 |
by Frederic Lardinois from Crunch Hype on (#H6SX)
Dropbox today announced that it will now support security keys.Security keys are physical USB dongles from companies like YubiCo that allow you to bypass the traditional app- and text message-based two-factor authentication schemes with their six-digit codes by simply plugging the key into your computer. Read More
|
Story
Major Android remote-access vulnerability is now being exploitedSimilar News
 |
by Joseph Keller from Android Central RSS Feed on (#H6S0)
Dropbox has announced that it will now offer support for USB security keys for logging in via the service's website. Dropbox already supports two-factor authentication for its site and apps sending one-time codes either through SMS or authenticator apps. USB keys, also known as Universal 2nd Factor or U2F, add a new, physical dimension to securing your Dropbox account.
|
 |
by jeremy from LinuxQuestions.org on (#H6KK)
Google launched Android Experiments today, the mobile apps counterpart to its Chrome Experiments site. Just like with Chrome Experiments, the idea behind Android experiments is to showcase apps...
|
 |
by Cory Doctorow from on (#H6M4)
In Not Even Close: The State of Computer Security, a talk given at the Norwegian Deveopers' Conference, Microsoft Research's James Mickens gave the most acerbic, funny, terrifying security talk I can remember seeing (and I've seen a lot of 'em!). Read the rest
|
 |
by Jared DiPane from Android Central RSS Feed on (#H6K3)
Google has launched Android Experiments, a new site in which the company will showcase what you can do with open source Android and Android Wear apps. The new site is similar to Google's Chrome Experiments which focused on web apps, but this time around the focus is all mobile. On the site Google is showing off a variety of experimental apps, from drawing apps to wallpaper apps and more.
|
Arch Linux has updated firefox (multiple vulnerabilities).CentOS has updated firefox (C7; C6; C5: multiple vulnerabilities).Debian has updated gnutls28 (denial of service), iceweasel (multiple vulnerabilities), and wordpress (multiple vulnerabilities).Fedora has updated devscripts (F22; F21: twovulnerabilities), kernel (F22; F21: information leak), pure-ftpd (F22: denial of service), xen(F22; F21:code execution), and xfsprogs (F22:information disclosure from 2012).Mageia has updated firefox(MG4,5: multiple vulnerabilities), flash-player-plugin (MG4,5: multiplevulnerabilities), and qemu (MG4,5: multiple vulnerabilities).openSUSE has updated gnutls(13.2, 13.1: denial of service).Oracle has updated firefox (OL7; OL6; OL5: multiple vulnerabilities).Red Hat has updated firefox(RHEL5,6,7: multiple vulnerabilities) and kernel (RHEL6.5: use-after-free flaw).Scientific Linux has updated firefox (SL5,6,7: multiple vulnerabilities).SUSE has updated flash-player (SLE12; SLED11SP4,SP3: multiple vulnerabilities).Ubuntu has updated firefox(15.04, 14.04, 12.04: multiple vulnerabilities) and ubufox (15.04, 14.04, 12.04: multiple vulnerabilities).
|
by Hasek39 from LinuxQuestions.org on (#H6KN)
I have a problem with mounting my phone (Android 4.4.2) and tablet (Android 4.2.2) via USB. Often I had an error "The process for the mtp protocol died unexpectedly" when trying to open them using...
|
 |
by Frederic Lardinois from Crunch Hype on (#H6BS)
Google launched Android Experiments today, the mobile apps counterpart to its Chrome Experiments site.Just like with Chrome Experiments, the idea behind Android experiments is to showcase apps that use new and cutting-edge technology, aesthetics and interfaces. All of the apps in the Android Experiments Gallery will be open source so other developers can see how they were made. Read More
|
 |
 |
 |
from heise online News on (#H5KS)
Wer Lücken in Oracle-Software findet, sollte sie wohl lieber nicht dem Hersteller melden. Sonst droht Ärger mit Oracles Rechtsanwälten.
|
by Samuel Gibbs from on (#H5DD)
Vulnerability revealed in diagnostic dongles used for vehicle tracking and insurance that lets them take control using just an SMSResearchers have hacked a car, remotely activated its windscreen wipers, applied its brakes and even disabled them, all via simple text messages.
