In one exchange, an employee in the company’s security Slack channel urged Proton to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August. “Stop thinking always of how to be slower, and focus more on how to be faster.” Yen added, “stop lovingly handcrafting all our code and use AI more.”
Yikes, this Yen guy seems really charming
His words are aggressively out of touch, but I will say that I agree somewhat. I tried going back to handcrafting code for a bit and it really does feel slow. Like, “absolutely no way to compete in the current market” slow.
It only feels slow when everyone is forced to use AI, none of these companies have proven to operate at a profit yet
Huh? The frontier model companies aren’t operating at a profit but all the major enterprise tech companies (Google, Microsoft, Salesforce, Amazon, etc) are using huge amounts of AI in the SDLC and beyond and certainly are operating at a profit…
I’m not sure what you are trying to say, what difference does it make if the users of a product are profitable when the creator of said product isn’t, the users of AI make their money on a diversified portfolio of products, the AI companies are making no profits right now as the subscription prices they are charging are at a loss to gain market share, if they don’t find a sustainable profit margin over time they will have to shut down or increase the cost of the subscription so only a limited number of companies and individuals will be able to afford it. Either way the gushing AI inference taps will stop leaking so freely at some point.
They’re operating at a profit because of their large legacy products, not because of their new stuff.
Example A: Google
Did you even see their earnings miss and what they attributed it to?
sounds like a “you” problem
“skill issue” comments are rarely productive. I have many friends that also work in the industry that feel the same, even if they are against AI. I trust their opinions (and my own of course) over yours.
Slow has nothing to do with pen testing or not. Pen testing is how you validate that the code is secure, AI or no. This is showing a shocking lack of care about security for a company pretending to offer a secure product.
Without the entire slack exchange, it’s not clear whether Andy Yen was responding exclusively to the call for pentesting, or towards broader comments about AI code.
Near the start of the meeting, Yen said, “I want to acknowledge myself, personally, that there was a communication failure on my part and there are many things that probably could and should have been communicated differently, and this is something that I’ll have to reflect on and improve over time. So I will do that.”
“So what does that mean going forward? Going forward, I’m still going to push,” he added.
Uh. This news makes everything about 0% better.
Brain dead CEO?! Tune in next week for more obvious news! 💀
Something about upper management just pushes people into being dicks. Maybe cause all they do is work? Even my grand-manager is quite blunt and out of touch. Guess that happens when all you do is micromanage others all day
“Claude, write an apology for me that blames miscommunication but still acknowledges that I will not meaningfully change my behavior at the heart of the issue.”
of course, he will push. reflection and improve over time is part of his idea of slow-mode.
Glad I hesitated moving over completely from Google to Proton services, time to purge them completely
Cool.
Not supporting your company anymore though.
I canceled my sub today.
Zero interest in using a product voluntarily that’s clearly not being tested adequately. I get enough of that having to use MS Teams at work, which has really just become whatever buggy crap MS’ vibe coders feel like vomiting into production in a given day.
He has to go and the Proton workers have to form a union.
Every worker at every tech company needs to unionize.
Every worker at every company needs to unionise.
Every worker needs to unionize.
Every union needs to unionize.
Every union needs a state (protecting its interests and preferably under control of these worker associations)
Every worker at every
techcompany needs to unionize.FTFY
It will be impossible to trust this company again until Yen and the rest of the C-suite resign.
You are right. He will try again one day in some shape or form. But it‘s still nice to see a backlash with cancellations can make a difference. Teaches us that we should keep trying to change things for the better or stop changes that make things worse for us.
I’m slowly trying to degoogle. Mail is a big concern for me. I have a google business account to handle a few domains. I used a small shared host before and it was crap. Every couple months they’d make some change and all my shit broke. I switched to Google because I knew it would be reliable and largely set and forget. It’s been that. I hate Google though. So if not proton, then who?
Mailo.com. It’s ugly as 2005 websites but it just works. You get IMAP, family accounts. It’s just email. Old and reliable french company.
I think Tuta and mailbox.org are generally recommended, but I use Posteo which has been fine
I can recommend mailbox.org
+1 for posteo
Tuta is not everyones fave right now, look at my history for details…I havent followed up on everything yet but I thought the same as you.
https://lemmy.ml/post/53619601/28192074
This seems like a pretty good breakdown.
I’m testing out tuta and infomaniak. Since I don’t care all that much about encryption, infomaniak is looking good, in my opinion.
I don’t have any fancy use-cases but Posteo has been good for me too.
Just looked into posteo. Great pricing (1 euro/month?) and they’ve got encryption. And organic vegetarian lunches!
Try Fastmail, you will be impressed
After using Tuta for a year and not really enjoying the experience I surveyed the landscape and picked Fastmail. I adore it.
It being in a five eyes country will certainly earn it some strikes against it among the privacy crowd, however.
Email is inherently unsafe. Privacy advocates know this. But we all still need it for managing accounts and such.
Any provider just reliably “doing email” and not actively harming its users in some way is going to look pretty good to most of us.
Email is something we simply cannot live without. They are primary sources of communication to reach you like account notifications, what accounts you’ve registered with it and vice versa.
It is unfortunate, but that is indeed the case.
Which is why I said:
But we all still need it for managing accounts and such.
The important part is to not put all of your eggs in one basket. This makes it so you can migrate off of one at a time rather than your entire life at once.
Ye, I’m finding that with Google. You don’t realize how tightly locked in you are until you try to leave.
A counterpoint though, is that putting 12 eggs into different baskets means having to manage 12 baskets. It’s a trade off
It is a trade off, but it’s well worth it, since most of it requires no actual maintenance (after you migrate of course) unless you have to leave for some reason.
