Secure messaging arrives on Twitter – sort of. ‘Don’t trust it yet,’ Musk warns

May 11, 2023, 3:36 PM

FILE - The Twitter splash page is seen on a digital device, April 25, 2022, in San Diego. Twitter l...

FILE - The Twitter splash page is seen on a digital device, April 25, 2022, in San Diego. Twitter launched encrypted messaging Wednesday, May 10, 2023, offering select users the ability to communicate more securely. But its new service is much more of a baby step than a giant leap forward. (AP Photo/Gregory Bull, File)
Credit: ASSOCIATED PRESS

(AP Photo/Gregory Bull, File)

SAN FRANCISCO (AP) — Twitter launched encrypted messaging Wednesday, offering select users the ability to communicate more securely. But its new service is much more of a baby step than a giant leap forward.

For starters, it lacks basic protections that security experts consider essential for shielding messages from hackers and other prying eyes. Senders and receivers must also be subscribed to Twitter’s Blue service for $11 a month ($8 for desktop-only) or otherwise affiliated with an organization “verified” by Twitter for $1,000 a month plus $50 per user.

The company’s official message announcing the rollout promised additional features soon. But CEO Elon Musk offered his own caution via a tweet: “ Try it, but don’t trust it yet.

WHAT IS ENCRYPTED MESSAGING AGAIN?

Ordinary messages sent across the internet, whether by email, direct message, Twitter or other means — are generally vulnerable to interception that could allow other people or organizations to read them. That includes the companies offering the message services. Those companies can also be required to produce user messages in response to a legal subpoena or court order.

Encryption technology offers protection against spies and nosy online neighbors by encoding messages so that only the sender and the recipient can decipher them.

SO HOW DOES TWITTER’S NEW ENCRYPTION STACK UP?

Not super well. The gold standard in secure messaging is set by services such as Signal and ProtonMail, which use strong “end-to-end” encryption to shield messages so that no one else — not even the companies themselves — can read them.

Twitter’s service doesn’t currently do that. For the moment, its encrypted messages are vulnerable to a so-called “man-in-the-middle” attack that allows an attacker to insinuate themselves into an encrypted conversation to listen in and even modify messages as they’re sent. Twitter itself, in fact, has the ability to do this.

“The acid test is that I could not see your DMs even if there was a gun to my head,” Musk tweeted on Tuesday. But Twitter isn’t there yet.

Twitter also doesn’t offer any way to report encrypted messages for harassment or abuse, although it will be possible to block individual senders.

ARE THERE OTHER DRAWBACKS?

Yes. For instance, Twitter’s encrypted messages can only be sent to another individual. Twitter says it will “soon” be expanding encryption to groups. Encrypted messages are also limited to text and links; photos, video and other attachments aren’t supported yet, the company says.

Twitter encryption also doesn’t provide what’s called “forward secrecy,” which would prevent an attacker who gets hold of a user’s private key from using it to read earlier and subsequent messages.

In its official document, Twitter says forward secrecy techniques aren’t compatible with user expectations that they’ll always be able to obtain their historical messages from the cloud. As a result, the company doesn’t plan to offer forward secrecy at all.

A final issue: Users won’t have any way to make encrypted messages a default setting; they’ll have to deliberately choose encryption each time they start a new conversation.

United States News

Associated Press

San Francisco police: 9 victims hit but no deaths in Mission District mass shooting

SAN FRANCISCO (AP) — Multiple victims were struck by bullets during a mass shooting in San Francisco’s Mission District Friday night, but authorities said there were no fatalities. “We can confirm there are 9 shooting victims — all are expected to survive their injuries,” the San Francisco Police Department said in a tweet. Police said […]

5 hours ago

FILE - Cameron Champ, of the United States, hits out of a bunker on the ninth hole during the Walke...

Associated Press

Beverly Hills-adjacent golf club opens doors to world with U.S. Open

LOS ANGELES (AP) — For much of the past century, the Los Angeles Country Club was quite literally a hidden gem. While Los Angeles grew from a warm-weather outpost into a global metropolis, this picturesque golf club sat in one of the city’s most dazzling settings — 325 acres of multibillion-dollar real estate adjoining Beverly […]

1 day ago

Seen is the damage from a collapsed apartment building, Monday, June 5, 2023, in Davenport, Iowa. T...

Associated Press

Cracked floors, bowed walls: Many warnings but no action at Iowa building before deadly collapse

DES MOINES, Iowa (AP) — So many people knew something wasn’t right at the 116-year-old Davenport apartment building. The structural engineer who documented the shaky wall. The head of a masonry company who wouldn’t let his workers onto the site. The city inspector who threatened to close some units. A downtown official who called 911 […]

1 day ago

One of several cameras set up to capture live debate in the chamber of the Nebraska Legislature is ...

Associated Press

Nebraska Legislature as reality TV, featuring filibuster and culture war drama

LINCOLN, Neb. (AP) — Mention televised legislative debates, and what may come to mind are stuffy, policy-wonk discussions broadcast by C-SPAN. This year’s Nebraska Legislature was more like a reality TV show, with culture-war rhetoric, open hostility among lawmakers, name-calling, yelling and more. Many Nebraskans couldn’t get enough of it. “It was addictive,” said Jamie […]

1 day ago

Drag performer Neon Calypso, center, sings and dances to Tina Turner's version of the song "Proud M...

Associated Press

Pride is back in Boston as parade returns after quarrel over inclusivity

BOSTON (AP) — The biggest Pride parade in New England returns to Boston after a three-year hiatus Saturday, with a fresh focus on social justice and inclusion rather than corporate backing. About 10,000 marchers signed up before registration was shut down, according to organizers. Employee groups are welcome to march, but corporations aren’t. “We really […]

1 day ago

House Speaker Kevin McCarthy of Calif., leaves his office on Capitol Hill in Washington, Wednesday,...

Associated Press

Trump’s GOP defenders in Congress leap into action on charges after months of preparation

WASHINGTON (AP) — Former President Donald Trump’s indictment on charges of mishandling classified documents is set to play out in a federal court in Florida. But hundred of miles away, part of Trump’s defense is well underway in a different venue — the halls of Congress, where Republicans have been preparing for months to wage […]

1 day ago

Sponsored Articles

...

Desert Institute for Spine Care

Spinal fusion surgery has come a long way, despite misconceptions

As Dr. Justin Field of the Desert Institute for Spine Care explained, “we've come a long way over the last couple of decades.”

(Photo: OCD & Anxiety Treatment Center)...

OCD & Anxiety Treatment Center

Here’s what you need to know about OCD and where to find help

It's fair to say that most people know what obsessive-compulsive spectrum disorders generally are, but there's a lot more information than meets the eye about a mental health diagnosis that affects about one in every 100 adults in the United States.

...

Day & Night Air Conditioning, Heating and Plumbing

Company looking for oldest air conditioner and wants to reward homeowner with new one

Does your air conditioner make weird noises or a burning smell when it starts? If so, you may be due for an AC unit replacement.

Secure messaging arrives on Twitter – sort of. ‘Don’t trust it yet,’ Musk warns