NSA leaker singles out Amazon on encryption

While Edward Snowdens revelations about domestic spying by the National Security Agency have embarrassed several large tech companies, including Microsoft and Google, for enabling government snooping, one tech giant that avoided Snowdens spotlight was Amazon.

Until Tuesday, that is. At the intellectual gabfest, TED 2014, in Vancouver, B.C., Snowden criticized the lack of encryption on the websites of many U.S. Internet companies.

The reason this matters is today, if you go to look at a copy of 1984 on Amazon.com, the NSA can see a record of that, the Russian intelligence service can see a record of that, the Chinese service can see a record of that, the French service, the German service, the services of Andorra, Snowden said, speaking remotely from Russia. They can all see it because its unencrypted.

Like many Internet companies, Amazon doesnt use HyperText Transfer Protocol Secure, an encryption technology that keeps users communications, identities and web browsing private on its site when shoppers initially look though items. (Web surfers know its in use when the address for the site they are visiting begins with https.)

Amazon does, however, encrypt personal account Web pages, as well as pages where customers buy merchandise.

Snowden said he didnt mean to single out Amazon, but then proceeded to do so.

The worlds library is Amazon.com, but not only do they not support encryption by default, you cannot choose to use encryption when browsing through books, Snowden said. All companies need to move to an encrypted browsing habit by default for all users who havent taken any action or picked any special methods on their own. Thatll increase the privacy and the rights that people enjoy worldwide.

An Amazon spokesman declined to comment.

Jay Greene: jgreene@seattletimes.com

Owning a home remains a goal

Read the original:
NSA leaker singles out Amazon on encryption

Google makes HTTPS encryption mandatory for Gmail

MOUNTAIN VIEW, Calif., March 21 (UPI) -- Google has said that all Gmail users will have HTTPS encryption, regardless of the security of their Internet connection, as emails move around Google servers.

The search giant has been attempting to strengthen security and data encryption standards after revelations that the U.S. National Security Agency was snooping the Internet, and possibly accessing Google's data centers. The move is important for the company as it relies heavily on user data to drive its services.

Google's security measure will secure communications of users emailing other Gmail users, as Google servers are involved at both ends, but may not extend to users with different email services. In those cases security not only depends on Google's encryption but on recipients' email service providers.

While Google's security measure will help prevent bulk email grabs, by individuals or institutions such as the NSA, targeted email interventions will still be possible.

Making an appearance at TED in Vancouver, Google CEO Larry Page was critical of the government's snooping program.

For me, its tremendously disappointing that the government sort of secretly did all these things and didnt tell us. I dont think we can have a democracy if were having to protect you and our users from the government for stuff that we never had a conversation about, he said.

Google has had HTTPS encryption since it started and has been a default feature since 2010, but the encryption wasn't applied to emails flowing through Google's servers.

[Slate] [PCMag]

Here is the original post:
Google makes HTTPS encryption mandatory for Gmail

Back off, NSA: Google beefs up Gmail encryption against NSA prying

Google announced Thursday it has enhanced Gmail's encryption technology, to make it harder for the NSA to intercept messages.

Google has enhanced the encryption technology for its flagship email service in ways that will make it harder for the National Security Agency to intercept messages moving among the company's worldwide data centers.

Subscribe Today to the Monitor

Click Here for your FREE 30 DAYS of The Christian Science Monitor Weekly Digital Edition

Among the most extraordinary disclosures in documents leaked by former NSA systems analyst Edward Snowden were reports that the NSA had secretly tapped into the main communications links that connect Yahoo and Google data centers around the world.

Google, whose executive chairman, Eric Schmidt, said in November that he was outraged over the practice, didn't mention the NSA in Thursday's announcement, except in a veiled reference to "last summer's revelations." The change affects more than 425 million users of Google's Gmail service.

Yahoo has promised similar steps for its email service by this spring.

Google and other technology companies have been outspoken about the US government's spy programs. The companies are worried more people will reduce their online activities if they believe almost everything they do is being monitored by the government. A decline in Internet use could hurt the companies financially by giving them fewer opportunities to show online ads and sell other services.

"Your email is important to you, and making sure it stays safe and always available is important to us," Nicolas Lidzborski, Gmail's security engineering lead, wrote in a blog post.

Lidzborski said that all Gmail messages a consumer sends or receives are now encrypted.

See the article here:
Back off, NSA: Google beefs up Gmail encryption against NSA prying

Want More Privacy In Your App? Wickr Now Resells Its Encryption And Self-Destructing Technology – Video


Want More Privacy In Your App? Wickr Now Resells Its Encryption And Self-Destructing Technology
Wickr, one of the wave of messaging apps built on the idea of private, encrypted and self-destructing data, has vowed never to make money off its users -- wi...

By: WochitTech

More here:
Want More Privacy In Your App? Wickr Now Resells Its Encryption And Self-Destructing Technology - Video

Google enhances encryption for Gmail

Upgrade: Google's Gmail is now more secure on both desktop and mobile devies. Photo: Reuters

Google has enhanced the encryption technology for its flagship email service in ways that will make it harder for the US National Security Agency (NSA) to intercept messages moving among the company's worldwide data centres.