 |
REM had the answer in 1992, Google Android users face a triple patching headache with the recent discovery of a collection of serious vulnerabilities affecting smartphones and tablets running Google's mobile operating system.…
|
 |
Online Trust Alliance calls on gadget vendors to stop acting like clowns A vendor group whose membership includes Microsoft, Symantec, Verisign, ADT and TRUSTe reckons the Internet of Things (IoT) market is being pushed with no regard to either security or consumer privacy.…
|
|
by LXer from LinuxQuestions.org on (#H498)
Published at LXer: Ask why you should use Linux, and inevitably someone will claim that it is more secure than Windows, and doesn't need anti-virus protection, either. Read More......
|
Ever since Microsoft announced their Bridge technologies at Build 2015 questions about how they work (and how well) have been asked. The tools let developers port over Android apps (Project Astoria), iOS apps (Project Islandwood), web apps (Project Westminster) and classic Win32 apps (Project Centennial) to Windows 10 including phone.This morning, the actual tools for Project Astoria have leaked onto the web and users can freely (and illegally) download Android APKs and sideload them to their Windows Phone running Windows 10 Mobile. This follows yesterday's leak of the documentation for the project.Project Astoria is fascinating. If you look at the leaked documenation, you'll see Microsoft is running (parts of) the Android subsystem and Linux kernel in kernel mode. This should be nice for performance, but at the same time, it doesn't seem like something that'll be good from a security standpoint.The leaked documentation also explains that in Project Astoria, all activities belong to a back stack within a single task. In regular Android, activities can belong to different tasks, with their own back stacks. If I'm reading this right (and please, do correct me if I'm wrong - this isn't exactly my expertise), this should simplify the back button behaviour - and is probably a consequence of Project Astoria only being able to run one process at a time.Another fun part of Astoria: there's a WebKit rendering engine in there. Yes, Windows 10 Mobile will have a WebKit rendering engine. Fascinating.
 |
from on (#H3X6)
Ever since Apple introduced TouchID for iPhones, more and more smartphones feature fingerprint scanners. And that has some security researchers worried.
|
from Techreport on (#H3PF)
There must be a glitch in the Matrix. I feel like I'm writing the same news again and again. A pair of researchers from IBM's X-Force Application Security Research Team has discovered a set of vulnerabilities in Android and some popular app SDKs. The worst of the bugs can let a seemingly innocuous app run arbitrary code on the device, and it's present in Android versions 4.3 and above—affecting 55% of handsets worldwide. Check out the proof-of-concept video, where the Facebook app is replaced with Fakebook:...Read more...
 |
by Jared DiPane from Android Central RSS Feed on (#H3PS)
Our Russell Holly will be joining the TWiT team on tonight's All About Android show, and you can tune in and watch it live. Starting at 5 p.m. PDT, or 8 p.m for those on the East Coast, you can check out all of the conversation as it happens.
|
 |
by Joseph Keller from Android Central RSS Feed on (#H3MG)
Microsoft has announced the preview for its upcoming Skype for Business offering on Android. Skype for Business will come as an update to the existing Lync 2013 app when it arrives later this year.
|
 |
by Russell Holly from Android Central RSS Feed on (#H3H6)
Hacking away at automobile infotainment is great for the tinkerers, but it raises legitimate safety concerns as well. One of the features to Android Auto is the promise of a semi-walled garden. Google controls what apps work in Android Auto, and what can be shown on the screen as to create the safest possible ecosystem in which phone and car can interact. As we've seen exploring all of the apps available for Android Auto, this isn't a perfect system. On top of the occasional usability bug, Android users who have grown accustomed to the open and modular nature of the OS find the head unit display to be more than a little limiting. A way around this was always going to happen, and now it has. Pioneer AVIC units have had their security stripped and the ability to install modded versions of Android Auto onto these aftermarket head units.
|
|
by LXer from LinuxQuestions.org on (#H3E7)
Published at LXer: A design flaw in Intel's processors can be exploited to install malware beneath operating systems and antivirus – making it tough to detect and remove.… Read More......
