Why isn't Apple (yet) supporting Tim Berners-Lee to 'save the web'?

Credit to Author: Jonny Evans| Date: Mon, 25 Nov 2019 07:36:00 -0800

Apple isn’t (yet) among the signatories for a global campaign to save the web launched by Tim Berners-Lee.

I hope this is something the company plans to change.

What’s the story?

Berners-Lee, inventor of the web, is concerned that the web is becoming a forum for political manipulation, fake news, privacy violations and other harms that he fears may plunge us all into what he calls “digital dystopia.”

He’s launched a new global action plan and is asking governments, companies and individuals to commit to protecting the web and ensuring it benefits humanity.

“The power of the web to transform people’s lives, enrich society and reduce inequality is one of the defining opportunities of our time,” he said.

To read this article in full, please click here

Read more

Blackberry refreshes its UEM suite, focuses on zero-trust access

Credit to Author: Lucas Mearian| Date: Thu, 21 Nov 2019 10:17:00 -0800

Read more

The 5 true takeaways from Android's camera vulnerability circus

Credit to Author: JR Raphael| Date: Thu, 21 Nov 2019 09:21:00 -0800

I don’t know if you’ve read much news this week, but it seems the sky is falling and we’re all terribly doomed.

No, I’m not talking about that news — as usual, that’s another column for another publication — but rather the news that a security flaw in some Android camera apps could turn our phones into privacy-plundering spy portals and bring an end to human life as we know it.

I mean, have you seen some of these headlines?!

  • “Hundreds of millions of Android phone cameras can be hijacked by spyware”
  • “Android flaw lets rogue apps take photos, record video even if your phone is locked”
  • “An Android flaw lets apps secretly access people’s cameras and upload the videos to an external server”

Holy hibiscus, Henry! Even I’m trembling from all of that, and I know it’s a bunch of misguided, sensationalized hooey.

To read this article in full, please click here

Read more

Facebook's iOS 'bug' secretly filmed users. IT, take note.

Credit to Author: Evan Schuman| Date: Wed, 20 Nov 2019 09:41:00 -0800

News reports last week — subsequently confirmed by a Facebook executive’s tweet — that the Facebook iOS app was videotaping users without notice should serve as a critical heads up to enterprise IT and security execs that mobile devices are every bit as risky as they feared. And a very different bug, planted by cyberthieves, presents even more frightening camera-spying issues with Android.

On the iOS issue, the confirmation tweet from Guy Rosen, who is Facebook’s vice president of Integrity (go ahead and insert whatever joke you want about Facebook having a vice president of integrity; for me, it’s way too easy a shot), said, “We recently discovered our iOS app incorrectly launched in landscape. In fixing that last week in v246, we inadvertently introduced a bug where the app partially navigates to the camera screen when a photo is tapped. We have no evidence of photos/videos uploaded due to this.”

To read this article in full, please click here

Read more

Mobile security perceptions don't approach reality. And that's a problem.

Credit to Author: Evan Schuman| Date: Mon, 18 Nov 2019 07:44:00 -0800

In general, security vendors love consumer surveys where consumers say that they would never, ever, ever do business with a retailer or a bank with poor security practices. But consumers have historically been terrible predictors of their own behavior, and they also tend to tell retailers and banks what they want to hear, rather than the truth.

And the truth, based on the public financial filings of plenty of companies that have suffered public data breaches, is that consumers — partially thanks to zero liability programs from the payment card companies — tend to not change retailers or banks when such data breaches happen. Why? Quite a few reasons. First, zero liability sees to it that they don’t lose any money (it actually limits losses to $50, but almost no business enforces that, and they tend to simply eat all of the consumer losses). If consumers lost large amounts of money from breached retailers or banks, yes, they’d flee, but that doesn’t happen.

To read this article in full, please click here

Read more

What you need to know about new data-security rules for business travel

Credit to Author: Mike Elgan| Date: Fri, 15 Nov 2019 07:39:00 -0800

From U.S. Customs agents to cybercriminals, everyone wants to copy the data on your phone and laptop. Here’s how to protect your rights and also avoid industrial espionage.

Read more

A week in security (November 4 – November 10)

Credit to Author: Malwarebytes Labs| Date: Mon, 11 Nov 2019 16:38:19 +0000

A roundup of important security news from the week of November 4–10, including the release of Malwarebytes 4.0, vendor email compromise, fake news, robocalls, and more.

Categories:

Tags:

(Read more…)

The post A week in security (November 4 – November 10) appeared first on Malwarebytes Labs.

Read more

Why you should begin using Sign in with Apple

Credit to Author: Jonny Evans| Date: Fri, 08 Nov 2019 06:17:00 -0800

Apple has published lots of information explaining how its newly introduced Sign in With Apple service solves a problem most of us didn’t know existed and which many of us would very much like to solve.

Who watches the watchmen?

The issue:

Most social sign-in services act a little like people-tracking honey pots: You come to use a website or service and stay because the people providing the authorization use that moment to gather even more information about what you do.

What happens is that the persistent identity used by those services can be combined with other data to identify where you go, what you look for and more.

To read this article in full, please click here

Read more