Apple's 'good enough' security response: why it’s not going to change, isn’t fair, but doesn’t matter anyway
Apple’s handling of the recent "goto fail" vulnerability has brought about another round of the usual criticisms that we’ve heard from the security research community for years. In this most recent episode, Apple’s decision to provide security updates for iOS devices while leaving the vulnerability unpatched on Mac OS X for four days and giving no clear sign of the company's intentions has revived the oft-repeated criticisms that Apple isn’t transparent in its security response, isn’t timely, and doesn’t engage with the researcher community positively. Often the criticism will point to Microsoft as an example of what Apple doesn’t do and should.
I’m a ten year veteran of the Microsoft Security Response Center (MSRC), and I and my colleagues have said much the same things about Apple’s security response. In fact, one of my colleagues, Stephen Toulouse, made news in 2006 by calling on Apple to implement some of the many programs that Microsoft had put together. For us, it was always particularly frustrating to see Apple essentially get a pass on behavior that would lead to huge outcries if Microsoft did it. Think of the outcry if there was an SSL/TLS vulnerability that enables man-in-the-middle attacks affecting Microsoft Windows and Internet Explorer that’s unpatched for four days with no information from Microsoft. Now, compare that with what we saw with Apple. Forgive the pun but its Apples to oranges, really and Apple gets off easy every time.
Netflix gets hacked -- don't panic, it's a good thing
Working in the corporate world can be pretty soul-crushing. This is particularly true for engineers and programmers. You see, they all start out as young men and women with big ideas and ambition. However, office politics and bureaucracy can quickly destroy all promise. While this isn't true of all companies, let's face it, not everyone is going to be a hero -- the world needs grunts.
Wouldn't it be great if some companies could sponsor an outlet for creativity? Imagine, the minds of employees being free to create. Even if it is just one day, the fun and memories would make the rest of the year palpable. Well, Netflix has done just that, with what it calls, "Netflix Hack Day".
The first Beta of Ubuntu GNOME 14.04 is here -- Linux fans, download it now
Linux is on a roll lately, as Android and Chromebooks continue to gain marketshare. While this should be a win for the open-source community, many purists do not consider Android or Chrome OS to truly be Linux. Of course this is not true, as both operating systems utilize the Linux kernel. However, I understand where Google detractors are coming from; a distribution like Ubuntu is more the traditional approach to using the kernel.
While I too love Ubuntu, I am not a fan of Unity. While I do not hate Canonical's environment, I simply prefer and adore GNOME 3. Today, the first Beta of Ubuntu GNOME 14.04 is here. It's time to brush off that DVD burner, and write that .ISO!
How to force Office 365 to upgrade to Service Pack 1
Service Pack 1 has just started to roll out to Office 2013 users, but Office 365 users have been left out in the cold. You might think that as a subscriber your software is kept constantly updated -- and this is true to a point. But talking to Paul Thurrott, Microsoft reveals that a "handful of updates are totally new in SP1" and these have not all made their way to Office 365 yet. Unless you follow the little trick that Paul has shared, that is.
Unlike many applications Office 365 does not have a built-in means of forcing an update check -- so we have to force a forced update! The steps are very quick and simple to follow, and you can grab yourself a copy of SP1 in next to no time.
UK's Optic Nerve program spied on millions of Yahoo users' video chats -- found porn
It sounds like something from a James Bond film -- or something from a creepy news story about a landlord stalking one of his tenants -- but the headline relates to a real story. We're all only too aware of the activities of the NSA and other governmental agencies monitoring the telephone and internet activities of people around the world, but the latest revelations see things taking a turn for the seriously sinister.
The UK intelligence agency GCHQ, between 2008 and 2010, tapped into the webcam chats of millions of Yahoo users.
Top 10 Android battery-sucking vampire apps -- get your garlic and holy water
As smartphones and tablets evolve, they get faster and gain more features. However, there is one place where they are still lagging -- battery life. Many devices still require daily charging. Not only is this annoying, it is dangerous too. After all, you cannot call 911 from a dead phone.
While some newer devices such as the Droid Maxx and iPad Air are class-leading in battery longevity, people still want more. A good way to increase battery life is to avoid using apps that suck your battery like vampires. Today, KS Mobile announces its list of the top 10 Android vampire apps.
