Wired Security Spoken Edition

When you lose the key to your bike lock you borrow bolt cutters. When your door is jammed you look up a locksmith. And when you need targeted surveillance of a smartphone, you call your cyberarms dealer. Naturally! For bad actors and nation states, sometimes all it takes to access someone’s private text messages, browsing history, calls, emails, calendar, location, contacts, and apps, is a big enough check. Although maybe not as big as you’d think. Learn about your ad choices: dovetail.prx.org/ad-choices

Chris Rasmussen is an evangelist, and his message is crowdsourcing. As a career analyst inside the National Geospatial-Intelligence Agency, Rasmussen’s sermons have been limited to a closed top-secret community. But this week, he’s going public with his most radical idea to date, in the form of a smartphone app for senior US intelligence officers. Learn about your ad choices: dovetail.prx.org/ad-choices

On a desert-cold, moonlit night just over two years ago, Amir Taaki stepped off the Iraqi sand into a rubber dinghy floating in the Tigris River. The boat was just wide enough to fit his compact body next to the much larger American ex-Army machine gunner sitting beside him. Learn about your ad choices: dovetail.prx.org/ad-choices

As the internet continues to limp toward better security, sites have increasingly embraced HTTPS encryption. You’ve seen it around, including here on WIRED; it’s that little green padlock in the upper lefthand corner, and it keeps outside eyes from snooping on the details of your time online. Today, the biggest porn site on the planet announced that it’s joining those secured ranks. Pornhub’s locking it down, and that’s a bigger deal than you’d think. Learn about your ad choices: dovetail.prx.org/ad-choices

On Tuesday, the House of Representatives voted to reverse regulations that would have stopped internet service providers from selling your web-browsing data without your explicit consent. It’s a disappointing setback for anyone who doesn’t want big telecoms profiting off of their personal data. So what to do? Try a Virtual Private Network. It won’t fix all your privacy problems, but a VPN’s a decent start. Learn about your ad choices: dovetail.prx.org/ad-choices

This article was published in partnership with The Marshall Project, a nonprofit news organization that covers the US criminal justice system. Sign up for their newsletter, or follow The Marshall Project on Facebook or Twitter. In the new cop drama APB, an Elon Musk-type billionaire engineer buys a beleaguered Chicago police precinct to avenge his buddy's murder. Learn about your ad choices: dovetail.prx.org/ad-choices

A hacker group called Turkish Crime Family says that it can access 250 million iCloud accounts, and will do so on April 7 to reset the password, locking people out of their accounts. They’ve even threatened to wipe people’s linked iPhones if Apple doesn’t pay up. And while it’s hard to tell how legitimate the threat is, their assertions make now as good a time to lock down your iCloud as ever. Learn about your ad choices: dovetail.prx.org/ad-choices

As so many of them have been lately, it was a wild week in security. Monday, FBI Director James Comey confirmed that an ongoing investigation into the Trump campaign's ties to Russia began last July. The GOP responded minutes later by charging hard against-leaks. That really set the tone! House Intelligence Committee chairman Devin Nunes added some misplaced intrigue by suggesting Trump or his associates had been caught up in surveillance, which isn't what it sounds like. Learn about your ad choices: dovetail.prx.org/ad-choices

Because you care greatly about your personal security hygiene, you’ve already enlisted two-factor authentication to help protect most of your online accounts. That’s good! Instagram, though, hasn’t given you the option. That changes today. Go get it. While Instagram had made two-factor available to a select group of users previously, the extra layer of protection is now available to all, meaning you, meaning it’s time to fiddle with some settings. Learn about your ad choices: dovetail.prx.org/ad-choices

First, the good news: Half of all Android devices have gotten fairly recent security updates, patching the hackable flaws that leave users vulnerable to digital crime and espionage. The bad news? The other half hasn’t. In an annual report on the security of the world’s 1.4 billion Android devices that Google released today, the company touts the ever-improving state of Android security. Learn about your ad choices: dovetail.prx.org/ad-choices

