Connect with us

Technology

The Arc browser that lets you customize websites had a serious vulnerability

Published

on

The Arc browser that lets you customize websites had a serious vulnerability

One of the feature that separates the Arc browser from its competitors is the ability to customize websites. The feature called “Boosts” allows users to change a website’s background color, switch to a font they like or one that makes it easier for them to read and even remove an unwanted elements from the page completely. Their alterations aren’t supposed to be be visible to anyone else, but they can share them across devices. Now, Arc’s creator, the Browser Company, has admitted that a security researcher found a serious flaw that would’ve allowed attackers to use Boosts to compromise their targets’ systems.

The company used Firebase, which the security researcher known as “xyzeva” described as a “database-as-a-backend service” in their post about the vulnerability, to support several Arc features. For Boosts, in particular, it’s used to share and sync customizations across devices. In xyzeva’s post, they showed how the browser relies on a creator’s identification (creatorID) to load Boosts on a device. They also shared how someone could change that element to their target’s identification tag and assign that target Boosts that they had created.

If a bad actor makes a Boost with a malicious payload, for instance, they can just change their creatorID to the creatorID of their intended target. When the intended victim then visits the website on Arc, they could unknowingly download the hacker’s malware. And as the researcher explained, it’s pretty easy to get user IDs for the browser. A user who refer someone to Arc will share their ID to the recipient, and if they also created an account from a referral, the person who sent it will also get their ID. Users can also share their Boosts with others, and Arc has a page with public Boosts that contain the creatorIDs of the people who made them.

In its post, the Browser Company said xyzeva notified it about the security issue on August 25 and that it issued a fix a day later with the researcher’s help. It also assured users that nobody got to exploit the vulnerability, no user was affected. The company has also implemented several security measures to prevent a similar situation, including moving off Firebase, disabling Javascript on synced Boosts by default, establishing a bug bounty program and hiring a new senior security engineer.

Advertisement

Source link

Continue Reading
Advertisement
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Technology

Soulbound unveils Web3 livestreaming at TwitchCon

Published

on

Soulbound unveils Web3 livestreaming at TwitchCon

Soulbound unveiled its Web3 livestreaming platform today at TwitchCon 2024 in San Diego, California.

Soulbound went to the big event for streamers and creators to showcase how blockchain technology can transform the livestreaming experience for gamers, streamers, and developers.

Backed by investors including Animoca Brands, NGC Ventures, and Big Brain Holdings, Soulbound raised $4 million recently. It is introducing its decentralized technology platform to a global audience of gaming enthusiasts.

The platform aims to provide gamers and content creators with tools to connect, compete, and earn in a transparent and secure Web3 environment. Game studios can also benefit from access to an engaged Web3 gaming community, offering new ways to boost visibility and drive participation, the company said.

Advertisement

Join us for GamesBeat Next!

GamesBeat Next is connecting the next generation of video game leaders. And you can join us, coming up October 28th and 29th in San Francisco! Take advantage of our buy one, get one free pass offer. Sale ends this Friday, August 16th. Join us by registering here.


Soulbound’s Web3 livestreaming platform changes how content creators and gamers can interact with their audiences. Leveraging blockchain, Soulbound introduces features like stream-to-earn, a non-fungible token (NFT) sticker marketplace, and a prediction market, encouraging users to engage more deeply with the content while generating revenue.

These blockchain-powered mechanisms create transparent and automated interactions and allow streamers to monetize their activities fairly and efficiently, Soulbound said.

Advertisement
Casey Grooms is CEO of Soulbound.

Through the platform’s bounty system, game developers can set up prize pools for streamers. Developers deposit funds into a smart contract, coming up with streaming challenges that incentivize participation. Bounty Hunters, or streamers, participate in these challenges over a set period, with rewards distributed based on audience size and time streamed. This transparent mechanism ensures that streamers are compensated proportionally, cultivating a fair and competitive environment.

With a unique prediction market feature viewers can place bets on games or individual players, which generates additional revenue for streamers. This option enhances viewer engagement while allowing streamers to boost their earnings in new, dynamic ways.

Founded in 2021 by A.I. Mansbridge and Casey Grooms, Soulbound is a SocialFi platform designed to help streamers monetize and grow their audiences.


