Whit Diffie News Today

Twenty EU tech companies have written to ministers across the European Union urging them not to support a proposed regulation on child sexual abuse that could undermine the security of internet services that rely on end-to-end encryption. The companies, which include encrypted email and messaging providers, warn that the proposals by the EU Commission would “negatively impact children’s privacy and security” and could have “dramatic unforeseen consequences” for cybe...

An amendment to the Online Safety Bill, currently going through Parliament, will put pressure on tech companies over end-to-end encrypted messaging services.

What is the worst current trend in cybersecurity? “Complete dependence on a single security product/solution. Cybersecurity needs to be holistic and strategic to be successful and completely depends on top-notch people, process, and technology.”

Apple’s proposal to compel iPhone users to accept updates that would automatically and covertly search shared images for possible abuse material and send reports to Apple or law enforcement agencies condemned as unworkable, vulnerable to abuse and a threat to safety and security by world’s top cryptographic experts and internet pioneers.

To revist this article, visit My Profile, then View saved stories. Five years ago today, WhatsApp completed our roll out of end-to-end encryption, which provides people all over the world with the ability to communicate privately and securely. This was a technical achievement decades in the making, a vision first imagined by Stanford mathematicians Whit Diffie and Martin Hellman, who in 1975 developed the underlying cryptography we rely on today. In the past five years, WhatsApp has securely d...

Hack the Plant Episode 7: Critical Infrastructure Protection & ICS with Dale Peterson “In a perfect world, you’d have secured by design. Whatever we developed would have security integrated. From day one, it would be secure. But insecure by design is much worse than a lack of secure by design. What it means is everything that an attacker would want is a documented feature and function of the system. So, an attacker doesn’t have to come in and find some vulnerability to exploit and find a ...