infosec

Lawyers suck at infosec. Expensive lawyers also suck at infosec. They’re just more expensive. The Surveillance Working Group of the Council of Bars and Law Societies of Europe (CCBE) apparently want lawyers to suck less (at infosec) hence has issued a Guidance (.pdf - EN)1 on improving the IT security of lawyers against unlawful surveillance in May 2016. The requirement for lawyers to keep confidential their communications with their clients is an essential component of the rule of law in a free and democratic society....

Comprendre les grands principes de la cryptologie et du chiffrement – cnil.fr La cryptologie ne se limite plus aujourd’hui à assurer la confidentialité des secrets. Elle s’est élargie au fait d’assurer mathématiquement d’autres notions : assurer l’authenticité d’un message ou encore assurer son intégrité. Pour assurer ces usages, la cryptologie regroupe quatre principales fonctions : le hachage avec ou sans clé, la signature numérique et le chiffrement. Les usages de la cryptographie...

Get off Yahoo mail people - if not already done! Yahoo Inc last year secretly built a custom software program to search all of its customers’ incoming emails for specific information provided by U.S. intelligence official, according to people familiar with the matter. The company complied with a classified U.S. government demand, scanning hundreds of millions of Yahoo Mail accounts at the behest of the National Security Agency or FBI....

If you care about privacy, Signal is certainly not an option. – Nikos Roussos Instead, use Conversations on Android with OMEMO encryption. Whisper Systems failed big once again. They just announced their “Desktop” version of Signal, which is actually a Chrome app. So just to get facts straight, this is neither a Desktop nor a Web app. And just like their Android app, you need a Google account to download it....