NRC Media Holding BV uses cookies and similar technologies. www.nrc.nl used functional and analytical cookies to provide the best customer experience. Moreover, placing third-party tracking cookies to show you personalized ads and to make relevant offers outside the NRC website. Also, tracking cookies are placed by social media networks. Your online behavior may be followed by those third parties through these tracking cookies. By right clicking on agreement or by continuing to use this website you agree to this. Read more about cookies on nrc.nl
This was discovered by Motherboard . Dropbox recently let users reset their passwords associated with data that was stolen in 2012. The company announced then not much data it went.
Dropbox stolen data would be available in four files totaling about 5 gigabytes. This data would be 68,680,741 Accounts. An anonymous Dropbox employee would have confirmed the authenticity of the files viewed.
Dropbox has always claimed that only email addresses were stolen, but the file containing the stolen data are also passwords. These passwords are stored encrypted, so cybercriminals can not use them lightly.
Some of the stolen passwords are encrypted using an older, standard encryption method that Dropbox still used in 2012.
The Taiwanese company did the smart watch Wednesday revealed at the Berlin IFA technology fair. Like previous versions of the ZenWatch he runs on Android Wear, Google’s operating system watch.
The screen of the ZenWatch 3 has a diameter of 1.4 inches and a resolution of 400 by 400 pixels. This is contained in a stainless steel housing and is available with straps of rubber or leather.
The waterproof watch runs on a Snapdragon Wear in 2100, a new chip from Qualcomm that is specifically designed for wearables and which should provide better efficiency. Most previous Android smart watches running on a modified version of the smartphone chip Snapdragon 400.
The battery of the ZenWatch 3 needs one to two days last and this will be charged to 60 percent in the quarter. Asus goes a loose Battery Pack for the ZenWatch 3 sales. Which can be snapped back the clock, so watch it thickens.
View ZenWatch 3
Software
like previous smart watches the ZenWatch 3, the activities of the wearer, but according to Asus makes the new model more accurately.
There are more than fifty dials available and carriers can also create their own bells. One of the buttons can be done by users from a specific function assigned to the smartwatch. Thus, there may be exemplified as a shortcut function to a favorite app.
The ZenWatch 3 will cost 229 euros. If he is right in the store is not yet known
Lenovo unveils at the IFA trade show a particular laptop. namely Yoga Book has no physical keyboard, but instead offers a large touch-sensitive touch screen. But the following information has already come out accidentally
Lenovo plans to announce Yoga Book tonight during an official presentation. Possible follow later today more details.
The notebook is particularly suitable for users who often written notes, illustrator / designer or want to perform other tasks that a pen is more suitable than a mouse or keyboard. Yoga Book comes supplied with Wacom Stylus -. Known for drawing tablets
Still typing
Moreover, it does not mean that you can type sound on this laptop. The touchpad can project a keyboard, and the keys work just like you expect from a keyboard. You express nothing physical, but “feels” the attack will thanks to a slight vibration. Or that good work is still wait and see, but in pictures it looks in any case slick.
Android or Windows
It is also noteworthy that you can when buying Yoga Book choose an Android or Windows version. For the Windows laptop you pay a few bucks more. Prices are respectively set at 499 and $ 549, prices in euros are still not known.
Moreover, Lenovo also has a more traditional laptop on sale, the new Yoga 910. It has a 4K screen and a fingerprint scanner, and runs on the latest Intel processor.
In 2012, there was a hack site at Dropbox. Only now it is known how much damage it is not, there are looted millions of usernames and passwords. What is now known all over the intrusion, and how can you protect yourself?
What happened?
In a hack at Dropbox is a large amount of data captured. Tech Site Motherboard reported last week that there had been an great break-in at the office, but when it was assumed that it was only for user names and email addresses.
However, it has also known that passwords are stolen. It involves a total of nearly 69 million passwords. The hack has been confirmed by Troy Hunt, the man behind HaveIBeenPwnd.com. That website examines large data hacks.
According to Hunt came burglars on Dropbox’s servers go through the password of an employee, which was won during another hack on LinkedIn. Which took place in 2012.
Dropbox now has emailed all the victims, and the passwords are reset. Sudden password change took place last week. Then it was still not clear how much information was actually captured.
Was the security is not good?
