Snapchat Vulnerability Allowed Deleting Users’ Spotlight Content

andreasc
-
0
Snapchat Vulnerability Allowed Deleting Users’ Spotlight Content
[ad_1]

A researcher highlighted a vulnerability in Snapchat that could allow a remote attacker to delete a target user’s Spotlight content. Snapchat patched the flaw following the bug report, rewarding the researcher with a hefty bounty.

Snapchat Vulnerability Deleting Content Spotlight

According to a bug report from Sahil Saxena, a severe vulnerability risked the security of Snapchat users’ Spotlight content. Saxena noticed that he could delete any target user’s Spotlight video remotely without requiring the user’s account credentials.

Spotlight is an attractive video feature that Snapchat offers for its content creators to maximize viewability. This feature also facilitates the creators in generating money, which means any vulnerabilities affecting it could also indirectly impact their income.

As described, the researcher observed the issue when intercepting Snapchat posts and attempting to delete a post. He noticed the issue with a specific parameter ID in the post delete request, which he could change to delete any other user’s Spotlight content.

Explaining the PoC, he stated,

In delete request there is parameter of id {"operationName":"DeleteStorySnaps","variables":{"ids":["███████"],"storyType":"SPOTLIGHT_STORY"},"query":"mutation DeleteStorySnaps($ids: [String!]!, $storyType: StoryType!) {\n deleteStorySnaps(ids: $ids, storyType: $storyType)\n}\n"}
You just have to change this id parameter. You can easily get the id parameter. Now forward the request after replacing id with someone’s else video id.

Alongside a privacy breach and damage to the victim’s content, such an exploit could also impact the user financially. That’s because deleted Spotlight content becomes ineligible for Snapchat’s crystal awards – the platform’s payment mode.

Snapchat Fixed The Bug

After discovering this vulnerability, the researcher reported the matter to Snapchat via their HackerOne bug bounty program. The platform officials triaged the bug promptly, assuring an internal review.

Then, within less than a week, Snapchat confirmed patching the vulnerability, which the researcher also tested and confirmed. He validated the fix, which returned an error upon trying to change the parameter ID and sending a request.

After holding the vulnerability report for some time to ensure further fixes, Snapchat has recently disclosed the bug report to the public.

Besides patching the vulnerability, Snapchat rewarded the researcher with a hefty $15,000 bounty.

Let us know your thoughts in the comments.


[ad_2]
Source link

Important piece of OnePlus 11 Concept may be used in a future product

andreasc
-
0
Important piece of OnePlus 11 Concept may be used in a future product
[ad_1]

A rather important piece of the OnePlus 11 Concept may be used in a future product. We are talking about the phone’s liquid cooling which was basically the main attraction when it comes to that concept phone.

An important piece of the OnePlus 11 Concept may be used in a future product

Max Jambor, a well-known tipster, kind of suggested OnePlus may implement that cooling into a product you’ll be able to buy. He did not flat-out confirm it, but said the following: “What if I told you OnePlus plans on bringing the liquid cooling from OnePlus 11 Concept into a real purchasable device?”

Needless to say, this kind of points in that direction. That phone includes the so-called ‘Active CryoFlux’ tech. That liquid cooling system can keep the phone cooler during gaming, charging, and so on.

OnePlus also included a semi-transparent back on the OnePlus 11 Concept. That way, you can actually see that cooling liquid and tubes on the back. That made the phone look really nice, and attracted quite a few eyes.

If OnePlus ends up doing it, we do hope it’ll be a similar implementation, with a see-through back

If OnePlus does end up including this cooling in an actual product, it would be nice if it went about it the say way as it did here. In other words, it would be nice to have such a nice visual representation on the back.

Now, don’t get your hopes up. Max may be right, and OnePlus may be planning to do it. That doesn’t mean it’s actually going to happen. Even if it does, the product OnePlus announces probably won’t be as flashy as the OnePlus 11 Concept, but we’ll see.

The company is expected to announce a number of phones this year still. Its first foldable smartphone is coming, and the same goes for the OnePlus Nord 3, and the OnePlus 11T, to name a few.

It remains to be seen if ‘Active CryoFlux’ cooling will be included in one of the phones this year. Or, perhaps that may be a plan for a device down the line.


