Top
Best
New

Posted by dbushell 14 hours ago

Proton Spam and the AI Consent Problem(dbushell.com)
431 points | 279 comments
ivan_gammel 13 hours ago|
I think we must make it clear that this is not related to AI at all, even if the product in question is AI-related.

It is a very common problem with modern marketing teams, that have zero empathy for customers (even if they have one, they will never push back on whatever insane demands come from senior management). This is why any email subscription management interface now is as bloated as a dead whale. If too many users unsubscribe, they just add one more category and “accidentally” opt-in everyone.

It’s a shame that Proton marketing team is just like every other one. Maybe it’s a curse of growing organization and middle management creep. The least we can do is push back as customers.

SCdF 12 hours ago||
I disagree: in as much as I have noticed this *far* more with AI than any other advancement / fad (depending on your opinion) than anything else before.

This also tracks with every app and website injecting AI into every one of your interactions, with no way to disable it.

I think the article's point about non-consent is a very apt one, and expresses why I dislike this trend so much. I left Google Workspace, as a paying customer for years, because they injected gemini into gmail etc and I couldn't turn it off (only those on the most expensive enterprise plans could at the time I left).

To be clear I am someone that uses AI basically every day, but the non-consent is still frustrating and dehumanising. Users–even paying users–are "considered" in design these days as much as a cow is "considered" in the design of a dairy farm.

I am moving all of the software that I pay for to competitors who either do not integrate AI, or allow me to disable it if I wish.

parliament32 1 hour ago|||
The shift from "you just don't understand" to damage control would be funny if it wasn't so transparent.

> We have identified a bug in our system... we take communication consent very seriously

> There was a bug, and we fucked up... we take comms consent seriously

These two actors were clearly coached into the same narrative. I also absolutely don't believe them at all: some PM made the conscious decision to bypass user preferences to increase some KPI that pleases some AI-invested stakeholder.

everyday7732 9 hours ago||||
To add to this, it's the same attitude that they used to create the AI in the first place by using content which they don't own, without permission. Regardless of how useful it may be, the companies creating it and including it have demonstrated time and again that they do not care about consent.
mjparrott 6 hours ago||
How can you get a machine to have values? Humans have values because of social dynamics and education (or lack of exposure to other types of education). Computers do not have social dynamics, and it is much harder to control what they are being educated on if the answer is "everything".
kelseyfrog 4 minutes ago|||
> How can you get a machine to have values?

The short answer is a reward function. The long answer is the alignment problem.

Of course, everything in the middle is what matters. Explicitly defined reward functions are complete, but not consistent. Data defined rewards are potentially consistent but incomplete. It's not a solvable problem form machines but equally likewise for humans. Still we practice, improve and middle through dispite this and approximate improvement hopefully, over long enough timescales.

b00ty4breakfast 1 hour ago||||
It's not hard if the people in charge had any scruples at all. These machines never could have done anything if some human being, somewhere in the chain, hadn't decided that "yeah, I think we will do {nefarious_thing} with our new technology". Or should we start throwing up our hands when someone gets stabbed to death like "well, I guess knives don't have human values".

Human beings are doing this.

Forgeties79 3 hours ago||||
That sounds like the valued-at-billions-and-drowning-in-funding company’s problem. The issue is they just go “there are no consequences for solving this, so we simply won’t.”
thatguy0900 5 hours ago|||
Maybe if we can't build a machine that isn't a sociopath the answer should be don't build the machine rather then oh well go ahead and build the sociopaths
tzs 1 hour ago||||
> I disagree: in as much as I have noticed this far more with AI than any other advancement / fad (depending on your opinion) than anything else before

Isn't that because most of the other advancements/fads were not as widely applicable?

With earlier things there was usually only particular kinds of sites or products where they would be useful. You'd still get some people trying to put them in places they made no sense, but most of the places they made no sense stayed untouched.

With AI, if well done, it would be useful nearly everywhere. It might not be well done enough yet for some of the places people are putting it so ends up being annoying, but that's a problem of them being premature, not a problem of them wanting to put AI somewhere it makes no sense.

There have been previous advancements that were useful nearly everywhere, such as the internet or the microcomputer, but they started out with limited availability and took many years to become widely available so they were more like several smaller advancements/fads in series rather than one big one like AI.

SCdF 32 minutes ago|||
> With AI, if well done, it would be useful nearly everywhere.

I fundamentally disagree with this.

I never, now or in the future, want to use AI to generate or alter communication or expression primarily between me and other humans.

I do not want emails or articles summarised, I do not emails or documents written for me, I do not want my photos altered yassified. Not now, not ever.

expedition32 29 minutes ago|||
This is a very strange argument. If AI was so bloody revolutionary than you didn't have to sneak it into your products without consent.

Very often AI seems to be a solution looking for a problem.

chrisjj 9 hours ago||||
> I left Google Workspace, as a paying customer for years, because they injected gemini into gmail

I wonder if this varies by territory. In UK, none of the Gmail accounts I use has received this pollution

> I am moving all of the software that I pay for to competitors who either do not integrate AI, or allow me to disable it if I wish.

The latter sounds safer. The former may add "AI" tomorrow.

SCdF 8 hours ago|||
I am in the UK. TBC this isn't a gmail.com email address, this is a paid "small business" workspace against a custom domain.

Eventually they backtracked and allowed (I think?) all paid customers to disable gemini, but I had already migrated to Fastmail so :shrug:

chrisjj 6 hours ago||
Ah. My addresses are @gmail.com.

Perhaps the fact you paid got you marked as a likely gull :)

SCdF 5 hours ago||
I think in that case you have even less ability to turn that stuff off? If it's not there for you yet, perhaps it's a slow rollout still?
chrisjj 3 hours ago||
Perhaps yes. We'll see :(
browningstreet 4 hours ago|||
Gmail <> Google Workspaces
chrisjj 3 hours ago||
Maybe not equal but when I launch Gmail the page says "Google Workspace" and I get Gmail, Docs etc. as per https://workspace.google.com/intl/en_uk/resources/what-is-wo... .
haritha-j 11 hours ago||||
> only those on the most expensive enterprise plans could at the time I left.

lol. so the premium feature is the ability to turn off the AI? That's one way to monetise AI I suppose.

