NC #996 Glass Trackpads, iPad Pencil Diagram 2024, Bartender Kerfuffle, HIdden Bar with Physics Nerd Graeme, Security Bits
Jun 10, 2024
auto_awesome
Physics nerd Graeme discusses hiding menu bar items using Hidden Bar and the Bartender app. Other topics include Magic Trackpads being made of glass, iPad Pencil compatibility, and cybersecurity concerns. The host shares experiences with AppleCare, voting, Microsoft's Recall feature, software updates, and malicious plugins.
Magic Trackpads on M2 MacBook Air can crack from the inside, AppleCare repair option recommended.
Sale of Bartender app raises concerns on lack of disclosure, new data analytics features added.
Major data breaches linked to supply chain attack on cloud provider Snowflake, stressing need for multi-factor authentication.
Deep dives
Issues with Apple Magic Trackpad Cracking Internally
The speaker shares a personal experience where the Magic Trackpad of their M2 MacBook Air cracked from the inside, despite being supposedly made of glass. After discovering similar cases online, they contacted Apple for a repair through AppleCare, highlighting the convenience of shipping the device for repair instead of going to a physical Apple store.
Updates on Bartender App Ownership Transfer
The speaker discusses the controversial sale of the Bartender app to a company called Applause, raising concerns about the lack of disclosure and new data analytics features. Ben, the original developer, later clarified the sale, mentioning challenges in supporting users and the addition of the Amplitude Digital Analytics framework. Despite initial backlash, updates to enhance privacy and security are being implemented.
Data Breaches Linked to Cloud Provider Snowflake
Several major data breaches, including those of Cool Master, Ticketmaster, Advanced Auto Parts, and Santander Bank, are traced back to a supply chain attack involving the cloud provider Snowflake. The breaches exposed sensitive customer information, including credit card details and order information, emphasizing the risks associated with outsourcing IT services to third-party providers like Snowflake.
Security Breach at Snowflake and Data Exfiltration Attempt
Attackers infiltrated Snowflake's system, starting with malware on a staff PC in October. The attackers sought a $20 million ransom from Snowflake, then turned to selling data from Snowflake customers like Ticketmaster on the black market. The breach highlighted compromised credentials and single-factor authentication weaknesses. Multi-factor authentication implementation is urged to curb cybercriminal activity.
Warnings on Malicious Techniques and Privacy Concerns
Baddies are using fake browser update screens for malware attacks; caution is advised against clicking download buttons. Stack Overflow reputation is leveraged to promote malicious Python packages, posing risks to developers. Facebook's updated terms grant increased data access for AI training, raising consent and GDPR concerns. Cox's swift patching of a security vulnerability receives commendation, emphasizing the importance of prompt security response.