Digitally Secure

نوفر المعرفة حول الأمن الرقمي لحماية أصوات الناس على الإنترنت والدفاع عنها
We supply knowledge on digital security to protect and defend people´s voices online

[Meredith Whittaker @mer__edith]

📣🚨 BAT SIGNAL: A law in France that would mandate a backdoor in end to end encrypted communications is set for a vote within the next day, after some start-stop skirmishes. 

The French Narcotraffic law would require encrypted communications providers—like Signal—create a backdoor by giving the government the ability to add themselves to any group or chat they like. In the name of (checks notes) fighting drug trafficking. 

While those hyping this bad law have rushed to assure French politicians that the proposal isn’t’ ‘breaking encryption’ their arguments are as tedious as they are stale as they are laughable. For those catching up, let’s review the basics: end to end encryption must only have two ‘ends’—sender and recipient(s). Otherwise, it is backdoored. Whatever method is devised to add a ‘third end’ —from a perverted PRNG in a cryptographic protocol, to vendor-provided government software grafted onto the side of secure communications that allow said government to add themselves to your chats—it rips a hole in the hull of private communications and is a backdoor. 

Indeed, the ghost participant proposal was roundly rebuked (humiliated, even) when it was first proposed in 2019 in the UK. The technical community was united, and it was never implemented in law or otherwise. 

We cannot accept any backdoor, however it’s dressed up. Communications don’t stay within jurisdictional boundaries. Which means a hole created in France becomes a vector for anyone wanting to undermine Signal’s robust privacy guarantees, anywhere. Instead of contending with unbreakable math, they only have to compromise a French government employee, or the vendor-provided software used to sideload government operatives into your private chats. 

This is why, as always, Signal would exit the French market before it would comply with this law as written. At this moment especially, there is simply too much riding on Signal, on our being able to forge a future in which private communication persists, to allow such pernicious undermining. 

We hope—WE HOPE—that this callow, dishonest attack will fail, and will be the last. We would love to get back to the work of maintaining and improving our core technologies, instead of fighting legislation which is distinguished in nothing as much as its refusal to listen to decades of expert consensus in its drive to imperil global cybersecurity and the human right of privacy.

[Digitally Secure @digitssecurity]

@ABaerbock

[Digitally Secure @digitssecurity]

SolarWinds hackers are back with a new mass campaign.
https://t.co/nzHPryTHRE

[Digitally Secure @digitssecurity]

Update your apple devices!
Apple patches macOS flaw exploited by malware to secretly snap screenshots.
https://t.co/eN5kwjuvuw

[Digitally Secure @digitssecurity]

How China turned a prize-winning iPhone hack against the Uyghurs! https://t.co/5pBdC37hYK

[Digitally Secure @digitssecurity]

Google = Alphabet = google knows everything about you from A to Z #Google #privacymatters

[Digitally Secure @digitssecurity]

Google Reveals What Personal Data Chrome and It's Apps Collect On You https://t.co/UVgNNOJGOJ #Google #privacy #privacymatters

[Digitally Secure @digitssecurity]

A nice video that explain about Stalkerware https://t.co/DzzNSVMblv
#Stalkerware

[Kimberly @StopMalvertisin]

GovInfoSecurity | Lesson From SolarWinds Attack: It's Time to Beef Up IAM https://t.co/pGFOYQWo9C

[Digitally Secure @digitssecurity]

Microsoft shares how SolarWinds hackers evaded detection
https://t.co/I35d2Uo1xZ
#SolarWindsHack

[Digitally Secure @digitssecurity]

Read "Running in Circles: Uncovering the Clients of Cyberespionage Firm Circles" by @citizenlab: https://t.co/PkFjkqH8ub

[Digitally Secure @digitssecurity]

Dutch Ethical Hacker Logs into Trump’s Twitter Account!
https://t.co/3kBMPw6S9X
#Twitter #Trump #Hackers

[Digitally Secure @digitssecurity]

How Beirut firefighters were sent into disaster #Beirut #BeirutBlast #fire_department https://t.co/3eoQN33kbd

[Digitally Secure @digitssecurity]

https://t.co/ldHK19x32O
إذا كنت لا تستطيع التبرع بنفسك، يمكنك المساعدة - من خلال مشاركة حملتنا مع الآخرين الذين قد يكونون قادرين على المساعدة.
إن نشر الكلمة مهم. شكرا جزيلا لدعمكم.
#Beirut_Explosion #LEBANON

[Digitally Secure @digitssecurity]

#BeirutBlast Beirut needs your help. I am heart broken about the disaster that hit my home city. Shattered, in ruins. Help the families of those who rushed to the scene to save the city and died in the explosion. Please donate and share. #Lebanon #Beirut https://t.co/CPKr8VoCLr

[Digitally Secure @digitssecurity]

A Quick Look at the Confidentiality of Zoom Meetings
https://t.co/arkUdPPCIT

[Digitally Secure @digitssecurity]

https://t.co/MhbRt0Hdei
#ransomware #coronavirus

[Digitally Secure @digitssecurity]

A UK-based Security Company Seemed To Have Inadvertently Exposed Its ‘Leaks Database’ with 5B+ Records
https://t.co/avgqm0IqXl

[Digitally Secure @digitssecurity]

New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now! https://t.co/nDVISZCYiC
#Chrome #Google #0day

[Digitally Secure @digitssecurity]

Researchers unearth malware that siphoned SMS texts out of telco’s network https://t.co/5OuW9lpraI
#sms #MESSAGETAP