Slashdot: Security Researcher Finds a Fundamental Flaw in iOS

Security Researcher Finds a Fundamental Flaw in iOS
Published on October 10, 2017 at 02:04PM
Felix Krause writes: Do you want a user's Apple ID password to get access to their Apple account or to try the same email/password combination on different web services? Just ask your users politely, they'll probably just hand over their credentials, as they're trained to do so. This is just a proof of concept, phishing attacks are illegal! Don't use this in any of your apps. The goal of this blog post is to close the loophole that has been there for many years, and hasn't been addressed yet. For moral reasons, I decided not to include the actual source code of the popup, however it was shockingly easy to replicate the system dialog.

Read more of this story at Slashdot.

Comments

Post a Comment

Popular posts from this blog

Slashdot: Justice Department To Be More Aggressive In Seeking Encrypted Data From Tech Companies

Image
Justice Department To Be More Aggressive In Seeking Encrypted Data From Tech Companies Published on October 11, 2017 at 01:00PM An anonymous reader quotes a report from The Wall Street Journal (Warning: source may be paywalled; alternative source): The Justice Department signaled Tuesday it intends to take a more aggressive posture in seeking access to encrypted information from technology companies, setting the stage for another round of clashes in the tug of war between privacy and public safety. Deputy Attorney General Rod Rosenstein issued the warning in a speech in Annapolis, Md., saying that negotiating with technology companies hasn't worked. "Warrant-proof encryption is not just a law enforcement problem," Mr. Rosenstein said at a conference at the U.S. Naval Academy. "The public bears the cost. When our investigations of violent criminal organizations come to a halt because we cannot access a phone, even with a court order, lives may be lost." Mr. Ros...
Read more

Slashdot: 'Sooty Birds' Reveal Hidden US Air Pollution

Image
'Sooty Birds' Reveal Hidden US Air Pollution Published on October 10, 2017 at 07:30PM Soot trapped in the feathers of songbirds over the past 100 years is causing scientists to revise their records of air pollution. From a report: US researchers measured the black carbon found on 1,300 larks, woodpeckers and sparrows over the past century. They've produced the most complete picture to date of historic air quality over industrial parts of the US. The study also boosts our understanding of historic climate change. [...] This new study takes an unusual approach to working out the scale of soot coming from this part of the US over the last 100 years. The scientists trawled through natural history collections in museums in the region and measured evidence of black carbon, trapped in the feathers and wings of songbirds as they flew through the smoky air. The researchers were able to accurately estimate the amount of soot on each bird by photographing them and measuring the amou...
Read more

Slashdot: Nvidia Introduces a Computer For Level 5 Autonomous Cars

Image
Nvidia Introduces a Computer For Level 5 Autonomous Cars Published on October 10, 2017 at 04:50PM From a report: At the center of many of the semi-autonomous cars currently on the road is NVIDIA hardware. Once automakers realized that GPUs could power their latest features, the chipmaker, best known for the graphics cards that make your games look outstanding, became the darling of the car world. But while automakers are still dropping level 2 and sometimes level 3 vehicles into the market, NVIDIA's first AI computer, the NVIDIA Drive PX Pegasus, is apparently capable of level 5 autonomy. That means no pedals, no steering wheel, no need for anyone to ever take control. The new computer delivers 320 trillion operations per second, 10 times more than its predecessor. Before you start squirreling away cash for your own self-driving car, though, NVIDIA's senior director of automotive, Danny Shapiro, notes that it's likely going to be robotaxis that drive us around. In fact, t...
Read more