Apple Says No Topics coming to Android Apple security research browser extension vulnerabilities

############################# Video Source: www.youtube.com/watch?v=nZUO49jbTIY

• Steve provides an update on ValiDrive, his new freeware utility for testing USB drives. It identifies bogus mass storage drives and performance differences between drives. • • There has been another sighting of Google's Topics API, this time on Android phones. It allows apps to get information about users' interests based on recent app usage. • • Apple has opened up their iPhones to security researchers through their Security Research Device program since 2019. Researchers get access to customize kernels, entitlements, and other low-level features without compromising security. • • Research reveals vulnerabilities in browser extensions that allow them to steal plaintext passwords from a website's HTML source code. Even sites like Google, Facebook, Amazon, IRS, and Capital One are affected. • • Feedback from listeners on topics like Apple's stance on scanning iCloud data for CSAM, Microsoft's broken TLS timestamp implementation, using VirusTotal to check downloaded files, ReadSpeed limitations, and downloading malware for VirusTotal checks. • • Apple publicly shares a letter from a CSAM activist demanding they implement scanning to detect child abuse images in iCloud Photos. Apple responds clearly stating they will not compromise user privacy and security to do so. • Show Notes - https://www.grc.com/sn/SN-938-Notes.pdf • Hosts: Steve Gibson and Leo Laporte • Security Now episode 938 • More Info: https://twit.tv/shows/security-now/ep... • Sponsors: • • drata.com/twit • • panoptica.app • • canary.tools/twit - use code: TWIT • Download or subscribe to this show at https://twit.tv/shows/security-now • Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit • You can submit a question to Security Now at the GRC Feedback Page. • For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: https://grc.com/ also the home of the best disk maintenance and recovery utility ever written Spinrite 6. • Products we recommend: https://www.amazon.com/shop/twitnetca... • TWiT may earn commissions on certain products. • Join our TWiT Community on Discourse: https://www.twit.community/ • Follow us: • https://twit.tv/ • / twit • / twitnetwork • / twit.tv • About us: • TWiT.tv is a technology podcasting network located in the San Francisco Bay Area with the #1 ranked technology podcast This Week in Tech hosted by Leo Laporte. Every week we produce over 30 hours of content on a variety of programs including Tech News Weekly, MacBreak Weekly, This Week in Google, Windows Weekly, Security Now, All About Android, and more.

#############################

New on site