Hackers Can Remotely Steal Fingerprints From Android Phones Thursday

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/hackers-can-remotely-steal-fingerprints.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Hackers Can Remotely Steal Fingerprints From Android Phones</a></h1> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">  iPhone and Android’s Fingerprint authentication.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Till now hackers were impersonated simply by lifting prints off the side of a phone and gaining unauthorized access to user's phone and thus data.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCNWPxKiGiR7n02tDJmUEiuM70u_8kM6UVb_iU5hZ5whfcfNDSKprv3misEvGP-3iLFzaknrT85lHii8cnfBJIbctztVB1yUiTbOYUSwtfY7WU5JRPObc9Cn6GpZRJA2YJfjTW8ZFH24ZA/s1600/android-fingerprint-scanner-hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCNWPxKiGiR7n02tDJmUEiuM70u_8kM6UVb_iU5hZ5whfcfNDSKprv3misEvGP-3iLFzaknrT85lHii8cnfBJIbctztVB1yUiTbOYUSwtfY7WU5JRPObc9Cn6GpZRJA2YJfjTW8ZFH24ZA/s1600/android-fingerprint-scanner-hacking.jpg" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> However, security researchers have now discovered four new ways to attack Android devices to extract user fingerprints remotely without letting the user know about it.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The attack, which the researchers dubbed the "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fingerprint Sensor Spying attack</u></b>," could be used by hackers to "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">remotely harvest fingerprints in a large scale,</i>" Yulong Zhang, one of the researchers <a href="http://www.zdnet.com/article/hackers-can-remotely-steal-fingerprints-from-android-phones/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">told</a>ZDNet.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Remotely Hacking Android Fingerprints</h3> </div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> FireEye researchers Tao Wei and Yulong Zhang presented their research in a talk titled, <u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fingerprints on Mobile Devices: Abusing and Leaking</u>, at the<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Black Hat conference</i> in Las Vegas on Wednesday, where they outlined new ways to attack Android devices in an effort to extract user fingerprints.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The new attack is limited mostly to Android devices with Fingerprint Sensors that helps the user to authenticate their identity by simply touching their phone’s screen, instead of by entering a passcode.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Researchers confirmed the attack on the HTC One Max and Samsung's Galaxy S5, which allowed them to stealthily obtain a fingerprint image from the device because vendors don't lock down fingerprint sensors well enough.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The attack affects mobile phones by major manufacturers including handsets delivered by Samsung, HTC, and Huawei.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> <h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Fingerprints vs. Passwords</h3> </div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> If we give a thought, then stolen fingerprints would be an even worse scenario than stolen passwords because you can change your passwords when breached but not just replace your fingerprints.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">In this attack, victims' fingerprint data directly fall into attacker's hand. For the rest of the victim's life, the attacker can keep using the fingerprint data to do other malicious things,</i>" said Zhang.</blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The good news is that the issue is relatively easy to fix by adding encryption to the fingerprint data on Android devices, and affected vendors have since released patches after being alerted by the researchers.<br /> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /> Researchers have not shared any "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">proof-of-concept</i>" detailing exactly how the fingerprint stealing attack can be executed remotely.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Meanwhile Apple users can just sit and relax, as it appears that iPhone and iPad's Touch ID is "quite secure" because it encrypts fingerprint data from the scanner with a crypto key, making it unreadable even if hackers gain access.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Users need to note that Google doesn't yet officially support fingerprints in its mobile operating system, but it will soon do support fingerprint sensors with the Android M update.</div> </div> </div>

Hackers Can Remotely Steal Fingerprints From Android Phones Thursday

Hackers Can Remotely Steal Fingerprints From Android Phones  iPhone and Android’s Fingerprint authentication. Till now hackers were impersonated simply by lifting prints off the side of a phone and g…

Read more »

