// device security

All signals tagged with this topic

Desktop Linking Opens New Eavesdropping Vector for Encrypted Messaging Apps

WhatsApp and Signal's convenience feature—syncing encrypted conversations across linked devices—creates a security perimeter problem that's harder to exploit than breaking encryption itself. Attackers can intercept messages by compromising the less-protected desktop client or network traffic between phone and computer, bypassing the cryptographic guarantees users assume they have. This exposes a core tension between usability (multi-device access) and threat modeling: the weakest link in a device chain becomes the actual security boundary, not the encryption algorithm.

Raspberry Pi Foundation's Boot Lockdown Sparks Open-Source Backlash

The Raspberry Pi Foundation embedded firmware code that restricts which storage devices can boot the system, a control mechanism that contradicts the organization's open-source ethos and hands gatekeeping authority to the manufacturer rather than device owners. Companies across the industry use software controls to monetize or restrict hardware use. For a platform built on accessibility and hacking culture, the shift is a departure. The tension reveals how even foundational infrastructure projects face pressure to implement protections against unauthorized use. As connected systems scale, security requirements may demand compromises on the openness that enabled that connectivity.

London iPhone thieves demand victims unlink their Apple IDs

Organized phone theft rings in London have evolved from smash-and-grab operations into extortion schemes, exploiting the gap between physical device possession and account security. Victims receive threatening texts coercing them to remotely disable Find My iPhone rather than dealing with locked devices. Instead of fencing stolen phones or harvesting hardware components, thieves now monetize access through coercion, turning Apple's security features into leverage points. The shift exposes both the sophistication of organized retail crime and a real vulnerability in how consumers manage device lockouts versus account takeovers.