Security exploit takes down Techcrunch, is it WP?

January 26th, 2010

Techcrunch.com is down since morning and the site has just updated this with an official confirmation of the hack (you are advised not to visit the link mentioned on the image above!)

Earlier tonight techcrunch.com was compromised by a security exploit.

We’re working to identify the exploit and will bring the site back online shortly.

While its highly unlikely that this is a Wordpress security hole, numerous plugins customized by Techcrunch can be one of the possible loopholes.

Image Credit

Categories: Security, Tech Industry News | No Comments

Motorola Droid has a security flaw

January 12th, 2010

The Motorola Droid running Android OS v2.1 has a minor security flaw which makes the phone data easily accessible by anyone. The Droid has a security lock which when active requires an unlock pattern in order to access the phone’s data. The bug easily bypasses this security lock when the user receives a call. (This should be a issue with Android v 2.0 and Droid being the only handset featuring it)

On  receiving a call, pressing the “Back” icon makes (more…)

Categories: Android, Security, motorola | Tags: , , , , , | No Comments

Photoas Infects Facebook Users

January 8th, 2010

Photoas is a fast spreading malicious application on Facebook, if you receive any such app request from your friend, you should ignore it or block the application immediately.

On approval of the Photoas application, it will send out an massive app request / messages with links to all your friends within Facebook.

If you accidentally or knowingly approved the Photoas application, proceed immediately to Facebook Application Area at http://www.facebook.com/editapps.php and (more…)

Categories: Security | Tags: , , , , | No Comments

Delayed Y2K bug affects Cards in Germany

January 8th, 2010

More than 30 million people are unable to use their German debit / credit cards since the start of the year 2010 due to payment systems failing to recognize the year 2010. This issue is being attributed to a delayed Y2K (Year 2000) bug on their systems.

20 million electronic cash cards (also known as girocards) and 3.5 million classic credit cards were affected according to DSGV (one of the biggest association representing banks within Germany), DSGV has announced they would be resolving the issue within a week.

Gemalto (one of the worlds biggest chip card maker) (more…)

Categories: Security, Tech Industry News | Tags: , , , , , , | No Comments

GSM security under threat?

December 29th, 2009

Chaos Communication Congress conference in Berlin was house to claim by an encryption expert that current standards of security for GSM connections are inadequate and can be compromised, allowing any 3rd party to hack into and listed to your phone calls.

German hacker Karsten Nohl revealed that he has cracked the 64-bit A5/1 encryption which happens to be 21 years old and still in use by most GSM connections around the world. The GSM association has termed Nohl’s research as illegal as per laws and claimed that hacking telecom lines is much more complicated than it is being portrayed. In this case though things aren’t as simple as hacking a website over the internet, I see no reason why hackers cant make an attempt to get the required radio receiver system and signal processing software to process raw radio data for this purpose.

While the GSM Association is in denial, security experts believe that most operators have avoided the investment in upgrading to the newer 128-bit A5/1 encryption algorithm that is (atleast till now) considered secure enough. However 3G networks are believed to work on the new standard, another reason to speed up the switch from 2G to 3G?

via MobileBurn

Categories: Security, Tech Industry News | Tags: , , , , | No Comments

Switch fingerprints to trick hi-tech cops!

December 10th, 2009

No that’s not what I am asking you to do, but it’s exactly what a woman did to fool the immigration officers to enter Japan. Lin Ring, who was officially deported from Japan in 2007, underwent a surgery to switch her left hand fingerprints to the right, thus enabling her to trick the fingerprint scanners put in place by Japanese authorities.

Ring got the hack on her finger prints at a private home (clinic?) in China at a cost of £9000 ($14600). However, scars on her fingers and thumb got the police to suspect her and investigations eventually blew the lid. The fact that biometric security can be compromised is surely scary, and hackers again prove that no matter what systems you come up with, there is a way to work around them! (more…)

Categories: Security, Weird or not? | Tags: , , , , , , , | 8 Comments

Alert: iPhone malware steals data

November 11th, 2009

iphone securityMore iPhone security issues have been highlighted in recent times than ever before. While we saw a case where the iPhone developer is sued for accessing iPhone owners’ email IDs, a more serious exploit with jailbroken iPhones was highlighted by a not-so-harmful work called Ikee. This attacks jailbroken iPhone with SSH installed. iPhones and iPod touches are jailbroken to unlock or allow for third party app installations. It is estimated that 6-8% of all iPhones might be jailbroken.

Although Ikee served as a warning (and before the iPhone community could digest it properly) here comes another worm – the iPhone/Privacy.A. This is not a non-harmful experiment like Ikee. Instead it’s a serious malware that sweeps away your iPhone data, and doesn’t even give you a hint of what it took away from you (emails, sms, photos, contacts and more).

So if you are one of those who enjoys an jailbroken iPhone, our advice would be to use the tutorial we have put up on iPhoneHelp and secure this exploit by changing the SSH access password to your iPhone.

Categories: Security, Tech Industry News, iphone | Tags: , , , , , , | 2 Comments

‘Koobface’ virus attacks through social networking websites

August 15th, 2009

virus_@

The Indian Computer Emergency Response Team (CERT-In) has released information about a new virus that uses the social networking platforms like Twitter and Facebook to attack computers. The virus called Koobface spreads through a (more…)

Categories: Security | Tags: , , , , , , , | No Comments

AVG update gags Apple’s iTunes

July 28th, 2009

AVG, the freeware antivirus, started attacking iTunes after its users updated the antivirus last week. The users report that the antivirus is considering some of the iTunes support and update files as Trojan virus.

