Placeholder Content Image

App used by 1.5 billion has "crucial" flaw

<p><span style="font-weight: 400;">A surprising flaw in the popular app WhatsApp allows hackers to crash the app by sending a simple text message.</span></p> <p><span style="font-weight: 400;">The flaw is so serious that the text can force users to reinstall WhatsApp to fix the issue and group chats impacted by the issue disappear forever.</span></p> <p><span style="font-weight: 400;">Cyber experts at security firm Check Point discovered the flaw, saying that one text can crash multiple phones in one go. </span></p> <p><span style="font-weight: 400;">“The impact of this vulnerability is potentially tremendous, since WhatsApp is the main communication service for many people,” Check Point researchers </span><a href="https://research.checkpoint.com/2019/breakingapp-whatsapp-crash-data-loss-bug/"><span style="font-weight: 400;">explained</span></a><span style="font-weight: 400;">.</span></p> <p><span style="font-weight: 400;">“Thus, the bug compromises the availability of the app which is a crucial for our daily activities.”</span></p> <p><span style="font-weight: 400;">With as many as 65 billion messages being sent via WhatsApp every day, bugs in the system can impact massive numbers of people.</span></p> <p><span style="font-weight: 400;">Once you’ve received the message in a group chat, the app crashes for everyone in the chat and will require you to uninstall and reinstall WhatsApp.</span></p> <p><span style="font-weight: 400;">After the app has been reinstalled, you will be unable to return to your group chat or access the chat history.</span></p> <p><span style="font-weight: 400;">When a user sends a message inside a group chat, the app examines the data to discover who sent the message.</span></p> <p><span style="font-weight: 400;">Check Point have since created a tool that accesses this data and edits it, replacing it with a message that causes the app to crash.</span></p> <p><span style="font-weight: 400;">“The bug will crash the app and it will continue to crash even after we reopen WhatsApp, resulting in a crash loop,” Check Point explained.</span></p> <p><span style="font-weight: 400;">“Moreover, the user will not be able to return to the group, and all the data that was written and shared in the group is now gone for good.</span></p> <p><span style="font-weight: 400;">“The group cannot be restored after the crash has happened and will have to be deleted in order to stop the crash.”</span></p> <p><span style="font-weight: 400;">Naturally, WhatsApp have already fixed the bug, but you’ll need to update the app to make sure you’re safe. If the app is updated to the latest version already, it’s impossible for your phone to be attacked by this bug.</span></p> <blockquote style="background: #FFF; border: 0; border-radius: 3px; box-shadow: 0 0 1px 0 rgba(0,0,0,0.5),0 1px 10px 0 rgba(0,0,0,0.15); margin: 1px; max-width: 540px; min-width: 326px; padding: 0; width: calc(100% - 2px);" class="instagram-media" data-instgrm-captioned="" data-instgrm-permalink="https://www.instagram.com/p/B4i4kG1FH5o/?utm_source=ig_embed&amp;utm_campaign=loading" data-instgrm-version="12"> <div style="padding: 16px;"> <div style="display: flex; flex-direction: row; align-items: center;"> <div style="background-color: #f4f4f4; border-radius: 50%; flex-grow: 0; height: 40px; margin-right: 14px; width: 40px;"></div> <div style="display: flex; flex-direction: column; flex-grow: 1; justify-content: center;"> <div style="background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; margin-bottom: 6px; width: 100px;"></div> <div style="background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; width: 60px;"></div> </div> </div> <div style="padding: 19% 0;"></div> <div style="display: block; height: 50px; margin: 0 auto 12px; width: 50px;"></div> <div style="padding-top: 8px;"> <div style="color: #3897f0; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: 550; line-height: 18px;">View this post on Instagram</div> </div> <p style="margin: 8px 0 0 0; padding: 0 4px;"><a style="color: #000; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: normal; line-height: 17px; text-decoration: none; word-wrap: break-word;" rel="noopener" href="https://www.instagram.com/p/B4i4kG1FH5o/?utm_source=ig_embed&amp;utm_campaign=loading" target="_blank">Avoid being added to a group chat with people outside of your inner circle. 👯‍♀ Now you can have more control over who can add you to a group. To enable this setting, update to the latest version of #WhatsApp! https://blog.whatsapp.com/10000661/New-Privacy-Settings-for-Groups</a></p> <p style="color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; line-height: 17px; margin-bottom: 0; margin-top: 8px; overflow: hidden; padding: 8px 0 7px; text-align: center; text-overflow: ellipsis; white-space: nowrap;">A post shared by <a style="color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: normal; line-height: 17px;" rel="noopener" href="https://www.instagram.com/whatsapp/?utm_source=ig_embed&amp;utm_campaign=loading" target="_blank"> WhatsApp</a> (@whatsapp) on Nov 6, 2019 at 5:02pm PST</p> </div> </blockquote> <p><span style="font-weight: 400;">“WhatsApp greatly values the work of the technology community to help us maintain strong security for our users globally,” said WhatsApp software engineer Ehren Kret in a statement sent to </span><a href="https://www.thesun.co.uk/tech/10569563/whatsapp-bug-crash-app-reinstall-text/"><span style="font-weight: 400;">The Sun</span></a><span style="font-weight: 400;">.</span></p> <p><span style="font-weight: 400;">“Thanks to the responsible submission from Check Point to our bug bounty program, we quickly resolved this issue for all WhatsApp apps in mid-September.</span></p> <p><span style="font-weight: 400;">“We have also recently added new controls to prevent people from being added to unwanted groups to avoid communication with untrusted parties altogether.”</span></p>

