Chrome OS fends off all hacks at Pwnium 3, others fall at Pwn2Own

<div dir="rtl" style="text-align: right;" trbidi="on"><div dir="ltr" style="text-align: left;"> <img alt="Chrome OS fends off all hacks at Pwnium 3" data-src-height="412" data-src-width="619" src="http://www.blogcdn.com/www.engadget.com/media/2013/03/samsung-chromebook-550-619.jpg" /></div><div dir="ltr" style="text-align: left;">Google's Pwnium challenge followed a familiar pattern in its first two years, with white hat hackers invariably finding a Chrome vulnerability and prompting a round of patches that ultimately made the software stronger. For the Chrome OS-focused Pwnium 3, there's been a slight hiccup: there were no hacks to patch. Despite Google offering a total of $3.14159 million in bounties, entrants couldn't demonstrate a working exploit on the Series 5 550 target machine. That may be a testament to Google's steady security improvements, but it doesn't help discover what holes are left. We'd add that few were left unscathed at the Pwn2Own competition running in tandem -- the regular Chrome browser, Firefox and Internet Explorer all came tumbling down, and Safari may have escaped only because contestants didn't register in advance. Even so, the Chrome OS results may have Chromebook Pixel owners feeling better about their purchases.</div><div dir="ltr" style="text-align: left;"><br /></div><h2> <a href="http://gdgt.com/google/chrome-os/" itemprop="url" target="_blank">Google <strong>Chrome OS</strong></a> </h2></div>

Chrome OS fends off all hacks at Pwnium 3, others fall at Pwn2Own

  Google's Pwnium challenge followed a familiar pattern in its first two years, with white hat hackers invariably finding a Chrome vul...

مزيد من المعلومات »

Galaxy S III bug disables lock screen, grants full access, tests patience

<div dir="rtl" style="text-align: right;" trbidi="on"><div dir="ltr" style="text-align: left;"> <img alt="Galaxy S III bug disables lock screen, grants full access, tests patience" data-src-height="410" data-src-width="619" src="http://www.blogcdn.com/www.engadget.com/media/2013/03/dsc1521.jpg" /></div><div dir="ltr" style="text-align: left;">Lock screens are around for a reason: to keep people from getting where they shouldn't. They aren't always infallible, though, and a few weeks ago, we saw a vulnerability in several builds of iOS 6 that granted access to the phone module without a passcode. Then, a couple of days ago, we reported on a Galaxy Note II bug that allows the quick-fingered to launch anything immediately behind the lock screen. Now, a similar flaw has been found on the Galaxy S III that breaks the lock screen altogether, permitting full use of the phone. To replicate the bug, you'll need to tap the "Emergency Call" button on the lock screen, then go into the ICE (emergency contacts) menu. From there, press the home button, followed quickly by the power button, and that's it. If successful, pressing the power button again will bring up the home screen straight away, and what's more, the lock screen won't return until the handset is restarted. Sounds worryingly simple, right? In our experience, not so much.</div><div dir="ltr" style="text-align: left;"> We first tried this method on an S III running Android 4.0.4 ICS, and a Note II for good measure, but to no avail. Then, we had a crack at an S III running 4.1.2 Jelly Bean, and were close to giving up trying to replicate it when <em>voilà</em>, it worked. We hoped to provide you with a video of the bug, but it must be camera shy. Despite literally hundreds of attempts in front of the lens and several more behind it, we've only managed it once -- we found it impossible to nail down the correct timing between the home and power button pushes. Samsung's likely aware of the bug already and when quizzed about the Note II vulnerability, said a fix for lock screen issues on affected "Galaxy devices" was in the works (read: they didn't say the Note II specifically). We've reached out for comment just to be sure, but until a patch is provided, keep your phone concealed from nosey types who read tech sites and have saint-like patience.</div></div>

Galaxy S III bug disables lock screen, grants full access, tests patience

  Lock screens are around for a reason: to keep people from getting where they shouldn't. They aren't always infallible, though, an...

مزيد من المعلومات »

Evernote issues site-wide password reset after hackers access user details

<div dir="rtl" style="text-align: right;" trbidi="on"><div dir="ltr" style="text-align: left;"> <img alt="Evernote issues site-wide password reset after hackers access user details" src="http://www.blogcdn.com/www.engadget.com/media/2013/01/evernote.jpg" /></div><div dir="ltr" style="text-align: left;">Popular cross-platform note-storing service Evernote has revealed in a blog post that it has been the subject of hacking attacks. The operations and security team is keen to point out that there is no evidence that any stored notes and content was accessed, but that some user information -- including passwords and emails -- were. The data breached does benefit from one-way encryption (hashed and salted), but the firm is issuing a site-wide password reset just in case. In short, all users of the site will be required to set a new password, and are advised to log-in as soon as possible to do so. For more details and updates, we suggest keeping a close eye on Evernote's official blog and twitter. Both of which can be found below.</div></div>

Evernote issues site-wide password reset after hackers access user details

  Popular cross-platform note-storing service Evernote has revealed in a blog post that it has been the subject of hacking attacks. The op...

مزيد من المعلومات »

Google details Pwnium 3, targets Chrome OS

<div dir="rtl" style="text-align: right;" trbidi="on"><hr /> <div class="copy post-body"> <div class="image-container" style="text-align: left;"> <img alt="" src="http://www.blogcdn.com/www.engadget.com/media/2012/05/dsc03897.jpg" /></div><div style="text-align: left;"> Google's Chrome Security team has taking the wraps of its its latest Pwnium competition. This time out, the target is Chrome OS on a Samsung Series 5 550, and as ever, the company's putting its money (and nerd cred) where its mouth is, offering up a $Pi million in rewards (that's a lofty $3.14159 million) for the third round of the competition. Amongst the payouts are $110,000 for a "browser or system level compromise in guest mode or as a logged-in user, delivered via a web page" and $150,000 for a "compromise with device persistence -- guest to guest with interim reboot, delivered via a web page." The company is also putting some weight behind the upcoming Pwn2Own competition, which goes down at CanSecWest in Vancouver in March. More info on both can be found at the source link below.</div></div></div>

Google details Pwnium 3, targets Chrome OS

Google's Chrome Security team has taking the wraps of its its latest Pwnium competition. This time...

مزيد من المعلومات »