Month: March 2021

Dell’s new Alienware gaming laptops are first with Cherry MX ultra-low profile mechanical keys

Mechanical keyboards are popular with gamers because they provide tactile feedback and tend be faster than other types of keyboards. So it’s no surprise that most desktop keyboards designed for gamers feature mechanical key switches. But it&#821…

Mechanical keyboards are popular with gamers because they provide tactile feedback and tend be faster than other types of keyboards. So it’s no surprise that most desktop keyboards designed for gamers feature mechanical key switches. But it’s less common to find laptops with mechanical keys because they tend to take up more physical space, making […]

The post Dell’s new Alienware gaming laptops are first with Cherry MX ultra-low profile mechanical keys appeared first on Liliputing.

Nach Unfall mit Polizeiauto: US-Verkehrsbehörde untersucht Teslas Autopilot

Nach zwei Unfällen mit Elektroautos von Tesla ermittelt die für Verkehrssicherheit zuständige US-Behörde. Reguliert die neue US-Regierung autonomes Fahren stärker? (Autonomes Fahren, Elektroauto)

Nach zwei Unfällen mit Elektroautos von Tesla ermittelt die für Verkehrssicherheit zuständige US-Behörde. Reguliert die neue US-Regierung autonomes Fahren stärker? (Autonomes Fahren, Elektroauto)

Datenschutz: Mecklenburg-Vorpommern soll auf Microsoft verzichten

Viele Anwendungen in Behörden lassen sich nicht rechtskonform verwenden. Datenschutzbeauftragter und Rechnungshof fordern einen Umstieg auf DSGVO-konforme Alternativen. (DSGVO, Microsoft)

Viele Anwendungen in Behörden lassen sich nicht rechtskonform verwenden. Datenschutzbeauftragter und Rechnungshof fordern einen Umstieg auf DSGVO-konforme Alternativen. (DSGVO, Microsoft)

Attackers are trying awfully hard to backdoor iOS developers’ Macs

XcodeSpy uses malicious Xcode project to install the EggShell backdoor.

Close-up photograph of Mac keyboard and toolbar.

Enlarge (credit: Jayson Photography / Getty Images)

Researchers said they’ve found a trojanized code library in the wild that attempts to install advanced surveillance malware on the Macs of iOS software developers.

It came in the form of a malicious project the attacker wrote for Xcode, a developer tool that Apple makes freely available to developers writing apps for iOS or another Apple OS. The project was a copy of TabBarInteraction, a legitimate open source project that makes it easier for developers to animate iOS tab bars based on user interaction. An Xcode project is a repository for all the files, resources, and information needed to build an app.

Walking on eggshells

Alongside the legitimate code was an obfuscated script, known as a “Run Script.” The script, which got executed whenever the developer build was launched, contacted an attacker-controlled server to download and install a custom version of EggShell, an open source back door that spies on users through their mic, camera and keyboard.

Read 14 remaining paragraphs | Comments