The hack took place in 2012, so the data is more than 4 years old. However, they were only now discovered Dropbox. After discovering the service, he immediately sent a warning to all the victims. It is in any case to 69 million data. These are not only user names and email addresses as well as passwords. Of this certainly was half encrypted using an outdated encryption algorithm, SHA-1. How the other passwords are encrypted, is not known.
Was LinkedIn last either as hacked?
The hack is reminiscent of that of LinkedIn, which recently took place. In addition were also millions of usernames and passwords captured, and that hack was originally already in place in 2012. Critics think that in that year cattle lmeer services have been hacked, and that there be more known in the coming weeks and months.
What can I do?
the hack took place in 2012, so it is a little late in the day now to change your password yet. Still, it is wise to do, if only to be sure. In addition, change your password for other services where you use the same password.
We recommend that you use a password manager like LastPass or 1Password. You can check if you’re hacked the website HaveIBeenPwnd.com. How the site works exactly, you read in this workshop.
It is also smart to better secure your account, for example with two-step verification. You’ll alongside your password also need another text message or other extra code to log in. For example, someone who has your password still can not login
Apple has filed several certificates today in anticipation of the iPhone 7 event. They confirm not only rumors, but give the wireless earbuds that Apple would work woad cream named Apple AirPods.
Apple AirPods unveiled on September 7 ?
Manufacturers are required to fill out a certificate if they want to sell electronic products in certain countries. These countries (including Russia, Belarus, Armenia and Kazakhstan) within the Eurasian Economic Union (EAEC). Apple also must adhere to these rules.
Website iPhones.ru says to have discovered that Apple licenses. Herein is clear to see the term AirPods what makes us think of a previous message that Apple’s patent captured in this name. September 7 would obviously be the perfect present, to reveal this wireless version of the classic earpods since the iPhone 7 and iPhone 7 Plus not a traditional headphone jack more.
The question is not whether Apple Wireless earphones come, but whether we have to buy it yourself. The possibility exists that these are bundled in the box with the iPhone 7 and iPhone 7 Plus. The name is certainly logical, and is a great way to launch a new variant of the EarPod.
Apple Watch 2 and iPhone 7 licenses
Later in the certificate can also find some interesting clues about the products Apple reveals on 7 september. For example, two Apple Watch models are mentioned which instead of watchOS 3 crazy enough to run on watchOS 2. We also see two devices iOS 10 running out of the box, which of course the iPhone 7 and iPhone 7 Plus will be.
If we keep these certificates in addition to our forecasts, it is very likely that next week Wednesday besides the iPhone 7 (Plus) also see an Apple Watch 2. This would have a largely identical design as the first watch, but adds a better battery and built-in GPS chip to. On September 7 we know for sure.
The link can then be shared through, inter alia, Whatsapp, Twitter and email. People who click the link will see a iDeal page that can be paid for a specified amount to the bank account of the one who sent the payment request.
Earlier, it was already possible within the ING internetbankierenapp to generate a QR code for a payment request. However, that can only be scanned by ING and Bunq customers.
ABN Amro released in June, though a similar service, with the app Tikkie. Even with that app can be created iDeal payment requests, which can then be shared with others.
Apple has sent out invitations for a big press conference on 7 September. Though Apple itself does not detail the nature of the event, let the reason be guessed. Apple is on September 7th probably present its new Apple iPhone 7 and iPhone 7 Plus
Apple confirms iPhone launch on 7 September 7
the hitherto leaked information surrounding the new iPhone 7 and iPhone 7 Plus show that the devices will be improved in several points from the current iPhones. In terms of (display) format will change nothing. However, the minimum storage capacity will now amount to 32 gigabytes (instead of the now standard 16 gigabytes). In addition, it seems that a 128 gigabyte and 256 gigabyte version will come. It is further suggested that the new iPhone will have more memory.
Also, improvements are expected in the camera of the iPhone. Although rumors contradict each other frequently suggest some rumors that Apple will use a dual camera, while other rumors talk about a new type of camera with a larger lens opening. It seems to be the most obvious that the iPhone 7 a normal camera is going to get and the iPhone 7 Plus a dual camera.
will show what’s wrong with these new rumors on September 7. Somewhere in the middle of September, namely the announcement of the new Apple iPhone 7 expected.
