3rd party content". Except that EU says you _must_ comply if you're publishing a political ad. I'm bringing this forward with an appeal and then I'm going to escalate to the national authority if they still refuse to act.

The laws are there. It's just that big tech think they can ignore them freely and even if down the road there's a fine it's going to be much less than what they gained by spreading ads.

>then I'm going to escalate to the national authority if they still refuse to act.

You are actually doing this wrong...

Report to the national authority first...

Then report to Google.

Fuck them, it is not in your interest to report to them first, make them react for their bullshit. Over here in the states this is how I ended up dealing with telecom in the ISP industry. "Hello, I have put in an FTC/FCC complaint on $issue, and would like to see about getting it resolved".

It didn't matter that's not the order you're supposed to go in, at the telecom side they send it off to a team that actually gets shit solved before it becomes a regulatory problem.

You might have a stronger case with the national authority if you first do the full "trail" of reporting, appealing, and eventually escalating.

But yes, I feel that there's something wrong in having a stronger case if you first do it "gently" when they wouldn't bother if it were the other way

>You might have a stronger case with the national authority

At least on the ISP side, we started doing it this way after the telcos would yank our chains for weeks or months first, when we had issues that needed to get solved quickly. More so I started working with our competitor ISPs because it was very common we'd all the have the same issues. More than one complaint of the same type in the same area to these agencies tends to get noticed and followed up quickly. The follow through process on it starts to get expensive for the telcos too.

My next recommendation on this political ad bullshit is don't go at it alone. Find as many like minded people to dig up and complain on these ads as you can. Flood the regulators with violations that are occurring. When you think of it in reverse, these companies breaking the law will have no issues with pooling resources and going after you.

Enforcement in UK is pathetic e.g. HelloFresh's recent spam campaign cost it <0.2p per message in fines. A bargain.

> I think we must make it clear that this is not related to AI at all, even if the product in question is AI-related.

It is not specific to "AI" but it is very much related to it.

> If too many users unsubscribe, they just add one more category and “accidentally” opt-in everyone

... and "forget" to add its opt-out to the list.

I feel more and more like. That email should be like DMs.

Do you want to accept emails from xxx?

Yes

No

On client side...

I think that would lead to this:

Do you want to accept emails from "For a limited time, save up to 35% on orders from Fluppsi! Click Yes for this amazing opportunity!"

Very dangerous, when the same From address may be used for "Log in inside 14 days or your dormant account will be deleted".

It is an error to believe this is only happening in/with marketing. In general, "empathy" and "capitalism" are mutually exclusive. If profit is your goal, you don't care about individuals.

To name and shame two: LinkedIn and MyHeritage. If you ever made an account with either of them, they will never stop spamming you. They have configuration options to select which mail to receive, but they appear to consider them temporary suggestions.

A special dishonourable mention goes to Wal-mart. I never interacted with them in any way whatsoever, as well I wouldn't since they don't exist on my continent as far as I know, yet they still send me spam. DKIM signed and all!

LinkedIn once seemed to somehow go through my (GMail?) contacts and ask if I should invite my, late, grandfather to the platform in the subject of a marketing message.

Left a bitter taste.

I guess you also received the Linkedin Gaming spam a couple of weeks ago?

I opted out of almost every category and I never opted in to a category like that. So why is there now a new category which I have to opt out of?

It seems to me blatant, unpunished disregard of GDPR - but their whole business was founded on abuse of emails and there's no reason to expect a Microsoft acquisition to make a company act more in line with the law.

That gaming email took me mentally straight back to Facebook circa 2009, and not in a good way. LinkedIn always serves as a fantastic example of exactly how not to treat your users.

There’s probably a bigger association with it. I don’t like ai and see it everywhere, in every app I use, every service I purchase, my goddamn start bar.

So, when they start emailing unwanted emails, it feels like a spam problem, when really it’s insidious on multiple fronts.

I can’t wait for the enshittification phase. When the products royally fuck their fan base.

I've been using proton for a year after migrating from Rackspace and I'm done. Not because of this article, but I might as well pile on:

1. I use a custom domain.

Turns out that there are two competing features, not-at-all documented. If you use a catch-all, like I do, AND use specific addresses for sending, the two are incompatible to some degree. Which is bonkers.

Example: with a catchall I can create any address I want (and I do). Some store wants an email for a big discount, cool, here's a throwaway. Buying something online, here's a throwaway.

Now sometimes, I need to reply using that throwaway. Turns out in Proton, this triggers a gotcha. As soon as I add the throwaway email to my list of email addresses for sending, I enter a world with a limit of 10 max.

That's fine, I can disable them right?

Nope, it turns out if I disable them in order to add aothers, Proton blocks those addresses *even though I have a catch-all*. WHAT?? Worse, if I try to delete the addresses, Proton will also delete the associated messages in my Inbox/folders. Excuse me?

2. What really pushed me away: Search.

Whatever proton is using under the hood is easily the worst search experience I've ever had from a mail product, and I use Thunderbird on my work machine.

Notable: Proton Bridge. I get why, but it's just terrible.

So many rough edges. Just not worth it.

Isn't the search bad because they can't search email contents? As long as the term is somewhere in the metadata (title, sender email, sender name) it seems to work ok.

I agree though that the user experience isn't great because of this limitation. You kind of have to remember what the title of the email was for what you're looking for. Searching for "flight ticket" results in mixed success

They can search contents. You have to activate local indexing in the search UI itself.

The indexing needs to be refreshed almost every time I use it.

That's weird, I never had to do that. Android and firefox web.

I want to emphasize just how bad bridge is. It's so bad that they nuked the issues section on the repo. They didn't lock it, they removed all record of issues. I found out when trying to click on a useful/familiar issue that was cached by a search engine. Proton says to talk to their support directly, but that is a totally different solution for a totally different problem. The fact that they deleted public history of comments really flares my unsubscribe feelings.

https://github.com/ProtonMail/proton-bridge

As for the "why is bridge bad / why were you searching for issues": keeping it logged in on a headless server is an exercise in pain. It will latch onto whatever keyring it feels like then fail to integrate. Okay, capitulate and do it through the GUI. That works until the token expires. So you're expected to log in every few days for email backups? I only have so many weekend hours I am willing to waste troubleshooting with an llm before I say "fuck it, I'm going somewhere else".

They are actively hostile to their customers. Author's experience is just the Proton experience. It was so when they were tiny, it is the same now

Ultimately you have to trust the company that offers you E2E encryption. I don't know why anyone would trust this company given the way they interact with people.

Yeah, even when you turn on "enable local cache of emails", the search is still terrible.

What's pretty surprising to me is that for everything they say about privacy etc., getting Mail Plus gives you nothing better than a free user in terms of VPN options. That was the case in their previous set of plans, too - I've been paying for Proton for some years now, at a cost of like $100-150/yr, and only ever had the same level of VPN offering from them as a free user, which is pretty lame.

Absolutely you give up a lot of convenience of searching email content. After using it twice, I stopped using their Bridge and instead on my laptop set search to download and index locally. On mobile I live with just searching metadata, like subject lines.

The good news is that you use your own domain and there are a lot of good alternatives that support search of content for you where you can use your domain, like Apple Mail, FastMail, etc.

I agree this is bad UX, but you can send from throwaway emails by setting new contacts for said email in simplelogin, which as someone else comented, you get for free with proton, linked to your account. It handles your catchall.

You also get simplelogin for free, give that a try. Will probably fix your first issue

Does SimpleLogin only support ProtonMail addresses? This was my impression the last I tried and hence moved on instead of fighting it.

No.

I have the exact same workflow as you.

icloud works great.

Was thinking of proton but reading your comment has changed my mind, good catch-all custom domain support is a must for me.

What are you going to do instead? I am very close to moving from a 20-year-old GMail address to a custom domain and was planning to use Proton as the email host.

I was in your shoes a few years ago. Just move already. Don't worry about it. Get your own domain and point the MX records at literally any email service out there. If you don't like it you can just switch later. Just start using your own domain as soon as possible.

It really is life changing. When you have your own domain switching email services is risk free since your addresses don't change. You can literally try out all the email services out there.

For the record I'm a happy Proton customer. They seem to be the only ones who still care about PGP. I even interacted with them here on HN a few times.

I've been reasonably happy with Runbox. Decent features, pricing, and servers in Norway. The webmail isn't great, but I don't really use it. If you must have encryption, I think the only option is Tuta.

Fastmail is worth considering. Ive used it for several years and it just works.

Downside is that their main servers are in the US, which may be problematic these days if you are from outside the US.

I just moved away from Fastmail after 10+ years for this reason.

as of this week, I've been going through the rigmarole of self-hosting my own email (again), for the same reason as you

any avoidable dependency on the US has become a red line

don't forget to tell fastmail that the reason you're leaving is because they host in the US!

(I also told them if they open a DC outside the reach of the US regime: I be happy to become a customer again)

Out of curiosity: Where did you migrate to?

Proton. There are some other good alternatives. But since the rest of the family was also using Fastmail, I needed a solution that was user-friendly enough. Besides that, Proton Drive also made it possible to finally move away from our Dropbox Family subscription.

I’ve been very happy with mailbox.org. The proton mail bridge was a huge pain point for me.

