Google explores texting from your browser

Google’s Android Messages app could soon get a dramatic makeover with some interesting new features, judging by an APK teardown by XDA Developers and Android Police . Most significantly, it looks like you’ll be able to pair your phone with a computer and text directly from a browser like Chrome, Firefox and Safari, much as you can with Google’s Allo messaging app. Unlike Allo, however, Android Messages could allow you to send mobile SMSes rather than web messages, making texting a fair amount easier. To use it, you may have to scan a QR code on your PC or Mac, then pair your device each time you want to text. The feature appears to be partially implemented in the latest Android Messages 2.9 APK , but you can’t yet send an actual text. The APK also hints at the ability to send and receive payments, likely via Google Pay , potentially opening that service up to many more users. There are also signs that something called Google Enhanced Messaging, probably similar Smart Replies for Gmail, Allo and Inbox, is coming to Android Messages. All told, Google appears to be transforming Android Messages into an Allo-like app, except for mobile SMS texts instead of web-based ones. It could also be monetizing it to a degree via Google Pay. Considering the power it yields over the Android smartphone ecosystem, that could amount to a lot of dollars. Take all the changes with some salt, though, because APKs don’t necessarily mean features are set in stone, and some of the aforementioned features are still half-baked. Source: XDA Developers , Android Police

See the original article here:
Google explores texting from your browser

Keylogger Found On Nearly 5,500 WordPress Sites

An anonymous reader writes: Nearly 5, 500 WordPress sites are infected with a malicious script that logs keystrokes and sometimes loads an in-browser cryptocurrency miner. The malicious script is being loaded from the “cloudflare.solutions” domain, which is not affiliated with Cloudflare in any way, and logs anything that users type inside form fields as soon as the user switches away from an input field. The script is included on both the sites’ frontends and backends, meaning it can steal both admin account credentials and credit card data from WP sites running e-commerce stores. According to site source code search engine PublicWWW, there are 5, 496 sites running this keylogger. The attacker has been active since April. Read more of this story at Slashdot.

More here:
Keylogger Found On Nearly 5,500 WordPress Sites

Yesterday Americans Spent $5 Billion Online

An anonymous reader quotes CNN Money: Black Friday 2017 was all about digital sales. American shoppers spent a record $5 billion in 24 hours. That marks a 16.9% increase in dollars spent online compared with Black Friday 2016, according to data from Adobe Digital Insights, which tracks 80% of online spending at America’s 100 largest retail websites… Meanwhile, malls and big-box retailers were left only slightly emptier. Early estimates from ShopperTrak, a data analytics company that measures the number of shoppers at stores, said foot traffic “decreased less than one percent when compared to Black Friday 2016.” Read more of this story at Slashdot.

Read more here:
Yesterday Americans Spent $5 Billion Online

Firefox’s major Quantum upgrade now rolling out to everyone

Firefox is fast now. (credit: Mozilla) Mozilla is working on a major overhaul of its Firefox browser, and with the general release of Firefox 57 today, has reached a major milestone. The version of the browser coming out today has a sleek new interface and, under the hood, major performance enhancements, with Mozilla claiming that it’s as much as twice as fast as it was a year ago. Not only should it be faster to load and render pages, but its user interface should remain quick and responsive even under heavy load with hundreds of tabs. Collectively, the performance work being done to modernize Firefox is called Project Quantum . We took a closer look at Quantum back when Firefox 57 hit the developer channel in September , but the short version is, Mozilla is rebuilding core parts of the browser, such as how it handles CSS stylesheets, how it draws pages on screen, and how it uses the GPU. This work is being motivated by a few things. First, the Web has changed since many parts of Firefox were initially designed and developed; pages are more dynamic in structure, and applications are richer and more graphically intensive, JavaScript is more complex and difficult to debug. Second, computers now have many cores and simultaneous threads, giving them much greater scope to work in parallel. And security remains a pressing concern, prompting the use of new techniques to protect against exploitation. Some of the rebuilt portions are even using Mozilla’s new Rust programming language, which is designed to offer improved security compared to C++. Read 1 remaining paragraphs | Comments

View original post here:
Firefox’s major Quantum upgrade now rolling out to everyone

TorMoil Vulnerability Leaks Real IP Address From Tor Browser Users; Security Update Released

Catalin Cimpanu, reporting for BleepingComputer: The Tor Project has released a security update for the Tor Browser on Mac and Linux to fix a vulnerability that leaks users’ real IP addresses. The vulnerability was spotted by Filippo Cavallarin, CEO of We Are Segment, an Italian company specialized in cyber-security and ethical hacking. Cavallarin privately reported the issue — which he codenamed TorMoil — to the Tor Project last week. Tor Project developers worked with the Firefox team (Tor Browser is based on the Firefox browser) to release a fix. Today, the Tor team released version 7.0.9 to address the vulnerability. Tor Browser 7.0.9 is only available for Mac and Linux users. Tor Browser on Windows is not affected. Read more of this story at Slashdot.

