Sunday, November 24, 2013

Bluebox reveals Android security hole, may affect 99 percent of devices

Bluebox reveals Android security hole, may affect 99 percent of devices data = {blogUrl: "www.engadget.com",v: 400};when = {jquery: lab.scriptBs("jquery"),plugins: lab.scriptBs("plugins"),eng: lab.scriptBs("eng")}; var s265prop9 = ('20648952' !== '') ? 'bsd:20648952' : ''; var postID = '20648952'; var modalMNo = '93312529', modalVideoMNo = '93320648', modalGalleryMNo = '93304207'; when.eng("eng.omni.init", {pfxID:"weg",pageName:document.title,server:"acp-ld39.websys.aol.com",channel:"us.engadget", s_account: "aolwbengadget,aolsvc", short_url: "",pageType:"",linkInternalFilters:"javascript:,",prop1:"article",prop2:"software",prop9:s265prop9,prop12:document.location,prop17:"",prop18:"",prop19:"",prop20:"", prop22:"zachary-lutz", prop54:"blogsmith",mmxgo: true }); adSendTerms('1')adSetMOAT('1');adSetAdURL('/_uac/adpagem.html');lab._script("http://o.aolcdn.com/os/ads/adhesion/js/adhads-min.js").wait(function(){var floatingAd = new AdhesiveAd("348-14-15-13f",{hideOnSwipe:true});}); onBreak({980: function () { adSetType("F");htmlAdWH("93312529", "LB", "LB"); adSetType("");}}); EngadgetMenu NewsReviews Features Galleries VideosEventsPodcasts Engadget ShowTopics Buyers Guides Sagas Store Hands On More Betterer HD Mobile Alt Announcements Cameras Cellphones Desktops Displays Gaming GPS Handhelds Home Entertainment Household Internet Laptops Meta Misc Networking Peripherals Podcasts Robots Portable Audio/Video Science Software Storage Tablets Transportation Wearables Wireless Acer Amazon AMD Apple ASUS AT&T Blackberry Canon Dell Facebook Google HP HTC Intel Lenovo LG Microsoft Nikon Nintendo Nokia NVIDIA Samsung Sony Sprint T-Mobile Verizon About UsSubscribeLike Engadget@engadgettip uswhen.eng("eng.nav.init")when.eng("eng.tips.init") onBreak({980: function () {htmlAdWH("93312530", "215", "35",'AJAX','ajaxsponsor');}});Bluebox reveals Android security hole, may affect 99 percent of devices MobileBypostedJul 4th, 2013 at 12:08 AM 0

Bluebox reveals Android security vulnerability, supposedly affects up to 99 percent of devices

Researchers at Bluebox Security have revealed a disturbing flaw in Android's security model, which the group claims may affect up to 99 percent of Android devices in existence. According to Bluebox, this vulnerability has existed since Android 1.6 (Donut), which gives malicious app developers the ability to modify the code of a legitimate APK, all without breaking its cryptographic signature -- thereby allowing the installation to go unnoticed. To pull off the exploit, a rotten app developer would first need to trick an unknowing user into installing the malicious update, but hackers could theoretically gain full control of a user's phone if the "update" posed as a system file from the manufacturer.

Bluebox claims that it notified Google of the exploit in February. According to CIO, Bluebox CTO Jeff Forristal has named the Galaxy S 4 as the only device that's currently immune to the exploit -- which suggests that a security patch may already exist. Forristal further claims that Google is working on an update for its Nexus devices. In response to our inquiry, Google told us that it currently has no comment. We certainly hope that device manufacturers do the responsible thing and distribute timely security patches to resolve this issue. Absent that, you can protect yourself by installing updates through the Play Store and Android's built-in system update utility.

when.eng("eng.perm.init")

Elegant Kitsch on Display at Maison Margiela Couture

The secondhand vintage on display at Maison Martin Margiela couture show was as elegant as it was playfully weird. As usual, the elusive Belgian designer collective kept his models' identity under wraps with face-masks; this time, they were beaded, sequined, and adorned with fabric flowers. Those brilliantly exaggerated masks, paired with a collection made from reworked vintage fabrics and appliques, continued to demonstrate the house's expertise when it comes to tailoring. As noted by WWD, they might have presented the greenest collection this week by recycling decades-old clothing.

