Hasta La Gadget!

The Dell Hybrid Power Adapter is essentially a power brick and a power bank that lets users have backup power for their notebook even when they’re not close to an outlet. It’s a modular power adapter with a 2-in-1 design that lets users carry one or both the adapter and power bank. Some of those hybrid adapters have now been recalled due to shock risks.

Dell has issued a recall of the Hybrid Power Adapter versions that it made between January 2017 and March 2017. The recall comes following 11 reports of the adapters breaking and exposing internal components. That is what creates the shock risk. Some 8,900 of the affected adapters are in the United States.

Those who have one can check if they need to send theirs back by looking at the manufacturing code. The affected units have the following manufacturing code printed on the back: “CN-05G53P – LOC00 – XXX – XXXX – AXX,” the “X” here represents a number.

Dell sold these adapters through its own website in addition to Amazon and other online retailers. It’s offering free replacements for all customers that are affected by the recall. The company is also selling later versions of the Hybrid Power Adapter as they don’t pose a shock risk to users.

Some Dell Hybrid Laptop Power Adapters Have Been Recalled

, original content from Ubergizmo. Read our Copyrights and terms of use.

Lenovo’s Watch X was widely panned as “absolutely terrible.” As it turns out, so was its security.

The low-end $50 smart watch was one of Lenovo’s cheapest smart watches. Available only for the China market, anyone who wants one has to buy one directly from the mainland. Lucky for Erez Yalon, head of security research at Checkmarx, an application security testing company, he was given one from a friend. But it didn’t take him long to find several vulnerabilities that allowed him to change user’s passwords, hijack accounts, and spoof phone calls.

Because the smart watch wasn’t using any encryption to send data from the app to the server, Yalon said he was able to see his registered email address and password sent in plain text, as well as data about how he was using the watch, like how many steps he was taking.

“The entire API was unencrypted,” said Yalon in an email to TechCrunch. “All data was transferred in plain-text.”

The API that helps power the watch was easily abused, he found, allowing him to reset anyone’s password simply by knowing a person’s username. That could’ve given him access to anyone’s account, he said.

Not only that, he found that the watch was sharing his precise geolocation with a server in China. Given the watch’s exclusivity to China, it might not be a red flag to natives. But Yalon said the watch had “already pinpointed my location” before he had even registered his account.

Yalon’s research wasn’t just limited to the leaky API. He found that the Bluetooth-enabled smart watch could also be manipulated from nearby, by sending crafted Bluetooth requests. Using a small script, he demonstrated how easy it was to spoof a phone call on the watch.

Using a similar malicious Bluetooth command, he could also set the alarm to go off — again and again. “The function allows adding multiple alarms, as often as every minute,” he said.

Lenovo didn’t have much to say about the vulnerabilities, besides confirming their existence.

“The Watch X was designed for the China market and is only available from Lenovo to limited sales channels in China,” said spokesperson Andrew Barron. “Our [security team] team has been working with the [original device manufacturer] that makes the watch to address the vulnerabilities identified by a researcher and all fixes are due to be completed this week.”

Yalon said that encrypting the traffic between the watch, the Android app, and its web server would prevent snooping and help reduce manipulation.

“Fixing the API permissions eliminates the ability of malicious users to send commands to the watch, spoof calls, and set alarms,” he said.

Dating apps including Tinder and Grindr have failed to prevent child sexual exploitation on their platforms, in part due to weak age verification measures, according to a new report by the Sunday Times.

Read more…

The Dell Hybrid Power Adapter is essentially a power brick and a power bank that lets users have backup power for their notebook even when they’re not close to an outlet. It’s a modular power adapter with a 2-in-1 design that lets users carry one or both the adapter and power bank. Some of those hybrid adapters have now been recalled due to shock risks.

Dell has issued a recall of the Hybrid Power Adapter versions that it made between January 2017 and March 2017. The recall comes following 11 reports of the adapters breaking and exposing internal components. That is what creates the shock risk. Some 8,900 of the affected adapters are in the United States.

Those who have one can check if they need to send theirs back by looking at the manufacturing code. The affected units have the following manufacturing code printed on the back: “CN-05G53P – LOC00 – XXX – XXXX – AXX,” the “X” here represents a number.

Dell sold these adapters through its own website in addition to Amazon and other online retailers. It’s offering free replacements for all customers that are affected by the recall. The company is also selling later versions of the Hybrid Power Adapter as they don’t pose a shock risk to users.

Some Dell Hybrid Laptop Power Adapters Have Been Recalled

, original content from Ubergizmo. Read our Copyrights and terms of use.

A Grammys rep said producers thought the Best Rap Song winner was done, but the timing looked suspicious.