Newest Androids will join iPhones in offering default encryption, blocking police

The next generation of Googles Android operating system, due for release next month, will encrypt data by default for the first time, the company said Thursday, raising yet another barrier to police gaining access to the troves of personal data typically kept on smartphones.

Android has offered optional encryption on some devices since 2011, but security experts say few users have known how to turn on the feature. Now Google is designing the activation procedures for new Android devicesso that encryption happens automatically; only somebody who enters a device's password will be able to see the pictures, videos and communications stored on those smartphones.

The move offers Android, the worlds most popular operating system for smartphones, a degree of protection that resembles what Apple on Wednesdaybegan providing for iPhones, the leading rival to devices running Android operating systems. Both companies have now embraced a form of encryption that in most cases will make it impossible for law enforcement officials to collect evidence from smartphones even when authorities get legally binding search warrants.

For over three years Android has offered encryption, and keysare not stored off of the device, so they cannot be shared with law enforcement, said company spokeswoman Niki Christoff. As part of our next Android release, encryption will be enabled by default out of the box, so you won't even have to think about turning it on.

The move, which Google officials said has been in the works for many months, is part ofa broad shift by American technology companies to make their products more resistant to government snooping in the aftermath of revelations of National Security Agency spying by former contractor Edward Snowden.

Expanded deployment of encryption by Google and Apple, however, will have the most direct impact on law enforcement officials, who have long warned that restrictions on their access to electronic devices make it much harder for them to prevent and solve crimes. In June, the Supreme Court ruled that police needed search warrants to gain access to data stored on phones in most circumstances. But that standard is quickly being rendered moot; eventually no form of legal compulsion will suffice to force the unlocking of most smartphones.

Privacy advocates are ecstatic about the changes by Apple and Google, and especially about their shift toward making encryption automatic, through default settings, so that users get privacy protections without taking any action on their own.

"Most people aren't going to go out of their way to do these things," said Joseph Lorenzo Hall, chief technologist for the Center for Democracy & Technology, a Washington-based non-profit group that receives substantial industry support. "It's so awesome, as someone who has worked on these issues for a long time, to see these two companies switch their defaults to where these things will be strongly encrypted, and rightly so."

Apple and Googlehave been engaged in an increasingly pointed competition over the lucrative smartphone market, with Apple in recent weeks portraying the iPhone as a safer, more secure option despite a recent run of bad publicity over the leak of intimate photos from the Apple accounts of celebrities.

There remain significant differences between how Apple and Google are handling encryption. Apple, which controls both the hardware and software on its devices, will be able to deliver the updated encryption on both new iPhones and iPads and also most older ones, as users update their operating systems with the latest release, iOS 8.

Originally posted here:
Newest Androids will join iPhones in offering default encryption, blocking police

Google’s Android L to Include Default Encryption

Encryption has been available on Android since 2011, but most users probably didn't know how to turn it on.

And for Google's next trick, the search giant will launch its next-generation Android L operating system with encryption on by default.

"For over three years Android has offered encryption, and keys are not stored off of the device, so they cannot be shared with law enforcement," a company spokeswoman told PCMag. "As part of our next Android release, encryption will be enabled by default out of the box, so you want even have to think about turning it on."

The move was first reported by The Washington Post, which noted that encryption has indeed been available on Android since 2011, but the average user was not really aware of how to turn it on.

Apple is doing something similar with iOS 8.

"On devices running iOS 8, your personal data such as photos, messages (including attachments), email, contacts, call history, iTunes content, notes, and reminders is placed under the protection of your passcode," Apple said on its website. "Unlike our competitors, Apple cannot bypass your passcode and therefore cannot access this data. So it's not technically feasible for us to respond to government warrants for the extraction of this data from devices in their possession running iOS 8."

Tech firms like Google and Apple have been rushing to offer more secure solutions in the wake of Edward Snowden's NSA spying revelations, not to mention hacks like the recent nude celebrity photo leaks.

This summer, the Supreme Court unanimously ruled that police must get a warrant before they can search the contents of your mobile device. It doesn't matter whether you carry the latest smartphone or a dated feature phone: If the cops want to know what secrets it holds, they need to talk to a judge first.

As the Post noted, Apple's iOS updates roll out all at once to eligible handsets, meaning a good number of iPhone owners will have an encrypted device very soon. Apple's iOS 8 rolled out on Wednesday, and the iPhone 6 and 6 Plus, which are pre-loaded with iOS 8, hit stores today in the U.S.

Android updates, meanwhile, are usually at the discretion of mobile carriers, meaning that Android L - and encryption - will be rolling out piecemeal on a device-by-device and carrier-by-carrier basis later this year.

View original post here:
Google's Android L to Include Default Encryption

Google: Android L turns data encryption on by default

Turning on data encryption can make a huge difference in case your Android device is lost or stolen, as it will make it extremely difficult -- if not impossible -- for a third-party to access yourfiles. It also gives you quite a bit of time to remotely wipe your device, which means that your photos, videos, texts and whatnot have a better chance of remaining private.

And if the local authorities want to take a peek, theyare also out of luck -- it's good news for those involved in criminal enterprises, and others as well. All this sounds great from a privacy and security standpoint, except that encryption has never been enabled by default in Android. But that is soon about to change.

In a statement that was just given to The Washington Post, Google spokesperson Niki Christoff revealsthat "As part of [Google's] next Android release, encryption will be enabled by default out of the box, so you won't even have to think about turning it on".