Technology

Placeholder Content Image

Why gossiping is not a character flaw

<p><a href="https://www.wsj.com/articles/a-small-town-takes-a-stand-it-banned-gossip-11556204479">According to a <em>Wall Street Journal</em> article</a>, some communities in the Philippines consider gossiping so odious that they’ve outright banned it.</p> <p>But aside from the difficulty of enforcing this sort of ordinance, should gossip really get such a bad rap?</p> <p>Yes, in its rawest form, gossip is a strategy used by individuals to further their own reputations and interests at the expense of others. <a href="http://faculty.knox.edu/fmcandre/JASP_227.pdf">Studies that I have conducted</a> confirm that gossip can be used in cruel ways for selfish purposes.</p> <p>At the same time, how many can walk away from a juicy story about one of their acquaintances and keep it to themselves? Surely, each of us has had firsthand experience with the difficulty of keeping spectacular news about someone else a secret.</p> <p>When disparaging gossip, we overlook the fact that it’s an essential part of what makes the social world tick; the nasty side of gossip overshadows the more benign ways in which it functions.</p> <p>In fact, gossip can actually be thought of not as a character flaw, but as a highly evolved social skill. Those who can’t do it well often have difficulty maintaining relationships, and can find themselves on the outside looking in.</p> <p><strong>As social creatures, we’re hardwired to gossip</strong></p> <p>Like it or not, we are the descendants of busybodies. Evolutionary psychologists <a href="http://faculty.knox.edu/fmcandre/SciAm_Gossip.pdf">believe</a> that our preoccupation with the lives of others is a byproduct of a prehistoric brain.</p> <p><a href="http://www.hup.harvard.edu/catalog.php?isbn=9780674363366">According to scientists</a>, because our prehistoric ancestors lived in relatively small groups, they knew one another intimately. In order to ward off enemies and survive in their harsh natural environment, our ancestors needed to cooperate with in-group members. But they also recognized that these same in-group members were their main competitors for mates and limited resources.</p> <p>Living under such conditions, our ancestors faced a number of adaptive social problems: who’s reliable and trustworthy? Who’s a cheater? Who would make the best mate? How can friendships, alliances and family obligations be balanced?</p> <p>In this sort of environment, an intense interest in the private dealings of other people would have certainly been handy – and strongly favored by natural selection. People who were the best at harnessing their social intelligence to interpret, predict – and influence – the behavior of others became more successful than those who were not.</p> <p>The genes of those individuals were passed along from one generation to the next.</p> <p><strong>Avoiding gossip: a one-way ticket to social isolation</strong></p> <p>Today, good gossipers are influential and popular members of their social groups.</p> <p>Sharing secrets is one way people bond, and sharing gossip with another person is a sign of deep trust: you’re signaling that you believe that the person will not use this sensitive information against you.</p> <p>Therefore, someone skillful at gossip will have a good rapport with a large network of people. At the same time, they’ll be discreetly knowledgeable about what’s going on throughout the group.</p> <p>On the other hand, someone who is <em>not</em> part of, say, the office gossip network is an outsider – someone neither trusted nor accepted by the group. Presenting yourself as a self-righteous soul who refuses to participate in gossip will ultimately end up being nothing more than a ticket to social isolation.</p> <p>In the workplace, <a href="https://www.researchgate.net/publication/257986788_The_co-evolution_of_gossip_and_friendship_in_workplace_social_networks">studies have shown</a> that harmless gossiping with one’s colleagues can build group cohesiveness and boost morale.</p> <p>Gossip also helps to socialize newcomers into groups by resolving ambiguity about group norms and values. In other words, listening to the judgments that people make about the behavior of others helps the newbie figure out what’s acceptable and what isn’t.</p> <p><strong>Fear of whispers keeps us in check</strong></p> <p>On the flip side, the awareness that <em>others</em> are likely talking about us can keep us in line.</p> <p>Among a group of friends or coworkers, the threat of becoming the target of gossip can actually be a positive force: it can deter “free-riders” and cheaters who might be tempted slack off or take advantage of others.