D-Link Cookie Command Execution

<div dir="ltr" style="text-align: left;" trbidi="on">           <span style="color: #555555; font-family: "noto sans"; font-size: 38px; line-height: 1.4; text-align: center;"><a href="http://www.hackthesec.co.in/2015/08/d-link-cookie-command-execution.html">D-Link Cookie Command Execution</a></span><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD8wZYpiZKEwv81sekIfbsqs1nfuQqkSxsG2TRUPndeuk_iEgMLtbQrvquY9a-KBskYvLF0O7NWdunXVCqSyBkWIHNmUIkF1y5h-kmV7UoH8-eFiM8UVH67WHyKfG_ehpaOO3SXL06r-Y/s1600/D-Link-Patches-Against-Critical-Remote-Command-and-Code-Execution-Flaws-475976-2.jpg" imageanchor="1" style="clear: left; display: inline !important; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="321" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD8wZYpiZKEwv81sekIfbsqs1nfuQqkSxsG2TRUPndeuk_iEgMLtbQrvquY9a-KBskYvLF0O7NWdunXVCqSyBkWIHNmUIkF1y5h-kmV7UoH8-eFiM8UVH67WHyKfG_ehpaOO3SXL06r-Y/s640/D-Link-Patches-Against-Critical-Remote-Command-and-Code-Execution-Flaws-475976-2.jpg" width="640" /></a><br /> <div class="l-submain wpb_row" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 0px 40px; position: relative; vertical-align: baseline;"> <div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;"> <table class="exploit_list" style="background-attachment: initial; background-clip: initial; background-color: rgb(239, 239, 239) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-size: 14px; line-height: 24px; margin: 10px 0px; outline: 0px; padding: 1px !important; vertical-align: baseline; width: 583px;"><tbody style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">EDB-ID:</strong> 37628</td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CVE:</strong> N/A</td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">OSVDB-ID:</strong> N/A</td></tr> <tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Verified:</strong> <span class="fa fa-check-circle-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Author:</strong> <a href="https://www.exploit-db.com/author/?a=3211" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;">metasploit</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Published:</strong> 2015-07-17</td></tr> <tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/37628" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-code-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Source</a></td><td colspan="2" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Vulnerable App:</strong> N/A</td></tr> </tbody></table> <div class="bootstrap-wrapper" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="exploit-meta clearfix" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="info" style="background: transparent; border: 0px; box-sizing: border-box; float: left; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> </div> </div> </div> </div> </div>

D-Link Cookie Command Execution

          D-Link Cookie Command Execution EDB-ID: 37628CVE: N/AOSVDB-ID: N/A Verified: Author: metasploitPublished: 2015-07-17 Download Exploit:  SourceDownload Vulnerable App: N/A …

Read more »

