Mobile menu toggle

security - page 10

Touch ID could record prints to catch iPhone thieves

By

Touch ID
Sorry, crooks!
Photo: Apple

Everyone points and laughs when dimwitted thieves got caught after taking identifying selfies with stolen iPhones or iPads.

However, in its quest to help crack down on Apple-related crime, Apple may go even further by using its Touch ID fingerprint sensor to record the fingerprints of would-be iOS thieves — at least according to a newly-published patent application update.

Apple gives hackers a behind the scenes look at iOS security

By

iOS 10
Here's how Apple keeps iPhone data locked right.
Photo: Ste Smith/Cult of Mac

Apple gave hackers an inside look at how it keeps iOS 10 secure during a recent Black Hat conference keynote that has now been made available to view online. 

The keynote by Apple security expert Ivan Krstic discusses three iOS security mechanisms (HomeKit, Auto Unlock and iCloud Keychain) in unprecedented detail, showing key elements of Apple’s cryptographic design. If you’ve ever been curious how Apple keeps all your private data safe, it’s well worth watching. 

Check it out below:

Apple is ready to pay hackers a big bounty for bugs

By

iOS 10
Apple needs help squashing bugs.
Photo: Ste Smith/Cult of Mac

Apple’s head of security and engineering architecture, Ivan Kritic, revealed yesterday that the iPhone maker is finally creating a bug bounty program that will offer rewards of up to $200,000 to security researchers who find vulnerabilities on the company’s various software platforms.

The news came during a keynote at the annual Black Hat Conference in Las Vegas where Kritic also gave attendees a behind-the-scenes look at iOS 10 security as part of Apple’s effort to become more open about its architecture in hopes of improving it.

Apple fixes security hole with iOS 9.3.4 update

By

iOS 9.3 Beta 4
iOS 9 gets one final update.
Photo: Ste Smith/Cult of Mac

iOS 9 is getting one final update before iOS 10 makes its big debut this fall. Apple just rolled out iOS 9.3.4, which is an “important security update” that’s recommended for all iPhone and iPad users with compatible devices.

Venmo flaw allowed attackers to use Siri to drain accounts

By

money
You might wanna check your account.
Photo: Jim Merithew/Cult of Mac

A critical flaw with PayPal-owned Venmo left iPhone users’ accounts exposed to a lethal account that could have allowed attackers to steal $2,999.99 in just two minutes.

The Venmo security flaw was discovered by Salesforce security engineer Martin Vigo who found that Siri can be used on locked iPhones to drain an account just by sending a few text messages.

Check out the hack in action:

Apple engineer to give behind the scenes look at iOS 10 security

By

iPhone SE
iOS 10's security secrets will be revealed at Black Hat Conference.
Photo: Apple

In an unprecedented talk, Apple plans to give the world an in-depth look at the security features on iOS 10 at the Black Hat USA 2016 conference where hundreds of the top computer security professionals from around the world will gather.

The keynote will be given by Apple Engineer Ivan Krstic who will give technical details about three iOS security mechanisms, including the new Auto Unlock feature that is brand new in iOS 10.

Snowden’s iPhone case tells you when you’re being spied on

By

1469037866496_concept-rendering
Edward Snowden is building his own iPhone case.
Photo: PubPub

When you think of Edward Snowden the first phrase your mind goes to probably isn’t “quality iPhone case manufacturer.” Nonetheless, the famed NSA whistleblower today announced that he has presented just such a smartphone accessory at an event at MIT’s Media Lab.

Anyone want to venture a guess as to the case’s unique selling point?

Pokémon Go update fixes Google security issues

By

Pokemon GO
It's now safe to catch 'em all.
Photo: Niantic Labs

Catching Pokémon on your iPhone just got a lot safer thanks to the first-ever update to Pokémon Go.

Developer Niantic Labs pushed out a fix today that resolves the security issue that gave Pokémon Go full access to some players’ Google accounts without their knowledge, or providing a way to revoke access without losing progress in the game.