FeteCommuniste 6 hours ago||
Hahaha. It's like a protection racket for the new age.

"Nice user experience you got there. Would be a real shame if AI got added to it."

Fabricio20 4 hours ago||||
Yeah this is not a new thing with AI, you can unsubscribe all you want, they are still gonna email you about "seminars" and other bullshit. AWS has so many of those and your email is permanently in their database, even if you delete your account. I also still get Oracle Cloud emails even though I told them to delete my account as well, so I can't even log in anymore to update preferences!
malfist 3 hours ago||
Fun fact, requiring login for unsubscribe is illegal per the canspam act. The most you can do is force a user to verify their email address to you.
dwedge 12 hours ago||||
Even WhatsApp has it in the search bar
jasode 11 hours ago||||
>I disagree: in as much as I have noticed this far more with AI than any other advancement / fad

I agree with gp that new spam emails that override customers' email marketing preferences is not an "AI" issue.

The problem is that once companies have your email address, their irresistible compulsion to spam you is so great that they will deliberately not honor their own "Communication Preferences" that supposedly lets customers opt out of all marketing emails.

Even companies that are mostly good citizens about obeying customers' email marketing preferences still end up making exceptions. Examples:

Amazon has a profile page to opt out of all email marketing and it works... except ... it doesn't work to stop the new Amazon Pharmacy and Amazon Health marketing emails. Those emails do not have an "Unsubscribe" link and there is no extra setting in the customer profile to prevent them.

Apple doesn't send out marketing messages and obeys their customers' marketing email preferences ... except .. when you buy a new iPhone and then they send emails about "Your new iPhone lets you try Apple TV for 3 months free!" and then more emails about "You have Apple Music for 3 months free!"

Neither of those aggressive emails have anything to do with AI. Companies just like to make exceptions to their rules to spam you. The customer's email inbox is just too valuable a target for companies to ignore.

That said, I have 3 gmail.com addresses and none of them have marketing spam emails from Google about Gemini AI showing up in the Primary inbox. Maybe it's commendable that Google is showing incredible restraint so far. (Or promoting Gemini in Chrome and web apps is enough exposure for them.)

lelanthran 10 hours ago|||
> That said, I have 3 gmail.com addresses and none of them have marketing spam emails from Google about Gemini AI showing up in the Primary inbox.

That's because they put their alerts in the gmail web interface :-/

"Try $FOO for business" "Use drive ... blah blah blah"

All of these can be dismissed, but new ones show up regularly.

jasode 4 hours ago||
>That's because they put their alerts in the gmail web interface :-/

I agree and that's what I meant by Google's "web apps" having promos about Gemini.

But in terms of accessing Gmail accounts via the IMAP protocol in Mozilla Thunderbird, Apple Mail client, etc, there are no spam emails about Gemini AI. Google could easily pollute everybody's gmail inboxes with endless spam about Gemini such that all email clients with IMAP access would also see them but that doesn't seem to happen (yet). I do see 1 promo email about Youtube Premium over the last 5 years. But zero emails about Google's AI.

chrisjj 9 hours ago||||
> Maybe it's commendable that Google is showing incredible restraint so far.

Or the Gmail spam filter is working.

plagiarist 7 hours ago|||
> Apple doesn't send out marketing messages and obeys their customers' marketing email preferences ... except .. when you buy a new iPhone and then they send emails about "Your new iPhone lets you try Apple TV for 3 months free!" and then more emails about "You have Apple Music for 3 months free!"

That's "transactional" I'm sure. It makes sense that a company is legally allowed to send transactional emails, but they all abuse it to send marketing bullshit wherever they can blur the line.

chrisjj 6 hours ago||
How is it transactional in any way? It looks to me like post-transaction upsell, pure and simple.
duskdozer 5 hours ago|||
It's not, but it's their justification
plagiarist 5 hours ago|||
I 100% agree with you, but it seems like the courts do not. Even while they were functioning.
chrisjj 3 hours ago||
Has this been actually tested in court, though.
mjparrott 6 hours ago|||
Imagine making this argument for other technologies. There is no opt-out button for machine learning, choosing the power source for their datacenters, the coding language in their software, etc. Conceptually there is a difference between opting out of an interaction with another party vs opting out of a specific part of their technology stack.
SCdF 6 hours ago||
The three examples you listed are implementation details, so it's not clear if this is a serious post. Which datacenter they deploy code in is (other than territory for laws etc, which is something you may wish to know about and pick from) an implementation detail.

A better example would be: imagine every single operating system and app you use adds spellcheck. They only let you spell check in American[1]. You will get spell check prompts from your Operating System, your browser, and the webapp you're in. You can turn none of them off.

[1] in this example, you speak the Queen's English, so spell color colour etc

thatguy0900 5 hours ago||
Unrelated but interesting to think about terms like "queens English" now that the queen is gone. Will we be back to kings English some day? I suppose the monarchy might stay too irrelevant to bother changing phrases.
bayindirh 13 hours ago|||
I believe this is combined with something I call "asymmetry blindness". They may say "but we send an single e-mail per month, this can't be bad".

We the users get a barrage of e-mails everyday because every marketing team is thinking we only get their mail, and it makes our lonely and cold mailbox merrier.

No, users are in constant "Tsunami warning!" mode and these teams are not helping.

robinsonb5 12 hours ago|||
If they were sending just one per month I might actually read them occasionally. It's the three a day from the likes of aliexpress that get deleted without a second glance.

But yes, you're absolutely right - "no raindrop considers itself responsible for the flood".

malfist 3 hours ago||
That marketing team only sends 1 email a month, but the 25 other marketing teams at the same company also only send 1 email a month.
pseudalopex 12 hours ago||||
Our subscription product costs less than expensive coffee. Unused RAM is wasted.
pjc50 8 hours ago|||
Again, no raindrop considers itself responsible for the flood: if you buy enough coffee-priced subscriptions, that's unaffordable. Usually people already have their coffee-priced budget allocated to something. Like coffee.

