Hack The Sec-Leading Resource Of Linux Tutorial

How to set up NTP server in CentOS

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
<span style="color: #0b5394; font-family: Verdana, sans-serif; font-size: large;"><b><u>How to set up NTP server in CentOS</u></b></span></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
Network Time Protocol (NTP) is used to synchronize system clocks of different hosts over network. All managed hosts can synchronize their time with a designated time server called an NTP server. An NTP server on the other hand synchronizes its own time with any public NTP server, or any server of your choice. The system clocks of all NTP-managed devices are synchronized to the millisecond precision.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5HCkD4lQUNs9KFUYmawo8CJ7qInyLL2usllJ_G43CKnM9tKtlRY_z-TEsz-WMV8hceXHcGaGUsvbgizqBsq75Ds5scwVp3ySYQucNNrsrHi1jBVypl8Mb9gDTLhxaIe0eveG0jltoki8/s1600/ntp_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5HCkD4lQUNs9KFUYmawo8CJ7qInyLL2usllJ_G43CKnM9tKtlRY_z-TEsz-WMV8hceXHcGaGUsvbgizqBsq75Ds5scwVp3ySYQucNNrsrHi1jBVypl8Mb9gDTLhxaIe0eveG0jltoki8/s400/ntp_www.hackthesec.co.in.png" width="400" /></a></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
In a corporate environment, if they do not want to open up their firewall for NTP traffic, it is necessary to set up in-house NTP server, and let employees use the internal server as opposed to public NTP servers. In this tutorial, we will describe how to configure a CentOS system as an NTP server. Before going into the detail, let's go over the concept of NTP first.</div>
<h2 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
NTP Hierarchy</h2>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
NTP clocks are organized in a layered hierarchy. Each level of the hierarchy is called a <em style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">stratum</em>. The notion of stratum describes how many NTP hops away a machine is from an authoritative time source.</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<a href="https://www.flickr.com/photos/xmodulo/16645732413/" rel="nofollow" style="border: 0px; color: #242448; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;" target="_blank"><img class="lazy" data-lazy-src="https://farm8.staticflickr.com/7590/16645732413_3b7af58186_c.jpg" data-lazy-type="image" src="https://farm8.staticflickr.com/7590/16645732413_3b7af58186_c.jpg" style="border: 0px; height: auto; max-width: 100%;" /></a></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
Stratum 0 is populated with clocks that have virtually no time drifts, such as atomic clocks. These clocks cannot be directly used over the network. Stratum <em style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">N</em> (<em style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">N</em> > 1) servers synchronize their time against Stratum <em style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">N</em>-1 servers. Stratum <em style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">N</em> clocks may be connected with each other over network.</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
NTP supports up to 15 stratums in the hierarchy. Stratum 16 is considered unsynchronized and unusable.</div>
<h2 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
Preparing CentOS Server</h2>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
Now let's proceed to set up an NTP server on CentOS.</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
First of all, we need to make sure that the time zone of the server is set up correctly. In CentOS 7, we can use the<tt style="border: 0px; font-family: Monaco, Consolas, 'Andale Mono', 'DejaVu Sans Mono', monospace; font-size: 15px; font-stretch: normal; line-height: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">timedatectl</tt> command to view and change the server time zone (e.g., "Australia/Adelaide")</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# timedatectl list-timezones | grep Australia<br /># timedatectl set-timezone Australia/Adelaide<br /># timedatectl</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<a href="https://www.flickr.com/photos/xmodulo/16645732463/" rel="nofollow" style="border: 0px; color: #242448; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;" target="_blank"><img src="https://farm8.staticflickr.com/7605/16645732463_db75a0bdcd_o.png" style="border: 0px; height: auto; max-width: 100%;" /></a></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
