Archive

Category Archives for "Networking"

Researchers find a way bypass the iOS activation lock

Two researchers claim to have found a way to bypass the activation lock feature in iOS that's supposed to prevent anyone from using an iPhone or iPad marked as lost by its owner.The first report came Sunday from an Indian security researcher named Hemanth Joseph, who started investigating possible bypasses after being confronted with a locked iPad he acquired from eBay.The activation lock gets enabled automatically when users turn on the Find My iPhone feature via iCloud. It links the device to their Apple IDs and prevents anyone else from accessing the device without entering the associated password.One of the few things allowed from the activation lock screen is connecting the device to a Wi-Fi network, including manually configuring one. Hemanth had the idea of trying to crash the service that enforces the lock screen by entering very long strings of characters in the WPA2-Enterprise username and password fields.To read this article in full or to leave a comment, please click here

Researchers find a way bypass the iOS activation lock

Two researchers claim to have found a way to bypass the activation lock feature in iOS that's supposed to prevent anyone from using an iPhone or iPad marked as lost by its owner.The first report came Sunday from an Indian security researcher named Hemanth Joseph, who started investigating possible bypasses after being confronted with a locked iPad he acquired from eBay.The activation lock gets enabled automatically when users turn on the Find My iPhone feature via iCloud. It links the device to their Apple IDs and prevents anyone else from accessing the device without entering the associated password.One of the few things allowed from the activation lock screen is connecting the device to a Wi-Fi network, including manually configuring one. Hemanth had the idea of trying to crash the service that enforces the lock screen by entering very long strings of characters in the WPA2-Enterprise username and password fields.To read this article in full or to leave a comment, please click here

6 Steps for a Successful E-rate Season

E-rate, a government funded program, allows schools and libraries to implement and update in-building network infrastructure. For most school districts, this funding is to make sure all students have reliable access to Wi-Fi to enable digital learning and improve student outcomes. However, the process to apply and receive funding can be a little tedious; therefore, many schools do not finish the process or submit forms incorrectly, leading to a loss in funding.

40% off Corsair Waterproof Shockproof 256GB USB 3.0 Flash Drive – Deal Alert

Military-style data transportation. That's how Corsair describes their Flash Survivor Stealth series of USB flash drives. Its anodized, aircraft-grade aluminum housing is waterproof to 200 meters, vibration-resistant, and shock-resistant while small enough to fit on your keychain. USB 3.0 offers read speeds up to four times faster than traditional USB 2.0 drives, so it's fast enough to play most videos directly from it, without having to transfer to a hard drive first. The drive is backwards compatible to 2.0 as well. Just plug it in, and it works with Windows, Mac OS and Linux without any additional software or drivers. This product also comes with a limited 5 year warranty. It averages 4.5 out of 5 stars from over 210 people on Amazon (read reviews), many of which report it's still alive after years of hard use. The 256GB model's list price of $157 has been reduced 40% to $94.62. To read this article in full or to leave a comment, please click here

IDG Contributor Network: Levi’s Stadium uses IoT to enhance 49ers’ fan experience

The San Francisco 49ers are my home football team. They aren't doing too well in the NFC West standings these days. On the plus side, though, they do have a great stadium.Levi's Stadium is about 40 miles south of San Francisco in Santa Clara, California. It seats more than 65,000 spectators in two bowl-like structures. The logistics are daunting for a stadium that big. Consider the issues involved with getting thousands of fans to their seats quickly and securely in time to enjoy the game. Parking—Purchasing parking passes digitally and providing turn-by-turn directions to the visitor's assigned lot Navigation—Helping fans quickly and easily find their seats Security—Mitigating risks and enabling fans to be the eyes and ears of the stadium and report any security issues that may occur. Refreshments—Ensuring fans get the food and beverages they want, when they want them. Beacons, IoT sensors and sophisticated mobile apps have elevated the experience for 49ers fans and changed the game for venue operators.To read this article in full or to leave a comment, please click here

Remote management app exposes millions of Android users to hacking

Poor implementation of encryption in a popular Android remote management application exposes millions of users to data theft and remote code execution attacks.According to researchers from mobile security firm Zimperium, the AirDroid screen sharing and remote control application sends authentication information encrypted with a hard-coded key. This information could allow man-in-the-middle attackers to push out malicious AirDroid add-on updates, which would then gain the permissions of the app itself.AirDroid has access to a device's contacts, location information, text messages, photos, call logs, dialer, camera, microphone and the contents of the SD card. It can also perform in-app purchases, change system settings, disable the screen lock, change network connectivity and much more.To read this article in full or to leave a comment, please click here

Remote management app exposes millions of Android users to hacking

Poor implementation of encryption in a popular Android remote management application exposes millions of users to data theft and remote code execution attacks.According to researchers from mobile security firm Zimperium, the AirDroid screen sharing and remote control application sends authentication information encrypted with a hard-coded key. This information could allow man-in-the-middle attackers to push out malicious AirDroid add-on updates, which would then gain the permissions of the app itself.AirDroid has access to a device's contacts, location information, text messages, photos, call logs, dialer, camera, microphone and the contents of the SD card. It can also perform in-app purchases, change system settings, disable the screen lock, change network connectivity and much more.To read this article in full or to leave a comment, please click here

Worth Reading: Akamai on the Krebs DDoS

Internet infrastructure giant Akamai last week released a special State of the Internet report. Normally, the quarterly accounting of noteworthy changes in distributed denial-of-service (DDoS) attacks doesn’t delve into attacks on specific customers. But this latest Akamai report makes an exception in describing in great detail the record-sized attack against KrebsOnSecurity.com in September, the largest such assault it has ever mitigated. —Krebs on Security

LinkedInTwitterGoogle+Facebook

The post Worth Reading: Akamai on the Krebs DDoS appeared first on 'net work.