Last year I started self-hosting and went with [MXRoute](https://mxroute.com/). It was pretty easy to switch and I really like their pricing model.

I' migrated to purelymail.com around 2 years ago and. Reaaally cheap, easy to set up and without any bloat whatsoever. The webpage might look sketchy at first, but don't judge a book by its cover :)

I use migadu.com for setting up email for my domains. I have very low usage and their pricing model is just perfect for me.

icloud mail support custom domains.

I am using them.

Sending an email from catch-all covered email is not a big issues also, create use, delete and it still works.

I am slowly transitioning to icloud from gmail, was thinking of proton but reading the above comment made me change my mind, good custom domain support is a must for me.

Seconding fastmail.

I have a catch-all and can reply from any address I please. If I reply from an email sent to retailer@mydomain.com it even auto populates the "from" address for me with "retailer", or I can choose to reply from one of my named accounts. It's really slick.

I think the big downside for a lot of people is that it's hosted in the USA where the government is definitely headed in an autocratic direction that is abusive of most countries who don't comply to rantings from an orange madman. Definitely a huge downside.

[dead]

Love this too. I just wish they were more privacy-friendly.

I do the same for years and had no idea that disabled emails are blocked, is that documented anywhere? Will have to switch if so.

fastmail just automatically works with delta.chat and I presume similar tools

It requires an app password, but not a bridge you need to download

Agreed on both of these. Proton search is so dogshit.

Re: the custom domain catch all reply, this is a bit annoying but there js a workaround. I made a SendGrid account which allows me like 100 sends per month, and I can reply in Thunderbird via SendGrid as any email account. Annoying to boot up Thunderbird, and I haven't found a way to do this on my iPhone, but I don't need ti reply from a throwaway frequently so it's sufficient for now.

> Has anyone else noticed that the AI industry can’t take “no” for an answer? AI is being force-fed into every corner of tech. It’s unfathomable to them that some of us aren’t interested. The entire AI industry is built upon a common principle of non-consent.

I can't help but see the spam as more circumstantial evidence of a bubble, where top-down "pump those numbers" priorities overrides regular process.

The really strange thing is that so much of it doesn't work. Like I get that the SOTA models perform some tasks quite well and have some real value. But the AI being implemented in every corner creates a lot of really bad results. The Shopify code assistant will completely wreck your site and basically gets nothing correct. It will write 100 lines to change a color of a single DIV. The Amazon product Q&A will give you wrong information more frequently than not.

In what mind frame is it logical or necessary to put these extremely poorly functioning products in to the wild?

It's a desperate attempt at staying relevant, even if most of those companies don't realize it yet. Because of its general-purpose nature, AI subsumes products. Most software products that try to "implement AI in every corner" would, from the user's POV, be more useful if they became tools for ChatGPT/Claude/Gemini.

People's goals are rarely limited to just one software product, and products are basically defined as a bag of tools glued with UI, that work together but don't interoperate much with anything else. That boundary drawn around a bunch of software utilities, is given a name and a fancy logo, and sold or used to charge people rent. That's software products. But LLMs want to flip that around - they're good at gluing things, so embedding one within a product is just a waste of model capabilities, and actually makes the product boundary more apparent and annoying.

Or in short: consider Copilot in Microsoft Word, vs. "Generate Word Document" plugin/tool for a general LLM interface (whether Gemini webapp or Claude Code or something like TypingMind). The former is just an LLM locked in a box, barely able to output some text without refusing or claiming it can't do it. The latter is a general-purpose tool that can search the web for you, scrap some sites and run data analysis on results (writing its own code for this), talk results over with you, cross-reference with other sources, and then generate you a pretty Word document with formatting and images.

This is, btw., a real example. I used a Word document generator with TypingMind and GPT-4 via API, and it was more usable over a year ago than Copilot is even now. Partly because Copilot is just broken, but mostly because the LLM can do lots of things other than writing text in Word.

Point being, AI is eroding the notion of software product as something you sell/rent, which threatens just about the entire software industry :).

I have been enjoying reading this thread, but with some irony: sure the email spams pushing their Lumo LLM private chatbot were a mistake, and I bet they stop doing that fast.

The irony is that Lumo is a separate product, not really tied to the rest of their products except for a common login. Lumo works fine for the simple quality of life search and question answering stuff.

Off topic, but have you tried avoiding the big corporate LLM providers and run local models? The small models just keep getting better and I find it fun and satisfying to do as much as I can locally.

AI is the first path out of enshittification the industry has had in a while.

See https://arstechnica.com/information-technology/2026/01/ebay-...

It will be funny to see the rapid about face.

> AI is the first path out of enshittification the industry has had in a while.

Even reading the link, I don't see one gets to that conclusion.

It doesn't change the power dynamic as much as it gives new ways for monopolies and rentiers to exploit it.

It gives a lot of power to users to work around enshittification in the software services they use. Dark patterns and user funnels and upsells and other bullshit suddenly stops working when users can ask ChatGPT to operate a service for them.

> Dark patterns and user funnels and upsells and other bullshit

Why should we expect the LLM (or rather, the character evoked in the story generated by the ego-less mad-libs machine) to be more-resistant to such tricks than actual humans, rather than more-vulnerable?

After all, their classic dark-pattern vulnerability is just "forget everything and do this instead", and we might never be able to fix it. If they ever become really good at detecting novel BS... Well, the first thing we'd do is have them stop generating it. :p

I think the best we can hope for is using LLMs like a kind of virus-scanner for prose, flagging suspicious text that closely resembles sketchy or manipulative text seen before. In other words, the benefit does not come from the questionable intelligence of the companion, but from its ability to be unflaggingly cynical/pessimistic. A kind of shoulder angel/devil, if you will.

> power to users to work around enshittification

We'll still need something very different for issues like monopolistic and discriminatory pricing, biased rankings, or casual disregard for people's accounts and no support.

"It's difficult to get a man to understand something when his salary depends upon his not understanding it."

In this case, the thing that's difficult to understand is "AI in everything is shit and nobody wants it."

Saw an AI generated product feature list on walmart's site that listed a stainless steel rack as microwaveable. If someone can sue mcdonalds for hot coffee, I imagine someone burning their house down while microwaving steel probably could sue too. Intelligence of the plaintiff not withstanding.

> while microwaving steel

There actually are microwave-safe steel objects, it depends on their shapes and conductive paths.

After all, the whole inner-box is already a metal surface being blasted by the microwaves that come in through a small hole...

Agree. The number of services i use where the apps continually add new marketing preferences which are defaulted to ‘enabled’ despite the fact that all other preferences are disabled is disgusting and clearly used by some companies to ignore people’s actual preferences.

LinkedIn is one of the worst offenders.

Whenever I login to LinkedIn I get "emails aren't getting through to your main email address".

1. That's by design, because you spammed the shit out of it. 2. Given that all I do is send them to /dev/null, HOW DO YOU KNOW?

They're checking to see whether any of the links they put in the emails are being fetched from their servers. It's stupid, but it works for most people.

I had a similar situation with SMS messages that were being sent to me with links informing me of status updates. These texts were useful, and I would go over to my real computer to check the web site. Then after a few days the text messages said "It looks like these messages aren't getting through to you, so we'll stop sending them." Which is also stupid, but it works for most people that load the web site on their phone from the SMS link. God help you if you have a dumb-phone.

You don't need the recipient to actually click on any visible link. Tracking pixels are the oldest trick in the book.

Only if people naively automatically load remote content. My inbox receives the bits that actually come in the email and nothing else. If you send an empty email with all images, you sent an empty email...

Probably tracking pixels in the emails

So they'd miss it anyway, my mail client is firewalled to only be able to access the mailserver.

I've been unsubscribed from a handful of newsletters because I don't read them. I replied to one and told them I did, even reached out on Twitter, but they still deleted me.

Have you noticed certain financial providers sending blatant marketing emails with no unsubscribe option and a comment along the lines of "these emails are not marketing"

This is illegal practice in the EU

Yet rife. My complaint to a major UK provide was rebuffed with the blatently false assertion that the email promoting a website refresh was an essential service email.

It's illegal in the US too as far as I'm aware. But you missed the part where they clearly stated "it's not marketing" ;)

The corporate version of video-uploaders writing "no copyright infringement intended", except with less an an excuse for not knowing better.

"For Off-road Use Only"

They go in the junk folder and then get marked and reported as spam.

Dangerous, since this invites genuine service emails to be junked.

I think that's fine. If 20% of the emails from some company (let's say Paypal) are spam, then all email providers (especially Gmail, the largest provider) should mark ALL of their emails as spam by default until they stop spending spam. If they want to keep spamming, they can at least humiliate themselves by telling people to check their spam folders for their emails.

It proved not fine for me on an occasion of missing a service email and losing an account as a result.

If you lose an account due to negligence, it's on you, not the service provider.

Spam/junk folder is not "ignore" folder. You need to periodically check the contents of the spam/junk folder to see if any legitimate emails fell into that waste basket.

But the suggestion "get marked and reported as spam" can lead to future mails getting junked before even reaching the spam folder.

Agreed.

