Security – 260 – Forbes Signal Article

Forbes put out an article on how Signal has some weaknesses using the after first unlock theory.
TL;DR – Yes, but not limited to signal. Power off your phone if you are worried.

https://www.forbes.com/sites/thomasbrewster/2021/02/08/can-the-fbi-can-hack-into-private-signal-messages-on-a-locked-iphone-evidence-indicates-yes/?sh=27331c526624

Security – 259 – More WhatsApp Fallout

There was more news from the WhatsApp privacy fallout that we decided to have another show.

As you know, we have moved to signal. If you want an invite, tweet the show, or find one of us.

TL;DR, if you are using whatsapp to send cat photos to your family, you are ok. If you are using whatsapp business, they are making changes.

https://gizmodo.com/this-was-whatsapps-plan-all-along-1846060382

Security 258 – WhatsApp Privacy

We look at Apple’s new “Nutrition Facts” and try to figure out if they are actually useful (yes, but not really). We discuss the changes with WhatsApp, and where to move to.

https://9to5mac.com/2021/01/04/app-privacy-labels-messaging-apps/

https://arstechnica.com/tech-policy/2021/01/whatsapp-users-must-share-their-data-with-facebook-or-stop-using-the-app/

Security – 257 – Signal and iPhone Guide

We start off on an article done by the BBC saying that Cellebrite has broken the signal encryption. Clearly, that is an issue if true. Turns out Signal quickly responds with an emphatic no, with evidence.

Here is the BBC article: https://www.bbc.com/news/technology-55412230

Here is the Signal Response: https://signal.org/blog/cellebrite-and-clickbait/

Then we talk about a new document created by apple to secure your iphone. Lots of basic things, but at the end there is a checklist that is just very easy to follow. Warning: PDF: https://manuals.info.apple.com/MANUALS/1000/MA1976/en_US/device-and-data-access-when-personal-safety-is-at-risk.pdf

Published
Categorized as Podcasts

Security 256 – SolarWinds

We discuss the solarwinds hack: https://krebsonsecurity.com/2020/12/u-s-treasury-commerce-depts-hacked-through-solarwinds-compromise/

https://krebsonsecurity.com/2020/12/solarwinds-hack-could-affect-18k-customers/

https://krebsonsecurity.com/2020/12/malicious-domain-in-solarwinds-hack-turned-into-killswitch/

Published
Categorized as Podcasts