Apple iPhone 4 with iOS 4.3 (8F190) suffers from a passphrase disclosure vulnerability that allows all local processes access to it.

This whitepaper details some of the vulnerabilities observed over the past year while performing regular security assessments of iPhone and iPad applications. MDSec documents some of the vulnerabilities identified as well as the methods to exploit them, and recommendations that developers can adopt to protect their iOS applications. It covers not only the security features of the platform, but provides in depth information on how to perform both black box and white box iOS penetration tests, along with suggested methodologies and compliance.

A heap memory buffer overflow vulnerability exists within the WebKit's JavaScriptCore JSArray::sort(...) method. The exploit for this vulnerability is javascript code which shows how to use it for memory corruption of internal JS objects (Unit32Array and etc.) and subsequent arbitrary code execution (custom ARM/x64 payloads can be pasted into the JS code). This exploit affects Apple Safari version 6.0.1 for iOS 6.0 and OS X 10.7/8. Earlier versions may also be affected. It was obtained through the Packet Storm Bug Bounty program.

A heap memory buffer overflow vulnerability exists within the WebKit's JavaScriptCore JSArray::sort(...) method. This method accepts the user-defined JavaScript function and calls it from the native code to compare array items. If this compare function reduces array length, then the trailing array items will be written outside the "m_storage->m_vector[]" buffer, which leads to the heap memory corruption. This finding was purchased through the Packet Storm Bug Bounty program.

This tool is a wrapper for the reaver WPS attack toolkit. As there is no automatic way to prescan, decide, and then start the attack, this wrapper takes care of it. Written in perl.

Fall has arrived, and with it comes fundraising season. More than one-third of charitable giving happens in the last three months of the year, and the emergence of Giving Tuesday (on November 28 this year) makes the year's end even more critical for charities.

Feeling overwhelmed? Your local NetSquared group is here to help with free, in-person events being held across the U.S. and the globe.

Naples, Florida, is hosting a meetup on tools for effective email fundraising; Chippewa Falls, Wisconsin, is hosting a series of Giving Tuesday brainstorming sessions; and Chicago, Illinois, will explore how your CRM can save end-of-year fundraising plans.

With more than 75 events scheduled for October, there's probably an event scheduled for your community, so RSVP now for one of our meetups.

Join us!

Upcoming Tech4Good Events

This roundup of face-to-face nonprofit tech events includes meetups from NetSquared, NTEN's Tech Clubs, and other awesome organizations. If you're holding monthly events that gather the #nptech community, let me know, and I'll include you in the next community calendar, or apply today to start your own NetSquared group.

Jump to events in North America or go international with events in

• Africa and Middle East
• Asia and Pacific Rim
• Central and South America
• Europe and U.K.

North America

Monday, October 2, 2017

• Vancouver, British Columbia: Photojournalism for Nonprofits and Small Businesses #Storymakers2017

Tuesday, October 3, 2017

• Portland, Oregon
  • Happy Hour with Nonprofit Tech Luminaries
  • NTEN Presents: Oregon Nonprofit Tech Roundup
• Montréal, Québec: Développer une Présence Web Efficace
• Naples, Florida: Tools for Effective Email Communication
• Mason, Ohio: Connecting Nonprofits and Techies in Cincinnati

Wednesday, October 4, 2017

• Pittsburgh, Pennsylvania: Bagels and Bytes — Allegheny
• Baltimore, Maryland: WordPress 101 and Tech Help and Consultations
• San Francisco, California: Code for America Civic Hack Night (Weekly)

Thursday, October 5, 2017

• Calgary, Alberta: Evening on Data Ethics

Friday, October 6, 2017

• Seattle, Washington: King County Executive Director Forum

Monday, October 9, 2017

• Chippewa Falls, Wisconsin: Giving Tuesday Brainstorming

Tuesday, October 10, 2017

• Columbus, Ohio: Nonprofit IT Forum
• Decatur, Illinois: Free and Low-Cost Resources for Nonprofit Software
• Ottawa, Ontario: Review Progress on Data Analysis Projects

Wednesday, October 11, 2017

• Mason, Ohio: Help Create an App for Homeless to Manage Money More Effectively
• San Francisco, California: Code for America Civic Hack Night (Weekly)
• Boston, Massachusetts: Tech Networks of Boston Roundtable: Building an Effective Data Culture at Your Nonprofit
• O’Fallon, Missouri: Learn How to Apply for a $10,000 per Month Google AdWords Grant
• Phoenix, Arizona: Website Building 101: Quick and Easy Web Presence for Nonprofits
• Los Angeles, California: Nonprofit Volunteer Management
• Chicago, Illinois: Net Neutrality

