Showing posts with label NSA. Show all posts
Showing posts with label NSA. Show all posts

Thursday, April 3, 2014

'Good job NSA. You turned Yahoo! into an encryption powerhouse'

Yahoo! has announced major encryption improvements designed to thwart dragnet surveillance efforts by the likes of the NSA.
Alex Stamos, Yahoo!'s recently appointed CISO (chief information security officer), said the internet giant has finished encrypting traffic between its data centres. Stamos also outlined a roadmap for future improvements, including plans to encrypt Yahoo Messenger within months, in a blog post.

"We implemented the latest in security best-practices, including supporting TLS 1.2, Perfect Forward Secrecy and a 2048-bit RSA key for many of our global properties such as Homepage, Mail and Digital Magazines. We are currently working to bring all Yahoo sites up to this standard," Stamos explains, adding that as a process that requires continuous improvement, the project to improve security at Yahoo! will never be completed.
Leaks by whistleblower Edward Snowden revealed that Google and Yahoo! data centre interconnects were being tapped by the NSA's spies as part of a programme code-named MUSCULAR.
The scheme is designed to hoover up any data missed by PRISM and other NSA programmes and involves tapping into fibre-optic links leased, or run, by Google (and others) between its data centres. Encrypting traffic between its data centres is Yahoo!'s response to MUSCULAR. Google and other tech giants including Microsoft and Facebook are moving in the same direction but Yahoo! has arguably managed to leapfrog its competitors.
Encryption experts who had previously been highly critical of Yahoo!'s historically sloppy approach to privacy protection, including its rollout of sub-standard always-on https connections for webmail in January, are full of praise for its latest plans.
"I'm gonna need to find another company to make fun of now that Yahoo! is taking encryption seriously," said Matthew Green. a cryptographer and research professor at Johns Hopkins University. "Any suggestions?"
"I would also like to say: good job NSA. You turned Yahoo into an encryption powerhouse. *Yahoo*," he added.
Christopher Soghoian, principal technologist for the American Civil Liberties Union, also praised Yahoo!'s revamped approach to crypto in an update to his personal Twitter account. ®

Source:

Tuesday, March 11, 2014

Edward Snowden warns of personal data vulnerability

The former NSA contractor takes part in a video conference at the South by Southwest tech event in Texas and answers questions via Twitter to an enthusiastic audience.

Former National Security Agency contractor Edward Snowden speaks remotely to the South by Southwest Interactive conference in Austin, Texas, superimposed over an image of the Constitution. (Spencer Bakalar / Los Angeles Times / March 10, 2014)
AUSTIN, Texas — Edward Snowden brought no bombshells when he arrived to an excited round of applause Monday, his stubbled face relaxed as it was beamed in from across the continents for a "virtual conversation" about the vulnerability of personal data. His presence was event enough.
Public appearances by the former National Security Agency contractor and U.S. exile are rare, and this one was beamed in from an undisclosed location in Russia via several online proxies for his own security, a bit of technological cloak-and-dagger that could only add to his mystique for the three roomfuls of international tech specialists struggling to hear his words in video that was choppy and often inaudible.

His message still got through: Personal information is vulnerable not only to government prying but to growing numbers of outside infiltrators because companies have failed to adequately protect the data of their customers. His own exile after leaking to reporters secret information he had gathered while an NSA consultant has made him a central figure in that conversation, and he says he has no regrets.
"Would I do it again? Absolutely," Snowden said into the camera, in response to one of several questions submitted to him via Twitter (#AskSnowden) and screened backstage at the South by Southwest Interactive conference. "I took an oath to support and defend the Constitution. And I saw the Constitution was being violated on a massive scale."

He warned, "If we allow the NSA to continue unrestrained, every other government will accept that as a green light to do the same."

The chosen Twitter questions were notably nonconfrontational for a figure often the subject of heated debate even among supporters. One asked whether the mass surveillance was driven by privatization. Another wondered about the potential for society to "reap benefits" from the "big data." None asked about his life in Russia, or what further revelations might be coming.

The first question came from Timothy John Berners-Lee, a British scientist known as the inventor of the World Wide Web, who asked Snowden how he would create an accountability system for governance.

"We have an oversight model that could work. The problem is when the overseers are not interested in oversight," Snowden said. "The key factor is accountability."
Onstage in Austin, lawyer Ben Wizner and ACLU principal technologist Chris Soghoian conversed with Snowden as he appeared on a big screen, an image of the U.S. Constitution superimposed behind him. The three agreed that an easier means for citizens to encrypt their data was a pressing need.

