Eric Holder says ‘worrisome’ tech companies are eyeing encryption

For the second time in as many weeks, a senior U.S. government official has warned that widespread use of encryption could harm investigations.

In a speech to the Global Alliance Conference Against Child Sexual Abuse Online conference in Washington, D.C., U.S. Attorney General Eric Holder said its worrisome that companies are introducing systems that thwart the ability of law enforcement to quickly access a smartphone when a child is in danger.

We would hope that technology companies would be willing to work with us to ensure that law enforcement retains the ability, with court-authorization, to lawfully obtain information in the course of an investigation, such as catching kidnappers and sexual predators, he said, according to a transcript provided by the U.S. Department of Justice.

It is fully possible to permit law enforcement to do its job while still adequately protecting personal privacy, he said.

Holders remarks echo those made last week by FBI Director James Comey, who told reporters that quick access by law enforcement to the contents of a smartphone could save lives in some kidnapping and terrorism cases.

The warnings come as Apple and Google are rolling out capabilities that enable millions of smartphone users to protect information on their devices so that no one, aside from someone in possession of a password, can access the data. Even the OS makers and phone companies wont have access.

Apples iOS 8 allows users to encrypt some information on their phones while the next version of Googles Android OS, Android L, will enable full-phone encryption by default.

Carney accused smartphone companies of offering encryption as something expressly to allow people to place themselves beyond the law.

Some see the government requests as not without irony. Interest in encryption has been heightened by revelations from former U.S. National Security Agency contractor Edward Snowden that several U.S. government programs are sucking up details on the communications of millions of people.

Read more:
Eric Holder says 'worrisome' tech companies are eyeing encryption

Holder urges tech companies to leave device backdoors open for police

Attorney General Eric H. Holder Jr. said on Tuesday that new forms of encryption capable of locking law enforcement officials out of popular electronic devices imperil investigations of kidnappers and sexual predators, putting children at increased risk.

It is fully possible to permit law enforcement to do its job while still adequately protecting personal privacy, Holder said at a conference on child sexual abuse, according to a text of his prepared remarks. When a child is in danger, law enforcement needs to be able to take every legally available step to quickly find and protect the child and to stop those that abuse children. It is worrisome to see companies thwarting our ability to do so.

In his comments, Holder became thehighest government official to publicly chastise technology companies for developing systems that make it difficult for law enforcement officials to collect potential evidence, even when they have search warrants. Though he didnt mention Apple and Google by name, his remarks followed their announcements this month of new smartphone encryption policies that have sparked a sharp government response, including from FBI Director James B. Comey last week.

Federal, state and local law enforcement officials have complained loudly that the companies are undermining efforts to fight crime, including terrorism. Apples newest mobile operating system, iOS 8, is so thoroughly encrypted that the company says it cannot unlock iPhones or iPads that use it. Googles Android operating system plans to begin using encryption automatically, for all users unless they specifically opt out, in a version to be released in October. (It will take months or years for that feature to reach most Android users.)

Company officials have said stronger encryption better protects the privacy of users by toughening the security of the devices against a wide range of intrusions, by governments, criminals or curious hackers. American technology companies have been particularly eager to demonstrate their commitment to user privacy in the aftermath of the revelations by former National Security Agency contractor Edward Snowden, detailing the extensive reach of government surveillance.Apple and Google did not respond to requests for comment Tuesday.

Holder was speaking to the Global Alliance Against Child Sexual Abuse Online, meeting in Washington, when he raised the issue of preserving government access to electronic devices.

Recent technological advances have the potential to greatly embolden online criminals, providing new methods for abusers to avoid detection, Holder said. In some cases, perpetrators are using cloud storage to cheaply and easily store tens of thousands of images and videos outside of any home or business and to access those files from anywhere in the world. Many take advantage of encryption and anonymizing technology to conceal contraband materials and disguise their locations.

He called on companies to work with us to ensure that law enforcement retains the ability, with court-authorization, to lawfully obtain information in the course of an investigation, such as catching kidnappers and sexual predators.

Even with the new forms of encryption, government officials maintain access to several sources of data related to the use of smartphones, including the records of calls and texts kept by cellular carriers and the device backups that most smartphones make on remote cloud services, such as Apples iCloud. Police with search warrants also are free to use third-party tools to try to crack the encryption on smartphones or other devices. Courts can potentially order users to furnish passcodes that will unlock devices as well.

