POPULARITY
Apple is finally planning to kill off iTunes on Windows, Amazon now offers passkeys for logins, and Google Chrome will allow users to hide their IP addresses; just like Apple's iCloud Private Relay. Show Notes: French authority leaks iOS 17.1 launch date: “by October 24 at the latest” “Scary Fast” Apple Event on October 30 (Twitter link to thoughts by Mark Gurman and Ming-Chi Kuo on what will be presented next week) Apple Is Finally Killing Off iTunes – for Real This Time Apple Releases iTunes for Windows Update With Option to Listen to Podcasts and Audiobooks Apple hikes Apple One cost by up to $5 as most services prices rise Hacker leaks 4.1 million additional 23andMe genetic data profiles Amazon now lets you log in with Apple's Passkeys 1Password detects “suspicious activity” in its internal Okta account Okta says hackers breached its support system and viewed customer files Fake KeePass site uses Google Ads and Punycode to push malware Firesheep is 13 years old Google Chrome's new "IP Protection" will hide users' IP addresses Intego Mac Premium Bundle X9 is the ultimate protection and utility suite for your Mac. Download a free trial now at intego.com, and use this link for a special discount when you're ready to buy.
Apple has finally stopped selling the Apple Watch Series 3, which can no longer get security updates. The FBI shuts down 11-year old malware. And a $300 hacking tool enables phishers to defeat two-factor authentication using automated man-in-the-middle attacks. Show Notes: Apple stops selling Watch Series 3 — eight months after its last security update GarageBand Security Update Details Finally Released Microsoft Announces Outlook for Mac is Now Free to Use FBI shuts down 11-year-old NetWire RAT malware An Analysis of the Cross-Platform Backdoor OSX/NetWeirdRC Mac malware on the rise again; several new threats found: Netwire, Mokes, LoudMiner, NewTab Ransomware Group Claims Hack of Amazon's Ring Using authenticator apps for MFA? Software for sale can hack you anyway Josh's 2010–2011 blog posts mentioning Firesheep Firesheep (Wikipedia) Intego Mac Premium Bundle X9 is the ultimate protection and utility suite for your Mac. Download a free trial now at intego.com, and use this link for a special discount when you're ready to buy.
This week's stories:Two new un-patched 0-days affecting billions of Windows users - here is the fix!Mozilla reversed itself on TLS v1.0 and 1.1 deprecation... due to the coronavirusA micropatch for Win7 and Server 2008Chrome's release schedule has been impacted by the coronavirusAvast emergency-disables their internal JavaScript emulatorCookieThief - "FireSheep evolves for the 21st century"PwnToOwn Spring 2020 winnersSteve's coronavirus journeyThe fixes for RowHammer have not worked Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: privacy.com/securitynow Wasabi.com offer code SECURITYNOW
This week's stories:Two new un-patched 0-days affecting billions of Windows users - here is the fix!Mozilla reversed itself on TLS v1.0 and 1.1 deprecation... due to the coronavirusA micropatch for Win7 and Server 2008Chrome's release schedule has been impacted by the coronavirusAvast emergency-disables their internal JavaScript emulatorCookieThief - "FireSheep evolves for the 21st century"PwnToOwn Spring 2020 winnersSteve's coronavirus journeyThe fixes for RowHammer have not worked Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: privacy.com/securitynow Wasabi.com offer code SECURITYNOW
This week's stories:Two new un-patched 0-days affecting billions of Windows users - here is the fix!Mozilla reversed itself on TLS v1.0 and 1.1 deprecation... due to the coronavirusA micropatch for Win7 and Server 2008Chrome's release schedule has been impacted by the coronavirusAvast emergency-disables their internal JavaScript emulatorCookieThief - "FireSheep evolves for the 21st century"PwnToOwn Spring 2020 winnersSteve's coronavirus journeyThe fixes for RowHammer have not worked Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: privacy.com/securitynow Wasabi.com offer code SECURITYNOW
This week's stories:Two new un-patched 0-days affecting billions of Windows users - here is the fix!Mozilla reversed itself on TLS v1.0 and 1.1 deprecation... due to the coronavirusA micropatch for Win7 and Server 2008Chrome's release schedule has been impacted by the coronavirusAvast emergency-disables their internal JavaScript emulatorCookieThief - "FireSheep evolves for the 21st century"PwnToOwn Spring 2020 winnersSteve's coronavirus journeyThe fixes for RowHammer have not worked Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Sponsors: privacy.com/securitynow Wasabi.com offer code SECURITYNOW
