Backdoors are a security vulnerability

Credit to Author: David Ruiz| Date: Fri, 09 Aug 2019 16:10:27 +0000

Upset by their inability to access potentially vital evidence for criminal investigations, the federal government has, for years, pushed to convince tech companies to build backdoors that will, allegedly, only be used by law enforcement agencies. The problem, cybersecurity researchers say, is that those backdoors can easily be exploited by criminals.

Categories:

Tags:

(Read more…)

The post Backdoors are a security vulnerability appeared first on Malwarebytes Labs.

Read more

Apple announces a new iPhone (and you can’t have it)

Credit to Author: Jonny Evans| Date: Fri, 09 Aug 2019 06:55:00 -0700

Apple has announced a new iPhone for 2020, but it will only be made available to a select group of security researchers – along with huge bounties to anyone informing the company of a new OS vulnerability.

Probably the world’s most exclusive iPhone

Ivan Krstić, Apple’s head of security engineering provided big insights into Apple’s platform security during his presentation at Black Hat U.S. 2019.

To read this article in full, please click here

Read more

Update your iPhone – remote control holes revealed by researchers

Credit to Author: Paul Ducklin| Date: Thu, 08 Aug 2019 14:01:41 +0000

You might not think your phone is as exposed as an internet server – but it’s handling plenty of untrusted data from unknown sources!<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Ri0849b3RDo” height=”1″ width=”1″ alt=””/>

Read more

Many VPN apps on Apple’s App store can’t be trusted, researcher warns

Credit to Author: Jonny Evans| Date: Thu, 08 Aug 2019 05:50:00 -0700

I’m told Apple is at last looking into the privacy and security of free VPN apps made available across its platforms, following a report from researcher, Simon Migliano.

Who owns your VPN service?

The researcher has flagged up several concerns that really should be recognized by anyone choosing a VPN service from both the Apple and Google App Stores:

  • Ownership: Migliano claims that almost 60 percent of the most popular VPN apps are actually owned (sometimes opaquely) by Chinese companies.
  • Privacy: The researcher also found that as many as 77% of these VPN apps may have what he calls “serious privacy flaws”,including no privacy policy at all, generic policies with no mention of VPN or no detailed logging policy.
  • Data protection: Migliano claims Apple is not enforcing its third-party data-sharing ban against VPN apps, with 80 percent of the top free VPN apps “in breach of the rules”, he said. Many are sharing data with third parties, he claims.

That last allegation is particularly concerning.

To read this article in full, please click here

Read more

Google and Apple suspend contractor access to voice recordings

Credit to Author: John E Dunn| Date: Mon, 05 Aug 2019 14:20:21 +0000

Apple and Google have announced that they will limit the way audio recorded by their voice assistants, Siri and Google Assistant, are accessed internally by contractors.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/6WDIUcUa8Ns” height=”1″ width=”1″ alt=””/>

Read more

Apple suspends Siri snooping (and promises more control for the rest of us)

Credit to Author: Jonny Evans| Date: Fri, 02 Aug 2019 04:27:00 -0700

Read more

Five Eyes nations demand access to encrypted messaging

Credit to Author: Lisa Vaas| Date: Thu, 01 Aug 2019 10:39:54 +0000

The alliance wants tech companies to build backdoor access to users’ encrypted data, by force if necessary.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/OwcXC3l1bLY” height=”1″ width=”1″ alt=””/>

Read more

iMessage bug could have allowed attackers to read data from any iPhone

Credit to Author: Danny Bradbury| Date: Wed, 31 Jul 2019 13:44:07 +0000

Google’s Project Zero has unveiled details of a bug in Apple’s iMessage that lets attackers read data from an iPhone without any user interaction.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/lRgoEr1lXx4″ height=”1″ width=”1″ alt=””/>

Read more

Listening in: Humans hear the private info Siri accidentally records

Credit to Author: Lisa Vaas| Date: Tue, 30 Jul 2019 13:28:24 +0000

Apple Watch and HomePod have the highest rate of inadvertent recordings, a whistleblower says.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/NBH7Od8K-QM” height=”1″ width=”1″ alt=””/>

Read more