This Antenna Can Remotely Steal Data From Devices using Sound Waves

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/this-antenna-can-remotely-steal-data.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; vertical-align: baseline;">This Antenna Can Remotely Steal Data From Devices using Sound Waves</a></h1> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Remember the previously demonstrated technique to Hack into air-gapped computers using Heatwaves?</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> What if the same was possible to hack computers to steal data using <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Sound waves</b>?</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Imagine, If a remote hacker could steal classified information from a targeted computer without having to physically and Internet access to it.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUsuHmZn8OhvGwVmtfCxhmRvPZAuhQLgaB53HX-OyICh0se-mj9iimP_NbWbykc0LAWSsyi8XuovHBLSoF3zGapJEluFXfL_QBFufUyV4OKbmJlsOyvd7JZ3Ifua8mOczL5BYgNwanxTL-/s1600/hacking-computer-sound-wave.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUsuHmZn8OhvGwVmtfCxhmRvPZAuhQLgaB53HX-OyICh0se-mj9iimP_NbWbykc0LAWSsyi8XuovHBLSoF3zGapJEluFXfL_QBFufUyV4OKbmJlsOyvd7JZ3Ifua8mOczL5BYgNwanxTL-/s1600/hacking-computer-sound-wave.jpg" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> A team of security researchers has demonstrated exactly the same by developing a new hacking technique called <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Funtenna</b> that uses sound and radio waves to siphon data from computers even without Internet access.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> According to a lead researcher <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Ang Cui</b> of Red Balloon Security, the Funtenna radio signal hack has the potential to turn Internet-connected devices (printer, washing machine and air conditioner) – popularly known as the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Internet of Things </b>– into bugs that can transmit data out of a network using sound waves that can not be heard by a human ear.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> How Funtenna Works?</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The attacker only needs to install malware on a target's device such as a printer, office phone, or a computer.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2KGLtFM4Gdi0h-3c_YhSbgyuhyg04IXb1SZytLdM0M88D3omXu8enI8Z8D9TuqXTO_OmMKzMWq8Sd7M9h2s3GE69Mje7rYGeiq6kVVq5qdsvMk0hWeh6xtnZThBSBhMFuU1lrlUUizO23/s1600/hacking-computer-funtenna-sound-waves.jpg" imageanchor="1" style="border: 0px; clear: left; color: #3d5a99; cursor: default; float: left; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px 1em 1em 0px; outline: none; padding: 0px; pointer-events: none; text-decoration: none; vertical-align: baseline;"><img alt="This Antenna Can Steal Data From Remote Computers Using Sound Waves" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2KGLtFM4Gdi0h-3c_YhSbgyuhyg04IXb1SZytLdM0M88D3omXu8enI8Z8D9TuqXTO_OmMKzMWq8Sd7M9h2s3GE69Mje7rYGeiq6kVVq5qdsvMk0hWeh6xtnZThBSBhMFuU1lrlUUizO23/s1600/hacking-computer-funtenna-sound-waves.jpg" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; max-width: 728px; outline: none; padding: 0px; vertical-align: baseline;" title="This Antenna Can Steal Data From Remote Computers Using Sound Waves" /></a></div> </div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The malware overtakes the control of the electronic circuit of the device (general-purpose input/output circuits) and vibrates them at a frequency (which transmits radio signal) of the attacker's preference.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> An attacker then can pick up these signals using an AM radio antenna (Funtenna) from a short distance away.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> "You have network detection, firewalls… but this transmits data in a way that none of those things are monitoring, this fundamentally challenges how certain we can be of our network security," <a href="https://www.rt.com/usa/311689-funtenna-hacking-sound-waves/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">said</a> Cui.</blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Here, the hacked devices are themselves acting as transmitters. Therefore, the new Funtenna technique bypasses all conventional network security methodologies.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> You can also <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">watch a video demonstration</i></b> of how Funtenna works below:</div> <div class="video-container" style="border: 0px; font-stretch: inherit; height: 0px; margin: 0px; outline: 0px; overflow: hidden; padding: 30px 0px 409.5px; position: relative; vertical-align: baseline;"> <iframe allowfullscreen="" frameborder="0" height="281" mozallowfullscreen="" src="https://player.vimeo.com/video/135270882?title=0&byline=0&portrait=0" style="border-style: initial; border-width: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: 439.5px; left: 0px; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; position: absolute; top: 0px; vertical-align: baseline; width: 728px;" webkitallowfullscreen="" width="500"></iframe><br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Funtenna is actually using a technique known as "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Hardware Agnostic</i></b>," which is generally available to operate with all modern computer systems and embedded devices.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The team showcased its new technique in action at the Black Hat security summit in Las Vegas on Wednesday. It will also release a "proof-of-concept" code for researchers and hackers.</div> </div> </div>

• 
• 

1. 1
2. 2

• Previous
• Next

This Antenna Can Remotely Steal Data From Devices using Sound Waves

This Antenna Can Remotely Steal Data From Devices using Sound Waves Remember the previously demonstrated technique to Hack into air-gapped computers using Heatwaves? What if the same was possible to …

Read more »

Global Internet Authority — ICANN Hacked Again! Thursday

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/global-internet-authority-icann-hacked.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Global Internet Authority — ICANN Hacked Again!</a></h1> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN</b> (Internet Corporation for Assigned Names and Numbers) – the organisation responsible for allocating domain names and IP addresses for the Internet – <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">has been hacked</b>, potentially compromising its customers’ names, email addresses, hashed passwords, and more.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The US-administered non-profit corporation <a href="https://www.icann.org/news/announcement-2015-08-05-en" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">admitted</a> on Wednesday that its server security was breached within the past week and that…</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyeyKkX0uhNsyX827rcmelkRVTbrgRbDJkFGUygFsVx92ByydxRYoI3RRKK8A1Rj7ZgxDIbgtSHTv1JhcxcV7Fo3hPIvu0EN4wgcsqHS6eLlUB-l52yS8eBFPXHy1rE0vYzAM55z9OZQo/s1600/icann-website-hacked.png" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> …an "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">unauthorised person</i>" <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">gained access to usernames</b>,<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> email addresses</b></i>, and encrypted passwords for profile accounts on <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ICANN.org</i> public website.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The organisation believes that the leaked information includes harmless information such as user preferences, public biographies, interests, newsletters, and subscriptions.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Less than ten months ago, ICANN was hacked by a hacker who gained access to its internal system following a spear phishing attack in November last year. Employees were tricked into handing over their credentials after receiving malicious emails apparently sent from the ICANN's own domain.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> With those details, the hackers then managed to access ICANN systems, including the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Centralized Zone Data System</i></b> (CZDS), the <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">domain registration Whois portal</i></b>, the wiki pages of the ICANN<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Governmental Advisory Committee</i></b> (GAC), and ICANN blog.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The passwords compromised in the latest data breach were encrypted one-way using the bcrypt algorithm.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"These encrypted passwords (hashes) are not easy to reverse,"</i> ICANN said, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"but as a precaution we [require] that all users reset their passwords."</i></blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, there's no evidence that any profile accounts, or its internal systems have been accessed without authorization, nor any operational data, financial data, or <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">IANA (Internet Assigned Numbers Authority) systems</i></b> were involved.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The IANA is also a part of ICANN, which performs the actual management of the DNS root zone, globally-unique names and numbers.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Users are recommended to change their online account passwords, or just not using the same password across multiple websites.</div> </div> </div>

