Monday, September 28, 2015

Wednesday, September 23, 2015

IOS 9 PIN Screen Bypass

A flaw in IOS9 allows the bypass of a PIN protected device.

Cloud of Germs as Biometrics

Every human has a unique "cloud of germs."

Forbes serves up malvertising

Last week an ad network used by Forbes' site was sending the Angler exploit pack to certain visitors. Another reason people like ad blockers:Security.

Gmail can now block senders

While you could setup a rule to delete specific senders' email, Gmail now has a drop down choice for blocking senders. The Gmail Apps will get the same functionality soon.

Android AntiVirus, You Need It.

More malware found in the Google Play Store, some of it there for more than a year.

Tuesday, September 22, 2015

Symantec fires employees for issuing certs in Google's name.

Trusted SSL certs from Google's domain but not authorized by Google. Bad stuff. Lawsuits?  Certs have been revoked.

Sunday, September 20, 2015

Friday, September 18, 2015

Don't post your private keys...

D-link made a big boo-boo...

Google fixes Lollipop lock screen bypass

If you have Lollipop, use a password  (not a PIN) on your lock screen, and your phone allows locked-screen access to your camera, a long password would crash the camera app and dump back to the home screen.  This has been fixed in the latest patch.

200k servers still vulnerable to Heartbleed

One of last year's greatest vulnerabilities still posses a serious threat.

Your free AntiVirus may be selling your surfing habits.

If you use AVG or AVAST free products, you might want to read about their 3rd party policy.

AdBlock Plus paying other blockers to allow its "acceptable ads?"

A French blog is stating that ABP is pushing its "extortion advertising model" to other blockers for $$.

TSA don't care if you have the MasterKeys

Made for convenience, the master keys fit TSA approved luggage to allow for quick open/close. You can now download the plans to print your own Master Keys and the TSA isn't worried.

Thursday, September 10, 2015

Tuesday, September 8, 2015

It's Sept Patch Tuesday

Microsoft has released 5 critical patches for their browsers, Windows, and Office. There are also important patches. Adobe has released a patch for Shockwave Player. Shockwave isn't Flash but if you have Shockwave you've also got Flash (Adobe bundles them like that.)

Friday, September 4, 2015

Mozilla Bugtracker Bugzilla compromised

Bad guy was able to use info to create an exploit for a vulnerability in Firefox that has been patched. Now admin users have to use two factor authentication.

Companion app improving personal safety..

Walk home with your friends talking to you and monitoring your position vis GPS.

FCC may ban router mods like DDWRT

In trying to lock down parameters like signal strength output, the FCC may require locked down routers.

Apple patents "fuel cell" battery



Lasts "for weeks."

You can telnet to Seagate Wireless Drives???

Yes, you can telnet to some Seagate Wireless Drives as "root" with "root" as the password and get access to the "file sharing" partition.

Google reduces Chrome's memory demands

Chrome 45 now requires slightly more RAM and is more friendly to other applications.

Wednesday, September 2, 2015

OPM spends $133M on credit monitoring

OPM has awarded $133M to a company for monitoring 22 million.

Victims of OPM Fed Govt Breach still don't know they're victims

21.5 million notifications to be sent this month.

Google to "downrank" sites that prompt for App installs

Have you visited a site on your mobile device and been offered an App to improve your experience.  Google will being lowering search ranking for such sites.

Microsoft brings Tracking to Windows 7 & 8

The same user tracking "features" from Windows 10 are now available on Windows 7 & 8.