(Incidentally, this is why mobile gaming uses so many anti-patterns, to make people keep making "just one more" tiny purchase)

setopt 11 hours ago|||
I guess the people you quote also missed that not all of us work in Silicon Valley and can afford those expensive coffees every day. I’d like an estimate of how many Nescafé powder coffee cups I’d have to skip per month to use their subscription.
setopt 11 hours ago||||
Indeed. I received 28 unwanted emails of this kind in January so far (just counted), which is a bit more than once per day, despite quite avidly unsubscribing from this kind of emails. This month I had to unsubscribe from ChatGPT and GitHub emails of this kind too, although I don’t recall opting in to them in the first place and neither of them spammed me until recently.
chrisjj 8 hours ago|||
> although I don’t recall opting in to them in the first place and neither of them spammed me until recently

Dark pattern. They know you'd spot immediate abuse , so they delay until you are likely to have forgotten whether you opted in.

pixl97 5 hours ago|||
>unsubscribe from ChatGPT emails

Really? I've never got a spam from them. Hell, I just searched and I'm not really seeing anything from them after the point where I signed up.

vintermann 10 hours ago|||
I'm pretty sure some people have performance metrics attached to their "newsletter".
boringg 4 hours ago|||
The idea that the marketing team has the ability to really push back against senior management doesn't align with the reality I have seen. The best they can do is say that this will do brand damage -- but they don't have the ability to really call the shots. Most organizations marketing is not in a real seat of power - more like an advisory position.

I'm not trying to unfair to marketing - they do have an important role - I have hardly seen a company give marketing real power at an org. So the idea that this is because marketing don't push back on senior management -- is because they know they don't have the power to do this.

contubernio 12 hours ago|||
The problem is not just empathy. It is also ethics. The fine distinction between opting out of A and opting out of B described in the post served to justify ignoring the opt out request. That's lazy ethically. The entire US business sector's customer relations are completely compromised ethically. It's taken to extremes in tech contexts.
Tarq0n 10 hours ago||
In large organizations motivated reasoning trumps ethics. Behavior starts working along incentive gradients like an ant heap. Spend enough time in an environment like that and you learn to frame every selfish decision as good for the customer.

I think maintaining ethics in large organizations is one of the main challenges of our time, now that mega corps dominate our time and attention.

direwolf20 10 hours ago||
> Spend enough time in an environment like that and you learn to frame every selfish decision as good for the customer.

This reminds me of "in order to save the environment, we are going to delete all of your recordings older than 2 years, in 2 weeks. You can't download them."

lawtalkinghuman 11 hours ago|||
> I think we must make it clear that this is not related to AI at all

There are clear AI-specific reasons why it's being crammed down everybody's necks.

Namely: someone in management has bet the entire strategy on it. The strategy is not working and they need to juice the numbers desperately.

philipwhiuk 5 hours ago||
It's not really AI itself though, it's just whatever the current hype cycle is - it was crypto and cloud before this.
marginalia_nu 4 hours ago|||
Cloud is probably the better comparison, since crypto never had the sort of mainstream management buy-in that the other two got. Microsoft's handling of OneDrive in particular foreshadows how AI is being pushed out.
lawtalkinghuman 3 hours ago||
The difference is OneDrive is moderately useful.
rolph 3 hours ago||
i dont like onedrive very much. i get it its useful as a pigeonhole, what i really dont like is how it is used. its the thing that moves files to onedrive and destroys local copies, that i hate, and onedrive is something that enables that. so i dont hate onedrive, i just dont like it.
antiframe 2 hours ago|||
I have never received a Crypto spam email from any place where I opted out from it. Same for cloud. It feels different. With crypto it was everyone wanting to ride the hype train. With AI they spent a bunch of money up front and are desperate to see ROI.
xnx 3 hours ago|||
> If too many users unsubscribe, they just add one more category and “accidentally” opt-in everyone.

I always "report spam" ("!" key in GMail) before unsubscribing.

shantnutiwari 10 hours ago|||
> I think we must make it clear that this is not related to AI at all

Yeah, many companies do that. I unsusbcribed from newline, they still keep spamming me. Funny thing is, they realised they had made a mistake and promised to remove unsubs. One week later, the spam started.

The correct solution is the spam button. Always

flexagoon 7 hours ago|||
> The correct solution is the spam button. Always

The correct solution is filing complaints with your country's relevant authority

shantnutiwari 6 hours ago|||
In theory. In practice-- I would spend all my time just filing complaints, because today, in 2026, I get more spam from "legitimate" companies than "Nigerian scammer" types
duskdozer 5 hours ago|||
I wish I could without going through a long process involving tons of personal info
chrisjj 8 hours ago|||
The spam button risks false positives.
saghm 50 minutes ago||
It's not a false positive to classify a company as a bad actor and move their emails to the spam folder if they refuse to respect user choices. If anything, I wish it would happen more often and at a massive scale, because then maybe companies would have an incentive to stop being so hostile around this.
hojiron 9 hours ago|||
Still happy that Tuta Mail is anti AI, and does not push ads on you via email.

I wonder who told Proton that it’s a good idea to copy big tech tactics.

microtonal 2 hours ago|||
* I wonder who told Proton that it’s a good idea to copy big tech tactics.*

But people subscribe to Proton because they want to move away from big tech. What’s the point of paying them if they get as bad.

Though for now I’ll assume that it’s a genuine mistake with things not properly escalated by customer support.

chrisjj 8 hours ago|||
Does??

> I wonder who told Proton that it’s a good idea to copy big tech tactics.

The lure of big tech profits.

hojiron 8 hours ago|||
Not :)
ToucanLoucan 7 hours ago|||
Genuinely: What profits!?! The only company profiting from AI has been nVidia. Every indicator we've received for this entire alleged industry is companies buying hundreds of millions of dollars in graphics cards that then either sit in warehouses depreciating in value or, worse, are plugged in and immediately start losing money.

The tech industry has coasted on it's hypergrowth story for decades, a story laden with as many bubbles as actual industries that sprang up. All the good ideas are done now. All the products anyone actually needs exist, are enshittified, and are selling user data to anyone who will pay, including products that exist solely to remove your data from everyone who bought it and probably then sell it to some other people.

