We rely upon instant messaging apps heavily to stay in touch with family and friends. These apps allow us to communicate via texting, audio calls, and video calls. Since conversations often include sensitive and private details, it becomes important that no one else could see them. This is where end-to-end encryption aka E2EE comes into the picture.

It is a security protocol that encrypts data so that only the sender and recipient could read it. Even if a hacker gets hold of the data, it will be unreadable to them as they do not have the required security key to decrypt it. The data gets encrypted the moment it leaves the senders device and gets decrypted only on the recipients device. In the case of messaging apps with end-to-end encryption, all your text messages, video calls, and audio calls stay safe and secure. No third party as well as the messaging company itself can read those messages or calls.

These are the best messaging apps with end-to-end encryption that you should try in 2022.

Signal is an app that you will always hear about whenever there will be a conversation about secure and privacy-focused messaging apps. It offers end-to-end encryption for all messages and calls by default. Its encryption is powered by an open source Signal Protocol which keeps things transparent.

The app supports both audio and video calls along with group calls. For those who prefer texting, it lets you send photos, videos, GIFs, stickers, documents, and audio messages. Signal is an independent non-profit and relies on grants and donations. It is available for all leading platforms on mobile phones and desktops.

WhatsApp is the most prominent instant messenger application with billions of users worldwide. It also offers end-to-end encryption for all messages and calls by default. Its encryption is powered by the same protocol that Signal uses which it started using in 2016.

The app is packed with all those features that you would expect from an instant messenger. It recently increased limits on file sizes and the number of uses in group calls to make things better. You can even use disappearing chats if you wish to where messages disappear after a preset time. The only thing to know is that WhatsApp is owned by Meta (previously Facebook) which is something some people might not be comfortable with. While Meta cannot read your conversations due to encryption, it can certainly log other data about you which is a common practice among Big Tech.

Telegram is an open-source instant messaging application and has made a good name for itself. The end-to-end encryption on the app is not enabled by default. It can be used only during the Secret Chats mode. It means when you are conversing with someone in the standard mode, your chats are not covered by the encryption.

It further lets users send self-destructing messages. These texts get auto-deleted after the pre-selected time. There are many other features that make Telegram a very handy app. These include support for adding up to 200,000 people in groups, creating channels, creating bots, and the ability to share large size media files

Threema is another open-source secure messaging app for both individual and enterprise users. It features no ads and does not collect any user data either. This is because it is a paid application and charges a one-time fee of about $4. Once you pay the fee, the app is yours to use forever.

The app offers end-to-end encryption and claims to be fully GDPR-compliant. It has a dedicated version called Threema Work for companies. It claims to have over 7,000 companies and organizations as its clients. One of the good things about the app is that it can be used anonymously if you do not want to link your account with an email address or phone number.

Wickr Me is an end-to-end encrypted messaging app that is not so well known. It provides encryption for all messages and calls. One can also send self-destructing messages that can easily be configured. It even removes metadata from media files to improve your privacy.

The app is completely free to use for all users. It also has a $100,000 bug-bounty program where it encourages anyone to check out the app and discover any vulnerabilities that it may have. However, it supports adding only up to 10 group members and one-on-one audio and video calls which could be limiting for you.

Read the rest here:
5 best messaging apps with end-to-end encryption to try in 2022 - Phandroid - News for Android

Mehul DasJun 03, 2022 14:03:42 IST

Apple claims that they have one of the safest ecosystems, and with the iPhone, users are in complete control of their privacy and data. While many people actually buy into Apples claims, and there are cases where Apples words have proven to be true, security experts all around the world believe that users need to be proactive about their privacy, irrespective of what device or smartphone they use.

Apple security expert and the CEO of Spylix, Steven Walker has stated in an interview, irrespective of what Apple claims, people should be wary of one app in particular and not install it on their iPhones, ever. That app is Facebook Messenger.

Spylix is a phone tracking app that is used by government agencies all around the world. Walker believes that just because an app is extremely popular, that doesnt mean that it's safe to be used. He also says that because of Facebook Messengers popularity, people often do not think that it is a problematic application.

The main reason why Walker believes that Facebook Messenger compromises a user's privacy and data is twofold. Firstly, it is owned by Meta, formerly owned by Facebook, a company that does not have a clean track record as far as using data from users on their platform. Secondly, and this is the more pertinent reason for Walker, is the fact that Facebook Messenger, doesnt have end-to-end encryption.

Walker believes that there are several other instant messaging options that users can go for. WhatsApp, even though it is owned by Facebook, is still much more secure than Facebook Messenger. WhatsApp has about 2 billion active users worldwide, almost double of Facebook Messenger.