Global Internet Authority — ICANN Hacked Again! Thursday

Global Internet Authority — ICANN Hacked Again! ICANN (Internet Corporation for Assigned Names and Numbers) – the organisation responsible for allocating domain names and IP addresses for the Interne…

Read more »

SSL Encryption — Securing Internet of Things (IoT) Wednesday

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 align="justify" class="post-title url" itemprop="headline name" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/ssl-encryption-securing-internet-of.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">SSL Encryption — Securing Internet of Things (IoT)</a></h1> <div class="shareinpost" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px 0px 0px; outline: 0px; padding: 8px 15px; vertical-align: baseline;"> <div align="left" class="socialleft" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <span class="st_plusone_hcount" displaytext="Google +1" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_fblike_hcount" displaytext="Facebook Like" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_facebook_hcount" displaytext="Facebook" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_twitter_hcount" displaytext="Tweet" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" st_via="TheHackersNews #Security" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_linkedin_hcount" displaytext="LinkedIn" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><span class="st_sharethis_hcount" displaytext="ShareThis" st_title="SSL Encryption — Securing Internet of Things (IoT)" st_url="http://thehackernews.com/2015/08/ssl-encryption-internet-of-things.html" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span></div> </div> <div class="post-body entry-content" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 30px !important; margin: 0px; outline: 0px; padding: 5px; text-align: justify; vertical-align: baseline;"> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">nternet of Things (IoT)</i></b> with the purpose of providing convenience to the users enabled every object in the universe to be as smart as a whip.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> By assigning IP address to all sorts of devices, ranging from household appliances, machines, medical devices and sensors to other day-to-day objects, and putting them all together on a standardised network is a common Internet of Things (IoT) practice.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUbpQsuu_LwrhJxl80MFQ4Gdx0_05nGxJqocNj8aOlGEBLIEc5JyAnocjuJthxaxizgMee12co0yblMwE_D141v5OK9IesMHJCemoAhIrh5hIwA9ekR39geX3P9nH5qb_5v03sU72poK9R/s1600/SSL-Encryption-internet-of-things.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUbpQsuu_LwrhJxl80MFQ4Gdx0_05nGxJqocNj8aOlGEBLIEc5JyAnocjuJthxaxizgMee12co0yblMwE_D141v5OK9IesMHJCemoAhIrh5hIwA9ekR39geX3P9nH5qb_5v03sU72poK9R/s1600/SSL-Encryption-internet-of-things.jpg" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Is Internet of Things Secure?</h3> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> In my previous articles, I gave you a glance of the most vulnerable smart cities that are increasingly adopting devices connected to the Internet in an attempt to add convenience and ease to daily activities.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> By 2020, there will be more than 45 Billion Internet-connected devices that will transform the way we live and work.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">The bottom line:</i></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> As the number of IoT enabled systems increases, the complexity of handling them increases; leading to an introduction of new risk and vulnerabilities associated with them.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Security of Internet of Things (IoT) Can’t Be Ignored</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The risks can be mitigated by more robust authentication methods at the time when the ‘<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Internet-connected devices</b></i>’ initiate communication with each other, hence developing secure identification management.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> For secure communication among the IoT devices, many security mechanisms and protocols have been implemented, including:</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> <ul style="border: 0px; font-stretch: inherit; margin: 20px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Public Key Infrastructure (PKI) system</i></b> for securing communications between the Internet-connected devices.</li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Secure Socket Layer (SSL) protocol </i></b>implementation for IoTs to encrypt their communication over the network.</li> </ul> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> As it is evident, Security solutions for embedded devices connected to the Internet is also necessary. The devices also need to be secured from attacks like eavesdropping, DDoS and tampering of network traffic.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> SSL Encryption for Internet of Things (IoT)</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> For SSL/TLS implementation in IoT devices, INSIDE Secure has introduced a new open source embedded SSL called <a href="http://www.matrixssl.org/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MatrixSSL Tiny</b></u></a> as an extension to MatrixSSL - a source for web servers to implement encryption layer for secure management of remote devices.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> MatrixSSL Tiny is going to be demonstrated this week at Black Hat conference in Las Vegas, where the security researchers will be representing its full suite of security products and will talk about its solution for cyber attacks focussed at IoT.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> MatrixSSL Tiny is a lightweight TLS software implementation for IoT devices with limited memory to make secure communications among them, yet demand more robust security to prevent eavesdropping and tampering of network traffic.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The software also performs real time functions that nulls the memory on completion of a particular session. According to researchers, MatrixSSL Tiny is the world’s smallest, yet powerful IoT security solution.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Why SSL is Not Sufficient?</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Despite developments for enhancing the security, IoT infrastructure is still massively prone to cyber attacks that lead to offer open gateways for people with malicious intents.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Any command initiated on a smart device, be it an application or a firmware, must be verified through a chain of trust.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> If we consider a situation, where communication is taking place on a traditional IT system and an IoT smart device, we see that IT systems follow a layered security procedure; whereas in IoT smart devices authenticity and confidentiality can be tampered with.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Therefore, multi-layer security measures are needed for IoT devices too so that the IoT devices could differentiate that the information received or sent is by an authorized user or an intruder.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">To sum up, I would say…</i></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The security of IoT enabled devices are becoming critical and a thing of concern for the security enablers. The point to be worried about is its future developments where, it is seen as a boon and not a bane.</div> </div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> <div class="articlebodyonly" id="articlebodyonly" itemprop="articleBody" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px 0px 15px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div id="aim12388579919672172336" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: left; vertical-align: baseline;" trbidi="on"> <div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;"> </div> </div> </div> </div> </div> </div> </div>

