Web giants encrypt their services—but leaks remain

Status
Not open for further replies.

Venustus

Level 59
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Dec 30, 2012
4,809
It's been a year since Edward Snowden's leak of National Security Agency documents triggered a firestorm around cloud service providers' privacy protections (or lack thereof). Since last summer, the giants of the Internet have pledged to do more to encrypt their Internet traffic—and in some cases, their internal network traffic—to protect it from both government surveillance and other prying eyes. But an Ars investigation reveals that data continues to leak.

Although companies have made great strides in securing their Internet services, implementations of SSL and other security standards aren’t always consistent across applications. And some of the gaps are intentional—left there to meet the demands of certain customers, to support older applications, or to make integration with other services faster (and more profitable).

The Electronic Frontier Foundation (EFF) has published a chart that shows which major Internet services support SSL and other security “best practices,” including encrypted data center links, perfect forward secrecy, and encrypted communications with other providers’ e-mail services. Eight major Internet companies—Google, Microsoft, Yahoo, Twitter, Facebook, Dropbox, Sonic.net, and SpiderOak—have implemented or are in the process of implementing all of EFF’s recommended security practices.

But the chart doesn’t tell the whole story of where things stand today. In conjunction with National Public Radio reporter Steve Henn and Pwnie Express CTO Dave Porcello, Ars recently conducted an experiment to see which parts of our online lives remain vulnerable to digital eavesdropping.

As part of that project, we specifically examined common services from four major Web and mobile service providers—Google, Yahoo, Microsoft, and Facebook—to see what information remains unencrypted. We will look at other service providers in the weeks and months to come.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top