Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
The growing battle over end-to-end encryption took another turn last week, when EU officials warned that they may not take kindly to a US encryption ban or insertion of crypto backdoor technology. What is your opinion on this issue? We are in favor of strong encryption. Learn more: . In June 2019, senior US government officials met to discuss whether they could legislate tech companies into not using unbreakable encryption. According toPolitico, the National Security Council pondered whether to ask Congress to outlaw end-to-end encryption, which is a technology used by companies to keep your data safe and secure. To recap briefly, US law enforcement worries about its targets such as criminals and terrorists “going dark” by using this technology to shield their communications. Banning it outright would make it easier for government agencies to access those messages and documents. Encryption advocates counter that making encryption breakable would also allow malicious actors such as foreign governments to steal domestic secrets and they also worry about unlawful access to information by their own governments. The link for this article located at Naked Security is no longer available. . EU representatives express concerns over a potential US ban on encryption that could endanger the integrity of robust cryptographic safeguards.. End-to-End Encryption, US Legislation, Privacy Rights, Cybersecurity, Encryption Ban. . LinuxSecurity.com Team
The IEEE this week issued a position statement in support of strong encryption and in opposition to government efforts to require backdoors.. "IEEE supports the use of unfettered strong encryption to protect confidentiality and integrity of data and communications. We oppose efforts by governments to restrict the use of strong encryption and/or to mandate exceptional access mechanisms such as 'backdoors' or 'key escrow schemes' in order to facilitate government access to encrypted data," the organization's statement reads. The link for this article located at DarkReading is no longer available. . The IEEE champions robust encryption as a vital means to protect data confidentiality from intrusive governmental access efforts.. Strong Encryption, Data Protection, Privacy Advocacy, Encryption Backdoors. . Brittany Day
A coalition of 63 non-governmental organizations (NGOs) from around the world are calling on national governments to support the establishment of a special rapporteur on the right to privacy within the United Nations. . According to U.N. documents, special rapporteurs (also known as special procedures) are appointed by the Human Rights Council and operate as independent experts with mandates to report and advise on human rights from a thematic The link for this article located at ThreatPost is no longer available. . A group of advocacy organizations is calling on the United Nations to appoint a special reporter dedicated to issues surrounding personal privacy and data safeguarding.. Privacy Advocacy, Data Protection, NGO Efforts, UN Initiatives. . LinuxSecurity.com Team
President Barack Obama in his State of the Union on Tuesday failed to address an issue that affects everyone on the internet . Privacy advocates and business interests were crossing their fingers that Obama would announce he was following the recommendations of a presidential panel that recently urged a dramatic overhaul of the NSA The link for this article located at Wired is no longer available. . Civil liberties supporters anticipated changes in FBI policies while Congress remained mute on vital matters impacting online privacy.. NSA Reform, Internet Surveillance, Privacy Rights, Government Oversight. . Alex
This is the first in a series of posts detailing the journey and experiences of Joseph Sokoly as a first time speaker in InfoSec. Continuing on the . Picture this, if you will. You The link for this article located at Security Catalyst is no longer available. . Emily Chen recounts her path as a novice cybersecurity presenter and the insights that influenced her journey.. InfoSec Speaker Journey, Cybersecurity Story, Open Source Advocacy. . LinuxSecurity.com Team
It has been a bad year for data security. The Privacy Rights Clearinghouse, a consumer advocacy group in San Diego, has counted 80 data breaches since February, involving the personal information of more than 50 million people. The sensitive data--names, Social Security and credit card numbers, dates of birth, home addresses and the like--have either been lost by or stolen from companies and institutions that compile such data. . In response, more than a dozen bills have been introduced in Congress this year. Companies that compile, trade and store consumer data, while largely resigned to the idea that new legislation will hold them to a higher standard for security, want to minimize the impact of any new law, maximize their discretion when it comes to notifying consumers of breaches and limit their liability when they do spring leaks. A bill introduced by Sen. Jeff Sessions, Republican of Alabama, for instance, simply requires businesses to improve security on the data they carry and to notify consumers only if there is a "significant risk of identity theft." But proving a "risk of identity theft" is nearly impossible, said Chris Jay Hoofnagle, senior counsel with the Electronic Privacy Information Center in Washington, a public interest research center.. With over 80 data breaches this year, new legislation in Congress aims to address consumer privacy risks and enhance security standards.. Data Security, Consumer Privacy, Data Breaches, Privacy Legislation, Security Standards. . Brittany Day
A proposal to create an association to represent the interests of hackers and vulnerability researchers is gaining support, a security expert said Wednesday. The group, which would be geared toward researchers and not software vendors, would provide guidelines on vulnerability disclosures . . . . A proposal to create an association to represent the interests of hackers and vulnerability researchers is gaining support, a security expert said Wednesday. The group, which would be geared toward researchers and not software vendors, would provide guidelines on vulnerability disclosures and would lobby against legislation that could stifle security researchers' ability to tinker with software. Nearly three-dozen people have pledged financial support to help get the yet-unnamed group started, said Thor Larholm, senior security researcher for PivX Solutions. "Initially, what has disturbed me was all the special-interest organisations created by vendors for vendors," he said. "We want to do something for security researchers, and it's not just about disclosure policy, but about helping and supporting The link for this article located at ZDNet is no longer available. . A suggestion to establish a coalition dedicated to advocating for the hacker community and supporting initiatives related to vulnerability discovery.. Hackers Union, Cybersecurity Advocacy, Vulnerability Research, Security Researchers. . Anthony Pell
While no one has sympathy for the devils that fill inboxes with promises of lower mortgages and larger members, not everyone is supporting the new movement to banish spammers from the Internet. Some online advocates worry that heavy-handed antispam measures, . . . . While no one has sympathy for the devils that fill inboxes with promises of lower mortgages and larger members, not everyone is supporting the new movement to banish spammers from the Internet. Some online advocates worry that heavy-handed antispam measures, such as centralized blacklists and charging for delivery, will destroy e-mail. Electronic Frontier Foundation's head counsel Cindy Cohn, for instance, argues that antispam crusaders are forgetting the Internet's first principle -- information flows freely from end to end. Cohn fears that the Internet's openness will be collateral damage in the war against unwanted e-mail. Cohn says her organization's position on spam blocking can be boiled down to a simple proposition: "All nonspam e-mail should be delivered." It's an information age take on the Hippocratic oath, which requires doctors to first do no harm. "It's not the job of an ISP to block e-mail," added Cohn. "E-mail isn't a toy anymore. If I don't get an e-mailed notice from the federal district court mailing list, it's malpractice." The link for this article located at Wired is no longer available. . While no one has sympathy for the devils that fill inboxes with promises of lower mortgages and larg. while, sympathy, devils, inboxes, promises, lower, mortgages. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.