Law360 (November 27, 2019, 2:51 PM EST) -- The legal architect behind the FBI's headline-grabbing demand for Apple to unlock the iPhone of a dead suspect in the San Bernardino terrorist attack now says encryption is essential to protect Americans' cybersecurity.

Jim Baker, the FBI's general counsel from January 2014 to January 2018, said in an interview with Law360 that the FBI should abandon its long-held position that tech companies should build a way for law enforcement to access encrypted communications. Baker was at the center of a watershed moment in the encryption debate when he butted heads in 2016 with Apple, which argued that allowing U.S. authorities to...

In the legal profession, information is the key to success. You have to know whats happening with clients, competitors, practice areas, and industries. Law360 provides the intelligence you need to remain an expert and beat the competition.

TRY LAW360 FREE FOR SEVEN DAYS

The rest is here:
Why The FBI's Former Top Lawyer Now Embraces Encryption - Law360

Encrypted flash drives (also known as pen drives, USB memory sticks, thumb drives, or flash keys) can be used in finance, government/military, enterprises and individual in meeting tough data security. There are two type of encrypted flash drives which cover hardware encryption and software encryption.

Get Sample Copy of this Report @ https://www.orianresearch.com/request-sample/1139306

Encrypted Flash Drives Industry Report 2019 is a professional and in-depth research report on the worlds major regional market conditions of the Encrypted Flash Drives Industry, focusing on the main regions and the main countries (North America, Europe, South America, Middle East & Africa)

Market Segment by Applications

Government/Military Finance Enterprises Individual

Top Key Vendors analyzed in Global Encrypted Flash Drives Market are

Kingston SanDisk LaCie Kanguru Solutions Transcend Information Datalocker Apricorn

Global Encrypted Flash Drives Industry 2019 Market Research Report is spread across 76 pages and provides exclusive vital statistics, data, information, trends and competitive landscape details in this niche sector.

Order Copy of this Report @ https://www.orianresearch.com/checkout/1139306

Major Type as follows:

Software-Based Encrypted Flash Drives Hardware-Based Encrypted Flash Drives

Development policies and plans are discussed as well as manufacturing processes and cost structures are also analyzed. This report also states import/export consumption, supply and demand Figures, cost, price, revenue and gross margins.

The main contents of the report including: Encrypted Flash Drives Market

Section 1: Product definition, type and application, Global market overview;Section 2: Global Market competition by company;Section 3: Global sales revenue, volume and price by type;Section 4: Global sales revenue, volume and price by application;Section 5: United States export and import;Section 6: Company information, business overview, sales data and product specifications;Section 7: Industry chain and raw materials ;Section 8: SWOT and Porters Five Forces;Section 9: Conclusion.

Inquire more about this [emailprotected]https://www.orianresearch.com/enquiry-before-buying/1139306.

Major Points from Table of Contents

1 Market Overview2 Global and Regional Markets by Company3 Global and Regional Markets by Type4 Global and Regional Markets by Application5 Regional Trades6 Key Manufacturers7 Industries UpstreamContinue.List of Tables and Figures..

Ruwin MendezVice President Global Sales & Partner RelationsOrian Research ConsultantsUS: +1 (415) 830-3727 | UK: +44 020 8144-71-27Email: [emailprotected]Website:www.orianresearch.com/Follow Us on LinkedIn:https://www.linkedin.com/company-beta/13281002/

About Us

Orian Research is one of the most comprehensive collections of market intelligence reports on the World Wide Web. Our reports repository boats of over 500000+ industry and country research reports from over 100 top publishers. We continuously update our repository so as to provide our clients easy access to the worlds most complete and current database of expert insights on global industries, companies, and products. We also specialize in custom research in situations where our syndicate research offerings do not meet the specific requirements of our esteemed clients.

Read the original post:
Encrypted Flash Drives Market Size, Growth, Global Industry Analysis, Share, Segments and Forecast 2019-2024 - Space Market Research

SAN FRANCISCO A Justice Department official hinted on Monday that a yearslong fight over encrypted communications could become part of a sweeping investigation of big tech companies.

While a department spokesman declined to discuss specifics, a speech Monday by the deputy attorney general, Jeffrey A. Rosen, pointed toward heightened interest in technology called end-to-end encryption, which makes it nearly impossible for law enforcement and spy agencies to get access to peoples digital communications.