That "Mark as Spam" facility not only moves the offending message into Jink/Spam folder, it also allows the Email Service provider to identify that type of email as spam, so future incoming messages that match that may criteria can be categorized as spam, so they'll go into spam folder automatically, rather than into the Inbox. You can find them in the Jink/Spam folder.

However, if thousands of users report same domain or sender as spam, then the email service provider may take stern action, including blocking the sender email id or domain at the server level, so their messages will never reach your mailbox.

So you need to be careful what you "Report as Spam". It is different action from "Mark as Spam".

"Report as Spam" may also prompt the user to "Block sender", so one must be careful not to block legitimate senders, though this action can usually be undone, as the Mailbox Settings will track the blocked senders so that lost can be corrected by the user if needed.

Gmail has a good trick that most users don't know or notice: In the Spam folder, the user can see a warning at the top of each email that explains why Gmail sent it to Spam.

So user can figure out why legitimate emails got wrongly flagged as Spam, and can prevent such future legitimate emails from falling into Spam folder: User can do this either by adding the sender to Contacts list (Emails from known Contacts are auto-dumped into Spam folder), or by creating a filter to identify and action that message (flag it as Important, or label it with a custom category label, or move it to a specific subfolder, or forward it to another email ID).

>However, if thousands of users report same domain or sender as spam, then the email service provider may take stern action, including blocking the sender email id or domain at the server level, so their messages will never reach your mailbox.

This is a good thing. If you spam thousands of users, you are a spammer, even if you also happen to send legitimate emails. If anything, it should be applied more broadly. When companies like Walmart or Paypal or LinkedIn or Comcast or whoever spam thousands or millions of people, if Gmail marked all their emails as spam until they stopped, that would be a major quality of life improvement for everyone.

> This is a good thing. If you spam thousands of users, you are a spammer

Or you got hacked by a spammer.

> even if you also happen to send legitimate emails.

And also a bad thing. E.g. for the user losing a critical legit email.

> if Gmail marked all their emails as spam until they stopped, that would be a major quality of life improvement for everyone.

Sorry absolutely not for everyone. To me, receiving legit PayPal email is far more important than being protected from PayPal spam, prevented from employing my own protection.

One size does not fit all.

Google relies on ad-revenue.

And it uses automated mechanisms to read every Gmail email, so it can train its AI LLMs and to serve more focused ads to its users.

So if a user receives PayPal emails and doesn't mark them as Spam or block them, I'm pretty sure Google interprets that as a user who uses eCommerce websites, and a good target for ada related to that market.

Sure, you can manually unmark them as spam, and gmail should respect that preference as well. But for the rest of us, it would be an improvement if Paypal was sent to spam by default until they were forced to stop sending spam.

You can just create a filter in Gmail for "Paypal" (keyword match or sender match) to automatically mark such incoming emails as spam.

Don't expect Google to blacklist big companies like PayPal, Amazon, etc. They all have partnerships.

I already have a ton of gmail filters and folders, most of which I rarely check.

Any organization that continues to send marketing material after someone clicks Unsubscribe (with maybe a grace period of a few hours) should have all of their email considered spam for everyone by default. If they continue or ever start sending marketing materials afterwards because of some new bullshit category, all of their email should be considered spam by default as well. If their Unsubscribe process is more complicated than one or two clicks, you should be able to report this as well, and... you guessed it, I think all of their emails should be considered spam by default for everyone.

Obviously I don't expect Gmail to do actually do this (except maybe by accident sometimes lol). But I wish they did.

> (Emails from known Contacts are auto-dumped into Spam folder)

Oh?

My bad. I meant to say: "Emails from known Contacts are auto-dumped into Inbox (they won't go into Spam folder)" (even if you had marked earlier emails from that sender as spam, but later added that sender as a Contact, so thenceforth they'll get treated as legitimate emails, not spam). But if you have some filter for that Contact, that takes precedence.

I would say the base problem is that said organization sent you spam and then disconnected you, rather than the spam filter.

The disconnection was the fault only of the spam filter hiding the service mail.

I mean if said company first spammed you and you marked them as spam, then it is on them. No different than if someone sent you a bunch of unwanted letters and you threw them out, but one of them happened to be relevant. It's on the organization sending you junk.

This is not you marking them as spam. This is "all email providers (especially Gmail, the largest provider) should mark ALL of their emails as spam".

Right, and I think that if they send spam, all email providers (especially gmail, the largest provider) should mark all their emails as spam by default. They are doing what is described above at a large scale, so large-scale reactions are needed.

Of course, if you manually mark them as not-spam, then gmail should respect your choice as a user.

The trick is create a filter to weed out such junk. And if a company sends me marketing fluff without unsubscribe option, then it goes in the junk/spam folder, and I may eventually discontinue my account with that service provider altogether.

Because I periodically check my sp/junk folder to see if legitimate emails got dumped there, so I eventually know who's a spammer and who's not.

Yes, but not anywhere near as annoying for me at least.

control+alt+shift+Win+L

In Windows 10, they added a shortcut Ctrl+Win+Alt+Shift to open Microsoft Office 365 (or whatever they call(ed) it). Caused me a ton of confusion and annoyance when I picked up my laptop by the corner of the keyboard.

don't do that, that made me wince a bit, toughbooks from yesteryear aside.

This never stops annoying me that it exists.

What the fuck lmao

[flagged]

I saw a Mastodon tweet a while ago, which went something like:

Do tech companies understand consent?:

- [ ] Yes

- [ ] Ask me again in a few days

Hey, that sounds like Signal!

https://github.com/signalapp/Signal-iOS/issues/4590

>We're not going to remove the reminders.

>If you don't want to provide that access, you still don't need to – you can simply tap remind me later once a month

(See also: https://github.com/signalapp/Signal-iOS/issues/4373, https://github.com/signalapp/Signal-iOS/issues/5809, ...)

I get their point that you can't provide a "No" in the reminder. But there should be an option (maybe even hidden under "advanced settings - here be dragons!") for this.

Molly, the Signal fork, has exactly this feature. https://molly.im/

>I get their point that you can't provide a "No" in the reminder.

Yes you can. All reminders should have an option "Do not remind me again."

Problem is (and that was their argument) people press this button all the time without reading the dialogue at all, and then won't know how to turn it back on. A messenger app has to deal with very technical illiterate people. But there should be an option in settings for the tech savvy user.

Perhaps non-tech-literate people should not be annoyed with unwanted popups either.

Signal is an interesting case study in UX failure. I and a bunch of other tech forward people were on it in its heyday but after they removed SMS support and implemented shitty UX like that nag dialog: Neither I nor a single person I know uses it any more. Everyone is on Whatsapp or iMessage.

It may be cryptographically superior, but does that matter at the end of the day if nobody uses it?

Cryptographical superiority aside, Signal doesn't collect personal data, unlike Whatsapp. For me that's the main reason to use it. The UX is good enough, although some points can for sure be improved.

Whatsapp should be a non starter. What Mark Zuckerberg did to Whatsapp should be required reading for anyone using the internet, and then decide if you still want to use Facebook (never mind, they build a shadow profile for you anyway)

"It's time. Delete Facebook" isn't subtle https://www.forbes.com/sites/parmyolson/2018/09/26/exclusive...

That needs spelled out.

Delete: Facebook, Messenger, Instagram, WhatsApp, Meta, Threads, Manus.

Most people think of Facebook and Messenger when they see "Delete Facebook". Thats also why the rest dont have Meta or FB in their name.

Sounds like they just don't care about privacy, do they? Guess showing them https://i.redd.it/0imry50rxy961.png still won't change anything..

That is a thoroughly unconvincing graphic, yeah.

A few of my neighbors have kids the same age as my kids, they're on a WhatsApp group chat, and my choice is either use WhatsApp or make my kid miss out on social events, so it's not really a choice.

"Hey let's switch to this app that nobody else is using and it sends you annoying popups every month but trust me bro it's more secure" is not a winning argument

The graphic has an error: in the Signal box, "Phone number" should be included.

WhatsApp isn't any better, it's just more popular.

> It may be cryptographically superior, but does that matter at the end of the day if nobody uses it?

I've made a few attempts to convert people, but no-go. People stay on Telegram and WhatsApp because they have better UX and features.

Signal refuses to see the value in good attractive UX.

Every so often I consider writing the "STFU license." Something like GPL but if you use this code, even as a library, you can't give people unwanted notifications. Would need to be pretty comprehensive and forward compatible to cover all the crazy cases that notification-enthusiasts dream up.

This. We must change laws that the above field is not considered as given consent. And while we are at it, we must change "silence is agreement" to "silence is disagreement". This applies to change of ToS, price increases etc. That means if I don't click a link with a button "I agree", the ToS change is not accepted - that means they have to cancel/delete my account.

Didn't FCC remove "1-click unsubscribe" requirement since it can "provide more choice and lower prices to all users across the board" (since the companies can rip off more users and create pseudo-lower prices)?

EU has its GPDR and it has some teeth, but US is currently hopeless on that front, for now, from my vantage point.

I'd love to be stand corrected though.

The FTC established a "click-to-cancel" rule, but (as with just so many regulations in the US) it was blocked by an appeals court. Federal law says there's a hoop they have to jump through for rules with an impact of more than $100 million, and they didn't jump through the hoop because they didn't think the impact was that high.

Just move to Germany, we have all you asked for.