Go ahead and set up necessary software using <tt style="border: 0px; font-family: Monaco, Consolas, 'Andale Mono', 'DejaVu Sans Mono', monospace; font-size: 15px; font-stretch: normal; line-height: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">yum</tt>.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# yum install ntp</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
Then we will add the global NTP servers to synchronize time with.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# vim /etc/ntp.conf</div>
<pre style="background: rgb(238, 238, 238); border: 1px dashed rgb(204, 204, 204); color: #445263; margin-bottom: 15px; overflow: auto; padding: 10px;">server 0.oceania.pool.ntp.org
server 1.oceania.pool.ntp.org
server 2.oceania.pool.ntp.org
server 3.oceania.pool.ntp.org
</pre>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
By default, NTP server logs are saved in /var/log/messages. If you want to use a custom log file, that can be specified as well.</div>
<pre style="background: rgb(238, 238, 238); border: 1px dashed rgb(204, 204, 204); color: #445263; margin-bottom: 15px; overflow: auto; padding: 10px;">logfile /var/log/ntpd.log
</pre>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
If you opt for a custom log file, make sure to change its ownership and SELinux context.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# chown ntp:ntp /var/log/ntpd.log<br /># chcon -t ntpd_log_t /var/log/ntpd.log</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
Now initiate NTP service and make sure it's added to startup.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# systemctl restart ntp<br /># systemctl enable ntp</div>
<h2 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
Verifying NTP Server Clock</h2>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
We can use the <tt style="border: 0px; font-family: Monaco, Consolas, 'Andale Mono', 'DejaVu Sans Mono', monospace; font-size: 15px; font-stretch: normal; line-height: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ntpq</tt> command to check how the local server's clock is synchronized via NTP.</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<a href="https://www.flickr.com/photos/xmodulo/16645732513/" rel="nofollow" style="border: 0px; color: #242448; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;" target="_blank"><img src="https://farm9.staticflickr.com/8713/16645732513_1823736ca8_b.jpg" style="border: 0px; height: auto; max-width: 100%;" /></a></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
The following table explains the output columns.</div>
<table id="content" style="background-color: white; border-collapse: collapse; border-spacing: 0px; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin: 0px 0px 1.5em; outline: 0px; padding: 0px; vertical-align: baseline; width: 789px;"><tbody style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">remote</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">The sources defined at ntp.conf. '*' indicates the current and best source; '+' indicates that these sources are available as NTP source. Sources with - are considered unusable.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">refid</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">The IP address of the clock with which the remote server clock is synchronized with.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">st</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">Stratum</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">t</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">Type. 'u' is for unicast. Other values may include local, multicast, broadcast.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">when</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">The time elapsed (in seconds) since the last contact with the server.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">poll</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">Polling frequency with the server in seconds.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">reach</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">An octal value that indicates whether there are any errors in communication with the server. The value 377 indicates 100% success.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">delay</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">The round trip time between our server and the remote server.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">offset</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">The time difference between our server and the remote server in milliseconds.</td></tr>
