Security: RememBear, Microsoft, Apple and Linux FUD
Submitted by Roy Schestowitz on Monday 8th of July 2019 03:41:58 PM
Filed under 
-
Various RememBear security issues
AutoFill functionality of password managers is another typical area where security issues are found. RememBear requires a user action to activate AutoFill which is an important preventive measure. Also, AutoFill user interface will be displayed by the native RememBear application, so websites won’t have any way of messing with it. I found multiple other aspects of this functionality to be exploitable however.
Most importantly, RememBear would not verify that it filled in credentials on the right website (a recent regression according to the developers). Given that considerable time can pass between the user clicking the bear icon to display AutoFill user interface and the user actually selecting a password to be filled in, one cannot really expect that the browser tab is still displaying the same website. RememBear will happily continue filling in the password however, not recognizing that it doesn’t belong to the current website.
Worse yet, RememBear will try to fill out passwords in all frames of a tab. So if https://malicious.com embeds a frame from https://mybank.com and the user triggers AutoFill on the latter, https://malicious.com will potentially receive the password as well (e.g. via a hidden form). Or even less obvious: if you go to https://shop.com and that site has third-party frames e.g. for advertising, these frames will be able to intercept any of your filled in passwords.
-
Microsoft Confirms This Windows 10 Bug Could Crash VPN Services
Microsoft has disclosed that a new bug in its Windows 10 OS could mess up with the VPN services running on your machine and show the error code “0xc000005.”
As per the support page, it’s present in the Remote Access Connection Manager (RASMAN) service that’s required by the VPN services to function properly.
-
Microsoft Issues Warning For 50M Windows 10 Users
The big one is VPNs. RASMAN handles how Windows 10 connects to the internet and it is a core background task for VPN services to function normally. Given the astonishing growth in VPN usage for everything from online privacy and important work tasks to unlocking Netflix and YouTube libraries, this has the potential to impact heavily on how you use your computer.
[...]
Why conservative? Because Microsoft states Windows 10 has been installed on 800M computers worldwide, but that figure is four months old. Meanwhile, the ever-reliable AdDuplex reports Windows 10 1903 accounted for 6.3% of all Windows 10 computers in June (50.4M), but that percentage was achieved in just over a month and their report is 10 days old. Microsoft has listed a complex workaround, but no timeframe has been announced for an actual fix.
-
Google Researcher Finds Nasty iMessage Bug That ‘Bricks’ iPhone
This specific set of characters, when received on iMessage, can brick the phone — locking you out of everything on it. Once you receive this message, there is no way out of it, other than doing a factory reset. Also, any data that wasn’t backed up would be lost.
The researcher, Natalie Silvanovich, is part of Google’s Project Zero team that hunts down zero-day vulnerabilities. She discovered the bug in April and explained how it affects iOS devices:
“On a Mac, this causes soagent to crash and respawn, but on an iPhone, this code is in Springboard. Receiving this message will case Springboard to crash and respawn repeatedly, causing the UI not to be displayed and the phone to stop responding to input.”
-
New Cryptojacking Malware is Targeting Linux Servers [Ed: Attributing to "Linux" everything that can be maliciously installed on it]
In the last few weeks, multiple cybersecurity research groups reported about the malware and, according to the researchers at Trend Micro, the malware not only targets a vulnerable server but also try to propagate in the entire network.
»
-
- Login or register to post comments
Printer-friendly version- 2603 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|
.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.
More typical ZDNet
Backdoor found in Ruby library for checking for strong passwords [Ed: FOSS catches security mischief fast, but this drama queen from ZDNet won't frame it like that and mostly ignores proprietary software back doors (this one was only downloaded a few hundreds of times, then caught). For instance, Microsoft steals the decryption keys from millions of people who set up disk encryption, but that doesn't seem to bother ZDNet (part of CBS, an advertiser to Microsoft)]