Rare finds, like pastel fifties-era prom dresses, were reworked into cheerful, sheer voluminous coats; a costume worn by a thirties-era Beijing Opera star was turned into a sumptuous floor-length smoking jacket. To switch it up even more, Margiela also threw in high-concept casual looks including low-slung jeans and modern latex trench coats, T-shirts, and pants that actually looked wearable. Click through our slideshow for all the floral and bedazzled masks you can handle.


View the original article here

Latest Humble e-book Bundle lets you pick your own price for unicorns, Wheaton

DNP Latest Humble ebook Bundle shakes bones, finds a geeky final unicorn

For the next two weeks, you can snag four e-books for whatever price you want with the second Humble e-book Bundle. As always, each contribution benefits whoever you prefer, be it the authors, charity, Humble itself or a combination of the three. If you want access to all six books, as per the Humble pricing model you need to kick in a sum greater than the average $9.40 donation. For less than a few gallons of gas you'll net Wil Wheaton's Just a Geek and Peter Beagle's The Last Unicorn in addition to the other four tomes shown below. The sun hasn't set on the first day of this six-pack promo and over $150K's been donated so far. Reading-on-the-beach season's half over, so get crackin'!

The Last Unicorn - Peter BeagleJust a Geek - Wil WheatonLittle Brother - Cory DoctorowBoneshaker - Cherie PriestSpin - Robert Charles WilsonShards of Honor - Lois McMaster Bujold

when.eng("eng.perm.init") lab.script("http://zor.fyre.co/wjs/v1.0/javascripts/CommentCount.js");// iOS scaling fix(function(e){var c="addEventListener",b="gesturestart",g="querySelectorAll",f=[1,1],d=g in e?e[g]("meta[name=viewport]"):[];function a(){d.content="width=device-width,minimum-scale="+f[0]+",maximum-scale="+f[1];e.removeEventListener(b,a,true)}if((d=d[d.length-1])&&c in e){a();f=[0.25,1.6];e[c](b,a,true)}}(document));// hide chrome on mobile/mobile/i.test(navigator.userAgent) && !location.hash && setTimeout(function () { if (!pageYOffset) window.scrollTo(0, 1);}, 1000);

View the original article here

GIF Tutorial: How to Create a Grown-Up Ponytail

In a new series, hairstylist Wesley O'Meara helps us understand the art of hairstyling through step-by-step moving image tutorials.

So you've learned how to use those Velcro rollers to add volume. But day three of your blowout requires a new take on your amped-up hair: Sweep it back into a sophisticated, grown-up pony. It's more controlled and sits just below that bump in the back of your head (the occipital bone), kind of like where dude ponytails are usually located. And "covering the ponytail elastic makes the difference between going out at night and going to the grocery store," O'Meara explains.

Here, Redken's Quick Tease Backcombing spray was used to give extra volume during the teasing process and L'Oreal's Elnet provided styling control. Use any hairspray you prefer.

Step 1: Section by action, lightly tease hair and spritz hair spray into the roots. Tease through the "volume zone" (in the front of the head) to the back occipital bone. Tip: A boar bristle brush, made for teasing, won't tangle and knot up hair. Paddle brushes and combs have a tendency to break hair. 

Step 2: After teasing, gently brush back hair. Add more hairspray to help with control, instead of more brushing, which will only flatten out all that teasing you just finished.  

Step 3: Use your fingers to scrape hair back into a pony. Tip: The more imperfections there are, the more elegant it will look.

