Touch ID hackers attempt to take things to next level, no need for physical fingerprint | 9to5Mac: "The hacker who successfully used a fingerprint captured from an iPhone to fool Touch ID now believes it may be possible to perform the same hack without needing access to a physical fingerprint."

Labels: security, security flaw

The Cocoa Distillery - How to build on 10.8 and earlier, then sign for...: "The only way to obtain a v2 signature is by code signing under 10.9, but since Xcode 3 doesn’t run on anything newer than 10.6.8, I’ll have to separate the build process from the signing, packaging and submission process."

Labels: codesign, gatekeeper, secure coding mac, security, version 2 signature

Keybase: "Get a public key, safely, starting just with someone's social media username(s)."

Labels: keybase.io, public key, security

PSN is coming back online, Xbox Live is up -- and that's maybe because of Kim Dotcom | GamesBeat | Games | by Jeff Grubb: "When Dotcom, who owns and operates the file-transfer website Mega, found out that he could not get online to play developer Bungie’s online shooter Destiny on Xbox One, he took to the Web to strike a deal. "

Labels: security, security flaw, think different

Sony considers YouTube as possible distributor for The Interview after hack | Film | The Guardian: "Sony Pictures still wants and intends to release its controversial film The Interview, possibly via YouTube."

Labels: security flaw, sony hack

BBC News - Jeans made that will prevent 'digital pickpocketing': "A pair of jeans containing material that blocks wireless signals is being developed in conjunction with anti-virus firm Norton.

The trousers are intended to stop thieves hacking into radio frequency identification (RFID) tagged passports or contactless payment cards."

Labels: security flaw

BBC News - Google considers warning internet users about data risks: "Google is proposing to warn people their data is at risk every time they visit websites that do not use the 'HTTPS' system."

Labels: overcompensation, security flaw

Technical Note TN2206: OS X Code Signing In Depth: "Checking Gatekeeper Conformance
To test Gatekeeper conformance, you must use OS X 10.9.5 or later. Follow these steps:

Package your program the way you ship it, such as in a disk image.
Download it from its website, or mail it to yourself, or send it to yourself using AirDrop or Message. This will quarantine the downloaded copy. This is necessary to trigger the Gatekeeper check as Gatekeeper only checks quarantined files the first time they're opened.

Hint: keep the downloaded .dmg around; it will stay quarantined and you can use it again and again to test.

Drag-install your app and launch it.
Observe the results.
Hint: Don't launch from inside the .dmg."

Labels: gatekeeper

Powerful, highly stealthy Linux trojan may have infected victims for years | Ars Technica: "Researchers have uncovered an extremely stealthy trojan for Linux systems that attackers have been using to siphon sensitive data from governments and pharmaceutical companies around the world."

Labels: security flaw