Collaborate Disseminate
How was IronChat compromised?
https://hotforsecurity.bitdefender.com/blog/police-crack-encrypted-chat-service-ironchat-and-read-258000-messages-from-suspected-criminals-20530.html
Dutch police have revealed that they wer… Continue reading How was IronChat compromised?
This is your Shared Security Weekly Blaze for November 5th 2018 with your host, Tom Eston. In this week’s episode: Microsoft and Apple security Updates, Signal’s sealed sender and the Girl Scouts data breach. Silent Pocket is a proud sponso… Continue reading Microsoft and Apple Security Updates, Signal’s Sealed Sender, Girl Scouts Data Breach – WB41
An oscilloscope is a handy tool for measuring signals of all kinds, but it’s especially useful if you want to measure something with a periodic component. Modern oscilloscopes have all kinds of features built-in that allow you sample a wide range of signals in the hundreds of megahertz, and make finding and measuring your signal pretty easy, provided you know which buttons to push. There are some advanced oscilloscope methods that go beyond the built-in features of even the best oscilloscopes, and [AM] has a tutorial on one of them.
The method used here is called phase-senstitive detection, and allows …read more
On Signal’s blog they mention that keys for accessing your profile are exchanged normally with your contacts using the Signal Protocol just like messages are (implying they are already contacts and you’ve already generated a … Continue reading Signal Protocol: How is identity exchanged if a key exchange hasn’t happened yet?
By Waqas
Messaging apps are now becoming more and more secure to make it difficult or rather impossible for anyone to access your conversations. Switching to end-to-end encryption although offered a stronger layer of protection but still the unencrypte… Continue reading Signal App’s New Privacy Feature Conceals Sender ID from Metadata
Signal, the encrypted messaging app, is testing a new “sealed sender” feature that aims to limit even further the amount of information it transmits, the company announced on Monday. By the nature of the app, messages sent via Signal are end-to-end encrypted, meaning only the sender and recipient have the key to view the contents of the message. In the newest beta, the app will allow users to encrypt the identity of the sender In a blog post, the company explains that Signal traditionally uses the Transport Layer Security (TLS) protocol to validate the sender’s identity and inform the recipient who that is. That means that, while the contents are encrypted, the sender’s and receiver’s identity can be intercepted. With the new feature, the app can also encrypt the sender certificate. The recipient’s client then decrypts the “envelope” containing the sender information with their own identity key. “While the service […]
The post Signal Messenger tests feature to encrypt sender identity along with message appeared first on Cyberscoop.
Continue reading Signal Messenger tests feature to encrypt sender identity along with message
Safety numbers in Signal are derived from a hash of the conversation’s users public keys and their phone numbers. Safety number are used to ensure that the conversation was not MITM-ed.
When deriving safety numbers, SHA-512 iterated for … Continue reading Why iterate 5200 times when computing Safety Numbers in Signal?
If it is true that Viber now (and probably other) is using the double ratchet end to end encryption, does Signal still have any security or privacy advantage? Closed source client still leaves a bitter taste for one, but are … Continue reading Is Viber now as secure and private as Signal? [on hold]
Skype’s encrypted “Private Conversation” mode is now available to all users who opt in to the feature first revealed in January. Eight months ago, Microsoft’s Skype announced a partnership with developers of encrypted messaging app Signal to use its encryption protocol to secure chat, file exchange and recorded audio messages with end-to-end encryption. The new feature arrives less than a week after the U.S. government reportedly went to court in attempt to force Facebook to break the encryption on Messenger, a messaging app with over 1 billion users around the world. The information surrounding that case, first reported by Reuters, is extremely limited. Messenger also utilizes the Signal protocol for encryption in a feature called “Secret Conversations.” The recent court case revolves around government attempts to wiretap voice conversations by a Messenger user which is separate from the Secret Conversation implementation. Signal’s encryption protocol is also used by WhatsApp, another Facebook-owned app that also […]
The post Skype adds encrypted chat option for all users appeared first on Cyberscoop.
Continue reading Skype adds encrypted chat option for all users
Amazon and Google face sharp questions from a bipartisan pair of U.S. senators over the tech giants’ decisions to ban domain fronting, a technique used to circumvent censorship and surveillance around the world. Sen. Ron Wyden, D-Ore., and Sen. Marco Rubio, R-Fla., sent a letter on Tuesday to Google CEO Larry Page and Amazon CEO Jeff Bezos over decisions by both companies in April to ban domain fronting. Amazon then warned the developers of encrypted messaging app Signal that the organization would be banned from Amazon’s cloud services if the service didn’t stop using Amazon’s cloud as cover. “We respectfully urge you to reconsider your decision to prohibit domain fronting given the harm it will do to global internet freedom and the risk it will impose upon human rights activists, journalists, and others who rely on the internet freedom tools,” the senators wrote. The technique uses HTTPS encryption to communicate with […]
The post Lawmakers call on Amazon and Google to reconsider ban on domain fronting appeared first on Cyberscoop.
Continue reading Lawmakers call on Amazon and Google to reconsider ban on domain fronting