Blog – Page 18

New Encryption Will Help Secure Your Android Device

October 25, 2018 by Joseph Martin

Google is taking additional steps to bolster user privacy and better secure the data of the company’s legions of Android device owners. The company recently announced a change to the Android Backup Service that will encrypt all user backup data stored on its cloud servers, such that even Google itself can’t read it.

Google has long allowed Android users to back up their app data and phone settings to their Google account so when they upgrade their phones, the process of getting the new device set up is quick and painless. However, until this recent change, none of the backup data stored was encrypted.

Beginning with Android Pie, the new encryption paradigm will work as follows:

Your Android device will generate a random security key that is unknown and invisible to Google

The key will be encrypted using your passcode, pattern, or lock screen PIN

Once encrypted, the key will be sent (securely) to a Titan security chip on Google’s servers

As Google explained in a recent blog post: “The Titan chip is configured to only release the backup decryption key when presented with a correct claim derived from the user’s passcode.”

All that sounds good in theory, but what about brute force hacking attempts? The company has an answer for that as well.

Here’s what they had to say about that topic:

“The limited number of incorrect attempts is strictly enforced by a custom Titan firmware that cannot be updated without erasing the contents of the chip…by design, this means that no one (including Google) can access a user’s backed-up application data without specifically knowing their passcode.”

The company has not specified which Android smartphones will be able to take advantage of the additional layer of security. All we know at this point is that the device must be running the latest OS (Android 9 – Pie). We expect to get a comprehensive device list from Google in the near future.

Malicious Messages In PlayStation Can Cause It To Crash

October 24, 2018 by Joseph Martin

Gamers take the games they play seriously. So seriously, in fact, that they’re not above resorting to dirty tricks to score a win.

Recently, social media has been abuzz with reports of a messaging app bug on Sony’s PlayStation devices. Specifically, there’s a bug in both the Android and iOS messaging apps that allow malicious gamers to send a poisoned character via group chat that will brick your gaming console.

If you’re in the middle of a tense death match, you lose by default, because you’re booted from the system entirely.

Here’s an example of what we’re seeing on Reddit:

“There is a new glitch that basically bricks your console and forces you to factory reset it. Even deleting the message from the mobile app doesn’t work. It happened to me during Rainbow Six: Siege. A player from the other team used a dummy account to send the message and crashed my entire team. We all have had to factory reset. Only one of our guys wasn’t affected, and he has his messages private.”

This note holds the key to the workaround until Sony makes some type of official response. If you haven’t yet had the dubious honor of being the recipient of this poisoned message, set your messages to private immediately.

Here’s how you do that:

Go to “Settings” and select “Account Management, Privacy Settings”

Enter your password

Select “Messages” and change it to either “Friends Only” or “No One,” then exit out of the subsystem. You’re all set from there.

If you’d rather change your message settings from your PC and a web browser, you can do that too, though the process is a bit different.

Here’s how:

From your PC, surf your way to the PSN Privacy Settings Management Page

Select “Personal Information/Messages”

Select “Edit,” then change the setting to either “Friends Only” or “No One.” Save and exit.

IP Spoofing Attacks Show Significant Increase

October 23, 2018 by Joseph Martin

Gaming and Gambling are huge industries with a truly global footprint. It’s no surprise then, that these industries have become an increasingly popular target for hackers.

Interestingly, according to the latest report issued by ThreatMatrix, the attack vector of choice when it comes to these industries is IP Spoofing. It has increased by a staggering 257 percent since this time last year, making it far and away the fastest growing attack vector in the gambling and gaming industry.

A spokesman for ThreatMatrix had this to say about the report:

“Rising cybercrime levels is no small issue for a sector that enjoys a truly global customer base. With more than two billion gamers worldwide, nearly 60 percent of the industry’s traffic is cross-border.

Operators must contend with a rapidly evolving regulatory landscape and stringent new anti-money laundering laws, making the verification of the true location of a transacting gamer a vital component in authenticating identity.”

