Apple’s shock Siri surveillance demands a swift response

Credit to Author: Jonny Evans| Date: Mon, 29 Jul 2019 07:51:00 -0700

News that Siri records snippets of our conversations with the voice assistant isn’t new, but claims that those short recordings are listened to by human agents is– particularly in light of the company’s big push on privacy.

These are bad optics

I’m a passionate believer in the importance of privacy.

It isn’t only important in terms of preserving hard-won liberties and protecting public discourse, it’s also of growing importance across every part of human existence, for every school, medical facility or enterprise. History shows that the absence of privacy has a corrosive effect on society, turning family members against each other and dampening innovation.

To read this article in full, please click here

Read more

Apple’s July patchfest fixes bugs in multiple products

Credit to Author: Danny Bradbury| Date: Wed, 24 Jul 2019 10:33:27 +0000

Apple released fixes for various products this week, including one for a bug that has been public with proof-of-concept code for two months.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/DMw-BH1iNW0″ height=”1″ width=”1″ alt=””/>

Read more

Big password hole in iOS 13 beta spotted by testers

Credit to Author: John E Dunn| Date: Tue, 23 Jul 2019 10:18:52 +0000

A security clanger has been spotted in the current beta version of iOS 13 which allows anyone to access a user’s stored web and app passwords without having to authenticate.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/aZwDCfTPAro” height=”1″ width=”1″ alt=””/>

Read more

How and why Apple users should switch to DuckDuckGo for search

Credit to Author: Jonny Evans| Date: Thu, 18 Jul 2019 07:54:00 -0700

Like liberty for all, privacy demands vigilance, and that’s why Apple users who care about those things are moving to DuckDuckGo for search.

Why use DuckDuckGo?

Privacy is under attack.

It doesn’t take much effort to prove this truth. At time of writing, recent news is full of creeping privacy erosion:

And then there’s Duck Duck Go.

To read this article in full, please click here

Read more

How to take control of Face ID (with tools you may not know exist)

Credit to Author: Jonny Evans| Date: Mon, 15 Jul 2019 09:00:00 -0700

If you travel frequently and use an iPhone or iPad, then you simply must familiarize yourself with these two tips – they’ll make it much easier to secure your device and its contents when you are on the move.

In praise of Face ID

I’ve become very used to using Face ID. It’s seamless.

On the iPhone, I like that I can pay for groceries with a look and find it much easier to use in the dark than the Home button.

My iPad experience is similar, but I do get annoyed sometimes that I must raise the tablet slightly to get the face angle right – this isn’t always as intuitive as I would like.

All the same, given Apple’s claim that there is a 1 in 50,000 chance that someone else’s fingerprint will unlock your iPhone and a 1 in 1,000,000 chance that it will be unlocked by another person’s face, I’ll always opt for the highly secure choice.

To read this article in full, please click here

Read more

How Apple is improving iCloud this year

Credit to Author: Jonny Evans| Date: Tue, 09 Jul 2019 07:06:00 -0700

Apple quite evidently plans many interesting improvements in its iCloud service this year. So, what’s going on?

What we know so far about Apple’s iCloud plans

Apple at WWDC made several announcements that will be reliant on iCloud – these include obvious things like new services and support for new functions, and less evident topics around sync, data, and artificial intelligence (AI).

Most recently, the company began beta-testing Touch ID and Face ID access to iCloud.com online, meaning that if you happen to be using an Apple device (Mac, iPad, iPhone), you can access your online iCloud services with the touch of a finger or a quick eye scan.

To read this article in full, please click here

Read more

Message to IT: Trusting Apple and Google for mobile app security is career suicide

Credit to Author: Evan Schuman| Date: Mon, 01 Jul 2019 05:47:00 -0700

Ready for the mobile security news that IT doesn’t want to hear about but needs to? When security firm Positive Technologies started pen-testing various mobile apps, security holes were rampant.

We’ll plunge into the details momentarily, but here’s the upshot: “High-risk vulnerabilities were found in 38 percent of mobile applications for iOS and in 43 percent of Android applications” and “most cases are caused by weaknesses in security mechanisms — 74 percent and 57 percent for iOS and Android apps, respectively, and 42 percent for server-side components — because such vulnerabilities creep in during the design stage, fixing them requires significant changes to code.”

To read this article in full, please click here

Read more

How ‘Find My’ Mac works in macOS Catalina and iOS 13

Credit to Author: Jonny Evans| Date: Fri, 21 Jun 2019 08:13:00 -0700

Apple is changing how its Find My Mac tool works in macOS Catalina and iOS – it will now use Bluetooth and should find your Mac even when it is asleep.

How does ‘Find My’ Mac work?

Apple is combining two apps – Find My Friends and Find My iPhone into a new ‘Find My’ app.

The combined app offers what we are used to from each one of these individual apps, but introduces new tools based on Bluetooth.

The ideas is that it will use low energy Bluetooth signals to help bring people together with lost things.

To read this article in full, please click here

Read more

What the latest iOS passcode hack means for you

Credit to Author: Lucas Mearian| Date: Tue, 18 Jun 2019 14:25:00 -0700

A mobile device forensics company now says it can break into any Apple device running iOS 12.3 or below.

Israeli-based Cellebrite made the announcement on an updated webpage and through a tweet where it asserted it can unlock and extract data from all iOS and “high-end Android” devices.

On the webpage describing the capabilities of its Universal Forensic Extraction Device (UFED) Physical Analyzer, Cellebrite said it can “determine locks and perform a full file- system extraction on any iOS device, or a physical extraction or full file system (File-Based Encryption) extraction on many high-end Android devices, to get much more data than what is possible through logical extractions and other conventional means.”

To read this article in full, please click here

Read more

WWDC: Apple’s iOS 13 NFC improvements are good for business

Credit to Author: Jonny Evans| Date: Thu, 13 Jun 2019 07:08:00 -0700

Apple will make near field communication (NFC) much more useful in iPhones running iOS 13, and these enhancements will impact the retail, medical, government, and security industries.

What is Apple changing?

Apple already uses NFC to support Apple Pay and the Apple Pay Express Transit system, which is rolling out at this time.

While it has incrementally extended the tasks NFC supports over the years, the company has limited its NFC support to the NDEF standard until now, but it extends this with support for new standards in its Core NFC Framework in iOS 13.

To read this article in full, please click here

Read more