all-in-one privacy solution":["O Proton Unlimited é uma solução única de privacidade"],"Black Friday":["Black Friday"],"No ads. Privacy by default.":["Sem anúncios. Privacidade por padrão."],"People before profits":["Pessoas acima do lucro"],"Security through transparency":["Segurança por meio da transparência"],"The best Proton Mail ${ BLACK_FRIDAY } deals":["As melhores ofertas de ${ BLACK_FRIDAY } do Proton Mail"],"The world’s only community- supported email service":["O único serviço de e-mail do mundo apoiado pela comunidade"]},"specialoffer:limited":{"${ hours } hour":["${ hours } hora","${ hours } horas"],"${ hoursLeft }, ${ minutesLeft } and ${ secondsLeft } left":["${ hoursLeft }, ${ minutesLeft }, e ${ secondsLeft } restantes"],"${ minutes } minute":["${ minutes } minuto","${ minutes } minutos"],"${ seconds } second":["${ seconds } segundo","${ seconds } segundos"],"Limited time offer":["Oferta por tempo limitado"]},"specialoffer:listitem":{"Create multiple addresses":["Crie vários endereços"],"Hide-my-email aliases":["Use aliases do hide-my-email"],"Quickly unsubscribe from newsletters":["Cancele a assinatura de newsletters rapidamente"],"Use your own domain name":["Use seu próprio nome de domínio"]},"specialoffer:logos":{"As featured in":["Destaques"]},"specialoffer:metadescription":{"Get an encrypted email that protects your privacy":["Obtenha um e-mail criptografado que proteja sua privacidade"]},"specialoffer:metatitle":{"Proton Mail Black Friday Sale - Up to 40% off":["Oferta de Black Friday do Proton Mail - Até 40% de desconto"]},"specialoffer:newmetadescription":{"Get up to 40% off Proton Mail subscriptions this Black Friday. Find great deals on our secure end-to-end encrypted email plans.":["Obtenha até 40% de desconto nas assinaturas do Proton Mail nesta Black Friday. Confira ótimas ofertas em nossos planos de e-mail seguro com criptografia de ponta a ponta."]},"specialoffer:newmetatitle":{"Proton Mail Black Friday sale | Up to 40% off secure email":["Oferta de Black Friday do Proton Mail - Até 40% de desconto no e-mail protegido"]},"specialoffer:note":{"* Billed at ${ TOTAL_SUM } for the first year":["* Com o preço de ${ TOTAL_SUM } no primeiro ano"],"*Billed at ${ TOTAL_SUM } for the first 2 years":["*Com o preço de ${ TOTAL_SUM } nos primeiros dois anos"],"30-day money-back guarantee":["Garantia de reembolso de 30 dias"],"Billed at ${ TOTAL_SUM } for the first 2 years":["Com o preço de ${ TOTAL_SUM } nos primeiros dois anos"],"Billed at ${ TOTAL_SUM } for the first year":["Com o preço de ${ TOTAL_SUM } no primeiro ano"],"You save ${ SAVE_SUM }":["Economize ${ SAVE_SUM }"]},"specialoffer:off":{"${ PERCENT_OFF } off":["-${ PERCENT_OFF }"]},"specialoffer:testimonial":{"I love my ProtonMail":["Adoro ProtonMail"],"My favorite email service":["Meu serviço favorito de e-mail"],"Thanks Proton for keeping us all safe in the complicated internet universe.":["Agradecemos ao Proton por nos manter a salvo no complicado universo da internet."],"You get what you pay for. In the case of big tech, if you pay nothing, you get used. I quit using Gmail and switched to @ProtonMail":["Você recebe pelo que paga. No caso das grandes tecnologias, você se acostuma quando não paga nada. Parei de usar o Gmail e troquei para o @ProtonMail"]},"specialoffer:time":{"Days":["Dias"],"Hours":["Horas"],"Min":["Min"]},"specialoffer:title":{"And much more":["E muito mais"],"Make your inbox yours":["Deixe a caixa de entrada do seu jeito"],"Safe from trackers":["A salvo de rastreadores"],"Stay organized":["Mantenha-se organizado"],"Black Friday email deals":["Ofertas de e-mail da Black Friday"],"Don’t just take our word for it":["Não confie apenas em nossa palavra"],"Our story":["Nossa história"],"Transfer your data from Google in one click":["Transfira seus dados do Google com um clique"]},"specialoffer:tooltip":{"Access blocked content and browse privately. Includes ${ TOTAL_VPN_SERVERS }+ servers in ${ TOTAL_VPN_COUNTRIES }+ countries, connect up to 10 devices, access worldwide streaming services, malware and ad-blocker, and more.":["Acesse conteúdo bloqueado e navegue com privacidade. Inclui mais de ${ TOTAL_VPN_SERVERS } servidores em mais de ${ TOTAL_VPN_COUNTRIES } países, conexão com até 10 dispositivos, acesso a serviços de