encryption

A court has sided with the Electronic Frontier Foundation in its challenge to Utah's VPN law, ruling that the statute requires something technically impossible to implement. The EFF argued the law's compliance demands could not be met by VPN providers as written. The decision is being closely watched as other US states consider similar age-verification and encryption-adjacent legislation.

A report by 404 Media says law enforcement can bypass the iPhone's automatic inactivity reboot, the security feature that locks down a device after it has been idle, using forensic tools such as GrayKey to access locked phones. The finding raises fresh concerns about how effectively Apple's protections keep data out of police hands.

Cloudflare describes how it built a certificate authority capable of issuing TLS certificates at Internet scale, covering the engineering and operational challenges behind running such infrastructure. The post is drawing attention among developers and security engineers interested in web encryption, public key infrastructure, and alternatives to established certificate authorities.

A user on Hacker News is asking whether their email was leaked or compromised while traveling abroad, sparking discussion about travel-related account security. Replies are likely weighing risks such as border device inspections, unfamiliar networks, and surveillance, and offering advice on checking breach records, using encrypted email, and hardening accounts before international trips.

Amazon Web Services plans an October test of its European Sovereign Cloud that will disconnect it from the global AWS network, a step toward fully independent European infrastructure. Observers frame it as a practical 'DeGoogle'-style move, noting features such as encrypted email support on web and mobile, as European organisations weigh reducing reliance on US-controlled cloud providers amid data sovereignty concerns.