Checklist WWDC20 Outtake

We’re bringing you a WWDC outtake: an off-the-cuff, practically off-mic discussion of WWDCs past — as well as the roles Apple execs play.

Chris Hadnagy on social engineering

Chris Hadnagy is one of the world’s foremost authorities on social engineering. He has written four books on the topic, including Social Engineering: The Science of Human Hacking and Unmasking the Social Engineer: The Human Element of Security. Hadnagy has been a prominent figure in the security industry for many years, founding the popular Social Engineering Village (SEVillage) at DEF CON, and establishing the Innocent Lives Foundation, a non-profit organization that coordinates the resources of the infosec community to fight online child predators. Hadnagy’s company, Social-Engineer, LLC, helps …

What is key-based 2FA?

Standard 2FA has some important limitations, which is why many security experts believe that key-based 2FA is the wave of the future — especially now that Apple has made changes to make it much more accessible to iPhone and iPad users.

Checklist 193: A Look at Apple Silicon with Nick Leon

Starting this year, Apple will begin making its own, ARM-based processors for the Mac. In this episode of The Checklist, we take a look at the background to this change, as well as what it means for Mac users:

Intel vs ARMApple Silicon Macs and performanceApple Silicon Macs and security

Goodbye Intel, Hello ARM

When Apple announced their move from the Intel to the ARM processor architecture, it was clearly big news. But it also left many folks with a pretty basic question: What’s the actual difference between the two?

At a hardware level, …

Government issues alert about cyberattacks on critical infrastructure

The U.S. government has issued an alert warning that there is an increased danger of cyberattacks on civilian infrastructure. The alert comes from the Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA).

Checklist 192: Twitter Hack 2020

A week behind us, the great Twitter hack is still unfolding. We’ll look at what we think we know so far and why the hack itself matters on this edition of The Checklist, brought to you by SecureMac.

ARM Macs FAQ

Apple will soon begin transitioning away from Intel CPUs and switching to ARM processors instead. In this article, we’ll try to answer frequently asked questions about the change, offering some context to Apple’s decision and explaining what it all means for Mac users — especially in terms of performance and security.

ARM vs Intel: What’s the difference?

To start with the obvious, there are two different companies involved: Arm Holdings and Intel. The two companies have significantly different business models. Intel is both a designer and manufacturer of processors, whereas Arm does …

Checklist 191: TikTok Talk with Patrick Wardle

TikTok. Harmless fun? Or existential threat to the United States? The answer you get depends on who you ask. This week we have a special guest to help us discuss the question in depth — and we’ll get into the larger issues with apps, user data, and digital privacy.

TikTok, apps, and your privacy

In recent weeks, the popular video-sharing app TikTok has made headlines for its practice of monitoring iOS pasteboard data. The pasteboard — kind of a system-wide clipboard for iOS that lets apps access the information copied there — …

Twitter hack was an inside job, sources say

On Wednesday, multiple verified, high-profile Twitter accounts were compromised, including the accounts of Barack Obama, Elon Musk, and Apple. Hackers made tweets requesting charitable donations in the form of Bitcoin, promising to double any contribution made within the next 30 minutes. The tweets were, of course, fraudulent — and the Bitcoin wallet addresses set up to accept the cryptocurrency “donations” belonged to the scammers.

Twitter reacted quickly to the attack, removing the offending tweets, locking down affected accounts, and preventing users from tweeting or resetting their passwords as the company attempted …

EARN IT Act moves forward, worrying privacy advocates

The “EARN IT” Act is slowly making its way through the U.S. Senate. Despite strong public criticism, an amended version of the bill was unanimously approved by the Senate Judiciary Committee in early July, setting the stage for full hearings in the near future.

In this article, we’ll discuss the background to EARN IT, and let you know why some people say it’s a serious threat to free speech and digital privacy.

What is EARN IT?

EARN IT (Eliminating Abusive and Rampant Neglect of Interactive Technologies) is the name of a bill currently …

Is Mac malware evolving?

Mac malware is increasing in quantity, and many security researchers say it’s becoming more sophisticated as well. While some Mac users are still a bit blasé about the threats facing the platform, the last few weeks have provided two great examples of the evolution of Mac malware. In what follows, we’ll fill you in on the details, and offer some thoughts about what it all means for the future of macOS security.

Old malware, new delivery method

Security researchers at Intego recently spotted what seemed to be a new variant of Mac …

Checklist 190: WWDC20, iOS, and Safari with Brett Terpstra

This week, we dive a bit deeper into some WWDC20 announcements with developer Brett Terpstra

Browser extensions and your privacy

afari is getting a major overhaul in macOS 11 Big Sur, and one of the most important privacy enhancements has to do with browser extensions

The Checklist Summer Security Special 2020

In the movies, bad guys are often taken down by a tech vulnerability. This week, we revisit our look at how best practices could make bad guys better at being bad.

Is TikTok reading your clipboard?

TikTok has been caught snooping on iOS users’ clipboard data. The video-sharing app’s troubling behavior was discovered thanks to a new privacy feature in iOS 14

Checklist 189: WWDC20 and the Mac

On this week’s Checklist, we cover the biggest Mac news to come out of Apple’s 2020 Worldwide Developer Conference, including a new macOS and Safari, a new processor for Macs and a new way to log in to websites.

Highlights from the 2020 Worldwide Developers Conference

Apple’s 2020 Worldwide Developers Conference got underway on Monday with a livestreamed keynote address. The company announced major updates to its operating systems, apps, and hardware.

10 tips for getting back on the road again

Covid-19 lockdowns are starting to lift, and people are already beginning to travel for work and family reasons. We’ve shared cybersecurity best practices for travel before, but this year, there are some pandemic-related considerations to add to the list. 

Here, then, are 10 things to keep in mind if you’re going to be hitting the road in the coming months (starting with five “new normal” additions to the usual advice, and rounding things out with five always-relevant tips for secure travel).

article span.backnum { font-family:”Open Sans”, sans-serif; font-size: 10rem; opacity: 0.3; line-height: …

Best of the Checklist: June 18th, 2020

The Checklist will return next week with coverage of WWDC 2020. In the meantime, we’ll catch you up on the latest cybersecurity news — and share several Checklists from the archives that shed light on these stories.

Security for new high school grads

It’s high school graduation time again! COVID-19 has brought some big changes this year, with drive-thru graduations and Zoom commencement speeches taking the place of traditional ceremonies. But despite the differences, one thing is guaranteed to remain the same: The bad guys will be targeting new grads for fraud, scams, and identity theft.

If you know a member of the Class of 2020, here are three things you can do to help keep them safe.

article span.backnum { font-family:”Open Sans”, sans-serif; font-size: 10rem; opacity: 0.3; line-height: 1; position:absolute; left: 1rem; top: 0;}
article …