Skip to main content

Security

See All Stories

Google product director annoyed by Apple’s SSO jab but encourages ‘Sign in with Apple’ over using passwords

WWDC IT features sign in with apple

Apple announced its upcoming single sign-on service “Sign in with Apple” at WWDC last week and it’s received quite a bit of attention, including concerns about a requirement to include the Apple offering if an app offers a login with a Google or Facebook option. Today, The Verge has shared an interview with Google’s product management director covering the company’s own SSO feature, how he feels about Apple’s entrance to the space, and more.


Expand
Expanding
Close

WSJ: Apple to announce new tracking limits for kids’ apps as iPhone privacy concerns loom

iPhone privacy apps

A new report today from The Wall Street Journal takes another look at the growing problem of how apps are sharing user data with third-party companies without user knowledge. While this happens on both iOS and Android, the report focuses on iPhone since Apple has strong beliefs about privacy. While the company hasn’t announced anything official, WSJ sources have said that Apple is going to tighten up app privacy soon, starting with kids’ apps.


Expand
Expanding
Close

Apple, Google & others condemn UK proposal to secretly add law enforcement to encrypted chats

Luxshare stealing secrets Apple supplier

Apple, Google, Microsoft and 44 other organisations and security experts have signed an open letter condemning a proposal to secretly add law enforcement organizations to encrypted chats and calls.

The proposal by GCHQ – Britain’s equivalent of the NSA – seeks to provide an encryption workaround that would breach privacy and security in apps like Messages, FaceTime, WhatsApp and Signal …


Expand
Expanding
Close

Snapchat employees spied on users by misusing internal tools

Snapchat employees spied on users by abusing internal tools

Multiple Snapchat employees spied on users by misusing internal tools, accessing such information as location, phone numbers and their own saved Snaps.

The tools are supposed to be used to help the company fight spam and abuse, and to comply with law enforcement requests, but many staff have access and are abusing it, say former employees …


Expand
Expanding
Close

Apple posts instructions on how to enable full mitigation against Intel CPU attacks on Mac, up to 40 percent performance penalty

MacBook Pro

Following the announcement of new speculative execution exploits that target Intel CPU architecture, Apple has posted a new document on its website that explains how customers with computers that are ‘at heightened risk’ of attack can enable full mitigation. Full mitigation is not enabled by default as it is probably an excessive amount of security for the average user, and it comes with big performance penalties.

In its tests, Apple recorded up to a 40 percent drop in performance with full mitigation activated. This is because enabling MDS protection involves disabling hyper-threading entirely, and adds additional barriers when the processor switches contexts.


Expand
Expanding
Close

‘View as Public’ option for Facebook users live again after major vulnerability last year

Facebook

Last fall, Facebook discovered a major flaw with its “View as” feature which saw security tokens for 50 million accounts stolen. Facebook has today announced its security review of the incident is complete and has brought back the View as Public feature in addition to adding a quick button to “Edit Public Details.”


Expand
Expanding
Close

Facebook cofounder: It’s time to break up company, gov oversight of social media needed

Facebook

While there has been lots of talks about regulating Facebook and the tech industry as a whole, there’s so far been no real action. Now Facebook’s cofounder, Chris Hughes has published an opinion piece today in The New York Times, making the case for why Facebook needs to be broken up. But beyond that, he believes we need a new government agency to handle the growing tech regulation issues. Read on for the five main reasons Facebook’s cofounder believes the platform needs to be broken up.


Expand
Expanding
Close

Security analyst finds fake cell carrier apps are tracking iPhone location and listening in on phone calls

fake iPhone apps

In yet another abuse of the enterprise distribution program, security analyst Lookout has identified apps (via TechCrunch) that were pretending to be published by cell carriers in Italy and Turkmenistan. The apps were available for iPhone users to download through Safari as they were signed by an enterprise certificate. These apps used carrier branding and pretended to offer utilities for the users’ cell plans when in reality they would ask for every permission they could to track location, collect contact, photos, and more, and had the capability to listen in on users’ phone conversations.

Apps using enterprise certificates are not available through the App Store, but malicious criminals can target iOS users through Safari (perhaps with a phishing attack-esque email) and get people to download the app over the web, outside of the purview of the App Store review process.


Expand
Expanding
Close

Microsoft Defender brings anti-virus protection to Mac, but limited business roll-out initially

Microsoft Defender begins limited Mac rollout

Microsoft is renaming its Windows Defender antivirus software to Microsoft Defender Advanced Threat Protection (ATP), and bringing it to macOS for the first time.

While Macs are significantly less vulnerable to malware than Windows machines, they are not immune. Examples include fake Flash Player installers and cryptocurrency-stealing browser exploits and apps


Expand
Expanding
Close

Xfinity Mobile

Xfinity irresponsibly using 0000 as default PIN, hacker steals customer’s phone number and buys a Mac

In the latest episode of consumers affected by tech companies’ security flaws, Comcast’s Xfinity Mobile wireless service was found to be setting customer PINs by default to 0000. As reported by The Washington Post (via The Verge) one of the users who had their phone number stolen because of Xfinity’s weak PIN default even saw a hacker purchase an Apple computer with his credit card.


Expand
Expanding
Close

iPhone and Android hacking tool used by FBI and DHS on sale on eBay for as little as $100

A Cellebrite UFED extracting data from an iPhone

The Cellebrite Universal Forensic Extraction Device (UFED) is a smartphone hacking tool commonly used by the FBI, Department of Homeland Security and other law enforcement agencies in the US and elsewhere. It’s the most powerful tool yet created by the Israeli company, able to extract a huge amount of data – even data which has been deleted from phones.

A brand new one normally costs $5,000 to $15,000 depending on the model, but older models can be found on eBay for as little as $100 …

Expand Expanding Close