Here at EFF, we maintain a repository of self-help resources on circumventing surveillance across a variety of different platforms, devices, and threat models. We call it Surveillance Self-Defense, or SSD for short. SSD covers myriad topics, and is broken up… Read More ›
Tag Archive for ‘Security Education’
Virtual(ly) Private Network: NordVPN’s Breach and the Limitations of VPNs
UPDATE (11/8/2019): We have clarified that the NordVPN user credentials impacted were not in result of this breach. The popular VPN provider, NordVPN, recently announced a server breach at a third-party data center. NordVPN reassured users that its key services… Read More ›
Companies Can Still Do More to Protect Privacy in Brazil: Internet Lab Releases Fourth "Who Defends Your Data" Report
Internet Lab, the Brazilian independent research center, has published their fourth annual report of “Quem Defende Seus Dados?” (“Who defends your data?”), comparing policies of their local Internet Service Providers (ISPs) and how they treat users’ data after receiving government… Read More ›
The 5G Protocol May Still Be Vulnerable to IMSI Catchers
It’s hard to talk about the vulnerabilities in cellular technology without increasing the amount of fear, uncertainty, and doubt. There is already much uncertainty around cell-site simulators (CSS, aka Stingrays), their capabilities, and how widely they are used. Partly this… Read More ›
A Guided Tour of the Data Facebook Uses to Target Ads
Last week, Pew released the results of a survey investigating how users understand Facebook’s data collection practices and how they react when shown what the platform thinks it knows about them. The upshot is that 74% of users weren’t aware… Read More ›
Detecting Ghosts By Reverse Engineering: Who Ya Gonna Call?
This article was first published on Lawfare. The most recent purportedly serious proposal by a Western government to force technology companies to provide access to the content of encrypted communications comes from Ian Levy and Crispin Robinson of the Government Communications Headquarters,… Read More ›
Announcing STARTTLS Everywhere: Securing Hop-to-Hop Email Delivery
Today we’re announcing the launch of STARTTLS Everywhere, EFF’s initiative to improve the security of the email ecosystem. Thanks to previous EFF efforts like Let’s Encrypt, and Certbot, as well as help from the major web browsers, we’ve seen significant… Read More ›
A Technical Deep Dive into STARTTLS Everywhere
Today we’re announcing the launch of STARTTLS Everywhere, EFF’s initiative to improve the security of the email ecosystem. Thanks to previous EFF efforts like Let’s Encrypt, and Certbot, as well as help from the major web browsers, we’ve seen significant… Read More ›
Border Spy Tech Shouldn’t Be a Requirement for a Path to Citizenship
The Border Security and Immigration Reform Act (H.R. 6136), introduced before Congress last week, would offer immigrants a new path to citizenship in exchange for increased high tech government surveillance of citizens and immigrants alike. The bill calls for increased… Read More ›
How To Turn PGP Back On As Safely As Possible
Previously, EFF recommended to PGP users that, because of new attacks revealed by researchers from Münster University of Applied Sciences, Ruhr University Bochum, and NXP Semiconductors, they should disable the PGP plugins in their email clients for now. You can… Read More ›