Skip to main content

Amazon quietly drops encryption feature in Fire OS; 'a massive step backwards,' say security experts

Amazon.com has quietly dropped support for disk encryption on its Fire tablets, saying the feature that secures devices by scrambling data was little used by customers.

Privacy advocates and some users criticised the move, which came to light on Thursday even as Apple was waging an unprecedented legal battle over US government demands that the iPhone maker help unlock an encrypted phone used by San Bernardino shooter Rizwan Farook.

On-device encryption scrambles data so that the device can only be accessed if the user enters the correct password. Cryptologist Bruce Schneier said Amazon's move to remove the feature was "stupid" and called on the company to restore it.

"Hopefully the market will tell them to do otherwise," he said.

Amazon joined other major technology companies in filing an amicus brief supporting Apple on Thursday, asking a federal judge to overturn a court order requiring Apple to create software tools to unlock Farook's phone.

Amazon spokeswoman Robin Handaly said in an email that the company had removed the encryption feature for Fire tablets in the fall when it launched Fire OS 5, a new version of its tablet operating system.

"It was a feature few customers were actually using," she said, adding that Fire tablets' communication with the company's cloud meets its "high standards for privacy and security including appropriate use of encryption."

Encryption expert Dan Guido said that Amazon may have eliminated the feature to cut component costs for tablets that sell for as low as $50.

But digital privacy advocates and customers said those arguments were not good enough reasons for discontinuing the feature.

"Removing device encryption due to lack of customer use is an incredibly poor excuse for weakening the security of those customers that did use the feature," said Jeremy Gillula, staff technologist with the Electronic Frontier Foundation.

"Given that the information stored on a tablet can be just as sensitive as that stored on a phone or on a computer, Amazon should instead be pushing to make device encryption the default - not removing it," Gillula said.

David Scovetta, a security analyst who owns two Kindle e-readers as well as Amazon's TV set-top box, said he is now wary of buying new gadgets from the company.

"Amazon could just as easily be encouraging its users to adopt it rather than remove it as a feature. That's a massive step backwards," he said.

Popular posts from this blog

Virtual reality set to transform filmmaking

Chris Milk stepped onto a TED Conference stage and took the audience on an awe-inducing trip into the future of movies. While much of the early attention on virtual reality has focused on use of the immersive technology in video games, Milk and his US startup Vrse are using it to transform storytelling and filmgoing. "We have just started to scratch the surface of the true power of virtual reality," Milk said. "It's not a video game peripheral. It connects humans to other humans in a profound way... I think virtual reality has the potential to actually change the world." He had everyone in the Vancouver audience at TED , which ended Friday, hold Google Cardboard viewers to their eyes for what was billed as the world's collective virtual reality experience. Google Cardboard gear is literally that -- cardboard

Explained: Camera Improvements in the New HTC 10

With the HTC 10, the Taiwanese company is promising to undo the past wrongs in the cameras of its previous flagship phones. The camera has long a weak point in HTC devices. At first, HTC sacrificed image resolution in the M8 and made the size of individual pixels larger to capture more light (what HTC called Ultrapixel). But the resulting 4 megapixel images were often fuzzy, especially when cropped or enlarged. To fix the issue, in its next flagship - the M9 - HTC went with smaller individual pixels in a 20-megapixel camera last year, but it still underperformed in extreme situations, such as indoors and close-ups. In the HTC 10, the company attempts to strike a balance with larger individual pixels (1.55µm), but not as large as before and a 12 megapixel sensor in its camera coupled with a ƒ/1.8 lens. HTC accepts that in the imaging performance in the M9 was not up to the kind of spec of what they really like to see in a flagship. HTC is giving a slight boost to the selfi...

Freedom 251: 30,000 Units Sold, Components for Up to 2.5 Million Will Be Imported

Ringing Bells, the makers of the Rs. 251 smartphone - the Freedom 251 - confirmed to Gadgets 360 on Tuesday that it has still only accepted payments for 30,000 units of the phone. It also added that the components for these phones will be imported, and only assembled in India, not made here. Ringing Bells stopped accepting orders on February 19, and claims to have received over 70 million registrations. The company President and Director both repeatedly stated that the price of the phone would be made possible through economies of scale, and making the phone in India to cut out import costs. Economies of scale? However, in a discussion with Gadgets 360 the company revealed that it had only sold 30,000 units of the phone on day one. The company has now confirmed that it has not sent out the payment emails to anyone else who registered - "we were working out details of cash on delivery, which we are announcing now, so we will be sending emails to the first 2.5...