Note that at least some of the increase in IP spoofing stems from the gamers themselves, specifically in countries where certain gaming activities may be illegal. Gamers who wish to participate anyway, in violation of their country’s laws, have to fake an IP address to make it appear that they are located in some other country.

Another key finding of the report is the fact that an increasing percentage of gamers and gamblers access sites primarily from their mobile devices. Mobile access has increased by 45 percent between this year and last. As of now, fully 71 percent of gaming and gambling transactions are made on a mobile device, which is serving to make them an increasingly attractive target for hackers.

A TreatMatrix spokesman continues to explain, saying:

“To deal with these challenges, gaming and gambling operators must incorporate dynamic digital identity intelligence that pieces together key indicators such as device intelligence, true geolocation, online identity credentials and threat analysis to better inform risk decisions. The key is to be able to effectively differentiate trusted users from fraudsters and understand changes in trusted user behavior without adding unnecessary friction.”

A daunting challenge indeed.

Some iOS Users Report Call Issues After Latest Update

October 22, 2018 by Joseph Martin

This hasn’t been a great month for two of the titans of tech. Both Apple and Microsoft have been plagued with bug-riddled updates to their operating systems. In Apple’s case, their new iOS 12 had to be patched just three weeks after its release because of all the bugs the company’s burgeoning user base discovered almost immediately after updating.

Unfortunately, the 12.0.1 patch seems to have created almost as many issues as it solved for some users. In particular, some users are reporting network and signal connectivity problems, leading to an increasing number of broken calls. It has created such a stir that it’s even caught the attention of national media.

A recent Forbes article had this to say:

“Since upgrading, owners of both new and old iPhones are finding their phones either don’t make or receive calls. Bluetooth connectivity, Wi-Fi and battery-related issues are again surfacing on an iOS generation which Apple has promoted as being all about efficiency, stability, and speed.”

We’re also seeing an interesting incarnation of the law of unintended consequences where iOS 12 is concerned. One of the things Apple did differently in this latest version of the OS was to reorganize how the OS recognizes people in your contacts list, referring to the Apple ID number.

Unfortunately, many users tended to group contacts under a common Apple ID (family under one, co-workers under another, and so on).

Recently, select users got a shock when they used iMessage to send a note to a friend and wound up sending it to a whole group, simply because iMessage uses the same Apple ID that now organizes your contacts. The company issued a quick patch to fix that, but as you might expect, it caused a fair amount of concern for the short period the but/unintended consequence existed.

All that to say, Apple is off to a rocky start with iOS 12. So far, at least, we’ve been underwhelmed. The promised speed, stability and efficiency isn’t being delivered.

Another Data Breach, This Time At The Pentagon

October 20, 2018 by Joseph Martin

As many as 30,000 people made up of a mix of both civilian and military personnel have had their personal and financial information exposed. This exposure is what has been reported as a major security breach of the Pentagon.

This is proof positive that no organization is safe from watchful hackers scattered all around the world.

The Associated Press report on the incident includes:

“The department is continuing to gather additional information about the incident, which involves the potential compromise of Personally Identifiable Information (PII) of DoD personnel maintained by a single commercial vendor that provided travel management services to the department. This vendor was performing a small percentage of the overall travel management services of the DoD…The department is continuing to assess the risk of harm and will ensure notifications are made to affected personnel.”

While there’s no good time for a data breach like this, it couldn’t have come at a worse time. The Government Accountability Office (GAO) had issued a scathing report of critical vulnerabilities in virtually all of the weapons systems programs the agency currently runs.

A small excerpt of the report reads as follows:

“One test report indicated that the test team was able to guess an administrator password in nine seconds…Multiple weapon systems used commercial or open source software, but did not change the default password when the software was installed, which allowed test teams to look up the password on the internet and gain administrator privileges for that software.”

It gets worse. When confronted with the findings of the report, Pentagon officials dismissed the report as being unrealistic.

Clearly, there was something to the report, or this breach would not have happened. The hope is that it will be sufficient to cause Pentagon officials to do some soul searching and reevaluate their positions. If not, you can bet that something like this will happen again.

