Xen is often used to share one physical server amongst many different customers – and it’s supposed to keep them safely apart. Sometimes, things don’t quite work out…Paul Ducklin explains.![]()
Tag Archives: data leakage
Delta Airlines flaw lets others access your boarding pass
Passenger lists are quite rightly kept confidential, as you will know if you’ve ever tried to find out if the friends you’ve come to pick up at the airport made it onto their flight. Seems that no-one told Delta Airlines…![]()
Alibaba turns into Ali-blab-blab thanks to web server URL security bug
Chinese e-commerce megabrand Alibaba just fixed a rather naughty security slipup on its online retail portal AliExpress. You could get data such as the addresses and phone numbers of other users.![]()
Adobe updates its e-reader – DRM data no longer transmitted insecurely
Adobe’s e-reader software now has “enhanced security” for uploading metadata about what you read. Or, as you might say, “no longer uploads that data insecurely”…![]()
Apple pushes out iOS 8.1 – kills the mobile POODLE and closes some, ahem, “backdoors”
The marquee vulnerablity fixed in iOS 8.1 is, as you might expect, POODLE. But there are other cryptographic fixes in iOS 8.1 that are equally important…because cryptography is notoriously hard to get right first time.
![]()
POODLE attack takes bytes out of your enrypted data – here’s what to do
Heartbleed, Shellshock, Sandworm…and now POODLE. It’s a security hole that could let crooks read your encrypted web traffic. Paul Ducklin takes you through how it works, and what you can do to avoid it, in plain (well, plain-ish) English…![]()
Mummy, my schoolbooks are spying on me! 60 Sec Security [VIDEO]
Here’s our latest 60 Second Security video for your viewing pleasure. The wry side of the week’s news, in just a minute…![]()
Bugzilla bug tracker fixes zero-day bug revealing bug
If we are allowed to smile at security holes, this bug-revealing bug in Bugzilla is wryly amusing…![]()
“Shocking” Android browser bug could be a “privacy disaster”: here’s how to fix it
The Metasploit crew is calling this Android Browser bug a “privacy disaster.” Here’s what you can do to avoid trouble…![]()
How far would your sysadmins go to fix a problem? 60 Sec Security [VIDEO]
Here it is – this week’s 60 Second Security video. News that will amuse, and it only takes a minute…![]()
