Connect with us

Published

on

PQ3 HAS ARRIVED — iMessage gets a major makeover that puts it on equal footing with Signal How Kybers and ratcheting are boosting the resiliency of Apple’s messaging app.

Dan Goodin – Feb 22, 2024 12:37 am UTC EnlargeGetty Images reader comments 98

iMessage is getting a major makeover that makes it among the two messaging apps most prepared to withstand the coming advent of quantum computing, largely at parity with Signal or arguably incrementally more hardened.

On Wednesday, Apple said messages sent through iMessage will now be protected by two forms of end-to-end encryption (E2EE), whereas before, it had only one. The encryption being added, known as PQ3, is an implementation of a new algorithm called Kyber that, unlike the algorithms iMessage has used until now, cant be broken with quantum computing. Apple isnt replacing the older quantum-vulnerable algorithm with PQ3it’s augmenting it. That means, for the encryption to be broken, an attacker will have to crack both. Making E2EE future safe

Further ReadingThe Signal Protocol used by 1+ billion people is getting a post-quantum makeoverThe iMessage changes come five months after the Signal Foundation, maker of the Signal Protocol that encrypts messages sent by more than a billion people, updated the open standard so that it, too, is ready for post-quantum computing (PQC). Just like Apple, Signal added Kyber to X3DH, the algorithm it was using previously. Together, theyre known as PQXDH.

iMessage and Signal provide end-to-end encryption, a protection that makes it impossible for anyone other than the sender and recipient of a message to read it in decrypted form. iMessage began offering E2EE with its rollout in 2011. Signal became available in 2014. Advertisement

One of the biggest looming threats to many forms of encryption is quantum computing. The strength of the algorithms used in virtually all messaging apps relies on mathematical problems that are easy to solve in one direction and extremely hard to solve in the other. Unlike a traditional computer, a quantum computer with sufficient resources can solve these problems in considerably less time.

No one knows how soon that day will come. One common estimate is that a quantum computer with 20 million qubits (a basic unit of measurement) will be able to crack a single 2,048-bit RSA key in about eight hours. The biggest known quantum computer to date has 433 qubits.

Whenever that future arrives, cryptography engineers know its inevitable. They also know that its likely some adversaries will collect and stockpile as much encrypted data now and decrypt it once quantum advances allow for it. The moves by both Apple and Signal aim to defend against that eventuality using Kyber, one of several PQC algorithms currently endorsed by the National Institute of Standards and Technology. Since Kyber is still relatively new, both iMessage and Signal will continue using the more tested algorithms for the time being. Page: 1 2 Next → reader comments 98 Dan Goodin Dan Goodin is Senior Security Editor at Ars Technica, where he oversees coverage of malware, computer espionage, botnets, hardware hacking, encryption, and passwords. In his spare time, he enjoys gardening, cooking, and following the independent music scene. Advertisement Channel Ars Technica ← Previous story Next story → Related Stories Today on Ars

Continue Reading

Entertainment

Yvette Fielding says she was assaulted by Rolf Harris on Blue Peter and left alone with Jimmy Savile

Published

on

By

Yvette Fielding says she was assaulted by Rolf Harris on Blue Peter and left alone with Jimmy Savile

Blue Peter’s youngest ever presenter has claimed disgraced entertainer Rolf Harris sexually assaulted her when she was a teenage host of the children’s show.

Yvette Fielding, who joined the long-running BBC programme aged 18, told the Sun newspaper how the paedophile predator squeezed and patted her bottom after finding herself alone with him in a TV studio.

The now 55-year-old also recalled an uncomfortable experience with “grotesque” Jimmy Savile, who was later revealed to be one of Britain’s most prolific sex offenders.

Fielding has questioned the role of the BBC in allowing their behaviour, arguing people in the industry “must have known”.

Fielding in 1987. Pic: John Gooch/Shutterstock
Image:
Fielding joined Blue Peter in 1987. Pic: John Gooch/Shutterstock

She became a Blue Peter presenter in 1987 and left five years later, going on to host a string of BBC programmes including The Heaven And Earth Show, The General and City Hospital.

Recounting the incident with Harris, she said: “It was very confusing and shocking – just bizarre to think Rolf Harris was squeezing and patting my bottom and I am standing there, thinking ‘I don’t know what to do’.

