Flaw was fixed in 2012, but users of older versions not forced to migrate until now
A Microsoft engineer has revealed that one aspect of security software maker AgileBits' 1Password service -- the remote-access 1PasswordAnywhere feature -- includes unencrypted metadata in its keychain that is indexed by Google, making it possible for confidential information to be discovered. The company has responded by saying it will issue upgrades to fix the problem "soon," and blamed the issue on not forcing users of older versions of 1Password to migrate.
Does no harm, but could be used by others to gain access to password database
The latest version of the adware toolbar malware known as Genieo now has the ability to access the OS X Keychain without user knowledge, thanks to privileges gained during the initial install where the user willingly uses their admin password. Though the program itself does not use the technique to cause any malicious harm on its own, the trick will likely be copied and used by others to possibly compromise the security of the OS X password manager. The technique exploits no hack or flaw, but abuses existing privileges.
10 MacBook data theft tips
Security firm Sophos has published a new list of 10 recommendations, specifically on the topic of safeguarding MacBook data. The company notes that while Windows systems are more prone to attack as the more popular format, Macs are still vulnerable, particularly when mobile ones are brought out in public. In this regard the company notes that the best protection is to simply leave data or a computer at home, unless it is absolutely necessary. When browsing at a cafe, for instance, data can be stolen simply by reading over someone's shoulder.
Redesigned BudCase ships
Extended Access today released an updated design of BudCase, its earbud keychain case made for Apple's iPhone. The BudCase is designed to provide quick access to earbuds any time on-the-go, with the latest revision boasting a lighter and more compact form factor with a slightly increased width to accommodate a greater variety of earbuds. BudCase works with most earbuds -- including those shipped with Apple's iPhone -- and is available in black, red, or blue for $15.
Digital Foci OLED keychain
Digital Foci today unveiled two new Pocket Album OLED photo viewers, which will be on display at its CES 2008 booth. The Pocket Album OLED 1.5 features a 1.5-inch screen, with 32MB of internal flash storage – enough to hold approximately 120 photos. The integrated, rechargeable battery holds up to four hours of life, and can be charged through USB. Slideshows can run in either automatic or manual modes, which can display images randomly or in sequence. Digital Foci includes its Photo Viewer Software that allows users to crop and rotate images, which it then will automatically resize for optimal viewing and storage. The Pocket Album OLED 1.5 will be available in April for $50.