We talk about all those GDPR emails you've been receiving, mention a new Spectre-type vulnerability, and then take a deep dive into browser cookies and private browsing. Episode 13: Is My Computer's CPU Secure? How to Request a Copy of Your Apple ID Account Data (https://www.macrumors.com/how-to/get-a-copy-of-your-apple-account-data/) Blob - Binary large object (Wikipedia) (https://en.wikipedia.org/wiki/Binary_large_object) How to Manage and Remove Browser Cookies on Mac and iOS Firesheep (Wikipedia) (https://en.wikipedia.org/wiki/Firesheep); see also Josh's past blog articles about Firesheep Episode 7: Tom Cruise Is in the Row Behind You (physical access) Get 60% off Intego's Mac Premium Bundle X9 with the code INTEGOPODCAST. Download now and try it for free at intego.com. Intego Mac Security Podcast Survey: Win a $100 gift card (https://www.surveymonkey.com/r/integopodcast)
Welcome to episode 60 of the EdTech Situation Room from August 9, 2017, where technology news meets educational analysis. This week Jason Neiffer (@techsavvyteach) and Wes Fryer (@wfryer) discussed the celebrated death of a podcasting patent, revised password recommendations for users, hacked school Twitter accounts, new STEM-focused badges for Girl Scouts, and summer experiments with BadgeList.com. Additional topics included the recent Google broohaha over a sexist employee-authored memo, a new study further debunking the "digital native" myth, digital identity with Yoti, a predicted cyborg evolution for humanity, Jason's new Windows 10S experiment, and a creepy prototype of a self-driving truck. Geeks of the week included The Hackable Podcast by McAfee (from Jason) and "Send by FireFox" (from Wes). Wes also shared a flashback memory from 2010 involving the "FireSheep" extension for FireFox. Check out the podcast shownotes for links to a post about that incident and all the referenced articles / resources from the show. Follow us on Twitter @edtechSR to stay up to date about upcoming shows. Please try to join us LIVE online if you can, normally on Wednesday nights at 10 pm Eastern / 9 pm Central / 8 pm Mountain / 7 pm Pacific.
We discuss a tiny DOS caused when upgrading thoughtbot.com to Rails 5.1 and how Rails could better surface warnings that only occur in your production configuration. We also get an update on multi-table joins in Rust. Meaningful schema diffs in Rails 5.1 HSTS Firesheep Use a secure session cookie for new installs pshtt Observatory by Mozilla Encrypted secrets in Rails 5.1 PhantomJS maintainer steps down Sean solves his problem: Multi-tabls joins in Rust
Nuestra credulidad es su fuerza http://podcast.jcea.es/podcast1984/2 Notas: 00:00: Presentación. 02:27: Noticias breves: 02:27: I Evento Telemático de ANSI: Charla - Ley Seguridad Ciudadana y LECrim. Charla Debate Seguridad Domestica El Enemigo En Casa. 04:22: Facebook integra OpenPGP en sus notificaciones de correo electrónico. La nota de prensa: Securing Email Communications from Facebook. 05:00: El autor del ransomware Locker publica el listado de claves necesarias para descifrar los ficheros de los usuarios. 05:40: Libro Cibercrimen, escrito por Manel Medina y Mercè Molist. 07:20: En el debate hablaremos sobre la TTIP. 08:10: Javiér presenta el Tratado transatlántico de comercio e inversiones. 09:45: Antonio habla del espionaje internacional. 10:00 Derechos laborables, servicios públicos, medicamentos. 11:19: A Jesús no le parece mal la globalización. El problema es irse al máximo común divisor. 13:17: Antonio insiste en el tema del espionaje masivo, ley mordaza, etc. 14:45: Jesús presenta tu teoría del egoismo productivo. 15:30: Javier indica que el terrorismo y similares proporcionan excusas para aprobar leyes abusivas contando con el apoyo del público. 16:20: Jesús opina que el público está dispuesto a ceder en lo que sea con tal de mantener su percepción de nivel de vida y su percepción de seguridad. 19:43: Jesús: La propia TSA confirma que la seguridad aérea es un coladero: US Airport Screeners Missed 95% of Weapons, Explosives In Undercover Tests. 24:38: Antonio: Si damos al público en general por perdido, ¿qué opciones tenemos? 26:20: Jesús: Proporcionar seguridad "a pesar" del público, que no sea una elección. 27:00: La epifanía de Jesús con FireSheep (en el podcast Jesús habla de BlackSheep. Es una errata, el nombre correcto es FireSheep). 31:00: Tras Snowden, nada ha cambiado. ¿O sí?. 31:40: Antonio: ¿privacidad? 32:20: Jesús ignora a Antonio y sigue contando su rollo. Más detalles en su artículo Nada ha cambiado desde Snowden. ¿O si?. 34:30: Jesús da su opinión sobre las peticiones de muchos gobiernos de limitar la calidad del cifrado en las comunicaciones. 35:40 Jesús: Ya se ha abierto la caja de Pandora. La tecnología no se puede prohibir porque los malos lo usarán y los buenos estarán desprotegidos. 39:00: Javier habla de la ley antiterrorista francesa. 39:30: Jesús: arbitrariedad en la aplicación de leyes que se infringen de forma masiva. 40:30: Jesús: Estas propuestas de ley son globos sonda. 44:30: Asimetría entre violaciones de la ley de protección de datos por parte de empresas privadas o por parte de organismos públicos. 45:20: Antonio pide un resumen final. 45:50: Jesús da su receta. 46:30: Javier recuerda que el tema del debate era la TTIP y que el público debe informarse y resistirse. 47:50: Antonio aporta su opinión. 48:18: Javier nos habla de la ingeniería social, presentando un ejemplo práctico.