Pokémon Go catches all your Google data (here’s how to stop it)

By

Pokémon Go comes with monstrous security risks.
Pokémon Go comes with monstrous security risks.
Photo: The Pokemon Company

Pokémon hunters that have been running around the city trying to catch ’em all are putting themselves in danger and it has nothing to do with battling a level 50 Charizard.

By signing up to play Pokémon Go through Google, many iOS users have unknowingly exposed all of their emails, chats, calendars, documents and more to the game’s developer and third-parties.

Dangerous new Mac malware fully compromises OS X

By

Bitdefender
Bitdefender found a new backdoor into OS X.
Photo: Ste Smith/Cult of Mac

Apple’s Mac systems have been exposed to a dangerous new piece of malware that allows attackers to take full control of OS X.

The new malware, dubbed Backdoor.MAC.Eleanor by security researchers, provides attackers with a backdoor into OS X systems by embedding a script into a fake file converter application that’s found on many reputable sites that sell Mac apps.

Apple winning as lawmakers give up on forced backdoors

By

iPhone SE
The FBI won't get its backdoor anytime soon.
Photo: Ste Smith/Cult of Mac

U.S. lawmakers are said to be giving up on their push for new encryption laws that would require companies like Apple to create software backdoors that allow the government to access our devices.

It’s thought the lack of White House support and Apple’s high-profile battle with the Justice Department, which was unable to force the company into providing an iPhone unlock, are some of the reasons why supporters are losing hope.

iOS 9 security update means more passcode unlocks

By

There has to be a safer solution.
It's not just in your head.
Photo: Jim Merithew/Cult of Mac

If you’ve found yourself entering your passcode more frequently since you updated to iOS 9 — even though you have Touch ID enabled — it’s thanks to Apple’s latest security measures.

In an update to its Security Guide, published this month, the company confirms that iOS 9 will make you enter your passcode if you haven’t used your iPhone or iPad in at least eight hours.

Apple products subject to secretive Chinese security reviews

By

Photo of Apple CEO Tim Cook talking with Chinese children to illustrate an Apple history article about the deal that brought the iPhone to China Mobile, the world's largest carrier.
The Chinese government is snooping on Apple devices.
Photo: Apple

Chinese authorities are scrutinizing Apple devices before allowing them to be sold in the country, claims a new report.

The reviews involve Chinese officials requiring executives of foreign tech companies to answer questions in person, with the concern being that companies like Apple may be forced to trade trade secrets for market access.

FBI paid a ton of money to unlock San Bernardino iPhone

By

The next iPhone will have a huge battery.
The next iPhone will have a huge battery.
Photo: Ste Smith/Cult of Mac

Getting into the San Bernardino shooter’s iPhone 5c was no cheap feat for the FBI.

The Department of Justice withdrew its demands that Apple unlock the terrorist’s iPhone after the FBI was approached by a third-party that had a method to hack the device. It turns out Cellebrite charged the FBI through the nose to access the information it wanted, but FBI director James Comey says it was totally worth it.

How Apple makes encryption easy and invisible

By

iPhone SE encryption
iPhone SE set for biggest upgrade yet.
Photo: Ste Smith/Cult of Mac

Do you know how many times a day you unlock your iPhone? Every time you do, you’re participating in Apple’s user-friendly encryption scheme.

Friday, the company hosted a security “deep dive” at which it shared some interesting numbers about its security measures and philosophy as well as user habits. To be honest, we’re less concerned with how Apple’s standards work than the fact that they do and will continue to. But that’s kind of the point behind the whole system — Apple designed its encryption system so that we don’t even have to think about it.

Windows users should delete QuickTime ASAP

By

Apple is killing QuickTime for Windows.
Apple is killing QuickTime for Windows.
Photo: Apple

Apple is finally giving up on QuickTime for Windows, but the company doesn’t plan to fix a few critical flaws that still linger with the software.

If for some reason you’re still using QuickTime for Windows, it would be a really good idea to just uninstall it right now.

Apple engineers admit iPhone will never be ‘unbreakable’

By

iPhone will never be 100 percent hacker-proof.
iPhone will never be 100 percent hacker-proof.
Photo: Sam Mills/Cult of Mac

Getting to a point where absolutely no one can hack into your iPhone will be practically impossible, according to Apple engineers who admit no company writes perfect code.

