Security Leftovers
-
WannaCry? Hundreds of US schools still haven’t patched servers
But cities aren't the only highly vulnerable targets to be found by would-be attackers. There are hundreds of thousands of Internet-connected Windows systems in the United States that still appear to be vulnerable to an exploit of Microsoft Windows' Server Message Block version 1 (SMB v. 1) file sharing protocol, despite repeated public warnings to patch systems following the worldwide outbreak of the WannaCry cryptographic malware two years ago. And based on data from the Shodan search engine and other public sources, hundreds of them—if not thousands—are servers in use at US public school systems.
-
Google stored some passwords in plain text for fourteen years
In a blog post today, Google disclosed that it recently discovered a bug that caused some portion of G Suite users to have their passwords stored in plain text. The bug has been around since 2005, though Google says that it can’t find any evidence that anybody’s password was improperly accessed. It’s resetting any passwords that might be affected and letting G Suite administrators know about the issue.
G Suite is the corporate version of Gmail and Google’s other apps, and apparently the bug came about in this product because of a feature designed specifically for companies. Early on, it was possible for your company administrator for G Suite apps to set user passwords manually — say, before a new employee came on board — and if they did, the admin console would store those passwords in plain text instead of hashing them. Google has since removed that capability from administrators.
-
Notifying administrators about unhashed password storage
-
Google Disappoints Yet Again: Stored Some Passwords In Plain Text For 14 Years
G Suite users were taken aback yesterday when Google disclosed that it stored some passwords for Enterprise G Suite users in plain text for 14 years.
In a blog post, the search giant mentioned that the passwords were encrypted but not hashed, which means that Google employees had complete access to them. However, the company says that there is no evidence that passwords were illegally accessed by anyone or misused.
-
Stable Version Of Tor Browser For Android Now Available On Play Store
After eight months of testing, a stable release for the Tor browser has arrived on the Play Store. The new Android browser now brings Tor features directly into a standalone browser, replacing the Orbot/Orfox as the main way to connect to the Tor network via Android devices.
The stable version (v8.5) of Tor for Android routes your web traffic through the Tor network — a web of encrypted computers spread worldwide.
- Login or register to post comments
- Printer-friendly version
- 2393 reads
- PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is releasedAfter three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release. |
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future TechThe metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world. Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility. |
today's howtos
|
Recent comments
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago