all-in-one privacy solution":["Proton Unlimited is een all-in-one privacy-oplossing"],"Black Friday":["Black Friday"],"No ads. Privacy by default.":["Geen advertenties. Standaard privacy."],"People before profits":["Mensen vóór winst"],"Security through transparency":["Veiligheid door openheid"],"The best Proton Mail ${ BLACK_FRIDAY } deals":["De beste ${ BLACK_FRIDAY }-deals voor Proton Mail"],"The world’s only community- supported email service":["'s Werelds enige door de community ondersteunde e-mailservice"]},"specialoffer:limited":{"${ hours } hour":["${ hours } uur","${ hours } uur"],"${ hoursLeft }, ${ minutesLeft } and ${ secondsLeft } left":["Nog ${ hoursLeft }, ${ minutesLeft } en ${ secondsLeft } resterend"],"${ minutes } minute":["${ minutes } minuut","${ minutes } minuten"],"${ seconds } second":["${ seconds } seconde","${ seconds } seconden"],"Limited time offer":["Aanbieding beperkt geldig"]},"specialoffer:listitem":{"Create multiple addresses":["Maak meerdere e-mailadressen aan"],"Hide-my-email aliases":["Hide-my-email-aliassen"],"Quickly unsubscribe from newsletters":["Meld u eenvoudig af voor nieuwsbrieven"],"Use your own domain name":["Gebruik uw eigen domeinnaam"]},"specialoffer:logos":{"As featured in":["Zoals te lezen in"]},"specialoffer:metadescription":{"Get an encrypted email that protects your privacy":["Kies voor beveiligde e-mail die uw privacy beschermt"]},"specialoffer:metatitle":{"Proton Mail Black Friday Sale - Up to 40% off":["Proton Mail Black Friday Sale - Tot 40% korting"]},"specialoffer:newmetadescription":{"Get up to 40% off Proton Mail subscriptions this Black Friday. Find great deals on our secure end-to-end encrypted email plans.":["Profiteer tijdens Black Friday van wel 40% korting op Proton Mail-abonnementen. Bekijk geweldige aanbiedingen voor onze veilige, end-to-end versleutelde e-mailabonnementen."]},"specialoffer:newmetatitle":{"Proton Mail Black Friday sale | Up to 40% off secure email":["Proton Mail Black Friday Sale | Tot 40% korting op veilige e-mail"]},"specialoffer:note":{"* Billed at ${ TOTAL_SUM } for the first year":["*U betaalt ${ TOTAL_SUM } voor het eerste jaar"],"*Billed at ${ TOTAL_SUM } for the first 2 years":["*U betaalt ${ TOTAL_SUM } voor de eerste 2 jaar"],"30-day money-back guarantee":["30 dagen niet-goed-geld-terug-garantie"],"Billed at ${ TOTAL_SUM } for the first 2 years":["U betaalt ${ TOTAL_SUM } voor de eerste 2 jaar"],"Billed at ${ TOTAL_SUM } for the first year":["U betaalt ${ TOTAL_SUM } voor het eerste jaar"],"You save ${ SAVE_SUM }":["U bespaart ${ SAVE_SUM }"]},"specialoffer:off":{"${ PERCENT_OFF } off":["−${ PERCENT_OFF }"]},"specialoffer:testimonial":{"I love my ProtonMail":["Ik ben fan van ProtonMail"],"My favorite email service":["Mijn favoriete e-mailservice"],"Thanks Proton for keeping us all safe in the complicated internet universe.":["Proton houdt ons allemaal veilig in het complexe internetuniversum."],"You get what you pay for. In the case of big tech, if you pay nothing, you get used. I quit using Gmail and switched to @ProtonMail":["Je krijgt waarvoor je betaalt. In het geval van Big Tech betekent 'gratis' dat je wordt gebruikt. Ik ben gestopt met Gmail en overgestapt op @ProtonMail"]},"specialoffer:time":{"Days":["Dagen"],"Hours":["Uur"],"Min":["Min"]},"specialoffer:title":{"And much more":["En nog veel meer"],"Safe from trackers":["Beschermd tegen trackers"],"Stay organized":["Blijf georganiseerd"],"Black Friday email deals":["Black Friday-deals voor e-mail"],"Don’t just take our word for it":["U hoeft ons niet te geloven"],"Make your inbox yours":["Maak uw inbox van u"],"Our story":["Ons verhaal"],"Transfer your data from Google in one click":["Zet uw gegevens van Google over met één klik"]},"specialoffer:tooltip":{"Access blocked content and browse privately. Includes ${ TOTAL_VPN_SERVERS }+ servers in ${ TOTAL_VPN_COUNTRIES }+ countries, connect up to 10 devices, access worldwide streaming services, malware and ad-blocker, and more.":["Bekijk geblokkeerde inhoud en surf privé. Met ${ TOTAL_VPN_SERVERS }+ servers in meer dan ${ TOTAL_VPN_COUNTRIES } landen, verbinding met maximaal 10 apparaten, wereldwijd toegang tot streamingdiensten, malware- en advertentieblokkering, en meer."],"Easily share your calendar with your family, friends or colleagues, and view external calendars.":["Deel uw agenda eenvoudig met uw familie, vrienden of collega's, en bekijk externe agenda's."],"Includes support for 1 custom email domain, 10 email addresses, 10 hide-my-email aliases, calendar sharing, and more.":["Ondersteuning voor 1 aangepast e-maildomein, 10 e-mailadressen, 10 hide-my-email-aliassen, gedeelde agenda's en meer."],"Includes support for 3 custom email domains, 15 email addresses, unlimited hide-my-email aliases, calendar sharing, and more.":["Ondersteuning voor 3 aangepaste e-maildomeinen, 15 e-mailadressen, onbeperkt hide-my-email-aliassen, gedeelde agenda's en meer."],"Manage up to 25 calendars, mobile apps, secured with end-to-end encryption, 1-click calendar import from Google, and more.":["Beheer tot 25 agenda's, mobiele apps, beveiligd met end-to-end versleuteling, agenda's van Google importeren met 1 klik, en meer."]},"Status banner":{"Learn more":["Meer informatie"],"Please note that at the moment we are experiencing issues with the ${ issues[0] } service.":["We ondervinden op dit moment problemen met de ${ issues[0] }service."],"We are experiencing issues with one or more services at the moment.":["We ondervinden momenteel problemen met een of meer services."]},"Status Banner":{"At the moment we are experiencing issues with the Proton VPN service":["Momenteel werkt de dienst van Proton VPN niet naar behoren"],"Learn more":["Meer informatie"]},"steps":{"Step":["Stap"]},"suggestions":{"Suggestions":["Suggesties"]},"Support":{"Sub category":["Subcategorie","Subcategorieën"]},"Support article":{"${ readingTime } min":["${ readingTime } min","${ readingTime } min"],"Category":["Categorie","Categorieën"],"Didn’t find what you were looking for?":["Niet gevonden wat u zocht?"],"General contact":["Algemene contactgegevens"],"Get help":["Krijg hulp"],"Legal contact":["Contactgegevens voor juridische zaken"],"Media contact":["Contactgegevens voor media"],"Partnerships contact":["Contactgegevens voor partnerschappen"],"Reading":["Lezen"]},"Support Form Platform option":{"VPN for Android TV":["VPN voor Android TV"],"VPN for Chromebook":["VPN voor Chromebook"]},"Support troubleshooting":{"App version":["App-versie"],"Browser":["Browser"],"Check if this helps":["Kijk of dit helpt"],"Choose a product":["Kies een product"],"Did this solve your issue?":["Heeft dit uw probleem opgelost?"],"Faster assistance is just a few clicks away":["Snellere hulp is met een paar klikken geregeld"],"How can we help?":["Hoe kunnen we helpen?"],"No, contact support":["Nee, contact opnemen met ondersteuning"],"Please fill out one field after another":["Vul de velden achter elkaar in"],"Please make your selections":["Maak een keuze"],"Proton account":["Proton-account"],"Proton for Business":["Proton for Business"],"Thank you for your feedback":["Bedankt voor uw feedback"],"What can we help with?":["Waar kunnen we mee helpen?"],"Yes":["Ja"]},"support_modal_search_query":{"Search query":["Zoekopdracht"]},"support_search_button":{"Search":["Zoeken"]},"support_search_i_am_looking_for":{"I'm looking for":["Ik ben op zoek naar"]},"SupportForm":{"For a faster resolution, please report the issue from the Bridge app: Help > Report a problem.":["Om problemen sneller op te lossen, meldt u het via de Bridge-app: Help > Een probleem melden."],"Information":["Informatie"]},"SupportForm:option":{"Account Security":["Accountbeveiliging"],"Contacts":["Contactpersonen"],"Custom email domain":["Aangepast e-maildomein"],"Email delivery and Spam":["E-maillevering en spam"],"Encryption":["Versleuteling"],"Login and password":["Inlognaam en wachtwoord"],"Merge aliases and accounts":["Aliassen en accounts samenvoegen"],"Migrate to Proton":["Migreren naar Proton"],"Notifications":["Meldingen"],"Other":["Overig"],"Plans and billing":["Abonnementen en facturering"],"Proton for Business":["Proton for Business"],"Sign up":["Inschrijven"],"Storage":["Opslag"],"Users, addresses, and identities":["Gebruikers, adressen en identiteiten"]},"SupportForm:optionIntro":{"Select a