That’s Uber Tuesday confirmed to include Wall Street Journal . Drummond sat since 2013 on the board of directors of the taxi service.
According to sources from The Information he was recently, however, kept away from meetings and he could not see more business secrets.
Uber launched this month a pilot self-propelled taxis in the city of Pittsburgh and announced the acquisition of the company to Otto. That startup working on the development of self-propelled vehicles.
Investment
Google has been working for several years on self-propelled cars and was an early investor in Uber. Drummond is chairman of the investment arm GV Google. He oversaw in 2013 the investment of $ 250 million that Google did in Uber, which the company received a valuation of $ 3.8 billion.
More than three years attributed a score of 68 billion dollars later Uber is and has already raised more than $ 12.9 billion in venture capital.
Drummond said in a statement that he has resigned from the board of Uber because of the “overlap” between the taxi app and Google. “GV remains an avid investor and Google will continue to work with Uber,” he says
“We’ll see you on the seventh.” With this simple text on a card with colored balls on a dark background Apple invited the press to a presentation on September 7. It is widely expected the iPhone 7 will be presented.
A new iPad?
That the iPhone 7 and iPhone 7 Plus are presented, seems hardly any news. It is really only a surprise if Apple even more shows to the press. As perhaps the Apple Watch 2 or new iPad.
Little ostentation
the new iPhones seem not much to go on retreat in appearance of the iPhone 6S Plus and iPhone 6S. Major design changes would be implemented only in 2017, as well-informed sources report a while. The leaked photo above would see three future iPhone models. The largest is called iPhone Pro.
Earphone
An important change is that the earphone jack will disappear. Apple could offer a few bluetooth earpieces that are likely to be settled separately. Also, it is still possible that there are showed earphones that are connected via the lightning-port on the phone. The disappearance of the 3.5 millimeter jack means in any case that Apple’s new phones can be again a bit thinner. The thickness of the earphone jack Apple prevented to make even thinner phones
Two rear cameras
In addition, the iPhone 7 Plus would have a dual rear camera, and both phone models -. The iPhone 7 and the iPhone 7 Plus – would get larger aperture openings. That would better pictures have resulted in semi-darkness.
Apple Watch with GPS
Should be presented a new Apple Watch, then that contrary to the first variant probably GPS on board have. May be still further presented a new iPad Pro, the 12.9-inch version simultaneously saw last year with the iPhone 6S and 6S Plus light.
September 7
Apple meeting is september 7 in San Francisco. In the evening, in Dutch time. Tablet Magazine and Wearable Magazine will soon be day to read what is happening and what new products Apple shows.
The historians have studied the fossil and discovered that her skull has cracks that indicate a fall from a great height. It is the first time that research has been conducted into the cause of death of Lucy. The study Monday in the journal Nature published
The conclusion of the researchers is consistent with findings from a previous study:. The humanoid species where Lucy climbed belonged trees. This is evident from the position of her shoulder blades.
Discussion
However, the latest results are discussed. Other scientists argue that the cracks in the skull only arose when the bones of Lucy lay in the ground after her death.
The fossil Lucy, science has already given a lot of information over the past forty years the ‘Australopithecus afarensis, the oldest known hominid who lived on earth.
the Beatles
the brain content of this hominid was similar to that of a chimpanzee. The species survived in groups and walked upright.
The special feature of Lucy is that of its skeleton quite many bones have been found, including ribs, a lower jaw and a part of her pelvis. Lucy is named after the song Lucy in the Sky with Diamonds of the Beatles, the song that investigators were listening when they found Lucy.
Apple has sent invitations to an event on 7 September. The company is expected to iPhone 7 and iPhone 7 reveal Plus
Apple event
It’s finally happened:. Apple has sent invitations to an event on 7 September. That means that we can finally make acquaintance in just over a week with the iPhone 7 iPhone 7 Plus and maybe even the Apple Watch 2. The event will begin at 19:00 Dutch time and takes place at the Bill Graham Civic Auditorium in San Francisco.
iPhone 7 and iPhone 7 Plus
It is expected that Apple will be the 4.7-inch iPhone 7 and the 5.5-inch iPhone 7 Plus reveal. The devices may or may closely resemble their predecessors in design, but in terms of specifications Apple introduces some welcome upgrades. That is evident from the specifications leaked today. For example, the iPhone 7 Plus has for example a dual camera on the back
Also the batteries of Apple’s smartphones have become larger and both have iPhones 3GB of RAM. Moreover, Apple’s new A10 chip is more powerful than its predecessor. According to the known good Evan Blas start pre-orders for the Apple iPhone 7 and iPhone 7 Plus on 9 September. A week later, on September 16, so they are available.