[ad_2]
Source link

iPhone 15 image with solid-state buttons appears, but it may be fake

andreasc
-
0
iPhone 15 image with solid-state buttons appears, but it may be fake
[ad_1]

As many of you know, the iPhone 15 Pro and iPhone 15 Pro Max are rumored to use solid-state buttons. Well, something interesting just surfaced. An alleged iPhone 15 frame appeared, with solid-state buttons on the side.

The alleged iPhone 15 frame shown with solid-state buttons on the side

This image appeared on Twitter (shown below), and was shared by ‘fix Apple’. Having said that, this image could be fake. Why? Well, first and foremost, the frame shown here has a matte finish. That may not seem odd to you at first, but hear me out.

iPhone 15 solid state buttons

Apple tends to use a glossy finish on the ‘Pro’ iPhone series. Those phones usually feature glossy stainless steel. That leads us to believe this is either the regular iPhone 15 frame, or a frame that doesn’t belong to an iPhone at all.

The base iPhone 15 and iPhone 15 Plus models are not expected to utilize solid-state buttons. On the flip side, the rumors may have been wrong, and Apple may go all in after all. There are a lot of possibilities here.

Apple may actually use titanium in the ‘Pro’ iPhone 15 series

One more thing is worth noting. Apple is also rumored to switch from stainless steel to a titanium frame on the ‘Pro’ models. We’re not sure that will be happening, but it’s worth noting. The company may even change the coating to a matte finish on the ‘Pro’ models.

As I said, things are very complicated at the moment, as the company could go either way. There are a lot of rumors circulating around, but one thing does seem certain, at least the ‘Pro’ iPhone models will include solid-state buttons.

All iPhone 15 units, base and ‘Pro’ ones, will feature a Dynamic Island this time around. The same goes for a Type-C port, as they will be the first iPhones to feature such a port. Apple may limit it, however.


[ad_2]
Source link

Musk finds another way to get Twitter users to pay $8 per month for a premium subscription

andreasc
-
0
Musk finds another way to get Twitter users to pay $8 per month for a premium subscription
[ad_1]

Two-factor authentication (2FA) is considered a more secure way to sign into an app or website. It requires that two layers of information be presented. Typically, after punching in a username and password the user receives a code on his phone via Text/SMS that he enters into the app or site to gain entry. Considering that most people carry their phones with them wherever they go, this is probably one of the easiest ways to implement 2FA although it might not be the most secure.

Twitter has released a blog post about 2FA that says “While historically a popular form of 2FA, unfortunately we have seen phone-number based 2FA be used – and abused – by bad actors. So starting today, we will no longer allow accounts to enroll in the text message/SMS method of 2FA unless they are Twitter Blue subscribers. The availability of text message 2FA for Twitter Blue may vary by country and carrier.”
What this means is that Twitter users who are not Twitter Blue subscribers have until March 20th to subscribe to Twitter Blue, or disable their Text/SMS 2FA. If you don’t sign up to Twitter Blue before that date, your Text/SMS 2FA will be automatically disabled. Twitter warns that disabling 2FA will not disassociate your phone number from your Twitter account.
If you want to keep SMS 2FA on Twitter after March 20th, you'll need to subscribe to Twitter Blue - Musk finds another way to get Twitter users to pay $8 per month for a premium subscription

If you want to keep SMS 2FA on Twitter after March 20th, you’ll need to subscribe to Twitter Blue

Twitter adds that “We encourage non-Twitter Blue subscribers to consider using an authentication app or security key method instead. These methods require you to have physical possession of the authentication method and are a great way to ensure your account is secure.”

Subscribing to Twitter Blue will cost you $8 per month ($84 for a year) and besides getting to use Text/SMS 2FA, you can enjoy features like Edit Tweet. The latter gives you a 30-minute window to make limited changes to a tweet that you’ve posted. Another feature available to subscribers is an increase in the maximum number of characters allowed in a tweet from 280 to 4,000. Another feature will give prioritization to replies that you send to tweets that you’ve interacted with.

Other perks for Blue members include the Reader feature that makes long tweets look better, and one that allows members to upload longer video content of up to 60 minutes in length (no more than 2GB in size). And with Top Articles, you get to see the most shared articles from Twitter users you follow.

