Link

MacBook Air With M2 Chip Arriving 2022, According to Leaker

Charlotte Henry ·

Rumors are swirling about future Apple Silicon and the devices that updated chips will go in. MacRumors picked up on one leak that suggested an M2 going into Macbook Air, which will be released next year.

On Twitter, Dylandkt claimed that a new ‌MacBook Air‌ model is “on track” to launch in the first half of 2022, featuring an ‌M2‌ chip and a more colorful design. They also claimed that the “M1X” chip is being reserved for high-end “Pro” Macs, which could include the MacBook Pro and a larger, more powerful iMac model. Dylandkt’s claim is not entirely new, given that Jon Prosser has previously said that the next-generation ‌MacBook Air‌ will feature a complete redesign, a range of iMac-like color options, and an ‌M2‌ chip. Dylandkt has been resolute in previous comments about the “M1X” being destined for the next-generation MacBook Pro, while the “‌M2‌” will apparently be a lower-end chip for the ‌MacBook Air‌, but it is worth noting that this does not seem to fit very well with the specific thoughts of reliable Bloomberg journalist Mark Gurman about Apple’s upcoming custom silicon chips for the Mac.

Link

Kaspersky’s Password Manager Created Weak Passwords

Andrew Orr ·

Kaspersky Password Manager was caught creating weak passwords that were easy to brute force attack.

We will first see an example of a good password generation method, to explain after why the method used by Kaspersky was flawed, and how we exploited it. As we will see, passwords generated by this tool can be bruteforced in seconds.

After a bit less than two years, this vulnerability has been patched on all versions of KPM. Vulnerability has been assigned CVE-2020-27020.

Link

Audacity: Users Hit Out Following Privacy Changes

Charlotte Henry ·

Audacity has been very popular free audio software for a long while. However, new owners update the app’s privacy notice on July 2. It includes new data collection provisions and users are not happy, 9to5 Mac reported.

The new owners break down the two main types of data they collect including data for analytics and for legal enforcement. The analytics are limited to more specific information including the OS version, CPU, user country (based on IP), and error codes. The main issue most have with the change is the vague and overarching wording, especially within the legal enforcement section. They list the personal data they collect as, “Data necessary for law enforcement, litigation and authorities’ requests (if any)” without any limitations. That’s a significant change to Audacity after over 20 years of development. Users have not been pleased with this latest change. A large portion of the user base are advocates for privacy, and this vague from concerning change is seen as a betrayal of Audacity’s users and history.