Law enforcement and technologists have been arguing over encryption controls for more than two decades. On one side are privacy advocates and tech bosses like Apples chief executive, Timothy D. Cook, who believe people should be able to have online communications free of snooping. On the other side are law enforcement and some lawmakers, who believe tough encryption makes it impossible to track child predators, terrorists and other criminals.

Attorney General William P. Barr, joined by his British and Australian counterparts, recently pressed Facebooks chief executive, Mark Zuckerberg, to abandon plans to embed end-to-end encryption in services like Messenger and Instagram. WhatsApp, which is owned by Facebook, already provides that tougher encryption.

Companies should not deliberately design their systems to preclude any form of access to content even for preventing or investigating the most serious crimes, Mr. Barr wrote in a letter last month.

Here is an explanation of the technology and the stakes.

End-to-end encryption scrambles messages in such a way that they can be deciphered only by the sender and the intended recipient. As the label implies, end-to-end encryption takes place on either end of a communication. A message is encrypted on a senders device, sent to the recipients device in an unreadable format, then decoded for the recipient.

There are several ways to do this, but the most popular works like this: A program on your device mathematically generates two cryptographic keys a public key and a private key.

The public key can be shared with anyone who wants to encrypt a message to you. The private key, or secret key, decrypts messages sent to you and never leaves your device. Think of it as a locked mailbox. Anyone with a public key can put something in your box and lock it, but only you have the private key to unlock it.

A more common form of encryption, known as transport layer encryption, relies on a third party, like a tech company, to encrypt messages as they move across the web.

With this type of encryption, law enforcement and intelligence agencies can get access to encrypted messages by presenting technology companies with a warrant or national security letter. The sender and recipient would not have to know about it.

End-to-end encryption ensures that no one can eavesdrop on the contents of a message while it is in transit. It forces spies or snoops to go directly to the sender or recipient to read the content of the encrypted message. Or they must hack directly into the senders or recipients device, something that can be harder to do at scale and makes mass surveillance much more difficult.

Privacy activists, libertarians, security experts and human rights activists argue that end-to-end encryption steers governments away from mass surveillance and toward a more targeted, constitutional form of intelligence gathering. But intelligence and law enforcement agencies argue that end-to-end encryption makes it much harder to track terrorists, pedophiles and human traffickers.

When Mr. Zuckerberg announced in March that Facebook would move all three of its messaging services to end-to-end encryption, he acknowledged the risk it presented for truly terrible things like child exploitation.

Encryption is a powerful tool for privacy, but that includes the privacy of people doing bad things, he said.

The debate over end-to-end encryption has had several iterations, beginning in the 1990s with the spread of Pretty Good Privacy, or PGP, software, an end-to-end encryption scheme designed by a programmer named Phil Zimmermann. As a result, the Clinton administration proposed a Clipper Chip, a back door for law enforcement and security agencies.

But the Clipper Chip provoked a backlash from a coalition of unlikely bedfellows, including the American Civil Liberties Union; the televangelist Pat Robertson; and Senators John Kerry, the Massachusetts Democrat, and John Ashcroft, the Missouri Republican. The White House backed down in 1996.

End-to-end encryption gained more traction in 2013, after data leaked by the former National Security Agency contractor Edward J. Snowden appeared to show the extent to which the N.S.A. and other intelligence and law enforcement agencies were gaining access to users communications through companies like Yahoo, Microsoft, Google and Facebook without their knowledge.

Encrypted messaging apps like Signal and Wicker gained in popularity, and tech giants like Apple and Facebook started wrapping user data in end-to-end encryption.

Google, which pledged to add an end-to-end encryption option for Gmail users several years ago, has not made this the default option for email. But the company does offer a video-calling app, Duo, that is end-to-end encrypted.

As more communications moved to these end-to-end encrypted services, law enforcement and intelligence services around the world started to complain about datas going dark.

Government agencies have tried to force technology companies to roll back end-to-end encryption, or build back doors, like the Clipper Chip of the 1990s, into their encrypted products to facilitate government surveillance.

In the most aggressive of these efforts, the F.B.I. tried in 2016 to compel Apple in federal court to unlock the iPhone of one of the attackers in the 2015 mass shooting in San Bernardino, Calif.

Mr. Cook of Apple called the F.B.I.s effort the software equivalent of cancer. He said complying with the request would open the door to more invasive government interception down the road.

Maybe its an operating system for surveillance, maybe the ability for the law enforcement to turn on the camera, Mr. Cook told ABC News. I dont know where it stops.

