Recent content by PaulWagenseil

I'm not sure what you mean by "verified." It's a real issue. The problem is that, as the story says, we don't know exactly which or how many devices will be affected.

None of these certificates are designed to last forever. There are three or four levels of certificates, and root certs are the longest-lasting. I believe the one that's expiring soon, DST Root CA X3, dates from 2001, so it's had a 20-year run. Likewise, ISRG Root X1, self-signed or not, was...

For the simplest and dumbest of reasons: Because I thought the image showed a TCL TV running Android, not one running the Roku software. That's how the image was labeled in our image bank. After Roku reached out to me over the weekend and convinced me we were using the wrong image, I changed it.

We have still received no response from Norton regarding this matter, but we did some digging in the Norton forums and discovered that Norton ended the free tier of Norton Mobile Security in early December 2019...

And ... hold that response. There definitely was a free tier in Norton Mobile Security when we were editing this review last summer, but we just installed it again to check and you're right -- the app doesn't say anything about a free tier, and it asks for a credit card right away. We're...

When you install the Android app, all the premium features are active for 30 days. After that, the premium features are deactivated unless and until you pay the subscription fee. The free features will continue to work either way.

We haven't examined Teams much, because it's geared towards enterprises (including schools), not consumers, and there's no free tier. But we compare it and several other video-conferencing platforms with Zoom here: https://www.tomsguide.com/news/best-zoom-alternatives

The hidden web server on Macs was indeed pretty ridiculous, but we didn't include it here because it was discovered and patched in June 2019, and we're trying to focus on Zoom's current problems. Here's more about the Mac web server...

Please see my response to the comment above. In short, the publication of this academic study, and our report on it, is making at least one vendor patch the reported vulnerabilities now. Not in 2017, or in 2019, but right now.

I disagree, obviously. I don't know why the study authors waited so long to publish, but all of the vulnerabilities mentioned have NOT been patched. Some of this "old" information is unfortunately still very relevant. One vendor is currently patching the flaws mentioned in the study as a...

The real issue is that LastPass and 1Password used only an app's APK name -- eg. com.google.com -- to verify its authenticity. That meant that any app that used the same name could trick the password managers into autofilling the credentials for the real app into the fake app. If it was done...