<tr style="border: 0px; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; font-weight: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">jitter</td><td style="border: 1px solid black; font-family: inherit; font-size: 15.3000001907349px; font-style: inherit; margin: 0px; outline: 0px; padding: 5px; vertical-align: baseline;">The average time difference in milliseconds between two samples.</td></tr>
</tbody></table>
<h2 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
Controlling Access to NTP Server</h2>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
By default, NTP server allows incoming queries from all hosts. If you want to filter incoming NTP synchronization connections, you could add a rule in your firewall to filter the traffic.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# iptables -A INPUT -s 192.168.1.0/24 -p udp --dport 123 -j ACCEPT<br /># iptables -A INPUT -p udp --dport 123 -j DROP</div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
The rule will allow NTP traffic (on port UDP/123) from 192.168.1.0/24, and deny traffic from all other networks. You can update the rule to match your requirements.</div>
<h2 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
Configuring NTP Clients</h2>
<h3 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; font-size: 1.2em; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
1. Linux</h3>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
NTP client hosts need the <tt style="border: 0px; font-family: Monaco, Consolas, 'Andale Mono', 'DejaVu Sans Mono', monospace; font-size: 15px; font-stretch: normal; line-height: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ntpdate</tt> package to synchronize time against the server. The package can be easily installed using <tt style="border: 0px; font-family: Monaco, Consolas, 'Andale Mono', 'DejaVu Sans Mono', monospace; font-size: 15px; font-stretch: normal; line-height: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">yum</tt> or <tt style="border: 0px; font-family: Monaco, Consolas, 'Andale Mono', 'DejaVu Sans Mono', monospace; font-size: 15px; font-stretch: normal; line-height: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">apt-get</tt>. After installing the package, run the command with the IP address of the server.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# ntpdate <server-IP-address></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
The command is identical for RHEL and Debian based systems.</div>
<h3 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; font-size: 1.2em; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
2. Windows</h3>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
If you are using Windows, look for 'Internet Time' under Date and Time settings.</div>
<h3 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; font-size: 1.2em; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
3. Cisco Devices</h3>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
If you want to synchronize the time of a Cisco device, you can use the following command from the global configuration mode.</div>
<div class="console" style="background: rgb(0, 153, 204); border: 0px none; color: white; font-family: monospace; font-size: 13px; margin: 0px 0px 15px; outline: 0px; overflow: auto; padding: 5px; vertical-align: baseline; white-space: nowrap;">
# ntp server <server-IP-address></div>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
NTP enabled devices from other vendors have their own parameters for Internet time. Please check the documentation of the device if you want to synchronize its time with the NTP server.</div>
<h2 style="background-color: white; border: 0px; clear: none; color: #445263; font-family: 'Open Sans', Arial, Helvetica, sans-serif; line-height: 1.2em; margin: 0px 0px 10px; outline: 0px; padding: 0px; vertical-align: baseline;">
Conclusion</h2>
<div style="background-color: white; border: 0px; color: #445263; font-family: Arial, Helvetica, sans-serif; font-size: 15.3000001907349px; line-height: 22.9500007629395px; margin-bottom: 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
To sum up, NTP is a protocol that keeps the clocks across all your hosts in sync. We have demonstrated how we can set up an NTP server, and let NTP enabled devices synchronize their time against the server.</div>
</div>

