\n
![\"The](\"https:\/\/www.securemac.com\/wp-content\/uploads\/2024\/12\/post-img-2.jpg\")
\t\t<\/span><\/p>\nIn a striking reversal of past positions, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) are now advising Americans to use end-to-end encrypted apps such as iMessage and FaceTime to safeguard against foreign cyber threats. This shift comes in the wake of the Salt Typhoon<\/em> hack<\/a>, a significant breach of U.S. telecommunications systems attributed to Chinese state-sponsored hackers.<\/p>\n The FBI\u2019s call for encryption marks a sharp contrast to its prior stance. For years, the agency pushed for backdoors in encrypted systems, arguing they were necessary for law enforcement. Apple famously resisted, with CEO Tim Cook declaring in a 2015 NPR interview that \u201cprivacy is a fundamental human right.\u201d Cook warned that any backdoor could be exploited by both \u201cgood guys\u201d and \u201cbad guys,\u201d a concern now validated by recent events.<\/p>\n The tension between Apple and the FBI peaked in 2016, following the San Bernardino shooting. The FBI demanded that Apple create software to bypass encryption on the attacker\u2019s iPhone. Apple refused, and the FBI ultimately accessed the phone through alternative means, yielding no actionable intelligence.<\/p>\n The catalyst for the FBI\u2019s policy reversal is the Salt Typhoon<\/em> hack<\/a>, described in reports by AppleInsider and other outlets. Hackers affiliated with the Chinese government exploited vulnerabilities in U.S. telecommunications systems, gaining prolonged access to wiretap networks. The compromised systems were designed to comply with the Communications Assistance for Law Enforcement Act (CALEA), which mandates surveillance capabilities for federal agencies. Unfortunately, these backdoors also provided entry points for hackers.<\/p>\n The breach, revealed in October, affected major carriers, including Verizon, AT&T, and Lumen Technologies, and persisted for months. Hackers reportedly gathered sensitive political, medical, and business intelligence. In one instance, security startup iVerify flagged suspicious activity on iPhones belonging to senior officials of a U.S. presidential campaign, raising concerns about the broader implications of the hack.<\/p>\n Jeff Greene, CISA\u2019s executive assistant director for cybersecurity, acknowledged the severity of the breach, stating it is \u201cimpossible to predict a time frame on when we\u2019ll have full eviction\u201d of the hackers from affected systems.<\/p>\n In light of these developments, the FBI and CISA are urging widespread adoption of end-to-end encrypted communication to protect sensitive information from foreign adversaries. This recommendation underscores the inherent risks of backdoors in encrypted systems, which can be exploited by malicious actors.<\/p>\n As geopolitical tensions escalate and cyber threats grow more sophisticated, the pivot toward encryption signals a significant shift in how U.S. authorities approach cybersecurity and privacy.<\/p>\n The FBI and Cybersecurity and Infrastructure Security Agency (CISA) are urging Americans to adopt end-to-end encrypted communication<\/a> methods to safeguard against increasingly sophisticated cyber threats. This comes just two months after Chinese government-linked hackers exploited a decades-old law enforcement backdoor, compromising U.S. telecommunications.<\/p>\n CISA\u2019s Jeff Greene underscored the importance of encryption in a recent press call, stating, \u201cEncryption is your friend, whether it\u2019s on text messaging or if you have the capacity to use encrypted voice communication.\u201d Greene emphasized that encryption renders intercepted data indecipherable, shielding sensitive information from adversaries. An anonymous FBI official echoed this sentiment, recommending timely software updates, responsibly managed encryption, and phishing-resistant multi-factor authentication for digital communications and accounts.<\/p>\n The debate over encrypted messaging is not new. Apple\u2019s iMessage offers end-to-end encryption for its users but lacks compatibility with Google\u2019s RCS, leaving \u201cgreen bubble\u201d messages unprotected. Meanwhile, Google\u2019s RCS implementation and its dedicated Messages app offer encrypted communication for Android users.<\/p>\n For those seeking additional security, third-party apps are viable alternatives. According to Tom\u2019s Guide<\/a><\/em>, Signal<\/strong> is the best choice for most users due to its simplicity, robust encryption, and commitment to privacy. Surprisingly, WhatsApp and Facebook Messenger also use Signal\u2019s encryption protocol, though they come with caveats, such as behavioral data sharing with Facebook and limited encryption availability on Messenger.<\/p>\nA History of Resistance to Encryption<\/h3>\n
The Salt Typhoon Hack: Breach of U.S. Telecom Networks<\/h3>\n
Scale and Impact of the Breach<\/h3>\n
The New Recommendation: Encryption as a Shield<\/h3>\n
FBI and CISA Suggest for Encrypted Communications Amid Cyber Threats<\/h2>\n
The Case for Encryption<\/h3>\n
What\u2019s Encrypted and What\u2019s Not?<\/h3>\n
Lessons from the <\/strong>Salt Typhoon<\/em> Hack<\/strong><\/h3>\n