Security, Spoken

Now in its second year, the Voting Machine Hacking Village at the DefCon security conference in Las Vegas features a new set of voting machines—all of which will actually be used in the 2018 midterm elections—for attendees to analyze and attack. But as eager attendees get to work familiarizing themselves with the devices and revealing their weaknesses, another call has emerged from the Village as...

Two weeks ago, Epic Games CEO Tim Sweeney confirmed that the Android version of Fortnite, largely seen as the most popular game in the world, would not be available through the Google Play Store. Instead, fans would have to install it from the web. The announcement drew heaps of attention—not least of which came from peddlers of malware. Fortnite only became broadly available on Android this week....

If, like most people, you thought Google stopped tracking your location once you turned off Location History in your account settings, you were wrong. According to an AP investigation published Monday, even if you disable Location History, the search giant still tracks you every time you open Google Maps, get certain automatic weather updates, or search for things in your browser. There's a way to...

One way operating system developers try to protect a computers's secrets from probing hackers is with an appeal to the human at the keyboard. By giving the user a choice to “allow” or “deny” a program’s access to sensitive data or features, the operating system can create a checkpoint that halts malware while letting innocent applications through. Learn more about your ad choices. Visit podcastcho...

It's tempting to think of fax machines as a relic, every bit as relevant as an eight-track tape. But fields like health care and government still rely on faxes every day. Even your all-in-one printer probably has a fax component. And new research shows that vulnerabilities in that very old tech could expose entire corporate networks to attack. Learn more about your ad choices. Visit podcastchoices...

An Android app has two choices for where to put its data on a device: internal storage, where it’s safe and snug, isolated by the operating system’s sandbox, and external storage, where data can move between apps but isn't as protected. Most of the time, that setup works just fine. But when developers use the latter incorrectly, they could give hackers a crucial foothold. Learn more about your ad...

It’s Black Hat and DefCon conference time again, when the world’s top security researchers descend on the den of iniquity that is Las Vegas in August and try to scare the bejeezus out of people with new research into ominous hacks. Hooray! WIRED’s been there for a few days already. Lily Hay Newman discovered that several mobile credit card readers are rife with bugs, potentially leaving you expose...

Security meltdowns on your smartphone are often self-inflicted: You clicked the wrong link, or installed the wrong app. But for millions of Android devices, the vulnerabilities have been baked in ahead of time, deep in the firmware, just waiting to be exploited. Who put them there? Some combination of the manufacturer that made it, and the carrier that sold it to you. Learn more about your ad choi...

The tiny, portable credit card readers you use to pay at farmer's markets, bake sales, and smoothie shops are convenient for consumers and merchants alike. But while more and more transactions are passing through them, devices from four of the leading companies in the space—Square, SumUp, iZettle, and PayPal—turn out to have a variety of concerning security flaws. Learn more about your ad choices....

Apple's supply chain is one of the most closely monitored and analyzed in the world, both because of the control the company exerts and keen interest from third parties. But there's still never a guarantee that a mass-produced product will come out of the box totally pristine. In fact, it's possible to remotely compromise a brand new Mac the first time it connects to Wi-Fi. Learn more about your a...

At this point, it seems like every so-called consumer smart device—from routers and baby monitors to connected thermostats and garage door openers—has been shown to have vulnerabilities. But that same security crisis has also played out on a macro scale, exposing municipal works and public safety sensors to manipulation that could destabilize traffic lights, undermine radiation sensors, or even cr...

It’s never been easier to trade stocks; just a few taps or clicks will do the trick. But most of the platforms that millions of market participants rely on to move their money suffer from cybersecurity shortcomings, new research warns. As if stocks weren’t risky enough already. A new report from Alejandro Hernández, a security consultant at IOActive, found that nearly all of the 40 major online tr...

