Link

Smart Home Cameras, Baby Monitors Affected by Software Bug

Andrew Orr ·

A flaw in the ThroughTek “Kalay” network affects millions of IoT devices including smart baby monitors, DVRs, smart cameras, and other products.

this latest vulnerability allows attackers to communicate with devices remotely. As a result, further attacks could include actions that would allow an adversary to remotely control affected devices and could potentially lead to remote code execution.

Due to how the Kalay protocol is integrated by original equipment manufacturers (“OEMs”) and resellers before devices reach consumers, Mandiant is unable to determine a complete list of products and companies affected by the discovered vulnerability.

Link

Mastercard Moves to Phase Out Use of Magnetic Stripe by 2024

Andrew Orr ·

Mastercard announced on Monday a plan to phase out usage of magnetic stripes on its cards, and says it is the first payments network to do so.

Based on the decline in payments powered by magnetic stripes after chip-based payments took hold, newly-issued Mastercard credit and debit cards will not be required to have a stripe starting in 2024 in most markets. By 2033, no Mastercard credit and debit cards will have magnetic stripes, which leaves a long runway for the remaining partners who still rely on the technology to phase in chip card processing.

Link

GitHub No Longer Accepts Passwords, Use Security Keys Instead

Andrew Orr ·

GitHub will no longer accept passwords when authenticating Git operations and will require the use of strong authentication factors. Yubico also posted about the announcement here, and its 2FA hardware keys are an acceptable solution for GitHub users.

In December, we announced that beginning August 13, 2021, GitHub will no longer accept account passwords when authenticating Git operations and will require the use of strong authentication factors, such as a personal access token, SSH keys (for developers), or an OAuth or GitHub App installation token (for integrators) for all authenticated Git operations on GitHub.com. With the August 13 sunset date behind us, we no longer accept password authentication for Git operations.

Podcast

Travel Tips, Wi-Fi Troubleshooting, and Dave Got Caught! — Mac Geek Gab 885

John F. Braun & Dave Hamilton · · Add Comment

It’s always interesting when multiple listeners have the same problem, and today you can listen as John and Dave dig into issues with Mac minis and restarting. We think your two favorite geeks have the answer! And that’s what happens here, you ask questions, we provide answers… and Quick Tips… and Cool Stuff Found, too! Press play and enjoy learning at least five new things!

Link

(Update) T-Mobile Customer Data for Sale Affecting Over 100 Million People

Andrew Orr ·

A person in an online forum is offering data for sale that they claim comes from T-Mobile servers. The carrier says it is investigating the accuracy of this alleged breach.

The data includes social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver licenses information, the seller said. Motherboard has seen samples of the data, and confirmed they contained accurate information on T-Mobile customers.

Update: T-Mobile has issued a statement confirming the breach.

Podcast

Mac Gaming, Crypto Credit Cards, iOS 15, with Jeff Butts - ACM 553

Bryan Chaffin · · 1 Comment

Bryan Chaffin and Jeff Butts talk about the current state of Mac gaming, with Jeff focusing on improved Mac support at Steam. They also dive deeper into crypto credit cards where you can either spend your crypto and/or earn cryptocurrency rewards like Bitcoin on your purchases. And, Jeff has been deep into iOS 15 betas, and he talks about some of his favorite new features.

Add a Free COVID-19 Vaccine Passport to Apple Wallet Using VaxYes
Cool Stuff Found

Add a Free COVID-19 Vaccine Passport to Apple Wallet Using VaxYes

Andrew Orr ·

Congratulations on being fully vaccinated against COVID-19! Now? Well, you can take a photo of your record or scan it into Files/Apple Notes. And with a service called VaxYes from gogetdoc you can add it to Apple Wallet for greater convenience. You’ll have to give them a picture of your vaccine card as well as a photo of your ID. The company uses AES-256 encryption (referred to as “military grade”) and is fully compliant with HIPAA. Gogetdoc has HIPAA-trained quality control agents and medical staff to ensure appropriate details are collected for verification of the record before issuing a digital vaccine card. Tap on “Get a Free Vaccine Passport” and follow the onscreen instructions. I did it and the process to get the Wallet passport took about 60 seconds. If you live in the UK you can get a passport with this article.