Google's next Android release is known as "Android L" at this stage, and will be ready for prime time later this year, if the launch date of past releases is of any indication. Android L has been made available to beta testers, and features a redesigned user interface, a new default runtime, extra security features, 64-bit support and more. You can read about it here.

The encryption key, which is needed to unlock the contents of the internal storage (and, presumably, the microSD card too), will continue to be only in your control, as it has been the case in the past three years, according to Christoff. This is very similar to how Apple's now doing things with iOS 8, which also only gives you the encryption key. To take advantage of this, a passcode must be set up.

That last bit is extremely important because encrypting an Android device without using any sort of passcode is practically impossible right now, and, frankly, pointless. For instance, Android 4.4 KitKat requires users to set up a PIN in order to encrypt the contents of the internal storage and microSD card.

How strong the PIN is will determine how easy it will be for a third-party to render your encryption efforts useless. Using a complex sequence is recommended, even though it may make the unlocking more difficult. That said, I am using an eight-digit PIN right now and I quickly got used to it.

Photo Credits:Slavoljub Pantelic/Shutterstock

Excerpt from:
Google: Android L turns data encryption on by default

‘Code Free for India’ initiative launched

Thiruvananthapuram, Sept 19:

International Centre for Free and Open Source Software at Technopark here has announced the launch of a new initiative called Code Free for India'.

As part of this, programmers from free software community will be invited to develop tools and applications for desktop, nternet, mobile, cloud, and Internet-of-Things for use by the civil society, government and institutions.

Software freedom

The initiative is timed with the celebration of the Software Freedom Day tomorrow (September 20) by the Free Software Centre and the Free Software User Group here.

The Code Free for India initiative will provide a broad umbrella for the free software community members and groups to address the local issues and needs, says Satish Babu, Director of the Free Software Centre.

It will provide a platform for initiatives proven successful locally to scale up to state or national levels.

It will also encourage the use of local language computing tools and contemporary free software technology, while keeping in mind bandwidth and device limitations.

Annual event

Software Freedom Day is an annual event coordinated by Software Freedom International, a non-profit organisation working towards promoting free software.

Read the original:
‘Code Free for India’ initiative launched

US software giant buys Waterford firm for €63.5m

A Waterford-based mobile software company was yesterday bought by US open source software giant Red Hat in a deal worth 63.5m.

FeedHenry which specialises in enterprise-focused mobile app platforms has agreed a deal with the US firm which it expects to close next year.

The acquisition will expand Red Hats portfolio of app development, integration and platform-as-a-service (PaaS) solutions, according to the company.

The mobile application platform is one of the fastest growing segments of the enterprise software market. As mobile devices have penetrated into every aspect of enterprise computing, enterprise software customers are looking for easier and more efficient ways for their developers to build mobile applications that extend and enhance traditional enterprise applications. FeedHenry will help us enable customers to take advantage of the capabilities of mobile with the security, scalability, and reliability of Red Hat enterprise software, said Red Hat application platform business senior vice president, Craig Muzilla.

FeedHenry, which employs 60 people across the UK, Ireland and the US, is a leading developer of cloud mobile application platforms for large companies.

The company which was spun out of Waterford Institute of Technologys Telecommunications Software and Systems Group also allows developers to create native apps as well as hybrid or web apps.

Commenting on the announcement, FeedHenry chief executive, Cathal McGloin said the move would enable the company to reach a wider audience.

We are excited to become part of Red Hat, the leader in open source enterprise solutions, and see this as confirmation of the combined power of mobile and cloud... we now have an opportunity to bring our leading mobile application platform to a wider audience of global customers and partners, to help them optimise for the mobile-first world, said Mr McGloin.

FeedHenry made an after-tax loss of 1.49m in 2012.

Irish Examiner Ltd. All rights reserved

Follow this link:
US software giant buys Waterford firm for €63.5m

PGP creator, other top cryptographers head 2014 National Cyber Security Hall of Fame class

Accomplished cryptographers are among the five inductees into this year's National Cyber Security Hall of Fame.

Accomplished cryptographers, including Pretty Good Privacy creator Philip Zimmerman, are among the five inductees into this year's National Cyber Security Hall of Fame. They'll officially be enshrined on Oct. 30 in Baltimore.

Zimmerman, in addition to developing the widely used PGP email encryption software is founder of mobile privacy company Silent Circle and is known for his work in securing VoIP via protocols such asZRTP and Zfone.

+ ALSO on NetworkWorld: 2014 Women in Technology Hall of Fame inductees|Whirlwind tour of networking and computing's top prizes, awards & honors|Why there's no Nobel Prize in Computing+

The other inductees, chosen from among 200 nominations, are:

*Columbia University Professor of Computer ScienceSteven Bellovin,a noted security and networking researcher. Claims to fame include serving as chief technologist for the Federal Trade Commission.

*Vinton Cerf, widely considered one of the Fathers of the Internet for his work on TCP/IP. He is vice president and chief Internet evangelist for Google, as well as the member of more halls of fame than we can count.

*Paul Kocher designed the cryptographic elements of Secure Sockets Layer 3 in the mid-1990s while a Stanford University undergrad. He's now president of Cryptography Research, Inc.

*Richard Alan Clarke is the former National Coordinator for Security, Infrastructure Protection, and Counter-terrorism for the United States, and under President George W. Bush, he served as the Special Advisor on cybersecurity.

Nominees were considered for their accomplishments in areas such as technology, policy, public awareness, education and business. The Hall was formed by companies and organizationsto honor individuals and organizations whose vision and leadership established the building blocks for the cybersecurity industry.

Read more here:
PGP creator, other top cryptographers head 2014 National Cyber Security Hall of Fame class