Skip to main content

Security

Skype Video Calls Can Give Away What You're Typing Inside Other Apps

posted onOctober 3, 2016
by l33tdawg

Researchers from the University of Padua, Italy, and University of California, Irvine, have successfully guessed what users are typing based on the sounds given by keystrokes captured during a Skype conversation.

The idea behind this attack, called Skype & Type (S&T), is that people who engage in Skype voice or video calls, often continue to work inside other applications while they're on the Skype call.

Security firm pours cold water on Yahoo's state-sponsored hack claim

posted onOctober 3, 2016
by l33tdawg

On 22 September 2016, Yahoo's CISO Bob Lord confirmed to the world that in 2014 a "state-sponsored actor" had made off with the account information of at least 500 million Yahoo users.

Whoever perpetrated the hack not only stole those affected users' names and email addresses but also nabbed other important bits of personal information, including their dates of birth, phone numbers, (thankfully bcrypt-hashed) passwords, and unencrypted security answers.

How to steal the mind of an AI: Machine-learning models vulnerable to reverse engineering

posted onOctober 3, 2016
by l33tdawg

Amazon, Baidu, Facebook, Google and Microsoft, among other technology companies, have been investing heavily in artificial intelligence and related disciplines like machine learning because they see the technology enabling services that become a source of revenue.

Consultancy Accenture earlier this week quantified this enthusiasm, predicting that AI "could double annual economic growth rates by 2035 by changing the nature of work and spawning a new relationship between man and machine" and by boosting labor productivity by 40 per cent.

Samsung pushes out September security patch for the Galaxy S6 edge+

posted onSeptember 30, 2016
by l33tdawg

Samsung has been awfully busy today. Not only has it distributed the Marshmallow update for the Galaxy A7 and Galaxy Tab S 10.5 (Wi-Fi), but it’s also now pushing out this month’s security patch for the International variant of the Galaxy S6 edge+.

The upgrade is around 160MB in size and, just like the version that made its way to the Galaxy S6 and Galaxy S6 edge earlier this week, carries a truckload of much-needed patches for both the Android OS and the device to make it more stable and secure.

Apple is smart to enlist hackers and iPhone 7 jailbreakers to secure iOS and macOS

posted onSeptember 30, 2016
by l33tdawg

Apple has historically been very guarded and secretive. While this is still true today, the company has definitely become more open after Steve Job's death. Quite frankly, the fact that there are now public betas for both iOS and macOS is mind-blowing for the Apple faithful. Last month, the company even launched its first bug bounty program! Why did Apple soften its guarded position? It had to. As the technology market advances, and security becomes a bigger focus, it is not possible to catch all bugs and vulnerabilities in house.

Marissa Mayer declined to reset Yahoo users’ passwords 2 years ago

posted onSeptember 29, 2016
by l33tdawg

On Tuesday, US senators sent a letter to Marissa Mayer, asking the Yahoo CEO for details on the recently discovered breach of at least half a billion accounts.

Some of the questions from that letter: How did such a large-scale breach go unnoticed for 2 years? What’s Yahoo doing to prevent future breaches? Has Yahoo changed its security protocols? If so, how?