Visit link:
TorMoil Vulnerability Leaks Real IP Address From Tor Browser Users; Security Update Released

MacOS High Sierra is well worth the upgrade

MacOS High Sierra was never meant to be truly transformative. As we covered in our preview of Apple’s new desktop OS , it’s mostly focused on refining its predecessor, last year’s Sierra . At the same time, it also lays the groundwork for bigger changes down the line. Since there’s not much you’ll actually notice, and barely anything has changed since we published our extensive preview, we won’t be doing a full review of the new OS. But with High Sierra officially launching today , it’s worth highlighting the handful of notable features. A better Safari Apple claims that Safari 11 in High Sierra is the world’s fastest web browser. My testing with the JetStream benchmark confirmed that it was faster than both Chrome and Firefox on my MacBook Air. Safari clocked in with a score of 176.8, while the other two browsers came in around 129 (and yes, higher is better). Even so, I still found myself relying on the other browsers most of the time. Some of Google’s services, like Hangouts, only work on Chrome. And Firefox is typically the browser I use for dealing with anything related to work (it’s helpful having two browsers open at once for managing multiple Google accounts). While Safari tended to load some sites faster, that wasn’t enough to make me switch over. As for other tweaks, Safari 11 mutes auto-playing web videos by default, which should help bring some peace as more sites push unwanted video on their readers. You can also enable the cleaner “Reader” mode automatically for specific sites, or have it automatically turn on for every website that supports the feature. That’s something you can only do with Chrome through settings hacks, or by installing third-party extensions. Apple also claims Safari will let you browse the web for two hours longer than the other two browsers, as well as watch Netflix for four hours longer. Photos upgrades As we covered in our preview piece, the Photos app got a slew of tweaks. But after testing the OS for the past few months, I ended up appreciating the new Live Photos capabilities the most. Just like in iOS 11, you can now turn Live Photos into short animated clips that resemble GIFs. You can choose from Loop, which just repeats the clip; Bounce, which moves it back and forth in time; and Long Exposure, a unique effect that mimics the dreamy photos you can get by manipulating exposure settings on bigger cameras. They’re not groundbreaking effects, but they finally make Live Photos seem useful, rather than a waste of space. All of other Photos upgrades from iOS 11 also show up in High Sierra. That includes smarter people recognition (which can sync across all of your iCloud-connected devices), more automatic Memories options, and a wider assortment of photo filters. Another helpful upgrade: Third-party companies can now create extensions for Photos, which allows you to do things like prepare photo books without leaving the app. VR support Thanks to Metal 2, Apple’s updated graphics API, MacOS can finally handle virtual reality. Right now, it’s limited to the HTC Vive using SteamVR — sorry, Oculus Rift fans. And, just like with typical games, not every title supports Macs yet. Sure, it’s very much early days for VR on Macs, but at least it’s possible now with High Sierra. We didn’t have any beefy Macs to test out the OS’s VR capabilities, unfortunately. As we’ve noted before, figuring out which Macs can actually support VR is surprisingly confusing. But at least High Sierra also brings support for external GPU docks, which means you can conceivably upgrade any Thunderbolt-equipped Mac with faster graphics capabilities. Metal 2 should also make High Sierra more efficient at rendering windows and typical UI elements, especially if you have a decent dedicated GPU. I didn’t notice much of a difference on my 2014 MacBook Air as I tested the new OS over the past few months. Wrapping up A few other points worth noting: Apple made a big deal about its upgraded Apple File System when it first announced High Sierra, but I didn’t notice much of a difference as I was testing the OS. Surprisingly, the company also dropped support for APFS on hybrid Fusion drives — at this point it only works on SSDs. Siri brings over its improved voice and DJ abilities that we first saw in iOS 11. You can now check on your airline flight status right from the Spotlight search bar. We always knew High Sierra was going to be an iterative update for Apple, but I’m surprised by how few visible changes there are. It’s tough to tell you’ve even upgraded from Sierra unless you peek at your system’s settings. Together with a similarly humdrum iOS 11 update (unless you’re on an iPad), it seems like Apple was more focused on its new hardware this year than its software.

