Hey CIA, You Held on to Security Flaw Information. That's Not How It Should Work
Hey CIA, You Held On To Security Flaw Information—But Now It's Out. That's Not How It Should Work

        
            
  
  
  Wikileaks today released documents that appear to describe software tools used by the CIA to break into the devices that we all use at home and work. While we are still reviewing the material, we have not seen any indications that the encryption of popular privacy apps such as Signal and WhatsApp has been broken. We believe that encryption still offers significant protection against surveillance.



The worst thing that could happen is for users to lose faith in encryption-enabled tools and stop using them. The releases do reaffirm that users should make sure they are using the most current version of the apps on their devices.  And vendors should move quickly to patch these flaws to protect users from both government and criminal attackers.



The dark side of this story is that the documents confirm that the CIA holds on to security vulnerabilities in software and devices—including Android phones, iPhones, and Samsung televisions—that millions of people around the world rely on. The agency appears to have failed to accurately assess the risk of not disclosing vulnerabilities to responsible vendors and failed to follow even the limited Vulnerabilities Equities Process. As these leaks show, we're all made less safe by the CIA's decision to keep --  rather than ensure the patching of -- vulnerabilities. Even spy agencies like the CIA have a responsibility to protect the security and privacy of Americans. 



          
    

          Related Issues
            



          Join EFF Lists
        
    

          Related Updates
        
        
    
      
                    The 2024 U.S. Election is Over. EFF is Ready for What's Next. 
            
    
  
  
  The dust of the U.S. election is settling, and we want you to know that EFF is ready for whatever’s next. Our mission to ensure that technology serves you—rather than silencing, tracking, or oppressing you—does not change. Some of what’s to come will be in uncharted territory. But we have...

          
  
  
    
      
                    The Human Toll of ALPR Errors
            
    
  
  
  This post was written by Gowri Nayar, an EFF legal intern. Imagine driving to get your nails done with your family and all of a sudden, you are pulled over by police officers for allegedly driving a stolen car. You are dragged out of the car and detained at gun...

          
  
  
    
      
                    "Is My Phone Listening To Me?"
            
    
  
  
  Whether you’re just starting to question some of the effects of technology in your life or you’re the designated tech wizard of your family looking for resources to share, Digital Rights Bytes is here to help answer some common questions that may be bugging you about the devices you use.

          
  
  
  
  
  
  
  
    
      
      Deeplinks Blog
 by Svea Windwehr
 | October 7, 2024
              Germany Rushes to Expand Biometric Surveillance 
            
    
  
  
  Germany is a leader in privacy and data protection, with many Germans being particularly sensitive to the processing of their personal data – owing to the country’s totalitarian history and the role of surveillance in both Nazi Germany and East Germany.

          
  
  
        
      Related Issues