Privatnost i sigurnost podataka i korisnika - Stranica 47

tomek@vz · Jučer, 15:28

OpenBSD here i come

Citiraj:

Only two remote holes in the default install, in a heck of a long time!

Night · Danas, 08:58

Citiraj:

Autor Bono

Microsoft ce patchati ovaj mjesec, ali do patcha bi trebalo raditi na istom kompu.
VeraCrypt ih rastura, ovo postaje samo neuhodnost skoro bez ikakvog benefita, tipican Microsoft.

Backdoor za određene aktere, samo kao što to često biva sa backdoorima otkriju ga i drugi. Jer ovo nije nekakav buffer overflow ili kernel bug slučajno nastao optimizacijom, ovo je ciljano ostavljen bypass za enkripciju.

tomek@vz · Danas, 10:37

Citiraj:

Despite all being US-based ventures, cloud corporations now control the overwhelming majority of the world's sensitive data. However, Europe would very much like to change the status quo with a soon-to-be-approved regulatory package.
According to people familiar with the matter, the European Commission is preparing yet another unpleasant regulatory surprise for the current US administration. CNBC talked with two unnamed EC officials, who outlined the significant change that the upcoming "Tech Sovereignty Package" (TSP) might bring to the cloud computing market.

> Europe is moving to block Microsoft, Amazon, and Google from handling government health, financial, and legal data

The Exiled · Danas, 18:03

Nije dugo trebalo od "ovo je zamišljeno da tak radi, kaj bi vi hteli da vas netko hakira", do "evo ga, popravili smo sigurnosni propust".

Citiraj:

Microsoft backpedals: Edge to stop loading passwords into memory

Citiraj:

Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup after previously stating it was "by design." This behavior was disclosed on May 4 by security researcher Tom Jřran Sřnstebyseter Rřnning, who demonstrated that all credentials stored in the Edge built-in password manager were decrypted on launch and kept in memory even when not in use.

Rřnning also released a proof-of-concept (PoC) tool that would allow attackers with Administrator privileges to dump passwords from other users' Edge processes (without admin privileges, the PoC only allows accessing Edge processes launched by the same user). He also said he reported the issue to Microsoft and was told the behavior was "by design" before he publicly disclosed it.

While it initially refused to address the issue, telling BleepingComputer at the time that "this is an expected feature of the application," Microsoft announced on Wednesday that future versions of Edge will no longer load saved passwords into memory on startup, even though the reported scenario falls within the expected existing threat model (which excludes attacks where an adversary already has administrative control of a device).

The fix is already live in the Edge Canary channel and will be included in the next update for all supported Edge releases (build 148 and newer).

Izvor: BleepingComputer

Oglasni prostor
PC Ekspert Forum Oglas

Oglasni prostor
PC Ekspert Forum Oglas