Samsung relaunches Galaxy S21 FE with Android 13 onboard

andreasc
-
0
Samsung relaunches Galaxy S21 FE with Android 13 onboard
[ad_1]

The heavily-rumored Galaxy S21 FE re-launch is official. Samsung is now selling the “new” Snapdragon 888 version of the phone in India, with Android 13 onboard. It’s unclear if the company plans to launch the device in other markets where it originally sold the Exynos 2100 version.

The Galaxy S21 FE debuted globally in January 2022. Samsung launched the phone in two processor variants — Snapdragon 888 and Exynos 2100. Buyers in India, Europe, and some other markets got the Exynos version, while the company sold the Snapdragon version in the US. This has been standard practice from the Korean firm for the past few years.

But, in a surprising turn of events, Samsung has re-launched the Galaxy S21 FE in India, bringing the Snapdragon version to the country. The device is now available through its official online store and retail channels with a price tag of ₹49,999 (roughly $605). That’s a bit too pricey for a phone powered by the Snapdragon 888 chipset. Other companies are selling phones with the Snapdragon 8 Gen 1 or the Snapdragon 8+ Gen 1 at lower prices.

The OnePlus 11R, for example, is powered by the Snapdragon 8+ Gen 1 and is priced at ₹39,999 (roughly $485). The Snapdragon-powered Galaxy S21 FE may find it tough to compete against these devices in India. Samsung, meanwhile, has stopped selling the Exynos version, which was once down to ₹32,999 (roughly $400), through its online store in the country. It may still be available in offline retail channels, though.

The “new” Galaxy S21 FE runs Android 13 out of the box

Samsung is shipping the Snapdragon version of the Galaxy S21 FE with Android 13 out of the box. The company hasn’t specified the Android version on its product listing page, but a customer support executive told us that the latest Android version will come onboard. This should mean the device will get updates up to Android 17. The support executive couldn’t confirm that, though.

The original Galaxy S21 FE debuted with Android 12 and will get updates un to Android 16. The only other notable change is 8GB of RAM and 256GB of storage coming standard. Samsung isn’t offering any other memory or storage configurations. The device is also getting a new Navy Blue color variant to go with the existing Graphite, Lavender, Olive, and White colors. Everything else remains unchanged.

For a quick recap, the Galaxy S21 FE features a 6.4-inch Full HD+ Super AMOLED display with a 120Hz refresh rate. It gets Corning Gorilla Glass Victus screen protection and comes with an IP68-rated body.

Samsung has included a flagship-grade 12MP primary rear camera with OIS (Optical Image Stabilization). It also has an 8MP zoom camera (3x optical zoom) and a 12MP ultrawide camera. The selfie camera is a 32MP sensor.

The Galaxy S21 FE packs a 4,500mAh battery with support for 25W fast wired charging and 15W wireless charging. It also supports reverse wireless charging. Other highlights include an under-display fingerprint scanner, stereo speakers, Samsung DeX support, Samsung Knox security, Bluetooth 5.0, Wi-Fi 6, and NFC. You can check out our Galaxy S21 FE review for its everyday performance.


[ad_2]
Source link

TikTok enters the music streaming market with ‘TikTok Music’

andreasc
-
0
TikTok enters the music streaming market with ‘TikTok Music’
[ad_1]

The music streaming market is mainly dominated by two American and Swedish giants, Apple Music and Spotify. Soon, these giants might have a new competitor from China, and that’s TikTok Music.

The Chinese video-sharing app is reportedly planning to launch a music streaming service to take on Apple and Spotify. TikTok has already shown it’s not afraid of competition and ready to take every risk to enter new business segments. The ByteDance-owned app hopes to turn a portion of its massive user base (1.67 billion users) into TikTok Music subscribers.

