#Canada#Cybersecurity#Encryption#Backdoors#5G#Privacy: "Bill C-26 empowers government officials to secretly order telecommunications companies to install backdoors inside encrypted elements in Canada’s networks. This could include requiring telcos to alter the 5G encryption standards that protect mobile communications to facilitate government surveillance.
The government’s decision to push the proposed law forward without amending it to remove this encryption-breaking capability has set off alarm bells that these new powers are a feature, not a bug.
There are already many insecurities in today’s networks, reaching down to the infrastructure layers of communication technology. The Signalling System No. 7, developed in 1975 to route phone calls, has become a major source of insecurity for cellphones. In 2017, the CBC demonstrated how hackers only needed a Canadian MP’s cell number to intercept his movements, text messages and phone calls. Little has changed since: A 2023 Citizen Lab report details pervasive vulnerabilities at the heart of the world’s mobile networks.
So it makes no sense that the Canadian government would itself seek the ability to create more holes, rather than patching them. Yet it is pushing for potential new powers that would infect next-generation cybersecurity tools with old diseases."
@Tutanota I just can't get used to your new icon. I get the philosophy, the "story" of it. And I get you wanted to "change" something for your 10 years anniversary. But there are two golden principles, which you broke both:
if it works, don't "fix it".
don't do change for the sake of change (it needs purpose).
The former icon was standing out, it became THE Tuta(nota) Symbol! Have you seen Coca-Cola changing fonts, for example? I wonder who advised you, or even if you have a designer 🤔.
@iuvi Hi there, you can create accounts and access them through Tor! We even created a tutorial on YT which is available here: https://youtu.be/oXv3llPIfvo
Isn't RSA the current secure solution for the corresponding encryption/security on the browser with JavaScript?
»Galois/Counter Mode and random nonces:
It turns out you can encrypt more than 2^32 messages with AES-GCM with a random nonce under certain conditions. It’s still not a good idea, but you can just about do it.«
"This undisclosed WhatsApp vulnerability lets governments see who you message."
And when it comes to metadata, unfortunately - that's by design.
"Metadata — information about the who, when, and where of conversations — has come to hold immense value to intelligence, military, and police agencies around the world."
End-to-end encrypted messages isn't all you should seek out from any app that claims to be private.
The last few days, after almost 3 years, I finally got over myself to re-install our #network, #nas and #pihole and reworked the #backup strategy as well (#encryption and stuff). I am glad that this is finally done. 🫣
Early on in my hobby I came to the realization that cryptographic prowess has no viable market price point. More's the pity. Yet I think one day I may change that with my secrecy sauce.
»Argon2 vs. bcrypt vs. scrypt: which hashing algorithm is right for you?«
As far as I know, Argon2 is a current secure solution for storing passwords. In my opinion, too many online services do not use this solution or do not fund it (fast enough) to update their services.
Are you a journalist, activist or whistleblower in need of an anonymous email account that doesn't require a personally identifiable recovery email address or phone number?
@rmbolger I've considered this, but there's a lot of moving parts, and as a hobbyist, this all comes out of my pocket. I just renewed my annual hosting in February, too. I put the call out in January asking folks if they had any recommendations, and no one did (obviously I don't have much reach as a mastodon user).
I've managed to get my paws on "Dark Wire" by @josephcox, a great new book telling the incredible true story of how the FBI launched a fake encrypted messaging service and spied on the communications of the world's most notorious criminal gangs.
Did someone say #encryption? Encryption helps protect the privacy of people you communicate with, and makes life difficult for bulk #surveillance systems. Learn more with our Email Self Defense guide: https://u.fsf.org/1df
#EU#Spain#Catalonia#Cybersecurity#Privacy#Encryption#Wire#Proton: "As part of an investigation into people involved in the pro-independence movement in Catalonia, the Spanish police obtained information from the encrypted services Wire and Proton, which helped the authorities identify a pseudonymous activist, according to court documents obtained by TechCrunch.
Earlier this year, the Spanish police Guardia Civil sent legal requests through Swiss police to Wire and Proton, which are both based in Switzerland. The Guardia Civil requested any identifying information related to accounts on the two companies’ respective platforms. Wire responded providing the email address used to register the Wire account, which was a Protonmail address. Proton responded providing the recovery email for that Protonmail account, which was an iCloud email address, according to the documents.
In the request, which listed “organised crime” and “terrorism” as the nature of the investigation, Spanish police wrote that it wanted to “find out who were the perpetrators of the facts taking place in the street riots in Catalonia in 2019.”"