Read more here:
MacOS High Sierra is well worth the upgrade

Popular Chrome Extension Embedded A CPU-Draining Cryptocurrency Miner

An anonymous reader writes: SafeBrowse, a Chrome extension with more than 140, 000 users, contains an embedded JavaScript library in the extension’s code that mines for the Monero cryptocurrency using users’ computers and without getting their consent. The additional code drives CPU usage through the roof, making users’ computers sluggish and hard to use. Looking at the SafeBrowse extension’s source code, anyone can easily spot the embedded Coinhive JavaScript Miner, an in-browser implementation of the CryptoNight mining algorithm used by CryptoNote-based currencies, such as Monero, Dashcoin, DarkNetCoin, and others. This is the same technology that The Pirate Bay experimented with as an alternative to showing ads on its site. The extension’s author claims he was “hacked” and the code added without his knowledge. Read more of this story at Slashdot.

View original post here:
Popular Chrome Extension Embedded A CPU-Draining Cryptocurrency Miner

Tor Browser 7.0 works harder to protect your anonymity on its own

The latest update for privacy-minded folks’ favorite way to surf the web should make others’ attempts at tracking what they do even more difficult. The Tor browser’s 7. 0 version introduces a sandbox feature that, according to an interview on the Tor blog , should “make life a lot harder” for people using a Firefox exploit to discern the identities of a user. “It’s like Plato’s Allegory of the Cave, ” Tor developer Yawning Angel said. “The only reality Tor Browser knows is inside of the sandbox (cave). We prevent it from interacting with the rest of your computer (the outside world), except via the Tor Network (shadows on the wall).” The college philosophy class you barely remember aside, what the sandbox does is hides your files, your real IP address and your MAC address from the browser. Therefore, “the amount of information Tor Browser will learn about your computer, and thereby you, will be limited, ” Angel said. At the time of that interview last October, the sandbox was still unstable and very much in testing, but the recent update has brought the digital safe-zone online for Linux and macOS, and by default. Next up? Sandbox protection for Windows users. The update also imposes a few new requirements for users on Windows and macOS: Tor apparently won’t work on non-SSE2-capable Windows hardware and you need to be running OSX 10.9 or higher on Apple machines. Considering that last year a federal judge said that the FBI no longer needs warrants to hack a computer connected to the internet, this is an important update. “Even an internet user who employs the Tor network in an attempt to mask his or her IP address lacks a reasonable expectation of privacy in his or her IP address, ” judge Henry Coke Morgan, Jr commented at the time. For the full rundown of what’s changed with the browser, hit the source links below. Source: Tor (1) , (2)

Read More:
Tor Browser 7.0 works harder to protect your anonymity on its own

Microsoft Finally Bans SHA-1 Certificates In Its Browsers

An anonymous reader quotes ZDNet: With this week’s monthly Patch Tuesday, Microsoft has also rolled out a new policy for Edge and Internet Explorer that prevents sites that use a SHA-1-signed HTTPS certificate from loading. The move brings Microsoft’s browsers in line with Chrome, which dropped support for the SHA-1 cryptographic hash function in January’s stable release of Chrome 56, and Firefox’s February cut-off… Apple dropped support for SHA-1 in March with macOS Sierra 10.12.4 and iOS 10.3… Once Tuesday’s updates are installed, Microsoft’s browsers will no longer load sites with SHA-1 signed certificates and will display an error warning highlighting a security problem with the site’s certificate. Read more of this story at Slashdot.

View the original here:
Microsoft Finally Bans SHA-1 Certificates In Its Browsers

Microsoft Finally Bans SHA-1 Certificates In Its Browsers

An anonymous reader quotes ZDNet: With this week’s monthly Patch Tuesday, Microsoft has also rolled out a new policy for Edge and Internet Explorer that prevents sites that use a SHA-1-signed HTTPS certificate from loading. The move brings Microsoft’s browsers in line with Chrome, which dropped support for the SHA-1 cryptographic hash function in January’s stable release of Chrome 56, and Firefox’s February cut-off… Apple dropped support for SHA-1 in March with macOS Sierra 10.12.4 and iOS 10.3… Once Tuesday’s updates are installed, Microsoft’s browsers will no longer load sites with SHA-1 signed certificates and will display an error warning highlighting a security problem with the site’s certificate. Read more of this story at Slashdot.

Read More:
Microsoft Finally Bans SHA-1 Certificates In Its Browsers