appmarsh

Thursday, 8 October 2020

Leave the Wires at Home With Aukey's 10,000mAh Portable Wireless Charger for $35

Aukey 10,000mAh Wireless Power Bank | $35 | Amazon | Clip $5 Coupon

Adobe Now Lets You Easily Adjust Where Everyone in a Photo is Looking

The larger the group (or the younger the subjects) the harder it is to ensure that everyone in a photo is looking in the right direction. Should they all be looking at the photographer? The camera lens? At someone else in the shot? With Photoshop Elements 2021, Adobe will let users fix it in post and change where…

Apple Files to Trademark 'iPhone for Life' in Hong Kong

Apple has filed to trademark 'iPhone for Life' in Hong Kong, reports Patently Apple.

The Hong Kong database shows that Apple filed for the trademark 'iPhone for Life' in early April 2020. I've never seen that trademark in the US market, but did find it in other countries, associated with foreign telecoms and Apple shops.

Spotlight Deal:
Apple HomePod On Sale for 31% Off [Deal]

Share Article:
Facebook, Twitter, LinkedIn, Email, Reddit, Digg, Delicious, StumbleUpon

Follow iClarified:
Facebook, Twitter, LinkedIn, Newsletter, App Store, YouTube

from iClarified - Apple News and Tutorials https://ift.tt/30Mpqav

Hackers Discover 55 Apple Vulnerabilities, Awarded Over $50,000 in Bounties

A group of hackers has been awarded over $50,000 by Apple for discovering 55 vulnerabilities in the company's systems.

Sam Curry, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes spent three months hacking Apple platforms and services to discover a range of weaknesses. The 55 vulnerabilities the team discovered were of varying severity, with some being critical.

During our engagement, we found a variety of vulnerabilities in core portions of their infrastructure that would've allowed an attacker to fully compromise both customer and employee applications, launch a worm capable of automatically taking over a victim's iCloud account, retrieve source code for internal Apple projects, fully compromise an industrial control warehouse software used by Apple, and take over the sessions of Apple employees with the capability of accessing management tools and sensitive resources.

Apple apparently was swift to address the majority of the vulnerabilities, with some being resolved in as little as a few hours.

Overall, Apple was very responsive to our reports. The turn around for our more critical reports was only four hours between time of submission and time of remediation.

As part of Apple's Security Bounty Program, the group was able to receive considerable payments for some of their work. As of Sunday, October 4, they had received four payments totaling $51,500. This included $5,000 for disclosing the full name of ‌iCloud‌ users, $6,000 for finding IDOR vulnerabilities, $6,500 for access to internal corporate environments, and $34,000 for discovering system memory leaks containing customer data.

Since no-one really knew much about their bug bounty program, we were pretty much going into unchartered territory with such a large time investment. Apple has had an interesting history working with security researchers, but it appears that their vulnerability disclosure program is a massive step in the right direction to working with hackers in securing assets and allowing those interested to find and report vulnerabilities.

Apple has been actively investing in its bug bounty program since last year. Security researchers can now receive up to one million dollars per vulnerability depending on the nature and severity of the security flaw.

With the permission of Apple's security team, the group has published an extensive report which details a range of vulnerabilities and methods of locating and exploiting weaknesses. They also hinted that additional bounties may be on the way.

Tags: Apple security, hack, bug bounty

This article, "Hackers Discover 55 Apple Vulnerabilities, Awarded Over $50,000 in Bounties" first appeared on MacRumors.com

Discuss this article in our forums

from MacRumors: Mac News and Rumors - All Stories https://ift.tt/2Ib66gP

What To Do Before Getting Rid Of Your Xbox One Or PS4

A little more than a month from now, next-gen consoles will be out in the wild. At this point, you might be regarding your PlayStation 4 or Xbox One as a slowly degrading plastic box that’s doomed to waste space and collect dust. You might have even considered [gasp] getting rid of them.