SSL Encryption — Securing Internet of Things (IoT) Wednesday

SSL Encryption — Securing Internet of Things (IoT) nternet of Things (IoT) with the purpose of providing convenience to the users enabled every object in the universe to be as smart as a whip. By ass…

Read more »

SysAid Help Desk 'rdslogs' Arbitrary File Upload

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="l-submain for_pagehead size_large" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-shadow: rgba(0, 0, 0, 0.0784314) 0px -2px 0px -1px inset; box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 90px 40px 0px; position: relative; vertical-align: baseline;"> <div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;"> <div class="w-pagehead" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;"> <h1 style="background: transparent; border: 0px; box-sizing: border-box; color: #555555; font-family: 'Noto Sans'; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> SysAid Help Desk 'rdslogs' Arbitrary File Upload</h1> <div class="separator" style="clear: both; text-align: center;"> <a href="http://i.ytimg.com/vi/k3YVjoqW82Q/maxresdefault.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="http://i.ytimg.com/vi/k3YVjoqW82Q/maxresdefault.jpg" width="320" /></a></div> <div> <br /></div> </div> </div> </div> <div class="l-submain wpb_row" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 0px 40px; position: relative; vertical-align: baseline;"> <div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;"> <table class="exploit_list" style="background-attachment: initial; background-clip: initial; background-color: rgb(239, 239, 239) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-size: 14px; line-height: 24px; margin: 10px 0px; outline: 0px; padding: 1px !important; vertical-align: baseline; width: 583px;"><tbody style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">EDB-ID:</strong> 37667</td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CVE:</strong> <a class="external" href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2995" rel="nofollow" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;" target="_blank">2015-2995</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">OSVDB-ID:</strong> N/A</td></tr> <tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Verified:</strong> <span class="fa fa-check-circle-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Author:</strong> <a href="https://www.exploit-db.com/author/?a=3211" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;">metasploit</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Published:</strong> 2015-07-21</td></tr> <tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/37667" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-code-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Source</a> <a href="https://www.blogger.com/null" style="background-color: transparent; box-sizing: border-box; color: #337ab7; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Raw</a></td><td colspan="2" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Vulnerable App:</strong> N/A</td></tr> </tbody></table> <div class="bootstrap-wrapper" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="exploit-meta clearfix" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <div class="info" style="background: transparent; border: 0px; box-sizing: border-box; float: left; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> </div> </div> </div> </div> </div>