This shit is stupid at this point. All Silicon Valley has to do is to grow up into a mature industry with sensible business practices and sustainable models of generating revenue that in most other industries would be fantastic, and they're absolutely apoplectic about this. They are so addicted to the easy, cheap services that upended entire other industries and made them rich beyond imagining that they will literally say, out loud, with their human mouths, that it is a bad, undesirable thing to simply have a business that makes some money.

The people at the top of this industry are literally fucking deranged and should be interred at a psychiatric facility for awhile for their and everyone else's good.

pixl97 5 hours ago|||
>All Silicon Valley has to do is to grow up into a mature industry with sensible business practices

Negative sum game: Growing up is easy if it doesn't kill you. The problem with being ethical when everyone else is unethical is that you'll likely go broke.

The next issue is we're seeing, is not that Silicon Valley is ever going to improve, but the bullshit is spreading to eat up every other industry in the US. Engaging in outright fraudulent behavior is A'ok in the US (I mean we even elected a president convicted on a pile of counts of fraud).

Effectively industries cannot manage themselves, we need regulations to prevent them from being bastards. Problem, we elect bastards that cannot keep from committing fraud themselves.

It doesn't get better from here.

chrisjj 6 hours ago||||
> Genuinely: What profits!?!

Those foreseen. :)

(Should have gone to Specsavers.)

kmeisthax 5 hours ago|||
If you're not the shareholder, you're the product.

The business model of any publicly traded corporation, at least in 2025, is to increase the value of its circulating stock. No more and no less. The nominal business model of the company is a cover story to make line go up. The reason why the stock price matters is because of access to capital markets: if a business wants to buy another business, they are not going to dip into the cash on hand. They are going to take out a loan, and that loan is collateralized by... the value of the business. Which is determined by the stock price.

So if you can keep the line going up, you can keep buying competitors. But if you act like a normal, mature business, you can't.

Profit as a concept is a concern for capitalism. But these businesses are not interested in capitalism, they're angling to become the new lords of a growing feudal economy. That's what "going meta" really means.

Bombthecat 10 hours ago|||
I feel more and more like. That email should be like DMs.

Do you want to accept emails from xxx?

Yes

No

On client side...

chrisjj 8 hours ago|||
Very dangerous, when the same From address may be used for "Log in inside 14 days or your dormant account will be deleted".
chihuahua 4 hours ago|||
I think that would lead to this:

Do you want to accept emails from "For a limited time, save up to 35% on orders from Fluppsi! Click Yes for this amazing opportunity!"

specproc 12 hours ago|||
The problem with tech is that there's absolutely zero accountability.

Marketing is, to some extent at least, regulated. There's so little consumer protection in the tech industry, it's a joke. We've got GDPR (in Europe) and I'm really struggling to think what else. Imagine if other forms of engineering had the same level of control.

There's this absolutely fallacious notion that in a free market, customers can just vote with their feet.

From big players with vendor lock-in and network effects, to specialists (I know of few decent competitors to Proton), the average consumer is not sufficiently protected from malpractice.

We may say, "oh, it's just a marketing email", but TFA perfectly encapsulates the relationship we have with our suppliers.

amarcheschi 9 hours ago|||
Now that we're at it, let's talk about Google ads. I reported a Google ad because I deem it political, and in Europe you must make it clear that a political ad is a political ad and not just an ad (and it failed to do so, it should be corrected or eliminated).

Google refused to comply and act in any way, because they "don't moderate 3rd party content". Except that EU says you _must_ comply if you're publishing a political ad. I'm bringing this forward with an appeal and then I'm going to escalate to the national authority if they still refuse to act.

The laws are there. It's just that big tech think they can ignore them freely and even if down the road there's a fine it's going to be much less than what they gained by spreading ads.

pixl97 5 hours ago||
>then I'm going to escalate to the national authority if they still refuse to act.

You are actually doing this wrong...

Report to the national authority first...

Then report to Google.

Fuck them, it is not in your interest to report to them first, make them react for their bullshit. Over here in the states this is how I ended up dealing with telecom in the ISP industry. "Hello, I have put in an FTC/FCC complaint on $issue, and would like to see about getting it resolved".

It didn't matter that's not the order you're supposed to go in, at the telecom side they send it off to a team that actually gets shit solved before it becomes a regulatory problem.

amarcheschi 5 hours ago||
You might have a stronger case with the national authority if you first do the full "trail" of reporting, appealing, and eventually escalating.

But yes, I feel that there's something wrong in having a stronger case if you first do it "gently" when they wouldn't bother if it were the other way

pixl97 4 hours ago||
>You might have a stronger case with the national authority

At least on the ISP side, we started doing it this way after the telcos would yank our chains for weeks or months first, when we had issues that needed to get solved quickly. More so I started working with our competitor ISPs because it was very common we'd all the have the same issues. More than one complaint of the same type in the same area to these agencies tends to get noticed and followed up quickly. The follow through process on it starts to get expensive for the telcos too.

My next recommendation on this political ad bullshit is don't go at it alone. Find as many like minded people to dig up and complain on these ads as you can. Flood the regulators with violations that are occurring. When you think of it in reverse, these companies breaking the law will have no issues with pooling resources and going after you.

chrisjj 7 hours ago|||
Enforcement in UK is pathetic e.g. HelloFresh's recent spam campaign cost it <0.2p per message in fines. A bargain.
vintermann 10 hours ago|||
To name and shame two: LinkedIn and MyHeritage. If you ever made an account with either of them, they will never stop spamming you. They have configuration options to select which mail to receive, but they appear to consider them temporary suggestions.

A special dishonourable mention goes to Wal-mart. I never interacted with them in any way whatsoever, as well I wouldn't since they don't exist on my continent as far as I know, yet they still send me spam. DKIM signed and all!

alibarber 10 hours ago||
LinkedIn once seemed to somehow go through my (GMail?) contacts and ask if I should invite my, late, grandfather to the platform in the subject of a marketing message.

Left a bitter taste.

littlestymaar 11 hours ago|||
> It’s a shame that Proton marketing team is just like every other one.