Then there are apps like Telegram and Signal. Although they arent nearly as popular as WhatsApp, both of them have been developed keeping security and privacy in mind. Apps such as WhatsApp, Signal and Telegram, offer end-to-end encryption, which is increasingly becoming a vital feature in instant messaging apps.

Meta has claimed that they are working on end-to-end encryption, but they have walked back on their deadlines quite a few times. Initially, Facebook Messenger was supposed to get end-to-end encryption by latest by 2022. Now, Facebook has pushed the deadline to 2023. People at Meta say that they are concerned about bad actors abusing end-to-end encryption, and so they want to take their time to get the system right. If that were indeed the case, one cannot help but wonder, how is it that such concerns arent an issue for WhatsApp.

Read the rest here:
Apple security expert says theres one app people should never install this app on their iPhones - Firstpost

SSH (Secure Shell) is a network protocol that enables secure communication between two devices, often used to access remote servers as well as to transfer files or execute commands.

SSH was originally developed by Tatu Ylonen in 1995 to replace Telnet, a network protocol that allowed users to connect to remote computers, most often to test connectivity or to remotely administer a server.

Today, SSH has become the standard for remote access for many organizations, and is used by system administrators to manage servers remotely or to securely connect to their personal computers. SSH is also commonly used to tunnel traffic through untrusted networks, such as public Wi-Fi hotspots.

SSH access is used for a variety of tasks, including remotely logging into servers, transferring files, and running commands. Some popular SSH clients include PuTTY (Windows), Terminal (Mac), and Linux Shell.

SSH is a powerful tool that can be used for a variety of tasks. However, its important to note that SSH is not intended to be used as a general-purpose file transfer protocol. If you are looking to transfer files between two computers, you should use a tool such as SFTP instead.

To get SSH access, you need to have a user account on your web hosting server. Once you have a user account, you can generate an SSH key pair. The public key will be added to the server's authorized_keys file, and the private key will be kept on your local machine. Once the key pair is generated, you can use an SSH client to connect to the server.

There are many different SSH clients available, but we recommend using PuTTY for Windows users and Terminal for Mac users. If you're using Linux, you should already have a Terminal application installed.

Once you've launched your chosen SSH client, enter the hostname or IP address of the server into the connection settings.

Make sure to select "SSH" as the connection type, and then enter your username. Once you've entered all of the necessary information, you can click "Connect" to connect to the server.

If everything was entered correctly, you should see a message asking for your password. Type in your password and hit "Enter". If you're connected successfully, you should see a command prompt for the server.

From here, you can run any commands that you would normally run on the server. To disconnect from the server, simply type "exit" at the command prompt and hit "Enter".

SSH encryption is a process that uses mathematical algorithms to encode data. The sender and receiver of the encoded data can then use a secret key to decode the data.

This process helps to ensure that the data remains confidential and is not tampered with during transit. SSH also provides authentication, which helps to prevent unauthorized access to systems and data.

There are two main types of SSH encryption: public-key encryption and symmetric key encryption. Public key encryption uses two different keys, one for encoding and one for decoding.

The keys are typically generated by a third-party provider and are shared between the sender and receiver. Symmetric key encryption uses the same key for both encoding and decoding. This means that the sender must first send the key to the receiver before any data can be encrypted or decrypted.

While both public key and symmetric key encryption are secure, symmetric key encryption is typically faster and is therefore often used for high-speed data transfers.

Secure Shell (SSH) is available on all major mobile platforms, including iOS, and Android. It provides a secure way to access your mobile device's command-line interface (CLI), allowing you to run commands and transfer files without having to worry about someone eavesdropping on your session.

To use SSH on your mobile device, you'll need to install a client app such as Termius or Connectbot. Once you've installed a client app, you can connect to your device by entering its IP address into the app's connection screen. You'll also need to enter your username and password (if using password authentication).

SSH is not completely free, but it is free for many purposes. For example, when using SSH to access a remote server, you will need to pay for the server.

However, if you just want to use SSH to connect to a friend's computer, there is no charge. In general, SSH is free for personal use, but some commercial applications require a fee.

The short answer is no. Not all browsers support Secure Shell or SSH. The most popular browser that does not support SSH is Google Chrome. There are, however, many ways to get around this.

One way is to use a different browser that does support SSH such as Mozilla Firefox or Microsoft Edge. Another way is to use an extension for Google Chrome that will add SSH support.

SSH encrypts all traffic between the client and server, making it much more difficult for attackers to eavesdrop on communications.

This is especially important when transmitting sensitive information, such as passwords or financial data. SSH also provides authentication capabilities, meaning that only authorized users can access the server.

