This New iOS Security Flaw Lets Malicious Apps Track Your Every Activity in the Background
Feb 26, 2014 00:34
After Apple patched a security flaw in iOS, another just popped up. According to network security company FireEye, this bug is in the latest version of iOS and it can let malicious apps see all your keystrokes.
The security company was able to push a proof-of-concept app through the App Store and used iOS 7's multitasking capabilities to snoop in all your activity in the background. They say:
We have created a proof-of-concept "monitoring" app on non-jailbroken iOS 7.0.x devices. This "monitoring" app can record all the user touch/press events in the background, including touches on the screen, home button press, volume button press and TouchID press, and then this app can send all user events to any remote server, as shown in Fig.1. Potential attackers can use such information to reconstruct every character the victim inputs.
Note that the demo exploits the latest 7.0.4 version of iOS system on a non-jailbroken iPhone 5s device successfully. We have verified that the same vulnerability also exists in iOS versions 7.0.5, 7.0.6 and 6.1.x. Based on the findings, potential attackers can either use phishing to mislead the victim to install a malicious/vulnerable app or exploit another remote vulnerability of some app, and then conduct background monitoring.
The issue will only come about if you've downloaded something shady. The only way to be sure something isn't watching you in the background is to open the multi-tasking menu with a double tap and swipe away everything you don't trust.
Either that, or don't download apps that are weird sounding or ones that look suspicious - however they may be.
Only a small number of online casinos are creating their own games. Most of them are using software developers and providers that are focused on casino games. The popularity of online gambling has led to an expansion of this industry. This means that there are many casino software developers today, but not all of them are equal. Read more
Verifying emails in bulk means verifying many emails at once. If you have a large database, this service will be of great benefit to your business, because it will help you reach all the people who subscribed to your emails. As your deliverability improves, your marketing campaigns will perform better and, eventually, you will notice more sales. Read more
You might be starting a business in this time and age when you have a variety of options for your various installations. Everything seems to have an option and to take a server as an example, you will have two main options to go with. They are in-house and cloud servers or storage. Read more