November 2017 – Page 4 – Computer Security Articles

Credit to Author: Natasha Hellberg (Senior Threat Researcher)| Date: Wed, 29 Nov 2017 13:00:41 +0000

One of the questions I am asked often is why am I not more concerned about sophisticated attacks? Why do I not deeply investigate new exploits as they are released? To which I reply “because the old ones still cause more damage.” After 30 years of looking at the security of networks, the main trend…

Security Wired

Supreme Court Must Understand That Cell Phones Aren’t Voluntary

November 29, 2017 admin Opinion, Security

Credit to Author: Andrew D. Selbst| Date: Wed, 29 Nov 2017 12:00:00 +0000

Opinion: The US argues that police can access cell phone records freely because customers volunteer that data. But cell phones are no longer optional.

ComputerWorld Independent

What to do about Apple’s shameful Mac security flaw

November 29, 2017 admin Apple Mac, Operating Systems, Security

Credit to Author: Jonny Evans| Date: Wed, 29 Nov 2017 04:13:00 -0800

Complacency and incompetence are the biggest computer security threats, and Apple’s latest Mac security flaw seems to combine both of these. The flaw means anyone with physical access to your Mac can get inside the machine and tinker with it.

What’s the problem?

The problem (which first got disclosed here) was first revealed in a Tweet by Lemi Orhan Ergin, who wrote:

Dear @AppleSupport, we noticed a *HUGE* security issue at MacOS High Sierra. Anyone can login as “root” with empty password after clicking on login button several times. Are you aware of it @Apple?
To read this article in full, please click here

Security Wired

North Korea’s Missile Test Puts the Entire US in Range

November 28, 2017 admin Security

Credit to Author: Brian Barrett| Date: Tue, 28 Nov 2017 23:46:54 +0000

The bad news: Tuesday’s missile test shows that North Korea’s ICBM can likely hit the US. The slightly less bad news: It’s still a long way off from actually doing so.

Independent Krebs

MacOS High Sierra Users: Change Root Password Now

November 28, 2017 admin Lemi Orhan Ergin, MacOS High Siera, Other, root exploit

Credit to Author: BrianKrebs| Date: Tue, 28 Nov 2017 22:34:22 +0000

A newly-discovered flaw in macOS High Sierra — Apple’s latest iteration of its operating system — allows anyone with local (and, apparently in some cases, remote) access to the machine to log in as the all-powerful “root” user without supplying a password. Fortunately, there is a simple fix for this until Apple patches this inexplicable bug: Change the root account’s password now.

Security Wired