|
 |
by Jen Karner from Android Central RSS Feed on (#H39W)
Fitness apps are all over the Google Play Store, for both your phone and your smartwatch. Now you can add Android TV to that list, with 365 Body Workout. Bringing fitness to your living room becomes a breeze with this app, where you can track your workouts, integrate with Google Fit, and personalize your workouts. If you haven't seen this one yet, you can check it out right here with us. When you open 365 Body Workout on your TV you'll see all of your options arrayed at the bottom of the screen; Quick Workout, Calendar, My Workouts, Exercises, Settings and Unlock.. Each one covers pretty much precisely what it says, and we'll go over each one so you know what you're getting into. The menu and navigation is all very clean which makes it easy to get what you need to without any issues. Quick Workouts gives you a choice between a 2, 5, or 12 minute workout. After you choose a duration, then you'll see a preview of your workout. This preview includes slides for each workout with the name, number of sets, and number of reps for each exercise. After you start, the screen will give you a counter, along with a simulation of what the exercise being performed correctly looks like.
|
by Ashifa Kassam in Madrid from World news | The Guardian on (#H36B)
Team of Guardia Civil officers to provide escort for walkers on ancient route to cathedral after reports of harassment and disappearance of American pilgrimFor hundreds of years, pilgrims have trekked along Spain’s Camino de Santiago to the cathedral at Santiago de Compostela, believed to be the final resting place of St James.But this year, pilgrims and hikers have a police escort for part of the way, with a team of five Guardia Civil police officers on horseback covering up to 18 miles a day of the ancient Catholic pilgrimage. Continue reading...
Arch Linux has updated ppp (denial of service).Debian has updated subversion (two vulnerabilities).Debian-LTS has updated opensaml2 (denial of service).Fedora has updated elasticsearch(F22: multiple vulnerabilities), lxc (F22; F21: twovulnerabilities), and rubygems (F22: DNS hijacking).
Location of current incumbent unknown... Anyone seen Art Gilliland lately? HP has called on channel sales veteran Sue Barsamian to take charge of the enterprise security products unit in the software division amid the breakup of the corporation.…
 |
by Sean Gallagher from Ars Technica - All content on (#H2SG)
"Stop reverse engineering our code, already.â€
|
 |
from heise online News on (#H2PN)
Keine Black Hat ohne Pwnies. Eine Jury bestehend aus renommierten Sicherheitsexperten hat die begehrte Auszeichnung für die spektakulärsten Schwachstellen und Datenleaks vergeben. Auch der beste Song wurde freilich wieder gekürt.
|
 |
Cambridge graduate Andy Ozment teams up with one-time HP gros fromage The US Department of Homeland Security (DHS) has appointed Andy Ozment, currently the Assistant Secretary of the Office of Cybersecurity and Communications – the DHS's main processing center for threat information sharing – as leader of its cybersecurity centre.…
|
from Techreport on (#H2P3)
Google has chosen Vulkan, the low-overhead variant of OpenGL, as the next-generation graphics API for Android. The company details the new API's benefits in a post on its developer blog. Specifically, it believes that better CPU usage and parallellization will be the key benefits for Android developers, particularly in multithreaded scenarios. For a demonstration of Vulkan's capabilities on mobile-class hardware, check out Imagination Technologies' gnometastic demo.Vulkan is, of course, the OpenGL counterpart to Microsoft's DirectX 12 and Apple's Metal graphics APIs. Unlike the other two, though, Vulkan is an open standard published by the Khronos Group , comprised of academic and industry ...Read more...
 |
by Russell Holly from Android Central RSS Feed on (#H2PE)
The OnePlus Two has finally hit my desk, complete with retail packaging and a flat USB-C cable. While we've already done a lengthy hands-on with the phone, it was in a controlled environment and only for a couple of hours. We also knew the software wasn't a final build, and to expect something a little different when this phone here arrived. True enough, we've got a different software build here with some new buttons to push. As you might expect, it'll be a little while before we're ready to share a full review with you. In the mean time, I'll be answering questions over in the forums as frequently as possible. Just hit the link below and you're there! Take me to the OnePlus Two forums on Android Central!
|