Among the most extraordinary disclosures in documents leaked by former NSA contractor Edward Snowden were reports the NSA had secretly tapped into the main communications links that connect Yahoo and Google data centres around the world.

Google, whose executive chairman Eric Schmidt said in November he was outraged over the practice, didn't mention the NSA in the announcement, except in a veiled reference to last year's "revelations". The change affects more than 425 million users of Google's Gmail service.

Advertisement

Yahoo has promised similar steps for its email service in the coming months.

"Your email is important to you, and making sure it stays safe and always available is important to us," Nicolas Lidzborski, Gmail's security engineering lead, wrote in a blog post.

Lidzborski said all Gmail messages a consumer sends or receives are now encrypted.

"Today's change means that no one can listen in on your messages as they go back and forth between you and Gmail's servers no matter if you're using public Wi-Fi or logging in from your computer, phone or tablet," Lidzborski wrote.

"This ensures that your messages are safe not only when they move between you and Gmail's servers, but also as they move between Google's data centres something we made a top priority after last [northern] summer's revelations."

View post:
Google enhances encryption for Gmail

Wickr wants to spread its spy-level encryption to your favorite games and apps

Nico Sell doesnt work on games, but shes meeting with creators at the Game Developers Conference in San Francisco this week because they all need what shes selling: Security.

Sell is the cofounder and CEO of the encrypted messaging app Wickr, which launched in 2012 as a way to chat with friends without worrying about where your data was goingor what it was being used for. Wickr is fighting above the wave of other, more popular messaging services like WhatsApp and Snapchat with a distinguishing feature: end-to-end encryption. The app caught on the wake of National Security Agency whistleblower Edward Snowdens surveillance revelations and Snapchats security leaks. Now Sell is offering up the security tools shes honed for Wickr to any other company who wants them.

Wickr is bundling its features, including the spy-level background tech that powers its seamless key exchange, and selling the package to other messaging apps, social networks, and game developersand not just to make money.

We solve really difficult problems here that could be used by almost every other messaging, gaming, and social media app out there, and it would be a shame not to get that technology to everyone, Sell said. This is our way to get to billions of users.

Wickr is targeting some of the biggest apps on the market for its security tools, which are also available la carte, but Sell is well aware of what a tough sell encryption is and has a pretty good guess as to which companies wont be buying Wickrs products.

I dont expect Facebook to be interested in this, because they make their money selling personal information, Sell said. I have a big goal here: To save my kids and everyones kids from being monetized in that way. Microsoft is one I dont plan on selling to. They are completely opposed to my philosophies.

Wickr's tools include a shredder that permanently deletes any images or apps that you've trashed.

Security experts like Sell, an organizer for the hacker convention Defcon, and Snowden himself argue that companies like Facebook and Google are more concerned about intercepting personal data to sell advertising than protecting user information by encrypting it from sender to receiver.

Facebook Chief Security Officer Joe Sullivan this week told a gathering of press that Facebook has long been capable of rolling out end-to-end encryption to users, but that the technology can be confusing for the average Internet user and gets in the way of communicating. Facebook does support third-party encryption apps on its platform, though.

Sell agrees that a lot of people who are interested in cryptography primarily make tools for themselves, not for regular folks. Shes trying to change that with Wickr, which combines top-level security with the novelty of Snapchat-like vanishing messages. She tests all features on her 4-year-old daughter to make sure Wickrs features are as simple as they get.

Read this article:
Wickr wants to spread its spy-level encryption to your favorite games and apps

Gmail: Encryption is now mandatory

Four years after Google turned on HTTPS by default in Gmail, and less than a year since the Edward Snowden document leaks, Google removes your ability to opt out of encryption.

Google has removed your ability to get out of encrypting your Gmail, the company announced Thursday.

This follows a 2010 decision to make HTTPS the default for Gmail communications, but up until today Google had given users the ability to not use encryption. Four years ago, the company explained the opt-out as necessary because encryption could "make your mail slower."

"The team has been working hard to mitigate any performance costs, which now puts us in a position where it no longer makes sense to allow HTTP connections," a Google spokesperson told CNET. "The large majority of users already use HTTPS connections, so this is the final step in the journey."

Google notes that Gmail messages are encrypted internally, as they move about Google's servers and data centers, a measure implemented in the wake of the Edward Snowden leaks.

The company also boasted about Gmail's stability, with service available 99.978 percent of the time.

Senior writer Seth Rosenblatt covers Google and security for CNET News, with occasional forays into tech and pop culture. Formerly a CNET Reviews senior editor for software, he has written about nearly every category of software and app available.

Roku's new Streaming Stick is clearly aiming to take on Google's Chromecast, but both streamers have their strengths and weaknesses. Here's how they compare so far.

See more here:
Gmail: Encryption is now mandatory