Mike Wood a Senior Threat Researcher with SophosLabs is Chet's guest. They discuss the upcoming Patch Tuesday, the new Firesheep and go in depth on the recent troubles at certificate authority DigiNotar.
Honorary product evangelist Tony Ross sits down with Chet Wisniewski to talk the week's news--a rough week for Apple security and a bit on Firesheep--and then an in-depth discussion on application control.
Carl and Richard talk to Troy Hunt about hacking yourself - testing your web site's defenses before someone else does! The conversation starts out talking about FireSheep and the need to use SSL everywhere. If you log in, you should be using SSL! Troy runs down a list of the common exploits you should test against, like SQL injection and cookie spoofing. There's also a discussion around cross-site scripting and X-Frame-Options. There are some simple things that script kiddies can do to exploit your site - you should do them first, and then defend yourself!Support this podcast at — https://redcircle.com/net-rocks/donations
Carl and Richard talk to Troy Hunt about hacking yourself - testing your web site's defenses before someone else does! The conversation starts out talking about FireSheep and the need to use SSL everywhere. If you log in, you should be using SSL! Troy runs down a list of the common exploits you should test against, like SQL injection and cookie spoofing. There's also a discussion around cross-site scripting and X-Frame-Options. There are some simple things that script kiddies can do to exploit your site - you should do them first, and then defend yourself!Support this podcast at — https://redcircle.com/net-rocks/donations
Thomas Smits berichtet über die Internet-Sicherheit aus Sicht des Benutzers, woran man Sicherheitsmängel bei Internetangeboten erkennen kann und welche Maßnahmen die Betreiber von Webseiten ergreifen können, um ihren Nutzern ein möglichst sicheres Umfeld zu ermöglichen.
Thomas Smits berichtet über die Internet-Sicherheit aus Sicht des Benutzers, woran man Sicherheitsmängel bei Internetangeboten erkennen kann und welche Maßnahmen die Betreiber von Webseiten ergreifen können, um ihren Nutzern ein möglichst sicheres Umfeld zu ermöglichen.
Memristors revealed (resistors with memory, a new type of circuit element developed by HP), Spotify (streaming music with offline storage, may be better than Pandora and iTunes), wi-fi security (session highjacking with Firesheep, packet sniffing with Wireshark), Profiles in IT (Samuel Morse, inventor of telegraph and Morse code), Edinburgh Fringe funniest joke about password with 8 characters, Steve Jobs resigns as Apple CEO (legendary leader turned Apple around twice, creator of iApple, leaves for health reasons), hurricane physics (counter-clockwise rotation because of Coriolis force, low pressure zone in center has higher water level or surge), and HP TouchPad bites the dust (squeezed out by iPad and Android tablets. This show originally aired on Saturday, August 27, 2011, at 9:00 AM EST on WFED (1500 AM).
Memristors revealed (resistors with memory, a new type of circuit element developed by HP), Spotify (streaming music with offline storage, may be better than Pandora and iTunes), wi-fi security (session highjacking with Firesheep, packet sniffing with Wireshark), Profiles in IT (Samuel Morse, inventor of telegraph and Morse code), Edinburgh Fringe funniest joke about password with 8 characters, Steve Jobs resigns as Apple CEO (legendary leader turned Apple around twice, creator of iApple, leaves for health reasons), hurricane physics (counter-clockwise rotation because of Coriolis force, low pressure zone in center has higher water level or surge), and HP TouchPad bites the dust (squeezed out by iPad and Android tablets. This show originally aired on Saturday, August 27, 2011, at 9:00 AM EST on WFED (1500 AM).
