Creative Heroes A security researcher has developed a technique that could significantly improve the secrecy of text messages sent in near real time on iPhones. The technique, which will debut in September in an iOS app called TextSecure, will also be folded into a currently available Android app by the same name. The cryptographic property known as perfect forward secrecy has always been considered important by privacy advocates, but it has taken on new urgency following the recent revelations of widespread surveillance of Americans by the National Security Agency. Rather than use the same key to encrypt multiple messages—the way, say PGP- and S/MIME-protected e-mail programs do—applications that offer perfect forward secrecy generate ephemeral keys on the fly . In the case of some apps, including the OTR protocol for encrypting instant messages , each individual message within a session is encrypted with a different key. The use of multiple keys makes eavesdropping much harder. Even if the snoop manages to collect years worth of someone’s encrypted messages, he would have to crack hundreds or possibly hundreds of thousands of keys to transform the data into the “plaintext” that a human could make sense of. What’s more, even if the attacker obtains or otherwise compromises the computer that his target used to send the encrypted messages, it won’t be of much help if the target has deleted the messages. Since the keys used in perfect forward secrecy are ephemeral, they aren’t stored on the device. Read 7 remaining paragraphs | Comments
See more here:
In surveillance era, clever trick enhances secrecy of iPhone text messages
Trading was halted on the Nasdaq stock market for a few hours on Thursday after what was described as a “technical glitch.” No other detailed technical information has been released other than that the snafu involved a problem with the “quote dissemination system” and a “data feed issue.” The exchange , on which many major tech stocks are traded, re-opened later in the afternoon. As the modern stock market operates almost entirely by computer and happens with crazy-fast speed, this problem is troubling, particularly when there have been a few major technological problems in recent years. Read 4 remaining paragraphs | Comments
The University of California—an enormous institution that encompasses 10 campuses and over 8, 000 faculty members— introduced an Open Access Policy late last week. This policy grants the UC a license to its faculty’s work by default, and requires them to provide the UC with copy of their peer-reviewed papers on the paper’s publication date. The UC then posts the paper online to eScholarship , its open access publishing site, where the paper will be available to anyone, free of charge. Making the open access license automatic for its faculty leverages the power of the institution—which publishes over 40, 000 scholarly papers a year—against the power of publishers who would otherwise lock content behind a paywall. “It is much harder for individuals to negotiate these rights on an individual basis than to assert them collectively, ” writes the UC. “By making a blanket policy, individual faculty benefit from membership in the policy-making group, without suffering negative consequences. Faculty retain both the individual right to determine the fate of their work, and the benefit of making a collective commitment to open access.” Faculty members will be allowed to opt out of the scheme if necessary—if they have a prior contract with a journal, for example. Academic papers published in traditional journals before the enactment of this policy will not be made available on eScholarship at this time. Read 3 remaining paragraphs | Comments
On Saturday, the Obama Administration vetoed the International Trade Commission’s potential ban on a few models of older Apple phones and tablets. Samsung opened the case against Apple with the ITC in 2011, and the commission decided in June that Apple had, in fact, infringed upon a Samsung patent, US Patent No 7, 706, 348 . The decision garnered attention because the patent is considered essential to industry standards, meaning Samsung is required to license the patent (rather than sit on it, or refuse license it to some competitors). The ITC ended up recommending a ban be placed on the infringing products brought forward in the case, which included AT&T models of the iPhone 4, the iPhone 3GS, iPhone 3, iPad 3G, and iPad 2 3G. In June of 2013, Ars wrote of the ITC’s ban: ”The decision can only be appealed to the US Court of Appeals for the Federal Circuit, the nation’s top patent court. Theoretically, the President can also block an ITC-ordered import ban, but that hasn’t happened since the 1980s.” Read 4 remaining paragraphs | Comments