Apple Watch 2 and iOS 10
About the Apple Watch 2, we know a lot less. The well-known analyst Ming-Chi Kuo claims that there are two versions of the smart watch will be brought out. One of which is aimed at the sporting users and has among other things a GPS and a barometer. Moreover, both are waterproof and wearable devices is battery life reportedly exceptional. Unfortunately, it is not certain that Apple is the successor to the Apple Watch will also unveil on September 7th. We do know that Apple will announce the release date of iOS 10, the next major update to the mobile operating system
Livestream
Apple will probably like the previous times provide a live stream. You can follow live events via dedicated Apple Events app available for the Apple TV, or simply via your browser. We will of course discuss extensively all announcements from Apple on the site All About Phones so keep an eye on!
The pilots in Berghem was also found a lot of material of protected plant and animal species. The value probably runs into the barrels.
The five pilots found a total of 2,000 kilos of coral, skins of snakes and lizards, skulls of monkeys and turtles, objects of ivory and various other items derived from animals with extinction. There were so many things in the buildings that investigators took three days to see everything.
Justice Brabant company came on the track, after the port of Rotterdam in a container from China 345 kilograms of coral was found . That was still so fresh “which allows sea water still ran so to speak,” said the customs.
Organised Crime
A spokeswoman for the customs spoke of an extraordinary discovery and said that this suspected involvement of organized crime.
in addition to illegal stuff half a million euro was found in cash and gold. That is confiscated. It is suspected that there is money laundering. There have been no arrests made. The environmental damage is enormous, police said
Video:. Police shall record catch illegal flora and fauna
NRC Media Holding BV uses cookies and similar technologies. www.nrc.nl used functional and analytical cookies to provide the best customer experience. Moreover, placing third-party tracking cookies to show you personalized ads and to make relevant offers outside the NRC website. Also, tracking cookies are placed by social media networks. Your online behavior may be followed by those third parties through these tracking cookies. By right clicking on agreement or by continuing to use this website you agree to this. Read more about cookies on nrc.nl
The four boys who were arrested Saturday following the brawl in the Wassenaar Tiki, all from Rotterdam. This was reported to the police.
The boys (two of 16, a 20 and a 24 year old) tried with a group of still insisting for some 11 others in the crowded line at the pool in Duinrell. A man who stood in line, decided what to say, and the group surrounded him intimidating. Protectors of the park’s aggressive queue-jumpers wanted to put out, but at the exit the boys turned against them and there was a brawl. The police was called, was besieged by young people.
Abuse
When several officers came to watch the brawl to assist their colleagues, was set apart. The four Rotterdam could be picked up yet and were arrested for assault, rebellion and open violence.
Unrest
In connection with the unrest was decided no new guests to matter anymore. A fifth person was arrested because he was at the dissolution of the row refused to follow the instructions of the police.
Offset
Users who were not allowed to swim after the brawl, get their money back, reports Omroep West. They also get an extra ticket.
Halo Online was released for the PC and was based on the multiplayer mode of the Xbox 360 title Halo 3. the game had been an alpha- and beta-testing phase, so the development was already quite advanced.
the official profile of Halo Online on Russian social network VKontakte have let the creators know that the game in any case not more will come in its present form. However, the exact reason is not given.
Coming soon will be a version of the Forge in Halo 5 for the PC. This is a mode in which players can make their own levels and game modes. Perhaps this launch is a harbinger of another Halo game for the PC
After a scuffle in Duinrell, where a group of boys against guards of the park and agents returned, Saturday August 27 were arrested four boys in the group. A fifth suspect was later, when the row was disbanded for the Tiki Pool, arrested because he did not fulfill the instructions of the police.
stood for the Tiki Pool Saturday night around 17:45, as is often on sunny days, waiting for a decent line of people to go inside. A group of about 15 boys found the queue too long and decided to push for. One of the other people waiting, man, the boys decided to address it and the group was immediately surrounded by an intimidating manner. Security guards who were present at the pool, came to size up and told the group that they were not welcome and asked the boys to move toward the exit.