TikTok Music is a big blow to Apple and Spotify. The Chinese app will collaborate with major record labels, including Universal Music Group, Warner Music Group, and Sony Music, to enrich its portfolio. The service is currently available in Brazil is Indonesia, but it might expand to the US and Europe markets this year.

TikTok Music is here to battle Apple Music and Spotify

All music streaming services work similarly, and TikTok Music is no exception. You can listen to your favorite songs and then add them to your library for future listening. But TikTok Music has a feature that gives it a competitive advantage over Apple Music and Spotify.

The app features song recommendations and personalized curation to help users find trending songs on videos. Moreover, TikTok Music allows importing music libraries from other platforms, creating collaborative playlists, and finding a song by searching for lyrics. These features will make the app more appealing to TikTok’s young user base.

TikTok Music also comes with a song identification feature. This is similar to Apple’s Shazam. Another app feature is the ability to comment on songs and albums, aligning with the main app’s socialization purpose. Finally, TikTok Music will let users find song suggestions by scrolling vertically.

Brazilian and Indonesian customers currently use TikTok Music for $3.49 a month. An Apple Music subscription costs exactly the same amount in these countries.

TikTok already told TechCrunch that its goal is to combine “the power of music discovery on TikTok with a best-in-class streaming service.” The plans for US and EU release are yet to be determined by the company. The rising tensions in US-China relations and US lawmaker’s efforts to ban TikTok’s main app in the country over national security concerns might make the company think twice before expanding to the Western markets.


[ad_2]
Source link

Twitter CEO says platform is growing but web traffic data shows “Twitter traffic tanking”

andreasc
-
0
Twitter CEO says platform is growing but web traffic data shows “Twitter traffic tanking”
[ad_1]
According to TechCrunch, while Yaccarino has been trying to show her best “What, me worry?” look, at the beginning of this week Twitter users reported that links to Threads.net’s website were blocked in Twitter searches. As a result, Twitter users had a hard time finding certain conversations and user profiles on Threads. 

Meanwhile, in an attempt to convince advertisers that things are looking up at Twitter, Yaccarino sent out a tweet stating that traffic is growing. “Don’t want to leave you hanging by a thread… but Twitter, you really outdid yourselves! Last week we had our largest usage day since February. There’s only ONE Twitter. You know it. I know it,” Twitter’s CEO tweeted. The executive’s tweet contradicts a tweet from Cloudflare co-founder & CEO Matthew Prince that shows declining traffic for Twitter.

Twitter blocks some searches for tweets that link to Threads although Threads URLs can be posted for now - Twitter CEO says platform is growing but web traffic data shows "Twitter traffic tanking"

Twitter blocks some searches for tweets that link to Threads although Threads URLs can be posted for now

At the same time, web analytics and data company Similarweb said that web traffic for Twitter was down 5% during the first two days that Threads was available to the public. That decline was based on the web traffic generated by Twitter the previous week. On a year-over-year basis, during the first two days of Threads’ availability, Twitter’s web traffic had plunged 11%.

Despite Twitter CEO Yaccarino's bullish comments on the platform's traffic, data shows that Twitter's web traffic is dropping - Twitter CEO says platform is growing but web traffic data shows "Twitter traffic tanking"

Despite Twitter CEO Yaccarino’s bullish comments on the platform’s traffic, data shows that Twitter’s web traffic is dropping

There is no question that helping Threads’ explosive growth is the connection that the social media site has with Instagram. To become a Threads subscriber, you need to have an Instagram account and once you sign up for Threads, your Instagram profile shows a special Threads badge. And if you delete your Threads account, you are forced to delete your Instagram account too.

If you want to join Threads, those with an iPhone can install the app from the App Store by tapping on this link. Those with an Android device can get the app from the Play Store by tapping on this link.

If Threads continues to add subscribers at this pace and Twitter continues to see traffic decline, the upstart competitor from Meta could overtake Twitter which reported having 238 million monetizable daily active users last summer in its last quarterly earnings report as a public company before Musk purchased the platform for $44 billion.

