Articles about Security

When I was expecting an exotic dish that would blow my mind just by looking at it, Samsung yesterday served up a plain, simple and frankly overdone spaghetti Bolognese. The new Galaxy S4 might just be the best Android smartphone that Samsung has ever made, but it's not as "awesome" or "innovative" nor filled with "innovation" as the company would lead us to believe. It's a wife with some nip and tuck instead of a hot supermodel.

Instead of being smitten by the Galaxy S4 I was left with a bitter taste in my mouth: Haven't I seen some of those features already in older smartphones? Admittedly, there are some impressive ones out there -- like Dual Camera and Dual Video Call -- but generally speaking Samsung appears to have focused more on delivering a huge number of features rather than focusing on fewer truly innovative ones.

Continue reading →

On Thursday, Canadian smartphone maker BlackBerry announced plans to secure Android and iOS devices with Secure Work Space for BlackBerry Enterprise Service 10. The company cites evolving needs and "ever-growing variety of devices" that are used within the work space as the main reason for stepping up to fortify the security of the two mobile operating systems.

BlackBerry targets both smartphones and tablets running Android and iOS through data-at-rest and data-in-transit security capabilities. The company says that administrators will be able to create a "separate and secure work space" which contains corporate apps, calendar, contacts, web email and other features, and configure, interact, secure and wipe the new compatible devices.

Continue reading →

I don't mean to sound paranoid, but...it seems potential danger lurks everywhere on the Internet and your inbox -- as criminals seek to infiltrate your computer or raid your bank account. That old saying that everyone is out to get you is basically true these days. Well, not everyone, but a surprisingly large number of people truly are out to get you.

And, to get you, they need a plausible scam. That usually means a "message from your bank" or one from PayPal -- I get the latter on a daily basis. But the underside of the web also utilizes other means -- virus scares and current events. It's the current -- or future -- events that attract the attention of Microsoft's Larry Hryb, better known as Major Nelson.

Continue reading →

Kaspersky Lab has announced the public availability of Technical Previews for Kaspersky Anti-Virus 2014 and Kaspersky Internet Security 2014. These are very early releases and some way from being complete, so there’s little information on new features yet – but a few basic details have appeared.

The interface has been updated, for instance. It’s not radically different, just simplified, and even more Windows 8-like than it was before. The new releases now support touch screens, too, and our initial impressions are that the program could work well in a touch environment. Kaspersky’s Safe Money (a feature which helps to secure your online transactions) now supports more banks and web stores, and allows you to choose your preferred browser.

Continue reading →

On the day Microsoft promises an Internet Explorer 10 update that enables Adobe Flash without white-list restrictions, guess what happens? Adobe releases another Flash security bulletin. This is the wrong contest, competing with Oracle's Java to see which can be the most vulnerable platform on your computer.

An official statement from Adobe's Wendy Poland informs that this latest update is "to address security updates in Adobe Flash Player 11.6.602.171 and earlier versions for Windows and Macintosh, Adobe Flash Player 11.2.202.273 and earlier versions for Linux, Adobe Flash Player 11.1.115.47 and earlier versions for Android 4.x, and Adobe Flash Player 11.1.111.43 and earlier versions for Android 3.x and 2.x. These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system".

Continue reading →

Launch some applications and they’ll display the Windows User Account Control prompt, asking "Do you want to allow the following program to make changes to this computer?". And while this is great for security, if you’re running the same trusted program on a regular basis then you might begin to find it just a little annoying.

You could avoid this by turning off UAC entirely, but that’s not ideal (it does have some security value). And so a better idea might be to use ElevatedShortcut. It’s a tiny portable tool which helps you to creates shortcuts that won’t generate a UAC prompt, no matter what you’re trying to launch.

Continue reading →

On the heels of Apple disabling Flash on OS X after the Adobe platform was used to compromise company computers, Microsoft goes the other way. The company today announced that beginning March 12 an Internet Explorer 10 update on Windows 8 and Windows RT will enable Flash content to run by default.

Rob Mauceri, Internet Explorer group product manager, explains: "As we have seen through testing over the past several months, the vast majority of sites with Flash content are now compatible with the Windows experience for touch, performance, and battery life. With this update, the curated Compatibility View (CV) list blocks Flash content in the small number of sites that are still incompatible with the Windows experience for touch or that depend on other plug-ins". What about the large number that are compromised?

Continue reading →

This week, Twitter’s OAauth keys leaked to Github. So what does that mean? Don’t panic. The consequences of a client application’s key being compromised are not as serious as user credentials being compromised. The risk associated with this breach is that a malicious application tricking you in participating in an OAuth handshake could access the Twitter API on your behalf. Attackers might come up with clever ways to exploit this leak.