Twitter owner Elon Musk is looking to get more Twitter users to shell out the Twitter Blue subscription fees although charging for Text/SMS 2FA might not generate a rush of users looking to sign up for the premium service.

[ad_2]
Source link

Hacker Leaks 73M Records from Indian HDFC Bank Subsidiary

andreasc
-
0
Hacker Leaks 73M Records from Indian HDFC Bank Subsidiary
[ad_1]

The hacker behind the HDFC Bank subsidiary breach was also behind the Acer Inc. data breach that took place a couple of days ago.

A hacker using the alias Kernelware has leaked 7.5 GB of customer data belonging to HDB Financial Services, a subsidiary of India’s largest private bank, HDFC Bank.

It is worth noting that Kernelware is the same hacker who breached Acer Inc. and leaked 160 GB worth of data on a hacker forum just a few days ago. Acer has now confirmed the breach.

As for the HDFC’s breach, the data was posted on the hacker forum ‘Breached forum’ and contains over 72 million entries. For your information, Breachforums is an infamous forum that surfaced as an alternative to the popular and now-seized Raidforums.

Leaked Data

As analysed by Hackread.com, the leaked data includes personal information such as full names, dates of birth, phone numbers, and email addresses. It also contains employment information, loan details, transaction methods, processing fees, bank names and branches, credit scores, and Experian scores.

Hackers Leak 73M Records from Indian HDFC Bank Subsidiary
Analysis of the leaked records shows personal details of loan seekers have been leaked online (Image credit: Hackread.com)

Other data leaked include dealer names, transaction logs, margin money logs, general asset logs, LOS IDs, loyalty card numbers, employee codes, and other miscellaneous information. The leak has raised concerns about data privacy and the need for stronger security measures to protect sensitive customer information.

While HDFC Bank denies any data leak from their end, analysis reveals that the data belongs to HDB Financial Services, and the leaked data was of HDB’s consumers who had applied for loans between May 2022 and February 2023.

Hackers Leak 73M Records from Indian HDFC Bank Subsidiary
This is what the hacker had to say about the breach (Image credit: Hackread.com)

HDB Financial has confirmed the company experienced a cybersecurity-related incident and investigations are underway. The Indian Computer Emergency Response Team (CERT-IN) is also aware of the issue.

The leak of such a large amount of sensitive customer data has raised concerns about data privacy and cybersecurity. The incident highlights the importance of robust security measures to prevent unauthorized access to customer data. Companies need to take steps to secure their systems and ensure the safety of customer information.

The latest data breach comes just weeks after the RailYatri hack, in which the personal details of over 31 million travellers were leaked online.

  1. Hackers selling 13TB of Domino’s India data
  2. Hackers leak millions of Airtel India user data
  3. Hackers leak 9 million Indian job seekers’ data
  4. Hacker claims to steal 8.2TB of MobiKwik data
  5. India’s COVID-19 surveillance tool leaked user data

[ad_2]
Source link

Vivo X Flip details appear, new clamshell foldable coming

andreasc
-
0
Vivo X Flip details appear, new clamshell foldable coming
[ad_1]

Some Vivo X Flip details have just surfaced. As you have probably noticed from the name itself, this is a clamshell foldable. Once it launches, it will become Vivo’s very first clamshell foldable smartphone, actually.

The Vivo X Flip spec details have just surfaced

The ‘Flip’ branding has kind of become a synonym for clamshell foldable phones. Samsung has been using it for years, and OPPO adopted it with the OPPO Find N2 Flip. Those two companies arguably have the most prominent flip phones on the market at the moment.

In any case, the Vivo X Flip did surface in the past, but we haven’t heard much about it for a while now. Well, a well-known tipster, Digital Chat Station, just shared some details about the device.

The tipster says that the phone will be fueled by the Snapdragon 8+ Gen 1 SoC. That is not Qualcomm’s most powerful offering at the moment, but it’s still an impressive processor with great power consumption. It’s a good choice for sure.

A large main foldable display will be included, and offer a 120Hz refresh rate

The phone will include a 6.8-inch fullHD+ main foldable display, with a centered display camera hole. That panel will offer a 120Hz refresh rate, by the way. The cover panel will be a square, but the tipster did not share the details regarding it.

