{"id":11025,"date":"2018-01-06T10:45:10","date_gmt":"2018-01-06T18:45:10","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/01\/06\/news-4796\/"},"modified":"2018-01-06T10:45:10","modified_gmt":"2018-01-06T18:45:10","slug":"news-4796","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2018\/01\/06\/news-4796\/","title":{"rendered":"White House Staffers Can’t Use Personal Smartphones Anymore, and More Security News This Week"},"content":{"rendered":"

<\/p>\n

Credit to Author: Brian Barrett| Date: Sat, 06 Jan 2018 14:00:00 +0000<\/strong><\/p>\n

It\u2019s not every <\/span>week that you have a once-in-a-generation security disaster. You know, definitionally. So let\u2019s lead off with Meltdown and Spectre<\/a>, a pair of attacks that impacts the processors inside most computers today. It\u2019s quite a mess!<\/p>\n

While technically complicated, Meltdown and Spectre are best understood in terms of scale. Every Intel processor since 1995 is impacted, along with AMD and ARM-based chips. Fixes have started rolling out slowly, so keep updating that software, but it\u2019ll be years before these hardware vulnerabilities are fully addressed\u2014if ever.<\/p>\n

Speaking of things a long time coming, if you haven\u2019t started using a password manager yet, the fact that adtech companies are pulling info from browser autofill fields<\/a> should absolutely be the last straw. Logan Paul\u2019s video of a suicide victim in Japan should have been a last straw for YouTube<\/a>, but almost certainly won\u2019t be. And if you\u2019re antsy about Russian submarines hanging around undersea internet cables<\/a>, relax! Or, you know, don\u2019t relax, there\u2019s plenty to worry about generally. Just not that.<\/p>\n

Ever wonder what a sinkhole is? (The digital kind, not the ones that open up in Florida suburbs.) We\u2019ve got you covered<\/a>. Ever wonder if being good at Call of Duty<\/em> translates to real-world battlefield skills<\/a>? It doesn\u2019t. Ever wonder when pro-Russia trolls would get around to trying to discredit special counsel Robert Mueller<\/a>? Right about now!<\/p>\n

But, wait, there's more! As always, we\u2019ve rounded up all the news we didn\u2019t break or cover in depth this week. Click on the headlines to read the full stories. And stay safe out there.<\/p>\n

Thursday, White House press secretary Sarah Huckabee confirmed that White House staff will no longer be allowed to bring their smartphones into the West Wing, Bloomberg reports. The move, instituted by chief of staff John Kelly is presumably intended to tamp down on leaks\u2014though it\u2019s unclear if it also applies to the president himself<\/a>. And while hardened government-issued smartphones are certainly more secure than whatever Huawei phablet a White House staffer might be toting, those affected are reportedly (and understandably) concerned about being able to get in touch with loved ones in an emergency.<\/p>\n

If you were waiting for recommended charges related to the Senate investigation of Russia's influence on the 2016 presidential campaign, congrats! They're here. They're also targeted not at any member of the Trump organization, but at Christopher Steele, the former spy who assembled a jaw-dropping dossier on Trump's alleged ties to Russia. Senators Chuck Grassley and Lindsey Graham have informed the Justice Department that they believe Steele lied to the feds over his interactions with reporters concerning the dossier's contents. Among other oddities inherent in the move: The politicians appear to be telling the FBI something it would presumably already know about its own interviews with Steele.<\/p>\n

Amazon's latest transparency report shows an uptick in subpoenas, ZDNet reports<\/a>. The company received 1,618 in all, of which it complied with 42 percent. That's in addition to 229 search warrants, 44 percent of which it honored, and 89 other court orders, of which it complied with 52 percent. All of the requests relate to Amazon Web Services, which makes it hard to infer what exactly may have been requested, given that Amazon's cloud is by far the dominant player in a crowded field.<\/p>\n

It looks like the Uber app, and (almost) acts like the Uber app, but it's really just malware. That's the story behind malware discovered by Symantec, an app that spoofs Uber's UI in an attempt to fool users into coughing up their user names and passwords. It takes its deceit one step further, though, using deep linking to next show an actual Uber app screen that shows the user's location. Tricky! The good news, rare as it is these days, is that the fake app never made it into the Google Play store, and has only so far targeted a small number of Russian-language users. Still, the technique should set off alarms\u2014and give you something else to look out for.<\/p>\n

Heads up, iPhone owners. iOS 11 comes with a batch of security features that merit your attention.<\/p>\n

https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Brian Barrett| Date: Sat, 06 Jan 2018 14:00:00 +0000<\/strong><\/p>\n

Meltdown and Spectre, dossier drama, and more of the week’s top security news.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714],"class_list":["post-11025","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11025","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=11025"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11025\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=11025"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=11025"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=11025"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}