In the meantime, avoid using Twitter through any application that you do not trust. If you seem to be redirected to Twitter after clicking a link or through any other means unexpectedly, don’t consent to an application accessing Twitter on your behalf even if this appears to be pointing to an application you trust.

Continue reading →

Phil Schiller doesn't cast a big shadow. Sure he is Apple's big cheese over global marketing, but in product briefings or Apple keynotes, Schiller never struck me as having much presence, particularly around the charismatic Steve Jobs. Somehow, I expect lead marketer to be more like Don Draper of AMC's "Mad Men". Schiller has lots of enthusiasm, but not command. He comes across as too nice a guy.

But make no mistake, his contributions to Apple, over nearly two decades, are immeasurable -- and not the topic of this post. There's another kind of presence, one of brilliant ideas and behind-the-scenes leadership. Yesterday, Schiller showed his brilliance, and scored a tremendous marketing coup for Apple in just four words: "Be safe out there".

Continue reading →

When Google released Android 4.0 (Ice Cream Sandwich) back in 2011, it introduced a new data scrambling system designed to protect sensitive user information from snoopers who successfully managed to bypass the lock screen.

It’s strong security, but a team of German researchers have managed to crack the encryption by freezing a Galaxy Nexus and using a toolset called FROST (Forensic Recovery Of Scrambled Telephones) to retrieve contact lists, browser histories, and photos (basically everything you’d want to keep private).

Continue reading →

Today is the one-year anniversary of the Google Play store and the company celebrates with a big sale. However, things may not be all balloons and ribbons in Android land. Something darker lurks just beneath the surface of Google's Android marketplace.

Brian Krebs, a former Washington Post reporter who now writes a security blog, found a bit of information that could make your hair curl. Krebs makes a habit of hanging out on the seedy side of the web and he recently hit potential paydirt, encountering a new botkit that is making the rounds and leverages actual verified accounts from the marketplace to trick users into downloading phony banking applications. Krebs spotted a developer purchasing verified Google Play accounts for $100 each on an underground forum.

Continue reading →

We all know the dangers of living on the darker side (or the wrong side) of the InterWebs -- malware is waiting at every corner to ruin the "joy" that some may have by saving some money through pirated software. We know that. The real question is whether that is brainwashing caused by large software corporations or a real threat to our safety that people knowingly ignore?

Microsoft, one of the most popular companies around when it comes to having its software pirated shortly after or even before a product is released, has commissioned a new study to inform consumers and businesses of the dangers involved in using pirated software. The study is conducted by IDC which has analyzed 270 websites, P2P (Peer-to-Peer) networks, 108 software downloads and 155 CDs or DVDs, and interviewed 268 IT managers or CIOs (Chief Information Officer) and 2,077 respondents (1,104 consumers and 973 businesses) from various locations around the globe.

Continue reading →

Norton has refreshed its entire 2013 security range with the release of Norton Antivirus 2013 v20.3, Norton Internet Security 2013 v20.3 and Norton 360 v20.3. The update should be applied automatically to all existing Norton 2013 users. Version 20.3 is a maintenance release fixing a number of known issues, but also comes with improvements from the previous release, including enhanced Windows 8 compatibility, better overall performance and improvements to Norton Identity Safe.

Highlighted bug fixes include one resolving issues where the Norton program service ccsvchst.exe doesn’t shutdown properly, plus another that led to blue-screen issues when both Norton and Nero products are installed on the same computer. Another corrected issue saw users complain about other products being uninstalled during the Norton installation process leading to junked Windows installations, while problems with key components like AutoProtect and AntiSpyware getting switched off without being resolved by the Fix Now tool have also been fixed.

Continue reading →

Bitdefender has released the first public beta of Bitdefender Total Security 2014, its high-end security suite. And while the new edition doesn’t offer any revolutionary changes, there are enough additions and enhancements to make it interesting.

Bitdefender themselves are highlighting the suite’s “adaptive scanning technology”, which apparently “visibly improves speed and performance in a matter of hours by gradually molding to your PC”. The new Wallet fills a gap in the previous editions by storing your user names and passwords, then automatically filling them in for you.

Continue reading →

AVAST Software has announced the public availability of avast! 8, which now comes in four main flavors: avast! Free Antivirus, avast! Pro Antivirus (from $39), avast! Internet Security (from $49) andavast! Premier (from $69).

The suites all have a new touch-optimized, Windows 8-style interface. And they also include Software Updater, a tool which automatically checks for updates of the most commonly-exploited apps (Adobe Reader, Adobe AIR, Flash, Java, browsers and so on), as well as a simple Browser Cleanup app to help you review your browser add-ons, and remove or disable any you don’t want.

Continue reading →