Hmm. Perhaps a cage match between Musk and Zuckerberg would be more entertaining and fun to watch. But in the world of tech, the battle between Threads and Twitter might have more implications for the future of social media.


[ad_2]
Source link

Microsoft claims victory in FTC trial over Activision deal

andreasc
-
0
Microsoft claims victory in FTC trial over Activision deal
[ad_1]

Microsoft has scored a big win in its FTC trial over the Activision Blizzard acquisition. On Tuesday July 11, Judge Jacqueline Scott Corley has reached a ruling in the FTC’s request for a preliminary injunction on Microsoft’s attempt to buy Activision Blizzard.

The request has officially been denied, which means Microsoft can now technically proceed with its acquisition. While this looks like a slam dunk, there are still potentially a couple of hurdles left to clear. But for the most part it looks like Microsoft will come out on top. The $68.7 billion deal has been a central topic in the gaming industry for more than a year now. And with good reason. It’s a massive acquisition.

Microsoft has been met with a ton of opposition to the deal, both from rival company Sony and regulators. But now that looks to be coming to a close soon. With Judge Corley’s ruling, Microsoft can now go ahead with the acquisition by the July 18 deadline.

This is not a win for Microsoft in the FTC antitrust case

Today’s decision from Judge Corley is a good thing for Microsoft. It is not however the end of things just yet. Microsoft still has an ongoing antitrust case with the FTC that still needs a resolution.

But this ruling goes a long way to sway things in Microsoft’s favor. The argument against Microsoft’s acquisition has consistently been that it will stifle competition. The ruling submitted today (via The Verge) states otherwise though. “To the contrary, the record evidence points to more consumer access to Call of Duty and other Activision content. The motion for a preliminary injunction is therefore DENIED” the ruling says.

Call of Duty has been one of the main reasons for opposition in this deal, though not the entire focus for the FTC in particular. With the regulator claiming the acquisition going through would give Microsoft an unfair advantage in the cloud gaming space.


[ad_2]
Source link

Sony 55-Inch A80K OLED TV on Sale for $1,098 at Amazon

andreasc
-
0
Sony 55-Inch A80K OLED TV on Sale for $1,098 at Amazon
[ad_1]

Amazon has a great deal on the 55-inch Sony A80K BRAVIA XR OLED TV. That’s going to save you $700 off of the regular price. The 65-inch model is also on sale for $1,498, saving you $300 off of its price. Now the 77-inch model is not currently on sale, but that could change.

This is one of their cheaper, but still great OLED TVs. Many of their OLED TVs start at $5,000 or more.

Sony A80K OLED TV – Amazon

Why you should buy the Sony 55-inch BRAVIA XR A80K Google TV

The Sony A80K is a 2022 model, and it also has some exclusive features for the PlayStation 5, according to Sony. However, those “exclusive” features are really just HDMI 2.1 features that other TVs have also been adding. So if you have a PS5, you can enjoy gaming at 4K120, as well as variable refresh rate and auto-low latency mode. There’s also Auto HDR Tone Mapping and Auto Genre Picture Switch available on this TV.

Since this is an OLED TV, you’re going to get an incredible picture out of this TV. That includes deeper blacks and more true-to-life colors. This is also thanks to it having a wide color spectrum for real-world shades and hues. This is thanks to Sony’s XR Triluminos Pro.

Now, on the software front, it also has Google TV built-in. So that means you’ll get support for Google Assistant and Google Cast. As well as support for YouTube, Apple TV, Netflix, Disney+, Amazon Prime Video and much more. Sony has also included BRAVIA CORE, which has a bunch of great movies that you can stream, for free. Making this a really great TV to pick up for your home.

You can pick up the Sony 55″ A80K OLED TV from Amazon today for just $1,098 by clicking here. But you’d better hurry as this sale is not going to last very long.