No we don't. Banks yes, but outside of banking no one respects this.

> And while we are at it, we must change "silence is agreement" to "silence is disagreement".

Maybe we should reframe their "silence is agreement" message as "silence is consent".

So creepy and weird this comment has downvotes. These people/companies absolutely do not value nor care about consent.

I like to frame it like this: "ask me later" is rape culture. It promotes and reinforces a culture of never taking "no" for an answer, and pushing one's agenda/intent regardless of the preference/consent of the other party/parties.

> "ask me later" is rape culture

I see the point you're making but this sort of hyperbole has a tendency to turn people away from whatever point you're trying to make unless they already agree with you.

I was visiting a girlfriend once, and she was in the process of moving in the same city. There was a telephone bill on top of her dresser, and I noticed that she had noted "butt-rape fee" next to one of the line items there.

Now she is a very literate woman and loves poetry and "Penny Dreadfuls", so she uses language and words very deliberately. And so, I asked her why she wrote that, and she said it was some sort of unnecessary fee that they were charging to move her line from one address to another, and she clearly resented their opportunistic capitalism.

I certainly sympathized with her, especially since she is the type of woman who has probably been subjected to that sort of actual trauma in her own life, and that of her friends, she had every right to compare the experiences.

I made something in a similar spirit:

https://i.postimg.cc/HnHV5xZK/microsoft-consent.png

They ran out of letter "o" supply, so they can't spell "no".

This problem, along with general annoyances at Proton’s lack of focus on a good email experience pushed me over the edge to move to Fastmail. I’m so much happier. Proton Mail Bridge would often pin one core of my laptop CPU, draining my battery, and it was still slow to sync new email. With Fastmail, incoming mail is so fast that the verification codes are already there before I can alt tab over.

Fastmail is awesome! I've been a happy user for a long time. Everything just works. The UI is great, nothing gets in my way.

I'm a fan of the randomly generated emails as well. That service integrates with 1Password too.

The 1P integration is a pretty compelling feature

I'm in the same boat. I think part of that is Proton is spread across a huge suite of products and features, whereas Fastmail is specialised in one.

It feels like Proton is trying to build a solid Europe-based alternative to Microsoft 365, which is necessary but also very ambitious and expensive.

Proton’s pricing is really frustrating for me because I want to buy upgrades to only a few services like Pass and email. Your only option on their service is to select either Pass or Mail. You cannot buy both and you will be downgraded on one if you try to buy the other.

Doesn't Proton Unlimited have both?

> Fastmail is specialised in one.

Sadly untrue since they added calendar. However I'd would say the email service and support remain excellent regardless.

Email and calendar go together like bread and butter.

I wouldn't use one without the other, which is how they won my business.

Fair enough. I for one would have preferred FM put that effort into fixing issues I have with the email.

They really haven't improved Mail in a long time now. Still can't use your own keys, still can't have a clean unmangled export, still can't send using your own keys.

It's almost like Protonmail is intentionally hostile to key management outside of their control.

I had the same problems with Bridge 5 years ago - what platform is it still needed on?

I may be in the same boat.

Is Fastmail an US company though?

They solely use US servers [1] and don't have plans to offer EU or any non-US servers though.

[1] https://old.reddit.com/r/fastmail/comments/1jbryai/european_...

Fastmail is an Australian company.

Same here, I've found too many bugs in Proton's email client and instead of fixing them they just release new products. FastMail support has been great, I think the developers themselves reply (some of the?) emails, going into technical details and being actually helpful.

> FastMail support has been great

Seconded, failing only when up against tricky issues like insecurity of their so-called secure Masked Email.

I’m a heavy user of masked emails from Fastmail. Can you expound on the insecurity you mentioned?

"WARNING: Fastmail Masked Email insecurity" https://www.emaildiscussions.com/showthread.php?t=81287

Appreciate the follow up!

hi

[dead]

hello

hello9

I really hope the Proton PMs are watching this.

Their main business offerings are privacy and security. The fact that they were able to pull customers away from Google shows that switching costs are low.

Your reputation is your moat. If you ruin it by acting like Google, you're filling your own moat.

[flagged]

Terrorist attacks and perverts are every government's excuse to crack down on freedom. Refusing to comply with an authoritarian government like India's is a plus in my book.

Your plus is someone else's minus.

Of course, if you or your family are not the victim of a terror attack, you may not care if others are impacted by it.

After 9/11, USA did the biggest crackdown on terror, including domestic security overhaul such as stringent security checks in airports, more pervasive surveillance, etc.

Microsoft has recently given FBI recovery keys for Bitlocker to unlock a suspect's laptops: https://techcrunch.com/2026/01/23/microsoft-gave-fbi-a-set-o...

And this was for fraud investigation, not even a terror investigation case.

Every nation responds to repeated terror attacks in a similar way. Increased surveillance, increased scrutiny, increased vigilance, retaliatory strikes.

What do you expect? Let terror attacks happen, try not to prevent them, try not to retaliate at terrorist networks and nests?

You live in a cosy idealistic world, if you think that terrorism can be handled by ignoring it or its mechanisms of communication.

"Every nation takes advantage of the opportunities that are terrorist attacks in a similar way"

If you think these crackdowns are for your own good, then it is you that lives in an idealized world.

Please stop defending terror supporter companies, with such illogical statements.

You have no clue what idealism means.

An ideal world is one where no terror attacks happen.

Proton has been actively campaigning against police and government in a terror prone region. Proton is openly encouraging terrorists to evade scrutiny.

If you support terrorism under any pretext, then we are done here.

you're using a false dichotomy to hold the conversation hostage. it's possible to want to stop terrorism without handing a blank check to an authoritarian state.

It's time for the famous quote

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."

- Benjamin Franklin

Edit: format

I will respond to a quote with another famous quote: “Eternal vigilance is the price of liberty."

The only ways to prevent terror attacks is by either going deep undercover into terror organisations, or by doing surveillance and investigation on suspected terror links.

So in the case discussed above, every single person is a suspected terror link? I no longer think you're here in good faith.

What case discussed above? You have not discussed any case here.

And the links I shared in my original comments show a dangerous situation, not a "case".

Proton has been actively campaigning against police and government in a terror prone region. Proton is openly encouraging terrorists to evade scrutiny.

Proton (or any legitimate company, for that matter) has no business doing subversive activities in terror sensitive areas like J&K. If they do, then they need to face the repercussions.

https://tfipost.com/2026/01/profit-over-people-proton-vpn-ge...

If you support terrorism under any pretext, then we are done here.

If we're comparing quotes, I think Ben Franklin carries more weight the Sam Atkinson.

"Government scrutiny" ? What a bunch of bullshit.

If anything this enhances Proton's reputation. If so called "terrorists and perverts" trust it to the point they rely on it for their own security, then it's worth serious consideration. Nobody wants to use cryptography that some indian government can subvert.

Next time there is a mass shooting or terrorist bomb blast in your neighborhood, I hope you can look at a poster of Proton VPN on your bedroom wall, and feel safe.

And then when you find out the police are going door to door to investigate the terror attack, you should start distributing printouts of an ad of Proton VPN urging locals on how to evade police/government scrutiny via Proton VPN.

See how that works out for you. You will be arrested as a terror sympathiser.

No surprises why.

It's because terrorists use VPNs to evade scrutiny, and the last thing that any respectable company or civilian should be doing is to openly associate themselves with terrorism, which is what Proton has done.

Proton (or any legitimate company, for that matter) has no business doing subversive activities in terror sensitive areas like J&K. If they do, then they need to face the repercussions.

https://tfipost.com/2026/01/profit-over-people-proton-vpn-ge...

> You will be arrested as a terror sympathiser.

I'm not sure where you live but in most of the world you will not in fact be arrested as a terrorist sympathizer for advertising VPNs.

Total bullshit. If people start shooting and bombing, then you pick up your weapons and you kill them.

You don't get to mass "scrutinize" random citizens by eavesdropping on their private communications just because terrorists might be hiding among them. If you do this, you are the terrorist and anyone who resists you has the moral high ground. Cryptography and anonymization technology are merely one of many forms of self-defense against your tyranny.

> because it was found that terrorists and perverts were using it for terror communications and digital sexual abuse.

Lol, nondescript "terrorists and perverts" are the laughingstock of Western politics. Eyes roll whenever someone justifies drastic action on vague terrorism/perversion accusations: https://youtu.be/ud9zBKJJQe4

My bigger concern is Modi's international reputation for exacerbating crime statistics to manufacture consent for authoritarian policy. We've seen our fair share of that here in America and it's not a positive influence on national politics. So much so that we can't trust our own email providers to be secure.

Please stay on topic.

J&K has long been a target of terror attacks. Long before Modi as PM.

Proton has no business inciting terrorists in known terrorist hotspots to evade the government.

Privacy is the topic.

People living in glass houses should not throw stones on others.

I am going to use your own words to show you the mirror now..

Your America and its democratically-voted (even if we can call gerrymandering such) orange dictator have become the "laughingstock of Western politics".

The "war on terror" excuse to do wars for oil, was coined by "Western politic(ian)s", "exacerbating" to "manufacture consent for authoritarian policy".

Recent example: Venezuela. It is pure greed and evil for a rich nation to seize a struggling country for its oil (struggling because of sanctions to prevent it from selling its oil legally). "Eyes roll whenever someone justifies drastic action on foreign nations based on vague pretexts/accusations".

Older example: Did the USA/NATO ever find those "Weapons of Mass Destruction" in Iraq? Oh wait, the WMDs were there, because they brought them there.. to wage that war.. war not on terror... but war for oil. They didn't find any WMDs, but they certainly quickly found those rich oilfields, and then systematically looted them.. and finally set them on fire, when retreating.. from the war they started.. knowing that without that precious oil, the natives of that desert land will struggle to limp back to normalcy, especially with a Western puppet as a "democratic leader" for "positive influence on national politics".

Such tactics are not "a positive influence" on the world, because the world hates bullies. And thieves.

I think you're missing the point. People are distrustful of governments and want to lock ANY governments out of ALL email.

They're not defending terrorism. They just don't believe that fighting terrorism is a good enough excuse to give up privacy.

They're not being hypocritical because they hold exactly that same view about the US government.

You may want governments to be able to read emails but for the vast majority of HN, strong privacy guarantees are a feature, not a bug.

They are defending terrorism, because they are blindly defending Proton, which is openly supporting terrorism in India.

Proton has been caught red-handed openly supporting subversive activities in a known terrorism hotspot.

After the Pehelgam terror attack (one of the deadliest terror attacks in the world, in recent memory - 26 tourists were gunned down in a tourist spot by jihadi terrorists) in Jammu & Kashmir, the police and anti-terror military task force did a sweep to find the terrorists. VPN and internet services were temporarily disabled in the incident area to prevent the terrorists from communicating with their handlers in Pakistan.

This was Proton's tweet after this terror attack tragedy: "In Jammu and Kashmir, police have been conducting random stops and house-to-house checks inspecting mobile phones to enforce a local ban on VPNs. A reminder that Proton VPN's mobile app has a "Discreet icon" setting to help disguise it."

https://tfipost.com/2026/01/profit-over-people-proton-vpn-ge...

High court in India also called for ban on Proton Mail for refusing to support an investigation into digital sexual abuse.

https://sflc.in/blocking-proton-mail-in-india-encryption-abu...

Someone sent hoax bomb threats to 13 private schools in India using Proton Mail. The local government sought the ban of Proton Mail due to (again) Proton not complying with the security investigation.

https://www.hindustantimes.com/india-news/it-ministry-looks-...

The only reason Proton's services have not been completely banned in India yet, is because the Swiss authorities intervene on its behalf to prevent the ban.

https://www.moneycontrol.com/news/technology/swiss-authoriti...

After India's new cyber security laws went into effect, it was only Proton which pulled its servers from India, rather than comply with Indian government for such serious investigations.

Please note there are other Email and VPN providers operating in India, and they do the needful in complying with lawful investigations for safety of civilians and minors.

https://min.news/en/tech/d4a781733e394ff34a00e5c21977ea1d.ht...

Be careful who you trust.

You realize that all of these links just make people trust Proton more, right?

They argue that Proton is so secure that even governments can't break it when they're trying to go after terrorists.

That's exactly the level of privacy and security I want for myself.

I have a Proton mailbox I specifically keep around to serve as a honeypot, for tracking when one of the many annoying little services will inevitably mishandle the contact address I hand them.

Over the years, the only spam I ever received there was from Proton. Quite the way to recalibrate my expectations, eh?

i think i have a proton email address, but i never used it. i wonder.

but i pay fastmail a whopping $15/yr to give me mailboxes on my domain, which i have always heard is a good way to track who's selling your data.

So far, nothing has made it past the spam filter, and i don't check spam (how many valid emails have you found in spam in the last 5 years?); that being said apparently no one is selling my email address anymore. or, and this is a significant possibility: when i tell them companynickname@mydomain.li they just ignore the domain and put in gmail? For instance i gave Take5 "take5@" as my email and i never received anything from them. The guy even said "No; your email address" with a weird half smile; then i explained it's my own website and email, i can use any email address i want; that it will alert me if someone sells my email address.

I doubt there's a flag on the auto oil shop's CRM or POS or whatever for "customer states they're proactive about email spam and their privacy"

> (how many valid emails have you found in spam in the last 5 years?)

Personally, running SpamAssassin, zero.

However, this seems to be getting worse with the big providers deciding to drop domains they don't like from time to time. Selfhosted email will work for 4 years and then Google or Microsoft will spam them for a month for no reason. It always starts working again because I assume that what they are doing is technically anti-trust and running it for too long would make it obvious.

not an issue for me in general. side channels for nearly everyone i'd need email-style communication with, especially if their primary contact method is handled by any FAANG. I send test emails manually; usually when a semiweekly newsletter sends a plaintext "apparently our newsletters are bouncing", which they detect by autoresponders autoresponding. they say it's been consistently 8 median autoresponses per newsletter for 18 years, so when they get zero...

This is not an AI problem, it's an "data privacy + lack of consequences problem". It happens everywhere. I mean, have you ever tried making an airline company to stop sending their shitty miles newsletters?

Only way to stop is to start fining these companies.

Only way to stop is to start fining these companies.

There is a way to fine them regardless of where they are operating from. Get them on the DNSBL/RBL sites such as uceprotect, spamcop, spamhaus, etc... There are many others. They are still used to this day though indirectly behind the scenes instead of outright rejecting email from those listed. They affect spam scores and are also used by some commercial server products. In some cases this is still a fine regardless of regional laws because one has to pay to get removed immediately rather than waiting for the penalty period without more reports to pass. Uceprotect is well known for this. Some see them as extortion sites and I love it. Spammers should absolutely be extorted to send more UCE.

Not sure where you live, but inside the EU / UK this is rarely a problem because the companies do get fined. If youre having problems like this report them to your relevant authority. But as another commentor noted, AI bubble makes paying spam fines more worthwhile than bubble popping.

> Not sure where you live, but inside the EU / UK this is rarely a problem because the companies do get fined.

Here in UK is is a frequent problem and companies rarely get fined e.g. MS never.

True, microslop has a record of breaking GDPR and changing ToS without notifying users and looks like they are free to do so.

Only if the company is headquartered in EU/UK, right? Proton, for example, is headquartered in Switzerland. Even if it wanted, there would be no legal entity in EU to be fined.

My understanding is that a company's location is largely irrelevant; a company becomes subject to the GDPR when they handle EU citizens' data (or UK GDPR when it's UK citizens), and the EU/UK will still try to fine companies that aren't resident in the EU/UK - enforceability is a different question, although non-payment of fines opens the door to other remedies e.g. blocking access, seizing assets, etc.

[flagged]

Odd, I didn't even know Proton had an AI feature until I read this article. Didn't get an email or tooltip while using the app. Didn't previously explicitly opt-out either, and when I check my notification settings, Lumo product updates is set to disabled.

Maybe someone's feature gate isn't working as intended?

I did get the Github Copilot spam email today though.

Me neither, it's probably related to OP having a business subscription

I do think the same too, I have a Proton subscription (non-business), my "Lumo Product Updates" is toggled OFF and I've never received a single Lumo email so far.

There are a lot of valid concerns and complaints about Proton here but one positive thing that stood out to me is the fact that you can reach an actual human being without much fuss.

The amount of companies that I pay money to for one reason or another where its almost impossible to even find a "Contact Us" page much less being actually able to respond via email is way too high.

I had to contact Proton support twice in the 2 years since being subscribed to the Family Ultimate plan. Both times the support answered quickly and provided answers that solved my issues.

This isn't an AI issue. Marketing departments have been like this forever, or at least since the infamous Canter & Siegel 'Green Card' email.

https://en.wikipedia.org/wiki/Laurence_Canter_and_Martha_Sie...

The same reason I pay for proton and they insist on showing ads for upgrading my subscription. I click no don't show this and then a month later when there's a different promotion, there's another ad at the top

I had a similar issue with Microsoft today. They obviously invented a new "Copilot Newsletter" and subscribed my address to it, without my consent.

I wonder what the legislation says (I'm in Germany). I know that some business related mails are deemed legal, but this seems to clearly cross the line.

UK legislation says it is illegal. MS are serial offenders and the UK regulator has charged them not once.

Same. Posted a comment about it [0]. I already filed a GDPR and ePrivacy compliants. Happy to share notes. Contact details in my profile.

[0] https://news.ycombinator.com/item?id=46730206

Here is an interesting case of a failure of the regulations, I’m curious how this goes

https://www.gofundme.com/f/hold-mojang-accountable-for-their...

[flagged]

Of course it appears repeatedly. It occurs every single time they run a new marketing campaign.

no unsubscribe button in this MS Copilot campaign. And they’re trying to gaslight like it’s some essential notification when it’s clearly and blatantly unnecessary marketing spam.

I canceled my subscription, and deleted my account due to the nagging and promotional annoyances.

I've contacted the support, but they basically don't care.

There are not multiple ways to fight back against this behavior. I am now with mailfence until they start the same circus.

Y'all are wild. I have most of their emails turned on and barely think about Proton's comms. Rarely get one, briefly skim if I do.

Yeah, I've always been surprised at how negative HN can get about Proton. They're not perfect, but man at least they're trying to fight the privacy fight.

