Apple
Monday review - the hot 32 stories of the week
It's that time of the week again - here's your roundup of everything we wrote in the last seven days.
Apple finally adopts HTTPS for the App Store - here's why it matters
Last year, a Googler named Dr. Elie Bursztein noticed that Apple's App Store protocols were using HTTP where HTTPS would have been much better.
Some time later, Apple has changed its ways.
Paul Ducklin explains why it matters...
PWN2OWN results Day Two - Adobe Reader and Flash owned, Java felled yet again
PWN2OWN 2013 finished off today.
A second scheduled attack on IE 10 didn't happen, so IE 10 didn't get owned again, but Flash and Reader fell once each, and Java was exploited for the fourth time in two days...
PWN2OWN results Day One - Java, Chrome, IE 10 and Firefox owned
Of the Big Four browsers, only Apple's Safari has so far survived the onslaught of the browser-breakers at PWN2OWN 2013.
Java fell three times today; Adobe's Flash and Reader meet their attackers tomorrow...
Apple bans outdated Adobe Flash plugins from Safari
Last week, Apple showed that it is getting more serious about security by getting strict about the version of Flash you're allowed to use in Safari.
Paul Ducklin explains the what and the why...
Lessons to learn from the UGNazi hacking attacks against Mat Honan and Cloudflare
Technology journalist Mat Honan and Cloudflare CEO Matthew Prince have something in common - they've both been hacked by the UGNazi hacktivist group.
And what they told the RSA Conference spells bad news for those of us who love to use the internet and embrace cloud-based technologies in our personal and work lives.
Second iPhone passcode hack vulnerability discovered
You too can get into somebody's locked iPhone, particularly if you have a prehensile tail and don't mind (almost) placing a phony emergency call. Which you a) probably don't and b) hopefully do.
SSCC 103 - Mandiant report, iOS coders owned, Twitter accounts hacked, and more...
Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?
Here's the latest Naked Security podcast, Sophos Security Chet Chat 103, discussing a range of recent and newsworthy topics from the world of computer security.
Apple patches the Java hole its own developers fell into - eventually
Shortly after admitting that its own techies got infected thanks to a Java hole, Apple has pushed out a Java update for the rest of us.
Apple, with this most recent update, seems to have washed its hands permanently of browser-based Java. Paul Ducklin explains...
Apple's own Macs bitten by Java-based malware attack
Apple released a statement today acknowledging that they were victims of the same attackers that Facebook talked about last week. A zero-day Java vulnerability infected Apple Mac developers through a drive-by attack.
More Mac malware attacking minority groups in China
A targeted Mac malware attack strikes a minority group in China, exploiting an old Microsoft Word vulnerability.
Unlock an iPhone without the passcode - harmless trick or computer crime?
A YouTube video showing you how to unlock an iPhone 5 without the passcode has racked up nearly 300,000 hits over the past two weeks.
Paul Ducklin looks into the good and the bad of the story...
SSCC 102 - Probably the best 15 minute security podcast you'll hear today
Have your joined thousands of others, and become a loyal listener to the "Chet Chat" yet?
Here's the latest Naked Security podcast, Sophos Security Chet Chat 102, discussing a range of recent and newsworthy topics from the world of computer security.
Anatomy of a bug - how Mac OS X chokes if you say "FILE"
Heard about the OS X bug that crashes programs if you display the text FILE colon slash slash slash? (We're not going to write it here in full, just in case!)
It's an intriguing problem - Paul Ducklin explains what goes wrong, and offers you two workarounds.
Jailbreak iOS 6.1 today, or wait until Sunday?
The cat-and-mouse game between Apple and its diehard technical fans continues.
Update - jailbreak - update - jailbreak...
Should Apple open up iOS and offer an official route to jailbreaking?
Serious security holes fixed in Opera - but Mac App Store users left at risk again
It should go without saying that if you use Opera, you should update to version 12.13 as soon as possible.
But... what if you didn't get your copy of Opera from the official website?
What if, instead, you acquired your version of Opera for Mac from Apple's Mac App Store?











