Reminder: macOS still leaks secrets stored on encrypted drives

Enlarge (credit: Wardle and Regula) Unbeknownst to many people, a macOS feature that caches thumbnail images of files can leak highly sensitive data stored on password-protected drives and encrypted volumes, security experts said Monday. The automatically generated caches can be viewed only by someone who has physical access to a Mac or infects the Mac […]

It has been a bad week for encrypted messaging and it’s only Wednesday

Enlarge (credit: Elsamuko / Flickr) The past three days have highlighted the potential perils that can threaten people who rely on desktop computers to send encrypted messages. The events—which involve encrypted email and the desktop versions of the Signal and Telegram messaging programs—should in no way discourage people from using encryption. They do, however, provide […]

Critical PGP and S/MIME bugs can reveal encrypted e-mails. Uninstall now

The Internet’s two most widely used methods for encrypting e-mail–PGP and S/Mime–are vulnerable to hacks that can reveal the plaintext of encrypted messages, a researcher warned late Sunday night. He went on to say there are no reliable fixes and to advise anyone who uses either encryption standard for sensitive communications to remove them immediately […]

Ray Ozzie’s plan for unlocking encrypted phones gets a chilly reception

Enlarge / A patent image depicting how Clear would work. (credit: Ray Ozzie) Ray Ozzie’s proposal to end the long-simmering crypto war between law enforcement and much of the tech world is getting a chilly reception from privacy advocates and security experts. They argue his plan is largely the same key-escrow program proposed 20 years […]

How to keep your ISP’s nose out of your browser history with encrypted DNS

Encrypting DNS traffic between your device and a “privacy-focused” provider can keep someone from spying on where your browser is pointed or using DNS attacks to send you somewhere else. (credit: Westend61 / Getty Images) The death of network neutrality and the loosening of regulations on how Internet providers handle customers’ network traffic have raised […]

White House staffer left encrypted email passwords at bus stop – report

A White House employee carelessly left his encrypted email password at a bus stop, according to a report. A picture of the bootprint-smeared note was posted online. White House staffer Ryan McAvoy left his ProtonMail account and passwords at a bus stop near his office, news outlet The Intercept reported Saturday. A source noticed the […]

Skype is adding an option for encrypted conversations

Soon, your chats on Skype can be just as secure as conversations on Signal, the service used by US Senators. Microsoft is integrating the open source Signal protocol, used by WhatsApp, Google, Facebook and Signal itself, into test versions of Skype as ‘Private Conversations‘ for end-to-end encrypted communications. There are a few restrictions: You can’t […]

FBI security expert: Apple are “jerks” about unlocking encrypted phones

Enlarge (credit: Getty Images | Boonrit Panyaphinitnugoon) Federal Bureau of Investigation officials are continuing to voice their displeasure with Apple’s approach to iPhone security, with one FBI official reportedly calling the company “jerks” and an “evil genius” this week. Apple has repeatedly made it more difficult to access data on encrypted iPhones, making Apple customers […]