topic":["Kies een onderwerp"]},"swiss_baseed_feature":{"Swiss based":["Gevestigd in Zwitserland"]},"Testimonial":{"Awards":["Awards"],"Customers":["Klanten"],"Featured":["Featured"],"Go to testimonial source":["Naar bron van testimonial"],"Open source of award":["Bron van award openen"],"Open source of quote":["Bron van citaat openen"],"Reviews":["Reviews"],"Videos":["Video's"],"Watch on TikTok":["Bekijken op TikTok"],"Watch on YouTube":["Bekijken op YouTube"]},"TestimonialCategory":{"Awards":["Awards"],"Customers":["Klanten"],"Featured":["Featured"],"Media":["Media"],"Reviews":["Reviews"],"Videos":["Video's"]},"Text":{"If you need help, check out our ${ supportLink }.":["Bekijk onze ${ supportLink } als u hulp nodig hebt."],"The page you’re looking for might have been removed, or it could be an\nold link.":["De pagina waarnaar u op zoek bent, is mogelijk verwijderd, of u gebruikt een oude koppeling."],"Your question may already have an answer in our knowledge base:":["Uw vraag is mogelijk al beantwoord in onze kennisbank:"]},"Title":{"On this page":["Op deze pagina"],"Related articles":["Gerelateerde artikelen"],"Share ${ thisPage }":["${ thisPage } delen"],"Switch to Proton Pass - Contact us":["Stap over op Proton Pass - Neem contact met ons op"],"Thank you!":["Bedankt!"],"this page":["deze pagina"]},"Tooltip":{"More information":["Meer informatie"]},"tooltip_vpn":{"Access blocked content and browse privately. Includes ${ TOTAL_VPN_SERVERS }+ servers in ${ TOTAL_VPN_COUNTRIES }+ countries, highest VPN speed, ${ TOTAL_VPN_CONNECTIONS } VPN connections, worldwide streaming services, malware and ad-blocker, and more.":["Bekijk geblokkeerde inhoud en surf privé. Met meer dan ${ TOTAL_VPN_SERVERS } servers in meer dan ${ TOTAL_VPN_COUNTRIES } landen, de hoogste VPN-snelheid, ${ TOTAL_VPN_CONNECTIONS } VPN-verbindingen, wereldwijde streamingdiensten, malware- en advertentieblokkering, en meer."]},"vpn_servers":{"Get Proton VPN Plus":["Neem Proton VPN Plus"]},"wallet_signup_2024:Action":{"Get Proton Wallet":["Kies Proton Wallet"]},"wallet_signup_2024:Homepage hero product link title":{"Wallet":["Wallet"]},"wallet_signup_2024:Homepage product navigation bar":{"Wallet":["Wallet"]},"wallet_signup_2024:menu item":{"Bitcoin guide":["Bitcoin-gids"],"Proton Wallet news":["Proton Wallet-nieuws"],"Proton Wallet support":["Ondersteuning voor Proton Wallet"]},"wallet_signup_2024:Pricing":{"Includes everything in Proton Unlimited and":["Omvat alles van Proton Unlimited en"],"Limited availability":["Beperkte beschikbaarheid"],"The easiest way to securely own, send, and receive Bitcoin":["De eenvoudigste manier om Bitcoin veilig te bewaren, versturen en ontvangen"]},"wallet_signup_2024:ProductRange":{"Discover Proton Wallet":["Ontdek Proton Wallet"],"Store and transact Bitcoin privately with an encrypted self-custody wallet.":["Bewaar en verhandel Bitcoin privé met een versleutelde zelfbeheerde portemonnee."]},"wallet_signup_2024:wallet bitcoin":{"Learn about Bitcoin, the Internet's value network.":["Meer informatie over Bitcoin, het valutanetwerk van het internet."]},"wallet_signup_2024:wallet overview":{"Ensure you're always in control of your Bitcoin.":["Zorg dat u altijd de controle heeft over uw Bitcoins."]},"wallet_signup_2024:wallet security":{"The encrypted, open-source wallet that puts you in control.":["De versleutelde, open-source portemonnee waarvan u de baas bent."]}}},"base":"blog","cdn":{"enabledForAssets":true,"enabledForImages":true,"url":"https://pmecdn.protonweb.com/"},"unleashApi":"https://account.proton.me/api"};
window.frameworkContext = frameworkContext;
const context = frameworkContext.base === '' ? '' : `${frameworkContext.base}/`;
window.__toAssetUrl = (filename) => {
if (frameworkContext.cdn !== undefined && frameworkContext.cdn.enabledForAssets === true) {
return `${frameworkContext.cdn.url}${context}${filename}`;
} else {
return `/${context}${filename}`;
}
};
})();
Important lessons from the first NSA-powered ransomware cyberattack | Proton
Last Friday, a weaponized version of a NSA exploit was used to infect over three hundred thousand computers in over 150 countries with the WannaCry ransomware.