</p> <p>Biologist Robert Trivers <a href="http://greatergood.berkeley.edu/images/uploads/Trivers-EvolutionReciprocalAltruism.pdf">has discussed</a> the evolutionary importance of detecting <em>gross cheaters</em> (those who fail to reciprocate altruistic acts) and <em>subtle cheaters</em> (those who reciprocate but give much less than they get). Gossip can actually shame these free riders, reining them in.</p> <p>Studies of <a href="http://www.amazon.com/Order-without-Law-Neighbors-Disputes/dp/0674641698">California cattle ranchers</a>, <a href="http://www.amazon.com/Lobster-Gangs-Maine-James-Acheson/dp/0874514517">Maine lobster fishers</a> and <a href="http://evolution.binghamton.edu/evos/wp-content/uploads/2012/02/Kniffin-2010-Workplace-Gossip.pdf">college rowing teams</a> confirm that gossip is used in a variety of settings to hold individuals accountable. In each of these groups, individuals who violated expectations about sharing resources or meeting responsibilities became targets of gossip and ostracism. This, in turn, pressured them to become better members of the group.</p> <p>For example, lobstermen who didn’t respect well-established group norms about when and how lobsters could be harvested were quickly exposed by their colleagues. Their fellow lobstermen temporarily shunned them and, for a while, refused to work with them.</p> <p><strong>Celebrity gossip actually helps us in myriad ways</strong></p> <p>Belgian psychologist Charlotte de Backer <a href="http://link.springer.com/article/10.1007%2Fs12110-007-9023-z#/page-1">makes a distinction</a> between <em>strategy learning gossip</em> and <em>reputation gossip</em>.</p> <p>When gossip is about a particular individual, we’re usually interested in it only if we know that person. However, some gossip is interesting no matter whom it’s about. This sort of gossip can involve stories about life-or-death situations or remarkable feats. We pay attention to them because we may be able to learn strategies that we can apply to our own lives.</p> <p>Indeed, de Backer discovered that our interest in celebrities may feed off of this thirst for learning life strategies. For better or for worse, we look to celebrities in the same way that our ancestors looked to role models within their tribes for guidance.</p> <p>At its core, our fixation on celebrities is reflective of an innate interest in the lives of other people.</p> <p>From an evolutionary standpoint, “celebrity” is a recent phenomenon, due primarily to the explosion of mass media in the 20th century. Our ancestors, on the other hand, found social importance in the intimate details of <em>everyone</em>‘s private life, since everyone in their small social world mattered.</p> <p>But anthropologist <a href="https://www.researchgate.net/publication/279236728_Beneath_new_culture_is_old_psychology_Gossip_and_social_stratification">Jerome Barkow has pointed out</a> that evolution did not prepare us to distinguish among those members of our community who have a genuine effect on us, and those who exist in the images, movies and songs that suffuse our daily lives.</p> <p>From <em>TMZ</em> to <em>US Weekly</em>, the media fuels gossip mills that mimic those of our workplaces and friend groups. In a way, our brains are tricked into feeling an intense familiarity with these famous people – which hoodwinks us into wanting to know even <em>more</em> about them. After all, anyone whom we see <em>that</em> often and know <em>that</em> much about <em>must</em> be socially important to us.</p> <p>Because of the familiarity we feel with celebrities, <a href="https://www.psychologytoday.com/blog/out-the-ooze/201503/why-caring-about-celebrities-can-be-good-you">they can serve an important social function</a>: they may be the only “friends” we have in common with new neighbors and coworkers. They’re shared cultural touchstones that facilitate the types of informal interactions that help people become comfortable in new surroundings. Keeping up with the lives of actors, politicians and athletes can make a person more socially adept during interactions with strangers and even offer inroads into new relationships.</p> <p>The bottom line is that we need to rethink the role of gossip in everyday life; there’s no need to shy away from it or to be ashamed of it.</p> <p>Successful gossiping entails being a good team player and sharing key information with others in ways that won’t be perceived as self-serving. It’s about knowing when it’s appropriate to talk, and when it’s probably best to keep your mouth shut.</p> <p><em>Written by <span>Frank T. McAndrew, Cornelia H. Dudley Professor of Psychology, Knox College</span>. Republished with permission of </em><a rel="noopener" href="https://theconversation.com/gossip-is-a-social-skill-not-a-character-flaw-51629" target="_blank"><em>The Conversation</em></a><em>.</em></p>

