Link

'FinSpy' Spyware is Adept at Hiding Itself With a Four-Layer Method

Andrew Orr ·

FinSpy, a well-known piece of spyware from German company FinFisher, is good at hiding. Researchers at Kaspersky have reverse-engineered the malware.

In addition to a four-layer obfuscation method, the spyware also now employs a UEFI (Unified Extensible Firmware Interface) bootkit for infecting its targets, and it also encrypts the malware in memory, according to the researchers. The Kaspersky team’s research began in 2019, and they are finally sharing their findings today at Kaspersky’s online Security Analyst Summit.

Link

AirTag Zero Day Found That Could Steal Your iCloud Password

Andrew Orr ·

A security researcher found a zero-day bug with AirTag that could let an attacker potentially steal your Apple ID.

Apple’s “Lost Mode” allows a user to mark their Airtag as missing if they have misplaced it. This generates a unique https://found.apple.com page, which contains the Airtag’s serial number, and the phone number and personal message of the Airtag owner.

Link

Apple Should Scrap Leather if Its Serious About The Environment

Charlotte Henry ·

Apple is always keen to tout its environmental credentials. However, Adam Oram at iMore makes a really good point. If the company wanted to really improve the impact it has on the environment further, it would stop using leather.

One aspect of Apple’s product lineup no one appears to be looking at, though, is the use of leather. Environmentally, leather is extremely damaging, and it’s surprising to me that Apple has not pursued more eco-friendly alternatives. Apple has a long history with leather, having made a variety of accessories. Right now, in Apple’s product lineup, it has several leather items, including iPhone cases, folios, and sleeves, Apple Watch bands, iPad Smart Covers, MacBook sleeves, MagSafe wallets, and AirTag key rings. These are all supplementary to its hero products, but they are often sold as add-ons when picking up a new phone or tablet.

Link

So What is a Decentralized Autonomous Organization Anyway?

Andrew Orr ·

David Shuttleworth wrote a nice write-up to explain decentralized autonomous organizations (DAO). These are blockchain-related entities where power is shared by everyone.

Ultimately, a DAO is governed entirely by its individual members who collectively make critical decisions about the future of the project, such as technical upgrades and treasury allocations.