Followups The Reply All podcast released an episode about the Momo panic mentioned on the previous Security Bits — overcast.fm/… Security Medium — Facebook Accidentally Store Passwords in Plain Text Since 2012 Brian Krebs broke this story, and sourced it from “a senior Facebook employee who is familiar with the investigation and who spoke on […]
Continue readingAuthor: Bart Busschots
Security Bits – 8 March 2019
Followups The on-going Spectre/Meltdown saga Google: Software is never going to be able to fix Spectre-type bugs — arstechnica.com 🇦🇺 Australia’s controversial anti-encryption law: Mozilla fears encryption law could turn its employees into insider threats — nakedsecurity.sophos.com/… FastMail Challenges Australia Encryption Law — www.macobserver.com/… Grey-hat iPhone hackers Cellebrite are back in the news as older […]
Continue readingSecurity Bits – 22 February 2019
Followup Last time we mentioned that leaks indicated that Microsoft would be doubling their support fee for Windows 7 each after it’s Extended Support Period ends next January, we now have the official details: www.techspot.com/… Extended Security Updates (ESUs) will only be available for business and education customers, and only for 3 years to January […]
Continue readingSecurity Bits – 8 Feb 2019
🇯🇵 A Correction — Japan is not the next Australia! Last time I briefly mentioned a story about the Japanese government working on proposals to subject foreign companies to their laws. I had only speed-read the article, and assumed it was about defeating users privacy, but I actually had it 180° reversed! Japan wants to […]
Continue readingSecurity Bits – 25 January 2019
Followups Australia’s controversial anti-encryption law has come into effect — www.macobserver.com/… Sprint to Stop Selling Location Data to Third Parties After Motherboard Investigation — motherboard.vice.com/…
Continue readingSecurity Bits – 11 January 2019
Followups CastHack Hackers hijack thousands of ChromeCasts to warn of latest security bug — techcrunch.com/… https://nakedsecurity.sophos.com/2019/01/04/dont-fall-victim-to-the-chromecast-hackers-heres-what-to-do/ — nakedsecurity.sophos.com/… Marriott now admits over 5 million passport numbers were stolen in their recent data breach — www.macobserver.com/… The first segment on episode 120 of the Checklist podcast by Secure Mac covers the convincing new phone scams targeting […]
Continue reading
Replacing My PFSense Router
I told you about PFSense back in 2012 in NosillaCast #357, but six years later it’s time to revisit the topic. What is PFSense? A free and open-source router OS based on BSD Unix — pfsense.org/… Can run on just about any hardware — small embedded devices (regular home router hardware), micro-PCs based off things […]
Continue readingSecurity Bits – 14 December 2018
Followup Bloomberg’s controversial The Big Hack story SuperMicro released the results of an independent audit which found no evidence of hardware or software tampering on its motherboards — www.reuters.com/… & arstechnica.com/… The Marriott Breach Marriott Data Breach Is Traced to Chinese Hackers as U.S. Readies Crackdown on Beijing — www.nytimes.com/… An interesting related opinion piece […]
Continue readingSecurity Bits – 24 November 2018
Notable Security Updates Adobe have issued an emergency patch for a critical bug in Flash — nakedsecurity.sophos.com/… Patch Skype for Business now or risk DoS via emoji kittens! — nakedsecurity.sophos.com/… Update now! Dangerous AMP for WordPress plugin fixed — nakedsecurity.sophos.com/… Microsoft pulls Office patches that are causing application crashes. Office365 users don’t need to take […]
Continue readingSecurity Bits – 02 November 2018
Followups Apple CEO Tim Cook Is Calling For Bloomberg To Retract Its Chinese Spy Chip Story — www.buzzfeednews.com/… 🇬🇧 Facebook fined £500K for Cambridge Analytica saga — nakedsecurity.sophos.com/… Mirai Co-Author Gets 6 Months Confinement, $8.6M in Fines for Rutgers Attacks — krebsonsecurity.com/…
Continue reading