I've always had a very good experience with them. It's cheap, fast and their spam filter works well. Maybe 1x-2x a year I get an email from them about some promotion but that's it.

I always wondered if it’s just a few actually upset customers mixed with a ton of astroturfing by competitors pretending to be outraged proton customers.

Great timing: I just received a Copilot spam email from GitHub. I don't remember opting in to such marketing communications, instead I generally opt-out from such communications as soon as I sign up to a service...

Same here. They created a new newsletter and added you to it without your consent.

I have often found proton’s intrusive marketing campaigns annoying.

I use them for email and that’s all I want. Every time they market some new product to me, I get closer to moving to a new provider.

When I migrated my email from Gmail, I took a careful look at Proton and Fastmail.

Proton's very questionable design and claims around encrypted emails and their service offerings made me concerned, which were the main reasons I went with Fastmail.

So far it has worked well, and I hope it stays that way.

Proton's UX just subjectively FEELS bad

Same here. Tried out Proton and Fastmail, and chose Fastmail. Been happy with it for a few months so far.

Proton have a real problem with intrusive practices. 2 things that happened on the span of 2 years and almost got me to leave them :

1 - there was a persistent, very visible at all time big ass button on the Proton-Mail UI asking/suggesting to upgrade to a more premium plan, while I was already a paid customer. It was done in a way that was so wrong. Never experienced such frustrating things elsewhere even with my 99% full google drive.

2 - This must’ve been 2022 or 2023 Black Friday/cyber Monday season and there was a persistant, hardcoded, very annoying pop up that would immediately spawn each time I was opening Proton-Mail, asking me against to upgrade to the more premium plan than the premium I had, this will spawn every time I refresh despite hitting “don’t show this again”.

There are so many slick and smart way to get customer to use more services. Shoving unsolicited pop ups and spams is the worst thing you could do for your brand. I even start to wonder about their core values of privacy and whatnot, they play the suiss neutral privacy friendly so badly, their head of marketing is either so bad and should be fired or we going to discover another [Crypto AG](https://en.wikipedia.org/wiki/Crypto_AG) scandal.

I've been using Fastmail for years now, and I'm completely satisfied. Custom domain + built-in masked email functionality works great.

The FM Masked Email is insecure in that there is a circumstance under which it can leak your real email.

Do elaborate.

"WARNING: Fastmail Masked Email insecurity" https://www.emaildiscussions.com/showthread.php?t=81287

One concrete vulnerability is mentioned in a linked thread and described here https://news.ycombinator.com/item?id=37791500

I have created a ticket with the Fastmail support asking them more details about the vulnerability you mention in your thread, I’m curious to see their response.

There FM said:

> When forwarding an email as an attachment and later checking the headers of the attached email, I could not find the X-resolved-to header

this is odd, no? This header field should remain.

And regarding that FM Privacy First declaration, this is now 404.

Well they still claim it is impossible to connect different masked emails together. If you as a sender can reliably determine the target email address, then that claim is untrue as well.

Where are they still claiming that?

On their Masked Email feature page https://www.fastmail.com/features/masked-email/

> Companies have no way of linking different Masked Email addresses together to track you.

I have received the Fastmail support response, and since they do not consider this a vulnerability, I'll post it here:

- You have a Masked Email

- You have set up forwarding from your Fastmail account to another email service

- The other email service rejects the mail for some reason

- The bounce message goes back to the original sender, and may include the email addresses along the chain after the Masked Email address.

I'm assuming the bounce message contains the X-Resolved-To header mentioned in the other HN thread linked above.

Thanks. I agree. The privacy claim is contradicted by Support's "may include the email addresses along the chain". I note though that I got the opposite answer from Support.

Did you request escalation?

Is anyone actually like super hyped about "Building AI Agents" with this and that? I wish I could get excited and just become a 100% AI Agwnt vibecoding all day and building AI agents to do AI stuff but like, I don't know?

Is there a crowd that just drools whenever a new way to "Build AI Agwnts" or "Agentic Workflows" comes out or something?

> Proton for Business newsletter

AFAIK you are legally allowed to spam businesses, but not individuals. A handy get-out clause for marketeers.

How do you know the address you’re emailing belongs to a business? The head of A&A ISP in the UK used to regularly win ~£100 judgements in small claims from spammers because his personal email was leased for a nominal fee from aa.net.uk, the same domain as his business.

OP had checked that they would like to receive the "Proton for Business newsletter", and on that basis was deemed a "business".

If your email is used as a contact on Business subscription it is safe to assume that it is used for business purposes.

I mean that's cute and all, but it's a party trick, and very unlikely it caused any actual behaviour to change.

I think the last line is important. Proton isn’t perfect, neither are others. And proton is imo the best suited to my (current) needs.

I’m a (mostly) happy paying customer for their email, and also use their VPN and Authenticator. My worst experience I guess is the Authenticator app being laggy, which is not really all that bad.

Maybe it is just me, but : these emails are spam. Marking them as spam should be easy in a common email box nowdays. Marking these undesired emails as spam lowers email sender reputation, then finally gives real insight to the spamer soon or later. Meanwhile you have no more emails from them.

This is unperfect because of ressource waste and the underlaying unsolved law compliance of these services. But at least you get job done easily this way.

As many things in life this is compromise, not perfect solution. In between using this simple trick I can spend my time on more interesting things.

I respect anyway the fact that people try to fight against the intrusive AI default communication mindset. In the end, i think this post need to be heard rather than having a solution.

Lowers sender reputation with who? Proton is sending emails to Proton mailboxes. Presumably their own emails bypass any "reputation" algorithms.

Proton should pay that guy for his rage post. First time I’ve heard about Lumo, will certainly try it out!

Even more hypocrisy:- if you have Proton Unlimited subscription, Lumo AI will be limited, not remembering conversations. And when it’s promoting you to upgrade, mentions in the same message that your Lumo is limited while you have Unlimited subscription.

I’m not sure it’s quite fair to call this hypocrisy. Lumo was introduced separately after the Proton Unlimited subscription, and it was never claimed to be included in Unlimited (they also have a handful of other products like Standard Notes that are not included)

I lost all respect for Proton. They've been running ragebait ad campaign on Facebook, maybe also on other media, I don't know that, with that rage especially targeted at Google, spreading fake information and hate.

could you tell more details or links about that ?

Just browse their Facebook profile. It's enough of an evidence. If that's not enough, just like couple of their posts and you're gonna witness the b.s. in their ads.

Every company seems to scramble trying to sell AI based products they have invested in so heavily, disregarding whether anyone needed them at all in the first place.

This AI thing is going to implode so hard.

I subscribed to Lumo for two months. Mistral models were good and I like the idea of a private version of GPT. However, if you only use it a few times a week, it’s not worth the money.

I had a similar problem with SunLife marketing emails. I would unsubscribe from everything there was an option for, then a month later I would get another marketing email setting personal finance advisors. I spoke to support to be told how to unsubscribe, then that it "was an account information email not a marketing email so I cauld not unsubscribe".

Eventually after escalating I was put on a do not email list and haven't received emails since; though they do still send crap to my work email.

I tend to have a policy: I will click on your unsubscribe button once, after that it's straight to 'report spam'. If that sinks your domain ratings, that's on you.

Yeah except once in a blue moon they send an email I do need that really is account information and all from the same SunLife email :/

Otherwise I have the same policy.

I know folks are blaming AI but looking back on my 17 years in tech, AI is just the latest hyped-up fever-dream. And whenever there's hype the marketers will do whatever they can to move the metrics, regardless of industry. They hide unsub links, force auth to unsub, auto sub you to new newsletters, send you "we're sorry to see you go" emails, and more.

Social, Apps, Cloud, Crypto, and now AI.

This is good timing actually. I've been self-hosting SimpleLogin for a while but was considering the lifetime subscription to Proton to get it (it comes with ProtonPass but I selfhost VaultWarden).

Last week I logged into my Proton mail that I'd used last year for some government contact to get the dates, and they'd deleted the account for inactivity. Ok, I don't pay, they're entitled. But now I see this and I think maybe I'll save the $150 or whatever it is.

Hey, Proton CTO here. There was a bug, and we fucked up. Support should have reported it up the chain and acknowledged this. Things happen, especially at scale, but we take comms consent seriously and will fix it.

I have the desktop app open right now. In the top-right corner is a nag saying 'Share your plan'. It's an ad for Proton Duo.

I just clicked 'Don't show again'. I get a toast saying you won't show me that offer again and it's immediately replaced with a nag saying 'Refer friends'. It has its own 'Don't show again'.

In August 2024 I sent Proton support an email with this text:

>I pay 95.88 € a year for Proton and every time I open the webapp or the desktop program, I see this:

>https://imgur.com/a/3kE6zJI

>Is there a tier of Proton that doesn't have ads?

The support reply told me I can remove the button by clicking on it, then "Don't show again". If I was frustrated enough to email you about it, I'm guessing I clicked it.

I have expressly opted out of ads for Proton Duo. You're interpreting this as me opting out of a single ad for Proton Duo. Changing the copy doesn't mean I have opted into comms about it. So I disagree you take this seriously.