Step 4: Tie down the ponytail at the top of your neck.

Step 5: Use your fingers to push up hair, which adds more lift at the roots.

Step 6: Grab a piece of hair from underneath the ponytail and wrap it around the elastic a few times. To secure the end, take a French pin and weave it through the elastic by entering the pony, then inverting the pin before securing it.

Step 7: Finish with a last squirt of hairspray for hold.

Step 8: Pull a few little pieces of hair out from the sides for a soft, more wispy effect.


View the original article here

Nokia's Here Maps service comes to the Asha 501, beta release available now for download

Nokia's Here Maps service comes to the Asha 501, beta release available now for download data = {blogUrl: "www.engadget.com",v: 400};when = {jquery: lab.scriptBs("jquery"),plugins: lab.scriptBs("plugins"),eng: lab.scriptBs("eng")}; var s265prop9 = ('20648465' !== '') ? 'bsd:20648465' : ''; var postID = '20648465'; var modalMNo = '93319229', modalVideoMNo = '93320648', modalGalleryMNo = '93304207'; when.eng("eng.omni.init", {pfxID:"weg",pageName:document.title,server:"acp-ld39.websys.aol.com",channel:"us.engadget", s_account: "aolwbengadget,aolsvc", short_url: "",pageType:"",linkInternalFilters:"javascript:,",prop1:"article",prop2:"cellphones",prop9:s265prop9,prop12:document.location,prop17:"",prop18:"",prop19:"",prop20:"", prop22:"sarah-silbert", prop54:"blogsmith",mmxgo: true }); adSendTerms('1')adSetMOAT('1');adSetAdURL('/_uac/adpagem.html');lab._script("http://o.aolcdn.com/os/ads/adhesion/js/adhads-min.js").wait(function(){var floatingAd = new AdhesiveAd("348-14-15-14d",{hideOnSwipe:true});}); onBreak({980: function () { adSetType("F");htmlAdWH("93319229", "LB", "LB"); adSetType("");}}); EngadgetMenu NewsReviews Features Galleries VideosEventsPodcasts Engadget ShowTopics Buyers Guides Sagas Store Hands On More Betterer HD Mobile Alt Announcements Cameras Cellphones Desktops Displays Gaming GPS Handhelds Home Entertainment Household Internet Laptops Meta Misc Networking Peripherals Podcasts Robots Portable Audio/Video Science Software Storage Tablets Transportation Wearables Wireless Acer Amazon AMD Apple ASUS AT&T Blackberry Canon Dell Facebook Google HP HTC Intel Lenovo LG Microsoft Nikon Nintendo Nokia NVIDIA Samsung Sony Sprint T-Mobile Verizon About UsSubscribeLike Engadget@engadgettip uswhen.eng("eng.nav.init")when.eng("eng.tips.init") onBreak({980: function () {htmlAdWH("93308280", "215", "35",'AJAX','ajaxsponsor');}});Nokia's Here Maps service comes to the Asha 501, beta release available now for download MobileBypostedJul 3rd, 2013 at 9:03 PM 0

DNP Nokia's Here Maps comes to the Asha 501, beta release available now for download

The touchscreen Asha 501 Nokia unveiled back in May will now work with Here Maps, the company announced on its blog today. The navigation service is already available on Windows Phone 8, Firefox OS, Android and iOS, and its arrival on the Asha platform will boost that operating system's more modest selection of apps. Available now as a beta release, Here Maps for the Asha 501 offers turn-by-turn navigation and real-time traffic information. It's designed specifically for low-end smartphones without GPS on board, and Nokia's post notes that the current version "is a starting point and we will improve the experience over time." Upcoming changes will likely include improved satellite images, which the company says will soon be updated to a higher quality. Asha 501 users in select countries can nab the Here Maps beta via the source link below.

when.eng("eng.perm.init")