Thursday, October 12, 2017

• Chicago, Illinois: It's Never Too Late: How Your CRM Can Save End-of-Year Fundraising
• Seattle, Washington: What You Need to Know About Board Governance

Saturday, October 14, 2017

• Saint Paul, Minnesota: Minnesota Blogger Conference | by Get Social Events, the Social Media Breakfast Folks ($25)

Monday, October 16, 2017

• San Francisco, California: Social Impact in Tech: Panel Discussion with LinkedIn, Lyft, and Salesforce
• Chippewa Falls, Wisconsin: Giving Tuesday Brainstorming
• Seattle, Washington: Fall Nonprofit Technology Speed Geek

Tuesday, October 17, 2017

• Buffalo, New York: Essential Data Management
• Orlando, Florida: Tech4Good Orlando October: Search Engine Optimization and Strategy

Wednesday, October 18, 2017

• San Francisco, California: Code for America Civic Hack Night (Weekly)
• Houston, Texas: NetSquared Houston
• Research Triangle Park, North Carolina: Crowdsourcing Change: The Social Web to Nonprofits

Thursday, October 19, 2017

• Monroeville, Pennsylvania: TechNow 2017 Conference
• Sweet Briar, Virginia: Using Data to Reach Your Audience

Friday, October 20, 2017

• West Chester, Ohio: Southwest Ohio Give Camp
• Boston, Massachusetts: Tech Networks of Boston Roundtable: Can Appmaker Help You? A Free Database Tool from Google

Monday, October 23, 2017

• Chippewa Falls, Wisconsin: Giving Tuesday Brainstorming
• Austin, Texas: Engaging the Millennial Donor

Tuesday, October 24, 2017

• Vancouver, British Columbia: How Delivering Webinars Can Benefit Your Mission

Wednesday, October 25, 2017

• Baltimore, Maryland: Salesforce 101 for Nonprofits and Free Tech Help and Guidance
• San Francisco, California: Code for America Civic Hack Night (Weekly)
• Seattle, Washington: Recruit, Engage, and Retain a Great Board

Monday, October 30, 2017

• Chippewa Falls, Wisconsin: Giving Tuesday Brainstorming

Tuesday, October 31, 2017

• Seattle, Washington: Bolder and Wiser: Nonprofit Advocacy Rights (Part 2)

Central and South America

Wednesday, October 4, 2017

• Guatemala City, Guatemala: Pechakucha Guatemala — Historias Digitales Vol. 15

Africa and Middle East

Sunday, October 1, 2017

• Cotonou, Benin: L'Utilité des Logiciels de TechSoup dans la Progression d Nos ONG dans le Monde
• Kampala, Uganda: Digital Storytelling for Nonprofits Workshop

Monday, October 2, 2017

• Ouagadougou, Burkina Faso: Monthly Meeting of Local Members

Saturday, October 7, 2017

• Matloding, South Africa: Technology for Rural Development
• Bunda, Tanzania: Microsoft Cloud Computing
• Morogoro, Tanzania: Role of ICT for Farm Management

Wednesday, October 11, 2017

• Bamenda, Cameroon: How to Create Digital Stories

Friday, October 13, 2017

• Katabi, Uganda: Using Social Media Applications for Development
• Pangani, Tanzania: Storymakers Campaign

Saturday, October 14, 2017

• Bunda, Tanzania: Microsoft Cloud Computing

Sunday, October 15, 2017

• Cotonou, Benin: Les Logiciels Mis en Don par Techsoup.org pour les ONG et Association au Benin

Saturday, October 21, 2017

• Bunda, Tanzania: Microsoft Cloud Computing

Saturday, October 28, 2017

• Bunda, Tanzania: Microsoft Cloud Computing
• Morogoro, Tanzania: Technology for Livelihood Improvement

Asia and Pacific Rim

Tuesday, October 3, 2017

• Taipei, Taiwan: NGO要怎麼搞群眾募資？- 綠盟經驗談

Wednesday, October 4, 2017

• Singapore, Singapore: DataJam!

Tuesday, October 10, 2017

• Wellington, New Zealand: Set Your Email Newsletter on Fire | Net2Welly Oct '17 Meetup

Sunday, October 15, 2017

• Jakarta, Indonesia: Web Hosting

Europe and U.K.