New Windows 10 Update Pulled For Unintended Data Deletion

October 19, 2018 by Joseph Martin

Microsoft is having problems, and those problems are spilling out onto the company’s massive user base. In a highly unusual move, the company pulled its latest Windows 10 update after receiving numerous complaints from users about missing files.

Unfortunately, this isn’t the first time the company has had problems with updates to their OS. Back in April, the company delayed a planned update because at the last minute, Blue Screen of Death issues were discovered. In another instance, they had to rush out a patch after an update to fix Chrome and desktop freezing issues that impacted more than half a billion machines.

These issues have led many to begin questioning the company’s QA/QC process. It’s a fair question, because the issues described above are far from trivial, and should have been caught.

At the core, it appears that the main problem is communication. Research has revealed that these issues were caught, they simply weren’t flagged for review because they didn’t get a sufficient number of upvotes by the beta testing user community.

Windows 10 represents a significant departure from the company and a new era of openness. While Windows 8 was designed with little to no user input, Microsoft opted to open the Windows 10 development process up, relying on more than ten million beta testers to try out their new features and solicit feedback on.

Unfortunately, there appears to be a few gaps in their process, and those gaps are allowing serious problems to go un-noticed until they are in the wild.

Another problem is that because the company is relying so heavily on their massive beta test group, they phased out their dedicated Software Test Engineering staff. This was during a massive round of layoffs that came about a year ahead of the Windows 10 release.

Apparently, the decision to remove the STE group from the equation was premature, and given the recent flood of problems, the Windows 10 feedback program appears to be in need of a serious overhaul.

Newest WiFi Version Will Be Called WiFi 6

October 18, 2018 by Joseph Martin

Most people don’t know what the latest version of WiFi is called. That’s the fault of the Wi-Fi Alliance, the group that manages the implementation of WiFi. Since their earliest days, the group has insisted on a highly unconventional version numbering scheme.

If you’re curious, the current version is 802.11ac. The group’s numbering system isn’t very user friendly, which makes WiFi support fairly user un-friendly too.

All that is changing, however. The next version of WiFi will simply be known as “WiFi 6.” Going forward, the alliance will be using a conventional version numbering scheme that should make everyone’s lives easier.

Even better, they’re retroactively changing the names of all previous WiFi versions too, so it will be faster and easier to identify exactly what you’re working with.

Here are the old/new version names, as a handy reference:

802.11b = Wi-Fi 1

802.11a = Wi-Fi 2

802.11g = Wi-Fi 3

802.11n = Wi-Fi 4

802.11ac = Wi-Fi 5

The next standard to be released was originally to be named 802.11ax, but again, per the Wi-Fi Alliance, will be rebranded as simply WiFi 6. This will make it much easier for users to not only identify exactly which version they’re using, but also to keep their devices up to date.

In addition to that, the Wi-Fi Alliance has created a series of images that manufacturers can use on their products to provide an easily understood symbol with the WiFi version number the device is running. This will allow users to make better purchasing decisions when it’s time to buy new equipment.

User groups and manufacturers alike have signaled their strong support of the change, and it’s seen by an overwhelming majority as being a very good change on a variety of fronts. Kudos to the Wi-Fi Alliance Group for taking the step, and making all of our lives easier.

Spectre Security Built Into New Intel Chip Hardware

October 17, 2018 by Joseph Martin

By now, almost everyone has heard of the Spectre and Meltdown security flaws that have been making headlines for more than a year. They’re serious flaws with dire implications for tens of millions of users around the world who have an intel-based PC.

The saga surrounding the fixes for these issues has been a long one and filled with twists and turns. Intel originally attempted to push a software fix to protect its chips, but the patch they issued was so flawed that the company requested users not install it and wait for a better, more reliable patch.

In time, that patch was issued, but unfortunately, the protection it offered carried a hefty price in the form of significant system slowdowns.

The longer-term solution was, of course, to re-engineer the chips themselves. Recently, Intel announced that some of their 9th Generation chips will come with built-in fixes to ward against both Spectre and Meltdown. Note the word “some.”

