Newscast - Sept. 30, 2015
- Author
- Jardine Software Inc.
- Published
- Thu 01 Oct 2015
- Episode Link
- None
James breaks down a few news stories from the previous week. The following stories were discussed, including some brief points.
- Microsoft Accidentally pushes test patch http://www.zdnet.com/article/microsoft-accidentally-issued-a-test-windows-update-patch/
- Of course the community assumes hack.
- Oversight that allowed a test patch to be released.
- They are working to remove it.
- Credit Card Liability Shift Is here
- Starting October 1, 2015 if your a vendor and use the magnetic stripe on a chip enabled card, certain fraudulent transactions will fall to you, instead of the bank.
- This doesn’t change the liability for consumers.
- James' interview on Channel 4 News in Jacksonville http://www.news4jax.com/news/new-credit-card-technology/35391900
- WinRAR exploit – Is it just hype? http://www.theregister.co.uk/2015/09/30/500m_winrar_users_open_to_remote_code_execution_zero_day/
- Requires you to execute an exe, which is something we are taught not to do from untrusted sources.
- Estimates say this effects 500 million users, but let’s be realistic on the risk here. It requires you to execute an executable.
- Remember not to run attachments or files unless they are from a trusted source and you are expecting the item.
- Huge iOS 9 Security Flaw (or maybe not?) https://www.yahoo.com/tech/s/huge-ios-9-security-flaw-lets-anyone-see-134547688.html
- Can bypass the lock screen to see photos and contacts.
- Uses Siri (so it has to be enabled on the lock screen).
- Requires physical access to the device.
For more info go to https://www.developsec.com or follow us on X (@developsec).
The DevelopSec podcast is brought to you by Jardine Software Inc.