Apple has been criticized by national security officials for making it harder for law enforcement to access much needed information on locked iPhones to solve cases. Now that the FBI has figured out a way to hack the San Bernardino shooter’s iPhone the debate has cooled down, but Apple engineers say they want the FBI to divulge their method, for the sake of security.

Here’s how Steve Jobs answered a question about government snooping in 1981

By

TV screen grab of Apple co-founder Steve Jobs dressed in a suit and with a full beard
Check out the hipster beard on Steve!
Photo: ABC

Apple turns 40 today and, while a lot has changed since the company’s early days, it seems that questions about government snooping have not.

ABC News today released footage from a vintage interview in which a very young Steve Jobs debates computers on a 1981 episode of Nightline.

In addition to trotting out his “bicycle for the mind” metaphor, Jobs also talks about how best to stop the government from snooping on your computer, a topic that seems very timely in the aftermath of Apple’s battle with the FBI.

Check out the Steve Jobs interview below.

FBI cracks San Bernardino iPhone without Apple’s help

By

That iPhone in your pocket is much more well-traveled than you are.
The FBI didn't need Apple's help after all.
Photo: Ste Smith/Cult of Mac

The Department of Justice has removed all legal action against Apple after the FBI successfully hacked the San Bernardino terrorist’s iPhone without assistance from Cupertino.

Apple and the FBI have been fighting a very public legal battle over whether the government can force the iPhone-maker to create a backdoor into iOS. Apple CEO Tim Cook publicly defied a federal court order to deliberately weaken iOS security for millions of users, but it appears that the feds are backing down — at least for now.

Malware uses Apple’s FairPlay DRM to attack iOS users

By

hack
143 million customers in the U.S. may have been impacted by the attack.
Photo: Colin / Wikimedia Commons

Researchers have just discovered a new malware threat for iOS devices that uses Apple’s own FairPlay DRM system as a delivery vector.

Dubbed “AceDeciever” by the researchers, the malware in question can technically infect any type of iOS device, jailbroken or not, if a user downloads a third-party app.

Apple’s new 4-inch iPhone, killer Netflix tips, the FBI fight, and more

By

What's next? We've got some ideas.
What's next? We've got some ideas.
Photo: Ste Smith/Cult of Mac

If the rumor mill is correct, Apple’s releasing a new 4-inch iPhone, possibly dubbed the iPhone SE, at its upcoming keynote in March. What the heck will it look like, what are the specs, and how much will it cost?

We’ve got a look at all the possibilities in this week’s Cult of Mac Magazine, plus a look at why your iPhone battery will never last more than a day, Apple’s cryptic “loop you in” invite, a way to lock down your iPhone, and a ton of killer tips and product reviews to keep you informed.

All that, plus a bunch more, in this week’s issue. Here are the top stories for the week:

Adobe rushes out yet another security patch for Flash

By

Once more unto the breach, dear friends, once more.
Once more unto the breach, dear friends, once more.
Photo: Adobe

In a post that surprises no one in the tech community, Adobe needed to fix another Flash security flaw today, rushing out a patch for its web multimedia software.

Adobe is rating the update as a critical vulnerability “that could potentially allow an attacker to take control of the affected system.”

Which, of course, sounds like kind of a big deal. Time for yet another security patch for Flash.

DOJ accuses Apple of deliberately making iPhone unhackable (no duh)

By

Apple wants to keep everyone (even the feds) out of iOS.
Apple wants to keep everyone (even the feds) out of iOS.
Photo: Ste Smith/Cult of Mac

The U.S. Department of Justice has filed a new motion in court today regarding its battle against Apple to compel the iPhone-maker to unlock the iPhone 5c that belonged to San Bernardino shooter Syed Rizwan Farook.

In the new filing the feds argue that Apple has “deliberately raised technological barriers” on iOS to make it harder for the government and other attackers to hack Apple devices. They also claim that demanding Apple to unlock one iPhone won’t result in a security vulnerability for all users.