msm1267 writes “Users of Apple’s Safari browser are at risk for information loss because of a feature common to most browsers that restores previous sessions. The problem with Safari is that it stores session information including authentication credentials used in previous HTTPS sessions in a plaintext XML file called a Property list, or plist, file. The plist files, a researcher with Kaspersky Lab’s Global Research and Analysis Team said, are stored in a hidden folder, but hiding them in plain sight isn’t much of a hurdle for a determined attacker. ‘The complete authorized session on the site is saved in the plist file in full view despite the use of https, ‘ said researcher Vyacheslav Zakorzhevsky on the Securelist blog. ‘The file itself is located in a hidden folder, but is available for anyone to read.'” Read more of this story at Slashdot.
More:
Safari Stores Previous Browsing Session Data Unencrypted
The first iPhone was a true breakthrough that shaped the multitouch-dominated world we live in. It took its clues from everyday objects to create a familiar experience that was instantly understood (and copied.) Years later it got stuck in those successful metaphors but, instead of working in another breakthrough, Apple just copied some bits from the companies who copied the iPhone. This video explains this story in a fair way. Read more…
Scientists at the Institute for Integrative Nanosciences in Dresden, Germany, have created “the first sperm-based biobots” —a cybernetic microorganism made of metal and a bull’s sperm cell that can be remote controlled and used to impregnate an egg or deliver a drug to a target anywhere inside your body. Read more…
Outlook.com’s latest move to win over Gmail users is an easy, one-step importer that copies over your Gmail messages with labels, read status and conversation structure intact. The feature is new today, with a gradual rollout to all Outlook users. [ Outlook Blog via Engadget ] Read more…