streaming do mundo todo, um bloqueador de anúncios e malware e muito mais."],"Easily share your calendar with your family, friends or colleagues, and view external calendars.":["Compartilhe facilmente seus calendários com amigos, familiares ou colegas e visualize calendários externos."],"Includes support for 1 custom email domain, 10 email addresses, 10 hide-my-email aliases, calendar sharing, and more.":["Inclui suporte para 1 domínio de e-mail personalizado, 10 endereços de e-mail, 10 aliases do hide-my-email, compartilhamento de calendário e muito mais."],"Includes support for 3 custom email domains, 15 email addresses, unlimited hide-my-email aliases, calendar sharing, and more.":["Inclui suporte para 3 domínios de e-mail personalizados, 15 endereços de e-mail, aliases ilimitados do hide-my-email, compartilhamento de calendário e muito mais."],"Manage up to 25 calendars, mobile apps, secured with end-to-end encryption, 1-click calendar import from Google, and more.":["Gerencie até 25 calendários, apps para dispositivos móveis, protegidos com criptografia de ponta a ponta, importação de calendário com 1 clique do Google e muito mais."]},"Status banner":{"Learn more":["Saiba mais"],"Please note that at the moment we are experiencing issues with the ${ issues[0] } service.":["No momento, estamos com problemas no serviço ${ issues[0] }."],"We are experiencing issues with one or more services at the moment.":["No momento, estamos com problemas em um ou mais serviços."]},"Status Banner":{"At the moment we are experiencing issues with the Proton VPN service":["No momento estamos enfrentando problemas com o serviço Proton VPN"],"Learn more":["Saiba mais"]},"steps":{"Step":["Etapa"]},"suggestions":{"Suggestions":["Sugestões"]},"Support":{"Sub category":["Subcategoria","Subcategorias"]},"Support article":{"${ readingTime } min":["${ readingTime } min","${ readingTime } min"],"Category":["Categoria","Categorias"],"Didn’t find what you were looking for?":["Não encontrou o que procura?"],"General contact":["Contato geral"],"Get help":["Obter ajuda"],"Legal contact":["Contato jurídico"],"Media contact":["Contato de mídia"],"Partnerships contact":["Contato de parcerias"],"Reading":["Leitura"]},"Support Form Platform option":{"VPN for Android TV":["VPN para Android TV"],"VPN for Chromebook":["VPN para Chromebook"]},"Support troubleshooting":{"App version":["Versão do aplicativo"],"Browser":["Navegador"],"Check if this helps":["Confira se isso ajuda"],"Choose a product":["Selecione um produto"],"Did this solve your issue?":["Isso resolveu seu problema?"],"Faster assistance is just a few clicks away":["Assistência mais rápida a apenas alguns cliques de distância"],"How can we help?":["Como podemos ajudar?"],"No, contact support":["Não, entrar em contato com o suporte"],"Please fill out one field after another":["Preencha os campos em sequência"],"Please make your selections":["Faça suas seleções"],"Proton account":["Conta Proton"],"Proton for Business":["Proton for Business"],"Thank you for your feedback":["Agradecemos pelo feedback"],"What can we help with?":["Com o que podemos ajudar?"],"Yes":["Sim"]},"support_modal_search_query":{"Search query":["Consulta de pesquisa"]},"support_search_button":{"Search":["Pesquisar"]},"support_search_i_am_looking_for":{"I'm looking for":["Estou procurando"]},"SupportForm":{"For a faster resolution, please report the issue from the Bridge app: Help > Report a problem.":["Para uma resolução mais rápida, informe o problema no aplicativo Bridge: Ajuda > Comunicar um problema."],"Information":["Informações"]},"SupportForm:option":{"Account Security":["Segurança da conta"],"Contacts":["Contatos"],"Custom email domain":["Domínio de e-mail personalizado"],"Email delivery and Spam":["Entrega de e-mail e spam"],"Encryption":["Criptografia"],"Login and password":["Início de sessão e senha"],"Merge aliases and accounts":["Combinar alias e contas"],"Migrate to Proton":["Migrar para a Proton"],"Notifications":["Notificações"],"Other":["Outros"],"Plans and billing":["Planos e faturamento"],"Proton for Business":["Proton for Business"],"Sign up":["Criar conta"],"Storage":["Armazenamento"],"Users, addresses, and identities":["Usuários, endereços e identidades"]},"SupportForm:optionIntro":{"Select a topic":["Selecione