Cyber Security

[Somatung]

Did you know: Today is "World day against Cyber censorship 2014". Was just informed about this, so thought some of you may are also interested in it. Here some interesting links with a lot of information about this subject:

http://12mars.rsf.org/2014-en/

http://12mars.rsf.org/wp-content/uploads/EN_RAPPORT_INTERNET_BD.pdf

http://12mars.rsf.org/2014-en/2014/03/10/india-big-brother-up-and-running/

http://12mars.rsf.org/2014-en/recommendations/

And for your normal system protection: Today is Windows patch day and for safety check also your Adobe Flash player version and your current Java version.

 

[RockyRobust]

Did you know: Today is "World day against Cyber censorship 2014". Was just informed about this, so thought some of you may are also interested in it. Here some interesting links with a lot of information about this subject:

http://12mars.rsf.org/2014-en/

http://12mars.rsf.org/wp-content/uploads/EN_RAPPORT_INTERNET_BD.pdf

http://12mars.rsf.org/2014-en/2014/03/10/india-big-brother-up-and-running/

http://12mars.rsf.org/2014-en/recommendations/

And for your normal system protection: Today is Windows patch day and for safety check also your Adobe Flash player version and your current Java version.

Thanks for sharing the links. Good use of extra time for me & same time gaining something new.

 

[Somatung]

Replicant developers find and close Samsung Galaxy backdoor

While working on Replicant, a fully free/libre version of Android, we discovered that the proprietary program running on the applications processor in charge of handling the communication protocol with the modem actually implements a backdoor that lets the modem perform remote file I/O operations on the file system. https://www.fsf.org/blogs/community/replicant-developers-find-and-close-samsung-galaxy-backdoor

The patch is here on this page: http://redmine.replicant.us/projects/replicant/wiki/SamsungGalaxyBackdoor

And as usual: Nobody from any company knows any thing about it and never ever did know that such back doors even exist. :lol:

 

[Snake.Head]

Avast it is Simple, easy to understand UI
One important think to have in pc
ofcourse it free
Download here

I have been personally using it for many years

 

[Somatung]

After the problem with Apple through "Goto fail", there is a new bug around which is called: The Heartbleed Bug

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).

The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.

What leaks in practice?

We have tested some of our own services from attacker's perspective. We attacked ourselves from outside, without leaving a trace. Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication.

How to stop the leak?

As long as the vulnerable version of OpenSSL is in use it can be abused. Fixed OpenSSL (https://www.openssl.org/news/secadv_20140407.txt) has been released and now it has to be deployed. Operating system vendors and distribution, appliance vendors, independent software vendors have to adopt the fix and notify their users. Service providers and users have to install the fix as it becomes available for the operating systems, networked appliances and software they use.

http://heartbleed.com

Here a tool to test any HTTP for CVE-2014-0160: http://filippo.io/Heartbleed/

Here some more infos for IT pros: https://www.rfc-editor.org/info/rfc6520

In case you run any hardware or software from Apple and you missed to updated: https://support.apple.com/kb/HT1222

 

[Snake.Head]

Here a list of vulnerable sites -
https://github.com/musalbas/heartbleed-masstest/blob/master/top10000.txt
Now

nseindia.com... not vulnerable
bseindia.com... no SSL

 

[Somatung]

Some Internet companies that were vulnerable to "The Heartbleed Bug" have already updated their servers with a security patch to fix the issue. This means you'll need to go in and change your passwords immediately for these sites.

Check this link: http://mashable.com/2014/04/09/hear...:eyJzIjoidCIsImkiOiJfdzJreXgwczgxdzl2am52aCJ9

 

[Somatung]

Backup. How many have heard about it and how many really do it? Here just a reminder of how important backups for the safety of our data and OS are. If our system or data are infected with what ever and we have made a backup in the past, it will take us just the time the recovery needs to recover the system or data through the help of the backup data. If we do not have the backup, we may will spend hours and hours to install again a new operating system and we may are even not able to get back our data in case they are looked through a Trojan. If you are not familiar with the backup and what it is, read through the following:

The tao of Backup

http://www.taobackup.com/index.html

 

[Somatung]

NSA tweeted this today:

tpfccdlfdtte pcaccplircdt dklpcfrp?qeiq lhpqlipqeodf gpwafopwprti izxndkiqpkii krirrifcapnc dxkdciqcafmd vkfpcadf.

#MissionMonday #NSA #news

— NSA (@NSACareers) May 5, 2014
--------------------

It was expected that only the best can encrypt it. Do you belong to the best who can encrypt this code? Do you want to know what it means? It will take you only a few second. How?

Try this: http://www.quipqiup.com/index.php
- On the left side in the little window choose: Find spaces (Patistocrate mode)
- Solve
- Now watch the answers under solution and that's it.

I guess the next encrypted messages from them will be on an other level, as this surely was not they way they wanted or expected it to be/solved.

http://www.dailydot.com/news/nsa-tweet-cryptography-challenge/

http://www.nbcnews.com/tech/security/code-cracked-mysterious-nsa-tweet-decrypted-seconds-n97546

 

[Einstein]

#‎Report‬: Chinese ‪#‎phones‬ come with preloaded ‪#‎Spyware‬! that can steal personal data, place rogue calls, or turn on the phone’s camera and microphone. The data then send to a server in China.

Share More Protect More Read Full Report:
http://hackersnewsbulletin.com/2014/06/report-chinese-phones-market-preloaded-spyware.html