Craig Timberg is a national technology reporter for The Post.

Go here to read the rest:
Holder urges tech companies to leave device backdoors open for police

OSBconf 2014: Bareos – Open Source Data Protection by Philipp Storz – Video


OSBconf 2014: Bareos - Open Source Data Protection by Philipp Storz
Bareos is a reliable network open source software to backup, archive and restore files from all major operating systems. The fork was founded in 2010 out of the Bacula project. The fork has...

By: NETWAYS

Read more here:
OSBconf 2014: Bareos - Open Source Data Protection by Philipp Storz - Video

Arxan Revolutionizes Security for mCommerce

SOURCE: Arxan Technologies, Inc

BETHESDA, MD--(Marketwired - Sep 29, 2014) - Arxan Technologies, the industry-leading provider of application protection solutions, today announced its security solution for all developers launching mobile apps that include cloud-based payment capabilities. Arxan's innovative and proven approach to secure mCommerce is immediately available for financial institutions, merchants and retailers to help them quickly launch branded value-added services, such as mobile wallet and payment apps. Arxan's security solution is comprised of both mobile application hardening and secure cryptography, which delivers a holistic and robust level of protection.

Google's Host Card Emulation (HCE) is one of the payment schemes that Arxan's solution can protect. HCE permits a phone to emulate a payment card on a device that is enabled with Near Field Communication (NFC) technology without relying on access to a hardware secure element (SE). As of July 2014, 22% of Android smartphone users can leverage this software-based HCE payment capability on their device, indicating a high market opportunity for HCE payment-based solutions.1

If unprotected, HCE-based applications, such as mobile wallet or payment apps, are exposed to significant security risks. These risks include insecure cryptographic key storage that can lead to unauthorized access to sensitive information, fraud and brand damage.

To mitigate risk resulting from the absence of a hardware SE, Arxan's solution provides additional security layers to HCE-based applications. Examples of these include secure cryptography, root device detection, obfuscation and integrity checks within the application. Arxan's easily deployable approach provides companies with an opportunity to gain a competitive advantage based on the strength of security with their mobile apps and the speed with which the app can be deployed.

Arxan's comprehensive software-based security offers the following benefits:

"As the mobile payment landscape is evolving to provide greater value than a traditional credit card, so too must security approaches," said Mike Dager, CEO, Arxan Technologies. "We are committed to providing our mCommerce customers with innovative security solutions that are durable and support scalability. Arxan's proven ability to keep sensitive information safe with its secure cryptography for F500 companies delivers disruptive opportunity for mobile app developers to launch their branded services with confidence."

To learn more about Arxan's innovative approach to secure mCommerce, Arxan's Security Solutions Architect, Winston Bond, will be hosting a webinar on Tuesday, September 30, from 11:00 AM - 11:30 AM EDT. For registration details, please visit: Revolutionary Security for HCE Mobile Payments.

Also, Vince Arneja, Arxan's VP of Product Management, will be providing more information at the Mobile Payment Conference, as a speaker on the industry panel, Keeping Mobile Commerce Secure, on Oct. 7th at 4:15 pm. To meet with Vince at the conference, please email info@arxan.com.

About Arxan Technologies

The rest is here:
Arxan Revolutionizes Security for mCommerce

Julian Assange Does Interview in Hologram Form

Julian Assange continues to reside in the Ecuadorian embassy in London, but he found time to make a public appearance for an interview about his book When Google Met WikiLeaks. How, you ask? Well, he appeared by hologram.

Thats right, appearing as a hologram is now something that 2Pac, Michael Jackson, and Julian Assange have in common.

Assanges book details a conversation he had back in 2011 with Google chairman Eric Schmidt. In the interview, Assange says that while Google might claim to be a playroom of ideas unlike other companies, they are just a normal company. Albeit one that wants to collect as much information about the world as possible, store it, index it, make predictive models about peoples interests, and use that to sell advertising.

And yes, he made these salient points as a hologram.

You can watch two clips from the event here (the first one ends with a pretty awkward high-five):

[h/t Daily Intelligencer] [image via screengrab]

Follow Josh Feldman on Twitter: @feldmaniac

Read the rest here:
Julian Assange Does Interview in Hologram Form