> “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August.
What a jerk. I agree that security doesn't have to be given time—like all software, implementation takes the time it takes.
But he doesn't have to be such an asshole about it. In my book, there's nothing more representative of "loser thinking" than casting petulant aspersions like "loser thinking."
Dunno, but it's a big reason why I hated living in SF, hate being lumped in with "tech bros", and absolutely cannot stand people who turn their entire personality into being "all in on AI".
That might have been an excuse in 1992. It's not an excuse in 2026. The geeks won. We are the cool guys (or were, until the fucking geek CEOs went insane).
For a very brief period, and then when the really big money started rolling in, all the personalities that used to flock to wall street became programmers.
The Silicon Valley of the 90s was completely different to the thing it is now here.
Geeks got rich. We didn’t get cool. Bezos, Musk, Zuckerberg, et al have proven that money doesn’t make you happy, beloved, or cool (and actually seems to do the opposite).
I'm not sure that's true, at least not in this case. Andy is an actual geek. He's just also an asshole. Being a geek doesn't stop you from being an asshole.
"We are the guys who get to be future rapists, ego maniacs, and provide once in for all, it's not personality, just money and fortune that makes business shit"
Can you reference some? I recall never trusting Proton, but I never had a reason why, just gut feeling. This stuff is vindicating, but I'm curious if I actually had a reason to feel the way I did or was right by accident. I don't have a great track record; I trusted Bitwarden and regret it, and the Mullvad situation is very disappointing (though not really related to the quality of the tech).
Yeah, I'll give him a pass on the 88 thing. Lots of Chinese people have these types of numbers for license plates, phone numbers, or bank account numbers. It has nothing to do with Nazis; they're just lucky numbers. Eight sounds like "发", which means becoming wealthy.
Being cruel to your employees qualifies, regardless whether they care about the product, IMO. And it seems like those employees did care. Words matter and shape the environment people work in.
I wasn't aware of cruelty; just that they are opting to use AI. The tracking of AI produced code is tough; I have that at my org too, but it's more so to get a sense for who's using it, so we can find out why, help them use it better, etc.
I also only read the initial post and not the entire 404 article. I suppose if I could edit my comment and have it maintain some posterity, I'd say something like "going all-in on AI doesn't make you evil", but I concede that these guys could certainly be assholes if there's more to it (I'll read the nested article).
There's a lot of people on this site who think successful tech execs and founders should be able to do whatever they want to anyone and their communities. They all think they'll become one soon enough, so they're protecting their imaginary class interests.
They're sheep being herded by tech billionaires, who've gotten them to think they're pets and that they definately won't slaughter the second they're hungry.
My comment wasn't meant to imply anything of the sort. I think you can adopt AI aggressively without being a total dickhead, more or less. Doing it at direct expense to others' well-being is clearly a problem. I'll read the nested article to see how wrong I am, but the initial post that's linked didn't seem to indicate Proton have gone to the dark side. I'd need more evidence to judge them like that.
Failure to take advantage of available tools does not suggest whether you are a good guy or a bad guy, just whether you are a competent guy or an incompetent guy.
Whats an example of a company, that existed pre-AI that has so far failed to take advantage of AI and has fallen behind?
I see a ton of examples of companies overusing AI and destroying their brand/image and products, but not many who abstained and are hurting. Using AI does not give you automatic wins, and using it solely because its available does not make you competent.
Its going to be wildly distributed and varied so hard to spot, but look for companies where the main output was commodity B2B assets and you can see a real impact. Marketing copy, images, graphic design in the low and mid tiers. Real businesses supplied that stuff and even adopting AI wouldn't help, since their customers could just do it in house now.
There's heaps of companies between small and conglomerate and the middle area is where the commodity asset companies lived. Generating low stakes copy, art, apps and websites for small companies.
Great. I have a lifetime account that I purchased a decade ago and now I'm going to have to find something else. Thanks guys, thanks for ruining everything.
the signs were there for a while but this ain't helping. not jumping ship today, but that's mostly logistical -- but will start looking for other options.
like i do security and use AI daily -- and i am fully aware of what its good for and not good for. there still need to be engineers in the loop, and if it's just AI then i'm not a Proton customer I'm a [Claude/ChatGPT/Gemini/etc] customer.
