-
Should we stop texting?
If you’ve read the headlines over the last few days, we should stop texting each other – especially if we are texting between Apple and Android platforms.
Whenever I read security headlines that demand that we immediately stop texting, I immediately try to find the original notice that started the news headlines to determine whether the risks and actions are warranted, or it’s just clickbait for the headline.
Should I immediately tell my girlfriend Joan to stop texting me that contacts are much cheaper at Costco, or block the conversation with my sister because she is amazed how fantastic Notre Dame looks after cleaning? After all, those transmissions may not be encrypted, and attackers may gain access to those conversations. Should we assign the same threat risk to every conversation we have? Must I assign an extreme risk to my actions and stop?
Although I still remember my first boss warning me to be careful when talking in a public place about court cases we were working on — because the opposing attorney might overhear us — I am questioning the headlines warning people to stop texting between iPhone and Android. Although there are determined attackers who have infiltrated systems and are going after specific targets, it’s an overreaction to assign the same risk of interception to every conversation. The FBI communication to which folks are pointing is very much a business-oriented warning. If you are in a business setting and need to communicate securely, then by all means do not text and certainly do not email. Use a trusted encrypted communication platform authorized by your firm.
Should you use an app such as WhatsApp in personal conversations? That’s up to you. Many use it not because of the encrypted transmission model but because it’s cheaper than using phones and land lines to communicate with loved ones in different countries. But I think this “Oh my goodness, we need to stop texting” reaction is similar to my complaint about the guidance to patch everything immediately. Such guidance lacks nuance. It assigns no weight regarding content and instead treats my conversation about Costco the same as one about nuclear codes. I’m willing to accept the risk that my Costco conversation will be intercepted.
Don’t be taken in by clickbait headlines.