I moved over to Tuta personally for email. And Tuta is EU-based if that matters to you. If you use other Proton features there are alternatives there as well.
For Proton Pass and Authenticator, there’s Bitwarden (and self-hosted Vaultwarden). Which supports password storage, 2FA codes, and Passkeys across basically all devices. Also supports SSH agent forwarding if you work with that a lot.
For Proton Drive, Koofr seems to be a good option for cloud storage, also EU-hosted. They also have an additional locally-encrypted Vault for files you want additional security on. Things like 2FA bypass codes you get when you set up your accounts but don’t want want hanging around in the open at all.
I’ve been pretty happy with Purelymail.
mailfence is pretty good so far. very basic but there are nice clients for IMAP these days
same. i started migrating to proton. and have my own domains. but use them through prot. now with this horsecrap i gotta get a third thing going… and migrate there. :/
Here’s Lemmy’s reply from yesterday triggered by the same concern:
https://lemmy.world/post/53735981
Gmail was actually the easiest one to separate from, if you just count the transferring email addresses. It is a pain in the ass because so many services fight like hell to hold onto your google account you sometimes have to jump through hoops to remove it–a security risk in itself.
The big sticking point for me so far is photos… there are other options, but itś all integrated into my phone in weird ways I don’t want to bother with right now.
GMail is not that easy. Because, there are places and services that use e-mail clients that are easy to be sent to and received by GMail. I’ve experienced this with ProtonMail for a while, where there’ll be services and individuals that could not reach me through my Proton e-mail and I’ve had difficulty reaching out to them.
iCloud does the trick and would work on google devices
I’ll continue to use ProtonMail myself. But, I can’t in good conscience feel in reason to support this company with my money and I’m especially concerned with relying on ProtonVPN so that will be getting uninstalled.
This is just not how you win people over and I’m tired of this day and age in tech where companies like this, pad their PR up with promises then do a 180 on their attitude towards everyone who uses their products that makes everyone second guess them. It’s bad enough we have things like Discord who has spent a couple years, making themselves look good and cozy for the public market that have alienated its userbase.
Bluesky showing their true colors and then we have this asshole CEO on Proton taking a dump whenever he pleases on the values of why we bothered using Proton in the first place.
iVPN is a good alternative. What concerns me is his disregard for proper security review of AI generated code, because that is one of the stupidest things a company focused on security and privacy can do. Even if one has no issue with his previous remarks about Trump, this new one is legitimately a security issue that affects the product itself.
Is that especially likely? he’s one of the founders afaik, I think they all are
After those discussions with leadership and the board, “We’ve decided to actually cancel the re-interviews,” Yen said. “Why? Well, I think actually in a, let’s say, unintentional way, they have actually already served their purpose.” As in, employees are now talking and learning about AI.
These morons just don’t know when to quit.
Everybody needs to see You Can See Everything, and then needs to remember that all these fuckers are Liz Holmes.
So they admit it was all about scaring the peasants?
It‘s ridiculous. They claim they actually have a shortage of highly skilled developers and that‘s supposedly why they‘re focusing so hard on vibe coding. But this whole re-interviewing thing would just have made their actual problem of a toxic work environment of fear and shaming even worse. Who would want to work there? Not someone who has the privilege to choose. They needed to get rid of that CEO yesterday.
Canceled.
The optics management attempt in response to the 404media story verifies that i made the right move.
This guy sounds so fucking emotionally fragile and immature. Wahhh go faster, wahhh make me more money!
When you foment a toxic workplace like this, the good employees leave and you get fucked, especially in a security conscious space like this.
Can you use AI to improve security? Yes. It’s objectively very good at finding holes, which is exactly what you want. But when you call your employees losers and tell them they need to be faster, and whatever the fuck an AI “re-interview is”, well you can get bent.
Their main selling points are privacy and security. Moving fast in all directions at once is the last thing you want to hear a company like that is doing
I like to think my plan cancellation last night helped. Now they gotta oust the CEO.
This was also the final straw for me, cancelled last night
I wish I ever used a product of theirs. so I could cancel it
“Right now, everything seems consistent with it being damage control,” they said.
Oh dear.
What’s the consensus on a replacement for Proton?
I’ve seen Tuta mentioned the most
I’ve been very happy with Fastmail. A while back out of the blue they released a Flatpak app which is great. They also recently stood up a European region and I switched my data residency there without fuss.
I didn’t know they had a European region. Where’s the setting for data residency?
i can recommend mailbox.org and ente.com
For what exactly? I store my photos on pCloud and for email I use Posteo
I use cloud storage (lots of files), email, password manager, and vpn. Sometimes collaborative writing in documents. I’d like to not have lots of subscriptions. Maybe managed nextcloud + separate email provider? Idk.
Whatever you decide to migrate to, don’t put all of your eggs in one basket. Give yourself the flexibility to move one enshittified service at a time.
I use a mix of Tuta, mailbox.org (for one of my other domains), vaultwarden/bitwarden, and nextcloud.
ikr I only use Proton for throwaway accounts, lel.
Way to get your people happy and productive dipshit. This cancellation is far too late. Now employees are going to keep their heads down, take zero risks and merely check whatever boxes required. He demotivated his entire workforce in one fell swoop. And for people like me who wasn’t using their product or know much about them, now I have a foul taste in my mouth for the brand name.
LMAO!!!
Andy has to go if he knows what’s good for the company.
He never will. He’s a well known cunt in the industry and one of the founders.
Staff turnover rates at proton are shocking.
LOL. They’re just going to do the same thing in a different way once the commentary has died down.
