Security is hard. An important truth of security is that no matter how good you are, you can't protect against every threat. That's why a lot of security solutions are playing catch-up, and why some traditional solutions are always behind the curve. Take...
We’re in the midst of the mobile revolution. Many of us use mobile devices for much of what we do. In fact, it’s highly likely that you’re reading this article on a smartphone or tablet right now. Moreover, what we now call “phones” are really powerful...
It’s easy to create a poor encryption system, and very difficult to create a good one. But as a mobile user who just wants to be sure that your communication is private and secure, how can you tell the difference? Fortunately, you don’t have to be an...
We have gotten a report that the commercial/government spyware system FinFisher has themselves been hacked and that documents, code, etc. have been posted online. Our friends who have looked at some of these leaked documents have told us that they have a...
In our previous blog post on Heartbleed we said that we would tell you more when we had finished our own cleanup. We completed our work this weekend. We replaced all our SSL certificates, and that required us to update the Silent Text apps themselves. We...
We are sure that you have heard about the Heartbleed bug. Heartbleed attacks the heartbeat extension (RFC 6520) implemented in OpenSSL. The official reference to the Heartbleed bug is CVE-2014-0160. We want to give an update about how it does and does not...