Privacy activists and security experts noted that any back door created for United States law enforcement agencies would inevitably become a target for foreign adversaries, cybercriminals and terrorists.

Alex Stamos, the chief security officer of Yahoo at the time, likened the creation of an encryption back door to drilling a hole in the windshield. By trying to provide an entry point for one government, you end up cracking the structural integrity of the entire encryption shield.

The F.B.I. eventually backed down. Instead of forcing Apple to create a back door, the agency said it had paid an outside party to hack into the phone of the San Bernardino gunman.

Governments have stepped up their calls for an encryption back door.

Last year, Australian lawmakers passed a bill requiring technology companies to provide law enforcement and security agencies with access to encrypted communications. The bill gave the government the ability to get a court order allowing it to secretly order technology companies and technologists to re-engineer software and hardware so that it can be used to spy on users.

Australias law is based on Britains 2016 Investigatory Powers Act, which compels British companies to hand over the keys to unscramble encrypted data to law enforcement agencies. The Australian law could apply to overseas companies like Facebook and Apple.

Australias new law applies to network administrators, developers and other tech employees, forcing them to comply with secret government demands without notifying their employers.

Other governments are also considering new encryption laws. In India, Facebooks biggest market, officials told the countrys Supreme Court in October that Indian law requires Facebook to decrypt messages and supply them to law enforcement upon request.

They cant come into the country and say, We will establish a non-decryptable system, Indias attorney general, K.K. Venugopal, told the court, referring to Facebook and other big tech platforms. Indias Supreme Court has said it will reconvene on the issue in January.

See the rest here:
What Is End-to-End Encryption? Another Bulls-Eye on Big Tech - The New York Times

Global marketers has freshly publicized a research report on Global Hardware-based Full Disk Encryption Market, which broadly covers aspects like business trends, business ideas, and latest product range in detail, will prove as a data source for accurate, authenticate and reliable market information. The quantitative data and Hardware-based Full Disk Encryption industry verticals obtainable from this report will lead to better decision making.

The data presented in the graphical format gives a thorough understanding of the major players of Hardware-based Full Disk Encryption . The restraints and growth opportunities, industry plans, innovations, mergers, and acquisitions are covered in this report. The market is segmented based on key Hardware-based Full Disk Encryption industry verticals like the product type, applications, and geographical regions.

>> Ask for FREE Sample Copy of the Report @ https://www.reportspedia.com/report/semiconductor-and-electronics/global-hardware-based-full-disk-encryption-market-2019-by-manufacturers,-regions,-type-and-application,-forecast-to-2024/2685 #request_sample

Key Players of Hardware-based Full Disk Encryption Report are:

Seagate Technology PLCWestern Digital CorpSamsung ElectronicsToshibaKingstonMicron Technology IncIntel

Outline of the data covered in this study:

>> Inquiry Here For Detail Report @ https://www.reportspedia.com/report/semiconductor-and-electronics/global-hardware-based-full-disk-encryption-market-2019-by-manufacturers,-regions,-type-and-application,-forecast-to-2024/2685 #inquiry_before_buying

The market is segmented into below points:

Market by Type/Products:

Hard Disk Drive (HDD) FDESolid State Drives (SSD) FDE

Market by Application/End-Use:

IT & TelecomBFSIGovernment & Public UtilitiesManufacturing EnterpriseOthers

The market study covers the forecast Hardware-based Full Disk Encryption information from 2019-2024 and key questions answered by this report include:

1) What was the global market size in 2018?

2) What are the market size in different regions and countries of the world?

3) Which factors contribute to the growth and which are the constraints to the development?

4) Which are the different applications and product type covered in this report?

5) How will the market forecast information help in the development of Industry?

6) What is the potential, investment feasibility of Market in different countries/ regions?

About Global Marketers Biz:

Global Marketers is a research eye which discovers the syndicate, custom and consulting research needs. The company excels in presenting the research requirements of various business enterprises viz. commercial, industrial and all other. Surgical market analysis followed by a Comprehensive research methodology will drive the businesses in planning & reshaping the business schemes and the growth of the industry. The company shows interest in offering researches related to healthcare, chemical, technology, automobile and many of the other areas. This is a trustworthy brand when talked about quality survey and highly reachable to customer requirements of any industry situated across the globe.

>> To know More Details About Zinc Oxide Pigment Industry research Report @: https://www.reportspedia.com/report/semiconductor-and-electronics/global-hardware-based-full-disk-encryption-market-2019-by-manufacturers,-regions,-type-and-application,-forecast-to-2024/2685 #table_of_contents

Thanks a bunch for reading! You can also request custom information like chapter-wise or specific region-wise study as per your interest.

