PSA: If you’ve ever used a Sennheiser headset with your Mac, it is wide open to attack

If you’ve ever used a Sennheiser headset or speakerphone device with your Mac (or Windows PC), the accompanying HeadSetup app has left your machine wide open to attack.

In what has been described as a ‘monumental security blunder,’ the app allows a bad actor to successfully impersonate any secure website on the Internet …

ArsTechnica explains.

To allow Sennheiser headphones and speaker phones to work seamlessly with computers, HeadSetup establishes an encrypted Websocket with a browser. It does this by installing a self-signed TLS certificate in the central place an operating system reserves for storing browser-trusted certificate authority roots. In Windows, this location is called the Trusted Root CA certificate store. On Macs, it’s known as the macOS Trust Store.

The critical HeadSetup vulnerability stems from a self-signed root certificate installed by version 7.3 of the app that kept the private cryptographic key in a format that could be easily extracted. Because the key was identical for all installations of the software, hackers could use the root certificate to generate forged TLS certificates that impersonated any HTTPS website on the Internet. Although the self-signed certificates were blatant forgeries, they will be accepted as authentic on computers that store the poorly secured certificate root. Even worse, a forgery defense known as certificate pinning would do nothing to detect the hack.

Although the app encrypted the key with a passphrase, the passphrase itself (SennheiserCC) was stored in plaintext in a configuration file.

“It took us a few minutes to extract the passphrase from the binary,” Secorvo researcher André Domnick told Ars. From then on, he effectively had control of a certificate authority that any computer that had installed the vulnerable Sennheiser app would trust until 2027, when the root certificate was set to expire. Dominick created a proof-of-concept attack that created a single certificate […] that spoofed Google, Sennheiser, and three of Sennheiser’s competitors.

Even if you later uninstalled the app, the certificate would still be trusted. All Mac users who have ever used the HeadSetup app should manually uninstall the certificate by following Sennheiser’s instructions. (The instructions leave out the first step, which is to ensure you’re in the Finder.)

If you still use the app, you can download the latest version of HeadSet, which should also delete the vulnerable certificate, but the safest option would be to do it manually as above first

[“source=forbes]

Victoria Beckham got a last minute haircut in her car on the way to People’s Choice Awards

victoria beckham, ken paves, people's choice awards fashion icon, last minute haircut, victoria beckham haircut ken paves car peoples choice award 2018, indian express, indian express news

Recently, Victoria Beckham was honoured with her first-ever People’s Choice Fashion Icon Award. But what is even more impressive is that the fashion icon decided to style her hair at the last minute where she got her hairstylist Ken Paves to give her a haircut in the back of a moving car en route to the award function. Come to think of it, maybe that’s exactly why she is a fashion icon.

Victoria Beckham took to Instagram and documented her super fast transformation in her Instagram stories. The star wrote, “So we are now doing hair and makeup in the car, just having a quick haircut. Why are you doing this, Ken? Was someone late today?” To which Paves replied, “I’m never late.”

victoria beckham, ken paves, people's choice awards fashion icon, last minute haircut, victoria beckham haircut ken paves car peoples choice award 2018, indian express, indian express news Victoria Beckham got a last minute haircut for People’s Choice Awards. (Source: Instagram)

In the videos, we can see Paves leaning forward from his back seat to snip her hair while make-up artist Wendy Rose can be seen giving her a final touch-up. Isn’t her beauty squad just the stuff dreams are made of?

If you are wondering about the final look, the 44-year-old ex-Spice girl stepped out of the car only to turn heads. For the occasion, she picked a classic white blazer and matching trousers from her own brand and teamed it with a lace slip-style vest. She wore a pair of glamourous black heels to complete her look and posed for pictures with hands in her pocket.

