Mobile
Why Twitter's two-factor authentication isn't going to stop media organisations from being hacked
Twitter's new two factor authentication system will be welcomed by some users, but ignored by others who will find it a nuisance.
Notably, it's unlikely to be much use at all to media companies who have suffered at the hands of hackers, as Graham Cluley explains.
Mozilla pushes out new Firefox and Thunderbird: 8 security advisories, 3 critical fixes
Not to be outdone by Microsoft and Adobe's Patch Tuesday releases, Mozilla pushed out its latest browser and email client updates today.
There are no bated-breath patches for in-the-wild exploits, but 3 of the 8 security fixes are deemed "critical".
Monday review - the hot 19 stories of the week
It's that time of the week again - here's your roundup of everything we wrote in the last seven days.
Nordstrom tracking customer movement via smartphones' WiFi sniffing
The department store has installed sensors in 17 US stores to collect information from customers' smartphones as those phones automatically scan for WiFi service. Nordstrom promises it's keeping the data anonymous.
Pentagon OKs Androids, BlackBerrys for soldiers
The US Department of Defense has approved the use of Samsung phones running "Knox," a hardened version of Android.
Apple ships jolly uninteresting iOS 6.1.4 update
Apple just released iOS 6.1.4 for the iPhone 5.
Apparently, it improves speakerphone calls, but it doesn't fix the lock-screen bug in iOS 6.1.3...
Beware of encryption companies bearing gifts!
An iPhone messaging app that claims to be "totally secure" is offering a £10,000 prize to anyone who can intercept a message from it.
Paul Ducklin wonders how you are supposed to win the prize if the app really is "totally secure"...
Google tightens up Play Store policy, officially bans "off-market" updates...
Google has made a number of changes to its Android Play Store ecosystem recently.
There's now a rudimentary anti-virus provided with the OS, a ban on ad blockers, and, most recently, an official policy on sneaky "off-market" updates...
Viber flaw bypasses lock screen to give full access to Androids
Security researchers have identified a security hole in Viber that can be exploited to bypass Android smartphones' lock screen and gain full access to the device.
SSCC 107 - Hostgator, Safari, Java, pwning planes with Android, and Facebook Home [PODCAST]
Here's the latest episode in the popular "Chet Chat" series.
Join Chet and Duck as they discuss what we can learn from recent security news in this quarter-hour podcast.
Snapchat sexting spam - how to stop messages from Honey Crush 9 and her friends
Many Snapchat users complain that they were sent photos from scantily-clad women with names such as "Honey.Crush9" inviting them to join them in a Skype conversation.
Here's what happened, and how to stop it from happening again.
FAA and security researchers at odds over airplane hack security
The avionics bigwigs FAA and EASA have said "bunk!" to a researcher's claims that his new Android app could potentially hack planes.
OK, says fellow plane hacker "Renderman," if that's true, there's no harm in giving public access to your test labs, now is there?
Facebook Home - Great if you think privacy is dead
Facebook has introduced a new way to utilize its services on Android mobile phones. Facebook Home streamlines keeping in touch with friends, their photos, Likes and shares. The issue is how it impacts your privacy, even if you choose not to use it yourself.
Planes can be hacked remotely with Android app, researcher claims
A security research has cooked up an exploit framework and Android app that can be used, at least theoretically, to hack a plane, including changing its destination or even crashing the aircraft.
SSCC 106 - US DoD and BYOD, "scanner" malware, 2FA, and browser wars revisited [PODCAST]
For your listening pleasure, here's the latest episode in our popular "Chet Chat" series.
Senior Security Advisor Chester Wisniewski discusses the latest security news with regular guest Paul Ducklin in an entertaining and easily-digested quarter-hour podcast.
Mobile device security in the US military comes under fire
A recent report by the US Inspector General revealed staggering flaws in the US military's management of mobile devices, and a severe lack of basic IT security protection in place for such devices.
SSCC 105 - HP printers, Google blocks ad blockers, Apple does the 2-step, and more...
Have you joined thousands of others, and become a loyal listener to the "Chet Chat" yet?
Here's the latest Naked Security podcast, Sophos Security Chet Chat 105, discussing a range of recent and newsworthy topics from the world of computer security.