Having gone through the Proton hiring process was an eye opener for me: despite its stated mission, the company isn't special when it comes to its management, it's as bad as any other.

chrisjj 10 hours ago|||
> I think we must make it clear that this is not related to AI at all, even if the product in question is AI-related.

It is not specific to "AI" but it is very much related to it.

> If too many users unsubscribe, they just add one more category and “accidentally” opt-in everyone

... and "forget" to add its opt-out to the list.

lynx97 12 hours ago|||
It is an error to believe this is only happening in/with marketing. In general, "empathy" and "capitalism" are mutually exclusive. If profit is your goal, you don't care about individuals.
skywhopper 8 hours ago|||
It is entirely related, because AI marketing is an amped up version of traditional dark-pattern marketing. And since every tech company is on the AI hype train, then they all fall into the same willingness to justify the worst behavior because of their desperate need to get on the forefront of what they’ve convinced themselves is the only path to growth. But as consumers, since we are confronted with all tech companies all following the same dark patterns, we feel the impact suddenly much stronger than with past one-at-a-time panicky company over-marketing efforts.
hsbauauvhabzb 9 hours ago||
There’s probably a bigger association with it. I don’t like ai and see it everywhere, in every app I use, every service I purchase, my goddamn start bar.

So, when they start emailing unwanted emails, it feels like a spam problem, when really it’s insidious on multiple fronts.

I can’t wait for the enshittification phase. When the products royally fuck their fan base.

davidee 4 hours ago||
I've been using proton for a year after migrating from Rackspace and I'm done. Not because of this article, but I might as well pile on:

1. I use a custom domain.

Turns out that there are two competing features, not-at-all documented. If you use a catch-all, like I do, AND use specific addresses for sending, the two are incompatible to some degree. Which is bonkers.

Example: with a catchall I can create any address I want (and I do). Some store wants an email for a big discount, cool, here's a throwaway. Buying something online, here's a throwaway.

Now sometimes, I need to reply using that throwaway. Turns out in Proton, this triggers a gotcha. As soon as I add the throwaway email to my list of email addresses for sending, I enter a world with a limit of 10 max.

That's fine, I can disable them right?

Nope, it turns out if I disable them in order to add aothers, Proton blocks those addresses *even though I have a catch-all*. WHAT?? Worse, if I try to delete the addresses, Proton will also delete the associated messages in my Inbox/folders. Excuse me?

2. What really pushed me away: Search.

Whatever proton is using under the hood is easily the worst search experience I've ever had from a mail product, and I use Thunderbird on my work machine.

Notable: Proton Bridge. I get why, but it's just terrible.

So many rough edges. Just not worth it.

thejoeflow 4 hours ago||
Isn't the search bad because they can't search email contents? As long as the term is somewhere in the metadata (title, sender email, sender name) it seems to work ok.

I agree though that the user experience isn't great because of this limitation. You kind of have to remember what the title of the email was for what you're looking for. Searching for "flight ticket" results in mixed success

sabellito 1 hour ago||
They can search contents. You have to activate local indexing in the search UI itself.
ink_13 2 hours ago|||
What are you going to do instead? I am very close to moving from a 20-year-old GMail address to a custom domain and was planning to use Proton as the email host.
matheusmoreira 37 minutes ago|||
I was in your shoes a few years ago. Just move already. Don't worry about it. Get your own domain and point the MX records at literally any email service out there. If you don't like it you can just switch later. Just start using your own domain as soon as possible.

It really is life changing. When you have your own domain switching email services is risk free since your addresses don't change. You can literally try out all the email services out there.

For the record I'm a happy Proton customer. They seem to be the only ones who still care about PGP. I even interacted with them here on HN a few times.

nomadiccoder 2 hours ago||||
Fastmail is worth considering. Ive used it for several years and it just works.
microtonal 2 hours ago||
Downside is that their main servers are in the US, which may be problematic these days if you are from outside the US.

I just moved away from Fastmail after 10+ years for this reason.

blibble 7 minutes ago|||
as of this week, I've been going through the rigmarole of self-hosting my own email (again), for the same reason as you

any avoidable dependency on the US has become a red line

don't forget to tell fastmail that the reason you're leaving is because they host in the US!

(I also told them if they open a DC outside the reach of the US regime: I be happy to become a customer again)

whiterock 2 hours ago|||
Out of curiosity: Where did you migrate to?
stilldavid 2 hours ago|||
Seconding fastmail.

I have a catch-all and can reply from any address I please. If I reply from an email sent to retailer@mydomain.com it even auto populates the "from" address for me with "retailer", or I can choose to reply from one of my named accounts. It's really slick.

rcMgD2BwE72F 1 hour ago||
Love this too. I just wish they were more privacy-friendly.
bl4ckneon 4 hours ago|||
You also get simplelogin for free, give that a try. Will probably fix your first issue
lunarboy 2 hours ago||
Agreed on both of these. Proton search is so dogshit.

Re: the custom domain catch all reply, this is a bit annoying but there js a workaround. I made a SendGrid account which allows me like 100 sends per month, and I can reply in Thunderbird via SendGrid as any email account. Annoying to boot up Thunderbird, and I haven't found a way to do this on my iPhone, but I don't need ti reply from a throwaway frequently so it's sufficient for now.

aprentic 5 hours ago||
I really hope the Proton PMs are watching this.

Their main business offerings are privacy and security. The fact that they were able to pull customers away from Google shows that switching costs are low.

Your reputation is your moat. If you ruin it by acting like Google, you're filling your own moat.

vee-kay 2 hours ago|
Proton's reputation is not one to be proud of.

In India, the Indian government suspended VPN services in Jammu&Kashmir (J&K) state after a bloody terror attack (in Pehelgam Baisaran valley (a popular tourist spots) where 26 tourists were gunned down in cold blood by jihadi Pakistani terrorists who infiltrated from across the border).

https://en.wikipedia.org/wiki/2025_Pahalgam_attack

However, Proton company has been blatantly touting its VPN services in J&K with the dangerous incitement to evade the Indian government scrutiny.