“Other people in the industry must have known what he was like and you left me alone in the studio with him.

“That shouldn’t have happened. I must have been 18 or 19.

“I think a lot of them did know.”

Yvette Fielding. Pic: PA
Image:
The presenter says the Harris incident ‘shouldn’t have happened’. Pic: PA

Read more on Sky News:
Video appears to show Sean Combs assaulting singer in 2016

Anne Robinson confirms relationship with Queen’s ex-husband

Harris was a household favourite for decades before his dramatic downfall after being convicted of a string of indecent assaults against young girls.

Stripped of his honours, he died of neck cancer and old age in May last year, aged 93.

Jimmy Savile pictured in 2004
Image:
Jimmy Savile was ‘grotesque’. Pic: PA

He was also known to be associated with Savile, who managed to conceal his crimes until after his death in 2011.

On her meeting with the late depraved DJ, Fielding told the Sun: “He took my hand and started stroking it. ‘Look into my eyes’, he said, ‘And tell me what you’re thinking’.”

“He was grotesque,” she added.

“I just don’t understand why the BBC allowed him to get away with that for as long as he did.”

Savile worked for much of his career at the BBC presenting programmes including Top Of The Pops and Jim’ll Fix It.

The BBC has been contacted for comment.

Continue Reading

Business

Employees at fintech giant Revolut to cash in with $500m share sale

Published

on

By

Employees at fintech giant Revolut to cash in with 0m share sale

Bosses at Revolut, Britain’s biggest fintech, are drawing up plans to allow employees to cash in with a sale of stock valued at hundreds of millions of pounds.

Sky News has learnt that the banking and payments services provider is lining up investment bankers to coordinate a secondary share sale worth in the region of $500m (£394m).

Morgan Stanley, the Wall Street bank, is expected to be engaged to work on the proposed stock offering, which will take place later this year.

Money blog: How to sell your home without an estate agent

City sources said this weekend that Nik Storonsky, Revolut’s co-founder and chief executive, was determined to seek a valuation of at least the $33bn (£26bn) it secured in a primary funding round in 2021.

“This will not be a down-round,” said one person familiar with Revolut’s thinking.

Although the fintech, which has more than 40 million customers, is not planning to raise new capital as part of the transaction, any sizeable share sale will still be closely watched across the global fintech sector.

It is expected to be restricted to company employees.

Revolut ranks among the world’s largest financial technology businesses, with revenue virtually doubling last year to around £1.7bn, according to figures expected to be published in the coming months.

Founded in 2015, it has experienced a string of regulatory and compliance challenges, with reports last year highlighting its release of funds from accounts flagged by the National Crime Agency as suspicious.

The company’s growth has taken place at breakneck speed, with customer numbers soaring from 16.4m at the point of the Series E fundraising nearly three years ago.

Pic: Revolut
Image:
The company’s growth has taken place at breakneck speed. Pic: Revolut

Insiders argued that despite the protracted downturn in tech valuations over the last two years, Revolut’s relentless expansion would easily justify it maintaining its status as Britain’s most valuable fintech.

Monzo, the UK-based digital bank, recently confirmed a Sky News story that it had closed a funding round worth nearly £500m, including backing from an arm of Google’s owner, Alphabet, and a Singaporean sovereign wealth fund.

Elsewhere, however, the funding landscape has been bleaker, with a growing number of tech companies which had attracted unicorn valuations of more than $1bn now struggling to stay afloat.

Read more on Sky News:
Body Shop administrator to launch auction of stricken chain
Rishi Sunak leapfrogs the King in new rich list

Revolut has allotted stock options to many of its 10,000 employees as part of their compensation packages, although it was unclear how many would be eligible to dispose of equity in the transaction later this year.

A source close to the company said it had had numerous expressions of interest from prospective investors.

Revolut’s current shareholders include SoftBank’s Vision Fund and Tiger Global.

News of the proposed share sale comes as Revolut’s investors continue to await positive news about its application for a UK banking licence.

A smartphone displays a Revolut logo on top of banknotes
Image:
Revolut applied for a UK banking licence more than three years ago. Pic: Reuters

The company applied to regulators to become a bank in Britain more than three years ago, but has so far failed to secure approval.

