“Snakes in airplane mode” – what if your phone says it’s offline but isn’t?

By: Paul Ducklin — August 21^st 2023 at 17:45

WYSIWYG is short for "what you see is what you get". Except when it isn't...

Naked Security

S3 Ep147: What if you type in your password during a meeting?

By: Paul Ducklin — August 10^th 2023 at 13:34

Latest episode - listen now! (Full transcript inside.)

Naked Security

Serious Security: Why learning to touch-type could protect you from audio snooping

By: Paul Ducklin — August 8^th 2023 at 18:51

Fast, quiet, smooth, consistent and low impact... why true hacker-grade touch-typing might keep you more secure.

Naked Security

S3 Ep146: Tell us about that breach! (If you want to.)

By: Paul Ducklin — August 3^rd 2023 at 17:56

Serious security stories explained clearly in plain English - listen now. (Full transcript available.)

Naked Security

Serious Security: Rowhammer returns to gaslight your computer

By: Paul Ducklin — July 10^th 2023 at 21:22

Gaslights produce a telltale flicker when nearby lamps are lit; DRAM values do something similar when nearby memory cells are accessed.

Naked Security

Windows 11 also vulnerable to “aCropalypse” image data leakage

By: Paul Ducklin — March 22^nd 2023 at 17:59

Turns out that the Windows 11 Snipping Tool has the same "aCropalypse" data leakage bug as Pixel phones. Here's how to work around the problem...

Naked Security

SHEIN shopping app goes rogue, grabs price and URL data from your clipboard

By: Paul Ducklin — March 10^th 2023 at 17:58

It's not exactly data theft, but it's worryingly close to "unintentional treachery" - apparently because it's great for marketing purposes

Naked Security

Password-stealing “vulnerability” reported in KeePass – bug or feature?

By: Paul Ducklin — February 1^st 2023 at 18:58

Is it a vulnerability if someone with control over your account can mess with files that your account is allowed to access anyway?

Naked Security

Public URL scanning tools – when security leads to insecurity

By: Paul Ducklin — November 7^th 2022 at 17:59

Never make your users cry/By how you use an API

Naked Security

Breaching airgap security: using your phone’s gyroscope as a microphone

By: Paul Ducklin — August 24^th 2022 at 18:59

One bit per second makes the Voyager probe data rate seem blindingly fast. But it's enough to break your security assumptions...

Naked Security

Serious Security: Apple Safari leaks private data via database API – what you need to know

By: Paul Ducklin — January 18^th 2022 at 17:23

There's a tiny data leakage bug in the WebKit browser engine... but it could act as a "supercookie" identifier for your browsing

Naked Security

The cool retro phone with a REAL DIAL… plus plenty of IoT problems

By: Paul Ducklin — December 23^rd 2021 at 17:58

You know you want one, because this retro phone is NOT A TOY... except when it comes to cybersecurity.

Naked Security

Github cookie leakage – thousands of Firefox cookie files uploaded by mistake

By: Paul Ducklin — November 18^th 2021 at 22:20

Be aware before you share! That's a good rule for developers and techies, just as much as it is for social media addicts.