This is accomplished through the use of public-private key pairs. The server has a copy of the public key, and the client has a copy of the private key. When the client attempts to connect to the server, the server uses the public key to verify that the client has the private key. If everything checks out, then the user is granted access.

There are a few different types of SSH clients available, but the most popular ones are open-source. While open-source software is generally considered to be more secure than closed-source software, there is a debate about whether or not this is true for SSH clients.

Some people argue that open-source SSH clients are less secure because its source code is available for anyone to examine. This means that potential attackers can find vulnerabilities more easily. While others argue that open-source SSH clients are more secure because its source code is available for anyone to examine.

Which side is right? It's hard to say for sure. There are pros and cons to both sides of the argument. Ultimately, it's up to each individual to decide whether they want to use an open-source or closed-source SSH client.

If security is your top priority, you may want to consider using a closed-source SSH client. However, if you're more concerned about features and flexibility, an open-source SSH client may be a better choice for you.

A secure Shell is a great tool for securing data in transit, as it can be used to encrypt traffic between two computers or secure data being sent over the internet.

Secure Shell can also be used to create secure tunnels between two computers, most often to securely connect to remote servers.

Additionally, it can be used to create secure backups of files, databases and to protect data in transit.

SSH access is a great way to manage your web server remotely. There are a few things to keep in mind when using SSH. First of all, make sure that you are connecting to the correct server.

Secondly, make sure that your connection is secure by verifying the fingerprint of the server's SSH key. Lastly, make sure to use a strong password for your SSH account.

Step 1. You will need to create the SSH KEY. To do this, use the SSH-KEYGEN command. After that, you need to copy the ssh-key.

Step 2. You will now install the SSH-KEY. To do this, you will use the SSH-COPY-ID command. This works on a Unix or Linux server.

Step 3. Next, you need to add yourself to the Wheel or Sudi group admin account.

Step 4. Next, you should DISABLE password Login. This is to allow a root account.

Step 5. Now, you need to test your passwordless SSH-KEY Login. To do this, use: the SSH_USER@server-name command.

Security is always a top priority when it comes to choosing a web hosting provider. When it comes to SSH access, you want to make sure that your provider uses strong encryption methods and that their servers are well protected.

Ease of use is also important. You want a hosting provider that makes it easy to set up and manage your SSH access. And finally, price is always a factor you should consider if youre on a budget. You want to find a provider that offers competitive pricing without sacrificing quality or security.

So without further ado, here are the best hosting providers that offer SSH access:

Bluehost

Bluehost is a great choice for SSH access. They offer strong encryption methods and their servers are well protected. Bluehost is also easy to set up and manage, making it a great choice for those who are new to using SSH. And finally, Bluehost offers competitive pricing without sacrificing quality or security.

HostGator

HostGator is a top provider of secure and reliable web hosting. They offer SSH access on all of their plans, including shared hosting, VPS, and dedicated servers. HostGator uses strong encryption methods to keep your data safe and their servers are well protected. They also offer an easy-to-use control panel that makes it easy to manage your SSH access.

InMotion Hosting

InMotion Hosting offers strong security and easy management of SSH access. Their prices are competitive, and they offer a wide range of plans to choose from.

Some third-party programs are more secure than others. If you're using a program that isn't as secure, you may not be getting the same level of protection as you would with SSH. That said, there are some things you can do to help keep your data safe even when using a less secure program.

Here are a few tips:

- Make sure the program you're using is up to date. Older versions may have security vulnerabilities that have since been fixed.- Be careful about what information you share through the program. Don't share sensitive information unless you're confident it will be kept safe.

There are a few different ways to connect to a remote server without using SSH. Here is the list of SSH alternatives:

Eternal Terminal

Eternal Terminal is one way to connect to a remote server without using SSH. Its an open-source, cross-platform terminal emulator and telnet client. It can be used as a drop-in replacement for the standard Terminal app on macOS and Linux.

Features include:

- Supports SSH, telnet, and raw socket connections- Automatic reconnection- Scriptable with Lua- Cross-platform support for macOS, Linux, Windows, and more.

Mosh

Mosh is a free and open-source replacement for the SSH terminal application. Mosh can be used to connect to any server that has an SSH daemon running.

Mosh has several features that make it more reliable than SSH, including:

- UDP support: This means that Mosh can reconnect if the connection is dropped, without losing any data.- Mobile device support: Mosh works well on mobile devices with high latency or unstable connections.- Keyboard handling: Mosh supports most of the same keyboard shortcuts as SSH, making it easy to use for anyone familiar with SSH.

