alt Hacker Newsindeed, the actual case report (https://www.documentcloud.org/documents/28831278-govuscourts...) states:
"technical and network-activity records from fly.io included:
SSH session logs (CSV format) listing multiple "New SSH session" entries for <redacted> with verified=true between approximately 2026-03-26 and 2026-04-01, timestamped in UTC.
outbound-connection records (CSV format) reflecting numerous TCP port 443 connections originating from internal fly.io addresses <redacted> to external IP addresses attributed to AMAZON-02 (Amazon Web Services) in the US and Cloudflarenet (Cloudflare)".
Replies
However on page 8 the document states that these "session logs" don't record commands, they're just audit logs of when, where, by whom the sessions were initiated.
for some reason, the above comment wont let me edit it (despite it being a minute old). but i was going to add:
"i wonder if fly.io bothers to vet/challenge records requests or if they just hand data over".
(this one can be edited, though. very strange)
Yea, I thought the whole Lavabit episode made it clear that privacy oriented solutions based in the US were going to have a hard time. Most Proton’s whole selling point is their location.