Nokia X: making sense of Microsoft's strategy
Earlier this week, Nokia announced a line of Android-based smartphones with a combination of Nokia/Microsoft services replacing Google services. While some industry observers were quick to praise this move, there are many unknowns about the goal of this strategy.
In my opinion, Microsoft is following one or more of four possible game plans.
AVG dumps LiveKive cloud backup service -- here’s what you need to do next
AVG has announced plans to discontinue its LiveKive cloud-based backup and sync service for Windows and Macs. The decision is unsurprising -- thanks to underwhelming reviews and fierce competition, it appears AVG has decided to concentrate its efforts on its core security products.
Existing LiveKive users won’t be cut adrift immediately, however: the service will continue as normal until April, and data won’t actually be deleted until August.
You know what’s scarier than facing a horde of zombies? Facing a horde of zombies in the dark...
I was a beta tester for Papa Sangre II, the excellent audio-only game for iOS (if you’ve yet to try it I can whole-heartedly recommend it -- Sean Bean stars) and am a massive fan of Zombies Run, an audio fitness app, that you listen to while running and which takes place following a zombie apocalypse.
So naturally, the news that Papa Sangre’s creators Somethin' Else are working on a zombie-based audio-only first person shooter has me in a heightened state of excitement.
AndrOpen Office extends touch support
AndrOpen Office -- "the world’s first port of OpenOffice for Android" -- has been updated to version 1.43 with the addition of some very welcome touch-friendliness.
New support for scrolling with a swipe means navigation is much easier. This build also supports zooming in and out by pinching.
Kitsch alert! Alchaemy reveals 24kt gold Apple Mac Pro
It looks like every company that desperately wants to be in the spotlight -- or win some kitsch award -- is trying to do it by unveiling something in gold. Well, congrats, Alchaemy, you most definitely are the latest winner.
The company took the wraps off a 24 karat gold Mac Pro, that is part of its Shyne series. As if Apple's new powerhouse is not expensive enough, starting at $2,999, be prepared to spend an additional $1597.99 (because, probably $1600 sounded too expensive) to customize it in this trim. Some would say the Mac Pro looks like a trash can. Well, thanks to Alchaemy, you can now make it look like a gold trash can.
Windows Phone will still be in Android and iPhone's shadow four years from now
Even though Windows Phone is definitely making inroads and is considered to be the fastest-growing smartphone operating system, in 2013 its market share came in at less than 4 percent, according to research firms IDC and Strategy Analytics. Consumers are (still) much in love with Android smartphones and iPhones, giving Windows Phone too little attention.
In its latest smartphone market forecast, IDC claims that Windows Phone will still lurk in the shadows four years from now, as its market share in 2018 is estimated to climb to just seven percent. Shipments of devices running the tiled mobile OS are expected to reach 121.8 million units, which would be a huge improvement over the roughly 35 million units in 2013, but still not nearly enough to catch up to Apple's iPhones or Android smartphones, which shipments IDC estimates will reach 249.6 and 1,321.1 million units, respectively.
Tots and tech -- survey shows media and technology essential to preparatory learning
Not to date myself, but when I was growing up, technology consisted of TV and radio. A large part of that TV, aside from Gilligan's Island reruns, was PBS content. Apparently that experience gave me good preparation for my educational start in life, or at least that is what a new survey claims.
A study conducted by the Public Broadcast System reveals that parents of children aged between two and six think that both media and technology is an important factor in preparing children for elementary school. Unsurprisingly, PBS was revealed to be one the top choices.
Third-party programs add to PC vulnerabilities
We reported earlier this week on how financial organizations are at risk from third parties with compromised security.
It seems that the same thing applies to software. The latest review by IT security specialist Secunia shows that third-party programs are responsible for 76 percent of the vulnerabilities discovered in the 50 most popular programs in 2013.
Crunch your JPG files down to size with JPGmini
Last week we wrote about PNGmini, a useful tool which can cut PNG file sizes without any loss in image quality.
Developer Voralent has now released JPGmini 1.0, which applies similar lossless compression technology to crunch down your JPEGs. (No relation to the commercial JPEGmini, apparently. We predict Voralent will be hearing from them soon.)
Most Commented Stories
© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.