Security
Need to prioritize security bug patches? Don't forget to scan Twitter as well as use CVSS scores
Exploit, vulnerability discussion online can offer useful signals
19 Jan 2022 21:22 |
Thomas Claburn
Contact
Follow
Get alerts
Thomas is based in the San Francisco Bay Area, and covers software development, DevOps, computer security, and more for The Register.
Personal Tech
Ad blockers altering website code is not a copyright violation, German court rules
Browser filter biz Eyeo defeats Axel Springer – but case against Google poses similar risks
19 Jan 2022 08:22 | 53
Security
Crypto.com acknowledges 'unauthorized activity' on servers, maintains no funds have been lost
Security biz PeckShield claims $15m in Ethereum taken
18 Jan 2022 21:12 | 8
Legal
Google and Facebook's top execs allegedly approved dividing ad market among themselves
Latest iteration of Texas-led antitrust complaint against Google expands claims of bad behavior
15 Jan 2022 01:10 | 42
Legal
Lawmakers propose TLDR Act because no one reads Terms of Service agreements
The bill calls for concise, machine readable summaries of how websites and apps use client data
14 Jan 2022 22:33 | 35
Software
Google says open source software should be more secure
At the White House Open Source Summit, the Chocolate Factory floated a few ideas to make that happen
14 Jan 2022 01:26 | 55
Security
Orca Security tells AWS fail tale with a happy ending
Those critical AWS flaws that exposed data and broke tenant separation? All fixed!
13 Jan 2022 21:02 | 4
Software
Open source maintainer threatens to throw in the towel if companies won't ante up
Apache PLC4X creator ends free support, asks for payment for his work
13 Jan 2022 07:23 | 114
Security
Ransomware puts New Mexico prison in lockdown: Cameras, doors go offline
Bernalillo County's Metropolitan Detention Center still recovering from infection
12 Jan 2022 22:03 | 22
Patch Tuesday
Microsoft starts 2022 with big bundle fixes for 96 security bugs in its software
Nothing is certain except death, taxes, and programming errors
12 Jan 2022 01:14 | 11
Personal Tech
LAPD cops who preferred playing Pokémon Go to tackling robbery can be fired, appeals court rules
Call of duty? Not when there's a Snorlax about
11 Jan 2022 20:12 | 32
Security
Signal CEO Moxie Marlinspike resigns, leaves WhatsApp co-founder to run things until a successor is named
Departure comes as app courts controversy by integrating private cryptocurrency scheme
11 Jan 2022 01:02 | 61
Updated
JavaScript dev deliberately screws up own popular npm packages to make a point of some sort
Faker.js and colors.js sabotaged by maker
10 Jan 2022 21:38 | 89
Security
WebSpec, a formal framework for browser security analysis, reveals new cookie attack
Boffins in Vienna devise way to make software prove how it behaves
08 Jan 2022 08:45 | 23
Personal Tech
Worst of CES Awards: The least private, least secure, least repairable, and least sustainable
Want fatuous stuff that treats you with contempt? Look no further
07 Jan 2022 22:50 | 94
Personal Tech
Two sides of the digital coin: Ill-gotten gains in cryptocurrencies double, outpaced by legit use – report
Will these figures wash?
07 Jan 2022 01:33 | 25
Software
Time to party like it's 2002: Acura and Honda car clocks knocked back 20 years by bug
Honda probes issue, has yet to identify the cause of the problem
06 Jan 2022 21:04 | 114
Applications
Google Chrome 97 relaxes privacy protection just a little to help out Microsoft
New keyboard API will let online Office apps handle shortcut keys better
06 Jan 2022 01:44 | 18
Security
You better have patched those Log4j holes or we'll see what a judge has to say – FTC
Apply fixes responsibly in a timely manner or face the wrath of Lina Khan
05 Jan 2022 22:30 | 9
Software
IntelliJ IDEA plugin catches lazy copy-pasted Java source
I see you're ctrl-V'ing some code, need help refactoring it instead?
