We’ve got a pretty big discussion on Fortnite for Android and the decisions Epic Games made that affect user security. I talk about it in the show, we talked about it in Chit Chat Across the Pond with Robb Dunewood and Bart and I talk about it during Security Bits. I’ve got a review of […]
Continue readingMore TagTag: vulnerabilities
Security Bits – Zero-Day on macOS, Facebook Rates User Trustworthiness, Facebook’s VPN Was Tracking Users, Excessive Google Tracking, Teenager Hacks Apple
Followups More speculation-based flaws in Intel Chips (Editorial by Bart: as with other recent Spectre/Meltdown variants, there’s no need for home users to panic, just keep your OSes patched. It’s cloud providers that really need to worry about these flaws.) L1 Terminal Fault AKA L1TF – Intel have released mitigations, and they don’t have significant […]
Continue readingMore TagSecurity Bits – Bad Times for Facebook, Data Transfer Project, Bluetooth Bugs, Malware in the Mail
Pre-amble (by Allison) — Bad Times for Facebook Facebook lost $120B in value after their July Earnings call, which is the biggest one-day stock fall in history — marketwatch.com/… One root cause is that European advertising growth in Europe “decelerated more quickly than other regions” because of GDPR. Facebook Chief Financial Officer David Wehner said, […]
Continue readingMore TagSecurity Bits – USB Restricted Mode, Apple’s Focus on Security in OS Announcements
Followups Telegram have now been able to update their apps on Apple’s non-Russian app stores — nakedsecurity.sophos.com/… The VPNFilter malware/botnet story continues to evolve as security researchers find more router makes and model are affected. Additions to the list include routers by Asus, D-Link, Huawei & ZTE — www.zdnet.com/…, nakedsecurity.sophos.com/… & www.imore.com/… 🇺🇸 As anticipated, […]
Continue readingMore TagSecurity Bits – Facebook/Cambridge Analytica, GDPR, Security Updates, Greyshift Backdoor, UPnProxy
DNS Correction On Chit Chat #533, Bart did a deep dive into how the Domain Name System works and in that session, he suggested a hybrid approach where your mobile devices had the improved DNS along with your home router. It turns out it’s not possible to set system-wide DNS settings on iOS or Android. […]
Continue readingMore TagSecurity Bits – Even More Cambridge Analytica/Facebook, WebAuthn
Followup 1 — Meltdown/Spectre Intel won’t fix Spectre flaws in older chips — nakedsecurity.sophos.com/… AMD systems gain Spectre protection with latest Windows fixes — arstechnica.com/… Followup 2 — The Cambridge Analytica/Facebook Kerfuffle
Continue readingMore Tag
D-Link’s Attention to the KRACK Vulnerability Gives Me Pause
One of our goals in Home Automation has been to buy HomeKit-compatible devices whenever possible for security reasons. I’ve even created an elaborate network setup to isolate non-HomeKit (and Windows) devices from the rest of my gear. Last year we bought the first HomeKit-compatible webcam, the Omna 180 Cam HD from D-Link. At $150 it […]
Continue readingMore Tag
Security Bits – 26 November 2017 – FaceID Isn’t Broken, USB Bugs in Linux Kernel, Vulnerability in Intel Chips
Security Medium 1 — No, FaceID isn’t Broken, but it Does Have Limits A snazzy demo to the press had headlines all over the press screaming about how FaceID had been broken. But as is so often the case with stories like this, the devil is very much in the detail. What the hackers really […]
Continue readingMore Tag