News
November 5, 2010
Alert!!! Security hole found in PayPal's iPhone application
Poster: Daniel Doty
Posted on November 5, 2010 at 8:03:31 AM
Summery:
Even though it has been reported fixed by PayPal, I am not so sure I would continue using the PayPal application on the iPhone. People may want to wait this one out, and make sure that it is okay to use.
Here is a blurb from the article:
To read more, and find out more on this security issue, jump over to ZDNet and read the rest of the article.
Quote
A security research firm has discovered several security problems with PayPal’s iPhone app, warning that hackers can use man-in-the-middle attacks to steal sensitive user data.
Even though it has been reported fixed by PayPal, I am not so sure I would continue using the PayPal application on the iPhone. People may want to wait this one out, and make sure that it is okay to use.
Here is a blurb from the article:
Quote
According to an audit of the app by Chicago-based viaForensics, the vulnerability stems from the app’s failure to confirm the authenticity of PayPal’s website when communicating over the Internet.
Without that confirmation, a hacker could electronically step between a user and PayPal, pretend to be the PayPal website and gather usernames and passwords. The hacker would need to be in the same physical location as the user or have gained access to the same Wi-Fi network.
In practice, that could mean setting up a Wi-Fi hotspot in a location, such as a train station, and waiting for someone to use the network for a PayPal transaction on their iPhone app. It would be a fishing expedition, but the equipment and software needed is commonly available.
To read more, and find out more on this security issue, jump over to ZDNet and read the rest of the article.
October 28, 2010
Adobe under attack: New PDF, Flash zero-day
Poster: Daniel Doty
Posted on October 28, 2010 at 7:40:07 PM
According to an article published today on ZDNet, Adobe is under attack again! Here is a little of what the article states as a summary of the issue:
To read the full article, jump over to the ZDNet news flash on this.
Quote
A critical vulnerability has been identified in Flash Player 10.1.85.3 and earlier versions for Windows, Macintosh, Linux and Solaris; Adobe Flash Player 10.1.95.2 and earlier versions for Android; and the authplay.dll component that ships with Adobe Reader 9.4 and earlier 9.x versions for Windows, Macintosh and UNIX, and Adobe Acrobat 9.4 and earlier 9.x versions for Windows and Macintosh. This vulnerability (CVE-2010-3654) could cause a crash and potentially allow an attacker to take control of the affected system.
To read the full article, jump over to the ZDNet news flash on this.
Page:
[1]