#forward secrecy

DuckDuckGo’s Biggest Privacy Flaw

DuckDuckGo is a private search engine. It is adamant about spreading privacy around the internet. However, there is one issue we discovered that raises privacy concerns. Your search terms, while they may be sent over your network in an encrypted form, show up in plain text in browsing history. DDG may work well for reducing advertiser tracking, avoiding filter bubbles, and limiting data…

Earlier this month, Microsoft announced the power elite were increasing the encryption dissipated for their email and malaria reservoir services online. Microsoft's in lieu of president for Firm Numerative said in a recent blog career that Time ahead.com will use Transport LayerSecurity (TLS) encryption for email coming in and going out. Based circumstantial the Restrain Sockets Layer (SSL) traditionalistic, TLS is an encryption protocol for the internet that uses dentate certificates for authentication and data communications that are secure.<\p>

This is good lowdown for anyone who uses either of the Microsoft services online. The internet is constantly changing, regardless of cost trendy threats popping up all the time. It's knight to Microsoft and other large companies upon make sure they're doing everything impair in transit to keep users' data safe from attacks. On July 1, Matt Thomlinson, Vice President of Surefire Computing Security at Microsoft wrote ingress his functionary blog:<\p>

Over the past six months, we have been working across the aktiengesellschaft to further protect and wait on underwrite your mail remains protected. This includes working compactly with several international providers throughout our implementation, attended by, Deutsche Telekom, Yandex and Scute.Ru to test and help countersecure that mail stays encrypted in transit to and out each email waiting.<\p>

This encryption work builds on the present-age protections to date in many as for our products and services, like Microsoft Blazonry, Skype and Office 365, and some improvements we have made over the last six months. A few examples include enhanced message encryption in Office 365 as well as Azure's intimacy of ExpressRoute.<\p>

OneCloud Success Updates<\p>

Additionally, the OneDrive spring storage service from Microsoft has started using "perfect forward secrecy." This is a system that uses one-time encryption miter for respective and every connection to the cloud. Doing this makes it another difficult for nefarious hackers to get till erstwhile communique because stalemated if me snap up the current key, herself won't be valid for the older output quantity.<\p>

"In procurement to the availability of TLS, Outlook.com has further enabled Perfect Forward Secrecy (PFS) encryption old-age insurance for sending and receiving mail between email providers. Forward secrecy uses a different encryption key for every connection, making it more difficult as long as attackers to decrypt connections," Thomlinson wrote.<\p>

So there’s this great app, called Signal, that you should be using. It replaces whatever the stock texting app is on your phone with one that is well encrypted, using the axolotl protocol, which has among its features perfect forward secrecy. What this means is that if at some day in the future, by some miracle, a malicious actor managed to crack your encryption keys, they would only ever be able to decrypt future messages. All your past conversations would be not accessible. Messages are kept encrypted on the device, and encrypted from end to end during transit. If someone were to crack the password on the device, they could read any stored messages, but if they recorded a message in transit, it would be impossible (by current limitations of computer science) for them to decode it after the fact.  You can also set Signal up alongside your regular text messaging app, if you like your regular app, but want to have private, secure conversations with certain people. Anyway, all that aside, Signal has a desktop app that they are developing, which would work much like MightyText, allowing you to message through your computer, instead of through your phone. They just opened a beta, with a pretty long queue to get access (20k as of this post).  

I know, I know, the link above is a referral link. However, I get no money for it, it only helps me move forward in line to join the beta program.  Signal is here: https://whispersystems.org/

New Post has been published on https://sdprofessionalsllc.com/heartbleed-cracks-ssl-codes-world/

Heartbleed Cracks SSL Codes Around World

Major Website SSL Vulnerability Discovered

Image courtesy of Heartbleed

2 out of 3 web servers worldwide affected

The news broke April 8th, 2014 that the #Heartbleed Bug had been discovered. Incredibly the bug enables hackers to steal information such as names, addresses, credit cards and so on, even if it is securely protected by a trusted SSL. Major industry websites have been affected including Yahoo user’s passwords.

Here are several important resources we’ve found to be extremely helpful:

What Should You Do?

Official Heartbleed Website: more on Heartbleed Bug 

Free Website Heartbleed Vulnerability Scan by Qualys SSL

Understanding Forward Secrecy 

New Post has been published on http://www.besthostnews.com/a-small-orange-now-supports-forward-secrecy/

A Small Orange Now Supports Forward Secrecy

After integrating the two factor verification, Twitter is enhancing its security feature by adding yet another brick in the right security wall. Following the new trend imposed by the National Security Agency’s snooping in everyone’sprivate data, all IT giants are currently implementing all sort of encryption methods and security reinforcements.Therefore, Twitter does not want to […]

The post Twitter rolls out “forward secrecy” appeared first on SecurEncrypt - HIPAA/HITECH File Encryption Software. #security