SysAid Help Desk 'rdslogs' Arbitrary File Upload

SysAid Help Desk 'rdslogs' Arbitrary File Upload EDB-ID: 37667CVE: 2015-2995OSVDB-ID: N/A Verified: Author: metasploitPublished: 2015-07-21 Download Exploit:  Source  RawDownload Vulnerable App: N/A …

Read more »

Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader

<div dir="ltr" style="text-align: left;" trbidi="on"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/hacker-finds-how-easy-is-to-steal-money.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;">Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader</a><br /> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Next time just be careful while swiping your credit card at small retailers or trendy stores that use Square Reader to accept credit card payments.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The increasingly popular and widely used <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Square Reader can be easily turned into a skimming device</i></b> that can be used to steal your credit card data, a group of researchers warned.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL-P1md7KDrktfEUDBzsa_17zU-72Jn4gRS4nqi0cYgwez3RnOeltE5E1036bdVKYCPUly-OzNWj-DCYSZvQFBdA7jK3opujz_5JAr4_wAq1Pqs6T0HO53H2cW6dyLp4mR7KqqdYvSKyFV/s1600/Skimming-square-credit-card-reader.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="175" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL-P1md7KDrktfEUDBzsa_17zU-72Jn4gRS4nqi0cYgwez3RnOeltE5E1036bdVKYCPUly-OzNWj-DCYSZvQFBdA7jK3opujz_5JAr4_wAq1Pqs6T0HO53H2cW6dyLp4mR7KqqdYvSKyFV/s1600/Skimming-square-credit-card-reader.png" width="320" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <a class="url entry-title" href="http://thehackernews.com/2015/08/square-reader-credit-card-skimming-hack.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;"></a><br /> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Square Reader is a tiny device that allows small retailers to easily accept credit and debit card payments without having to spend the money on the traditional point of sale systems.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, despite its convenience, this cheap and easy-to-use alternative has a critical flaw that could allow anyone to easily steal your payment card information.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> All an attacker need is a screwdriver, superglue, and<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> roughly 10 minutes to turn the latest generation Square Reader into a tiny, portable card skimmer</i></b>.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Converting a New Generation Square Reader into a Card Skimmer?</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> A team of three security researchers from Boston University has discovered a way to physically modify the device and <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: italic; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">disable the encryption </b>that generally protects your credit card data being transmitted to the smartphones.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The tampered device will look exactly like the Square Reader, but Square counters that the tampered device won't work with the official Square app.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> However, researchers claim that even so, the modified device can still be used as a regular credit card skimmer to store and record card information.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> An attacker could even develop an unofficial app that looks legit, but hides skimming code underneath. While chances of encountering such a device are unlikely, it's worth keeping an eye on your bank statements.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Method to Steal Credit Card Data without tampering with Square Reader</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Besides this method, the researchers also discovered another flaw that allowed them to <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">record credit card data directly into a smartphone</i></b>, even by using a regular, non-altered, encrypted reader.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Malicious merchants can used the method to scam their customers by first swiping the credit cards on their smartphone and later play them back through the Square app to make fraudulent transactions.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"I can take that signal and convert it using a decoder freely available online, and then I have your credit card information," </i><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Alexandrea Mellen</i></b>, one of the three security researchers, <a href="http://motherboard.vice.com/read/researchers-turn-square-reader-into-credit-card-skimmer-in-under-10-minutes" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">told</a> Motherboard.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Square admitted that there is a possibility to playback recorded swipes using the methods described by the researchers, but the company dismissed this as an actual flaw.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"We do not see it as a security risk," </i>a Square employee wrote in the report <a href="https://hackerone.com/reports/38682" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">published</a> on the Square's bug bounty service HackerOne. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"In particular, it is not possible to process a stored swipe more than once."</i></blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The three security researchers, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">John Moore</i></b>, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Alexandrea Mellen</i></b> and <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Artem Losev</i></b>, are going to present their findings <a href="https://www.blackhat.com/us-15/briefings.html#mobile-point-of-scam-attacking-the-square-reader" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">during a talk</a>, "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MOBILE POINT OF SCAM: ATTACKING THE SQUARE READER</i></b>," on Wednesday at the Black Hat security conference in Las Vegas.</div> </div> </div>

Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader

Hacker Finds How Easy Is to Steal Money Using Square Credit-Card Reader Next time just be careful while swiping your credit card at small retailers or trendy stores that use Square Reader to accept c…