um tópico"]},"swiss_baseed_feature":{"Swiss based":["Sediado na Suíça"]},"Testimonial":{"Awards":["Prêmios"],"Customers":["Clientes"],"Featured":["Em destaque"],"Go to testimonial source":["Ir para a página inicial de depoimentos"],"Open source of award":["Abrir origem do prêmio"],"Open source of quote":["Abrir origem da citação"],"Reviews":["Avaliações"],"Videos":["Vídeos"],"Watch on TikTok":["Assistir no TikTok"],"Watch on YouTube":["Assistir no Youtube"]},"TestimonialCategory":{"Awards":["Prêmios"],"Customers":["Clientes"],"Featured":["Em destaque"],"Media":["Mídia"],"Reviews":["Avaliações"],"Videos":["Vídeos"]},"Text":{"If you need help, check out our ${ supportLink }.":["Se precisar de ajuda, confira nossa ${ supportLink }."],"The page you’re looking for might have been removed, or it could be an\nold link.":["É possível que a página que você está procurando tenha sido removida ou seja um\nlink antigo."],"Your question may already have an answer in our knowledge base:":["Talvez sua pergunta já tenha sido respondida em nossa base de conhecimento:"]},"Title":{"On this page":["Nesta página"],"Related articles":["Artigos relacionados"],"Share ${ thisPage }":["Compartilhar ${ thisPage }"],"Switch to Proton Pass - Contact us":["Mudar para o Proton Pass – Fale conosco"],"Thank you!":["Obrigado!"],"this page":["esta página"]},"Tooltip":{"More information":["Mais informações"]},"tooltip_vpn":{"Access blocked content and browse privately. Includes ${ TOTAL_VPN_SERVERS }+ servers in ${ TOTAL_VPN_COUNTRIES }+ countries, highest VPN speed, ${ TOTAL_VPN_CONNECTIONS } VPN connections, worldwide streaming services, malware and ad-blocker, and more.":["Acesse conteúdo bloqueado e navegue com privacidade. Inclui mais de ${ TOTAL_VPN_SERVERS } servidores em mais de ${ TOTAL_VPN_COUNTRIES } países, a maior velocidade de VPN, ${ TOTAL_VPN_CONNECTIONS } conexões VPN, serviços de streaming do mundo todo, bloqueador de anúncios e malware e muito mais."]},"wallet_signup_2024:Action":{"Get Proton Wallet":["Obtenha o Proton Wallet"]},"wallet_signup_2024:Homepage hero product link title":{"Wallet":["Wallet"]},"wallet_signup_2024:Homepage product navigation bar":{"Wallet":["Wallet"]},"wallet_signup_2024:menu item":{"Bitcoin guide":["Guia sobre bitcoins"],"Proton Wallet news":["Novidades do Proton Wallet"],"Proton Wallet support":["Suporte do Proton Wallet"]},"wallet_signup_2024:Pricing":{"Includes everything in Proton Unlimited and":["Inclui todos os recursos do Proton Unlimited e"],"Limited availability":["Disponibilidade limitada"],"The easiest way to securely own, send, and receive Bitcoin":["A maneira mais fácil de guardar, enviar e receber bitcoins com segurança"]},"wallet_signup_2024:ProductRange":{"Discover Proton Wallet":["Conheça o Proton Wallet"],"Store and transact Bitcoin privately with an encrypted self-custody wallet.":["Guarde e negocie bitcoins de modo privado usando uma carteira com autocustódia criptografada."]},"wallet_signup_2024:wallet bitcoin":{"Learn about Bitcoin, the Internet's value network.":["Saiba mais sobre bitcoins, a rede de valor da internet."]},"wallet_signup_2024:wallet overview":{"Ensure you're always in control of your Bitcoin.":["Tenha certeza de ter sempre o controle das suas bitcoins."]},"wallet_signup_2024:wallet security":{"The encrypted, open-source wallet that puts you in control.":["A carteira criptografada e de código aberto que coloca você no controle."]}}},"base":"blog","cdn":{"enabledForAssets":true,"enabledForImages":true,"url":"https://pmecdn.protonweb.com/"},"unleashApi":"https://account.proton.me/api"};
window.frameworkContext = frameworkContext;
const context = frameworkContext.base === '' ? '' : `${frameworkContext.base}/`;
window.__toAssetUrl = (filename) => {
if (frameworkContext.cdn !== undefined && frameworkContext.cdn.enabledForAssets === true) {
return `${frameworkContext.cdn.url}${context}${filename}`;
} else {
return `/${context}${filename}`;
}
};
})();
Statement regarding BGP hijacking on September 29 | Proton
At Proton, we strive to plan for all contingencies that might affect our service. Our efforts paid off on Tuesday, September 29 (around 4 AM Wednesday morning, Australia time), allowing us to turn a very serious incident into a minor inconvenience for some of our users.
