Injected payload is customized for each targeted website, able to steal cookies, credentials, private information, perform actions as the user and more. The attack would then load iFrame tags targeting specific services, hijacking Evernote to inject payloads into all iFrames: Identified as CVE-2019-12592, it is a Universal Cross-Site Scripting (UXSS) flaw caused by a “logical coding error” that breaks the browser’s domain isolation protection.įrom the description offered, exploiting it would require several steps, the first of which would be luring the user to a malicious or compromised website. Notejoy is, however, cross-platform compatible with Mac and PC for multi-computer users.īottom-line: If you share notes, especially with a work team, this is a great way to see and edit notes with others.Users of Evernote’s Web Clipper extension for Google Chrome should check it has been updated to the latest version after a security company published details of a dangerous security flaw.ĭiscovered by Guardio in May, ‘dangerous’ in this context means that anyone using it in its unpatched state is at risk not only of a compromise of their Evernote account but, potentially, of third-party accounts (email, social media, banking) they have open at the same time. The iPhone companion app still needs a lot of work. It's missing a few key features that Evernote switchers will miss, like a web-clipper feature and proper tagging options. It also has integrated features with Slack to make collaboration with your team even more streamlined. If your team uses a business or group email account (our team's iMore email account, for example), you can set up collaborations for anyone with the same domain suffix so you don't have to invite people individually.
You can collaborate in real-time with others and everything works beautifully. The most impressive aspect of Notejoy is how fast everything syncs.
You can upload documents from your computer to your Mac or PC and sync them to the iPhone app. It is fast becoming what I would consider to be the ultimate replacement for Evernote. If you're big on collaborating with your notes, you are going to love NoteJoy.
0 kommentar(er)
