Connect with us

Featured

Darwin flaw found in iOS

Published

on

Kaspersky Lab has discovered a vulnerability in the Darwin kernel of the Apple operating system that if exploited, leaves OS X and iOS 8 devices exposed to the remote activation of denial of service attacks on the devices.

Kaspersky Lab security researchers have discovered a vulnerability in the kernel of Darwin – an open-source component of both the OS X and iOS operating systems. This “Darwin Nuke” vulnerability leaves OS X 10.10 and iOS 8 devices exposed to remotely-activated denial of service (DoS) attacks that can damage the user’s device and impact any corporate network to which it is connected. The experts call on users to update devices with the OS X 10.10.3 and iOS 8.3 software releases, which no longer include this vulnerability.

Analysis of the vulnerability by Kaspersky Lab revealed that the devices affected by the threat include those with 64-bit processors and iOS 8: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad Air 2, iPad mini 2, and iPad mini 3.

The “Darwin Nuke” vulnerability is exploited while processing an IP packet of specific size and with invalid IP options. Remote attackers can initiate a DoS (denial of service) attack on a device with OS X 10.10 or iOS 8, sending an incorrect network packet to the target.  After processing the invalid network packet, the system will crash. Kaspersky Lab’s researchers discovered that the system will crash only if the IP packet meets the following conditions:

–          The size of the IP header should be 60 bytes.

–          The size of the IP payload should be less than or equal to 65 bytes.

–          The IP options should be incorrect (invalid option size, class, etc.)

“At first sight, it is very hard to exploit this bug, as the conditions attackers need to meet are not trivial ones. However persistent cybercriminals can do so, breaking down devices or even affecting the activity of corporate networks. Routers and firewalls would usually drop incorrect packets with invalid option sizes, but we discovered several combinations of incorrect IP options that are able to pass through the Internet routers. We’d like to encourage all OS X 10.10 and iOS 8 users to update devices to OS X 10.10.3 and iOS 8.3 releases,” – says Anton Ivanov, Senior Malware Analyst at Kaspersky Lab.

Kaspersky Lab’s products protect OS X against the “Darwin Nuke” vulnerability with the Network Attack Blocker feature. Starting with Kaspersky Internet Security for Mac 15.0, this threat is detected as DoS.OSX.Yosemite.ICMP.Error.exploit.

Kaspersky Lab’s tips for boosting the security of Mac devices include:

1.      Use a web browser that has a solid track record of fixing security issues promptly.

2.      Run “Software Update” and patch the machine promptly when updates are available.

3.      Use a password manager to help cope with phishing attacks.

4.      Install a good security solution.

Tips to make your iPhone secure can be found at: http://blog.kaspersky.com/iphone-maximum-security-tips/.

* Follow Gadget on Twitter on @GadgetZA

Featured

Smash hits the Nintendo Switch

Super Smash Bros. delivers what the fans wanted in the latest “Ultimate” instalment, writes BRYAN TURNER.

Published

on

Super Smash Bros. Ultimate, the latest addition to the popular Nintendo Smash series, has landed on the Nintendo Switch with a bang, selling 5-million copies in the first week of its release. The game has been long-anticipated since the console’s release, as many fans consider iy to be a Nintendo staple. And the wait was well worth it.

It features 74 playable fighters, 108 stages, almost 1300 Spirit characters to collect while playing, and a single-player Adventure mode that took about three days (or 28 hours) of gameplay to complete. The game offers far more gameplay than its predecessors, making it the Smash game that gives its players the best bang for their buck.

For those new to the game, the goal is to fight opponents and build up their damage score (draining their health) to knock them off the stage eventually. This makes the game seem chaotic, as many players jump around the platforms as if they were on quicksand, in order to avoid being hit by the other players.

It also services two kinds of players: the competitive and the casual.

Competitive players can be matched on the online service by skill ranking to enjoy playing with similarly high-skilled opponents. This is especially important in e-sports training for the game, and for players wanting to master combos against other human players. The casual gamer is also catered for, with eight-player chaos and button-mashing to see who comes out luckiest. This segment is also important for those wanting to learn how to play.

Training mode is also a place to go for those learning to play. It offers “CPU” players that are graded by intensity to train as a single player to learn a character’s moves, combos and general fighting style. More challenging CPU players can also be used by competitive players to train when there isn’t a Wi-Fi connection available.

Direct Play features in this game, allowing two players with two Switch consoles to play against each other over a direct connection – no Wi-Fi needed. This is especially useful to those who want to have a social gaming element on the go, similar to that of the cable connector of the Gameboy.

Click here to read Bryan Turner review of Super Smash Bros. Ultimate.

Previous Page1 of 3

Continue Reading

Competitions

Win Funko Fortnite in Vinyl

Gadget and Gammatek have nine Funko Fortnite figurines to give away.

Published

on

A Funko Pop figurine based on a character set is indicative of reaching the heights of pop culture. It is no surprise, then, that the world’s biggest online game, Fortnite, has its own line of Funko Pop figurines. The Funkos are modeled on the characters in game, including Drift, Ragnarok, Dark Vanguard, Volar, Tracera Ops, and Sparkle Specialist.

Now, local Funko distributor Gammatek has released the Fortnite figurines in South Africa. To celebrate, Gadget and Gammatek are giving away a set of three Funko Fortnite figurines to each of three readers (9 figurines in total). To enter, first click on your favourite Funko Pop on the next page and post the Tweet that appears. Then, follow Gadget on Twitter.

You can put the tweet in your own words, but entries must have the competition’s hashtag (#FunkoFortnite) and mention @GadgetZA to be considered valid.

Click here to select the Funko Fortnite character you want to tweet.

Previous Page1 of 2

Continue Reading

Trending

Copyright © 2018 World Wide Worx