Page 2 - Security Research Device News Today

The iPhone Security Research Device Program allows researchers to work with Apple directly in discovering vulnerabilities while still receiving bounty payments. Sign-ups are open through October 31.

Welcome to Cyber Security Today. This is the Week In Review for the week ending Friday, November 4th, 2022. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com. In a few minutes David Shipley of Beauceron Security will join me to discuss words of wisdom I recently spotted on Twitter. But first a look

Apple launched a new website late last week to help security researchers report issues to the iPhone maker after the tech giant released a number of security updates for its operating systems running on its products.

Apple Security Research launches with improved bounty systems.

Apple has launched a new Security Research website and in its initial postings, says that it is making it easier to report issues, and that it has already awarded almost $20 million in bounty rewards.

Apple has launched a new Security Research website and in its initial postings, says that it is making it easier to report issues, and that it has already awarded almost $20 million in bounty rewards.

Apple’s Security Bounty program has paid nearly $20 million in rewards to security researchers in just two and a half years. Our new site makes it easier than ever for researchers to submit reports on the web, get real-time updates from Apple engineering, and earn recognition for helping to improve security for the users of over 1.8 billion devices worldwide.

  Apple has updated its Platform Security Guide, providing more information about how the Unlock with Apple Watch feature in iOS 14.5 and Touch ID on the iMac Magic Keyboard works. The company routinely updates the security guide to incorporate information about new features. The Platform Security Guide contains detailed and in-depth information about Apples privacy and security mechanisms. For example, the update on Monday sheds new light on the secure channel between the Magic Keyboard with ...

The feature uses the same mechanism as auto unlock for Mac. The guide states that a mutually authenticated station-to-station (STS) protocol that uses long-term keys that are established when the feature is enabled. Once two devices are paired, unique and ephemeral keys are negotiated for each unlock request. Apple says the tunnel is negotiated directly between the Secure Enclave is both devices. That means all cryptographic material is kept within that secured box. The distance between the tw...

I think this discussion should also mention that Signal is a non-profit organization, dedicated to enabling secure and private communications. Yes, its not strong proof, but it should be taken into account when comparing the goals and motivations of organizations developing various other communicators. The organization behind your communicator app could be in the business of gathering data about you and selling it in various forms (Facebook, Google), in the business of selling...