Collaborate Disseminate
The next major version of OpenVPN, one of the most widely used virtual private networking technologies, will be audited by a well-known cryptography expert.The audit will be fully funded by Private Internet Access (PIA), a popular VPN service provid… Continue reading OpenVPN will be audited for security flaws
The monthly Android security update released this week fixes the serious Dirty COW privilege escalation attack that can allow malicious apps to take full control of devices.Dirty COW (copy-on-write) is a privilege escalation vulnerability that has e… Continue reading Latest Android security update fixes Dirty COW, GPS vulnerabilities
The monthly Android security update released this week fixes the serious Dirty COW privilege escalation attack that can allow malicious apps to take full control of devices.Dirty COW (copy-on-write) is a privilege escalation vulnerability that has e… Continue reading Latest Android security update fixes Dirty COW, GPS vulnerabilities
The monthly Android security update released this week fixes the serious Dirty COW privilege escalation attack that can allow malicious apps to take full control of devices.Dirty COW (copy-on-write) is a privilege escalation vulnerability that has e… Continue reading Latest Android security update fixes Dirty COW, GPS vulnerabilities
Many network security cameras made by Sony could be taken over by hackers and infected with botnet malware if their firmware is not updated to the latest version.Researchers from SEC Consult have found two backdoor accounts that exist in 80 models o… Continue reading Backdoor accounts found in 80 Sony IP security camera models
A month before Apple is expected to enforce stricter security requirements for app communications in iOS, enterprise developers don’t seem ready to embrace them, a new study shows.The study was performed by security firm Appthority on the most commo… Continue reading App developers not ready for iOS transport security requirements
A month before Apple is expected to enforce stricter security requirements for app communications in iOS, enterprise developers don’t seem ready to embrace them, a new study shows.The study was performed by security firm Appthority on the most commo… Continue reading App developers not ready for iOS transport security requirements
If you’ve encountered errors over the past month when trying to access HTTPS-enabled websites on your computer or Android phone, it might have been due to a bug in Chrome.The bug affected the validation for some SSL certificates issued by Symantec, … Continue reading Chrome bug triggered errors on websites using Symantec SSL certificates
If you’ve encountered errors over the past month when trying to access HTTPS-enabled websites on your computer or Android phone, it might have been due to a bug in Chrome.The bug affected the validation for some SSL certificates issued by Symantec, … Continue reading Chrome bug triggered errors on websites using Symantec SSL certificates
Two researchers claim to have found a way to bypass the activation lock feature in iOS that’s supposed to prevent anyone from using an iPhone or iPad marked as lost by its owner.
The first report came Sunday from an Indian security researcher named Hemanth Joseph, who started investigating possible bypasses after being confronted with a locked iPad he acquired from eBay.
The activation lock gets enabled automatically when users turn on the Find My iPhone feature via iCloud. It links the device to their Apple IDs and prevents anyone else from accessing the device without entering the associated password.
One of the few things allowed from the activation lock screen is connecting the device to a Wi-Fi network, including manually configuring one. Hemanth had the idea of trying to crash the service that enforces the lock screen by entering very long strings of characters in the WPA2-Enterprise username and password fields.
To read this article in full or to leave a comment, please click here
Continue reading Researchers find a way bypass the iOS activation lock