Connect with us

Tech News

Apple mistakenly approved malware masquerading as Adobe Flash

Published

on

Once the darling of the Internet, Adobe, formerly Macromedia, Flash has long fallen from grace and even banned in many corners of the Web for its security vulnerabilities. That, however, hasn’t really stopped some users from trying to install it, for one reason or another, nor does it stop malware writers from taking advantage of that. Unfortunately for Apple, the latter group was able to pull a fast one and it unknowingly notarized malware disguised as an Adobe Flash installer not once but twice.

Notarization is Apple’s relatively new system for macOS to ensure that even third-party apps downloaded outside of the Mac App Store are secure and safe to run. It practically requires developers to submit their apps for a less strict security review before the macOS Gatekeeper system can allow it to run. Unfortunately, given the less rigorous security check, it seems that it’s possible the get some malware-laden code approved right from under Apple’s nose.

That was the situation that security researchers Peter Dantini and Patrick Wardle brought to Apple’s and the public’s attention. An Adobe Flash installer carrying the popular Shlayer malware was apparently approved by Apple’s notarization process, potentially infecting unwitting Mac users since 2019. Apple did acknowledge the lapse and revoked the app’s certification but, unfortunately, that was not the end of it.

The authors of this malicious Flash installer was able to return to the App Store, again with a malware payload, and, again, notarized by Apple. The app has once again been removed but, considering how these apps are using popular malware strains, it’s surprising it got past Apple twice.

To its credit, Apple was quick to make fixes but only after the matter has been brought to its attention. Lapses like there aren’t exactly uncommon, especially if you look at the Google Play Store, but it does tarnish the reputation of Apple’s new notarization system. Then again, Apple could spin it as proof of why users and developers should only use the Mac App Store anyway.

Continue Reading

Tech News

Jeep’s Wild Wrangler Magneto 3.0 Concept EV Is Going Out With A Bang

Published

on

To go with that, Jeep has added Dynatrac 60 front axles (5.38:1 ratio) and Dynatrac 80 rear axles (5.38:1 ratio), along with 20-inch off-road beadlock wheels and 40-inch mud terrain tires. The whole thing is lifted by three inches compared to a standard Wrangler. The result, the automaker says, is an EV that excels in off-road situations, not least because of how controllable the power delivery is.

“When you’re rock crawling, you need to be very neat and clean with your driving,” Mike Allen, Jeep Design Chief, says, “especially if there’s a cliff next to you, you need to be very controlled with that.”

To help, Jeep has added a power selection switch. On the one hand, you can have the maximum 650 horsepower and 900 lb-ft of torque; alternatively, the standard setting tamps it down to a more conservative 285 horsepower and 273 lb-ft. Allen says the range is around 150 miles, though that — nor charging times —was never meant to be the Magneto concept’s focus.

Continue Reading

Tech News

The Best Mods & Upgrades That Can Give New Life To A C4 Corvette

Published

on

Replacing your restrictive and likely corroded factory exhaust with a new cat-back exhaust is one of the best power adders that you can do to your C4 Corvette. The term “cat-back” refers to the section of the system that is downstream of the catalytic converter, a device that removes harmful emissions from exhaust gases.

An aftermarket exhaust with modern muffler technology will reduce backpressure, allowing more air to flow into the engine, which increases horsepower. According to the popular aftermarket exhaust manufacturer Corsa, a cat-back system for the L98 engine (the most common C4 engine) adds 14 horsepower and 16 foot-pounds of torque to an otherwise stock powerplant — all while adding a deep, muscular exhaust note that’ll make your C4 sound like a Corvette should.

Returning to catalytic converters for a moment, they’re typically long-lasting but may eventually fail by becoming contaminated, clogged, or overheated, leading to decreased horsepower. In the process of installing a cat-back exhaust, it’s worth inspecting or proactively replacing the catalytic converter itself. High-flow performance converters are available which will boost horsepower beyond the cat-back exhaust alone, yet still keep your vehicle compliant with the emissions guidelines of the EPA and local authorities.

Continue Reading

Tech News

6 Easy Ways To Unlock Your Android Phone Without A Password

Published

on

For years, fingerprints have been the de-facto phone unlock method because of the method’s incredible convenience and relative security. While a bad actor can, in theory, replicate your fingerprint, and while some Android phones have had fingerprint reader bugs, the majority of the time it’s secure enough to trust while allowing you to access your device in less than a second.

Many modern Android phones utilize an under-display fingerprint sensor that uses either an optical light sensor or ultrasonics to analyze registered fingerprints, while others place a trusty capacitive sensor on the back of the phone or the power button.

Importantly, optical sensors are the easiest of the three to fool in the event someone gets access to your fingerprint. Law enforcement can be especially aggressive should they invent a reason to search your device, having once tried to use a dead man’s finger to do so. However, Android stores fingerprint data in a Trusted Execution Environment, an encrypted section of the phone’s memory that cannot be accessed by the main CPU or by apps.

Setting your fingerprints up can be a bit of a hassle, as some Android phones can be finicky. It may be a good idea to register the same fingerprint twice if you find that your phone’s fingerprint sensor has a hard time recognizing your preferred digit.

Continue Reading

Trending