Sony A80K OLED TV – Amazon


[ad_2]
Source link

A Comprehensive Guide to Data Sanitization Standards

andreasc
-
0
A Comprehensive Guide to Data Sanitization Standards
[ad_1]

In today’s digital age, organizations handle vast amounts of sensitive data on a daily basis. As technology evolves, the need to protect this data throughout its lifecycle becomes increasingly critical. One essential aspect of data protection is data sanitization, which ensures that sensitive information is permanently and irretrievably removed from storage media before its disposal or reuse.

The National Institute of Standards and Technology (NIST) has provided guidelines in its publication 800-88 to help organizations understand and implement effective data sanitization practices. In this blog post, we will delve into NIST 800-88 and provide a comprehensive guide to data sanitization standards.

What is NIST 800-88?

NIST Special Publication 800-88, titled “Guidelines for Media Sanitization,” offers recommendations for effectively sanitizing media containing sensitive information. It provides a systematic approach to data sanitization that helps organizations reduce the risk of unauthorized data exposure when media is no longer needed. The guidelines address various storage media types, including hard disk drives, solid-state drives, magnetic tapes, and optical media.

Objectives of NIST 800-88

The primary objective of NIST 800-88 is to provide a clear set of guidelines for organizations to follow when sanitizing media. By doing so, it aims to:

  • Protect sensitive information: The guidelines ensure that all sensitive data is irreversibly removed from storage media, minimizing the risk of data breaches and unauthorized access.
  • Promote uniformity: NIST 800-88 establishes standardized procedures and practices for data sanitization, enabling organizations to maintain consistency in their data security protocols.
  • Facilitate compliance: Following NIST 800-88 can help organizations meet regulatory requirements, such as those outlined in the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation (GDPR).

Data Sanitization Methods

NIST 800-88 outlines several data sanitization methods, each appropriate for different storage media types. Some commonly recommended methods include:

  • Clearing: This method involves overwriting data on a storage medium with non-sensitive information. It aims to remove data in a manner that prevents reconstruction using normal system capabilities or standard software tools.
  • Purging: Purging involves the removal of sensitive data through physical or logical means, rendering it unrecoverable. Purging methods can vary depending on the storage media, such as degaussing for magnetic media or cryptographic erasure for solid-state drives.
  • Destruction: Physical destruction of the storage media ensures that no data can be recovered. This method can involve shredding, disintegration, or incineration, depending on the type of media.

Implementation Considerations

When implementing data sanitization practices based on NIST 800-88, organizations should consider the following factors:

  • Risk assessment: Assess the sensitivity of the data and the potential impact of a data breach to determine the appropriate level of sanitization required.
  • Media type: Different storage media may require specific sanitization methods. Understand the characteristics of each media type and select the most suitable method accordingly.
  • Verification: Develop a verification process to ensure that data sanitization has been effectively performed. This can involve spot checks, independent audits, or the use of software tools to validate the sanitization process.
  • Documentation: Maintain detailed records of the sanitization process, including the methods used, the media involved, and verification results. This documentation helps demonstrate compliance with regulations and provides an audit trail.

NIST 800-88 provides a comprehensive framework for organizations to follow when implementing data sanitization practices. By adhering to these guidelines, organizations can ensure the proper protection of sensitive information throughout its lifecycle. Data sanitization plays a crucial role in mitigating the risk of data breaches, maintaining regulatory compliance, and safeguarding an organization’s reputation. By understanding and implementing NIST 800-88, organizations can make significant strides towards a robust data sanitization strategy and bolster their overall data security posture.


[ad_2]
Source link

Threatening rogue finance apps removed from the Apple Store

andreasc
-
0
Threatening rogue finance apps removed from the Apple Store
[ad_1]

Multiple finance apps have been removed from the App Store after making dubious charges and issuing blackmail threats and other awful behavior.

