Erictric

Google Pays Its First $1,337 Reward for Critical Bug Found on Chrome

By the end of January, Google offered cash rewards to developers and researchers who found bugs on the Chrome and Chromium builds as part of its Chromium Security Reward program, which is pretty similar to program offered by Mozilla. Google promised to pay cash prizes that range from $500 for most eligible bugs, up to $1,337 for highly critical bugs. The day has come, and Google has handed out its very first $1,337 prize.

The official Google Chrome Releases Blog states:

“Congratulations to Sergey Glazunov on receiving the first $1337 Chromium Security Reward for bug 35724.” More »

Facebook Tosses Out ‘Panic Button’ Idea

Facebook has reportedly ruled out installing a ‘panic button’ on Facebook pages which would allow children to report malicious Facebookers directly to authorities, says the BBC. Instead, the world’s largest social-networking website will continue to “develop its existing system.”

The website will provide a plethora of links on its reporting pages which those threatened can use to get in touch with authorities and other counseling services.

In a sense, you could say the exclusion of the ‘panic button’ is actually a good thing. Just think of how many resources would have been wastefully spent in dealing with abuse of the button — with folks left and right crying wolf over what could turn out to be an innocent person with zero malevolent intentions.

 Loading ...

[ via BBC ]

Apple iPhone OS 4.0 To Bring Multitasking Support

Originated from a source described to have a “proven track record,” AppleInsider is reporting that California-based Apple Computer Inc. has plans to satiate one of the most-wanted desires when it comes to the iPhone and iPod Touch — multitasking. Simply put, in the nearly three years the world has become acquainted with iPhone OS — not any of the versions supported full-on multitasking, with the exception of a few stock Apple Apps. More »

Gmail Security Improvements Coming This Week

Google is expected to launch a series of new security improvements and tweaks within Gmail as early as today, according to a “source with knowledge of the new features,” reports TechCrunch. The expected changes are primarily put in place in order to reduce the rocks of both phishing and general Gmail account hacks.

One of these changes has been described as a “secondary line of defense” when a Gmail user has managed to forget/lose his/her account password. Users may be able to receive a text message with a one-time use password if they need to access their account from another system. More »

Report: Inside Apple’s Veil Of Secrecy

Apple’s an incredible company. Their products are built with careful attention to every detail, and they’re built to last. Known by now, the company keeps a massive veil of secrecy over anything and everything done, especially when it comes to the launch of new products. And it’s working. There was virtually no evidence of an iPad before the announcement date, except for information distributed via controlled leaks.

A new report published by Reuters gives the general public a glimpse as to how Apple operates underneath the veil, and what the California-based company’s expectation of suppliers is. More »

Apple Begins Banning iPhone Hackers From App Store

In an attempt to stop hackers from exploiting their prized iPhone operating system, Apple has begun to ban well-known hackers of the iPhone from the iTunes App Store, according to Redmond Pie’s Taimur Asad. iPhone OS 3.1.3 exploiter Sherif Hashim recently found himself in a bit of a pickle, when he received a notification stating “This Apple ID has been disabled for security reasons” on his iPhone when attempting to access the App Store.

After posting about the incident on Twitter, another fellow iPhone hacker also noted that he too had been disabled from the App Store after contributing to an iPhone exploit.

Of course, the users will likely be able to sign up with another email address, so we’re not exactly sure how this serves as a deterrent.

Twitter Blames Phishing Attacks on Torrent Sites with Security Holes and Secret Backdoors

Yesterday in the morning, we reported that Twitter asked many of its users to reset their passwords in order to regain access to their accounts due to a possible phishing attack. Later in the afternoon, the micro-blogging website released a statement through the press, in which they explained that only a small number of accounts were compromised in some kind of phishing attack. Their explanation was a bit too simple and left a lot of questions.

Last night, Twitter finally addressed its users and the general public on its Twitter Status Blog, in a post titled “Reason #4132 for Changing Your Password.” In it, Twitter Trust and Safety Director Del Harvey explains what really happened and the reason for the password change notifications. More »

Genuine Photos of The Apple Tablet Under Tight Security?

We’re all well aware that today is the big day for Apple. The company will be revealing their “latest creation” in just a few hours at an event in San Francisco. Up until now, we’ve had a set of very realistic (albeit fake) renditions of the tablet — but photos emerging today actually appear to be the real Apple Tablet.

Engadget has obtained several images from a source depicting the tablet bolted to a table to prevent it from being pilfered. As reported in the past months, the device (from the photos) appear to be a giant iPhone, with a price tag of $1000 unsubsidized, and $800 with a contract from Verizon.

See more images after the break. More »

New Vulnerability Found on Internet Explorer

Bad news, everyone. It appears that Boston-based research firm Core Security Technologies has found a new set of small un-patched vulnerabilities on the Internet Explorer web browser that when/if used together could be exploited to remotely access victims’ computers. The news comes just 3 days after Microsoft released an emergency out-of-band update to fix a security hole on Internet Explorer 6, 7, and 8 used to cyber-attack Google in the middle of this past December.

While each of said security holes alone are not dangerous enough, it’s a totally different story if a hacker exploit thems all at once. Core Security Technologies consultant Jorge Luis Alvarez Medina said that “[t]here are three or four ways to conduct this type of attack.” Medina added that even though his company is working with Microsoft to find a solution, he believes new vulnerabilities will just keep appearing in the future. Microsoft has yet to comment on the matter. More »