SSH is a powerful tool that can be used for a variety of tasks such as remotely logging into servers, running commands, and transferring files. It's important to note that SSH is not intended to be used as a general-purpose file transfer protocol, and should only be used when security is a concern.

By using SSH, you can encrypt your traffic so that anyone who is sniffing the network will not be able to read your data.

Continue reading here:
What is SSH access? Everything you need to know - TechRadar

Could technology companies have monitored ominous messages made by a gunman who Texas authorities say massacred 19 children and two teachers at an elementary school? Could they have warned the authorities? Answers to these questions remain unclear, in part because official descriptions of the shooting and the gunmans social media activity have continued to evolve. For instance, on Thursday Texas officials made significant revisions to their timeline of events for the shooting.

But if nothing else, the shooting in Uvalde, Texas, seems highly likely to focus additional attention on how social platforms monitor what users are saying to and showing each other.

A day after the Tuesday shooting, Texas Gov. Greg Abbott said this: There was no meaningful forewarning of this crime other than what Im about to tell you: As of this time the only information that was known in advance was posted by the gunman on Facebook approximately 30 minutes before reaching the school. Facebook posts are typically distributed to a wide audience. Shortly thereafter, Facebook stepped in to note that the gunman sent one-to-one direct messages, not public posts, and that they werent discovered until after the terrible tragedy.

HOW DID THE GUNMAN USE SOCIAL MEDIA?

By Thursday, new questions arose as to which and how many tech platforms the gunman used in the days before the shooting. The governors office referred questions about the gunmans online messages to the Texas Department of Public Safety, which didnt respond to emailed requests for comment.

Some reports appear to show that at least some of the gunmans communications used Apples encrypted iPhone messaging services, which makes messages almost impossible for anyone else to read when sent to another iPhone user.

Facebook parent company Meta, which also owns Instagram, says it is working with law enforcement but declined to provide details. Apple didnt respond to requests for comment.

The latest mass shootings in the US by active social-media users may bring more pressure on technology companies to heighten their scrutiny of online communications, even though conservative politicians Abbott among them are also pushing social platforms to relax their restrictions on some speech.

COULD TECH COMPANIES HAVE CAUGHT THE SHOOTERS MESSAGES?

It would depend on which services Salvador Ramos used. A series of posts appeared on his Instagram in the days leading up to the shooting, including photos of a gun magazine in hand and two AR-style semi-automatic rifles. An Instagram user who was tagged in one post shared parts of what appears to be a chilling exchange on Instagram with Ramos, asking her to share his gun pictures with her more than 10,000 followers.

Meta has said it monitors peoples private messages for some kinds of harmful content, such as links to malware or images of child sexual exploitation. But copied images can be detected using unique identifiers a kind of digital signature which makes them relatively easy for computer systems to flag. Trying to interpret a string of threatening words which can resemble a joke, satire or song lyrics is a far more difficult task for artificial intelligence systems.

Facebook could, for instance, flag certain phrases such as going to kill or going to shoot, but without context something AI in general has a lot of trouble with there would be too many false positives for the company to analyze. So Facebook and other platforms rely on user reports to catch threats, harassment and other violations of the law or their own policies.

SOCIAL PLATFORMS LOCK UP THEIR MESSAGES

Even this kind of monitoring could soon be obsolete, since Meta plans to roll out end-to-end-encryption on its Facebook and Instagram messaging systems next year. Such encryption means that no one other than the sender and the recipient not even Meta can decipher peoples messages. WhatsApp, also owned by Meta, already uses such encryption.

A recent Meta-commissioned report emphasized the benefits of such privacy but also noted some risks including users who could abuse the encryption to sexually exploit children, facilitate human trafficking and spread hate speech.

Apple has long had end-to-end encryption on its messaging system. That has brought the iPhone maker into conflict with the Justice Department over messaging privacy. After the deadly shooting of three US sailors at a Navy installation in December 2019, the Justice Department insisted that investigators needed access to data from two locked and encrypted iPhones that belonged to the alleged gunman, a Saudi aviation student.

Newsletter | Click to get the days best explainers in your inbox

Security experts say this could be done if Apple were to engineer a backdoor to allow access to messages sent by alleged criminals. Such a secret key would let them decipher encrypted information with a court order.

But the same experts warned that such backdoors into encryption systems make them inherently insecure. Just knowing that a backdoor exists is enough to focus the worlds spies and criminals on discovering the mathematical keys that could unlock it. And when they do, everyones information is essentially vulnerable to anyone with the secret key.

See the article here:
Explained: Social media and the Texas shooter's messages - The Indian Express