Multiple apps have been removed from the App Store in India after a large helping of unethical behaviour was aimed at their users. TechCrunch reports that “Pocket Kash, White Kash, Golden Kash, and OK Rupee” among others were taken down after getting close to the top 20 finance app listing spots. The reason? These finance apps came with dubious charges and a chilling line in blackmail and threatening behaviour.

Here’s a user review from a month or so ago:

“I borrowed an amount in a helpless situation and […] a day before repayment due date I got some messages with my pic and my contacts in my phone saying that repay your loan otherwise they will inform our contacts that you r not paying loan.”

While this sets the scene for the behaviour which ultimately had the apps taken down, worse was still to come.

Someone reached out to an individual working in media with a very disturbing message related to one of the apps. In it, their friend’s sister took out a loan and was met with threats to send “her nude pics” to her contacts. The nudes weren’t real: they’d been “morphed”, according to the message sender. We assume they mean a deepfake, which are of course notoriously easy to create either via specialist websites or apps.

Some of the apps were also impersonating legitimate app developers, which means lots of time and hassle spent trying to prove that they’re not involved. This is a common scam, so much so that large lists have been compiled of apps suspected of being involved in this particular tactic of blackmail and threatening behaviour.

Back in March, “seven entities and five individuals” were charged in a similar case where an individual was threatened after taking out a loan. Obscene and intimidating messages were sent to the victim by SMS, apps, and phone calls along with threats to upload photographs to adult websites.

Meanwhile, there are a growing number of faked nude photos ending up in the news in relation to these bogus finance apps. Sadly, there are also reports of some victims committing suicide after becoming caught in these fraudulent activities. In the above link, the fake finance apps are on the Google Play store. The bogus app developers are clearly looking to cast as wide a net as possible in their quest for ill-gotten gains. In some cases, fakers will impersonate senior law enforcement officers on rogue websites to make the scam even more convincing.

Apple has pulled “at least” half a dozen apps, but it’s clear that this is a bit of a booming industry and will take a lot of work to stamp out completely. If you’re thinking about taking out a loan via an app, it’s worth taking the time to research which companies are legitimate and take things from there. Check the reputation of the organisation, read those reviews, and find out what level of cover is available from both the store and lender should things go wrong. Do your best to ensure everything is above board before committing to anything, as this definitely isn’t something you want to become tangled up in.

We don’t just report on threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.


[ad_2]
Source link

Samsung trademarks new wearable devices ahead of Unpacked

andreasc
-
0
Samsung trademarks new wearable devices ahead of Unpacked
[ad_1]

Samsung has registered trademarks for a bunch of new wearable Galaxy devices. Over the past week or so, the company has secured brand names for the Galaxy One, Galaxy Pulse, Galaxy Rhythm, Galaxy Index, Galaxy Insight, and Galaxy Circle across various trademark offices around the world.

The first batch of these trademark applications from Samsung came earlier this month. The company submitted documents to the UK Intellectual Property Office (UKIPO) for the brand names Samsung Circle, Samsung Index, and Samsung Insight. It subsequently added the Galaxy prefix to these brands and reapplied trademarks in its home country South Korea.

More recently, Samsung trademarked Galaxy One, Galaxy Pulse, and Galaxy Rhythm with the Korea Intellectual Property Rights Information Service (KIPRIS). According to the official documents, all three of these products are wearable electronic devices “in the nature of smart bracelets, smart necklaces, smart glasses, and smart rings.”

Samsung further explains that they correspond to “software applications for smart rings for tracking, gathering, monitoring, detecting, recognizing, storing, transmitting, managing and assessing biometric and physiological data, vital signs and personal health records, and for providing medical advice” (via GalaxyClub).

This description is less vague compared to that of the Galaxy Index, Galaxy Insight, and Galaxy Circle. Samsung’s documents for these brand names describe them as an electronic product within one of the following four device categories: smart rings, smartwatches, smartphones, and wearable computers.