In addition to government ministries and transportation infrastructure, the British National Health Service (NHS) was crippled, disrupting treatment and care for thousands of patients, and putting countless lives at risk(nieuw venster). The indiscriminate use of a NSA authored weapon on the general public is terrifying, and only made worse by the fact that the NSA could have largely prevented the attack. Instead, because the NSA stood by and did nothing, we have ended up in the scary world where American cyberweapons are being used to potentially kill British citizens in their hospital beds.
What went wrong?
The WannaCry infection that caused global chaos on Friday(nieuw venster) relied upon a Windows exploit called EternalBlue (nieuw venster)which was originally written by the NSA. Instead of responsibly disclosing the vulnerability when it was discovered, the NSA instead weaponized it and sought to keep it secret, believing that this weapon could be safely kept hidden.
Predictably, this was not the case, and in August 2016, the NSA was itself compromised(nieuw venster), and their entire arsenal of illicit cyberweapons stolen. It’s rather ironic that the world’s largest surveillance agency believed that they would never be compromised.
It has become abundantly clear over the past decade that the notion of keeping attackers out forever is fundamentally flawed. Compromises are not a matter of if, but a matter of when(nieuw venster) (in fact, this is why we designed Proton Mail to be the first email service that can protect data even in the event of a compromise). If there’s anybody that should know this, it should be the NSA.
It gets even worse
It’s clear that in weaponizing a vulnerability instead of responsibly disclosing it (so hospitals and transportation infrastructure can be protected), the NSA made a critical error in judgment that put millions of people at risk. However, one would think that after learning 10 months ago that their entire cyberweapon arsenal had been stolen and was now out “in the wild”, the NSA would have immediately taken action and responsibly disclosed the vulnerabilities so systems around the world could be patched.
Unfortunately, there is no indication that they did so. If we read carefully the statement from Microsoft today(nieuw venster), it appears the NSA deliberately withheld the information that would have allowed critical civilian infrastructure like hospitals to be protected. In our view, this is unforgiveable and beyond irresponsible.
Instead, the Windows engineering team was left to work by themselves to find the vulnerabilities, which they finally did in March 2017, 8 months after the NSA learned the exploits had been stolen. More critically, Microsoft only managed to patch the vulnerabilities 2 months before last Friday’s attacks, which is not nearly enough time for all enterprise machines to be updated.
What is the bigger impact?
We think that US Congressman Ted Lieu is spot on when he wrote on Friday(nieuw venster): “Today’s worldwide ransomware attack shows what can happen when the NSA or CIA write malware instead of disclosing the vulnerability to the software manufacturer.”
Friday’s attack is a clear demonstration of the damage that just a SINGLE exploit can do. If we have learned anything from the NSA hack(nieuw venster), and the more recent CIA Vault7 leaks(nieuw venster), it’s that potentially hundreds of additional exploits exist, many targeting other platforms, not just Microsoft Windows. Furthermore, many of these are probably already out “in the wild” and available to cybercriminals.
At this point, the NSA and CIA have a moral obligation to responsibly disclose all additional vulnerabilities. We would say that this goes beyond just a moral obligation. When your own cyber weapons are used against your own country(nieuw venster), there is a duty to protect and defend, and responsible disclosure is now the only way forward.
Lessons Learned
Anybody working in online security will tell you that protecting against the bad guys is hard enough. The last thing we need is for the supposed “good guys” to be wreaking havoc. An undisclosed vulnerability is effectively a “back door” into supposedly secure computing environments, and as Friday’s attack aptly demonstrates, there is no such thing as a back door that only lets the good guys in.
However, Friday’s attacks clearly demonstrate that when it comes to security, there can be no middle ground. You either have security, or you don’t, and systems with backdoors in them are just fundamentally insecure. For this reason, we are unwilling to compromise(nieuw venster) on our position of no encryption backdoors, and we will continue to make our cryptography open source(nieuw venster) and auditable to ensure that there are no intentional or unintentional backdoors.
We firmly believe this is the only way forward in a world where cyberattacks are becoming increasingly common and more and more damaging, both economically and as a threat to democracy itself.
If you would like to support the work that the Proton Mail project is doing, you can upgrade to a paid plan(nieuw venster). Thank you for your support!
Do you have an incident response plan to protect your business from financial
and reputational damage? Find out how Proton Pass for Business can help you stay
safe.