Vivo X Flip sketch and mockup
Older Vivo X Flip mockup.

Vivo will include 12GB of RAM on the inside, while a 4,400mAh battery will sit on the inside of the phone. 44W wired charging will be supported, while wireless charging probably won’t be on offer.

The phone will feature two cameras on the back

A 50-megapixel main camera (Sony’s IMX866 sensor) will be included on the back, along with a 12-megapixel secondary camera (Sony’s IMX663 sensor). He also mentioned that a side-facing fingerprint scanner will be in use, and that a rear camera island will sit in the top-left corner. It will be circular, by the way.

This phone is expected to launch in China next month, but Vivo didn’t confirm it just yet.


[ad_2]
Source link

Twitter faces second outage in a week, Musk blames “brittle” code stack

andreasc
-
0
Twitter faces second outage in a week, Musk blames “brittle” code stack
[ad_1]

Twitter was partly broken on Monday, the second such outage in less than a week. Several users reported problems with links and images on the platform. The social network didn’t load images properly and also didn’t let users view links. An internal code change caused the issue that lasted for more than an hour. CEO Elon Musk said Twitter’s code stack is “extremely brittle” and needs rewriting.

“Some parts of Twitter may not be working as expected right now. We made an internal change that had some unintended consequences. We’re working on this now and will share an update when it’s fixed,” the company tweeted at 12:19 pm ET/9:19 am PT on Monday. Less than an hour later, it tweeted again: “Things should now be working as normal. Thanks for sticking with us!” According to Ookla’s web monitoring tool Downdetector, users started reporting issues with Twitter at around 11:30 a.m. ET/8:30 am PT (via). The issues lasted for almost two hours.

Twitter didn’t elaborate on the cause of the problem. But it appears the company made some changes to its API and ended up breaking something. “Your current API plan does not include access to this endpoint, please see https://developer.twitter.com/en/docs/twitter-api for more information,” the app’s error message read when users clicked on any links. The social network blocked free access to its API last month, breaking many third-party Twitter clients. It plans to launch a paid version.

Twitter CEO blamed ‘brittle” code stack for this outage

Elon Musk, meanwhile, blamed Twitter’s code stack for giving in easily. “A small API change had massive ramifications. The code stack is extremely brittle for no good reason,” he tweeted about Monday’s issues. “Will ultimately need a complete rewrite,” the Twitter CEO added. While Musk may be speaking the truth, the social network has been facing more issues than before since he took over the company last year. The new owner has fired more than 80 percent of the company’s global workforce. The remaining staff seems to be finding it difficult to maintain the platform.

Last week, thousands of Twitter users around the world reported issues with timelines and other parts of the app. That was preceded by another glitch that blocked users from following others last month. Around the same time, some people also saw an error saying they were over their “daily rate limit”. A similar problem surfaced in December as well. At this rate, we wouldn’t be surprised if Twitter faces more downtime in the coming weeks. We will keep you posted.


[ad_2]
Source link

Zuckerberg copies Musk announcing Meta Verified for Facebook and Instagram

andreasc
-
0
Zuckerberg copies Musk announcing Meta Verified for Facebook and Instagram
[ad_1]
It looks like Twitter isn’t the only company willing to put a little blue checkmark next to your name in return for a stream of monthly payments. As you probably know, Twitter is asking $8 per month or an annual payment of $84 in order to join Twitter Blue, which, among other features, will allow you to have your identity verified with a blue checkmark next to your name. Today, Meta co-founder, chairman, and CEO Mark Zuckerberg announced that Meta will test a new service called Meta Verified.
Meta calls Meta Verified a subscription bundle for Instagram and Facebook and includes a verified badge that shows that you are who you say you are and have verified your identity using a form of government ID. The bundle also helps protect subscribers from having their identities impersonated by using “proactive account monitoring.” Members of Meta Verified also will have access to a real person to handle common issues that an Instagram or Facebook user might have.