05 Jan 2022 07:27 | 30
Personal Tech
AT&T, Verizon delay 5G C-band rollout over FAA fears of passenger plane radars jammed by signals
Telcos miffed, pilots are fine with it
04 Jan 2022 22:20 | 36
Security
US bags Russian accused of bagging millions after stealing pre-release financial filings
Swiss cough up accused crim while Russia is 'deeply disappointed'
20 Dec 2021 22:23 | 27
Security
US distrust of Huawei linked in part to malicious software update in 2012
Report claims Huawei techs working for Chinese intelligence compromised Australian telco
18 Dec 2021 11:01 | 68
Security
CISA issues emergency directive to fix Log4j vulnerability
Federal agencies have a week to get their systems patched
17 Dec 2021 21:29 | 12
Security
Facebook locks out 1,500 fake accounts used by cyber-spy firms to snoop on people, alerts 50k potential targets
Meta adverse to internet mercenaries using its social networks to help governments violate human rights
17 Dec 2021 01:41 | 25
Personal Tech
Cryptocurrency 'rug pulls' cheated investors out of $8bn in 2021 – report
Somehow people keep buying into dodgy crypto projects that vanish with investor funds
16 Dec 2021 21:31 | 54
Updated
Apple quietly deletes details of derided CSAM scanning tech from its Child Safety page without explanation
Non-consensual on-device image analysis perhaps was difficult to reconcile with privacy protests
16 Dec 2021 00:44 | 24
Security
US lawmakers want to put NSO Group, 3 other spyware makers out of business with fresh severe sanctions
Export controls aren't enough, Dems say: Bring on the Global Magnitsky Act
15 Dec 2021 20:50 | 16
Software
After deadly 737 Max crashes, damning whistleblower report reveals sidelined engineers, scarcity of expertise, more
Not to mention the FAA delegating its watchdog duties to the actual aircraft manufacturers
15 Dec 2021 01:47 | 176
Analysis
Google Chrome's upcoming crackdown on ad-blockers and other extensions still really sucks, EFF laments
Three years of pushback have produced few changes while search giant insists it's listening to netizens
14 Dec 2021 21:30 | 97
Analysis
Log4j doesn't just blow a hole in your servers, it's reopening that can of worms: Is Big Biz exploiting open source?
Would more money have prevented this security flaw? Would the cash be useful in other ways anyway?
14 Dec 2021 01:55 | 111
Updated
Midwest tornado destroys Amazon warehouse, killing six after worker 'told not to leave'
More than eighty feared dead across multiple US states hit by super storms
13 Dec 2021 20:27 | 44
Security
American diplomats' iPhones reportedly compromised by NSO Group intrusion software
Reuters claims nine State Department employees outside the US had their devices hacked
04 Dec 2021 01:54 | 51
Security
Feds charge two men with claiming ownership of others' songs to steal YouTube royalty payments
Alleged scheme said to have netted $20m since 2017
03 Dec 2021 21:54 | 29
On-Prem
US trade watchdog opposes Nvidia's Arm buy, mostly over fears about datacentre innovation
FTC sues to block deal because it would be bad for competition
03 Dec 2021 00:06 | 29
Security
BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokens
Badger, badger, badger, coin theft, coin theft!