Read more »

Android Vulnerability Traps Devices in 'Endless Reboot Loop'

<div dir="ltr" style="text-align: left;" trbidi="on"> <a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/android-vulnerability-traps-devices-in.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;">Android Vulnerability Traps Devices in 'Endless Reboot Loop'</a><br /> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Poor Android users are facing a terrible, horrible, and awful week.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> Few days ago, Trend Micro security researchers uncovered a Android crashing vulnerability in the widely used mobile operating system, impacting the majority of Android devices in use.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVSShR-Nk2KOlUmViL2WFnob6NEAMf0uSLnUw0VFXitYolhC2GBW0uwGA_Z3hc6xKSn7ogR8UvKP4yCylKTWDJevX_ZqtBtWgfUTxUBmNr4m-9U6muo3_BFjeZ-HbsiVITHJ2IbYNC4mgd/s1600/android-reboot-vulnerability.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVSShR-Nk2KOlUmViL2WFnob6NEAMf0uSLnUw0VFXitYolhC2GBW0uwGA_Z3hc6xKSn7ogR8UvKP4yCylKTWDJevX_ZqtBtWgfUTxUBmNr4m-9U6muo3_BFjeZ-HbsiVITHJ2IbYNC4mgd/s1600/android-reboot-vulnerability.png" /></a></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <a class="url entry-title" href="http://thehackernews.com/2015/08/android-endless-reboot-bug.html" itemprop="url" rel="bookmark" style="background-color: white; border: 0px; color: #3d5a99; display: block; font-family: 'Open Sans', arial, sans-serif; font-size: 28px; font-stretch: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-decoration: none; vertical-align: baseline;"></a><br /> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> The report follows another significant Stagefright vulnerability that was revealed by separate researchers, who warned that nearly 950 Million Android phones can be hijacked by sending a simple text message or via malicious Android app or specially crafted web pages.</div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <br /></div> <div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> EXPLOIT TO TRAP ANDROID DEVICES IN ENDLESS REBOOTS</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Now, the security researchers have discovered a dangerous security bug in the Android operating system that they claim can "brick" your phone, making it unresponsive and completely useless.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The new vulnerability,<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> CVE-2015-3823</i>, can be exploited by potential hackers to cause your Android device to endless Reboot, and is similar to the Stagefright bug in that the flaw exists in the ‘mediaserver’ built-in program.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The vulnerability affects even more Android users. Nearly <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">90 percent of Android devices</i> running<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">versions 4.0.1 Jelly Bean to 5.1.1 Lollipop are vulnerable</i></b> to the latest security flaw, affecting every 9 out of 10 Active Android devices.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> HOW ANDROID EXPLOIT WORKS?</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> A Hacker can trigger endless reboots in two ways:</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> </div> <ul style="border: 0px; font-stretch: inherit; margin: 20px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Through a Malicious Android App</li> <li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Through a Specially-Crafted Web Site</li> </ul> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> In either case, the attacker lure victims to play malformed media file (.MKV file) using the buggy ‘mediaserver’ plugin. This will cause the mediaserver function to fall into an endless loop beyond the user’s control, forcing the Android device to get slow down until it reboots… again and again.</div> <blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;"> "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">The vulnerability is caused by an integer overflow in parsing MKV files</i>," mobile threat response engineer Wish Wu of Trend Micro wrote in a Monday <a href="http://blog.trendmicro.com/trendlabs-security-intelligence/android-mediaserver-bug-traps-phones-in-endless-reboots/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">blog post</a>. This "<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">causes the device to fall into an endless loop when reading video frames.</i>"</blockquote> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> SMALL QUIRK TO GET RID OF THIS FLAW</h3> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The firm reported the issue to Google, but the company is not taking it seriously, classifying it as a low-level vulnerability.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Until the official patch is delivered by Google, you can do a simple quirk if this bug hit your devices. All you need to do is reboot your devices in Safe Mode by holding the power button down and pressing Power Off option until you see the pop-up box asking you to restart in Safe Mode.</div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> <br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div> <div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Safe Mode will disable all third-party apps and information, allowing you to continue using your Android devices until a patch is released.</div> </div> </div>

Android Vulnerability Traps Devices in 'Endless Reboot Loop'

Android Vulnerability Traps Devices in 'Endless Reboot Loop' Poor Android users are facing a terrible, horrible, and awful week. Few days ago, Trend Micro security researchers uncovered a Android cra…

Read more »