Meta Verified subscribers will have their content more prominently featured on Instagram and Facebook

Other features of the program will give Meta Verified users increased visibility and reach. This means that subscribers will have their posts prominently appear in certain areas of the Instagram and Facebook platforms such as “search, comments, and “recommendations.” Lastly, the subscription bundle offers users exclusive features that will allow them to express themselves “in unique ways.”

Meta co-founder, chairman, and CEO Mark Zuckerberg - Zuckerberg copies Musk announcing Meta Verified for Facebook and Instagram

Meta co-founder, chairman, and CEO Mark Zuckerberg

The Meta Verified subscription bundle will be available starting later this week in Australia and New Zealand as a direct purchase on Instagram and Facebook. Make the purchase on the web and it will cost the equivalent of $11.99 per month. If you subscribe via the Facebook or Instagram app on iOS or Android, the price is the equivalent of $14.99 per month. Hmm. Why should an in-app purchase from the App Store or Google Play Store be 25% more expensive (wink, wink)?

To be eligible to sign up for the program, accounts have to show that they were active in the past with a prior posting history, and the account owner must be at least 18 years of age. Those applying for a Meta Verified subscription must submit a government ID to Meta showing their name and photograph (like a Driver’s License, for example) which must match the name and photo used on their Facebook or Instagram account.

Meta Verified will soon be available globally

Meta says, “We’re also committed to continuous monitoring and review of reported violations, as well as taking swift action against those who try to evade our systems.” There will be no changes to accounts on Facebook and Instagram that are already verified based on previous requirements.

The company states, “Long term, we want to build a subscription offering that’s valuable to everyone, including creators, businesses, and our community at large. As part of this vision, we are evolving the meaning of the verified badge so we can expand access to verification and more people can trust the accounts they interact with are authentic.”

After being tested in Australia and New Zealand, Meta says that it hopes to bring Meta Verified to the rest of the world soon.

Back when the company was known as Facebook, it made what is arguably the best acquisition of all time in the tech industry by paying $1 billion for Instagram back in 2012. Some believe that Instagram is now worth in excess of $100 billion. Instagram has matured from a camera filter app to a broader, more well-rounded social media site.
In 2014, Facebook announced its purchase of messaging app WhatsApp for an initial price of $16 billion. By the time the deal closed a few months after it was first revealed, the final price tag of the transaction had ballooned to a range of $19 billion-$21 billion due to Facebook’s increasing stock valuation.

[ad_2]
Source link

Galaxy S20 & Galaxy Z Flip 5G get One UI 5.1 in the US

andreasc
-
0
Galaxy S20 & Galaxy Z Flip 5G get One UI 5.1 in the US
[ad_1]

Samsung has released the One UI 5.1 update for the Galaxy S20 series and the Galaxy Z Flip 5G in the US. The devices follow dozens of other models in the party, including the LTE model of the original clamshell foldable. The new One UI version brings several new features and improvements.

The One UI 5.1 update for the Galaxy S20, Galaxy S20+, and Galaxy S20 Ultra is initially rolling out to the carrier-locked variants. Depending on your carrier, you will receive a new OTA (over the air) package with the firmware build number G98*USQU3HWB3 or G98*USQU3HWB5. As of this writing, the rollout has hit units on T-Mobile, Metro, and US Cellular networks. Units on the remaining networks should also pick up the latest release soon. The update should also be available for factory-unlocked variants of the 2020 Samsung flagships in the coming days.

Meanwhile, if you’re using the Galaxy Z Flip 5G in the US, One UI 5.1 for your phone comes with firmware version F707U1UEU3HWB1. You might have noticed that it’s the unlocked variant (model number SM-F707U1).

Samsung hasn’t released the update for the carrier-locked variant yet. The rollout is widely available for unlocked models, though. So it should just be a matter of time before all Galaxy Z Flip 5G users in the US can get the taste of One UI 5.1. As said earlier, both carrier-locked and unlocked units of the LTE model have already received this update.

This update contains plenty of goodies for Galaxy S20, Galaxy S20+, Galaxy S20 Ultra, and Galaxy Z Flip 5G users. One UI 5.1 adds new selfie effects to the camera app, Shared Family Album to Gallery, new and improved gestures for enhanced multitasking, smart settings suggestions, improved widgets, enhanced image remastering, activity-based automatic changing of wallpapers, improvements to stock apps, and more.

