James breaks down a few news stories from the previous week. The following stories were discussed, including some brief points.

  • Microsoft Accidentally pushes test patch http://www.zdnet.com/article/microsoft-accidentally-issued-a-test-windows-update-patch/

    • Of course the community assumes hack.
    • Oversight that allowed a test patch to be released.
    • They are working to remove it.
    • Credit Card Liability Shift Is here
    • Starting October 1, 2015 if your a vendor and use the magnetic stripe on a chip enabled card, certain fraudulent transactions will fall to you, instead of the bank.
    • This doesn’t change the liability for consumers.
    • James' interview on Channel 4 News in Jacksonville http://www.news4jax.com/news/new-credit-card-technology/35391900
    • WinRAR exploit – Is it just hype? http://www.theregister.co.uk/2015/09/30/500m_winrar_users_open_to_remote_code_execution_zero_day/

    • Requires you to execute an exe, which is something we are taught not to do from untrusted sources.

    • Estimates say this effects 500 million users, but let’s be realistic on the risk here. It requires you to execute an executable.
    • Remember not to run attachments or files unless they are from a trusted source and you are expecting the item.
    • Huge iOS 9 Security Flaw (or maybe not?) https://www.yahoo.com/tech/s/huge-ios-9-security-flaw-lets-anyone-see-134547688.html
    • Can bypass the lock screen to see photos and contacts.
    • Uses Siri (so it has to be enabled on the lock screen).
    • Requires physical access to the device.