On Saturday, as Venezuelan President Nicolas Maduro gave a speech in Caracas before a large military assemblage, drones carrying explosives approached, detonating near the stage. While Maduro was unharmed, Venezuelan information minister Jorge Rodriguez said that the attack injured seven soldiers. It's a method of assault that only a few years ago felt unthinkable, but has quickly become inevitabl...

Ankle monitors are trending these days: Movie mogul Harvey Weinstein and former Donald Trump campaign chair Paul Manafort are under the electronic tether, and last month, in the wake of outrage over immigration officials separating families at the border, US Immigration and Customs Enforcement began monitoring migrant parents electronically rather than keeping them incarcerated in detention center...

You might not be shocked that this week began with big news about a coordinated misinformation campaign on Facebook. But in a twist on the usual narrative, Facebook welcomed the media reports, calling a press conference to reveal that it had removed 35 fake accounts. The rare proactive step was a clear attempt to show the media and Congress that Facebook is tackling misinformation head in the runu...

Accessing the internet isn't normally a problem when you're inside the confines of your own home—it's secure, it's easy to connect to, and it's relatively uncongested—unless the whole family is streaming Netflix on five separate devices. When you venture out though, it's a different story. Learn more about your ad choices. Visit podcastchoices.com/adchoices

As the threat of cyberattacks on the United States launched by foreign adversaries grows, the federal government has been slow to respond. But changes announced Tuesday at the Department of Homeland Security, along with a new bipartisan bill aimed at shoring up DHS cybersecurity initiatives, could give newfound purpose to defenses against critical infrastructure hacking. Learn more about your ad c...

Reddit said in a blog post Wednesday that a hacker broke into the company's systems in June and gained access to a variety of data, including user emails, source code and internal files, and “all Reddit data from 2007 and before.” And it likely could have been avoided if some Reddit employees were using two-factor authentication apps or physical keys instead of their phone numbers. Learn more abou...

Voting systems in the United States are so woefully hackable, an eight-year-old could do it. At least, that’s the conceit of a competition co-sponsored by the Democratic National Committee at next week’s Def Con hacker conference in Las Vegas. The contest will include children, ages eight to 16, who will be tasked with penetrating replicas of the websites that secretaries of state across the count...

The Fin7 hacking group has leeched, by at least one estimate, well over a billion dollars from companies around the world. In the United States alone, Fin7 has stolen more than 15 million credit card numbers from over 3,600 business locations. On Wednesday, the Justice Department revealed that it had arrested three alleged members of the group—and even more important, detailed how it operates. Lea...

A belated legal scramble to stop public access to 3-D printed gun blueprints has succeeded, at least for now. Late Tuesday, a federal judge granted a temporary nationwide injunction against Defense Distributed from making its designs available online. Several hours after the ruling, Defense Distributed founder Cody Wilson has finally complied. Learn more about your ad choices. Visit podcastchoices...

For the last half decade, 3-D printed pistols and metal-milled "ghost guns" have only rarely caught the attention of lawmakers, and have barely registered in the mainstream of America's gun control debate. But now, a controversial legal settlement may have unlocked a new era of digitally fabricated, DIY guns. It's also unleashed a political backlash unlike anything seen in the five years since the...

Facebook has taken down 32 fake pages and accounts that it says were involved in coordinated campaigns on both Facebook and Instagram. Though the company has not yet attributed the accounts to any group, it says the campaign does bear some resemblance to the propaganda campaign run by Russia's Internet Research Agency in the run-up to the 2016 presidential election. Facebook is now working with la...

Imagine you're a human rights activist, pulling up to a border crossing. The on-duty customs agent requests that you hand over your phone and unlock it, without a warrant—an increasingly common practice for US Customs and Border Protection. Your phone holds sensitive photographs documenting abuses abroad, but the agent can't find them. At most, he might notice that you've deleted some files recent...

Until yesterday, unless you had a family member or friend inside prison, you most likely had never heard of JPay. That’s because all of its services are directed towards people inside the nation’s prisons—and their family members. Learn more about your ad choices. Visit podcastchoices.com/adchoices