Security Articles on TUAW - The Unofficial Apple Weblog

US Pentagon grants security clearance to iPad, iPhone

by Steven Sande (May 17th, 2013)

Earlier this month TUAW reported that iOS 6 had obtained FIPS 140-2 certification, "opening the door to more government use." It didn't take long for that door to swing wide open, as the Pentagon has now officially approved iPhones and iPads ...

Your Mac's connection to Harry Potter

by Steven Sande (May 17th, 2013)

The next time you wish to hack into a Mac, it may help to grab your wand and book of spells. At the NoSuchCon security conference this week, security architect Alex Ionescu presented a talk where he revealed that special undocumented code on a ...

Talkcast preview: Dolly Drive and backups and Kelly and...you?

by Kelly Guimont (Apr 5th, 2013)

I know, it's weird to see a sneak peek of the talkcast, but this week it's a Very Special Talkcast. We'll be chatting with the Dolly Drive folks about backups and cloud syncing and what it all means for users and their data. You may have ...

Apple on the verge of rolling out two-step verification for iCloud, Apple ID

by Steven Sande (Mar 21st, 2013)

According to a report on 9to5 Mac, Apple has begun training support personnel in advance of rolling out two-step authentication for iCloud and Apple ID. This is a significant step towards enhanced security for Apple accounts as it requires both ...

Software Update: Java for OS X 2013-002 1.0

by Steven Sande (Mar 4th, 2013)

Apple has released Java for OS X 2013-002 1.0 today. You can install the update for OS X 10.7 and later by launching the Mac App Store and clicking the Updates icon, or download the update directly here. According to the update ...

Talkcast tonight, 10pm ET/7pm PT: Scattered passwords, like the corners of my cloud

by Michael Rose (Mar 3rd, 2013)

You can have near-perfect digital security -- a FileVault-protected computer, onsite and offsite backups, a team of angry vultures flapping around your ISP connection 24/7 -- and still be undone by breaches outside your control. Evernote is the ...

Evernote forces password reset after "suspicious activity"

by Michael Rose (Mar 3rd, 2013)

The drumbeat of corporate security issues pounds on, with hybrid cloud/local notekeeping service Evernote reporting this weekend that its internal security team "discovered and blocked suspicious activity" aimed at sensitive areas of Evernote's ...

Another passcode bypass flaw found in iOS 6.1

by Randy Nelson (Feb 25th, 2013)

Just over a week after a flaw was discovered in iOS 6.1 that grants unauthorized access to passcode-protected devices, a new exploit has surfaced that opens up user data to prying eyes even further. Threatpost reports that the newly discovered ...

Apple targeted by hackers

by Steven Sande (Feb 19th, 2013)

Reuters is reporting that Apple has been targeted in a cyber-attack. Apple announced the breach this morning, noting that malware had targeted a "limited number" of Mac systems. Reuters notes that the same hacker group is suspected of an attack on ...

Java patched again, Snow Leopard users blocked from older version (Updated)

by Michael Rose (Feb 1st, 2013)

Update: Apple's Java team has quickly responded to the patch with a revised JVM for Snow Leopard, OS X 10.6. The Java for Mac OS 10.6 Update version 12 (APPLE-SA-2013-02-01-1) is available in Software Update, according to an Apple security email. ...

Parent iPhones can track kids' non-iPhones with MobileKids

by Michael Rose (Jan 24th, 2013)

The delicate dance of independence, safety and personal boundaries between anxious parents and digital-generation kids is always tricky. Some apps and device usages are A-OK, some are a highly concentrated essence of bad choices (looking at you, ...

Oracle releases v11 fix for zero-day Java security flaw

by Michael Grothaus (Jan 14th, 2013)

Oracle has released an official fix for the Java security flaw that was reported by CERT (the Computer Emergency Readiness Team) on January 11. Shortly after the flagging by CERT, Apple took steps to disable the Java plug-in on all Macs running OS ...