"Most regular people are not going to download an obscure encryption app," Soghoian said. He also noted that "without Ed's disclosures, a lot of tech companies would not have improved cybersecurity."
Snowden said, "We need to think of encryption not as a dark art," and warned that the NSA was "setting fire to the future of the Internet. And the people in this room, you guys, are the firefighters."
For his audience, Snowden's choice of the SXSW conference to directly address his peers in data technology was easy to understand.
"You have people from every major media company, every major brand, every major agency," Ryan Kite, a director of digital strategy for Los Angeles-based marketing agency TVGla, said after Snowden's hourlong talk. "Where else would you get a message like that out there to people who actually move and control the data?
"He was insightful," Kite added. "He made me think about privacy versus functionality. He was a good predictor about what's happening. We have a choice — which path do we go down? Do we go down that path of free and easy with no liberty and complete openness to all of our data? Or do we switch and take preventative measures and secure everything?"
While not as excited a crowd as that gathered this week to hear Lena Dunham's keynote speech at the SXSW Film conference — that line was much longer — Snowden's audience was a nearly full house of 3,000. Tech registrants steadily entered the hall to hushed electronic music. In front of the stage, an artist drew a running comic on the issues being discussed.
Hans Meier, a teacher of interactive design at Oslo School of Architecture and Design in Norway, said Snowden seemed "like a sympathetic person. Maybe not as a leader. What he's done is such a breakthrough thing, and he's got so many enemies, so for him there will always be this buzz whenever he comes on. But he's broken ground for a lot of other people to speak out. He's made these companies actually tighten up the security."
Snowden has kept a low profile of late — he faces felony charges of espionage and theft of government property — and has said he won't return until the United States changes its whistle-blower protection laws.
Atty. Gen. Eric H. Holder Jr. has taken a strong stand against granting amnesty to Snowden, saying he caused harm to national security and should be held accountable. Holder has described him as a defendant, not a whistle-blower.
Barton Gellman, a Washington Post reporter who has worked with Snowden, released a video of his own ahead of Snowden's appearance. He said Snowden wanted to speak with "the people who are building and creating the next generation of the Internet" because "technologists" are "a group he wants to influence."
"He's looking for places where there can be reform" to "practices that he regards as overbroad and overly intrusive," Gellman said.
Times staff writer Molly Hennessy-Fiske in Houston contributed to this report.










News Source: www.latimes.com

Wednesday, March 5, 2014

Even FreedomPop Will Sell You a Super-Secure Android Phone


With the US Government reading pretty much everything on the Internet (hey guys!) and the NSA sneaking on our text messages and phone calls, it’s no surprise that apparently super-secure Android devices have hit the market. It’s safe to say that these Android phones have become a thing now, and with the Blackphone, a smartphone from Boeing and now a secure phone from US carrier FreedomPop, the choice for secret agents is getting more difficult as the days go by. This latest device is the Privacy Phone from FreedomPop and if it looks familiar, that’s because it’s a redressed Galaxy S II from Samsung.
The Privacy Phone features a mixture of encryption and VPN tech to make sure you go unnoticed. Text messages are encrypted using 128-bit security and all internet traffic is routed through a VPN. If all of that’s not enough and your cover is blown, then FreedomPop will let you change your number whenever you like. Steven Sesar, COO of FreedomPop, has said that “privacy is becoming increasingly important to many Americans and we all have a right to communicate anonymously” and that being a small, flexible carrier allows them to put together a device such as this.
Security these days unfortunately comes at a bit of premium, so how much is the Privacy Phone going to cost? Well, not all that much, you can pick this up for $189 off-contract. To sweeten the deal, FreedomPop will give you your first three months of service – which consists of unlimited calls and texts, with 500 MB of data – for free, after that you only need to pay as little as $10 a month. A secure phone that appeals to pretty much everyone, then. Oh, did we mention that you can pay with BitCoin?
These devices are only going to become more common, after all nobody wants to be spied upon. However, as a number of other people have said, these devices could be used in the wrong hands, we all know that there’s a certain type of person that will want a phone to go unnoticed with, but then again we do have a right to privacy. What do you think? Let us know in the comments below, and over on Google+!

Copyright @ 2013 Best Tech. Designed by Templateism | Love for The Globe Press