How to set up NTP server in CentOS

How to set up NTP server in CentOS Network Time Protocol (NTP) is used to synchronize system clocks of different hosts over network. All...

Critical iOS Flaw allowed Hackers to Steal Cookies from Devices

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #0b5394; font-family: Verdana, sans-serif; font-size: large;"><b>Critical iOS Flaw allowed Hackers to Steal Cookies from Devices</b></span><br />
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Apple has patched a critical vulnerability in its iOS operating system that allowed criminal hackers to impersonate end users' identities by granting read/write access to website's unencrypted authentication cookies.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhud3SRZemHpKuHpD4FwUnupZozWBMDZmVVcxFPoCfLaqutDaT1ZepZdXqOOVIfiNWgX0MhD_Dl81mEhYGwsO1xuyjN4O-MQBWorhEayB3p4uPnVARNV4q-JdN_G3-Do3DDQjsIyd04jfI/s1600/iOS-Cookie-Theft_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhud3SRZemHpKuHpD4FwUnupZozWBMDZmVVcxFPoCfLaqutDaT1ZepZdXqOOVIfiNWgX0MhD_Dl81mEhYGwsO1xuyjN4O-MQBWorhEayB3p4uPnVARNV4q-JdN_G3-Do3DDQjsIyd04jfI/s640/iOS-Cookie-Theft_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The vulnerability was fixed with the release of iOS 9.2.1 on Tuesday, almost three years after it was first discovered and reported to Apple.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The vulnerability, dubbed "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Captive Portal</b>" bug, was initially discovered by <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Adi Sharabani</i> and <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Yair Amit </i>from online security company Skycure and privately reported to Apple in June 2013.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Here's How the Vulnerability Worked</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The vulnerability caused due to the way iOS handles <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Cookie Stores </b>at <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Captive Portals</b>, generally a login page that requires users to authenticate themselves before connecting to the free or paid public Wi-Fi hotspots when they are first joining.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
So, when a user with a vulnerable iPhone or iPad connects to a captive-enabled network (<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">sample page shown in the screenshot below</i>) – typically at coffee shops, hotels, and airports – a login window is displayed showing terms and conditions over a standard, unencrypted HTTP connection.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfoMzsRHFZuLEk-j4M3N2oLMoaB2Ro5EDrFngIVUnFZVCsa1wsiEnlJTinxxIKa-7F9xVQmzCEV0L0ujJPasZSttHK0DSEeqzT9ZNLLzkkffUMg7NbE-fPm3odJwVX9Kgksu_CFT5wzNk/s1600/hotel-wifi_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfoMzsRHFZuLEk-j4M3N2oLMoaB2Ro5EDrFngIVUnFZVCsa1wsiEnlJTinxxIKa-7F9xVQmzCEV0L0ujJPasZSttHK0DSEeqzT9ZNLLzkkffUMg7NbE-fPm3odJwVX9Kgksu_CFT5wzNk/s640/hotel-wifi_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Once accepted, the affected user is able to browse the Internet normally, but the embedded browser shares its unencrypted cookie store with the Safari browser.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
According to a <a href="https://www.skycure.com/blog/shared-cookie-stores-bug-fixed-in-ios-9-2-1/" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">blog post</a> published by Skycure on Wednesday, this shared resource allowed hackers to create their own fake captive portal and associate it with the Wi-Fi network, enabling them to steal virtually any unencrypted cookie stored on the device when an affected iOS device is connected.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Here's the List of Attacks a Hacker can Perform</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
According to researchers, this captive portal vulnerability allows an attacker to:</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Perform an <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Impersonation Attack</u></b> – Attackers could steal users' unencrypted (HTTP) cookies associated with a website of their choice, allowing them to impersonate the victim's identity on the particular website.</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Perform a <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Session Fixation Attack</u></b> – This means, logging the victim into an attacker-controlled account (because of the shared Cookie Store). When the victims browse to the affected site via the Safari mobile browser, they'll be logged into the hacker's account instead of their own.</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Perform a <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Cache-Poisoning Attack</u></b> on the websites of the attacker's choice (by returning an HTTP response with caching headers). In this way, the attacker could execute malicious JavaScript every time the victim connects to that website in the future via the Safari mobile browser.</li>
</ul>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Patch Your Device Right Now!</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The flaw affected iPhone 4S and iPad 2 devices and later. However, the vulnerability has been resolved with the release of <a href="https://support.apple.com/en-us/HT205732" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">iOS 9.2.1</a> in which there is an isolated cookie store for captive portals that will keep hackers at bay.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Skycure says that this is the longest time ever taken by Apple to fix a bug, but the patch was much more complicated than it would be for a typical bug. Though, the company says it has no reports of exploits in the wild.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
So, in order to keep yourself safe from such attacks, <a href="https://support.apple.com/en-us/HT205732" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">download iOS 9.2.1</a> as an over-the-air update from the Settings menu on your iOS device right now.</div>
</div>
</div>
</div>

Critical iOS Flaw allowed Hackers to Steal Cookies from Devices

Critical iOS Flaw allowed Hackers to Steal Cookies from Devices Apple has patched a critical vulnerability in its iOS operating system th...

Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #0b5394; font-family: Verdana, sans-serif; font-size: large;"><b>Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable</b></span><br />
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
A new critical zero-day vulnerability has been discovered in the<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Linux kernel </b>that could allow attackers to gain root level privileges by running a malicious Android or Linux application on an affected device.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIKMeXU2VZbuRE7ZoDs_fv0Mq9V1uI9TDQHRhWOa-natzF_3BMn-785jZD7VZ2QfcHRKEYOfoQVaAbqgZvWCQVVJCaAJzYXUw2La9yUckAMb09DPzL02dwpkBXIYhn3wrAPeITl5qKi3w/s1600/linux-kernel-hacking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIKMeXU2VZbuRE7ZoDs_fv0Mq9V1uI9TDQHRhWOa-natzF_3BMn-785jZD7VZ2QfcHRKEYOfoQVaAbqgZvWCQVVJCaAJzYXUw2La9yUckAMb09DPzL02dwpkBXIYhn3wrAPeITl5qKi3w/s640/linux-kernel-hacking_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" />The critical Linux kernel flaw (<a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-0728" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">CVE-2016-0728</a>) has been identified by a group of researchers at a startup named Perception Point.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The vulnerability was present in the code since 2012, and affects any operating system with <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Linux kernel 3.8 and higher</b>, so there are probably tens of millions of computers, both 32-bit and 64-bit, exposed to this flaw.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, the most bothersome part is that the problem affects <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Android versions KitKat and higher</b>, which means about 66 percent of all Android devices are also exposed to the serious Linux kernel flaw.</div>
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Impact of the Zero-Day Vulnerability</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
An attacker would only require local access to exploit the flaw on a Linux server.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
If successfully exploited, the vulnerability can allow attackers to get root access to the operating system, enabling them to delete files, view private information, and install malicious apps.</div>
<blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"It's pretty bad because a user with legitimate or lower privileges can gain root access and compromise the whole machine," </i><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Yevgeny Pats</b>, co-founder and CEO at security vendor Perception Point, said in a <a href="http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">blog post</a> published today.<br style="content: ' '; display: block; margin: 6px 0px 0px; outline: 0px; padding: 0px;" /><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"With no auto update for the kernel, these versions could be vulnerable for a long time. Every Linux server needs to be patched as soon the patch is out."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Usually, flaws in Linux kernel are patched as soon as they are found; therefore, Linux-based operating systems are considered to be more secure than others. However, zero-day vulnerability recently discovered in the Linux kernel made its way for almost 3 years.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The Cause of the Critical Linux Kernel Vulnerability</h3>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjihGwQ8UxM1NUn_brrCEJ9HFiJqzkMK-n8e-BEafmJ_PEeDA0tvHNG3spoxqrmwna3JceapqZb0TthqlZOvPkM4R3tq1DrcjSm9-5C_7BGIRsUz24n9gUCYQsv4QPtcBFg69CFfgXn940/s1600/linux-root-exploit_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjihGwQ8UxM1NUn_brrCEJ9HFiJqzkMK-n8e-BEafmJ_PEeDA0tvHNG3spoxqrmwna3JceapqZb0TthqlZOvPkM4R3tq1DrcjSm9-5C_7BGIRsUz24n9gUCYQsv4QPtcBFg69CFfgXn940/s640/linux-root-exploit_www.hackthesec.co.in.png" width="640" /></a></div>
<div>
<br /></div>
<div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The vulnerability is actually the result of a <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Reference Leak</b> in the keyrings facility built into various flavors of Linux. The keyrings facility is primarily a way to encrypt and store login data, encryption keys and certificates, and then make them available to applications.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, a reference leak could be abused by attackers to ultimately execute arbitrary code in the Linux kernel.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
So far, the researchers said, no exploits have been discovered in the wild that take advantage of this vulnerability.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Perception Point has provided a technical analysis of the vulnerability and how one can exploit it, including <a href="https://gist.github.com/PerceptionPointTeam/18b1e86d1c0f8531ff8f" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">proof-of-concept</a> (PoC) exploit code published on its Github page.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Patch Expected to Roll Out Soon</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The good news is that Perception Point has already reported the flaw to the Linux team, and patches are expected to roll out today to devices with automatic updates.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, it may take a little longer on Android devices to receive the patch, given the fact that most updates aren’t pushed automatically by manufacturers and carriers.<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><h3 style="border: 0px; font-family: inherit; font-size: 1.4em; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: left !important; vertical-align: baseline;">
<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">How Patch Linux Kernel Vulnerability (CVE-2016-0728)</b></h3>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Type following commands as per your Linux distro:</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Debian or Ubuntu Linux:</b> sudo apt-get update && sudo apt-get upgrade</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">RHEL / CentOS Linux:</b> sudo yum update</li>
</ul>
</div>
</div>
</div>
</div>
</div>
</div>

Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable

Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable A new critical zero-day vulnerability has been discovered in the...