There's a new social media security threat – and Facebook's right in the middle of it. A new program called Firesheep allows you to hijack any social media profile, so we're looking at how you can protect yourself. And security is the big topic for cell phones this week, too. We start off with a […] The post Social Media: Cheap and Easy – Facebook & Firesheep and Amazon & Netflix – What Do They Have in Common? appeared first on WebTalkRadio.net.
John and Dave are back with a great show today filled with some fantastic answers. First a tip that (here's the free giveaway) indicates that WPA does protect you from Firesheep's antics, then it's on to fixing pesky iTunes firewall dialogs, killing processes, preference fixing and more. Subscribe today, support […]
Rob de la Cretaz,and Mike Sorg are on with our old friend Tony "Chachi" Walker. And we're catching up with the latest on RockMelt, Firesheep, Boxee Box, Samsung Tab, Netflix on Android, and more! Join the AwesomeCast on Twitter, Facebook,, and be sure to follow us on iTunes in both videoand audio formats, as well as YouTube, Boxee, Roku, and Blip.tv! As always, you can chime in with news, thoughts, or comments at Contact@AwesomeCast.com or 724-25-A-CAST.
Schools_and_Tech_28_The_Education_Project.mp3 Listen on Posterous News of the Week: 1) The Truthy Project TAT Truthy is a research project that helps you understand how memes spread online. With our images and statistics, you can help identify misuse of Twitter.2) AP History Students in Virginia High School Forbidden to Research Outside Classroom TATABC News: Students in one Virginia history course will have to take what they learn in the classroom at face value, as their teachers forbid the use of any outside resources, including conversations with their parents.3) Like a monitor more than a tutor KBHomework helpers are part of a growing a niche industry. But educators wonder if this is another facet of “helicopter parenting.”4) Application Inflation - NYT - CTThe numbers keep rising, the superlatives keep glowing. Each year, selective colleges promote their application totals, along with the virtues of their applicants.For this fall’s freshman class, the statistics reached remarkable levels. Stanford received a record 32,022 applications from students it called “simply amazing,” and accepted 7 percent of them. Brown saw an unprecedented 30,135 applicants, who left the admissions staff “deeply impressed and at times awed.” Nine percent were admitted.The biggest boast came from the University of California, Los Angeles. In a news release, U.C.L.A. said its accepted students had “demonstrated excellence in all aspects of their lives.” Citing its record 57,670 applications, the university proclaimed itself “the most popular campus in the nation.”Such announcements tell a story in which colleges get better — and students get more amazing — every year. In reality, the narrative is far more complex, and the implications far less sunny for students as well as colleges caught up in the cruel cycle of selectivity. 5) Xmarks: Alive and Kicking - TAT (just a quick update!)“...pleased to announce that we’re in the final stages of completing a sale of Xmarks to a new owner who is 100% committed to keep our great browser sync service running smoothly.”Main Topic: The Education Project conference in Bahrain - dedicated to creating outcomes to education reform Tim's Tech Tidbit: FiresheepHow to protect against Firesheep attacksCloak your connection to foil Firesheep snoopers Update to last episode: Network Activity Monitor for Windows: ZoneAlarm, Comodo PersonalFireWall, Avast!Endorsements: Cammy: Keep up on edtech topics with http://paper.li/ISILBOY and RSA Vision app for iPhone (watch those cool animations like Sir Ken Robinson’s on your iPhone!) Kevin: Google Calendar’s World Calendar Lab extension Permalink | Leave a comment »
Rob de la Cretaz,and Mike Sorg are on with our old friend Tony "Chachi" Walker. And we're catching up with the latest on RockMelt, Firesheep, GoogleTV, Windows Phone, Skyfire, and more! Join the AwesomeCast on Twitter, Facebook,, and be sure to follow us on iTunes in both videoand audioformats, as well as YouTube, Boxee, Roku, and Blip.tv! As always, you can chime in with news, thoughts, or comments at Contact@AwesomeCast.com or 724-25-A-CAST.
Election results, Narcissistic Tweets, Body Scanners, What has Obama done so far, Xbox Kinect, T-Bird and the Brakes, The Rent is Too Damn High, and Firesheep.
