Amazon buys encrypted messaging app Wickr

Amazon Web Services Inc. said that it has acquired a startup called Wickr Inc. with an encrypted messaging app used by large enterprises and public sector organizations.

AWS didn’t disclose how much it’s paying for the startup. San Francisco-based Wickr previously raised more than $50 million from investors.

Amazon said in a statement it would incorporate Wickr in its Amazon Web Services (AWS) division which offers cloud computing and other services.

AWS will continue to offer Wickr services including end-to-end encrypted communications which meet certain regulatory requirements.

Wickr’s encrypted messaging app of the same name is in use at organizations such as the U.S. Department of Defense, publicly traded financial firm Discover Financial Services and McKinsey & Co. The app uses end-to-end encryption technology to scramble messages, as well as their file attachments, in a way that makes it impossible even for Wickr itself to view their content.

Every message is encrypted on the user’s device before it’s sent. As a result, when the packets containing the message pass through Wickr’s servers on their way to the recipient’s device, the startup can’t inspect them to access the user’s correspondence.

Hackers can bypass encryption by obtaining the encryption key that was used to scramble the data. To mitigate that risk, Wickr scrambles each message and file using a separate encryption key. That ensures that if hackers somehow manage to steal the key that was used to scramble one of the user’s messages, they can’t compromise any other correspondence.

AWS will continue to offer Wickr services including end-to-end encrypted communications which meet certain regulatory requirements. The acquisition will expand AWS’ portfolio of communications and collaboration services.

The acquisition of Wickr may advance the product strategy of not only AWS but also parent Amazon.com Inc., which could use the startup’s technology to build a secure messaging service for consumers.

Signal Introduces Usernames for Encrypted Messaging: A Secure Way to Connect

Signal, the encrypted messaging service, is launching a new feature in the coming weeks: support for usernames. This beta feature allows users to establish unique usernames, enabling connections without divulging phone numbers. source: Signal Blog To create a username, navigate to your settings and select "Profile." Once you've chosen a unique username, generate a QR code or link to share with others. Recipients can connect by entering your username into the chat bar. Usernames can be changed at any time, though previous usernames may be claimed by others. Signal began testing usernames last fall. Unlike social media platforms, Signal usernames do not serve as logins or public handles. They offer a discreet means of communication without revealing personal phone numbers. While a phone number is required to register for Signal, sharing it is optional. Usernames remain private and do not appear on profiles or in chats unless shared explicitly. As Randall Sarafa, Signal'

AT&T Resets Millions of Customer Passcodes After Data Leak: What You Need to Know

AT&T recently confirmed a significant data breach affecting over 7.6 million current customers and 65 million former customers. The leaked information, which dates back to 2019 or earlier, includes personal details like names, addresses, phone numbers, and social security numbers. Fortunately, financial information and call history were not compromised. In response to the breach, AT&T has reset passcodes for affected customers. Passcodes, usually four-digit numbers, serve as an additional layer of security when accessing accounts. However, security experts warn that the encrypted passcodes leaked alongside customer information could be easily deciphered, posing a risk of unauthorized account access. Affected customers are advised to set up free fraud alerts with major credit bureaus and remain vigilant for any suspicious activity related to their accounts. AT&T is proactively reaching out to impacted customers via email or letter to inform them about the breach and the meas

Safeguarding Internet Privacy: Supreme Court of Canada Upholds Protection of IP Addresses

In a recent ruling, the Supreme Court of Canada affirmed the significance of privacy rights concerning internet addresses. The court declared that police cannot simply obtain a suspect’s IP address without a court order, emphasizing the expectation of privacy that Canadian residents hold for such information. The court's decision stemmed from a case in 2017 involving Calgary police investigating fraudulent online activities at a liquor store. Initially, police demanded IP addresses from a credit card processor, which eventually led to obtaining subscriber information from Telus. This information was pivotal in making arrests and securing convictions in multiple offenses. Despite previous convictions, the accused contested the legality of obtaining IP addresses without proper authorization. The Supreme Court, in a 5-4 decision, asserted that IP addresses carry a reasonable expectation of privacy, necessitating judicial approval before access. The ruling emphasizes that obtaining jud

THEHACKCITY

Search This Blog