The Galaxy S20 and Galaxy Z Flip 5G aren’t getting the March update just yet

The latest update for the Galaxy S20 trio and Galaxy Z Flip 5G brings the February security patch. Samsung released the March patch earlier today, so it will take some time before the latest release reaches these phones. We will let you know when they get the March SMR (Security Maintenance Release). In the meantime, you can navigate to Settings > Software update > Download and install to check for updates manually. Since One UI 5.1 is a major update, you might want to download it over Wi-Fi rather than mobile data.


[ad_2]
Source link

What is a good Internet speed?

andreasc
-
0
What is a good Internet speed?
[ad_1]

With the increasing internet demand around the globe, how can anyone determine which is a good internet connection and which isn’t? Back in the day, people were content with moderate internet speeds of 200 Mbps or at maximum 500 Mbps, however, things are not the same anymore. With smart devices coming into the picture, there is more need for speed and so, how do you figure out which speed is right for you?

Fortunately, while the demand for a higher internet speed keeps increasing, we have many ISPs that can provide the right speed and help to keep your smart devices up and running at all times. You can choose fiber internet, cable internet, or any other internet connection.

Particularly, fiber and cable internet have become superfast and are super popular because of that. WOW is just one of those providers. It offers a variety of internet plans at varying speeds, like WOW Fast internet plan goes up to 400 Mbps internet speed, whereas WOW Gigabit goes up to 1000 Mbps – click here to know more about it.

But enough about the demand and change in the world, let’s get back to the topic at hand and talk about good internet speed.

What’s a Good Internet Speed for me?

Ask your neighbors what a good internet speed is and you’ll get a different answer from every one of them. That’s because a good internet speed is not a math equation with only one answer, rather it is different for everyone. Take the simple example of your family. Every member of the family has a different need and requirement for internet speed.

While you might need it for your remote work, other members of the family might need it for gaming or streaming movies. Thus, you can tell that you need a super high-speed internet connection!

Similarly, if you need an internet connection just for the sake of checking your emails and keeping up to date with the news, etc., then you won’t need a very speedy internet connection. This is why the activities that you perform, whether daily or sometimes, are important in determining the right internet speed for you.

Hopefully, this will give you a little insight into where high-speed internet is required and where it isn’t.

How to Pick the Right Internet Plan?

Finding the right internet plan is harder than you think. The reason for this is exactly that there are so many options around you that you have no idea what to choose. In terms of ISPs, there are plenty of well-known providers with a winning reputation and great services. Additionally, each provider has more than one connection type. Let’s go through these connection types briefly.

Cable

Cable is the most popular type of connection in the U.S. and is also the most common. People love this connection type because of its reliability and its affordability. In many aspects, this connection type falls second only to Fiber, but otherwise, it is a great option as compared to other types.

Fiber

Fiber is the newest type of internet connection and is also in high demand. Forget homes, offices, and organizations also want in on this technology! The internet speed and reliability of this connection are, by far, the best! Some disadvantages are the price and the limited availability of this connection.

DSL

DSL is the most affordable type of connection and it lacks in terms of a lot of things. In terms of speed, the speed gets slower the farther you are from the ISP’s data center. The reliability of the connection is also not one of its strongest points.

Satellite

The satellite internet is the slowest connection out of all four. In terms of affordability and availability, the equipment for connecting and setting everything up is expensive. And when it comes to availability, you need to meet a few conditions before you sign up for it. It isn’t very reliable either and is easily affected by bad weather.

About WOW

As we mentioned once before, WOW is one of the popular internet providers due to its speedy internet and excellent services. WOW covers around 36 states and it delivers bandwidth over a hybrid fiber-coaxial network. This is how you get the best of both worlds by getting a speed almost as much as a fiber connection at the price of a cable connection! To learn more about Xfinity, simply call 844-207-8721.

On a Final Note

Finding the right internet is undoubtedly a difficult task, however, with the right resources and guidance, you can definitely find the right connection type and speed for yourself. Just be sure to check reviews and feedback from the provider’s customers to get a really good idea of what you will be signing up for.


[ad_2]
Source link
1...1,4081,4091,410...1,480Page 1,409 of 1,480