cryptogon.com

The change last year to a Department of Defense manual on procedures governing its intelligence activities was made possible by a decades-old presidential executive order, bypassing congressional and court review.

The new manual, released in August 2016, now permits the collection of information about Americans for counterintelligence purposes “when no specific connection to foreign terrorist(s) has been established,” according to training slides created last year by the Air Force Office of Special Investigations (AFOSI).

The slides were obtained by Human Rights Watch through a Freedom of Information Act request about the use of federal surveillance laws for counter-drug or immigration purposes and shared exclusively with Reuters.

The Air Force and the Department of Defense told Reuters that the documents are authentic.

The drug is one of the controversial group of antibiotics, including Levaquin, Cipro, Avelox and other fluoroquinolones. Public Citizen petitioned the FDA in 1996 and again in 2006, to issue Black Box warnings for tendon rupture and tendinitis. Had warnings been issued, the death toll from Levaquin– reputedly more than 5,000 — and the tens of thousands who were debilitated with life-threatening diseases would likely have been averted. (Read risks at RxList)

Bringing former government cyber warriors on board at companies can facilitate interactions with U.S. agencies like the NSA or CIA as well as help the firms understand how to build stronger systems on their own.

Only you can read your emails
ProtonMail’s encryption means that nobody but you can read the messages in your mailbox. In fact, not even ProtonMail has the ability to read your messages. We believe that your private communications should be exactly that: private. On the other hand, Gmail can and does read every single one of your emails. If you are not comfortable giving Google unlimited access to all of your intimate communications, then ProtonMail’s approach to data privacy provides more security.

Improved security in the event of a data breach
ProtonMail uses Zero Knowledge Encryption, which means it is technically impossible for us to decrypt user messages. Zero Knowledge Encryption applies to all messages in your mailbox, even messages which did not come from other ProtonMail users.

This provides stronger security compared to Gmail because even if ProtonMail were somehow breached, user messages remain secure because ProtonMail only stores encrypted messages. In other words, if an attacker steals emails from ProtonMail, the attacker would not have the ability to decrypt them, as even ProtonMail cannot decrypt them. The use of Zero Knowledge Encryption therefore adds a strong layer of resiliency against catastrophic data breaches.

No tracking and logging
Google records literally every action done by its users. This includes your IP address, every search that you do, which emails you open, which websites you visit, and much more. ProtonMail takes the opposite approach and by default, does not monitor or record user activity, not even IP addresses.

Encryption for messages in transit
In addition to the security of emails at rest, one also needs to consider the security of emails in transit. Both ProtonMail and Gmail provide extra protection by using TLS encryption whenever possible when communicating with external email providers. However, ProtonMail goes one step further by also supporting end-to-end encryption.

In simple terms, end-to-end encryption means that messages are encrypted on the sender’s device (before it even leaves their computer or mobile phone), and can only be decrypted by the recipient on their device. This means that no third party which transmits or intercepts the email between the sender and recipient (i.e. internet service providers, the NSA, or even ProtonMail as the mail server operator) can decrypt and view the message.

This powerful protection is possible because ProtonMail has PGP email encryption built-in. End-to-end encryption is done automatically without user interaction whenever messages are exchanged between ProtonMail users. For an enterprise using ProtonMail for their email hosting, this means all communications between employees are automatically protected with end-to-end encryption. ProtonMail can also support sending/receiving end-to-end encrypted messages with recipients who are not using ProtonMail. The use of end-to-end encryption makes ProtonMail a better choice for security conscious individuals and organizations.

Smaller attack surface
ProtonMail only provides email and VPN services, so your Proton account is not connected to hundreds of other services. Compared to Google, ProtonMail is a much smaller target, and there is less risk that a vulnerability in another service breaches your email account.

One might argue that Gmail is more secure because it is a gigantic company with more engineers. However, there is ample evidence that demonstrates that security is not correlated to company size. In fact, large companies often are the most vulnerable due to larger attack surfaces, Yahoo and Equifax being two recent examples. There is no such thing as 100% security and history has shown that any system can be breached. ProtonMail’s unique ability to protect user data even in the event of a breach is a valuable benefit.

