Étiquette : vulnerability (Page 16 of 38)

21 octobre 2019 / noflux

이슈가 되고 있는 갤럭시 S10, 노트10 기종 실리콘 케이스 지문인식 뚫리는 현상 테스트해봤습니다….

갤럭시 10시리즈 사용자분들 당장 지문잠금해제 푸세요 pic.twitter.com/tbmzErrmkP

— StaLight (@Sta_Light_) October 16, 2019

“Samsung is once again in hot water for a shoddy biometrics implementation. This time the culprit is the Galaxy S10 and its ultrasonic in-screen fingerprint reader, which apparently can be unlocked by anyone as long as there is a screen protector or some other piece of transparent plastic between a finger and the sensor.”

Source : Anyone can fingerprint unlock a Galaxy S10—just grab a clear phone case | Ars Technica

21 octobre 2019 / noflux

“Les plateformes en ligne, notamment dans les domaines de la location immobilière et de la restauration, prévoient la possibilité de déposer des commentaires, éventuellement de manière anonyme, censés offrir un retour d’expérience et éclairer la clientèle. Alors que ces avis déterminent souvent le choix, cette pratique peut être dévoyée car elle permet à des usagers mal intentionnés, voire à des concurrents, de s’exprimer pour tromper sciemment les internautes. Afin de renforcer la transparence et la loyauté en ligne et d’assurer l’honnêteté dans les relations commerciales, une piste d’amélioration souvent avancée serait d’imposer la publication du numéro IP de l’émetteur du commentaire à côté de l’avis.”

Source : Sandrine Le Feur : Question N° 23644 au Secrétariat d’état au numérique – NosDéputés.fr

13 octobre 2019 / noflux

relates to France Set to Roll Out Nationwide Facial Recognition ID Program

“You can look at France’s use of facial recognition for digital identity in two ways: it goes too far in terms of privacy, or they’re using the most secure new technology. Are they a front-runner or are they overstepping the mark?”

Source : French Liberte Tested by Nationwide Facial Recognition ID Plan – Bloomberg

3 octobre 2019 / noflux

“A former Yahoo software engineer has pleaded guilty to improperly accessing the accounts of around 6,000 Yahoo users in search of nude photos and videos. The news, outlined in a press release from the US Attorney’s Office for the Northern District of California, says programmer Reyes Daniel Ruiz used his privileges at Yahoo to crack user passwords and access the accounts of primarily younger women, including friends and co-workers.”

Source : Former Yahoo engineer pleads guilty to searching 6,000 user accounts for nudes – The Verge

2 septembre 2019 / noflux

“The unprecedented attack on Apple iPhones revealed by Google this week was broader than first thought. Multiple sources with knowledge of the situation said that Google’s own Android operating system and Microsoft Windows PCs were also targeted in a campaign that sought to infect the computers and smartphones of the Uighur ethnic group in China.”

Source : iPhone Hackers Caught By Google Also Targeted Android And Microsoft Windows, Say Sources

13 août 2019 / noflux

o mg cable

“A hacker who goes by the online handle MG took an innocent-looking Apple USB Lightning cable and rigged it with a small Wi-Fi-enabled implant, which, when plugged into a computer, lets a nearby hacker run commands as if they were sitting in front of the screen.”

Source : This hacker’s iPhone charging cable can hijack your computer | TechCrunch

9 août 2019 / noflux

“Cette attaque a déjà coûté la coquette somme de 18 millions de dollars à Baltimore. Comme le note Le Parisien, dix millions de dollars ont été investis pour réparer le système informatique, dont un million pour le rachat de nouveaux ordinateurs, alors que huit millions de dollars sont liés aux pertes de revenus de la ville. Ironie du sort, le virus a en partie été créé par la National Security Agency (NSA), avant que l’agence ne le se fasse voler en 2017.”

Source : Baltimore, Johannesburg, Lake City : les ransomwares coûtent très cher aux mairies – Cyberguerre

20 juin 2019 / noflux

“Google says it has fixed an issue that allowed old owners of Nest security cameras to continue to view a feed from the device, even after deregistering it from their account. The issue could have potentially allowed an old owner of one of the cameras to continue to look through it, even after selling it to someone else. The new owner would have had no indication that a stranger could be able to look inside their home. ”

Source : Used Nest cameras had bug that let previous owners peer into homes – The Verge

13 juin 2019 / noflux

“Using a Shazam-like technology, the app would record audio to identify soccer games, and use the geolocation of the phone to locate which bars were streaming without licenses. El Diario reports that fans have downloaded that app more than 10 million times, essentially turning them into undercover narcs.”

Source : LaLiga’s app listened in on fans to catch bars illegally streaming soccer – The Verge

13 juin 2019 / noflux

“Mais comment fonctionne vraiment cet objet connecté, conçu en Allemagne, produit en Chine par la marque SilverCrest et commercialisé par Lidl en France, Allemagne, Belgique, Suisse et Grande-Bretagne ? Numerama a découvert, avec l’aide de deux Français, que certaines caractéristiques de l’appareil soulevaient des interrogations. Notre enquête montre notamment qu’un micro a été installé dans le Monsieur Cuisine Connect, sans que sa présence ne soit indiquée, et sans qu’il n’y ait de justification apparente.”

Source : Monsieur Cuisine Connect : micro caché, Android non sécurisé… les dessous du robot cuiseur de Lidl – Tech – Numerama

Étiquette : vulnerability (Page 16 of 38)

Archives

Catégories

Méta