Samsung might talk about a Galaxy smart ring during Unpacked

Samsung filing six trademark applications related to wearable devices within a week suggests the company is cooking something new. Unfortunately, we don’t have additional details to confirm what the company has in the pipeline. The documents suggest the Galaxy Index, Galaxy Insight, and Galaxy Circle are the names of Samsung’s smart ring products.

The Galaxy One, Galaxy Pulse, and Galaxy Rhythm, on the other hand, could be mobile apps used for tracking health and fitness data through those rings. Samsung recently updated the Samsung Health app to add support for “Ring,” a product that doesn’t exist in its portfolio.

All of these developments hint at a nearing official announcement, though. And what’s a bigger stage than the Galaxy Unpacked event later this month? Samsung is gearing up to launch a host of products at the event on July 26, including new foldables. It remains to be seen if the company will talk about a new Ring-branded wearable product at the event.


[ad_2]
Source link

Monitoring Your Home Internet Usage and Speed

andreasc
-
0
Monitoring Your Home Internet Usage and Speed
[ad_1]

Do you use the internet a lot? If so, have you heard of the term “bandwidth?” Wondering what all that’s about? Typically, bandwidth is the amount of data transmitted from one internet connection to another in a specific duration. It is usually calculated in megabits per second (Mbps). Bandwidth is a key factor in determining the speed and quality of an internet connection or a network. Aspects considered in bandwidth measurement usually include background usage, connection type, and internet usage.

Best Bandwidth Calculator Tools in 2023

Deciding the quantity of internet and speed you need within a specified time or tracking the already used bandwidth over time can be a tough task. That’s why an internet calculator is so useful. If you aren’t sure which one to use, here are some options.

Omni Calculator

You can use this bandwidth calculation tool in two different ways. First, you can enter a file size and the needed time to determine the download speed. You can also use the software the other way around, whereby it’ll tell you the time necessary to download a file (if you know your file size and connection speed.) Omni Calculator allows users to find missing details using the available data. The tool also has several file size and speed formats, allowing users to obtain the results according to their preferences.

BroadbandNow

This bandwidth calculator requires users to fill in specific details after landing on its page. The details provided usually help users understand the bandwidth they need. Calculating bandwidth using BroadbandNow requires entering your location’s zip code, followed by the concurrent number of devices using the internet connection.

Other information required includes your level of video conferencing and gaming activities. Finally, BroadbandNow will ask you to prioritize your needs, between speed and price. After getting these details, the tool gives recommendations based on your location. It also provides links to reliable internet providers.

Calculator.net

This tool has several calculating options linked to bandwidth. It also allows the conversion of different data units. Other things you can do using this tool include:

  • Calculating upload or download time
  • Obtaining equivalent data value
  • Converting monthly usage of data to periods
  • Determining the bandwidth used by a site

Such functions make Calculator.net a multipurpose tool for calculating bandwidth at different locations. The platform’s creative ability is calculating hosting and website bandwidth. Calculator.net has a straightforward interface, making it an easy tool for individuals with basic tech knowledge.

Encore

The Encore bandwidth calculator is an effective option for those intending to research internet providers or plans. The tool determines the needed bandwidth based on your online activities. Since people use multiple devices simultaneously, opting for higher bandwidth is recommended.
Using this tool is straightforward. The information required is the number of users and the type of usage, ranging from low, medium, to high.

Databarracks

Not all bandwidth calculators calculate data transfer rates using network speed. This tool provides an approximate time for sending any file of a specific size. The interface of this tool is usually simple and has a single section for data input. It gives users a table with the duration based on their network speed as they enter a file size.

One Ring Networks

One Ring Networks enables users to determine the most appropriate internet speed for them or their businesses. Users must know the number of devices used simultaneously according to the number of family members or employees. Once you select your online activities and the number of individuals performing them, One Ring Networks recommends the speeds that suit your bandwidth needs.