Post Black Friday 2016 deals: Best Buy Special Edition Tech Sale

Just in case you aren't spending enough already on tech products, Best Buy is offering a post-Black Friday 2016 Special Edition Tech Sale featuring super fancy laptops, tablet cases and computer mice. We're talking everything the fashionista or hardcore fanboy/fangirl on your holiday shopping list didn't know they needed. Best Buy's Special Edition Tech collection features 11 items and they'll be available while supplies last starting on Dec. 4 in select stores and online at BestBuy.com. MORE: 50-plus eye-popping Black Friday 2016 tech dealsTo read this article in full or to leave a comment, please click here

Trump cybersecurity dos and don’ts

President-elect Donald Trump ran a campaign focused on national security and making America great again through economic reform. Clearly both goals should include policies and programs to bolster the nation’s cybersecurity capabilities. This shouldn’t be an abstract concept to Mr. Trump after an election cycle featuring Russian hacks and WikiLeaks posts. To reinforce this priority, it is also worth noting that in a pre-election survey by ESG research, 49 percent of cybersecurity professionals said cybersecurity is a critical issue and should be the top national security priority for the next President, while 45 percent said cybersecurity is a very important issue and should be one of the top national security priorities for the next President. If those citizens on the front line see cybersecurity as a major priority, this should speak volumes to the President-elect. To read this article in full or to leave a comment, please click here

Trump cybersecurity dos and don’ts

President-elect Donald Trump ran a campaign focused on national security and making America great again through economic reform. Clearly both goals should include policies and programs to bolster the nation’s cybersecurity capabilities. This shouldn’t be an abstract concept to Mr. Trump after an election cycle featuring Russian hacks and WikiLeaks posts. To reinforce this priority, it is also worth noting that in a pre-election survey by ESG research, 49 percent of cybersecurity professionals said cybersecurity is a critical issue and should be the top national security priority for the next President, while 45 percent said cybersecurity is a very important issue and should be one of the top national security priorities for the next President. If those citizens on the front line see cybersecurity as a major priority, this should speak volumes to the President-elect. To read this article in full or to leave a comment, please click here

IDG Contributor Network: Cloud isn’t easy, but it needs to be

Over the past decade, I've witnessed a constant stream of IT executives and technology professionals view cloud as a threat to their careers. The business side of the organization has always been a captive customer of IT's services, and now IT feels threatened by the litany of low-cost solutions readily available in the public cloud.  Every once in a while IT begrudgingly agrees to implement a public cloud solution.  When the do, they carefully fence it off from the rest of IT—nominally to protect the company from hackers, but equally to protect the purity of IT. Treating cloud as a standalone point solution enables them to create a self-fulfilling prophecy, using the mixed results to demonstrate that cloud just can’t hack it in the real world. To read this article in full or to leave a comment, please click here

‘Distributed guessing’ attack lets hackers verify Visa card details

Add credit card fraud to the list of things that distributed processing can speed up. An e-commerce site will typically block a credit card number after 10 or 20 failed attempts to enter the corresponding expiry date and CVV (card verification value), making life difficult for fraudsters who don't have a full set of credentials. But there are plenty of e-commerce sites out there, and it's possible to obtain missing account details by submitting slightly different payment requests to hundreds of them in parallel. It takes less than six seconds to perform the "distributed guessing attack," according to the researchers at Newcastle University in the U.K. who figured out how to do it.To read this article in full or to leave a comment, please click here

‘Distributed guessing’ attack lets hackers verify Visa card details

Add credit card fraud to the list of things that distributed processing can speed up. An e-commerce site will typically block a credit card number after 10 or 20 failed attempts to enter the corresponding expiry date and CVV (card verification value), making life difficult for fraudsters who don't have a full set of credentials. But there are plenty of e-commerce sites out there, and it's possible to obtain missing account details by submitting slightly different payment requests to hundreds of them in parallel. It takes less than six seconds to perform the "distributed guessing attack," according to the researchers at Newcastle University in the U.K. who figured out how to do it.To read this article in full or to leave a comment, please click here

28% off Bushbox Titanium Outdoor Pocket Stove – Deal Alert

This Bushbox is an ultra light Titanium multi-fuel pocket stove for the great outdoors. It can be used with wood, organic material, a standard alcohol burner or esbit tabs, and folds down so small and lightweight that you could fit it in your pocket (or a Christmas stocking!). It comes with two trivets for any pot size, and comes with an ash pan for soil/ground protection. It averages 4.5 out of 5 stars on Amazon, where its list price of $69 has been reduced to $49.90. See the discounted titanium Bushbox on Amazon.To read this article in full or to leave a comment, please click here

How to find out if your iPhone 6s is eligible for free battery replacement

When my iPhone 6s started shutting down earlier this month even though it still had 20% or 30% battery life showing, I suspected maybe it was just getting too cold. After all, I've seen my iPhones be temperature sensitive in the past.But it turns out that the problem really stemmed from a bug in version 10.1 or 10.1.1 of Apple iOS, and now Apple is offering free battery replacement by those affected. The weird thing that those of us affected by this have experienced is that after charging the phone back in, it almost immediately turns back on, back at its 20% or 30% battery level.MORE: Best Black Friday 2016 deals on Apple iPhones, Macs & MoreTo read this article in full or to leave a comment, please click here

1 … 2,167 2,168 2,169 2,170 2,171 … 3,444