Hard coded secrets are things like passwords and API keys that are hard coded into “apps” for anyone to find. Generally considered a bad thing. 🙂 Cybernews researched more than 150,000 iOS apps and found more than 815,000 secrets. This includes thousands that are sensitive. Secrets that could lead to breaches. Now that this information […]
Continue reading → [DISPLAY_ACURAX_ICONS]Hackers Have Access to iOS 14 Months Before You Will Apple gives developers early prototypes of their new software so that Apple doesn’t have a disaster on its hands when the new software is released and user’s applications no longer work. Unfortunately, some developers sell those phones – or at least access to them – […]
Continue reading → [DISPLAY_ACURAX_ICONS]Lenovo “Crapware” Allows Attacker to Compromise Any PC in 600 Seconds I am not going to get on my soapbox about why you should not buy a PC built by the Chinese government because I know people love their old IBM Thinkpads, but handle this issue no matter what. Apparently the Lenovo “Solutions” Center has […]
Continue reading → [DISPLAY_ACURAX_ICONS]Text Messaging for Two Factor Authentication is Under Attack We have talked on occasion about a basically theoretical attack against text messages as the second factor for authentication. It is likely that the feds know more than they are telling us about that since the National Institute of Standards and Technology has deprecated the use […]
Continue reading → [DISPLAY_ACURAX_ICONS]About a year ago, Android users were fighting something called the Stagefright bug. Â Buried deep in the bowels of the operating system was a series of bugs that would allow an attacker to send you a specially crafted text message and take over your Android phone. Â Stagefright affected close to a billion phones in the […]
Continue reading → [DISPLAY_ACURAX_ICONS]For those of you who read the security news, you know that this last 12 months has brought an amazing number of SSL bugs to the surface (see a few of my blog posts here and here and here). Now iPhone and iPad users have their turn to deal with an SSL bug. The bug, […]
Continue reading → [DISPLAY_ACURAX_ICONS]