Barack Obama did not wiretap Trump Tower ahead of the presidentialelection. The definitive word on this came today from two people who would know: Richard Burr and Mark Warner, who leadthe Senate Select Committee on Intelligence. Of course,President Donald Trump refuses to believe this, even though it is the best news he could hope for. Learn about your ad choices: dovetail.prx.org/ad-choices

Nothing much of interest happened in the world of cybersecurity this week. Kidding! But wouldn't that be nice? If we were living in a simpler time when innocent victims weren't hit by a new, weird hack every day, and international cyberespionage wasn't undermining everything from governments to businesses to Twitter accounts? You could just argue about who won The Bachelor and move on with your life. Unfortunately, this is 2017, so naturally this week's hacks were actually completely ridiculous. Learn about your ad choices: dovetail.prx.org/ad-choices

You know not to click on links in sketchy emails. Everybody knows that. And yet, people fall for these phishing attacks all the time. Case in point: The FBI suspects a phishing email is how the Russian hackers who were indicted this week got into Yahoo. Ditto for the breach of the Democratic National Committee, and the Sony Pictures hack. In fact, there’s currently a Gmail phishing scam going around that even super savvy techies are falling for. Learn about your ad choices: dovetail.prx.org/ad-choices

Last night, a swath of Twitter accounts with large followings—including Duke University, BBC North America, Forbes, and Amnesty International—tweeted out the same message, in Turkish, that included a swastika and hashtags that translate to “Nazi Germany, Nazi Holland.” The hacked accounts, which apparently stem from increasing vitriol between Turkey and Holland, appear to have all been restored. Learn about your ad choices: dovetail.prx.org/ad-choices

On February 26th, WIRED's security reporter Andy Greenberg received an email from Sophia Tupolev, the head of communications at the security firm Beame.io, saying she'd found a security issue on WIRED.com. Tupolev's company had discovered sensitive data in the source code on many pages on our site, including obfuscated, "hashed" passwords and email addresses for current and former WIRED writers. We corrected the problem right away. Learn about your ad choices: dovetail.prx.org/ad-choices

Amid so many recent high-profile hacks and data breaches, security experts are fond of pointing out that there’s no such thing as perfect security. It’s true! But it also invites the question: Why doesn’t literally everything get hacked all the time? The answer has to do with the relative incentives and the costs of infiltrating a given network. And one of the concepts underlying that calculus is the idea of an “attack surface.” Here’s an example. Learn about your ad choices: dovetail.prx.org/ad-choices

If you’ve been feeling a little paranoid lately—like even your standing mixer may be spying on you—rest assured that Trump senior counselor Kellyanne Conway shares your struggle. On Sunday, apparently reacting to last week’s CIA WikiLeaks data dump, Conway told the Bergen Record that at this point, US citizens should consider all appliances compromised. Even their microwaves. Learn about your ad choices: dovetail.prx.org/ad-choices

This week's WikiLeaks revelations, which showed that the CIA can compromise a huge range of devices, shouldn't send you into paroxysms of fear over your smartphone. It should, though, be a solid reminder that one of the best ways to keep yourself safe from hackers is also one of the simplest: Update your gear. What allows hackers access to your devices, after all, are breakdowns and vulnerabilities in the firmware (read: operating system) that runs them. Learn about your ad choices: dovetail.prx.org/ad-choices

Of all the revelations to come out of the 9,000-page data dump of CIA hacking tools, one of the most explosive is the possibility that the spy agency can compromise Signal, WhatsApp, and other encrypted chat apps. If you use those apps, let's be perfectly clear: Nothing in the WikiLeaks docs says the CIA can do that. A close reading of the descriptions of mobile hacking outlined in the documents released by WikiLeaks shows that the CIA has not yet cracked those invaluable encryption tools. Learn about your ad choices: dovetail.prx.org/ad-choices

US intelligence agencies face a difficult task. They are supposed to provide meaningful analysis that enables officials to manage serious national security problems such as terrorism, weapons proliferation, network attacks on government infrastructure, and counterintelligence efforts. Today these are diffuse and complex threats. There are newly powerful political actors on the international stage. Organizations that are not governments and have no physical territory can inflict great harm. Learn about your ad choices: dovetail.prx.org/ad-choices