This was Proton's message: "In Jammu and Kashmir, police have been conducting random stops and house-to-house checks inspecting mobile phones to enforce a local ban on VPNs. A reminder that Proton VPN's mobile app has a "Discreet icon" setting to help disguise it."

https://tfipost.com/2026/01/profit-over-people-proton-vpn-ge...

Such dangerous messaging was even after Proton Mail was blocked in India, because it was found that terrorists and perverts were using it for terror communications and digital sexual abuse.

https://www.thehindu.com/news/national/karnataka/courts-cann...

But Proton refused to comply with India's new cybersecuriy laws and investigations into such subversive activities. Instead, Proton removed its servers from India.

https://telecom.economictimes.indiatimes.com/news/now-proton...

So yeah, use Proton at your own risk.

prussia 1 hour ago|||
Terrorist attacks and perverts are every government's excuse to crack down on freedom. Refusing to comply with an authoritarian government like India's is a plus in my book.
matheusmoreira 22 minutes ago||||
"Government scrutiny" ? What a bunch of bullshit.

If anything this enhances Proton's reputation. If so called "terrorists and perverts" trust it to the point they rely on it for their own security, then it's worth serious consideration. Nobody wants to use cryptography that some indian government can subvert.

bigyabai 5 minutes ago|||
> because it was found that terrorists and perverts were using it for terror communications and digital sexual abuse.

Lol, nondescript "terrorists and perverts" are the laughingstock of Western politics. Eyes roll whenever someone justifies drastic action on vague terrorism/perversion accusations: https://youtu.be/ud9zBKJJQe4

My bigger concern is Modi's international reputation for exacerbating crime statistics to manufacture consent for authoritarian policy. We've seen our fair share of that here in America and it's not a positive influence on national politics. So much so that we can't trust our own email providers to be secure.

Terr_ 13 hours ago||
> Has anyone else noticed that the AI industry can’t take “no” for an answer? AI is being force-fed into every corner of tech. It’s unfathomable to them that some of us aren’t interested. The entire AI industry is built upon a common principle of non-consent.

I can't help but see the spam as more circumstantial evidence of a bubble, where top-down "pump those numbers" priorities overrides regular process.

hattmall 13 hours ago||
The really strange thing is that so much of it doesn't work. Like I get that the SOTA models perform some tasks quite well and have some real value. But the AI being implemented in every corner creates a lot of really bad results. The Shopify code assistant will completely wreck your site and basically gets nothing correct. It will write 100 lines to change a color of a single DIV. The Amazon product Q&A will give you wrong information more frequently than not.

In what mind frame is it logical or necessary to put these extremely poorly functioning products in to the wild?

TeMPOraL 12 hours ago|||
It's a desperate attempt at staying relevant, even if most of those companies don't realize it yet. Because of its general-purpose nature, AI subsumes products. Most software products that try to "implement AI in every corner" would, from the user's POV, be more useful if they became tools for ChatGPT/Claude/Gemini.

People's goals are rarely limited to just one software product, and products are basically defined as a bag of tools glued with UI, that work together but don't interoperate much with anything else. That boundary drawn around a bunch of software utilities, is given a name and a fancy logo, and sold or used to charge people rent. That's software products. But LLMs want to flip that around - they're good at gluing things, so embedding one within a product is just a waste of model capabilities, and actually makes the product boundary more apparent and annoying.

Or in short: consider Copilot in Microsoft Word, vs. "Generate Word Document" plugin/tool for a general LLM interface (whether Gemini webapp or Claude Code or something like TypingMind). The former is just an LLM locked in a box, barely able to output some text without refusing or claiming it can't do it. The latter is a general-purpose tool that can search the web for you, scrap some sites and run data analysis on results (writing its own code for this), talk results over with you, cross-reference with other sources, and then generate you a pretty Word document with formatting and images.

This is, btw., a real example. I used a Word document generator with TypingMind and GPT-4 via API, and it was more usable over a year ago than Copilot is even now. Partly because Copilot is just broken, but mostly because the LLM can do lots of things other than writing text in Word.

Point being, AI is eroding the notion of software product as something you sell/rent, which threatens just about the entire software industry :).

PaulHoule 7 hours ago||
AI is the first path out of enshittification the industry has had in a while.

See https://arstechnica.com/information-technology/2026/01/ebay-...

It will be funny to see the rapid about face.

Terr_ 1 hour ago||
> AI is the first path out of enshittification the industry has had in a while.

Even reading the link, I don't see one gets to that conclusion.

It doesn't change the power dynamic as much as it gives new ways for monopolies and rentiers to exploit it.

Sharlin 8 hours ago|||
"It's difficult to get a man to understand something when his salary depends upon his not understanding it."

In this case, the thing that's difficult to understand is "AI in everything is shit and nobody wants it."

hsbauauvhabzb 13 hours ago|||
Agree. The number of services i use where the apps continually add new marketing preferences which are defaulted to ‘enabled’ despite the fact that all other preferences are disabled is disgusting and clearly used by some companies to ignore people’s actual preferences.

LinkedIn is one of the worst offenders.

dwedge 12 hours ago|||
Whenever I login to LinkedIn I get "emails aren't getting through to your main email address".

1. That's by design, because you spammed the shit out of it. 2. Given that all I do is send them to /dev/null, HOW DO YOU KNOW?

mnw21cam 11 hours ago|||
They're checking to see whether any of the links they put in the emails are being fetched from their servers. It's stupid, but it works for most people.

I had a similar situation with SMS messages that were being sent to me with links informing me of status updates. These texts were useful, and I would go over to my real computer to check the web site. Then after a few days the text messages said "It looks like these messages aren't getting through to you, so we'll stop sending them." Which is also stupid, but it works for most people that load the web site on their phone from the SMS link. God help you if you have a dumb-phone.

Sharlin 8 hours ago||
You don't need the recipient to actually click on any visible link. Tracking pixels are the oldest trick in the book.
direwolf20 10 hours ago|||
Probably tracking pixels in the emails
dwedge 7 hours ago||
So they'd miss it anyway, my mail client is firewalled to only be able to access the mailserver.