Tuesday, October 3, 2017

• Paris, France: AdWords Express — Grands Débutants

Wednesday, October 4, 2017

• Puidoux, Switzerland: 7ème Journée Pédagogique ESV-SPV (AVMES/AVMD)

Friday, October 6, 2017

• Carouge, Switzerland: 12h de Hackaton pour Afficher les Termes et Conditions, Que Vous Ne Lirez Jamais

Saturday, October 7, 2017

• Genève, Switzerland: LINforum3 Partage Idée, Réflexion, Projet, Startup, Service … Responsables!

Wednesday, October 11, 2017

• Cambridge, United Kingdom: Social Media Surgery — Hands-on Help with Social Media

Thursday, October 12, 2017

• Paris, France: La Data pour Vous Renforcer

Saturday, October 14, 2017

• Pully, Switzerland: Intergen.Digital à Pully

Monday, October 16, 2017

• Birmingham, United Kingdom: Social Media Session

Tuesday, October 17, 2017

• Dublin, Ireland: Smart Cities for Good

Wednesday, October 18, 2017

• Paris, France: Forum National des Associations et des Fondations
• Bordeaux, France: Les Personas pour Optimiser Votre Conversion

Thursday, October 19, 2017

• Bath, United Kingdom: Tech for Good Community Mapping
• Paris, France: Brainstorming, Plans d'Actions sur Internet

Wednesday, October 25, 2017

• Manchester, United Kingdom: Tech for Good: At the BBC
• Paris, France: AdWords – Initiation
• Paudex, Switzerland: RdV4–0.ch: 3. Solutions Informatiques — Cloud — SaaS — Services en Ligne

Thursday, October 26, 2017

• Barcelona, Spain: ¡Relanzamos NetSquared Barcelona! ¡Te Esperamos!
• Paris, France: Analytics — Initiation

Tuesday, October 31, 2017

• Renens, Switzerland: OpenLab: Visite du Fablab de Renens

Left photo: Gregory Munyaneza / NetSquared Rwanda / CC BY

Center photo: Chrispin Okumu / NetSquared Kenya / CC BY

Right photo: Chrispin Okumu / NetSquared Kenya / CC BY

spanhidden

Sustainability is gaining traction in the creative industries, with the Italian region of Trentino designing a film production rating protocol that is being considered by the EU.

Bangladesh minister for ICT Zunaid Ahmed Palak talks to Jacopo Dettoni about the government’s ambitious Digital Bangladesh programme designed to reach village level. 

Here’s the latest wrinkle in the battery boom: National Grid Plc is paying consumers to tap electricity from their power-storage systems.

The Massachusetts Department of Public Utilities has issued an order approving long-term contracts for 9,554,940 MWh annually of hydropower between H.Q. Energy Services (U.S.) Inc. and the Commonwealth’s electric distribution companies through the New England Clean Energy Connect 100% Hydro project (NECEC Hydro).

Global manufacturer Apple today announced it has nearly doubled the number of suppliers that have committed to run their Apple production on 100 percent clean energy, bringing the total number to 44. Because of this partnership between Apple and its suppliers, Apple will exceed its goal of bringing 4 gigawatts of renewable energy into its supply chain by 2020, with over an additional gigawatt projected within that timeframe.

On Thursday, Puerto Rico’s Governor Ricardo Rosselló signed into law the Puerto Rico Energy Public Policy Act which lays the groundwork for the island’s transition to 100 percent clean energy by 2050.

The European Commission has approved a €385 million (US$429.7 million) renewable energy scheme to support renewables generation in Lithuania, including hydroelectric power.

State-run NTPC Ltd., India’s largest coal-fired power producer, is appointing a new head of its renewables team to speed up its expansion into clean energy, according to a company official with knowledge of the plan.

BMW has been spotted testing what appears to be a new performance flagship for the M5 range. Word on the street is that the car, which will likely be dubbed an M5 CS, is powered by a newly developed V-8. Porsche looks to be readying a Cayenne GTS Coupe to help bridge the performance gap between the S and Turbo. The new variant should debut next...

Utilities across the country are increasingly taking a proactive role on initiatives to advance clean energy and grid modernization. But to hear a utility CEO like Kipp focus unequivocally on one of the most critical drivers for the growth of solar and storage was striking — and yet another sign of the sector’s ongoing transformation.

It’s been a turbulent and exciting 2018 over at Renewable Energy World. We have a new parent company, Clarion Energy, and we, as a media outlet, are doing more than ever to support the dynamic and top-quality energy events in the Clarion Energy Power and Energy Series, with shows focused on energy all across the globe.

Here’s the latest wrinkle in the battery boom: National Grid Plc is paying consumers to tap electricity from their power-storage systems.

European Union negotiators are endorsing an accelerated overhaul of the bloc’s carbon market after the price of emission rights fell to levels that fail to deter polluters.

