A nice piece of frightening securityspeak to conjure with: forever-day bugs, which are known bugs that the vendor has no intention of patching. These are often found in control systems, and are the sort of thing that Stuxnet exploited to attack the Iranian nuclear program. These controllers are also found on other kinds of industrial lines and, of course, in aircraft. "Forever day is a play on 'zero day,' a phrase used to classify vulnerabilities that come under attack before the responsible manufacturer has issued a patch. Also called iDays, or 'infinite days' by some researchers..." [Ars Technica]
/
/
1:50 pm Tue
Apr 10, 2012
Forever-day bugs
Penetration tester releases proof-of-concept code for hijacking smart buttplugs
Last week at Defcon, a security researcher named Smea presented their findings on vulnerabilities in the Lovesense Hush, an internet-of-things buttplug that has already been shown to have critical privacy vulnerabilities.
READ THE REST
Judge orders the State of Georgia to be prepared for pen-and-paper balloting by March 2020
Few states have voting machines that are simultaneously more obviously defective and more ardently defended by the state government than Georgia, where 16-year-old touchscreen systems are prone to reporting ballots cast by 243% of the eligible voters and where gross irregularities in election administration sends voters to the wrong polling places or sends co-habitating husbands […]
READ THE REST
Defeating Apple's Faceid's proof-of-life by putting tape over glasses' lenses
Apple's Faceid -- a facial recognition tool that unlocks mobile devices -- has a countermeasure that is designed to prevent attackers from scanning an sleeping/unconscious (or dead) person's face to unlock their phone, by scanning the face for signs of consciousness.
READ THE REST
Take your music production to the next level with this synth & sound bundle
Want to make a hit? The right software is out there for anyone, but any music producer will tell you that finding the right sound can still take time and talent. Still, the right tools are a great shortcut, which makes this Synth & Sound Pack Bundle absolutely priceless. And now that it’s on sale […]
READ THE REST
Save over 60% on these PowerBeats Pro alternatives
Let’s face it: People at the gym aren’t bragging about their headphones. If they were that great, they’d be listening to them instead of talking about them. So while we’re sure those new PowerBeats Pro earbuds are something special, why would you shell out $250 for a tiny pair of speakers when comparable ones are […]
READ THE REST
Learn project management skills from top to bottom with this training
Big companies take on big projects. When they do that, they need a project manager to lay out a roadmap for the entire team – and they’re typically willing to pay a big paycheck to the person who can fill those shoes. So what does it take to become a project manager? If you don’t […]
