LONDON (AP) — Following a comprehensive hacking campaign that compromised the communications of an unspecified number of Americans, cybersecurity officials in the U.S. are urging individuals to enhance the privacy of their communications by using encryption.
The hacking incident, which originated in China, prompted federal cybersecurity authorities to issue a detailed list of recommendations for U.S. telecommunications companies like Verizon and AT&T, which were directly targeted. Among the advice provided is a crucial tip that is applicable to all of us: “Ensure that traffic is end-to-end encrypted to the maximum extent possible.”
Understanding End-to-End Encryption
End-to-end encryption (E2EE) ensures that messages are scrambled so that only the sender and the intended recipient can read them. If intercepted, the message appears as meaningless data that cannot be deciphered without an encryption key. Historically, law enforcement officials have been wary of this encryption method, as it prevents tech companies from accessing message content, making it difficult for them to comply with requests for data from authorities.
Texting with Enhanced Security
Officials revealed that the hackers primarily targeted metadata related to a significant number of customers, including identifiers for calls and text messages, and successfully accessed the content of texts from a smaller group of victims.
If you use an iPhone, messages sent to another iPhone user will utilize end-to-end encryption, indicated by blue text bubbles, which signal encrypted iMessages. Similarly, Android users can benefit from encryption when using Google Messages, where a lock icon next to the timestamp signifies that their messages are secure.
However, there’s a vulnerability when iPhone and Android users communicate via text. In these cases, messages only employ Rich Communication Services (RCS), an upgraded system for instant messaging that does not provide the same level of security as traditional SMS and MMS. Apple has noted that RCS messages “aren’t end-to-end encrypted,” potentially exposing them to third-party interception.
Furthermore, Samsung has indicated in a recent press release that “encryption is only available for Android-to-Android communication,” highlighting the limitation of RCS in cross-platform messaging security.
Utilizing Secure Chat Apps
To enhance your texting security, experts recommend using encrypted messaging apps. One popular choice is Signal, which employs end-to-end encryption across all messages and voice calls. The independent nonprofit organization behind Signal assures users that it will never sell or lease their data and has made its source code publicly available for independent security audits.
Signal’s encryption method is so trusted that it has been incorporated into WhatsApp, allowing a secure messaging experience for its users. Additionally, Facebook Messenger, owned by Meta Platforms, automatically uses end-to-end encryption for its conversations, providing a similar level of protection.
What about Telegram?
Despite its popularity, Telegram does not enable end-to-end encryption by default. Users must manually activate this option, and it is not available for group chats. Cybersecurity experts advise caution when using Telegram for private conversations, as only its optional ‘secret chat’ feature offers end-to-end encryption. Moreover, Telegram has a reputation for attracting scammers and criminals, which was underscored by the recent arrest of its founder in France.
Making Calls Securely
For voice calls, instead of using traditional cellular networks, you can opt for apps like Signal and WhatsApp, both of which encrypt calls with the same robust technology they use to encrypt messages. iPhone users can also utilize FaceTime, while Android users can take advantage of the Google Fi service—both offering end-to-end encryption.
Keep in mind, for all these options, the person you’re contacting must also have the corresponding app installed for secure communication. Furthermore, WhatsApp and Signal users can adjust their privacy settings, including options to hide their IP addresses during calls, thereby obscuring their physical locations.
Is there a technology topic that you believe requires clarification? Feel free to reach out to us at [email protected] with your suggestions for future editions of One Tech Tip.