The European Commission's Climate Change Committee has approved a transfer of US$19.3 million in funding for tidal energy developer Atlantis Resources from the Kyle Rhea project to its 398-MW MeyGen project.

Hydroelectric power developer Snowdonia Pumped Hydro has withdrawn its application for environmental permits for the 99.9-MW Glyn Rhonwy pumped-storage plant from Natural Resources Wales.

India’s Cabinet Committee on Economic Affairs announced today it has approved investment for the generation component of the 900-MW Arun 3 hydropower project on Arun River in Sankhuwasabha district of eastern Nepal, for an estimated Rs. 5723.72 crore (US$854.4 million).
 

On Monday, Duke Energy announced a proposal to make what it says is the largest investment in electric vehicle (EV) infrastructure ever in the Southeast – a $76 million initiative to spur EV adoption across the state.

Genex Power Limited has secured all environmental approvals required to develop the 250-MW Kidston Pumped Storage Hydro Project (K2-Hydro).

Global manufacturer Apple today announced it has nearly doubled the number of suppliers that have committed to run their Apple production on 100 percent clean energy, bringing the total number to 44. Because of this partnership between Apple and its suppliers, Apple will exceed its goal of bringing 4 gigawatts of renewable energy into its supply chain by 2020, with over an additional gigawatt projected within that timeframe.

On Thursday, Puerto Rico’s Governor Ricardo Rosselló signed into law the Puerto Rico Energy Public Policy Act which lays the groundwork for the island’s transition to 100 percent clean energy by 2050.

This week, Duke Energy announced that regulators have approved two projects involving energy storage worth about $30 million.

State-run NTPC Ltd., India’s largest coal-fired power producer, is appointing a new head of its renewables team to speed up its expansion into clean energy, according to a company official with knowledge of the plan.

Here’s the latest wrinkle in the battery boom: National Grid Plc is paying consumers to tap electricity from their power-storage systems.

Presentation by Yash Sutariya of Saturn Electronics Corporation

Presentation by Tom Lantzer of DuPont Circuit and Packaging Materials

Presentation by Jeff Duce of Boeing

Presentation by Joe Fjelstad of Silicon Pipe, Inc.

For years, climate contrarians have pointed to snowfall and cold weather to question the scientific reality of human-induced climate change.

Solar Wind Energy Tower Inc. won approval from an Arizona city to develop a $1.5 billion project that would use ambient desert heat to create a draft to generate electricity, in a concrete colossus that would be the tallest structure in North America.

For many mining companies, the rallying cry for investigating solar or wind energy options has been that the price of oil and other conventional fuels is too high — and will almost certainly rise over time. Now, though, with oil prices having taken a dramatic nosedive, this argument no longer packs quite the same punch that it once did.

Apple Inc. may already be positioned to evolve into a global automaker in many ways that other Silicon Valley companies aren’t.

The first round of the Contracts for Difference (CfD) programme — the UK scheme that is designed to support low-carbon generation and a capacity margin in the energy sector — has concluded. Contracts were offered to 27 renewable electricity projects with a total value of some £315 million (US$500 million), which include two offshore wind farms with a total planned capacity of more than 1.1 GW, 15 onshore wind projects and five solar projects. In total, more 2 GW of new low-carbon capacity (including renewables, nuclear and carbon capture and storage) could be built under the CfD scheme.

European Union negotiators are endorsing an accelerated overhaul of the bloc’s carbon market after the price of emission rights fell to levels that fail to deter polluters.

An upcoming virtual conference to share Australian insights in engineering research and technology innovation, and avenue to exchange research ideas with Malaysian researchers.

Digitalization has become a worldwide focus and the race to become the global leader in Artificial Intelligence (AI) is becoming increasingly competitive, with many countries, including Canada, China, and the UK releasing strategies in the last twenty months to promote the use and development of AI.

The global strategy for mitigating climate change is no secret. Most countries have embarked on an initiative to transition to clean energy sources. According to a study by scientists from the universities of Oxford and Utrecht, we will almost certainly pass a point of no return for dealing with global warming if governments worldwide don’t transition away from fossil fuels, such as coal and natural gas, towards renewable energy by 2035. This would mean that renewables would need to see their total share of power generation increase by at least two percent per year.

Global manufacturer Apple today announced it has nearly doubled the number of suppliers that have committed to run their Apple production on 100 percent clean energy, bringing the total number to 44. Because of this partnership between Apple and its suppliers, Apple will exceed its goal of bringing 4 gigawatts of renewable energy into its supply chain by 2020, with over an additional gigawatt projected within that timeframe.