There’s going all in on AI adoption, then there’s what proton has done.
This is disgusting, full stop. Destroying any sense of trust in your company by allowing people to rat on others is going to bite them in the ass.
And all for AI, which ultimately is a tool that the largest portion of people already have adopted and those that haven’t often understand it’s the way forward anyway. Like instead of letting your people do this organically, maintaining trust in their org, you poison it instead. And for what? A few extra dollars in the bank? The greed is gross.
Not to mention the loss of customers/potential customers. I always thought proton was one of the good companies. That’s out the window with this news.
I’ve been using Fastmail for years now. Easy to use, reliable, and consistent. No major extra features but that’s exactly what I want for an email provider! I see it recommended here sometimes, so I’m happy to be that guy today
Article seems somewhat one sided to me. The style of the CEO doesn't sound good, but there's no discussion of specific tooling, harnesses, and other automation they have in place. Reading the letter posted, it sounds like they've got more in place than the article implies but people have been resisting adopting.
Yeah this sounds a lot to me like blowback from current or former employees. There's no specific evidence yet of bad security practices, but the mere suggestion of it is a problem for a company whose image is centered on privacy. It's a knife well-aimed by someone who knew where to aim it.
> this sounds a lot to me like blowback from current or former employees
Well, yeah. They're the ones who are harmed by Andy's behavior, so obviously they're the ones speaking up. How does this disqualify anything they're saying?
Why not have the engineers, or "implementors", known for systems thinking, build things with AI? A team of product managers building things is like saying I want my factory floor manager on the tools, running the machines. The evolution of that role just lands you at a team of implementors again, who still need a leader. You already have that.
In a sense, you're demoting your managers to implementors, and getting rid of their leadership role altogether. Simultaneously getting rid of your prior engineers and all the domain and tribal knowledge they had built up.
It seems to me an intentionally provocative formulation, and maybe a symptom of an ongoing internal shake-up. But think about it--is he really saying anything so different compared to what some of our best well-known engineers like antirez have been saying?
I think we all know the game has changed. The question would be whether the CEO is handling that effectively. On that score I don't think he is. It sounds like a slow-moving mutiny is going on, and to have it blow up in the press means you've already failed.
We do not all know anything of the sort. From my perspective, the game hasn't changed at all, and it's just a bunch of people hyping up a bubble who think it has.
It seems like it has. My father who is provacy conscious but not really one to seek specific things out started talking about / investigating proton a couple of weeks ago. He is almost 80.
FFS. ProtonVPN is borderline irreplaceable as one of the three or so VPNs that you don't have to trust because they've been tested in court not to have VPN logs. Losing one of them hurts.
Based on my own usage, one of the things that AI continues to be really, really shit at is data governance. And this is a place where a “move fast at all costs” attitude simply will not do. It is just so very easy to accidentally start leaking data in a way that undermines privacy safeguards.
I use soverin since I moved from gandi 3 years ago. I didn't had any problems in this time, but I also didn't registered my domain with them just in case.
https://www.tuta.com/
Is the only other major player I am aware of— although they have a significantly smaller product lineup than Proton, and aren’t as viable an alternative to Google for those who want a fully integrated suite.
Tuta does Mail and Calendar fairly well, cant speak to their drive product.
The CEO sounds like .. a loser. :) I'm kidding! He sounds very smart!
If the company isn't going to hit revenue targets they might actually need to fire people and this can be a good way to provide cover that devs aren't meeting requirements so they can be fired with cause.
A past company CEO sounded very similar to this internally before they fired 30% of the staff because they didn't have enough money.
My current vibe reading on CEOs who think every job can be done with AI today is the athlete who starts celebrating before crossing the finish line, to be passed bysomeone who takes the win. My guys, it's not that good yet!