Nokia Lumia 1020 for AT&T possibly spied with Pro Cam app

Nokia Lumia 1020 for AT&T possibly spied with Pro Cam app data = {blogUrl: "www.engadget.com",v: 400};when = {jquery: lab.scriptBs("jquery"),plugins: lab.scriptBs("plugins"),eng: lab.scriptBs("eng")}; var s265prop9 = ('20648945' !== '') ? 'bsd:20648945' : ''; var postID = '20648945'; var modalMNo = '93319229', modalVideoMNo = '93320648', modalGalleryMNo = '93304207'; when.eng("eng.omni.init", {pfxID:"weg",pageName:document.title,server:"acp-ld39.websys.aol.com",channel:"us.engadget", s_account: "aolwbengadget,aolsvc", short_url: "",pageType:"",linkInternalFilters:"javascript:,",prop1:"article",prop2:"mobile",prop9:s265prop9,prop12:document.location,prop17:"",prop18:"",prop19:"",prop20:"", prop22:"jon-fingas", prop54:"blogsmith",mmxgo: true }); adSendTerms('1')adSetMOAT('1');adSetAdURL('/_uac/adpagem.html');lab._script("http://o.aolcdn.com/os/ads/adhesion/js/adhads-min.js").wait(function(){var floatingAd = new AdhesiveAd("348-14-15-14d",{hideOnSwipe:true});}); onBreak({980: function () { adSetType("F");htmlAdWH("93319229", "LB", "LB"); adSetType("");}}); EngadgetMenu NewsReviews Features Galleries VideosEventsPodcasts Engadget ShowTopics Buyers Guides Sagas Store Hands On More Betterer HD Mobile Alt Announcements Cameras Cellphones Desktops Displays Gaming GPS Handhelds Home Entertainment Household Internet Laptops Meta Misc Networking Peripherals Podcasts Robots Portable Audio/Video Science Software Storage Tablets Transportation Wearables Wireless Acer Amazon AMD Apple ASUS AT&T Blackberry Canon Dell Facebook Google HP HTC Intel Lenovo LG Microsoft Nikon Nintendo Nokia NVIDIA Samsung Sony Sprint T-Mobile Verizon About UsSubscribeLike Engadget@engadgettip uswhen.eng("eng.nav.init")when.eng("eng.tips.init") onBreak({980: function () {htmlAdWH("93308280", "215", "35",'AJAX','ajaxsponsor');}});Nokia Lumia 1020 for AT&T possibly spied with Pro Cam app MobileBypostedJul 3rd, 2013 at 10:31 PM 0

Nokia Lumia 1020 for AT&T reportedly spied with Pro Cam app

Wondering what the Nokia EOS (aka Lumia 1020) will look like in US trim? This may be your first glimpse: @evleaks has posted a press image of the device in its AT&T form. If accurate, it represents our first proper view of the flagship Windows Phone's front side, and it suggests that we're looking at a subtle evolution of the Lumia 920 from this angle. Look closely at the software, however. There's a previously unknown Nokia Pro Cam app, which hints that Lumia 1020 owners will get more than just a tweaked version of the Smart Camera app on the Lumia 925. Presumably, this would include extra controls to tame the camera's 41 million pixels. There's no launch details or other tidbits included with the as yet unconfirmed image, although there's a real chance that we'll see a lot more around July 11th.

when.eng("eng.perm.init")

Leopard-Print Hair at Jean Paul Gaultier Couture

Everyone, Jean Paul Gaultier has an announcement to make: More leopard print. Exemplified at his couture show, the French designer decked out hats, fur coats, floor-length dresses, clutches, and even wrists in the jungle print. Nothing was safe, not even models' hair, which were be-speckled with the animal's signature spots. While some heads sported sleek, aerodynamic twists, topped off with hats in various conical shapes, those without headgear got sky-high 'dos. Swirly and sculptural, it's possibly part Cindy Lou Who, part The Jungle Book, and we can't wait to see it on Madonna.


View the original article here