Source link
Continue Reading

Technology

Dcode Capital, Albedo and Biofire are coming to Disrupt 2024

Published

on

TechCrunch Disrupt 2024 Builders Stage Biofire, Albedo, Dcode

In a world where innovation knows no borders, a new trend is rising in the tech ecosystem: national-interest startups. From aerospace and defense to critical infrastructure, these firms are ensuring that innovation directly supports national growth, security, and prosperity. As we approach an inflection point in Silicon Valley’s evolution, the question arises: Can startups rebuild the foundations of an entire nation?

TechCrunch Disrupt 2024 is excited to bring together three distinguished leaders who are making waves in the national-interest startup space. Together, they will share their insights on how new technologies can scale rapidly while serving the strategic interests of their home countries.

Meet the speakers

Rebecca Gevalt, Managing Partner, Dcode Capital

Rebecca Gevalt is the managing partner at Dcode Capital, a venture fund that invests in high-growth technology companies that are poised to revolutionize the U.S. government. With her deep background in both the private and public sectors — including over a decade at the CIA — Rebecca is uniquely positioned to navigate the intersection of government and cutting-edge technology. Her expertise lies in scaling commercial technologies into the federal market, a mission that began with her role at Dcode’s accelerator program and now expands to the broader reach of Dcode Capital.

Topher Haddad, Co-Founder and CEO, Albedo

Topher Haddad, co-founder and CEO of Albedo, is pioneering the commercialization of very low Earth orbit (VLEO) imagery, which will allow for unprecedented levels of resolution previously limited to government and defense. His company’s upcoming satellite launch is set to disrupt the commercial Earth observation industry, enabling new applications across sectors like defense, agriculture, and utilities. Haddad’s background as an engineer at Lockheed Martin and his technical expertise in national security space programs make him a leader in the race to leverage space for national-interest applications.

Advertisement

Kai Kloepfer, Founder and CEO, Biofire

Kai Kloepfer, founder and CEO of Biofire, has brought to market the first biometric “smart gun” in the U.S., a feat that many believed impossible. His firearm, equipped with fingerprint and facial recognition, aims to prevent unauthorized access, significantly enhancing safety for users, law enforcement, and even national defense. Kloepfer’s journey from high school inventor to CEO of a venture-backed company speaks to his commitment to innovation in a highly regulated, politically sensitive space.

Join the conversation at Disrupt 2024

Join us on the Builders Stage at Disrupt 2024 and learn how these trailblazers are positioning technology at the heart of American dynamism — morphing entire industries in ways that prioritize national security, infrastructure, and economic growth. Their collective work is not just about disruptive technology; it’s about building the future of a nation.

Secure your spot today to be among 10,000 startup, tech, and VC leaders who’ll be at Disrupt 2024, taking place at Moscone West in San Francisco from October 28-30. This is your opportunity to participate in a dynamic discussion panel and experience the startup epicenter of the year. Register for your pass here.

Source link

Advertisement

Continue Reading

Technology

Fresh leaks hint at the design of the Samsung Galaxy S25 Ultra flagship

Published

on

The back of the Samsung Galaxy S24 Ultra

There’s no let up in the Samsung Galaxy S25 leaks – and there probably won’t be until the handset series gets unveiled sometime in January – and two new images have made their way online that give us some idea of the design of the Ultra version.

We’ve already heard that the Galaxy S25 Ultra is going to adopt a more rounded design next year that’s more comfortable to hold in the hand, but based on a new post from well-known tipster Ice Universe, the rear camera design won’t be changing much.

Source link

Continue Reading

Technology

Nexus review: Yuval Noah Harari is out of his depth in his new book

Published

on

SAN FRANCISCO - SEPTEMBER 20: Freshly printed copies of the San Francisco Chronicle run through the printing press at one of the Chronicle
SAN FRANCISCO - SEPTEMBER 20: Freshly printed copies of the San Francisco Chronicle run through the printing press at one of the Chronicle's printing facilities September 20, 2007 in San Francisco, California. Newspaper sales in the U.S. continue to slide as people turn to the internet and television for their news. The Chronicle saw its circulation plunge more than 15 percent in 2006 to 398,000 during the week which has hurt newspaper vendor Rick Gaub's business. Unable to sell as many papers as he used to, Gaub is looking for a new way to earn money after selling papers for 42 years. (Photo by Justin Sullivan/Getty Images)

The invention of the printing press helped the distribution of information

Justin Sullivan/Getty Images

Nexus
Yuval Noah Harari (Fern Press, out 10 September)

Reading Nexus is a strange experience. The quality of the text lurches up and down: one minute you are reading something incisive, the next you are wading through banalities.