At the exit turned the youth against the guards and began a brawl. Warned officers were quickly on the spot, but were also directly attacked by the group. One of the officers gave them the signal ‘assist colleagues through which all available units immediately rushed towards Duinrell reason. Upon seeing the large number of police officers, the group splashed boys apart. Four of them, two 16-year-old from Rotterdam and two enjoyed 20 and 24 years, were still caught in the collar. They were arrested in connection with abuse, rebellion and open violence and are trapped at the police.
Due to the resulting turmoil in the Tiki Pool, the park decided to allow no further new guests in the bath. The people who were already inside were allowed to keep swimming until closing. Then at resolving the row of waiting one of waiting did not follow the instructions of the police, he was arrested. The suspect had with the earlier brawl nothing to do.
Before warns the ISO, the Intercity Student Consultation, sat on the basis of its own research. The organization wants the ministers Jet Bussemaker (Education) and Jeroen Dijsselbloem (Finance) be taken. A solution according to the ISO that tuition fees are frozen at registration, so that the student knows many years where they stand is.
When determining the purchasing power change of students among other things take into account average income and expenses of students, the consumer price index and room rental.
accessibility
“the numbers do not lie,” said ISO President Jan Sinnige who fears for the accessibility of higher education. “The threshold to study is increasing. It is especially problematic for students whose parents can not help out.”
University students are going to the most backward according to the survey. They could knock on executive DUO for increased loan or extra high additional scholarship or their parents can ask for an additional financial contribution, thinks ISO.
The quarrel started around 18:00 pm when a group tried to penetrate in the pool checkout.
A man there said something was equally attacked. The guards Duinrell denied the aggressive waiting upon admission to the Tiki Pool.
That was not good, after a brawl broke out between the group and the security guards. Initially came to help shoot a few agents. But when the group not calmed, additional units were called, said a police spokesman in The Hague.
In total, eight police cars on site. A number of security guards was slightly injured in the clashes.
Violence
The police have the aggressive group of four people arrested for assault and public violence. A fifth person was arrested when he did not respond to the evacuation of the pool at a command of the police.
The guests were still in the queue are sent home. The pool goes Saturday night no longer open.
Do you picture to this news? Upload your photos via Nufoto or through WhatsApp (06-1388 0644). . Videos can to video@nu.nl
Microsoft has announced its intention to release a Windows 10 application for fans of the video game series Halo, news and more. You can also view videos on the platform and can you tips and other tricks to find thanks to handy tutorials.
Gamers who are an Xbox at home (which of the three generations does not), are no doubt familiar with the video game series Halo. This is a series of first-person shooters that made popular and big genre on consoles, thanks to the excellent multiplayer and excellent control. That series will next month its own Windows 10 application. It is a kind of hub where lots of information about the games – both new and old – can find, such as videos, news and tutorials
Also, you can all Halo games starting from the hub available. to Windows. Of course you also get exclusive news on the latest games, such as Halo Wars 2 that will soon have to appear for Xbox One. The application must be from September 8 in the Windows Store, where you can download it for free from that day for your PC or tablet with Windows. This app should probably apps to replace as Waypoint, which gamers already could download, for example, Microsoft’s Xbox 360 console.
WhatsApp has adapted Thursday its privacy policy so that businesses can use the messaging service to connect with customers. Phone numbers will be shared with parent company Facebook.
“Organizations need to have permission from the ICO to change their approach, but they need to keep to privacy laws,” said ICO chief Elizabeth Denham to news agency Reuters .
according to WhatsApp users can choose account information to share with Facebook.
Share
sharing information helps according WhatsApp improve ads on Facebook.
it would also help fight spam accounts because one spammer can be tackled simultaneously on Instagram, Facebook and WhatsApp.
1 day, 12 hours ago Culture Winners Amsterdam Award for the Arts known Writer Annejet van der Zijl, designer and artist Joris Laarman and theater director Daria Bukvić on Thursday named the winners of the Amsterdam award for the Arts in 2016. They had won the award in Paradiso from the hands of deputy mayor and alderman for arts and culture, kajsa ollongren. Annejet van der Zijl, Joris Laarman and Daria Bukvić price
Thursday, 25. August 2016 – 11:41 Update: 26-08-2016 8:33
‘This long-sought world, which has been named Proxima b running in 11 days around his cool red parent star, and has a temperature where liquid water is possible on the surface. The rocky world is slightly heavier than the Earth, “said ESO. It is the nearest extrasolar planet and it can also be the nearest residence for life outside our solar system. The article describing this discovery, is today in the journal Nature.