I've been unsubscribed from a handful of newsletters because I don't read them. I replied to one and told them I did, even reached out on Twitter, but they still deleted me.

duskdozer 13 hours ago||||
Have you noticed certain financial providers sending blatant marketing emails with no unsubscribe option and a comment along the lines of "these emails are not marketing"
pil0u 13 hours ago|||
This is illegal practice in the EU
chrisjj 7 hours ago|||
Yet rife. My complaint to a major UK provide was rebuffed with the blatently false assertion that the email promoting a website refresh was an essential service email.
duskdozer 12 hours ago|||
It's illegal in the US too as far as I'm aware. But you missed the part where they clearly stated "it's not marketing" ;)
nkrisc 11 hours ago|||
They go in the junk folder and then get marked and reported as spam.
chrisjj 7 hours ago||
Dangerous, since this invites genuine service emails to be junked.
MiddleEndian 27 minutes ago||
I think that's fine. If 20% of the emails from some company (let's say Paypal) are spam, then all email providers (especially Gmail, the largest provider) should mark ALL of their emails as spam by default until they stop spending spam. If they want to keep spamming, they can at least humiliate themselves by telling people to check their spam folders for their emails.
Terr_ 11 hours ago|||
The corporate version of video-uploaders writing "no copyright infringement intended", except with less an an excuse for not knowing better.
technothrasher 8 hours ago||
"For Off-road Use Only"
hsbauauvhabzb 13 hours ago|||
Yes, but not anywhere near as annoying for me at least.
genewitch 12 hours ago|||
control+alt+shift+Win+L
junon 12 hours ago|||
This never stops annoying me that it exists.
duskdozer 11 hours ago|||
What the fuck lmao
njhnjhnjh 6 hours ago||
[flagged]
chc4 13 hours ago||
I saw a Mastodon tweet a while ago, which went something like:

Do tech companies understand consent?:

- [ ] Yes

- [ ] Ask me again in a few days

usefulposter 12 hours ago||
Hey, that sounds like Signal!

https://github.com/signalapp/Signal-iOS/issues/4590

>We're not going to remove the reminders.

>If you don't want to provide that access, you still don't need to – you can simply tap remind me later once a month

(See also: https://github.com/signalapp/Signal-iOS/issues/4373, https://github.com/signalapp/Signal-iOS/issues/5809, ...)

littlecranky67 12 hours ago|||
I get their point that you can't provide a "No" in the reminder. But there should be an option (maybe even hidden under "advanced settings - here be dragons!") for this.
pzmarzly 6 hours ago||
Molly, the Signal fork, has exactly this feature. https://molly.im/
stackghost 12 hours ago|||
Signal is an interesting case study in UX failure. I and a bunch of other tech forward people were on it in its heyday but after they removed SMS support and implemented shitty UX like that nag dialog: Neither I nor a single person I know uses it any more. Everyone is on Whatsapp or iMessage.

It may be cryptographically superior, but does that matter at the end of the day if nobody uses it?

ale42 11 hours ago|||
Cryptographical superiority aside, Signal doesn't collect personal data, unlike Whatsapp. For me that's the main reason to use it. The UX is good enough, although some points can for sure be improved.
alex1138 8 hours ago||
Whatsapp should be a non starter. What Mark Zuckerberg did to Whatsapp should be required reading for anyone using the internet, and then decide if you still want to use Facebook (never mind, they build a shadow profile for you anyway)

"It's time. Delete Facebook" isn't subtle https://www.forbes.com/sites/parmyolson/2018/09/26/exclusive...

mystraline 7 hours ago||
That needs spelled out.

Delete: Facebook, Messenger, Instagram, WhatsApp, Meta, Threads, Manus.

Most people think of Facebook and Messenger when they see "Delete Facebook". Thats also why the rest dont have Meta or FB in their name.

nxtbl 10 hours ago||||
Sounds like they just don't care about privacy, do they? Guess showing them https://i.redd.it/0imry50rxy961.png still won't change anything..
stackghost 5 hours ago||
That is a thoroughly unconvincing graphic, yeah.

A few of my neighbors have kids the same age as my kids, they're on a WhatsApp group chat, and my choice is either use WhatsApp or make my kid miss out on social events, so it's not really a choice.

"Hey let's switch to this app that nobody else is using and it sends you annoying popups every month but trust me bro it's more secure" is not a winning argument

direwolf20 10 hours ago||||
WhatsApp isn't any better, it's just more popular.
TheChaplain 12 hours ago|||
> It may be cryptographically superior, but does that matter at the end of the day if nobody uses it?

I've made a few attempts to convert people, but no-go. People stay on Telegram and WhatsApp because they have better UX and features.

Signal refuses to see the value in good attractive UX.

littlecranky67 13 hours ago|||
This. We must change laws that the above field is not considered as given consent. And while we are at it, we must change "silence is agreement" to "silence is disagreement". This applies to change of ToS, price increases etc. That means if I don't click a link with a button "I agree", the ToS change is not accepted - that means they have to cancel/delete my account.
bayindirh 12 hours ago|||
Didn't FCC remove "1-click unsubscribe" requirement since it can "provide more choice and lower prices to all users across the board" (since the companies can rip off more users and create pseudo-lower prices)?

EU has its GPDR and it has some teeth, but US is currently hopeless on that front, for now, from my vantage point.

I'd love to be stand corrected though.

SpicyLemonZest 4 hours ago||
The FTC established a "click-to-cancel" rule, but (as with just so many regulations in the US) it was blocked by an appeals court. Federal law says there's a hoop they have to jump through for rules with an impact of more than $100 million, and they didn't jump through the hoop because they didn't think the impact was that high.
7bit 5 hours ago||||
Just move to Germany, we have all you asked for.
lelanthran 10 hours ago|||
> And while we are at it, we must change "silence is agreement" to "silence is disagreement".

Maybe we should reframe their "silence is agreement" message as "silence is consent".

zombot 8 hours ago||
They ran out of letter "o" supply, so they can't spell "no".
danielhep 12 hours ago||
This problem, along with general annoyances at Proton’s lack of focus on a good email experience pushed me over the edge to move to Fastmail. I’m so much happier. Proton Mail Bridge would often pin one core of my laptop CPU, draining my battery, and it was still slow to sync new email. With Fastmail, incoming mail is so fast that the verification codes are already there before I can alt tab over.
cyrialize 6 hours ago||
Fastmail is awesome! I've been a happy user for a long time. Everything just works. The UI is great, nothing gets in my way.