For any additional questions get in touch with,

Mr. Alex White

Email: [emailprotected]

Phone number: +1(617)2752849

Website: http://WWW.GlobaMarketers.Biz

Original post:
Global Hardware-based Full Disk Encryption Market By Industry Business Plan, Manufacturers, Sales, Supply, Share, Revenue and Forecast Report...

The National Security Agency (NSA) published an advisory that addresses the risks behind Transport Layer Security Inspection (TLSI) and provides mitigation measures for weakened security in organizations that use TLSI products.

TLSI(akaTLS break and inspect) is the process through which enterprises can inspect encrypted traffic with the help of a dedicated product such as a proxy device, a firewall, intrusion detection orprevention systems (IDS/IPS)that can decrypt and re-encrypt traffic encrypted with TLS.

While some enterprises use this technique for monitoring potential threats such as data exfiltration, active command and control (C2) communication channels, or malware delivery via encrypted traffic, this will also introduce risks.

Enterprise TLSI products that don't properly validatetransport layer security (TLS) certificates, for instance, will weaken the end-to-end protection provided by the TLS encryption to the end-users, drastically increasingthe likelihood that threat actors will target them in man-in-the-middle attack (MiTMP) attacks.

The use of a not properly functioning forwardproxy with TLSI capabilities can lead to unexpected consequences such as rerouting decrypted network traffic to an external network, traffic that can be intercepted by third party inspection devices that can get unauthorized access to sensitive data.

"Deploying firewalls and monitoring network traffic flow on all network interfaces to the forward proxy helps protect a TLSI implementation from potential exploits," the NSA says.

"Implementing analytics on the logs helps ensure the system is operating as expected. Both also help detect intentional and unintentional abuse by security administrators as well as misrouted traffic."

When it's essential to use a TLSI product, the NSA recommends independently validated products that can properly implement data flow, TLS, and CA functions.

Moreover,products validated by the National Information Assurance Partnership (NIAP) "and configured according to the vendors instructions used during validation" should meet the requirements.

Since TLSI will take place in real-time and, to work, TLSI products have to manage two separate TLS connections, this could and will, in most cases, lead to TLS chaining issues that cause TLS protection downgrade problems, eventually leading to potential exploitation of weaker cipher suites and TLS versions.

TLSI forward proxy devices also come with a built-incertification authority (CA) function used for creating and signing new certificates, an embedded and trusted CA that could be used by bad actors "to sign malicious code to bypass host IDS/IPSs or to deploy malicious services that impersonate legitimate enterprise services to the hosts" upon a successful attack.

Attackers could also directly exploit the TLSI devices where the traffic is decrypted thus gaining access to plaintext traffic, while an insider threat such as anauthorized security admin "could abuse their access to capture passwords or other sensitive data visible in the decrypted traffic."

"To minimize the risks described above, breaking and inspecting TLS traffic should only be conducted once within the enterprise network," the NSA advisory adds.

"Redundant TLSI, wherein a client-server traffic flow is decrypted, inspected, and re-encrypted by one forward proxy and is then forwarded to a second forward proxy for more of the same, should not be performed."

More measures to mitigate risks stemming from the use of TLSI devices in an enterprise network are provided by the NSA as part of its security advisory on Managing risk from Transport Layer Security Inspection[PDF].

"The mitigations described above can reduce the risks introduced by a TLSI capability, provide indicators that alert administrators if the TLSI implementation may have been exploited, and minimize unintended blocking of legitimate network activity," the NSA adds.

"In this way, security administrators can successfully add TLSI to their arsenal and continue to step up their methods to combat todays adversaries and TTPs."

The Cybersecurity and Infrastructure Security Agency (CISA) also issued an alert onrisks associated with HTTPS inspection in March 2017, stating that "in general, organizations considering the use of HTTPS inspection should carefully consider the pros and cons of such products before implementing."

"Organizations should also take other steps to secure end-to-end communications, as presented in US-CERT Alert TA15-120A" onsecuring end-to-end communicationsCISA says.

A list of potentially affected software used for TLSIcompiled by CERT/CC vulnerability analystWill Dormann is available herewhilea simple tool for checking if aTLSI productis correctly verifying certificate chains can be found atbadssl.com.

Read this article:
NSA Publishes Advisory Addressing Encrypted Traffic Inspection Risks - BleepingComputer