HiTechEdge

Tag: end-to-end encryption

  • Meta Delaying Rollout of End-to-End Messaging Encryption Until 2023

    Meta Delaying Rollout of End-to-End Messaging Encryption Until 2023

    Meta has said it is delaying the rollout of end-to-end encryption (E2EE) across its messaging services until 2023 over child safety concerns.

    Meta, formerly Facebook, has been working for some time to provide unified E2EE across its various messaging services, including WhatsApp and Facebook Messenger. The move has been criticized by some legislators over concerns about child safety and the ability to solve, or even prevent, crimes.

    WhatsApp already has E2EE, and Meta CEO Mark Zuckerberg announced in early November the company was rolling out E2EE across Messenger. This plans appear to be paused, according to an article in The Telegraph, by Antigone Davis, Meta Global Head of Safety.

    “We’ll continue engaging with outside experts and developing effective solutions to combat abuse because our work in this area is never done,” says Davis. “We’re taking our time to get this right and we don’t plan to finish the global rollout of end-to-end encryption by default across all our messaging services until sometime in 2023. As a company that connects billions of people around the world and has built industry-leading technology, we’re determined to protect people’s private communications and keep people safe online.”

    The move is sure to disappoint customers and privacy proponents.

  • ProtonMail Logs User’s IP at Behest of Authorities

    ProtonMail Logs User’s IP at Behest of Authorities

    ProtonMail is having a PR crisis as a result the revelation that the company logged a user’s IP address at the behest of authorities.

    ProtonMail has built its reputation as one of the most private and secure email services, providing end-to-end encryption. Despite that, French authorities wanted information on an activist being monitored.

    According to TechCrunch, ProtonMail did not initially cooperate with the French authorities. In response, the French enlisted the aid of authorities in Switzerland, where ProtonMail is based. While the company doesn’t log IP addresses by default, it will do so if local authorities require it to.

    With Swiss authorities aiding their French counterparts, ProtonMail was compelled to log the user’s IP and turn it over. In doing so, the company showed the privacy it provides has its limits — that limit being whatever the Swiss government says it is.

  • Ring Rolls Out Video End-to-End Encryption

    Ring Rolls Out Video End-to-End Encryption

    Ring has announced end-to-end encryption is now available to customers internationally.

    Ring made headlines in late 2019 with a string of security issues, including devices being hacked and giving outsiders the ability to watch and communicate with a home’s occupants. VICE reviewed Ring’s security and found it was abysmal, not doing nearly enough to protect user privacy. Ultimately, the issues led to a lawsuit over Amazon and Ring’s failure to protect users.

    Ring has now announced end-to-end encryption for its products, with a goal to protecting user privacy.

    “We believe that our customers should control who sees their videos,” writes Ring’s Josh Roth. “By default, Ring already encrypts customer videos when they are uploaded to the cloud (in transit) and stored on Ring’s servers (at rest). Now, customers around the world, with eligible Ring devices, can opt into video End-to-End Encryption, to add an extra layer of security that only allows their videos to be viewed on their enrolled mobile device. This advanced security option is simple to set up via the Control Center in the Ring App, and offers additional peace of mind and protection.”

    While Ring is to be commended for finally adding end-to-end encryption, it’s puzzling why the company has made it opt-in instead of opt-out. Given the issues Ring has already experienced, one would think the company would take every measure possible to protect users, while giving them the ability to opt-out.