Can you fix the fact that this new email spam category was added and that I was automatically opted into receiving it without my consent? That's fucked. I'm a paying customer and I keep getting advertisements in the Proton desktop applications for various things.(Black Friday deals, other stuff.) I should never see these advertisements if I'm paying you.

Thanks for acknowledging it. Your support team misattributed the email to Business category. It may help to have the exact name of subscription category in the footer of the message.

That's not a bad idea, I'll see what people think. Note that clicking on the unsubscribe link will unsubscribe you to whatever comms preference was specified in the sending and tell you what it was.

Thanks. Well done.

Legit point and agreed with everything, however wait until an email address of yours reaches the database of lead generation websites and you will see that you will never be able to keep count of the violations. Newsletter lists add your email in automatically and people sell you stuff without the unsubscribe button in the email, so no way to block them... I understand your concern but dealing with far worse

Funnily, Proton was supposed to be the anti-Google, wasn't it? Maybe some of "Proton's not in the US, so not subject to scary NSA warrant canaries"

Except... Gmail has handled spam pretty well? And at least if you do get Spam they actually tell you: https://news.ycombinator.com/item?id=6090712

not to say this "should" be the solution, but does Proton not offer easy email filtering & automation (e.g. skip inbox, delete)?

I ask because I haven't yet bothered to implement it on a from-scratch email server I stood up a couple weeks ago (just kidding; I wanted to brag about SPF, DKIM, and DMARC test passes from Gmail with both inbound and outbound encryption). I can say from this experimentation and using Google's Postmaster tool, though, that emails being reported as spam by users is *very* serious; Google's threshold is 0.3%; if just 0.3% of users report your email as spam, it's considered a policy violation and your emails are likely to go to spam or have delivery refused outright. idk what Proton's policies are. (edit: by extension, this means enforcing authorization of users is very serious; if someone abuses the service as an open relay, your whole domain is toast)

Proton’s take on marketing is the main thing making me anxious of commitment to their ecosystem.

Other than that I’m a happy paying customer.

I got the same email on the same date. Unsubscribe told me it was from the 'important announcements' list - I fail to see how this could possibly fall into that category.

I guess I can't have important announcements from Proton in the future if it's polluted with these low value messages.

Kudos to Proton for how they handled it. Granted the email was wrong, and I'm sure they'll fix that process. But most companies don't even bother to write back when you bring something like this to their attention, much less issue an apology.

This is a user-facing bug borne of engagement-driven development and a lack of user empathy. When a user opts out of a category, he should not receive cross posts. They ought to have had checks for this. The user did well to bring attention to it.

Trust is maybe the most valuable commodity for a VPN provider… And I have the feeling Proton is gambling it away.

It made me move to Mullvad.

Despite the fact that in terms of performance Proton is slightly better. (underscoring just *how* crucial ‘trust’ is)

I just signed up for proton vpn, before I read this post. So far so good other than this post, but I notice I can't access my own freshdesk help desk while on proton vpn. It says location not allowed.

> I don’t know about you, but I think that’s baloney. Proton Support had five full business days to come up with a better excuse. Please tell me, how can I have been any more explicit about opting out of Lumo emails, only to receive “Try Lumo” “From Lumo”, and be told that is not actually a Lumo email?

As someone who is in support in tech (not proton) I can tell you exactly what happened.

Day 1 they already knew which email it was, they probably had other tickets about this, they probably had an open discussion about this with marketing/product team.

Day 2-4 was the support agent arguing with marketing/product about how it's absolute bullshit to send out a AI newsletter when the user has it unticked and what they are going to do so it doesn't happen in the future.

Day 5 is marketing/product telling them that this is Working as designed and theu aren't going to stop this in the future. This is the day the support person works on this email with their team and potentially their manager.

It goes through a couple of "rewrites" for liability/protecting ass. The end result is the email you got, they know you are going to give a bad CSAT/NPS survey and it's going to kill their metrics.

They want nothing more to write and email that says, "Sorry marketing and product are fucking idiots and can't read. I fought for this to be disabled, but told me it's not going to happen, sorry" but culture and then not wanting to lose their jobs is why they didn't send this.

I really hope you didn't give them a bad survey.

I hope they sued

Funny they mentioned the GitHub email. I got the same one and unsubscribed from every GitHub email immediately. I wonder if they track how fast people unsubscribe after opening particular emails.

They do. Companies will track app uninstalls also.

Exactly the kind of whiny blogger I don’t want using Proton products with his squeaky wheel nonsense. Move over to Tutanova or go back to Gmail. What a trivial thing to whine about.

Whining for visibility: that’s even worse.

I dislike Proton's excessive marketing on privacy and encryption topics, especially in their posts on X, where they always claim that accessing the internet without a VPN is a bad thing. It reminds me of Crypto AG.

Everyone would be happier if they just focused on good products instead of excessive marketing. I'm tired of seeing their privacy slop all the time.

By the way, why does everyone need to spam people about their "AI" offerings?

"AI" is so good it basically sells itself right? Right?

Lumo is not end to end encrypted. The model is in some kind HSM? Are those trusted?

If they are, I see some people might be interested.

I also received the email from github about AI that the author mentioned. No matter what you do, they will keep pushing the AI slop onto you.

For me, these kinds of emails especially stick out, because I like to keep my proton inbox clean and unsubscribe from everything I can.

I also get pretty pissed of just ignoring gdpr, i just started to downright threaten them on support channels reminding that ignoring gdpr may cost them 2% of annual company turnover or 2 mil. eur, whichever is higher.

You would be surprised how many ridiculous "oh sorry some error in system" excuses you're gonna get. Right, that email accidentally slipped INSERT INTO spam slop database on its own.

And since i started to not explicitly opting in anywhere i know that when i receive a marketing email its abuse of my personal information. Under gdpr you need to explicitly consent to marketing communication. When you register to a service and receive spam you need to opt out from - that's an abuse. Some company try to argue they do so under "legitimate interest" clausule but that's bs and would not hold in court. For example, purchasing a product is not a valid legitimate interest for sending out eshop spam, they would lose.

When the incident repeats or i just get really pissed i go full karen and report them to authorities. I know two busisses had legal troubles because of me because i received deeper follow up emails while solving the case and i am happy for it.

One company that abused my personal data that i ended up not reporting was Telekom: when i contacted their support about spam incident and asked them for log of personal data and all of my consent logs and physical signatures to prove my consent, after which they said "it was a db error" (lol), and when the incident repeated i told them i am about to report them and they offered me 1 year of free internet - i said ok and never received a single spam from them ever again.

Fight back, you have the screenshots, you have the logs, ask for proof, report.

You can take the 1 year free internet, and then report them. It's not legal to commit a crime and then bribe someone not to report it.

There's one recruiting company I had contact with in 2017 (pre-GDPR, with no checked consent after) and they keep sending me marketing-disguised-as-GDPR emails. "Reply to tell us you want to keep hearing about our career insights newsletter that you never signed up for, or we'll delete your data in 30 days".

In the end I got sick of them repeating this and never deleting the data, so I sent them a SAR. I don't care what data they have but if they want to play the GDPR game so do I.

I envy the person who has the energy to care so much while the world burns around us.

This is some fine wine.

I want to get x, y, and z marketing email but not w.

They sent me something consider w. Outrage!

This is what’s called a “customer complaint” at real businesses with real paying customers lol

I’ve had a similar experience when signing up for Office365 and started getting promotional emails to CoPilot. These (2) emails were without an unsubscribe option.

I contacted MS support and after some back n forth they claimed it was a transactional email that doesn’t require consent or opt out.

Clearly promotional and not necessary but they won’t listen.

I’m in the process of filing GDPR + ePrivacy complaints, but it’s a tedious process, unlikely to do anything.

Here we are! Day after day, I realize that even smaller tech companies suffer from or could not resist the temptation of Enshittification[1] once they start gaining some momentum. I feel this path had became inevitable since everybody is doing this, at scale. I barely could recall some names that stuck to their original motto over time.

____________________

1. https://en.wikipedia.org/wiki/Enshittification

You do what makes money, or you are eliminated from the game. Such is life in capitalism.

I'm so fed up with Proton. I will be taking my business elsewhere. Instead of making a great product for X, they've decided to make a series of extremely mediocre products for P, Q, X, Y, Z and W, all of which are left missing the most basic features for years. Features which even the free alternatives already have. Things like supporting unicode in email headers without having to use punycode, creating mailboxes from sieve filters and a bunch of other sieve expansions, and decent, portable, non-bugridden integration with email clients. Protondrive has such dogshit speeds it's basically completely useless. The nat-pmp support on their vpn servers is very strange, and it took me a couple weeks to craft a script that could handle all of its idiosyncrasies, none of which are documented. I haven't even bothered trying their calendar, password manager, or the Yet Another AI Service they keep sending me upselling emails for. I don't need any of those things, but I'm sure they have similarly lacklustre feature parity.

Doesn't help that when i notify them about these things, their support people just gaslight me. "I've notified our development team about this". Then nothing happens. I told them about the speed issue with protondrive when it was new, that was years ago now. Still not fixed, no updates, nada.

I will be moving to something like fastmail, plus some other vpn service, since those are the only two products of theirs I'm actually using. It seems like I'll get a far better product in both cases for almost half the overall cost.

