Checklist 131: The Good, the Bad, and the Buggly

On this week’s Checklist by SecureMac we’ll be discussing: The Good: Senators try to protect children’s data, The Bad: FEMA exposes the data of over 2-million disaster victims, and The Buggly: Apple fixes a boatload of security issues.

Checklist 130: A Sick Phone, Your Face, and MySpace

On this week’s Checklist by SecureMac we talk about: Viruses or Malware, Can iPhone get either?, Congress considers facial recognition legislation and MySpace teaches us all about backups.

iPhone Prototypes Find Their Way to Hackers and Researchers Alike

Have you ever wondered about how hackers or security researchers can figure out where the hidden flaws in iOS lay? For years, that’s been a big question, from concerns about how companies such as Cellebrite and GrayKey found their way into iOS to how researchers were able to examine how the Secure Enclave works. Thanks to a report by Motherboard picked up by Cult of Mac; we now have a better idea of what’s behind it all: internal prototypes somehow stolen from Apple and then re-sold on the gray market.

What …

Checklist 129: The Internet of Things and Other Things

On this week’s Checklist by SecureMac: Congress nibbles at the Internet of Things, Out of sight is not off the grid and A show worthy of a security conference.

Google Shares Details about a New macOS Vulnerability

On Friday, March 1, 2019, Google’s Project Zero announced that it had discovered a “high severity” vulnerability in Apple’s macOS operating system. The Project Zero team constantly works to find vulnerabilities in software and code from other companies and developers. When Project Zero does identify a weakness, it notifies the coder or developer behind the software. The developer then has a 90-day window to fix the issue before Project Zero announces the vulnerability to the world. In other words, Apple has known about this issue for a while and has …

Checklist 128: The Matrix, the Bounty, and the Electronic Frontier

On this week’s Checklist by SecureMac: Hear ye, the Thunderclap, Google’s Project Zero hits Apple & The EFF wants encryption in the cloud.

Checklist 127: Once More, with Facebook!

On this week’s Checklist by SecureMac: Popular Apps Send Your Info to Facebook, The State of Play for Consumer Privacy, Pulling the Plug on Onavo Protect, Which Nests are Miked-Up, The Senate Wants to See Google’s CEO

Checklist 126: Little Nests Have Big Ears

On this week’s show we talk about: Little Nests have big ears, Google crosses one of its own privacy lines, and when sharing can be a bad thing…

Apple Releases a Fix for Group FaceTime Bug — Update Now

After a couple of weeks of uncertainty following the announcement of a severe privacy flaw in one of Apple’s flagship features for iOS 12, a patch nearly entirely dedicated to fixing the problem is available for download. Relevant updates are included in iOS 12.1.4, a Supplemental Update to macOS Mojave 10.14.3, and a minor update to Shortcuts on iOS to version 2.1.3.

Let’s recap how we got here:

A teenager playing Fortnite with his friends sends FaceTime calls to multiple people.In the process, he discovers a bug, easy to execute, that allows …

New Linux Malware Appears, Infects Some Macs Along the Way

While the average user might think their operating system options only go so far as “PC or Mac”, the truth is that there are many more systems running behind the scenes which power a great deal of our digital infrastructure. Linux is one such system, used by hobbyists, computer enthusiasts, and enterprises to power all kinds of servers and back-end systems. Naturally, it follows that there would be malware for Linux too — though it is rarer than most. According to a story making the rounds on ZDNet and BleepingComputer, …

Checklist 125: Pirates on the Enterprise

On this week’s episode we talk about: apps that record what you’re up to, pirates on the Enterprise, and 2FA has a day in court (for some reason).

Checklist 124: Returning to the Nest

This week, a return to form — at least in terms of format. We’ve got follow-ups on stories from previous weeks for you, but we’re also hitting some big stories in security news this week. That includes another major event concerning Apple security and the ongoing tension over its bug bounty programs (or lack thereof), while smart home device maker Nest tries to smooth things over and assure users that yes, everything is absolutely fine! Those stories and in-depth discussions about them feature on today’s Checklist, which includes:

A Keychain Security …

Newly-Discovered Bug in Group FaceTime Inadvertently Allows Eavesdropping

When Apple debuted iOS 12.1 late last year, one of the flagship additions to the system was Group FaceTime. This long-requested feature allows multiple users to enjoy simultaneous face-to-face video chat through FaceTime. However, in the wake of a serious flaw in Group FaceTime that was disclosed this past week, the feature is currently inaccessible on all iOS devices.

At issue is the potential risk for spying on the audio (and in some cases, video) feeds from a phone targeted through the flaw. Unlike many iOS bugs, this one does not …

Latest Round of Security Updates Arrives for Apple Devices

It’s here: the first array of security updates in the new year for everything from macOS to iOS. These updates don’t roll out any brand new bells and whistles or slick new features, but they do address a host of flaws that require a fix. Systems affected by these new updates include:

iOS (new version: 12.1.13)macOS Mojave (10.14.13)Sierra and High Sierra tvOS (12.1.2)Safari (12.0.3)watchOS (5.1.3)

Typically, Apple does not typically disclose extensive details about what specific attacks were possible and addressed by the bug fixes, or loopholes closed in these latest versions. However, …

Checklist 123: Longtime Listener, FaceTime Caller

One story today… with lots of little stories nestled inside… Longtime Listener, FaceTime Caller… time to hit the Checklist.

Checklist 122: Unrest In The Nest

Jan 24, 2019

It’s the end of the world as we know it — or at least, for one Californian family, that’s what it seemed like for about thirty minutes or so. Meanwhile, the police are leaking data all over the place online, but hey, at least Apple has a new raft of updates for all your favorite products to download and install. Those stories, and our thoughts on them, make up this week’s list. We’re going down the following items:

Unrest in the NestTeaching Police Departments About SafetyAll Your Apple Gear …

Checklist 121: On Checklist, TV Watches You!

With January slipping by quickly, are you back in the groove of all your usual life responsibilities? Are you perhaps enjoying your free time by taking advantage of all those new gadgets you got over Christmas, such as a brand-new TV? It may have some unsavory features you don’t know about lurking in the menus and settings — and speaking of settings, what better time of the year than to review some of your mobile security settings? That, plus a look at some helpful resolutions you can make now that …

2019 Kicks Off with several Apple Security Issues

The year may not yet even be a few weeks old, but already the headlines have been crowded with a range of issues that Apple users would do well to notice. From malware slipping past Gatekeeper to a mysteriously cancelled hacker conference appearance, there’s plenty to take in this January. What do you need to know about the latest in Mac news?

First, watch out for more suspicious phone calls that seem like they’re coming from Apple. Phishing scammers have apparently taken to spoofing Apple’s identity and are making calls to …

Checklist 120: New Year Old Worries

It’s a new year — but some old worries have followed us into 2019, still lingering and causing some concerns. That means it’s time to shake off the last of the sleepiness still hanging around from the holidays and get back down to business. We have phishers making calls looking for info, more issues with troublesome apps that evaded Apple’s notice, and an update to the unfolding story about how Marriott Hotels suffered one of the biggest recent data breaches. So that means that on our list for today, we’re …

Checklist 119: Hacky Holidays!

The holidays are here — and so is the entire Checklist crew! On this week’s special holiday edition of the show, we’re veering into something new and fun. Rather than bringing you depressing stories about data breaches or the headlines about whatever Facebook’s latest follies may be, we’re sinking into the sofa with mugs of hot chocolate (and mini marshmallows, of course) for a holiday movie marathon. We aren’t flipping on the Hallmark channel, though, because on our list for this week, we’re going to tick off these stories:

An 11-year-old …