News: iOS 11.3.1 Finally Fixed the QR Code-Scanning Vulnerability in Your iPhone's Camera App
One downside to iOS 11's awesome built-in QR code scanner in the Camera app is its only been live for a short while. In its short life, there has already been a security vulnerability discovered that was an issue for at least the last 4.5 months, but Apple has finally patched this weakness with its iOS 11.3.1 update.Ever since at least iOS 11.2.1, if you were to scan a malicious QR code, the popup that shows up in the Camera app could display the URL for what you think you're about to open in Safari when it really would take you to a different domain altogether, which could possibly be a phishing domain meant to look like the domain it said it was sending you to.Don't Miss: iOS 11.3.1 Released with Display Repair Patch & Security Fixes Images by Justin Meyers/Gadget Hacks Phishing sounds scary enough to stop you from using the Camera app for QR codes or at least use a third-party QR code scanner instead, but now you don't have to. Apple quietly fixed this problem with the iOS 11.3.1 update on Tuesday, April 24, with little fanfare. In fact, Roman Mueller, the security consultant who first discovered the issue, also discovered that the fix went live, writing on his Twitter:Yep, iOS 11.3.1 fixed the QR parser bug I reported (CVE-2018-4187). Two interesting things: @wester is also credited for it - bug collision? Would be curious [sic] to know when he reported it. And macOS 10.13.4 also gets a fix for it, wasn't even aware of it being a problem there.And with this my Twitter handle is now posted at an official Apple security advisory page: support.apple.com/en-us/HT208743Weird.
รข€” @faker_/TwitterIf you dive into the 11.3.1 security content log, you might not think Apple implemented the fix. However, look under "LinkPresentation," and you can see what Mueller is talking about here:Impact: Processing a maliciously crafted text message may lead to UI spoofingDescription: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.CVE-2018-4187: Zhiyang Zeng (@Wester) of Tencent Security Platform Department, Roman Mueller (@faker_)Regardless of who ultimately alerted Apple to the QR code-scanner vulnerability, the company has now taken the steps to patch it in not only iOS 11.3.1 but also the first and second beta versions for iOS 11.4. While iOS 11.3.1 released at the time of this article, the first 11.4 beta went live April 2.If you want to use your iPhone's built-in scanner now that the security problems are done with, make sure to check out our iOS 11 Camera guide to learn how it's done.Don't Miss: The 7 Best New Camera Features in iOS 11 for iPhoneFollow Gadget Hacks on Facebook, Twitter, YouTube, and Flipboard Follow WonderHowTo on Facebook, Twitter, Pinterest, and Flipboard
Cover image by Jake Peterson/Gadget Hacks
Since it started four years ago, Amazon Prime Day has become one of Amazon's biggest days of the year. DealNews will do the hard work for you, sorting through the hundreds of offers during this 36-hour-event, to bring you only the best Amazon Prime Day deals of 2019.
Here Are The Best Amazon Prime Day Smartphone Deals | Digital
Make specific files available offline. If you have enough storage, some of your most recent files will be automatically saved offline. To manually select files to save offline: Follow the steps above to turn on offline access in Google Drive. Open the Google Docs, Sheets, or Slides home screen. On the file you want to use offline, click More .
3 Ways to Access Google Drive Offline - wikiHow
Build A Powerful Hand Pump From Scratch With PVC Pipe. How to Make a PVC Hand Pump to Move Water, Compress Air, & Create Vacuum How to Make a PVC Hand Pump to Move Water, Compress Air,
Hand-Powered water pump. « PVC Innovation :: WonderHowTo
How to : Change the LED Color on an Optical Mouse.: Here's my entry to the L.E.D. contest The best thing with this hack is that it works!
How To Change LED Color of a Mouse - YouTube
The cutout, which was the dimensions of the Razer Phone, would limit the size of the Razer Phone 2, since, for this project to work, it would need to support both models. And since Razer did just that, it appears Razer might actually bring this laptop to fruition.
10 Razer Phone Features & Settings You Need to Know About
News: Apple Releases 'Second' iOS 12.4 Public Beta for iPhone to Software Testers. gadgethacks.com - Jake Peterson. Public beta testers, you're in luck. Apple just released the second iOS 12.4 public beta today, May 20. The update comes five days after the release …
Samsung Updates AR Emoji with Better Tracking & Facial
I'm afraid that you cannot view your past Instagram comments. From past three years, nothing changed here, and probably nothing will. In 2017, there is no such feature in the native Instagram app.
Have you tried using the Alarm clock on Samsung Galaxy S9 or Galaxy S9 Plus smartphone yet? In few steps, you can gain expertise on using this app to wake up on time and keep alerts for important events in your life.
How to Use Your Samsung Galaxy Tablet's Alarm Clock
Installing TWRP Recovery is not an official procedure, so be prepared to lose the warranty of your OnePlus One, as well as any warranty. You don't need us to tell you that this is not at all a good thing, so before starting the procedure you should see your device's warranty statement for details.
How to Install TWRP - xda-developers
First day with my Keyone. I find that this virtual keyboard is not a smart as the one on the Passport. The Passport knew when I was going to need symbols (like the @ for an email address) and numbers and automatically popped up the virtual keyboard for me. With K1, I have to hit the symbol key and then switch it for numbers. Am I missing something?
Blackberry KeyONE Teardown - and GIVEAWAY!! - YouTube
The shut-down button combo is similar to how you would force-restart older iPhone models, so how do you hard reboot the iPhone X S, X S Max, or X R? Well, it's the same process as on the iPhone X . Quickly press and release the Volume Up button, then do the same for the Volume Down button.
How to Force Reboot iPhone XS Max, XS or XR - unlockboot.com
I've changed the default program for a file opening directly off the PC, but this isn't working for the downloads. This is driving my partner crazy. If I'm home I'll save the file, then find it and open it with Word, but it's really ridiculous to have to go through this rigamarole, and it's becoming a frequent source of conflict. Help!
How to Change Font Size on iPhone, iPad or iPod Touch, Phones are getting smaller while people are getting older. So it makes sense to know what to do..
How to Change font of your iPhone, iPad or iPod touch with
0 comments:
Post a Comment