The antivirus shows some DLL files of iTunes as Trojan viruses and quarantined them which broke the iTunes for the users who updated the software. iTunes.dll and iTunesregistry.dll were shown by AVG as Small.BOG malware. For those who tried to reinstall iTunes, the problem still continued. Soon enough, the Apple’s support forum and AVG’s official forum were bombarded with issues from users about this update.

AVG released a newer update that fixes the problem. “Unfortunately, a recent virus database update resulted in iTunes being detected as a Trojan by AVG security products,” quoted on AVG’s website. “We can confirm that it was a false alarm. AVG immediately released a new virus database update (definition file 270.13.29/2260) that corrected this issue.”

If your AVG update broke your iTunes and you still can’t fix it, here are the steps that AVG recommends you to follow.

  • Open the AVG user interface.
  • Choose “Virus Vault” option from the “History” menu.
  • Locate the iTunes file that was incorrectly removed and select it (one click).
  • Click on the “Restore” button.

via [AppleInsider]

Categories: Apple, Security, Tech Industry News | Tags: , , , , , | No Comments

IE flaws give hackers access to Windows systems

July 9th, 2009

IE

Hackers have found a new way to get into the PCs of Windows XP and Windows Server 2003 using a hole through the Internet Explorer. The bug allows hackers to remotely control the PCs of the IE users.

The infection looks quite serious as the user just has to visit a website to fall prey to the hackers. The links included in spam have been giving criminals an easy access to the victim’s PC for the past week or so.

The flaw happens to be in the (more…)

Categories: Security, microsoft | Tags: , , , , | 3 Comments

Katrina is Dangerous, says McAfee

June 2nd, 2009

katrina_dangerous1

McAfee Inc. says that Katrina is the second most dangerous word searched in India. McAfee recently conducted a research on 2600 most searched words on Google & Yahoo. The research was conducted to find out the degree of risk (of virus, malware, spyware….) involved in each of these words.

The most dangerous crown was given to “waptrick”. Among Indian celebrities, Shahid Kapur is 5th most dangerous while the top 10 list also includes south-Indian actress “Namitha”. (Ummmmm..)

Amongst the international celebrities, “Pamela anderson” is amongst the most dangerous in Caneda. “Jessica Alba” features the list of Caneda as well as Germany. “Paris Hilton” and “Amy Winehouse” are amongst the most dangerous of a few nations.

According to McAfee, these search words are used by spam sites to attract internet users and also to download few malicious softwares.

“Like sharks smelling blood in the water, hackers will create related websites laden with adware and malware whenever a particular top increases in popularity,”  said Jeff Green,the McAfee vice-president.

Next time you need a Katrina walpaper, settle for Kareena :P

via [NDTVmovies]

Categories: Security, Tech Industry News | Tags: , , , , | 1 Comment

Beware: was that photograph actually deleted?

May 21st, 2009

Deleting a photography from your Facebook, MySpace or Hi5 account? Beware! According to a study many popular sites fail to delete the photograph from even 30 days after you actually deleted it from your account. Though the photograph is taken off your profile / account immediately it remains accessible via the original URL of the image on the site.

For our experiment, we uploaded a test image onto 16 chosen sites with default permissions, then noted the URL of the uploaded image. Every site served the test image given knowledge of its URL except for Windows Lives Spaces, whose photo servers required session cookies (a refreshing congratulations to Microsoft for beating the competition in security). We ran our initial study for 30 days, and posted the results below. A dismal 7 of the 16 sites failed to revoke photos after 30 days

(more…)

Categories: Security, Tech Industry News | Tags: , , , , , , , | 1 Comment

Cyber Cafe PC’s are insecure due to Sniffers

December 16th, 2008

Accessing your bank accounts or any confidential accounts like DEMAT, online banking in cyber café will be insecure as your PC may be attacked by sniffers.

Sniffers are a powerful piece of software. They have the capability to place the hosting system’s network card into promiscuous mode. A network card in promiscuous mode can receive all the data it can see, not just packets addressed to it. Sniffing performed on a hub is known as passive sniffing. Ethernet switches are smarter. A switch is supposed to be smart enough to know which particular port to send traffic to and block it from all the rest. When sniffing is performed on a switched network, it is known as active sniffing.

(more…)

Categories: Concept / Educative, Security | Tags: , , | 1 Comment

OG Profile: Kevin David Mitnick – Superhacker turned security consultant

December 5th, 2008

Kevin David Mitnick (born August 6, 1963) is a computer security consultant who was a controversial computer hacker in the late 20th century.

In 1999, Mitnick admitted to the authorities to illegally gaining access to computer networks and acquiring copies of software as part of a plea agreement before the United States District Court for the Central District of California in Los Angeles. Though Mitnick has been convicted of computer related crimes and possession of several forged identification documents, his supporters argue that his punishment was excessive. In his 2002 book, The Art of Deception, Mitnick states that he compromised computers solely by using passwords and codes that he gained by social engineering. It is notable that Mitnick did not use software programs or hacking tools for cracking passwords or otherwise exploiting computer or phone security.

(more…)

Categories: Concept / Educative, Security | Tags: , , , | 8 Comments