Evernote, the popular note-taking tools with around 50 million users, has asked all of its members to reset their password. It identified a security breach that has compromised user login information.
It seems like a month doesn’t go past without an new iteration of the Firefox web browser – only a a day ago version 16 hit the internet ready for download. Today it has been recalled!
Last week it was heavily reported that a security flaw had been found in the software layer added to most Samsung Android devices. This was quickly patched by Samsung.
Today we learn that there has been a similar issue affecting almost ALL android devices.
Hot on the heels of the LinkedIn password hack yesterday, other services are sheepishly announcing their own problems.
eHarmony, the dating site, released a statement saying they have been hacked and about 1.5million password were stolen. Now LastFM, the online music service, have issued a release stating some LastFM passwords may have been stolen.
All this continues to reinforce the key message — do NOT use the same password all over the internet.
Tip – use a reputable password manager and have a different password on every site; you don’t even need to remember them. Check out LastPass or 1Password for some tools to help you.
Here’s a handy article over at 40tech.com comparing LastPass and 1Password
Not a great day for LinkedIn. First they are exposed as taking data without your consent, then it emerges they have been hacked and millions of passwords stolen.
On 26 May 2012 the ‘Cookie law’ finally comes into force across the UK, and the rest of Europe; also known as Regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR).
In reality how does this impact on you?
Apple have released a Software Update to remove the Flashback Java vulnerability. In addition the update configures the Java web plug-in not to auto launch Java applets.
Check your Software Updates in System preferences to update.
It is very rare that a trojan or virus appears on the Apple Mac, however it can happen. The current one doing the rounds and heavily reported is Flashback.
If you visit a malicious website using your browser it will attempt to run Java code to exploit a weakness in the Java library. If successful your Mac will have a trojan installed — watching for certain activity in an attempt to gather usernames and passwords; you may also be redirected to malicious sites.
Oracle closed the weakness in their Java libraries some months ago, however Apple do not use the standard Java runtime and prefer to offer their own incarnation — It is fair to say Apple were too slow in fixing this.
Apple have now released a Java update, available via your ‘Software Update’ in the system preferences — this will fix the vulnerability.
It is worth checking you are not one of the 600,000 users worldwide to be infected. There are a few things to check using the Terminal App, however Juan Leon has written a handy little Applescript to do the work for you. Pop over to github and download the script — this will check if you are infected with the Flashback trojan. Only takes a few seconds to do, so do it now!
On a side note, many newer Macs do not have Java installed by default as Apple see it as old and insecure technology — an interesting thought!
Every day there is another security alert for an App or operating system; most go well reported or get over-hyped. Today I spotted this one which piqued my interested…..
Your login token from your Andoird or iOS device can be copied and used to login as you on another phone.
Google 2-step verification has been around for over a year now yet I am surprised at how little promotion it receives and how few users actually know about it.
You need to have this enabled if you value your Google data — Google mail, Google+, etc
