Bryan Chaffin and Andrew Orr join Jeff Gamet to share their thoughts on Siri co-founder Tom Gruber leaving Apple, plus they explain why strong passwords are so important.
Security
It Turns Out That Venmo Transactions are Public by Default
A security researcher analyzed over 200 million Venmo transactions. She discovered something disturbing.
Redesigning the World Wide Web, Hacking USB Restricted Mode - TMO Daily Observations 2018-07-10
Bryan Chaffin and John Martellaro join Jeff Gamet to talk about Tim Berners-Lee’s push to make a new world wide web, plus look at a report saying there’s an easy workaround to iOS 11.4.1’s USB Restricted Mode.
Here's How Law Enforcement can Work Around USB Restricted Mode
iOS 11.4.1’s USB Restricted Mode blocks anyone from using the Lightning port to hack into your iPhone or iPad, but a security researcher says it’s stunningly easy to work around.
iOS 12 AutoFill Security Concerns, Samsung Phone Shared Photos Bug - TMO Daily Observations 2018-07-03
John Martellaro and Andrew Orr join Jeff Gamet to look at the potential security threats in iOS 12’s Security Code AutoFill, plus they have some thoughts on Samsung smartphones randomly sending out photos.
No, You Can't Bypass iPhone Passcode Attempt Limits with an External Keyboard
A report says you can bypass the iPhone’s passcode attempt limit by connecting the device to a computer and sending the passcodes from there instead of the device’s on-screen keyboard, but it’s wrong.
How to Enable and Disable iPhone and iPad USB Restricted Mode
iOS 11.4.1 for the iPhone, iPad, and iPod touch has a new security feature called USB Restricted Mode designed to keep hackers out of your iOS device. Here’s how to find the setting and, if you need to, change it.
WWDC 2018 Passwords, iOS and macOS Betas, Shortcuts and Workflow - TMO Daily Observations 2018-06-05
Kelly Guimont and Dave Hamilton join Jeff Gamet at Apple’s 2018 Worldwide Developer Conference to look at iOS 12 and macOS Mojave 10.14 password management, device compatibility, and also Shortcuts and Workflow.
How Passwords on iOS 12 Are Treated Differently
Passwords on iOS 12 are receiving some enhancements. This includes iOS’s built-in password manager, and third-party password managers.
Here's All of the macOS Mojave Privacy Features Coming
Apple is bringing a bunch of new privacy and security features to macOS, especially in Safari.
So How Secure is Messages in iCloud Anyway?
Apple just updated its iCloud security overview page to give us an idea of messages security.
The “Man Looking Over Your Shoulder” Attack – Mac Geek Gab 711
Ever send mail to the wrong address accidentally? Ever want to ask your Mac its serial number? Notifications ever get in your way? All those questions are answered in the just the first segment of the show. Listen for more about syncing your Photos without iCloud Photo Library, managing your calendars, and much more! Press play and learn at least five new things along with your two favorite geeks!
1Password 7 Launches Today, and Here's How to Download It
Here are the new features available as well as instructions on upgrading.
Intels Warns of Spectre Variant 4 Chip Vulnerability
Intel has a new report out describing what the chip maker is calling a Spectre-like vulnerability dubbed Variant 4 that exploits the CPU’s speculative execution mechanism so hackers can potentially get at sensitive information on your computer.
iPhone Addiction, TeenSafe's Apple ID Login Leak - TMO Daily Observations 2018-05-21
Andrew Orr and John Martellaro join Jeff Gamet to discuss who should be responsible for controlling iPhone and other electronic device addiction, plus they have something to say about TeenSafe’s Apple ID user name and password leak.
TeenSafe Leaks 10,000 Kid's Apple IDs and Passwords
TeenSafe let 10,200 Apple ID user names and passwords leak all in plain text, and the service requires two-factor authentication be disabled.
Apple's Helpful Video on Using 2FA for Apple Devices
Check out this Apple video on using 2FA to secure your Apple devices. I won’t pass up an opportunity to promote device and service security. For instance—and while I’m here—DON’T REUSE PASSWORDS! So, anyway, Apple has this short (only 6 seconds) how-to video that gives you the quick run-down on using 2FA to protect your Apple ID. Really, it’s a pointer to a more in-depth piece on using 2FA, and that article has a lot of good information. TMO has some great articles on 2FA, too, and too, and too, and too. Many of our readers already know this stuff, but we all have friends and family who don’t. Pass it to them. Post a link in social media. Help the people who count on you for tech stuff learn more about protecting their digital #^%$!
Keep your personal information secure, even in your sleep. With two-factor authentication, you can protect your Apple ID with more than just a password.
Here’s how it works: https://t.co/d9RtMwoV1L pic.twitter.com/aXV5g6RjGL
— Apple Support (@AppleSupport) May 14, 2018
The Microsoft and Apple Team Up Debate, Efail Explained - TMO Daily Observations 2018-05-14
Andrew Orr and John Martellaro join Jeff Gamet to talk about the possibility of Microsoft and Apple forming a business partnership, plus they explain the Efail email encryption security flaw.
How to Protect Yourself from the Efail Encrypted Email Security Flaw
If you’re using S/MIME, PGP, or GPG encryption for messages in Apple’s Mail app or other email client apps, you could be susceptible to what’s being called Efail. You can protect your messages until app updates addressing the flaw are released, and it’s easy to do.
This Simple Back Door Hack for Your Mac is Exactly Why FileVault Should be Enabled
There’s a stunningly simple way to create a back door into your Mac using just the tools included with macOS, but all it takes to defeat the threat is FileVault.
How to Stop Your Mac from Showing Up on a Network
If you don’t want your Mac to advertise its existence on any network you join, then there’s a simple option you’ll turn off to prevent that. Depending on your settings, this could stop unauthorized guests from connecting to your computer—or it could just keep people from seeing what silly name you’ve given your Mac. Both outcomes are good!
PSA: Serious 7Zip Security Vulnerability Found, What You Can Do
Mac users aren’t affected because 7Zip is only available for Windows.
Twitter's Plain Text Password List, MacBook Pro Recall Petition - TMO Daily Observations 2018-05-04
Bryan Chaffin and John Martellaro join Jeff Gamet to talk about Twitter’s plain text password list, and a petition to recall and replace the Touch Bar MacBook Pro’s built-in keyboard.
PSA: Twitter Recommends Password Reset after Discovering Internal Bug
That “bug” essentially stored passwords unmasked—which is utterly awful—though the company said there was no known breach of this info.