Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Submission + - Over 100 Wi-Fi routers fail major security test — protect yourself now (tomsguide.com)

schwit1 writes: Using its own analytical software, the institute tested the most recently available firmware for 117 home Wi-Fi models currently sold in Europe, including routers from ASUS, D-Link, Linksys, Netgear, TP-Link, Zyxel and the small German brand AVM. The models themselves were not physically tested.

Almost all home Wi-Fi routers tested in a mass study by Germany's renowned Fraunhofer Institute had serious security vulnerabilities that could easily be fixed by router makers, a recently released report states.

"Nearly all were found to have security flaws, some of them very severe," the Fraunhofer Institute said in a press release. "The problems range from missing security updates to easily decrypted, hard-coded passwords and known vulnerabilities that should have been patched long ago."

Submission + - Mozilla suspends Firefox Send service while it addresses malware abuse (zdnet.com)

An anonymous reader writes: Mozilla has temporarily suspended the Firefox Send file-sharing service as the organization investigates reports of abuse from malware operators and while it adds a "Report abuse" button. The browser maker took down the service today after ZDNet reached out to inquire about Firefox Send's increasing prevalence in current malware operations.

Since last year, several malware operations have hosted payloads on the service. This includes ransomware gangs like REvil/Sodinokibi, financial crime crews like FIN7, the Zloader and Ursnif banking trojans operations, and government surveillance groups targeting human rights defenders. Reasons include the fact that Firefox Send doesn't have an Report Abuse mechanism, all file uploads are encrypted (useful to dodge malware scanners), and the Firefox URL is whitelisted in most orgs (useful for bypassing email filters).

Submission + - DuckDuckGo collecting user browsing data without consent (hackread.com)

AmiMoJo writes: An ethical hacker on Twitter going by the online handle of @Cowreth has revealed that DuckDuckGo is also tracking/collecting the names of the websites that a user visits violating its strong privacy policy. The DuckDuckGo Android Browser app is supposed to protect the user's privacy, but due to the use of a proxy server for website favicons was sending details of every domain visited to the company.

DuckDuckGo denied storing the data and has since updated the source code (the browser is open source) to retrieve favicons directly.

Slashdot Top Deals

What the scientists have in their briefcases is terrifying. -- Nikita Khruschev

Working...