Expect an increase in browser privacy and security warnings

The post Expect an increase in browser privacy and security warnings appeared first on BardTech.

Internet users will soon experience an increase in privacy and security warnings displayed by the web browsers that they use to connect to Internet sites.

Users of Google Chrome will see an increase in “Your connection is not private” security messages and users of Mozilla Firefox will receive more “Warning: Potential Security Risk Ahead” warnings in the browser.

Google, Mozilla and other browser makers revealed plans to distrust all certificates issued by Symantec in web browsers in 2017. Several certificates were issued in the past that did not comply with industry standards and investigation in the matter revealed that “Symantec had entrusted several organizations with the ability to issue certificates without the appropriate or necessary oversight”.

Google and Mozilla revealed a roadmap for the browsers to distrust all certificates issued by Symantec. Starting October 2018, all versions of Google Chrome, Mozilla Firefox, and other browsers will distrust all certificates issued by Symantec.

Internet users who run development versions of Chrome or Firefox, currently Chrome Canary or Development, and Firefox Nightly, will notice certificate warnings when they connect to sites that use Symantec certificates.

A high profile site that still uses Symantec certificates is PayPal

Google Chrome

chrome certificate error

Google plans to remove the Symantec Root Certificate from Chrome 70 out October 16, 2018 on the Stable channel. It is then that Chrome will display error messages when users try to connect to sites that use Symantec issues certificates.

Google Chrome’s notification reads:

Your connection is not private.

Attackers might be trying to steal your information from [SITE] (for example, passwords, messages, or credit cards).

NET::ERR_CERT_SYMANTEC_LEGACY

A click on the error message displays details including the issuer (which in the case of PayPal is Symantec) but no options to bypass the error.

Mozilla Firefox

Mozilla plans to distrust the Symantec Root Certificate in Firefox 63, out October 2018 on the Stable channel.

Mozilla Firefox displays a different notification when you load sites with Symantec certificates in the web browser.

firefox warning security

It reads:

Warning: Potential Security Risk Ahead

Firefox detected a potential security threat and did not continue to [SITE]. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.
[SITE] has a security policy called HTTP Strict Transport Security (HSTS), which means that Nightly can only connect to it securely. You can’t add an exception to visit this site.

No option to bypass the warning is provided.

Website and server administrators and organizations have until October to deal with the issue at hand. It is necessary to replace the Symantec certificate with a certificate issued by a Certification Authority that is still trusted. Symantec acquired several Certification Authorities such as Thawte or RapidSSL in the past and certificates issued by these companies need to be replaced as well.

Closing Words

Internet users will see an increase in privacy and security warnings on the Internet. Many companies will switch to a different certificate before the deadline but not all will do in time or at all.

Now You: Did you encounter Symantec-related certificate issues in the past already? (via Caschy )

Further reading:

Ghacks needs you. You can find out how to support us here or support the site directly by becoming a Patreon. Thank you for being a Ghacks reader. The post Expect an increase in browser privacy and security warnings appeared first on gHacks Technology News .

Original Content By gHacks

The post Expect an increase in browser privacy and security warnings appeared first on BardTech.

Tags: Firefox, Google Chrome, browser, expect, increase, privacy, security, warnings

Original link: here
via BardTech

How to change the PIM of a VeraCrypt volume

The developers of VeraCrypt introduced Personal Iterations Multiplier (PIM) functionality in the encryption program in version 1.12 . PIM stands for "Personal Iterations Multiplier". It is a parameter that was introduced in VeraCrypt 1.12 and whose value controls the number of iterations used by the header key derivation function. PIM is used by volumes even if the creator of the volume did not specify a value. It is an optional component that improves security: it adds another step to the authentication process similarly to two-factor authentication. The main difference is that the PIM value is fixed and not generated on the fly when requested. An attacker needs to know the master password and the PIM, if not set to default, to breach the encryption successfully and access the content of the drive or partition. A couple of good reasons exist to change the PIM value: It was leaked or stolen. The default value is used and that is not as secure as using a custom PIM. Yo...

Huawei Mate 20 Pro launched in India with Kirin 980 for ₹69,990 ($988)

For years, the highest-end Android flagship used to be defined by Samsung’s Galaxy Note series as the “best-of-the-best” Android phones. Google entered the premium smartphone segment in 2016 with the Google Pixel . In addition, one company that has been steadily improving its flagship phones is Huawei. Huawei has also been steadily increasing the prices of its flagship phones at the same rate. Indian consumers, however, were left out as Huawei had not opted to launch any Mate series phone in India before. This year, as the company’s strategy has changed, high-end flagship smartphone buyers now have another option to choose from. The Huawei P20 Pro was launched in India in April . Now, Huawei has launched the Huawei Mate 20 Pro in India—the first ever launch of a Mate series phone in the country. The Huawei Mate 20 Pro is the successor of the Huawei Mate 10 Pro . It’s positioned as a higher-end variant of the standard Huawei Mate 20. It should be noted that Huawei didn’t launch the s...

The 5 Best Free IPTV Apps to Watch Live TV on Android

It’s easier than ever to watch on-demand TV shows and movies on your Android device. But what about live TV? Yes, there are services like Sling and PlayStation Vue. However, if you know where to look, you don’t need to subscribe to their expensive plans. You can use free IPTV instead; you just need an IPTV app and an IPTV source. What Is an IPTV App? IPTV apps are a bit like Kodi; they are empty shells that can’t stream any content without some user input. You have the responsibility for adding channels, playlists, and other sources. Typically, you cannot use the apps to watch Netflix, Hulu, or direct content from other third-party providers. Here, we’re not interested in the best on-demand streaming apps or places to watch TV online. We are only looking at the IPTV apps themselves. Specifically, we want to know what the best IPTV apps on Android are. 1. Lazy IPTV Our first pick is Lazy IPTV. It supports M3U playlists in open-view, ZIP, and GZ formats. The app can also read pl...

BardTech

Search This Blog