[“source=indianexpress”]

Kareena Kapoor Khan looks ravishing in this red lace dress from H&M

Kareena Kapoor Khan, Kareena Kapoor, Kareena Kapoor Khan fashion, Kareena Kapoor Khan style, Kareena Kapoor Khan latest news, Kareena Kapoor Khan latest pics, Kareena Kapoor Khan casual style, Kareena Kapoor Khan street style, celeb fashion, bollywood fashion, indian express, indian express news

X

What do you think of Kareena Kapoor Khan’s look? (Source: kareena.kapoor.official/Instagram)

Kareena Kapoor Khan can rock almost any look. Whether it is walking down the red carpet or an outing with friends, she never fails to impress with her style. Recently, the actor was seen stepping out for a lunch date with her cousins and she floored the fashion police in a bright red outfit.

The Veere Di Wedding actor looked gorgeous in the simple red lace dress from the brand H&M. Hair tied in a ponytail, the look was rounded out with black sunnies and a red pout. We also liked the black Mansur Gavriel bag she carried and the pair of nude Louboutins she wore with the outfit.

Prior to this, the actor was spotted looking chic and casual in a light blue shirt that featured pink floral applique work on it. She carried the half tucked-in shirt with gigot sleeves effortlessly and teamed it with a pair of blue jeans. The look was accessorised with white heels and was rounded out with light smokey eyes and a neat hairdo

[“source=indianexpress”]

Malaika Arora looks fiery in this Roberto Cavalli ensemble

Malaika Arora, Malaika Arora airport look, Malaika Arora fashion, malaika arora khan, malaika arora pics, malaika arora photos, malaika arora pictures, malaika arora khan pictures, malaika arora khan photos, Malaika Arora movies, Malaika Arora pictures, bollyood airport fashion, indian express

X

Malaika Arora gives fashion goals and how. (Source: Maneka Harisinghani/Instagram)

Malaika Arora can set fashion trends and how. The celebrity host has time and again given fashion goals and it was no different this time. She was spotted looking stunning in Roberto Cavalli separates. Styled by Maneka Harisinghani, the look was accessorised with a statement neckpiece from Moschino and rounded out with hair neatly tied in a ponytail.

The fashionista rocks contemporary outfit as well as ethnic wear. During Diwali, she had stunned in one look after another. We, however, cannot forget the times she donned attires from Raw Mango. In one of the parties, she looked gorgeous in a black and red lehenga from the label. The traditional look was rounded out with gold jewellery.

[“source=indianexpress”]

Radhika Apte raises the heat in this zipped black leather dress; see pics

radhika apte, radhika apte magazine cover, radhika apte maxim cover, radhika apte latest photo, indian express, india express news

What do you think of Radhika Apte’s look? (Source: File Photo)

Radhika Apte is mostly known for her unconventional choices – be it fashion or movies. Recently, the Andhadhun actor graced the cover of Maxim magazine in a front-zipped black leather dress and floored us with her sartorial sense.

The black leather dress complemented her svelte frame and the look was rounded out with hair tied into a bun, hoopla earrings and a nude shade of lipstick.

In another photo, the Sacred Games actor was seen looking scorching hot in a sequin blazer. Messy hairdo, minimal make-up, and stilettos rounded out the look.

We were also very impressed with her sharp fashion choice at the Toronto International Film Festival where she attended the premiere of The Wedding Guest. Styled by celebrity stylist Shaleena Nathani, she wore a royal blue brocade blazer from the label Tutla and teamed that with matching trouser. Although it could have gone wrong, the black camisole balanced the look very well. The look was rounded out with black stilettos, hair neatly parted at the centre and a shade of brown lip shade.

ALSO READ | Radhika Apte looks sharp in this matching brocade pantsuit

Radhika Apte looked dapper. (Source:Afashionistadiaries/Instagram)

A while back, Apte was spotted wearing a pastel blue embellished lehenga-bralette from the house of Kalki Fashion in Mumbai and looked lovely. Styled by celebrity stylist Tanya Ghavri, the look was rounded out with diamond studs and two delicate rings.

What do you think of her latest look? Let us know in the comments below.