02 Dec 2021 22:58 | 20
Software
Amazon Appstore melts over Android 12 'Snow Cone'
Running the latest version of Android? Appstore apps no longer work
02 Dec 2021 06:30 | 15
On-Prem
Google sued for firing staff who claim they tried to follow 'Don't be evil' motto
Civil complaint dovetails with ongoing litigation over alleged union busting
01 Dec 2021 21:49 | 75
Software
Could we use an LLVM-based cross-compiler to build apps for quantum computers? This alliance says yes
Microsoft, Linux Foundation-backed QIR has a chance to make QC source code portable across different systems
01 Dec 2021 12:16 | 11
Security
It's the flu season – FluBot, that is: Surge of info-stealing Android malware detected
And a bunch of bank-account-raiding trojans also identified
30 Nov 2021 20:11 | 5
Software
You loved running JavaScript in your web browser. Now, get ready for Python scripting
All thanks to CPython, WebAssembly, and some clever developers (And yes, there's Pyodide, too)
30 Nov 2021 09:58 | 36
Personal Tech
Twitter CEO Jack Dorsey rebrands himself a 'single point of failure' and quits
That's so Meta
29 Nov 2021 21:14 | 30
Analysis
IBM researcher suing for age discrimination blames CEO Arvind Krishna for his ousting
Attorney for aggrieved scientist urges judge to let the evidence be presented
22 Nov 2021 21:22 | 35
Off-Prem
US Defense Department invites four cloud firms to seek contracts for JEDI replacement system
Amazon, Microsoft, Google, and Oracle deemed worthy
19 Nov 2021 22:30 | 12
Security
Web trust dies in darkness: Hidden Certificate Authorities undermine public crypto infrastructure
Boffins measure the black hole of dubious certs and find it troubling
19 Nov 2021 04:00 | 101
Security
Boffins find way to use a standard smartphone to find hidden spy cams
Smartphones now have lasers so we're gonna use them to find voyeurs
18 Nov 2021 22:43 | 62
Security
Thousands of Firefox users accidentally commit login cookies on GitHub
GitHub: 'Credentials exposed by our users are not in scope'
18 Nov 2021 20:04 | 27
Personal Tech
Magnanimous Apple will allow people to fix their iPhones using parts bought from its Self Service Repair program
Have fun with those Cupertino-set prices, friends
17 Nov 2021 21:33 | 40
OSes
Is your Apple Mac running macOS Monterey leaking memory? It may be due to mouse cursor customization
Sleuthing leads to suspected RAM-gobbling culprit
17 Nov 2021 00:17 | 34
Security
The inside story of ransomware repeatedly masquerading as a popular JS library for Roblox gamers
Ongoing typosquatting attacks target kids as Discord drags its feet
16 Nov 2021 21:46 | 12
Security
Intel's recent Atom, Celeron, Pentium chips can be lulled into a debug mode, potentially revealing system secrets
Testing times for Chipzilla as it emits patches to protect PCs, equipment
16 Nov 2021 08:29 | 12
Security
When the world ends, all that will be left are cockroaches and new Rowhammer attacks: RAM defenses broken again
Blacksmith is latest hammer horror
15 Nov 2021 21:46 | 18
On-Prem
He called himself the King of Fraud. Now this bot lord will reign in prison for years
Thousands of servers, hundreds of thousands of IP addresses used by scammer to drum up $7m in fake web advert impressions
13 Nov 2021 00:39 | 58
Applications
Microsoft engineer fixes enterprise-level Chromium bug students could exploit to cheat in online tests
Ability to block 'view source' for specific URLs hasn't actually worked for years
12 Nov 2021 22:40 | 58
Applications
Apps made with Google's Flutter may fritter away CPU cycles. Here's what the web giant intends to do about it
Chocolate Factory's cross-platform framework seems to struggle to craft efficient desktop software
12 Nov 2021 01:44 | 40
Updated
FYI: If the latest Windows 11 really wants to use Edge, it will use Edge no matter what
The days of redirecting microsoft-edge: links to a non-Microsoft browser are over
11 Nov 2021 21:38 | 197
Security
Malicious Chrome extensions are bad. But what about nice ones that can be hijacked? This new tool spots them
DoubleX static analyzer is doubleplusgood
11 Nov 2021 08:36 | 5
Applications
Here's a couple who deserve each other: Facebook links Workplace enterprise offering to Microsoft Teams
Group communication app integration breaks down barriers and whatever
10 Nov 2021 21:43 | 4
Networks
Billion-dollar US broadband bonanza awaits Biden's blessing – what you need to know
Infrastructure bill brings $65bn to freshen up American internet
10 Nov 2021 01:57 | 25
Patch Tuesday
Let us give thanks that this November, Microsoft has given us just 55 security fixes, two of which are for actively exploited flaws
Light load has infosec bods wondering what awaits next month
09 Nov 2021 21:07 | 16