As far as we currently understand the situation, this was done on accident and not maliciously, although we have still not been provided with any additional details. For several hours, however, around 30% of the global internet looking for us got pointed to Telstra instead. Some 1,680 other networks were also affected, making this perhaps the most serious BGP hijacking incident ever.
As we will explain in this article, although there are ways to mitigate the fallout from BGP hijacking, due to the way the internet is designed there is simply no way to prevent this kind of incident from happening. The episode highlights, in fact, how broken some key aspects of the internet are.
Users were minimally affected
Fortunately, we mitigated the effects of this incident relatively quickly thanks to measures such as Route Origin Authorization and monitoring that we already have in place for situations like this.
We were able to divert all mail and web traffic along unimpacted internet routes, so the only effect was some delay in sending and receiving emails. Some non-essential systems, however, like our payments system, were not functioning. This meant that customers were not able to pay us for some number of hours, and we incurred meaningful financial losses as a result.
In this incident, no user data was lost or breached.
What is BGP hijacking?
Border Gateway Protocol (BGP) is a key component of how the internet works. It is the routing protocol that determines how data packets travel from one IP address to another IP address.
IP addresses are the computer-friendly numbers that ISPs assign to every device that connects to the internet. If we imagine the internet as a postal network, IP addresses are the ZIP codes for each destination, and data packets are letters that each contain a portion of the information being sent. BGP is the road map used to deliver the letters to the correct addresses.
BGP looks for all available paths and chooses the fastest and most efficient route. Usually this means transferring data packets between autonomous systems (AS) until they reach their destination.
Autonomous systems are the smaller networks that together make up the internet. All IP addresses belong to an autonomous system, and most autonomous systems belong to ISPs like Telstra.
Using our earlier analogy, autonomous systems are like regional post offices. Letters are delivered to a regional post office, which then delivers them to individual addresses in the post office’s catchment area.
BGP relies on routing information published by autonomous systems, but there are no real safeguards in place to prevent a malicious AS from announcing a route to IP prefixes that it does not control.
To return to our analogy, BGP hijacking is like painting over road signs with false directions so that letters intended for one post office are delivered to a different one.
BGP always chooses the fastest and most efficient route, however, so for a BGP hijack to succeed, the fraudulent announcement must appear to offer a more efficient route than any existing route maps stored on BGP routers across the internet.
How we stopped this incident so quickly
We continually monitor our networks for signs of BGP hijacking and have measures in place to mitigate the problem when an attack is detected. Upon detecting that some portion of our internet traffic was being routed to Australia, we moved essential services over to backup subnets and IPs which were not being hijacked.
Thus, even though our primary network was still being hijacked, the bulk of our traffic was no longer flowing through that network. To follow the analogy above, even though the main highway now had incorrect road signs, we sent users down a different highway that still had the correct signs.
How can BGP hijacking be prevented?
The bad news is that there is no practical way to prevent BGP hijacking. There are, however, some proposals to fix this. The main approach is Resource Public Key Infrastructure (RPKI)(nova janela), also known as Resource Certification.
This is a system designed to certify that BGP route announcements can only be made by an organization with the authority to make that announcement.
We believe this is the most sensible solution, and Proton fully implements RPKI on all our networks. RPKI is opt-in and only works if other internet service providers agree to abide by it. Unfortunately, over 80%(nova janela) of the internet does not use RPKI, and until it does, incidents of BGP hijacking can cause significant damage (in our case, 30% of global traffic).
As BGP hijacking cannot be prevented without the collaboration of the main internet players, the only solution is to have infrastructure in place to quickly switch to alternative networks if and when it happens. Proton had previously invested in such infrastructure as part of our work for alternative routing(nova janela).
Final thoughts
For the internet to become a safer place, more ISPs and cloud service providers must adopt RPKI, and for that to happen, internet users will need to lobby their ISPs. If you would like to get involved in this effort, please see Is BGP safe yet?(nova janela), an initiative by Cloudflare to pressure ISPs into adopting the protocol.
Encouraging your ISP to support RPKI is a good first step toward preventing future incidents of this sort anywhere on the internet. If you are a local internet registry (LIR), sign your prefix now. It is a simple, five-minutes process.
As students build their lives online, Proton makes it safe for them to access
educational resources, communicate with each other, and share knowledge online
safely.