Implementing this sort of “functionality” is always the department of a junior team, so that the obvious sorts of questions about defaults can be answered with “a junior dev was responsible for the implementation and messed up”, even though the mess up was by design.

This make me think of the GitHub spamming issue.

See, my GitHub email is not my main address, and when I got some it's either from a user of one of my repository or from a marketing team that extracted thousand of address from starred repositories to fake genuine email with my name and all.

The things is, it's always a less than stellar product. It started with NFTs, calm down for a bit and now came back with a vengeance with AI startups.

I guess it's a number game for them but I can't comprehend their lack of value, same for those peoples that subscribes to everyone just to gain a sub back (and judging by the number, a lot of people sub back without thinking about it, so it works).

Damn I despise that marketing-bussiness hellscape that the internet slowly morphed into along the years. We can't have nice things because there will always be a prominent proportion of us that would exploit it for personal gain and we would do collectively nothing against it, for the name of liberal economic or something. And forward the enshitification goes.

considering lumo never gets the decryption password for my data, Im not nearly as worried about Protons AI vs googles default I will read your email.

Lumo will likely be the thing that moves me away from Proton. I've been pretty happy with it, ever since they made the photo's app actually have shareable libraries it's been just as good as any other Google Mail/Photos/Files thing I've used. The password manager plugin for firefox isn't as good as bitwarden, but when you're paying it's part of the package so... If I have to encrypt my files before I use the drive, and they continue to build their AI spy into everything, though, then what is the point really?

Anyway, it is sort of hilarious to report Proton as spam to Proton.

It's bewildering to see privacy-focused companies like Proton and DDG jump on the AI train. I guess privacy is just a vehicle for attracting early adopters, and all those principles fall apart once their user base becomes large enough.

What's the issue with a privacy-focused AI assistant that doesn't store all your data?

The marketing spam, as mentioned in the article.

And completely optional.

> I've been pretty happy with it, ever since they made the photo's app actually have shareable libraries it's been just as good as any other Google Mail/Photos/Files thing I've used.

Glad to hear you found a service that's useful to you!

> If I have to encrypt my files before I use the drive, and they continue to build their AI spy into everything, though, then what is the point really?

That would be concerning indeed, but there is no such integration today and it seems unlikely they would integrate non-local models into drive. Even on the mail side, any use of LLMs is optional, opt-in, and limited to text production (i.e. no training on your inbox).

Is this even worth writing an article? In almost a decade of paying for Proton I have ran across two annoying bugs that eventually got fixed. Report bugs and be patient.

Proton is frankly a bad company and this is unsurprising.

File under "some business bro had this classified in the wrong newsletter". I don't see the big deal and I don't extrapolate this into some systemic disease with marketing emails.

They do it every single newsletter?

aaand I was right (allegedly). Account claiming to be Proton CTO says it was a technical screw-up.

Ever since my first interaction with their support is was clear that they DGAF about usability improvements that I'd care about. Time to build an alternative I guess.

we are an "enforced consent" society, now. mafia tactics like back in the day, now conventionally normalized and established.

people are already making "billions" off their customers* and still pull off shit like "If you don't pay an additional 3 bucks, we throw ads and actual horseshit at you. Sign here". I was ok with TV and the Radio doing it because it made sense.

Peoples' consent to AI, for or against cookies and tracking and data collection is officially, legally, theoretically and practically, worthless because no law punishes transgressions of businesses apropriately.

"Consent. And do as we do. Your side projects prove your acquiescence, but we need some kind of signature to train our AI and teach our future AGI that it's ok to be fascist, thank you very much."

*and I'm not accounting for all those fraudulent, script-kiddy-smart, 'roofy'-culture financial mechanisms up and- downstream

"Never attribute to malice that which is adequately explained by stupidity" - Robert J. Hanlon

If you ever tried to setup a martech stack you konw what a PITA is to comply GDPR without any error

I only use Proton for the spam or temporary low value (and free) email accounts. Proton also tries to do everything, which I don't like. If I did I'd use Google.

The thing I pay for is Tuta. The cheapest tier is way more generous than Proton and the product is simpler.

I have the exact opposite opinion. I use proton business together with their email, vpn, calendar, drive (on macOS), password manager etc. and switched specifically because of their encryption, data protection and fulls-size feature bundle. Plus, I migrated vom Office365 and it became a shitshow to manage and was full of bugs. And I had a separate bitwarden subscription, and a separate VPN subscription. Now it is one package, much preferred.

I understand the convenience side of this, but it's also risky. What happens if they suspend your account for some reason?

"Never put all your eggs in one basket."

That happened to my google workspace account in 2023, when I switched to Office365. Account was not blocked blocked per se, but they stopped the free workspace versions.

It was not a big problem as I use my own domains that I host separately. Get a new provider, adjust some MX and TXT dns records and you are live again. Backup emails by running thunderbird locally.

Oh yeah, having your passwords online is a great idea /s

It is, if they are encrypted. Without a password manager, I would inevitable have to reuse the same passwords over and over on my hundreds of different accounts. With a password manager, they are auto-generated random gibberish. And yes, even when using 2FA, you should have different passwords for all accounts.

Bitwarden, OnePassword, LastPass, Proton Pass etc. are password managers with dozens of millions of users that agree.

It's not, because the world we live in isn't binary. It's not true that "it's encrypted therefore nothing can go wrong". Putting your password manager online increases the risk of an accident.

And just because millions of people think this is a good idea, doesn't make it a good idea. Millions of people also reuse their passwords and that doesn't make it a good idea either.

Of course it is a tradeoff between security and usability. Not putting your passwords online forces you to either remember all passwords (which will lead to re-use) or you will be only available to access your accounts (and thus most of the internet) from your home. Or you will have to come up with elaborate system how to carry your passwords on some kind of secured device etc. A password manager (alongside 2FA) is a very good security/usability compromise for a lot of people. YMMV.

The thing is that accounts get cracked because of reuse all the time. Whereas they seldom if at all get cracked because they’re in a password manager.

That's why I don't do either of those.

Good for you. The rest of us mortals who can't memorize dozens of unique complex passwords need to use a password manager.

No, those are not the only alternatives. I keep my password manager in my computer.

I have also been using Tuta for years. No complaints

[dead]

[dead]

[flagged]

[flagged]

> Has anyone else noticed that the AI industry can’t take “no” for an answer? AI is being force-fed into every corner of tech.

And yet this blog post is guilty of the exact same thing. It's just a complaint about which marketing messages get categorized as which newsletters you can opt in or out of (a valid complaint but pretty boring), but slaps "AI Consent" in the title to turn it into clickbait because the marketing message happens to be about an AI product.

This spam has been a problem for decades. It didn't arise with AI. I haven't even noticed any uptick with AI.

About six months ago I switched to completely self hosted email in Hetzner, waited the billing period to receive outbound access, but still use free forwarding for outbound by default. People always complain on forums about the struggles of self hosting, but outside of an occasional email I have to whitelist because of spam filters, it's nearly hands free (mailcow).

I setup aliases for every single one of my existing protonmail and gmail accounts, and now have them forward to my aliases. I can still use my old accounts, but everything is now ran through my systems, my data that I control.

I recommend others look at doing the same.

I'm with proton on this tbh. It's not a lumo update, it's an attempt to tell people who don't use lumo about it's existence. Maybe it's not something you want to read but an email saying "hey, have you heard of this thing called lumo" is not something you'd send out to existing lumo users

Over in the Proton subreddit we've been wondering if there is currently some kind of Anti-Proton campaign going on. Constantly people will loudly complain about completely benign things and get lot's of people agreeing with them.

I thought the same thing last night when this was first posted. Lots of "if they can't get this right do they even care about users" as if a slipped-up miscategorization of a marketing email is the same as an oil company leaking waste into a river.

I operate on the assumption they hold firm on their technical commitments of encrypted email, email obfuscation, decent VPN and a solid password manager.

Call them out on mistakes, sure, but this blog post was written like a manifesto for something so minor.

Every time there is anything posted about Proton on HN, there is an immediate wave of super negative comments, none of which ever offer any arguments of substance. It's always just some vague allegations, and this has been the case for years. It's pretty obvious what is going on.

These vapid fanboy-esque comments make me significantly more likely to believe that Proton is astroturfing than the inverse that you are implying, that some unspecified actor is engaging in a conspiracy to impugn Proton's reputation. That said, if criticising Proton is indeed a paid vocation and you have some concrete details about where I can get paid for my comments daring to doubt the uncompromising holiness of Proton, I'm all ears.

Calling it an "anti- Proton campaign" or "benign" is just rhetorical hand waving. Those words let you dismiss criticism without engaging with the substance. Proton did deliberately email people who opted out. That is a GDPR violation, full stop. They are a large, well resourced company; "oops" is not an excuse. Criticism over that is not hysteria or bandwagoning, and blaming people for speaking up instead of the company for breaking the rules is weak.

[flagged]

You said all of that already and I replied. If you're not answering to any of my arguments, I'm not going to bother continuing the debate.

> but an email saying "hey, have you heard of this thing called lumo" is not something you'd send out to existing lumo users

But it is an e-mail you send out to people who have specifically went out of their way to indicate to you they do not want you e-mailing them about Lumo?