Advertisement

Its author, Yuval Noah Harari, is a medieval historian most famous for his book Sapiens, a whistlestop history of humanity from the Stone Age to the present day. Its central thesis is that humans came to dominate the planet because we can believe in things that only…

Source link

Continue Reading

Technology

NYT Mini Crossword today: puzzle answers for Sunday, September 22

Published

on

NYT Mini Crossword today: puzzle answers for Saturday, September 21

The New York Times has introduced the next title coming to its Games catalog following Wordle’s continued success — and it’s all about math. Digits has players adding, subtracting, multiplying, and dividing numbers. You can play its beta for free online right now. 
In Digits, players are presented with a target number that they need to match. Players are given six numbers and have the ability to add, subtract, multiply, or divide them to get as close to the target as they can. Not every number needs to be used, though, so this game should put your math skills to the test as you combine numbers and try to make the right equations to get as close to the target number as possible.

Players will get a five-star rating if they match the target number exactly, a three-star rating if they get within 10 of the target, and a one-star rating if they can get within 25 of the target number. Currently, players are also able to access five different puzzles with increasingly larger numbers as well.  I solved today’s puzzle and found it to be an enjoyable number-based game that should appeal to inquisitive minds that like puzzle games such as Threes or other The New York Times titles like Wordle and Spelling Bee.
In an article unveiling Digits and detailing The New York Time Games team’s process to game development, The Times says the team will use this free beta to fix bugs and assess if it’s worth moving into a more active development phase “where the game is coded and the designs are finalized.” So play Digits while you can, as The New York Times may move on from the project if it doesn’t get the response it is hoping for. 
Digits’ beta is available to play for free now on The New York Times Games’ website

Source link

Continue Reading

Technology

Pixel 9 Pro Fold’s charging speed is the slowest among the series

Published

on

Pixel 9 Pro Fold's charging speed is the slowest among the series

Google unveiled the Pixel 9 Pro Fold alongside Pixel 9, Pixel 9 Pro, and Pixel 9 Pro XL last month. For those unaware, the Pixel 9 Pro Fold is the successor of last year’s Google Pixel Fold. Undoubtedly, Google has done a pretty good job with the second iteration of its foldable device. However, like any other smartphone, it isn’t perfect. The Pixel 9 Pro Fold has downsides which are now being noticed, with one related to its charging speed.

The Google Pixel 9 Pro Fold has the slowest wired charging speed of the series

The Google Pixel 9 Pro Fold reportedly has the slowest charging speed compared to other phones from the series. Today, Google confirmed 9to5Google that the Pixel 9 Pro Fold charging speed maxes out at 21W with the wired cable. Google hinted at the maximum power input received by the device based on the charging test carried out by its 45W charger.

That also means the Pixel 9 Pro Fold won’t receive any faster power input than 21W, even if you use a powerful charger. Well, the charging speed we are talking about here for the Pixel 9 Pro Fold is the same as the three-year-old Pixel 6. Surprising, right? Fortunately, this is not the case with other phones from Pixel 9 series.

In fact, all others got some generous charging speed boost from Google. For example, the Pixel 9 Pro XL has a capped wired charging limit of 37W. On the other hand, Google has slightly increased the charging speed on the Pixel 9 and Pixel 9 Pro compared to their predecessors.

Advertisement

Wireless charging capabilities aren’t good either

Are you thinking about wireless charging speed? The Pixel 9 Pro Fold disappoints in that aspect too. It comes with a maximum Qi wireless charging speed of just 7.5W. What’s worse, Google recently confirmed that the Pixel 9 Pro Fold doesn’t work with the Pixel Stand too. Earlier this month, multiple reports hinted that it could be the reason why Google pulled the Pixel Stand 2 from the online Google Store.

All that said, if you want first-hand Android experience on a foldable with good battery life, the Pixel 9 Pro Fold is the right choice for you. However, if you are someone who is a fan of fast charging, this year’s foldable may not please you. But again, are you willing to give up on other aspects just for fast charging? Well, we’ll leave it up to you.

Source link

Continue Reading

Trending

Copyright © 2017 Zox News Theme. Theme by MVP Themes, powered by WordPress.