Work No. 26
Oil on canvas (36”x48”)
August 24th, 2014 11:09am
Work No. 26
Oil on canvas (36”x48”)
August 24th, 2014 11:09am
1980s Workplace Computer Precautions
August 23rd, 2014 9:30pm
August 22nd, 2014 5:53pm
August 21st, 2014 10:42pm
These bottles of ginger ale were the exact same size when fermentation started Sunday. on Flickr.
August 21st, 2014 8:13pm
Evernote checks for update over unencrypted HTTP, and the update packages are also downloaded over HTTP. But it’s signed code, right? What could go wrong?
It’s trivially easy to perform a man-in-the-middle attack to prevent future updates from ever being received, or to redirect the user to unsigned or malicious code, that may or may not run.
There is a DSA signature on the file at the update URL, and there’s signatures on the files and a certificate OU deep within the app contents… but that all assumes the user can get to the update, and download it securely.
Good news for persistent threats, bad news for the millions of Evernote users who want to get critical security updates.
This looks easy enough to fix.
(Submitted by Phillip Knoll)
August 19th, 2014 8:38am
View my 2 latest photos on Flickr: https://flic.kr/u/2mJ1Jd/aHsk1m48N3
Explore July 5, 2026Flickr (opens in a new tab)August 16th, 2014 6:13pm
~ brew install smoked porter on Flickr.
August 16th, 2014 6:12pm
August 15th, 2014 10:34pm
That’s how I feel about this week.
TGIF
August 15th, 2014 6:17pm