Happy #WorldPasswordDay! Don't forget your security is only as strong as the weakest link. We have several resources to help you understand how passwords can be compromised and what you should do to protect them.
First of all, should you use a "password" or a "passphrase"? The answer is that it depends. Learn about the password vs. passphrase debate: protonmail.com/blog/protonmai…
Next, explore the considerations behind how long your password should be. It turns out, even some long passwords can be hacked, so "length" is not synonymous with "secure." protonmail.com/blog/how-long-…
And finally, here are our three steps to create a strong password: 1. Use a password manager. 2. Generate unique, random passwords for all your accounts. 3. Use a long passphrase for passwords you must memorize.
More details: protonmail.com/blog/how-to-cr…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Security researchers say a design flaw in WhatsApp’s contact-lookup feature has enabled what they call the “largest data leak in history”, exposing billions of phone numbers without breaking encryption.
Normally the lookup process would incur rate limits, normally...
1/5
But in this case, they were able to run through 7k phone numbers /second (and session), using 63bn numbers generated by their tool.
None of this required decrypting a single message.
They confirmed 3.5bn phone numbers, more than the number officially stated by WhatsApp.
2/5
More than 57% of the active accounts they grabbed had a profile picture; two thirds of this group had images containing human faces.
~29% had text in their profile which could be used to discover more about them, such as their sexuality, political views, or drug use.
3/5
How much do you know about the most advanced censorship system in the world?
Framed as protection against "Western influence", China's Great Firewall controls the political + economic narrative for China's 700M+ users (a quarter of all internet users).
1/8
But it doesn't stop there...
A massive leak of 100,000+ documents has revealed that a Chinese company, Geedge Networks, is exporting GFW-style tech to authoritarian regimes worldwide.
Recipients include Kazakhstan, Ethiopia, Pakistan, Myanmar, & others.
2/8
Leaked job ads from them seek English speakers to work in Pakistan, Malaysia, Bahrain, Algeria, and India, all of which have track records of censorship.
One co-founder of Geedge Networks is Fang Binxing - known as the “Father of the Great Firewall.”
3/8