Specifically, the company’s new line of K-series chips, used in gaming CPU’s have been re-engineered to be resistant to those security flaws. Unfortunately, the X-Series (Xeon-class chips) don’t feature those security fixes.

The reason is that they’re based on the older Skylake-X architecture, and given that, the company is relying solely on software updates to protect those chips.

At a recent desktop press event, the company had this to say about the matter:

“…the new desktop processors include protections for the security vulnerabilities commonly referred to as ‘Spectre,’ ‘Meltdown,’ and ‘L1TF.’ These protections include a combination off the hardware design changes we announced earlier this year as well as software and microcode updates.”

Although Intel has been roundly criticized for its handling of the issues surrounding these flaws, this is undeniably a step in the right direction.

Major Facebook Breach May Have Affected Your Account

October 16, 2018 by Joseph Martin

Facebook got hit hard by a currently unknown group of hackers. If you recently found yourself inexplicably logged out of the social media site, Facebook did it in response to the breach.

The breach resulted in the theft of data pertaining to more than fifty million of the site’s users.

Here’s what we know so far about the attack:

The hackers pulled off their heist by taking advantage of three different vulnerabilities.

Facebook detected the breach after spotting an unusual spike in traffic.

Your password has not been compromised, but unfortunately, the hackers don’t need it.

The hackers stole more than fifty million access tokens. These tokens can be used to take over Facebook accounts without passwords, even if you have two-factor authentication enabled.

If you were in the compromised group, the hackers have every scrap of personal information you’ve entered into the social media site.

If you use the “Logged in as Facebook” feature on other websites, those accounts are also at risk. The hackers can use the stolen tokens to access any site you log into with your Facebook credentials.

The reason you got logged out was because Facebook reset access tokens for everyone they suspected may have had their data stolen.

To find out if you’ve been hacked, you can check “Active Sessions” on Facebook. If you see an unknown IP address, or a location in some other country, that’s a sure sign that you’ve been hacked.

This breach is not connected in any way to the hacker who pledged to delete Mark Zuckerberg’s personal Facebook page.

In addition to that, you should know that Facebook is now facing a class-action lawsuit over the hack. The suit alleges that the company failed to protect their personal data from falling into the wrong hands due to the company’s lack of proper security practices.

While the vulnerabilities have been fixed, the class-action lawsuit has a good chance of succeeding. The investigation is still in its early stages, and there may be updates to this story as we learn more.

Apple IOS12 Users’ Photos And Contacts May Be Vulnerable

October 13, 2018 by Joseph Martin

Jose Rodriguez, a Spanish Apple enthusiast, has discovered a new security flaw to be aware of. He posted a Proof of Concept video showing the exploit in action.

We’ll say upfront that this is a highly convoluted attack involving more than two dozen discrete steps. A hacker would need to be in possession of the phone to pull it off, so it’s not something that’s likely to become a major threat.

Even so, we’ll provide the details below.

Apple has built in security measures that are designed to prevent someone from tricking Siri into allowing unauthorized access to the phone. Unfortunately, by using a complex series of steps involving both Siri and Apple’s Notes application, it’s possible for a hacker to bypass those security measures, access images stored on the phone, and then change the image associated with a contact or the owner of the phone.

This method is effective on both iOS12 and the iOS 12.1 beta, which means that Apple’s recent patch to their OS does not and will not prevent this exploit from working. Worse, the company has yet to comment on the matter, so at this point, there’s no timetable for a fix.

The independent news site Threatpost has been able to replicate the attack, so we have third-party confirmation.

Fortunately, there’s a simple way to negate the attack entirely while we’re waiting for a patch to close the loophole once and for all. Simply go to Settings – Face ID & Passcode – Touch ID & Passcode, and disable the “Allow access when locked” option for Siri.

Again, it’s important to reiterate that this is a highly complex attack that involves having both physical access to the device and more than two dozen steps, so this is not an issue that’s likely to be widespread. Even so, it pays to take precautions until Apple can roll out a fix.