Rob de la Cretaz,and Mike Sorg are on with our old friend Tony "Chachi" Walker. And we're catching up with the latest on RockMelt, Firesheep, GoogleTV, Windows Phone, Skyfire, and more! Join the AwesomeCast on Twitter, Facebook,, and be sure to follow us on iTunes in both videoand audioformats, as well as YouTube, Boxee, Roku, and Blip.tv! As always, you can chime in with news, thoughts, or comments at Contact@AwesomeCast.com or 724-25-A-CAST.
Les animateurs :- Patrick Beja (Notpatrick sur Twitter)- Cédric Ingrand (cingrand sur Twitter)- Tristan Nitot (nitot sur Twitter)Les sujets abordés :- Facebook event- Réciprocité des données- Mozilla et Firesheep, Firefox 4, Web App StoreEt le reste... Voir Acast.com/privacy pour les informations sur la vie privée et l'opt-out.
This is the 20th episode of the Social Media Security Podcast recorded November 5th 2010. This episode was hosted by Tom Eston and Scott Wright. Below are the show notes, links to articles and news mentioned in the podcast: FireSheep – “Firefox plugin to pull active cookies from popular websites while using open wifi”. Facebook Responds to FireSheep […] The post Social Media Security Podcast 20 – FireSheep, Privacy in the US, What NOT To Post On Facebook appeared first on The Shared Security Show.
This week we have interview with Kristinn Gudjonsson, developer of Log2TimeLine. Kristinn gives us an update on what is on the road ahead for Log2TimeLine. In Listener Email Joe from Northeast Wisconsin Technical College wrote in to say that blanking the password or even cracking the password is possible without the LiveView LE version. Luby Wrote in to tell how much he enjoyed SANS 508 and learning about SuperTimelines. Luby also explains how open wireless access points can eliminate the threat of Firesheep. We also give Luby a “special ringtone” for his wife’s phone. In News we talk about an iPhone bug and an vulnerability to PayPal’s app that could cost you money. In Legal News, 2 cases send criminals to jail. Tech Topics cover Windows LNK files and the Web Site of the Week is a Qwiki
DigitalOutbox Episode 67 - Firesheep, Adobe, Samsung Tab and Cloud Backups You can subscribe via iTunes, via the podcast feed or download directly the MP3 or the AAC (enhanced) podcast. Click here to view the shownotes for this episode.
Rob de la Cretaz,and Mike Sorg are welcoming back the MC for the upcoming Evening with Podcamp event, Norm Huelsman! We talk about the fires in the news this week, including the threatening FireSheep plugin plaguing our coffee shops, SkyFire spreading Adobe Flash to iPhones like a virus, iPads invading Verizon stores, and whether it may be a better option, Netflix on Xbox, Boxee Box, and much more! Join the AwesomeCast on Twitter, Facebook,, and be sure to follow us on iTunes in both videoand audioformats, as well as YouTube, Boxee, Roku, and Blip.tv! As always, you can chime in with news, thoughts, or comments at Contact@AwesomeCast.com or 724-25-A-CAST. And make sure to check out ReddUpThreadUp.com for the Pittsburgh area clothing swap, if youâ??re in the neighborhood!
Google broadband (1 Gbsp, several communities, 500,000 users, testbed for technology and applications, open architecture), Net Neutality (Republicans want to find a way for telecomms to recoup investment, Democrats want all traffic treated equally, compromise required, should be driven by technology rather than politics), Profiles in IT (Eric Paul Allman, creator of sendmail, the dominant Internet email service), Firesheep makes packet sniffing easy (Firefox add-on, captures unencryped cookies from 24 programs like Facebook or Twitter, allows user to hijack session with one click on the mouse), and iPhone showdown (CDMA iPhone by Verizon versus GSM iPhone by ATT). This show originally aired on Saturday, October 30, 2010, at 9:00 AM EST on WFED (1500 AM).
Google broadband (1 Gbsp, several communities, 500,000 users, testbed for technology and applications, open architecture), Net Neutality (Republicans want to find a way for telecomms to recoup investment, Democrats want all traffic treated equally, compromise required, should be driven by technology rather than politics), Profiles in IT (Eric Paul Allman, creator of sendmail, the dominant Internet email service), Firesheep makes packet sniffing easy (Firefox add-on, captures unencryped cookies from 24 programs like Facebook or Twitter, allows user to hijack session with one click on the mouse), and iPhone showdown (CDMA iPhone by Verizon versus GSM iPhone by ATT). This show originally aired on Saturday, October 30, 2010, at 9:00 AM EST on WFED (1500 AM).