Latest news from Naked Security (2020/01/23)

Looking for silver linings in the CVE-2020-0601 crypto vulnerability

Is there some good news hidden in the story of the CVE-2020-0601 crypto vulnerability?

UN report alleges that Saudi crown prince hacked Jeff Bezos’s phone

Digital forensic evidence points to the phone’s massive, months-long data egress having likely been triggered by Pegasus mobile spyware.

Apple allegedly made nice with FBI by dropping iCloud encryption plan

Sources told Reuters that Apple may have been convinced by arguments made during the legal fight over cracking the San Bernardino iPhone.

Sonos’s tone-deaf legacy product policy angers customers

Stopping software updates for legacy kit is nothing new, but it’s the way the company has done it that has Sonos customers’ hackles up.

FBI issues warning about lucrative fake job scams

What’s the difference between a real job and a fake one found on the internet? The fake ones are suspiciously easy to get interviews for.
Wildcard SSL