"Secure" Messaging Not As Protected As You Might Think

The Electronic Frontier Foundation (EFF), created a scorecard to measure the actual security of thirty-nine different “secure messaging” tools and apps, such as FaceTime, Skype and Google Hangouts. These were judged using criteria the EFF defined. The results may be very surprising to some who thought their messages were very secure. Of the more popular apps, Apple's messaging products had some of the highest scores although none had a perfect EFF score.

Many users are using messaging tools that are not every secure. The reason, the EFF post explains:

It boils down to two things: security and usability. Most of the tools that are easy for the general public to use don’t rely on security best practices--including end-to-end encryption and open source code. Messaging tools that are really secure often aren’t easy to use; everyday users may have trouble installing the technology, verifying its authenticity, setting up an account, or may accidentally use it in ways that expose their communications.

The EFF used seven different criteria in rating 39 messaging apps and tools. These 7 criteria were:

1. Is your communication encrypted in transit?


2. Is your communication encrypted with a key the provider doesn't have access to?


3. Can you independently verify your correspondent's identity?


4. Are past communications secure if your keys are stolen?


5. Is the code open to independent review?


6. Is the crypto design well-documented?


7. Has there been an independent security audit?

Using the 7 criteria, either a green checkmark or a red "no" symbol was placed on the Scorecard.

Only six apps received all green checkmarks: ChatSecure; CryptoCat; Signal/Redphone; Silent Phone; Silent Text; and TextSecure.

The EFF Scorecard results for some of the more popular messaging apps and tools:

• Apple FaceTime: 5 green checkmarks
• Apple iMessage: 5 green checkmarks 
• Facebook chat: 2 green checkmarks 
• Google Hangouts: 2 green checkmarks 
• Skype: 2 green checkmarks 
• SnapChat: 2 green checkmarks 
• WhatsApp: 2 green checkmarks 
• AIM: 1 green checkmark 
• Kik Messenger: 1 green checkmark 
• Yahoo! Messenger: 1 green checkmark

These scores may be surprising to some who thought their messages were more secure.

The EFF is quick to point out that the scorecard results “should not be read as endorsements of individual tools or guarantees of their security” and that closer examinations of many of the apps and tools will be conducted later.

Read the full EFF post and see the Scorecard: SECURE MESSAGING SCORECARD: Which apps and tools actually keep your messages safe?

EFF Secure Messaging Scorecard - Screenshot

Phishing Scams - How To Warn People

​Phishing is the use of an email that attempts to scam a user into revealing private information. These emails appear to come from legitimate companies and usually direct you to an "official" looking webpage to update your personal information.

A recent article in Consumer Affairs by Mark Huffman, "Why you might fall for a phishing scam" describes some of the problems there are in trying to warn people about phishing scams:

Information is power and, when it comes to the criminal underground, it might as well be gold. Scammers who pick up chunks of information about you can quickly pick your pocket.

An effective phishing scam almost always involves trickery and deception. A message in your email inbox is not what it first appears. ...

The challenge, then, is to find a way to identify these bogus pitches/threats and warn consumers before they make a costly error in judgment.

Two professors at the University of Alabama in Huntsville are studying phishing scams to determine the best way to help protect people from them:

The researchers say your response to a [phishing scam] warning is based on the strength of the authority issuing it. In addition, you have to understand it, remember it, change your attitude and be motivated enough to change your behavior. ...

[P]hishing is not just a problem of technology, though fixes are normally offered only in those terms. Rather, a lot of it involves psychology.

MY ADVICE: Until better warnings are developed, despite the temptation of a promised, highly prized reward, always remember if something seems too good to be true, it usually is. There is very little in life that is free.

Source: Why you might fall for a phishing scam by Mark Huffman via Consumer Affairs

Opinion Poll: More Enforcement of Texting Laws

Public opinion about texting and driving and enforcement of laws against it have changed. A new public opinion poll by the National Safety Council finds that almost 75% of respondents believe there should be more enforcement of laws against texting and driving. Most states have laws against texting and driving but no state has completely banned cell phone use.

According to a new National Safety Council public opinion poll about texting and driving:

• 73% of respondents think there should be more enforcement of texting laws; and
• 22% said current level of enforcement is fine.

As it relates to the types of penalties for texting and driving, respondents chose:

• Penalties including a point system that could lead to the loss of a driver's license or increased insurance costs: 52%
• Different levels of penalties for first vs. repeat offenses: 51%
• Large monetary fines: 50%

NSC president and CEO Deborah Hersman stated, 

Today, the polls show the public is behind stronger penalties because most people recognize that it will take more than awareness campaigns to stop this dangerous behavior [texting and driving].

No state has laws banning all cell phone use while driving. Forty-four states plus the District of Columbia ban texting for all drivers, and 13 states and the District of Columbia have laws banning handheld driver cell phone use.

Distracted driving is dangerous. Do not do it.