DSLReports

DSLReports is a straightforward tool for calculating bandwidth. It has columns for data size, time needed, and speed. If you enter internet speed and data size values, the interface provides the time necessary for that specific download.

Fuze

This bandwidth-calculating tool has developed a concept based on persona. In this case, users must enter their data according to calling patterns categorized into video and voice. The tool requires data for the number of users in each persona. After entering these details, Fuze provides the appropriate speed for your video and voice calling needs.

Bottom Line

Choosing the appropriate bandwidth calculator is essential for monitoring your network usage. It’s prudent to understand your bandwidth needs when deciding on a network plan or internet provider. This knowledge enables you to have a smooth experience while using your internet and save costs. You’ll want a package that will cover your needs but not overburden you financially.

On that note, you can also cover your internet bills by registering for an account on Pawns.app. Through the platform, you can share your unused bandwidth for Amazon gift cards, cash, or Bitcoins. This is an effective way to earn passive income, as you don’t really need to do much except leave the app running as long as you want!


[ad_2]
Source link

“TootRoot” Mastodon vulnerabilities fixed: Admins, patch now!

andreasc
-
0
“TootRoot” Mastodon vulnerabilities fixed: Admins, patch now!
[ad_1]

We take a look at a collection of issues (now patched) which were affecting Mastodon servers. It’s time to apply the fix for TootRoot.

One of Twitter’s big rivals, Mastodon, recently finished fixing four issues which (in the worst case) allowed for the creation of files on the instance’s server. Mastodon, whose main selling point is lots of separate communities living on different servers yet still able to communicate, was notified of the flaws by auditors from a penetration testing company.

CVE-2023-36460 is the aforementioned “worst case”, dubbed TootRoot. If you’re not familiar with Mastodon, user posts are called “Toots” (as opposed to tweets if you’re on Twitter). As with Twitter, you’re able to post media files and this is where the problem resided.

According to Bleeping Computer, an issue with Mastodon’s media processing code meant a wide variety of problems could happen as a result. Denial of Service and arbitrary remote code execution are mentioned, with researcher Kevin Beaumont focusing on how webshells could be created on instances processing the rogue Toot.

The other vulnerabilities included cross-site scripting (XSS), potentially used to hijack accounts or impersonate others (CVE-2023-36459), and a technique used for phishing through “verified profile links” (CVE-2023-36462). The final flaw allowed for Denial of Service (DoS) through slow HTTP responses (CVE-2023-36461).

As the patches are server updates, it’s essential that Mastodon admins set about securing their servers. The various issues were fixed in Mastodon versions 3.5.9, 4.0.5, and 4.1.3. Until you update, anything above Mastodon version 3.5.0 could be at risk.

Mastodon allows for the creation of many small (typically invite only) communities catering to all manner of interests and activities. There is a possibility that any security issue on such a platform could lead to specific forms of targeted harassment of at-risk communities.

Indeed, even the Mastodon instances populated by security folks aren’t exactly out of harm’s reach. Back in November of last year, someone discovered a way to steal passwords through an HTML injection vulnerability. Unfortunately for the good folks of Infosec Exchange, the vulnerability happened to affect the Glitch fork being used by…you’ve guessed it…Infosec Exchange. As a humorous side note, the issue was discovered due to people putting a “verified” icon in their username as a dig at Twitter.

Elsewhere, a misconfigured server was found to be scraping Mastodon user data. While the data scraped was nothing spectacular, instead including things like account and display name alongside profile pictures, it was a valuable reminder to be careful about what you post online.

Thankfully lots of Mastodon admins take these risks seriously, and most major instances should already be running the required patches for the various issues which have been found over time. If you’re looking to make the leap to Mastodon yourself, you should check out our guide which leads you through everything from account creation and server sign up to posting. Happy Tooting!

We don’t just report on threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.


[ad_2]
Source link
1...1,0981,0991,100...1,480Page 1,099 of 1,480