Mind

Placeholder Content Image

Security flaw in Wi-Fi leaves millions at risk

<p>The US government and security researchers worldwide have issued warnings of a newly discovered flaw in a widely used Wi-Fi encryption protocol.</p> <p>The US government’s Computer Emergency Response Team (CERT) issued a warning saying the security flaw can open the door to hackers seeking to eavesdrop or hijack devices using wireless networks.</p> <p>“Exploitation of these vulnerabilities could allow an attacker to take control of an affected system," said CERT.</p> <p>The agency’s warning follows research by computer scientists at the Belgian university KU Leuven, who named the security flaw KRACK, for Key Reinstallation Attack.</p> <p>Ars Technica has reported that the discovery was a closely guarded secret for weeks in order to allow Wi-Fi systems to develop security measures.</p> <p>The Wi-Fi encryption protocol with the security flaw, WPA2, allows hackers “to read information that was previously assumed to be safely encrypted," said a blog post by KU Leuven researcher Mathy Vanhoef.</p> <p>“This can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on. The attack works against all modern protected Wi-Fi networks.”</p> <p>Mathy also said the flaw may allow an attacker “to inject ransomware or other malware into websites.”</p> <p>The Belgian researchers said in a research paper that devices on all operating systems may be vulnerable to KRACK, including 41 per cent of Android devices.</p> <p><strong>The risk</strong></p> <p>According to researchers, the flaw is dangerous due to the difficulty in patching millions of wireless systems.</p> <p>“Wow. Everyone needs to be afraid," said Rob Graham of Errata Security in a blog post.</p> <p>“It means in practice, attackers can decrypt a lot of Wi-Fi traffic, with varying levels of difficulty, depending on your precise network setup.”</p> <p>Researchers at Finland-based security firm F-Secure said the discovery of the flaw confirms longstanding concerns about Wi-Fi systems’ vulnerability.</p> <p>“The worst part of it is that it’s an issue with Wi-Fi protocols, which means it affects practically every single person in the world that uses Wi-Fi networks," F-Secure said in a statement.</p> <p>F-Secure researchers said Wi-Fi users can minimise the risks by using virtual private networks and by updating devices including routers.</p> <p>The Wi-Fi Alliance, an industry group who sets standards for wireless connections, said computer users should not panic.</p> <p>“There is no evidence that the vulnerability has been exploited maliciously, and Wi-Fi Alliance has taken immediate steps to ensure users can continue to count on Wi-Fi to deliver strong security protections,” the group said in a statement.</p> <p>“Wi-Fi Alliance now requires testing for this vulnerability within our global certification lab network and has provided a vulnerability detection tool for use by any Wi-Fi Alliance member."</p> <p>On October 10, Microsoft released a patch to protect users of Windows devices.</p> <p>“Customers who have Windows Update enabled and applied the security updates, are protected automatically," Microsoft said.</p> <p>A Google spokesman said, “We’re aware of the issue, and we will be patching any affected devices in the coming weeks.”</p>

Technology

Placeholder Content Image

Huge security flaw discovered in millions of vehicles

<p>Owners of cars constructed by a popular automobile manufacturer have been warned of a huge security flaw present in millions of vehicles built between 1995 and 2015.</p> <p>A paper published by researchers at the University of Birmingham found a low-tech way hackers could gain access to cars made by VW group brands Volkswagen and Audi.</p> <p>The researchers used an audio frequency technique to ‘eavesdrop’ on the remote keyless access keys of the car, and in turn mimic the signal with ‘cheap technical devices’.</p> <p>It’s believed over 100 million vehicles worldwide could be vulnerable to an attack.</p> <p>The papers stated, “It is conceivable that all VW Group (except for some Audi) cars manufactured in the past and partially today rely on a 'constant-key' scheme and are thus vulnerable to the attacks.”</p> <p>Do you own a Volkswagen or an Audi? Do you think enough security measures are taken these days to protect our vehicles from these sort of threats?</p> <p>Let us know in the comments.</p> <p><strong>Related links:</strong></p> <p><span style="text-decoration: underline;"><em><a href="/news/news/2016/08/beautiful-birthday-gift-brings-grandma-to-tears/"><strong>Beautiful birthday gift brings grandma to tears</strong></a></em></span></p> <p><span style="text-decoration: underline;"><em><a href="/news/news/2016/08/car-salesman-rescues-elderly-woman-after-she-mistakenly-calls-him/"><strong>Car salesman rescues elderly woman after she mistakenly calls him</strong></a></em></span></p> <p><span style="text-decoration: underline;"><em><a href="/news/news/2016/07/baby-fights-for-control-of-car-radio/"><strong>Adorable baby fights for control of his mum’s car radio</strong></a></em></span></p>

News