Next Hacker to Organize Biggest Java Programming Competition In Germany

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: #0b5394; font-family: Verdana, sans-serif; font-size: large;">Next Hacker to Organize Biggest Java Programming Competition In Germany</span><br />
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Great news for Hackers and Bug-hunters who enjoy Programming and playing around with Software.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
A worldwide group of like-minded computer programmers is hosting <a href="http://www.nexthacker.com/" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">The Next Hacker IPPC event</a>on the 26th and 27th of February in Berlin, Germany, where participants can meet hackers and programmers from around the world while getting an opportunity to participate in one of the major hacking-related events in history.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1Zt7qQdk3amxoikdRkz4S50KaRruo3LQZm6Bo4Xv6d3LxkqMGyXfjsjqyOL5QJbgYrjf1S_Kea5baN9Muz_7TRnIXhOdQOcYUE1FEAJySdmZvzBZuqMpnacyfXQsDqDdNO4KUfzZ1EL8/s1600/next-hacker-java_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1Zt7qQdk3amxoikdRkz4S50KaRruo3LQZm6Bo4Xv6d3LxkqMGyXfjsjqyOL5QJbgYrjf1S_Kea5baN9Muz_7TRnIXhOdQOcYUE1FEAJySdmZvzBZuqMpnacyfXQsDqDdNO4KUfzZ1EL8/s640/next-hacker-java_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Yes,<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> The Next Hacker</i> is inviting Java programmers to participate in its <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">International Programming Player Competition (IPPC)</i></b>, which is going to be held on the second day of the event, i.e., 27th of February.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The first day of 2016 IPPC event will offer technical sessions on programming, an open panel discussion with renowned hackers and programmers, as well as an opportunity for the world's top programmers to meet leading high-tech companies worldwide.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The Next Hacker is an outstanding programming event with more than 5,000 attendees – no less than 3,000 contestants, including up-and-coming developers and programmers, as well as more than 2,000 guests.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
All the guests invited to the event are avid hacking enthusiasts, keeping a close eye on the unique hacking challenges that the contestants will have to face.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The massive number of participants will try to showcase their craft while facing amazingly difficult challenges. This IPPC show is a pleasure to attend and offers the total reward of around $500K in cash prize.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The Challenge – Be Fast, Be Furious</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The challenge will start with each programmer having to successfully find and fix holes in three random Java programs.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The fastest programmers will win a share of the cash pool.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The prize money of total $500,000 will be distributed among First 100 programmers.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">First prize – $150,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Second prize – $70,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Third prize – $50,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fourth prize – $35,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fifth prize – $30,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Sixth prize – $25,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Seventh prize – $20,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Eighth prize – $15,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Ninth prize – $10,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Tenth prize – $5,000</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Eleventh to Hundredth prize – $1,000 each</li>
</ul>
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
 we will also be there in the event to keep you updated about the Next Hacker International Programming Player Competition.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The Benefit</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Your participation in the Next Hacker Programming Contest will allow you to:</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Enhance your visibility</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Show off your skills</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Express your own talent</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Grow your international network and establish contacts with new colleagues and open source software companies</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">And, of course, win a prize!</li>
</ul>
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
So, <a href="http://www.nexthacker.com/SignUpLogin" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Sign Up at IPPC</a> now and be a part of one of the Biggest Programming Event.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Roll up your sleeves, Master your skills, Conquer the digital frontier, and Be crowned for the Ultimate Next Hacker.</div>
</div>
</div>
</div>

Next Hacker to Organize Biggest Java Programming Competition In Germany

Next Hacker to Organize Biggest Java Programming Competition In Germany Great news for Hackers and Bug-hunters who enjoy Programming and ...