Source: National Safety Council: Public ready for stiffer penalties for texting while driving

No Constitutional Right To Sell Cold Beer in Indiana

A federal judge in Indiana dismissed a lawsuit filed by the Indiana Petroleum Marketers and Convenience Store Association that had challenge a state law that prohibits the sale of cold beer by convenience and grocery stores. The law only permits the sale of “ chilled” beer by package liquor stores. 

The Association alleged, at least in part, that the law violates the equal protection of the U.S. Constitution by favoring one class of retailer over another. 

The judge rejected the equal protection and other arguments. 

Source: Katie Heinz /TheIndyChannel: Judge rules no cold beer sales in grocery, convenience stores

Sexting and Surgery: Not the Right Prescription

According to a News Release from the Washington State Department of Health, Seattle doctor Arthur Zilberstein was suspended by the state Medical Quality Assurance Commission for alleged acts of disregarding patient safety. More specifically, from between at least April and August 2013, the Commission charges he: 

Frequently exchanged sexually explicit texts during surgeries when he was the responsible anesthesiologist; improperly accessed medical-record imaging for sexual gratification; and had sexual encounters at his workplace.

In addition, there were other allegations made against Zilberstein. The doctor has 20 days to respond to the charges and request a hearing. 

You can read the full News Release on the Washington State Department of Health's website: Sexting during surgery among allegations in suspension of physician’s license

Give To Lincoln Day - May 29, 2014

Today is “Give to Lincoln Day 2014” a day dedicated to people living in the city of Lincoln and Lancaster County, Nebraska, to donate money to local nonprofit organizations. The Lincoln Community Foundation, along with other sponsors, will be giving away an additional $300,000 to these nonprofits.

Last year, the second Give to Lincoln Day was held on May 16, 2013.  It was considered an enormous success as $2,119,318.00 was raised in just 24 hours to 253 nonprofit organizations by 6,624 individuals.

I would strongly urge everyone that lives or has lived in Lincoln or Lancaster County to donate what they can today as these nonprofits directly impact Lincoln, Lancaster County and the people that live here.

You can donate online at: www.givetolincoln.com

Read the full post by Jeffrey Lapin on Lapin Law Offices' website blog: Help Keep Lincoln Great - Give to Lincoln Day 2014

Presidents' Day - 2014

Today, February 17, 2014, is “Washington’s Birthday, ”which is more commonly known as “Presidents’ Day.” Although it originally was on Washington’s actual birthday, February 22, it was changed in 1971 to the third Monday in February. In addition, it is generally viewed as a day to celebrate all United States presidents.

We have listed some inspirational quotes from George Washington and Abraham Lincoln, two of our most famous presidents and both who had February birthdays.

Read the full post by Jeffrey Lapin on Lapin Law Offices' website blog: Presidents' Day 2014

Possible Kansas Deadlines For Court Decisions

A Kansas lawmaker has offered a bill that would limit the time period in which most Kansas courts have to issue decisions in cases. This bill seemingly has problems with both enforcement and the separation of powers between the legislative and judicial branches of government.

A hearing on the bill is set for hearing before the Kansas Senate Judiciary Committee today.

Read more by Jeffrey Lapin on Lapin Law Offices website blog: Kansas Lawmaker Wants Deadlines On Courts Issuing Decisions

FDA Wants 325mg Acetaminophen Limit

On January 14, 2014, the FDA asked health care professionals to stop prescribing dosages of medication that exceed 325 milligrams (mg) of acetaminophen and to help prevent, in most situations, a patient from receiving more.

Read more by Jeffrey Lapin on Lapin Law Offices’ website blog: FDA Asks Doctors and Pharmacists To Limit Acetaminophen

OfficeMax Letter Addressed to "Daughter Killed in Car Crash"

By: Jeffrey Lapin of Lapin Law Offices

OfficeMax sent a letter to Mike Seay, whose daughter had been killed in a car crash last year, with the second line: "Daughter Killed in Car Crash."

OfficeMax has issued a press release, which states, in part:

This mailing is a result of a mailing list rented through a third-party provider. We have reached out to the third-party mailing list provider to research what happened. Based on a preliminary investigation today we believe this to be an inadvertent error; and we are continuing the investigation.

Besides being extremely cruel and reminding this family of their loss, this shows how much information retailers have about their customers. 

Two lessons from this very unfortunate incident: 

1. To Consumers: Be careful what information you give out to companies. This information is likely being accumulated and sold.
   
2. To Marketers: Watch out what you send to customers or potential customers.

Source: Nesita Kwan / NBC 5 Chicago: OfficeMax Sends Letter to "Daughter Killedin Car Crash

Cell Phone Surveillance and Privacy Protections

A Yale study found that cell phone surveillance by law enforcement can cost as little as $.04 an hour. For manual surveillance, it could cost $250 an hour.

Decreasing costs of surveillance should trigger increased police surveillance under the Fourth Amendment otherwise there is too large of balance in favor of law enforcement over an individual’s privacy rights.

Read the full post by Jeffrey Lapin on Lapin Law Offices website: Cell Phone Surveillance Costs Can Change Privacy Protections