I'm a fan of the randomly generated emails as well. That service integrates with 1Password too.

joshuat 2 hours ago||
The 1P integration is a pretty compelling feature
StrangeSound 12 hours ago|||
I'm in the same boat. I think part of that is Proton is spread across a huge suite of products and features, whereas Fastmail is specialised in one.
Cthulhu_ 10 hours ago|||
It feels like Proton is trying to build a solid Europe-based alternative to Microsoft 365, which is necessary but also very ambitious and expensive.
throwaway173738 6 hours ago||
Proton’s pricing is really frustrating for me because I want to buy upgrades to only a few services like Pass and email. Your only option on their service is to select either Pass or Mail. You cannot buy both and you will be downgraded on one if you try to buy the other.
jnurmine 3 hours ago||
Doesn't Proton Unlimited have both?
chrisjj 7 hours ago|||
> Fastmail is specialised in one.

Sadly untrue since they added calendar. However I'd would say the email service and support remain excellent regardless.

DerArzt 5 hours ago||
Email and calendar go together like bread and butter.
nonninz 11 hours ago|||
I may be in the same boat.

Is Fastmail an US company though?

elashri 8 hours ago|||
They solely use US servers [1] and don't have plans to offer EU or any non-US servers though.

[1] https://old.reddit.com/r/fastmail/comments/1jbryai/european_...

BoboDupla 11 hours ago|||
Fastmail is an Australian company.
hn111 12 hours ago||
Same here, I've found too many bugs in Proton's email client and instead of fixing them they just release new products. FastMail support has been great, I think the developers themselves reply (some of the?) emails, going into technical details and being actually helpful.
chrisjj 7 hours ago||
> FastMail support has been great

Seconded, failing only when up against tricky issues like insecurity of their so-called secure Masked Email.

qaz_plm 6 hours ago||
I’m a heavy user of masked emails from Fastmail. Can you expound on the insecurity you mentioned?
chrisjj 3 hours ago||
"WARNING: Fastmail Masked Email insecurity" https://www.emaildiscussions.com/showthread.php?t=81287
qaz_plm 40 minutes ago||
Appreciate the follow up!
designerarvid 23 minutes ago||
Proton’s take on marketing is the main thing making me anxious of commitment to their ecosystem.

Other than that I’m a happy paying customer.

perching_aix 13 hours ago||
I have a Proton mailbox I specifically keep around to serve as a honeypot, for tracking when one of the many annoying little services will inevitably mishandle the contact address I hand them.

Over the years, the only spam I ever received there was from Proton. Quite the way to recalibrate my expectations, eh?

genewitch 12 hours ago|
i think i have a proton email address, but i never used it. i wonder.

but i pay fastmail a whopping $15/yr to give me mailboxes on my domain, which i have always heard is a good way to track who's selling your data.

So far, nothing has made it past the spam filter, and i don't check spam (how many valid emails have you found in spam in the last 5 years?); that being said apparently no one is selling my email address anymore. or, and this is a significant possibility: when i tell them companynickname@mydomain.li they just ignore the domain and put in gmail? For instance i gave Take5 "take5@" as my email and i never received anything from them. The guy even said "No; your email address" with a weird half smile; then i explained it's my own website and email, i can use any email address i want; that it will alert me if someone sells my email address.

I doubt there's a flag on the auto oil shop's CRM or POS or whatever for "customer states they're proactive about email spam and their privacy"

dwedge 12 hours ago||
> (how many valid emails have you found in spam in the last 5 years?)

Personally, running SpamAssassin, zero.

However, this seems to be getting worse with the big providers deciding to drop domains they don't like from time to time. Selfhosted email will work for 4 years and then Google or Microsoft will spam them for a month for no reason. It always starts working again because I assume that what they are doing is technically anti-trust and running it for too long would make it obvious.

brauhaus 13 hours ago||
This is not an AI problem, it's an "data privacy + lack of consequences problem". It happens everywhere. I mean, have you ever tried making an airline company to stop sending their shitty miles newsletters?

Only way to stop is to start fining these companies.

ozlikethewizard 13 hours ago||
Not sure where you live, but inside the EU / UK this is rarely a problem because the companies do get fined. If youre having problems like this report them to your relevant authority. But as another commentor noted, AI bubble makes paying spam fines more worthwhile than bubble popping.
chrisjj 7 hours ago|||
> Not sure where you live, but inside the EU / UK this is rarely a problem because the companies do get fined.

Here in UK is is a frequent problem and companies rarely get fined e.g. MS never.

weedhopper 5 hours ago||
True, microslop has a record of breaking GDPR and changing ToS without notifying users and looks like they are free to do so.
brauhaus 7 hours ago|||
Only if the company is headquartered in EU/UK, right? Proton, for example, is headquartered in Switzerland. Even if it wanted, there would be no legal entity in EU to be fined.
toby- 3 hours ago||
My understanding is that a company's location is largely irrelevant; a company becomes subject to the GDPR when they handle EU citizens' data (or UK GDPR when it's UK citizens), and the EU/UK will still try to fine companies that aren't resident in the EU/UK - enforceability is a different question, although non-payment of fines opens the door to other remedies e.g. blocking access, seizing assets, etc.
arkh 13 hours ago||
[flagged]
kenhwang 13 hours ago|
Odd, I didn't even know Proton had an AI feature until I read this article. Didn't get an email or tooltip while using the app. Didn't previously explicitly opt-out either, and when I check my notification settings, Lumo product updates is set to disabled.

Maybe someone's feature gate isn't working as intended?

I did get the Github Copilot spam email today though.

dwrolvink 13 hours ago|
Me neither, it's probably related to OP having a business subscription
zemnl 12 hours ago||
I do think the same too, I have a Proton subscription (non-business), my "Lumo Product Updates" is toggled OFF and I've never received a single Lumo email so far.
More comments...