informatique et high-tech (les meilleures news) %) - Page 1247

Anker has issued a recall for its PowerCore 10000 power bank (model A1263) due to a “potential issue with the lithium-ion battery” that could pose a fire safety risk. The company has received 19 reports of fires and explosions that have caused minor burn injuries and resulted in property damage totaling over $60,700, according to the US Consumer Product Safety Commission (USCPSC).

The recall covers about 1,158,000 units that were sold online through Amazon, Newegg, and eBay between June 2016 and December 2022. The affected batteries can be identified by the Anker logo engraved on the side with the model number A1263 printed on the bottom edge. However, Anker is only recalling units sold in the US with qualifying serial numbers. To check if yours is included, you’ll need to visit Anker’s website.

flanker (./37384) :
Pour autant, ça ne veut pas dire que la fuite provient d'Apple / Google / …

Zerosquare (./37382) :

16 Billion Apple, Facebook, Google And Other Passwords LeakedForbesAs 16 billion credentials are confirmed as having been leaked, is it time to switch from passwords to passkeys?

redangel (./37388) :

Zerosquare (./37382) :

16 Billion Apple, Facebook, Google And Other Passwords LeakedForbesAs 16 billion credentials are confirmed as having been leaked, is it time to switch from passwords to passkeys?

Fausse alerte:

No, the 16 billion credentials leak is not a new data breachBleepingComputerNews broke today of a "mother of all breaches," sparking wide media coverage filled with warnings and fear-mongering. However, it appears to be a compilation of previously leaked credentials stolen by infostealers, exposed in data breaches, and via credential stuffing attacks.

Rien de nouveau, c'est du repackage de sources déjà fuitées.

melbou (./37392) :
Mon gestionnaire de mot de passe fait aussi une veille des fuites, c'est dingue le nombre de leaks, tous mes emails ont fuité plusieurs fois.

melbou (./37392) :
pour les sites importants il faut un mot de passe unique

redangel (./37399) :
Voir un identifiant unique aussi J'ai maintenant 242 alias (et autant de pass uniques aléatoires) et je me soucie beaucoup moins de fuites

Godzil (./37401) :
Avoir un domaine à ses avantages

During our research, we purchased a number of devices and analyzed devices from friends and colleagues. We can confirm that the issues are prevalent in many entry-level and flagship models. Vendors we confirmed ourselves are Beyerdynamic, Marshall, and Sony. Furthermore, we know of many more devices using the chips that we assume to be vulnerable, too.

(...)

In most cases, these vulnerabilities allow attackers to fully take over the headphones via Bluetooth. No authentication or pairing is required. The vulnerabilities can be triggered via Bluetooth BR/EDR or Bluetooth Low Energy (BLE). Being in Bluetooth range is the only precondition. It is possible to read and write the device’s RAM and flash. These capabilities also allow attackers to hijack established trust relationships with other devices, such as the phone paired to the headphones. These capabilities allow for multiple attack scenarios.

VMware perpetual license holder receives audit letter from BroadcomArs Technica“Our management thought it was a bluff…”…

Broadcom stopped selling VMware perpetual licenses in November 2023 in favor of pushing a small number of VMware SKUs that feature multiple VMware offerings. Since Broadcom is forcefully bundling VMware products, the costs associated with running VMware have skyrocketed, with customers frequently citing 300 percent price hikes and some firms claiming even larger increases. As a result, some VMware users have opted to keep using VMware perpetual licenses, even though Broadcom refuses to renew most of those clients’ support services.

This year, Broadcom started sending such VMware users cease-and-desist letters [PDF], telling organizations to stop using any maintenance releases/updates, minor releases, major releases/upgrades extensions, enhancements, patches, bug fixes, or security patches (except for zero-day security patches) that VMware issued since the user’s support contract ended.

The letters also warned of potential audits, which appear to be underway now.

melbou (./37400) :

redangel (./37399) :
Voir un identifiant unique aussi J'ai maintenant 242 alias (et autant de pass uniques aléatoires) et je me soucie beaucoup moins de fuites

Tu fais comment pour l'email? C'est souvent l'identifiant et il faut confirmer avec un code. J'ai plusieurs comptes "jetables" mais pas uniques, ça ferait trop de boulot.

flanker (./37405) :
J’en ai également, mais les fournisseurs ont tous abandonné leurs offres.