Mr Storonsky has been publicly critical of the delay, and last year questioned the approach of British regulators and politicians, as he suggested that he would not contemplate a listing on the London Stock Exchange.

An initial public offering of Revolut appears to still be some way off, although it would not surprise investors or industry peers if it initiated a listing process in the next couple of years.

One person close to Revolut said board members were among those expected to participate in the secondary share sale, although further details were unclear this weekend.

Listen and subscribe to The Ian King Business Podcast here

The company is chaired by Martin Gilbert, the City veteran who has faced governance and performance challenges at Assetco, the London-listed asset manager he runs.

Its other directors include Michael Sherwood, the former Goldman Sachs executive who was jointly responsible for its operations outside the US and who was regarded as one of the most skilled traders of his generation.

An external shareholder in the company said the exclusion of non-employees from the deal could draw criticism from some investors.

Revolut has conducted secondary share sales of this kind in the past, including after its 2021 Series E round.

This weekend, Revolut declined to comment.

Continue Reading

Environment

This new $5,000 electric drone can carry you and your brave friends

Published

on

By

This new ,000 electric drone can carry you and your brave friends

As I peruse Alibaba for all sorts of fun and interesting electric vehicles, I often stumble across seemingly outlandish products that often have a real use case behind them. The best of those make it into the recurring Awesome Weird Alibaba Electric Vehicle of the Week column, and that’s precisely where this man-carrying drone lands today.

To be fair, I’m not sure the main purpose of this flying EV is to carry people.

They do advertise it with a few images of a person suspended beneath it to show off the drone’s carrying capacity. And at least one of the photos seems like it’s actually non-recreational as the guy appears to be in the process of accessing a communications tower platform.

I guess for those who don’t want to spend half an hour climbing a ladder to change a light bulb or swap a connector, a drone might be a shortcut to some of these difficult access areas. It could also open up the worker pool for that job to not only people with Popeye’s forearms.

But manned work doesn’t seem like the main use case for a heavy-lift drone like this.

Instead, it appears to me that it’s primarily a work drone designed for utility tasks where you’d want to lift a serious amount of weight in tools or supplies.

The stated 200 kg (440 lb) weight-carrying capacity is quite impressive, especially since the unit only weighs 40 kg (88 lb) by itself. But you’ll want that extra lift potential for a number of its other advertised uses, such as a water sprayer for cleaning tasks or a heavy-lift drone for moving supplies in mountainous or otherwise hard-to-reach areas.

Some companies even seem to use them to clean wind turbine blades.

Interestingly, the drone can either run off of its 16 on-board batteries or can be tethered to an electrical cable for continuous flying. For longer duration jobs like window washing, that’s probably the better way to go.

The batteries only offer 20 minutes of flying time, and replacing 16 batteries with freshly charged units would probably take you another 20 minutes on the ground. That limited battery flight time also means that if you are going to use it to carry workers up onto aerial platforms, you better not take the scenic route.

The drone does come with three parachutes that can automatically deploy if it enters free fall, which makes me feel only marginally better about hanging onto that rope ladder and going for a ride.

The factory also advertises that the controls can be run tethered, so you don’t have to use radio frequency in areas where it might be jammed. That has me a bit worried about what other uses they’re envisioning for a heavy-lift drone like this, but I’ll leave that for another day.

How our resident Photoshop wizard imagines I’d look on one of these things

With an advertised price of US $5,000, it also seems weirdly affordable. I have no idea what the going rate for a man-lift drone is these days, but I probably would have guessed more than that. You can barely buy an electric motorcycle for that much, and those only move in a single plane.

Of course, the catch is that you have to buy two of them, as that’s the minimum order quantity from the seller. So if you’re crazy enough to strap into one of these things, you better find an equally crazy friend for the second one.

And in case it wasn’t yet clear, please don’t actually try to buy one of these from Alibaba. This column is a tongue-in-cheek exercise in exploring just how amazing and interesting the world’s largest EV provider’s catalog of wacky vehicles has become. But I am certainly not encouraging anyone to run the financial and emotional gauntlet of trying to buy something expensive on Alibaba. I’ve been there and done that, and it’s not for the timid.

FTC: We use income earning auto affiliate links. More.

Continue Reading

Trending