Collaborate Disseminate
Over the last 15 years or so, astronomers have detected hundreds of unexplained radio signals from space, which they call fast radio bursts (FRBs). Now a fresh look at radio telescope data has doubled the number of known sources, bringing us closer to … Continue reading Number of known sources of repeating radio signals in space doubles
In an open letter, seven secure messaging apps—including Signal and WhatsApp—point out that the UK’s Online Safety Bill could destroy end-to-end encryption:
As currently drafted, the Bill could break end-to-end encryption,opening the door to routine, general and indiscriminate surveillance of personal messages of friends, family members, employees, executives, journalists, human rights activists and even politicians themselves, which would fundamentally undermine everyone’s ability to communicate securely.
The Bill provides no explicit protection for encryption, and if implemented as written, could empower OFCOM to try to force the proactive scanning of private messages on end-to-end encrypted communication services—nullifying the purpose of end-to-end encryption as a result and compromising the privacy of all users…
The boss of WhatsApp, the most popular messaging platform in the UK, says that it will not remove end-to-end encryption from the app to comply with requirements set out in the UK government’s online safety bill.
Learn more in my article on the Hot f… Continue reading WhatsApp and UK government on collision course, as app vows not to remove end-to-end encryption
Premise
Signal is armed with measures to instil a sense of privacy in users by preventing undisclosed screenshotting and screencasting message threads, and by enabling the sender to set their text, audio and video-based messages to disappe… Continue reading Signal — Can message previews of the messages you send be disabled in the chats’ list of your addressee?
I was reading the Signal protocol on how it handles out-of-order messages. What if those messages never arrived, does Signal keep the keys forever or are the keys deleted as soon as a new session is started?
https://signal.org/docs/specif… Continue reading How long does Signal keep the keys for out-of-order messages?
Long and interesting interview with Signal’s new president, Meredith Whittaker:
WhatsApp uses the Signal encryption protocol to provide encryption for its messages. That was absolutely a visionary choice that Brian and his team led back in the day - and big props to them for doing that. But you can’t just look at that and then stop at message protection. WhatsApp does not protect metadata the way that Signal does. Signal knows nothing about who you are. It doesn’t have your profile information and it has introduced group encryption protections. We don’t know who you are talking to or who is in the membership of a group. It has gone above and beyond to minimize the collection of metadata…
Signal is phasing out SMS support from Android to enable it to focus on developing a more secure and reliable platform.
The post Signal to remove SMS support from Android appeared first on TechRepublic.
Continue reading Signal to remove SMS support from Android
PQShield published a white paper that lays out the quantum threat to secure end-to-end messaging and explains how post-quantum cryptography (PQC) can be added to the Signal secure messaging protocol to protect it from quantum attacks. The company is of… Continue reading Researchers publish post-quantum upgrade to the Signal protocol
Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world’s largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices. Continue reading How 1-Time Passcodes Became a Corporate Liability
Group-IB has discovered that the recently disclosed phishing attacks on the employees of Twilio and Cloudflare were part of the massive phishing campaign that resulted in 9,931 accounts of over 130 organizations being compromised. The campaign was code… Continue reading 0ktapus: Twilio, Cloudflare phishers targeted 130+ organizations