Open post
Security Bits Logo no alpha channel

Security Bits — 27 December 2020 – Oblivious DNS over HTTPS or ODoH

Deep Dive — Cloudflare & Apple add Privacy to Secure DNS with ODoH Cloudflare, Apple, & hosting company Fastly have collaborated to create a new secure and private DNS specification that extends DNS over HTTPS (DoH). They’ve both released the spec, and released sample implementations of the various components in Ruby and Go. The Problem […]

Continue readingMore Tag
Open post
Security Bits Logo no alpha channel

Security Bits — 14 June 2020

Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. As expected, Apple quickly patched the Kernel flaw powering the Unc0ver Jailbreak: Kernel Vulnerability Causes Apple to Update All Operating Systems — tidbits.com/… Apple is no longer signing iOS 13.5, stopping jailbreakers from downgrading […]

Continue readingMore Tag
Open post
Security Bits Logo no alpha channel

Security Bits — 8 March 2020

Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. FireFox are continuing their roll-out of DoH, enabling it by default for new installs in the US — nakedsecurity.sophos.com/… Google stops indexing WhatsApp chats; other search engines still at it — nakedsecurity.sophos.com/… HomeKit Router […]

Continue readingMore Tag
Open post
Security Bits Logo no alpha channel

Security Bits — 23 February 2020

Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Developments in the Avast Browser History Data Sales story: Avast kills off Jumpshot, the subsidiary that sold all your Web data — arstechnica.com/… 🇨🇿 Czech Authorities to Investigate Avast Over Sale of Users’ Browser […]

Continue readingMore Tag
Open post
Security Bits Logo no alpha channel

Security Bits — 9 February 2020

Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🧯Intel have released a fix for yet another named bug in performance-enhancing features of their CPUs. This one is named CacheOut because it involves cache evictions. The key takeaway is that like the other […]

Continue readingMore Tag
Open post
Security Bits Logo

Security Bits – 25 July 2019

Followups The Zoom webcam/webserver issue We now have confirmation that the vulnerability was also present in the RingCentral and Zhumu apps — www.imore.com/… Apple have rolled out an additional automatic security update to address the issues with these apps — www.macobserver.com/… Related Opinion: John Gruber addresses the question Isn’t [Apple’s response] “nonconsensual technology” too? in […]

Continue readingMore Tag
Open post
PBS Logo grey for Mojave dark mode

Security Bits – 3 May 2019

Followups Marcus Hutchins, the young security researcher who shot to fame by killing the WannaCry malware and then to infamy when he was arrested and charged with cyber crimes while traveling to the US to present at a security conference, has pleaded guilty to writing and selling banking malware. The offences pre-date his work as […]

Continue readingMore Tag
Open post
Security Bits Logo

Security Bits – Bad Times for Facebook, Data Transfer Project, Bluetooth Bugs, Malware in the Mail

Pre-amble (by Allison) — Bad Times for Facebook Facebook lost $120B in value after their July Earnings call, which is the biggest one-day stock fall in history — marketwatch.com/… One root cause is that European advertising growth in Europe “decelerated more quickly than other regions” because of GDPR. Facebook Chief Financial Officer David Wehner said, […]

Continue readingMore Tag

Posts navigation

1 2 3 4 5
Scroll to top