Researchers have developed code exploiting several vulnerabilities in PGP (including GPG) for email. In response, EFF’s current recommendation is to disable PGP integration in email clients. Disabling PGP decryption in Thunderbird only requires disabling the Enigmail add-on. Your existing keys… Read More ›
Tag Archive for ‘Security Education’
Attention PGP Users: New Vulnerabilities Require You To Take Action Now
UPDATE (5/14/18): More information has been released. See EFF’s more detailed explanation and analysis here. A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. EFF has been in… Read More ›
Bring in the Nerds: EFF Introduces Actual Encryption Experts to U.S. Senate Staff
Earlier today in the U.S. Capitol Visitor Center, EFF convened a closed-door briefing for Senate staff about the realities of device encryption. While policymakers hear frequently from the FBI and the Department of Justice about the dangers of encryption and… Read More ›
Congressmembers Raise Doubts About the “Going Dark” Problem
In the wake of a damning report by the DOJ Office of Inspector General (OIG), Congress is asking questions about the FBI’s handling of the locked iPhone in the San Bernardino case and its repeated claims that widespread encryption is… Read More ›
To #DeleteFacebook or Not to #DeleteFacebook? That Is Not the Question
Since the Cambridge Analytica news hit headlines, calls for users to ditch the platform have picked up speed. Whether or not it has a critical impact on the company’s user base or bottom line, the message from #DeleteFacebook is clear:… Read More ›
Ethiopia Backslides: the Continuing Harassment of Eskinder Nega
On March 25, bloggers, journalists and activists gathered at a private party in Addis Ababa—the capital of Ethiopia—to celebrate the new freedom of their colleagues. Imprisoned Ethiopian writers and reporters had been released in February under a broad amnesty: some… Read More ›
HTTPS Everywhere Introduces New Feature: Continual Ruleset Updates
Today we’re proud to announce the launch of a new version of HTTPS Everywhere, 2018.4.3, which brings with it exciting new features. With this newest update, you’ll receive our list of HTTPS-supporting sites more regularly, bundled as a package that… Read More ›
Thinking About What You Need In A Secure Messenger
All the features that determine the security of a messaging app can be confusing and hard to keep track of. Beyond the technical jargon, the most important question is: What do you need out of a messenger? Why are you… Read More ›
Why We Can’t Give You A Recommendation
No single messaging app can perfectly meet everyone’s security and communication needs, so we can’t make a recommendation without considering the details of a particular person’s or group’s situation. Straightforward answers are rarely correct for everyone—and if they’re correct now,… Read More ›
The Revolution and Slack
The revolution will not be televised, but it may be hosted on Slack. Community groups, activists, and workers in the United States are increasingly gravitating toward the popular collaboration tool to communicate and coordinate efforts. But many of the people… Read More ›