Link

Twitter Supports Physical Security Keys for Two-Factor Authentication

Andrew Orr ·

Twitter announced on Wednesday that its mobile app now supports physical security keys for iPhone and Android. The company added support for these keys in 2018 but people could only use them in a browser. But switching to the WebAuthn protocol brings the method to mobile devices.

Now anyone with a security key set up on their Twitter account can use that same key to log in from their mobile device, so long as the key is supported. (A ton of security keys exist today that work across different devices, like YubiKeys and Google’s Titan key.)

Link

Windows 10 on ARM Running on an M1 Mac Beats Surface Pro X

Andrew Orr ·

An engineer for Amazon Web Services was able to run Windows on ARM on an M1 Mac, and it’s faster than Microsoft’s Surface Pro X.

According to Geekbench 5 results, Windows ARM running on the M1 chip is faster than Microsoft’s Surface Pro X, which is a great deal. The version running on the M1 Mac scored a single-core score of 1288 and a multi-core score of 5449, which obliterates the Surface’s single-core score of 765 and multi-core score of 3014.

Link

Telegram Beta Supports Siri Announce Message Feature

Charlotte Henry ·

Users of the latest beta of security-focusssesd messaging app Telegram can now access Siri’s ability to announce messages through AirPods, The 8-Bit reported. It is the first third-party aim to support this feature.

Those on the latest Telegram beta via Testflight will see an option to enable the feature Telegram in Settings – Notifications – Announce Messages With Siri. It’s worth noting that only Apple’s AirPods, AirPods Pro, Powerbeats, Powerbeats Pro, and Beats Solo Pro support this feature. Moreover, only iPhones and iPads running on iOS 13.2 and later are supported. The Announce Messages with Siri feature uses Siri to announce incoming messages out loud when a user’s headphones are connected to their iPhone or iPad, they are wearing them, and their device is locked, according to Apple. Upon the arrival of an incoming message, Siri plays a tone, announces a sender’s name, and then reads the message.

Link

Inside the iPhone Wi-Fi Exploit Apple Patched This Year

Andrew Orr ·

Google’s security firm Project Zero published a report on Tuesday detailing an iPhone Wi-Fi exploit that Apple patched earlier this year in iOS 13.5. It’s a long, 30,000 word blog post, but ArsTechnica has a good breakdown.

Beer developed several different exploits. The most advanced one installs an implant that has full access to the user’s personal data, including emails, photos, messages, and passwords and crypto keys stored in the keychain. The attack uses a laptop, a Raspberry Pi, and some off-the-shelf Wi-Fi adapters.

Link

Salesforce Buying Slack for $27.7 Billion

Charlotte Henry ·

Slack has become a major part of our work lives for many of us in 2020. Now cloud computing giant Salesforce is set to buy a workplace chat app for $27.7 billion, The Verge reported.

Slack has transformed from a fast-rising startup formed as a gaming company in 2009 into a major competitor of Microsoft with more than 12 million daily active users as of October of last year (and likely many more now, though the company has not disclosed concrete numbers) and a market value of close to $25 billion. The company, led by Flickr co-creator Butterfield, started primarily as an email alternative that pitched itself to startups, media companies, and other tech-savvy businesses to better manage interoffice communication. But Butterfield and his team grew Slack into a full productivity suite with video meeting features, file hosting, IT administration, and all manner of other features typically offered by large enterprise corporations.

Link

The iPhone 12 Gets Sent to The Bottom of a Lake. Is it Water Resistant Enough Survive?

Charlotte Henry ·

The iPhone 12 is meant to handle most spills and drips. However, CNet wanted to know how water resistant the device really is. So it sent one to the bottom of Lake Tahoe.

The iPhone 12’s IP68 rating means it can survive up to 19.6 feet (6 meters) of water for 30 minutes. This applies to all four iPhone 12 models: the iPhone 12 Mini, iPhone 12, iPhone 12 Pro and iPhone 12 Pro Max. But we discovered that like its predecessor, Apple’s newest iPhone can handle a great deal more than that. Both of the iPhone 11 models far exceeded the official rating, surviving a 39-foot dive in salt water in Monterey Bay, California. This year we took a brand-new iPhone 12 for a swim in the frigid fresh water of Lake Tahoe, on the other side of the Golden State, to test it out. Teaming up with Mission Robotics, we mounted our iPhone 12 to the company’s underwater drone, Theseus. The drone can go as deep as 984 feet (300 meters) underwater, with the pilot able to see the view from Theseus’ camera, as well as depth and water temperature metrics from a computer on shore.

TMO Deals

FITT360 Hands-Free Neckband Camera: $469.99

Bryan Chaffin ·

We have a deal today on FITT360, a wearable 360 degree camera you wear around your neck and operate hands-free. It uses 3 FHD cameras to capture everything around you, then connects directly to the free FITT360 companion app to automatically stitch the footage together into a 360 degree format. FITT360 comes with 64GB of built-in internal memory, along with an external memory card slot to add up to 128GB of external storage. The battery provides up to 70 minutes of continuous recording per charge.

Link

Apple Releases Pro Display XDR Calibration Tool

Andrew Orr ·

Apple has released a tool for owners of its Pro Display XDR screen that lets users calibrate their display for specific color workflows.

Every Pro Display XDR undergoes state-of-the-art factory calibration with laboratory grade instrumentation. Pro Display XDR Calibrator enables in-field recalibration of Pro Display XDR for specific color workflows that may require custom calibration. Recalibration with this utility requires one of the following spectroradiometers: Photo Research SpectraScan PR-740, PR-745 or PR-788; Colorimetry Research CR-300

Link

This Terminal Command Can Bypass Mac Privacy Protections

Andrew Orr ·

A UNIX command line tool called “ls” can be used to bypass Mac privacy protections like TCC (Transparency, Consent, and Control) and the sandbox. This provides unauthorized access to file metadata in directories that are supposed to be protected

I continue to believe that macOS “security” is mainly theater that only impedes the law-abiding Mac software industry while posing little problem for Mac malware. It doesn’t take a genius hacker to bypass macOS privacy protections: calling “ls” is a script kiddie level attack.

It affects macOS Big Sur, Catalina, and Mojave.