Strong authentication
ProtonMail uses Secure Remote Password in order to protect user credentials. This makes it difficult to conduct a brute force attack to obtain user credentials, even if the attacker has control over the victim’s network. Both Gmail and ProtonMail support two factor authentication (2FA), which provides an additional layer of security by requiring that an unique code be entered on each login (the code is usually generated on a separate hardware device). However, ProtonMail goes a step further by only using strong 2FA methods, and disallowing weaker methods such as 2FA over SMS.

Protected by Swiss and European privacy laws
ProtonMail stores user data exclusively in European countries with strong privacy protections such as Switzerland. This means that unlike Gmail, ProtonMail does not fall under the jurisdiction of intrusive US laws (such as the Foreign Intelligence Surveillance Act), and cannot be coerced into working for the NSA. With ProtonMail, you can be certain that your data always remains in Europe, in full compliance with EU privacy regulations. ProtonMail’s approach makes us compliant with Article 25 of the EU General Data Protection Regulation (GDPR) which mandates that services adhere to the principle of Privacy by Design.

Zero knowledge encryption means that even if a complaint is brought in a Swiss court that meet the high requirements for data disclosure, only encrypted emails could be handed over. As a Swiss company, ProtonMail cannot be forced to hand over data in cases of US or EU civil litigation. Thus, even if you don’t care about privacy, ProtonMail is still the ideal choice for businesses, journalists, activists, and individuals who are worried about the overreach of US government agencies or courts.

No conflict of interest
In addition to the technological and legal differences, ProtonMail and Gmail also have very different business practices. Whereas Gmail was created to lock users into the world’s largest and most invasive advertising platform, ProtonMail was created with the goal of protecting privacy rights and democracy in the digital age.

…

Google makes money by providing Gmail and other services for free in order to acquire personal data, which it then sells to advertisers. On the other hand, ProtonMail first priority is always user privacy, because our only customers are our users – not advertisers. Thus, choosing between Gmail and ProtonMail is also a personal choice: Do you want to sacrifice your privacy or instead use a service that respects privacy?

The idea is that an automated system, thought to still be in development, will use the database to pick out individual voices in telephone and other conversations, boosting the government’s already expansive surveillance capabilities.

The concerns echo — although to a lesser degree — the shock in the West six decades ago when the Soviets launched the Sputnik satellite, sparking a space race.

In quick succession, China in recent months has utilized a quantum satellite to transmit ultra-secure data, inaugurated a 1,243-mile quantum link between Shanghai and Beijing, and announced a $10 billion quantum computing center.

“To me, what is alarming is the level of coordination of what they’ve done,” said Christopher Monroe, a physicist and pioneer in quantum communication at the University of Maryland.

Perhaps more than the accomplishments of the Chinese scientists, it is the resources that China is pouring into the research into how atoms, photons and other basic molecular matter can harness, process and transmit information.

“It doesn’t necessarily mean that their scientists are better,” said Martin Laforest, a physicist and senior manager at the Institute for Quantum Computing at the University of Waterloo in Ontario, Canada. “It’s just that when they say, ‘We need a billion dollars to do this,’ bam, the money comes.”

The engineering hurdles that China has cleared for quantum communication means that the United States will lag in that area for years.

That means the long-dormant concrete pads at the ends of this base’s 11,000-foot runway — dubbed the “Christmas tree” for their angular markings — could once again find several B-52s parked on them, laden with nuclear weapons and set to take off at a moment’s notice.

“This is yet one more step in ensuring that we’re prepared,” Gen. David Goldfein, Air Force chief of staff, said in an interview during his six-day tour of Barksdale and other U.S. Air Force bases that support the nuclear mission. “I look at it more as not planning for any specific event, but more for the reality of the global situation we find ourselves in and how we ensure we’re prepared going forward.”