Tech News 2018

Monday, June 1, 2020

UFC 250: Amanda Nunes vs Felicia Spencer -- Start time, full fight card, how to watch or stream online - CNET

UFC 250 is a surprisingly stacked card, despite its main event.

from CNET News https://ift.tt/2XUluT1

PlayStation Store sale: 9 discounted PS4 games to buy now - CNET

There's some serious discounts going on until June 11.

from CNET News https://ift.tt/3cmtRMo

White nationalist group posing as antifa called for violence on Twitter

Other misinformation and misleading claims spread across Twitter on Sunday night and into Monday related to the protests.

from Tech https://ift.tt/3dqd4Jt

Stitch Fix is laying off 1,400 employees in California, and plans to hire in lower-cost U.S. cities

StitchFix CEO Katrina Lake said, "We have taken the very difficult decision to reduce the number of Stylists in our styling team in California, as we invest in our other styling hubs across the US"

from Tech https://ift.tt/3cqJrGy

Sign in with Apple vulnerability could have led to account takeovers

A critical vulnerability in Apple's 'Sign in with Apple' system could have allowed remote attackers to take over targeted user accounts on third-party services and apps.

The company's Sign in with Apple feature, which launched at WWDC 2019, gives users the ability to login to third-party apps and websites using their Apple ID. The feature also helps protect users' privacy as they can use its 'hide my email' function to withhold their email addresses from apps and sites.

Independent security researcher Bhavuk Jain first discovered the bug in Sign in with Apple last month and the company paid him a $100,000 bug bounty after he responsibly disclosed it. In a blog post, Jain explained just how serious this now-patched vulnerability could have been, saying:

Bug bounties have made these hackers millionaires
Apple ups bug bounty rewards in security push
iOS Mail has 'critical' security flaws

“The impact of this vulnerability was quite critical as it could have allowed full account takeover. A lot of developers have integrated Sign in with Apple since it is mandatory for applications that support other social logins. To name a few that use Sign in with Apple - Dropbox, Spotify, Airbnb, Giphy (Now acquired by Facebook). These applications were not tested but could have been vulnerable to a full account takeover if there weren’t any other security measures in place while verifying a user.”

Sign in with Apple

The Sign in with Apple system works in a similar way to OAuth 2.0 and users can be authenticated by either using a JSON Web Token (JWT) or a code generated by the company's server which is then used to generate a JWT.

Jain discovered that he could request JWTs for any Email ID from Apple and when the signature of these tokens was verified using Apple's public key, they showed as valid. As a result, an attacker could forge a JWT by linking any Email ID to it and this would grant them access to the victim's linked accounts.

After Jain submitted his findings to Apple, the company conducted an investigation of its logs and determined that there was no misuse or account compromise that exploited the vulnerability.

Thankfully Jain disclosed the vulnerability in a timely manner before it could become a zero-day where a flaw is discovered and exploited before a fix for the issue is made available.

Keep your devices protected with the best antivirus software

Via The Hacker News

from TechRadar - All the latest technology news https://ift.tt/3eGWOUS

Listen to The Witcher's magical piano version of Toss a Coin to Your Witcher - CNET

Oh valley of plenty.

from CNET News https://ift.tt/3gKwfzS

Twitter hides Rep. Matt Gaetz tweet for glorifying violence - CNET

The tweet is still on the service, but users need to click a button to see it.

from CNET News https://ift.tt/2TZo5tK

Blown engines: These 11 cars need rebuilds most, says Consumer Reports - Roadshow

Engine, head gasket and transmission issues stood out for 11 vehicles, and each model often experienced problems around the same mileage.

from CNET News https://ift.tt/3eDWoys

Roku Channel launches 100 free live TV channels in program guide - CNET

The new grid-style option includes lots of ad-supported content including news, kids and lifestyle programs.

from CNET News https://ift.tt/3cnG5Ey

Amazon sees strong demand for pepper spray and Black Lives Matter merchandise as protests rage

Amazon's Sports and Outdoors category showed pepper spray as the top-selling item, while a rechargeable taser was listed at No.44, illustrating that consumers are buying self-defense items amid protests that have turned violent in some areas of the country.

from Tech https://ift.tt/3crQjDE

Sunday, May 31, 2020

Suck it up: save AU$150 on Dyson's V7 cordless vac

Most of us hate cleaning, the dreaded repetitive chores that seem to be the bane of our existence, but there is an unexpected hero here to save the day – the Dyson V7 Motorhead that is currently discounted by 25%.

Vacuuming with a traditional vacuum cleaner can become quite the bore – dragging out a bulky appliance that has to be lugged around with a sluggish might as you unravel the cord with the least amount of graciousness, grunting to yourself.

Well, grunt no more thanks to the Dyson V7 Motorhead – a divine household appliance that will make vacuuming a breeze. No longer will you dread your weekly (or daily) vacuum as you effortlessly glide around your home, cord free and look back on your handiwork with admiration and a sense of accomplishment.

Thanks to this device's 30-minute battery life, you’ll have plenty of time to zip around your home like the cleaning fairy you are. It has strong suction, too, making it capable of picking up floor nasties of both the indoor and outdoor variety.

The Dyson V7 has multiple levels of suction strength and if placed on 'max' mode, the battery life drops to a mere 6-minutes (so best reserve that power for when it’s really needed).

As a bit of added convenience, the Dyson V7 is modular by design – you can use it as a stick vacuum or remove the wand from the main compartment to turn it into a nifty handheld unit. It’s also bagless, allowing you to empty collected dirt with a single pull of its lever.

Make your home spotless and suction up this great deal through Bing Lee’s eBay store – saving you a massive AU$150 at checkout.

from TechRadar - All the latest technology news https://ift.tt/36Omqfz