[“source=indianexpress”]

Ileana D’Cruz gives us major fashion goals in these chic outfits

Ileana D'Cruz, Ileana D'Cruz latest photos, Ileana D'Cruz fashion, Ileana D'Cruz latest news, Ileana D'Cruz contemporary outfts, Ileana D'Cruz latest pics, celeb fashion, bollywood fashion, indian express, indian express news

Ileana D’Cruz, who is busy with the promotions of her upcoming Telegu movie Amar Akbar Anthony was recently spotted attending different events in Madison On Peddar outfits and we must say we are impressed.

Decked in a white off-shoulder top, tucked-in and teamed with a khaki tie-detailing skirt, the actor made for a pretty picture. Chic and comfortable, we think her outfit is perfect for an evening date. Although what caught our attention was the extremely oversized hoop earrings that added an interesting element to her look. Stylist Sanam Ratansi further accessorised her outfit with strappy pumps and a statement watch. For the make-up, a dewy sheen with dark red lips and hair styled in a messy ponytail rounded off her look beautifully.

The Rustom actor was also seen donning a polka-dotted dress featuring high-neck, long sleeves and ruffle detailing on the skirt. While it could have been difficult to pull the fully printed outfit, D’Cruz managed to pull off with ease. Stylist Ratansi also teamed the outfit with matching polka-dotted pumps, which we think should have been avoided. Well-defined eyes and red lips gave finishing touches to her look.

[“source=indianexpress”]

Deepika Padukone turns into a gorgeous Sabyasachi bride; gets Sanskrit mantra embroidered on her veil

deepika padukone, deepika padukone wedding,

Decoding Deepika Padukone’s wedding ensemble. (Source: Sabyasachi/Instagram)

Deepika Padukone looked absolutely stunning as a Sabyasachi bride. The actor has always been vocal about her love for the designer’s work and it wasn’t really a surprise that she chose to wear his creations on her big day. It reminds us of the time when she revealed how during her modelling days, she used to save money to be able to buy a Sabyasachi sari someday. Dreams do come true!

ALSO READ: Deepika Padukone-Ranveer Singh wedding: Bollywood’s power couple looks regal in Sabyasachi

Her wedding ensembles stood out against the picturesque Lake Como, Italy. We love her Day 1 look in a kanjeevaram sari with a bold golden border from Sabyasachi. She complemented it with Sabyasachi’s signature matha patti, a choker and uncut diamond rani haar.

Her Day 2 look for Anand Karaj (Sikh wedding ceremony) was equally interesting. The red lehenga, complete with an embroidered veil and gotta patti work looked lovely on her. It was hard to miss the beautiful Sanskrit mantra, ‘Sada Saubhagyavati Bhava’, embroidered on her dupatta. It roughly translates to ‘may you always stay married’.

Decoding Deepika Padukone’s wedding ensemble. (Source: Sabyasachi/Instagram)

Deepika Padukone looked absolutely stunning as a Sabyasachi bride. The actor has always been vocal about her love for the designer’s work and it wasn’t really a surprise that she chose to wear his creations on her big day. It reminds us of the time when she revealed how during her modelling days, she used to save money to be able to buy a Sabyasachi sari someday. Dreams do come true!

ALSO READ: Deepika Padukone-Ranveer Singh wedding: Bollywood’s power couple looks regal in Sabyasachi

Her wedding ensembles stood out against the picturesque Lake Como, Italy. We love her Day 1 look in a kanjeevaram sari with a bold golden border from Sabyasachi. She complemented it with Sabyasachi’s signature matha patti, a choker and uncut diamond rani haar.

Her Day 2 look for Anand Karaj (Sikh wedding ceremony) was equally interesting. The red lehenga, complete with an embroidered veil and gotta patti work looked lovely on her. It was hard to miss the beautiful Sanskrit mantra, ‘Sada Saubhagyavati Bhava’, embroidered on her dupatta. It roughly translates to ‘may you always stay married’.

[“source=indianexpress”]