4 light years
At a distance of just over four light years from our solar system is a red dwarf star called Proxima Centauri. It’s the name proxima (near) gives it away, the nearest star as seen from Earth if we do not count the sun. This cool star is too faint to see with the naked eye in the southern constellation Centaur and is overshadowed by the bright double star Alpha Centauri AB.
In the first half of 2016 Proxima Centauri was regularly studied with HARPS -spectrograaf on the ESO 3.6-meter telescope at La Silla in Chile. At the same time the applicant was being watched by other telescopes in the world. This happened during the so-called Pale Red Dot campaign.
A team led by Guillem Anglada Queen Mary University of London, looked or the star showed tiny fluctuations. These fluctuations may be caused by the gravity of a possible planet orbiting the star.
The campaign’s progress was shared between mid-January and April 2016 with the public on the Pale Red Dot website through social media. Besides the results also appeared numerous popular science articles written by specialists from all over the world.
First indications already in 2013.
Guillem Anglada-Escudé explains the background of the unique quest, “the first indications of a possible planet emerged already in 2013, but when the observations were not convincing enough. Since then, we have worked hard to make with the help of ESO and others more observations. We started about two years ago to plan the Pale Red Dot Campaign
The Pale Red Dot data, combined with previous observations from ESO and other observatories, revealed a clear signal:. Sometimes Proxima Centauri is about 5 kilometers per hour towards the earth and sometimes he moves away with the same speed. This regular pattern of changing radial velocity repeats every 11.2 days.
Accurate analysis of the resulting small Doppler shifts indicate the presence of a planet having at least 1.3 times the mass of the earth, which rotates around Proxima Centauri at a distance of approximately 7 million kilometers and that is only 5% of the distance from the earth to the sun.
The Apple community was this week rocked by news of dangerous malware named Pegasus. What is Pegasus exactly and how much walking you in danger? Which you can read in this article. Good to know is that Apple is for anyone with a recent iPhone or iPad has solved the problem. In iOS 9.3.5, iOS 10 beta 7 and the public beta of iOS 6 10 is the vulnerability poem.
What is Pegasus
Pegasus is the name of spying software, which is sold by the NSO? Group in Israel. The software is used by governments to spy on activists, journalists and other targets. So it will be used to spy on Rafael Cabrera, a Mexican journalist who revealed abuses of a powerful Mexican family. NSO sells software for millions to governments. The software sends messages that mimic the Red Cross, Facebook, Federal Express, CNN, Al Jazeera, Google and other bona fide organizations.
The chances of you being spied upon as an ordinary citizen, is not so great. Unless you’re an investigative journalist, dissident and human rights activist are, for organizations such as Bits of Freedom operates or leads a double life as a spy. Are your average citizen, then you still need to protect your private information with things like two-step authentication and encryption of your posts, but the chance that you are Pegasus target is quite small.
These devices are protected against Pegasus Do you have a iPhone 4s or later, it is advisable to iOS 9.3.5 Late to install. Are you tester, then offer 10 beta iOS 7 and iOS 10 public beta 6 also protect against Pegasus. Unfortunately, you do have a problem if you have an iPhone 4 or above, iPad 1 or a iPod touch 4G or older have, for that Apple still has not given security. These devices continue stabbing on iOS 7.1.2 and sometimes much older versions
This is the current situation for older devices:.
1 iPad: iOS 5.1.1 ( published in 2012)
iPhone 4: iOS 7.1.2 (published in 2014)
iPhone 3Gs and iPod touch 4G: iOS 6.1.6 (published in 2014)
iPod touch 3G iOS 5.1.1 (published in 2012)
iPhone 3 and iPod touch 2G: iOS 4.2.1 (published in November 2010)
iPhone 1: iOS 3.1.3 (published in 2010)
iPod touch 1G: iOS 1.1.5 (published in 2008)
For all devices mentioned above, there is therefore no Pegasus protection against malware. You can use these devices, therefore, not be more privacy-sensitive activities.