The issue is that, per the article, "Andy Yen, the CEO of Proton, had a message for an employee in the company’s security Slack channel who urged the company to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,”
I think anyone who has been working around in IT long enough, knows that it is in fact very, very hard to be fast and secure. Even with AI.
After everything in the past six months do we really think that humans are better than coding agents at writing secure code?! This announcement honestly makes me more confident not less in their products.
The lump of labor fallacy is a fallacy not real. Phrased another way, demand for software is more or less infinite so if coding agents make everyone a 10x engineer eventually we will easily find use for 10x more software.
> demand for software is more or less infinite so if coding agents make everyone a 10x engineer eventually we will easily find use for 10x more software.
Ah, so this one of the reasons why in 2026 every single app / software suite / et al takes 2+ seconds to load, is slow and buggy, and overall a pain to use.
Since software is in some ways information + machine a near infinite amount can be created. I'm not sure I want to live in that world.
Sure, but that’s not infinite. It’s always a zero sum game: if someone is playing my game then they're not playing yours (even if someone else might be)
Fully expecting this will get me a torrent of downvotes here, but...
I'm not sure he's wrong. I'm speculating here but I can imagine the kind of developers Proton attracts--likely people who care a lot about the code and who care about the craft. That's fine, but when you're running a company in this environment, and that's what things look like internally, you do have to be a little brutal to shake people out of old ways. A manifesto titled "Your old job is gone" may actually be warranted.
It sounds a lot like there are people internally who are still fighting the shift, and they've taken to leaking things that hurt the company's security image. Part of the CEO's job, if he's going to push hard in the direction he's decided on, is to fire those people who will undermine it before they do. That this has all now backfired is entirely on him. Maybe he thought he was "motivating" people by calling them losers, or shaking them out of an outmoded way of thinking about what we do, but none of that matters when you have employees attacking your main selling point and the core image of the company in public.
He's not wrong that he needs to move fast, or that processes need to change, or that the job has changed, but his execution isn't so great.
Also, they don't need shaking out of their ways. Aren't the AI bros always trying to tell us to evaluate the results, not the tool used to produce them? That argument cuts both ways. The Proton engineers are demonstrably doing a good job at building the software, so they shouldn't be punished if they believe LLMs aren't the right tool for the job.
Do we really need humans writing code anymore though? Another year of development and AI is just going to be superior to a human writing code. It's already about 90% there.
Humans still write the code, we just do it using AI tools.
If we abdicate and let all software development and operations occur through the use of fully autonomous agents, someone is still ultimately responsible for the agents work/screw-ups. Thus, there is still a human writing code, from an ownership perspective. We all know it won't be the capital/manager class holding the stick there.
>If we abdicate and let all software development and operations occur through the use of fully autonomous agents, someone is still ultimately responsible for the agents work/screw-ups. Thus, there is still a human writing code, from an ownership perspective.
That isn't what "writing code" means. The responsibility is for using the AI, or being negligent in doing so, but the AI is obviously writing the code. That's the entire point of it.
Are compilers writing code? I mean, people hadn't been producing anything that a CPU is actually executing (excepting some very rare special cases) for decades now. So we never wrote code to begin with...
Prototype self-driving cars where able to handle 90% of driving around 1990. Sometimes it is very hard to go from something that works very often to something that works always.
Depends on what do you mean by "writing code". Once, writing code meant punching holes in pieces of paper and feeding that into a machine. Then the technology changed. Writing code became entering cryptic numbers into the machine. Then the technology changed. Writing code became typing words and punctuation that have some passing connection to English but otherwise meaningless to a non-professional. Then the technology changed. Writing code became much more like writing text but still not resembling any actual text. Then the technology changed... It will change again. It still won't magically produce something sensible out of nothing.
I don't even care about that. Sure, use LLMs to write code. But the way Andy talks to his employees and treats them is so disrespectful, I find it actually despicable.
Unfortunately, it's not super easy for me to migrate away from Proton, but it's the next personal tech project I'll undertake.
You are right. Let's just hand the keys to everything to the AI companies. They've proven to be trustworthy and ethical. I trust them so much, I'm just going to stop thinking and say yes.
reply