encryption

Signal 介绍其安全备份功能上线一年来的重大改进，包括跨平台（Android、iOS、Linux、macOS、Windows）端到端加密备份、本地/自选设备备份、存储优化与付费备份附件回填功能，随 iOS 8.30 版本全面推出。

The author expresses surprise at the widespread use of Instagram for personal text communication among college students and criticizes Meta's removal of end-to-end encryption from the app.

In the UK, Apple users face inconsistent iCloud encryption protection due to the withdrawal of Advanced Data Protection for new users, with historical context on encryption debates and Apple's resistance to backdoors.

The article advocates for mesh networks to use message signing instead of encryption in amateur radio, highlighting benefits like authenticity and easier legal operation, while noting drawbacks such as reduced privacy.

The article discusses the privacy risks of AI chatbots like ChatGPT, Claude, and Gemini, and highlights tools such as Confer that use encryption to protect user conversations, providing a guide on using AI while safeguarding personal data.

Richard Stallman warns about the erosion of civil liberties due to government surveillance and encryption backdoors following the September 11 attacks.

As of macOS Tahoe, manually copying login keychain files between Macs no longer works on devices with Secure Enclave, due to encryption keys being tied to the source Mac's hardware.

OzBrain is a shared knowledge base for AI agents and teammates, offering encrypted, portable knowledge storage with no data training, as featured on Product Hunt.

Proxylity has launched DTLS listeners for their UDP Gateway, adding TLS-style encryption and authentication to UDP applications while preserving datagram transport for use cases like IoT and real-time telemetry.

An experiment demonstrated that reasoning states could transfer task information between AI models when replayed, suggesting information persistence through encrypted states. The authors question how to design stronger controls for this phenomenon.

This paper evaluates the usability of PGP 5.0, finding that most users couldn't successfully encrypt emails, arguing that security interfaces need specialized design standards.

British polling reveals strong public opposition to government access to encrypted messages, with high distrust of surveillance powers and concerns over security and privacy.

Ring has developed a new encryption method called TAKE that enhances privacy by limiting cloud access to video footage and restricting what data can be provided to law enforcement, while still enabling AI-powered smart features.

ONE is a privacy-focused identity infrastructure that uses passkey-powered encryption for anonymous age verification and proof of personhood, allowing users to control their data without exposing personal identifiable information.

Proton CEO Andy Yen discusses the need for AI to coexist with privacy in an interview, highlighting Proton's privacy-focused AI chatbot Lumo and the dangers of corporate surveillance in tech.

Reticulum is a cryptography-based networking stack that enables the creation of decentralized, sovereign mesh networks with strong encryption and no central control, allowing for resilient and private communications.

The article discusses concerns that AI could make software so secure that law enforcement loses surveillance capabilities, leading to a 'going dark' scenario with implications for security and privacy.

This article outlines a practical, phased path for enterprises to transition to post-quantum cryptography, framing the quantum threat as a manageable evolution rather than a sudden crisis and citing government timelines as useful guideposts.

A new paper reveals a vulnerability in proprietary LLM APIs where encrypted chain-of-thought blocks can be replayed across models and decrypted by jailbreaking weaker sibling models, exposing hidden reasoning traces. The issue has since been fixed by providers.

A research paper reveals an architectural vulnerability in proprietary LLM APIs where encrypted reasoning traces can be intercepted and injected into weaker models to extract chain-of-thought, private data, and enable invisible prompt injection across Anthropic, OpenAI, and Google. The attack also recovers PII and credentials from public repositories.