This is going on Human rights activist Ahmed Mansoor, who lives in the United Arab Emirates (UAE), received a text message on his iPhone. There were ‘new secrets’ promises about the torture of prisoners in UAE when he clicked on a link. The linkje seemed to refer to a webpage of the Red Cross. Mansoor decided not to click, but sent the message to the Citizen Lab, a research institution. They recognized the message as malware NSO Group, an Israeli company that sells spy software to governments. NSO Group is now owned by an American venture investor Francisco Partners Management.
Citizen Lab conducted in collaboration with security company Lookout Security further investigation. In addition, they discovered that Pegasus uses less than three zero-day exploits . These newly discovered vulnerabilities that have not been resolved. Mansoor could have clicked on the link, then his iPhone in a few seconds unsolicited jailbroken. Also, the iPhone 6 Mansoor have turned into a spy phone, he would be monitored from the camera and microphone and all its activities, including phone calls and WhatsApp conversations would be recorded. The use of encrypted message apps like Telegram and Signal is not safe enough.
Is your iPhone more secure?
The situation shows that your iPhone is not as safe as people sometimes think, even though Apple is committed to protection to your data with encryption and privacy promises. The three leaks where Pegasus use them until recently were not known at Apple and probably abused for years “critical elements” to spy on in society. Companies such as NSO said they quietly use. NSO claims that everything they do is legal and that they operate within current legislation. Governments that buy the software, promise that they will use it legally, but obviously NSO can not be extended check (and it is questionable whether they would like).
NSO has customers all over the world, including in Western countries such as Mexico. Moreover NSO is not the only company offering such software. The FBI and the Dutch police are clients of the Israeli company also Cellebrite, that hacks fee iPhones. In addition, in the gray economy still all kinds of hacker groups who make money by exploiting hacks. The FBI switched such an ‘anonymous’ hackers group in order to gain access to the iPhone from a terrorist from San Bernardino.
Apple may well have created a rewards program for hackers, which you can earn great. But there is still earn a lot more if you are selling an exploit to ‘cyberwar’ companies such as NSO and Cellebrite.
These are the Trident exploits
used Pegasus
Analysis Lookout reveals that there are three zero-day exploits are used, making it possible to click to jailbreak an iPhone with one. That is reminiscent of the early days of the iPhone, to you was required to jailbreak the iPhone to make the device unlocked. You had while clicking on a link to perform the jailbreak. Nowadays, it has become a little more complicated to jailbreaken, but the method which has been found NSO operates somewhat in the same way. An unsuspecting victim clicks performed on a link in a message, and the jailbreak.
Lookout explains the three zero-day exploits thereby be used, calling them together Trident (to keep intact the nuances read below the original English text):
CVE-2016-4655: Information leak in kernel – A kernel base mapping That vulnerability leaks information to the attacker-allowing him to calculate the kernel’s location in memory
CVE-2016-4656: kernel. Memory corruption leads to jailbreak – 32 and 64 bit iOS kernel-level vulnerabilities That allow the attacker to silently jailbreak the device and install surveillance software
CVE-2016-4657: Memory Corruption in Webkit – A vulnerability in. the Safari WebKit that Allows the attacker to compromise the device When the user clicks on a link.
Can Apple avoid this in the future?
Apple is working hard to ensure that this does not occur again, because she delivers reputation damage. Indeed, Apple promised that your privacy is always safe and comments from the FBI, NSA and other intelligence you got the impression that it is almost impossible to break into an iPhone. That now appears to be a lie: with NSO software it was possible for many years to monitor users. The problem is that Apple has to deal with thousands of lines of code that can always sneak a few glitches. It is impossible to intercept early all vulnerabilities before hackers find them. Apple hackers already called the greatest threat to users’ privacy.
Apple could do several things to prevent such situations: quickly respond when a zero-day exploit is discovered, work better with external security experts and work continuously on security products. How they address can be seen among others in the Black Hat presentation that Apple this year gave the known security conference. But it will always be a cat-and-mouse game. The only reassurance is that you probably do not Ahmed Mansoor hot, do not live in a country where dissidents simply be arrested and your doings probably is not interesting enough to follow every day.
Apple’s only response so far:
We advise all our customers to always install the latest version of iOS to protect themselves against potential beveiligingsexploits.