Casino Sues Cyber Security Company Over Failure to Stop Hackers

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
IT security firm <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Trustwave</b> has been sued by a Las Vegas-based casino operator for conducting an allegedly <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"woefully inadequate"</i> investigation following a network breach of the casino operator’s system.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Affinity Gaming</b>, an operator of 5 casinos in Nevada and 6 elsewhere in the United States, has questioned Trustwave's investigation for failing to shut down breach that directly resulted in the theft of credit card data, allowing credit card thieves to maintain their foothold during the investigation period.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhz7fbu7-oD7gOUVK0dCUKptu4QadIRLC7TXMK8rhNatd-711KrygDpyBATzOL5pR3f5QwTzewXs8Qd_J9rhCdUxw1aBSCTdv3CuC0Wqy1zLqvacYAKKalSmsM3rHqipBZjCZj_BVS_mJc/s1600/casino-hacker_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhz7fbu7-oD7gOUVK0dCUKptu4QadIRLC7TXMK8rhNatd-711KrygDpyBATzOL5pR3f5QwTzewXs8Qd_J9rhCdUxw1aBSCTdv3CuC0Wqy1zLqvacYAKKalSmsM3rHqipBZjCZj_BVS_mJc/s640/casino-hacker_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The lawsuit, filed in the US District Court in Nevada, is one of the first cases of its kind where a client challenges a cyber security firm over the quality of its investigation following a hacking attack.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Casino Sued an IT Security Firm</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Affinity Gaming said it hired Trustwave in late 2013 to analyze and clean up computer network intrusions that allowed attackers to obtain its customers' credit card data.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
It was reported that the details on more than <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">300,000 credit cards </b>used by customers in Affinity's restaurants and hotels were accessed by cyber crooks who compromised its systems.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
A report submitted by Trustwave in mid-January 2014 noted that the security firm had:</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Identified the source of the data breach</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Contained the malware responsible for the incident</li>
</ul>
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, more than a year later after the casino operator was hit by a second payment card breach, Affinity allegedly learned from Trustwave's competing cybersecurity firm, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Mandiant</b>, that the <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">malware had never been fully removed.</i></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; font-style: normal; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The Lawsuit Filed by the Casino Operator</h3>
<div style="border: 0px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Here's what Affinity claimed in its <a href="http://www.slideshare.net/SwatiKhandelwal15/trustwave-complaint" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">lawsuit filed</a> at the end of December in the US district court of Nevada:</div>
<blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
Hiring a firm with the proper data breach response expertise, such as Trustwave held itself out to be, was of paramount importance for Affinity Gaming...Affinity isn't an IT security firm and lacks the level of expertise.</blockquote>
<br style="content: ' '; display: block; font-style: normal; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
With respect to the apparent data breach, Affinity Gaming was wholly dependent on and subordinate in terms of its understanding, knowledge, and capabilities, to Trustwave, relying on [it] to diagnose, investigate, and prescribe appropriate measures to address.</blockquote>
<br style="content: ' '; display: block; font-style: normal; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
Mandiant’s forthright and thorough investigation concluded that Trustwave's representations were untrue, and Trustwave's prior work was woefully inadequate. In reality, Trustwave lied when it claimed that its so-called investigation would diagnose and help remedy the data breach when it represented that the data breach was "contained," and when it claimed that the recommendations it was offering would address the data breach. Trustwave...failed to identify the means by which the attacker had breached Affinity Gaming's data security. Thus, Trustwave could not in good faith have made the foregoing representations to Affinity Gaming.</blockquote>
<div style="border: 0px; font-stretch: inherit; font-style: normal; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, Trustwave denies any wrongdoing. A Trustwave spokesperson <a href="http://www.ft.com/intl/cms/s/0/05b4ee8c-badd-11e5-bf7e-8a339b6f2164.html#axzz3xOXXzWG8" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">told</a> the Financial Times (FT) on Friday, <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"We dispute and disagree with the allegations in the lawsuit and we will defend ourselves vigorously in court."</i></div>
</i></div>
</div>
</div>

Casino Sues Cyber Security Company Over Failure to Stop Hackers

IT security firm Trustwave has been sued by a Las Vegas-based casino operator for conducting an allegedly "woefully inadequate&quo...

Apple's Mac OS X Still Open to Malware, Thanks Gatekeeper

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: blue; font-family: Georgia, Times New Roman, serif; font-size: large;"><b><u>Apple's Mac OS X Still Open to Malware, Thanks Gatekeeper</u></b></span><br />
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Apple Mac Computers are considered to be much safer than Windows computers at keeping out the viruses and malware, but the new Exploit discovered by researchers again proves it indeed quite false.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmyIr2jdRXABJDiCd3GMiI5z0y81TEg608O3SSNDXj_0sr0EwhXG4_zyK2H446EXewAv1BA_EQEuemvunijHZMBQ0kJXnDTsFEbVfVyKQo1dml3_Tmc8lGmoQBl6VbY12GrMAkPU7RTdk/s1600/mac-os-x-gatekeeper-hack_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmyIr2jdRXABJDiCd3GMiI5z0y81TEg608O3SSNDXj_0sr0EwhXG4_zyK2H446EXewAv1BA_EQEuemvunijHZMBQ0kJXnDTsFEbVfVyKQo1dml3_Tmc8lGmoQBl6VbY12GrMAkPU7RTdk/s640/mac-os-x-gatekeeper-hack_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Last year, The Hacker News reported a deadly simple exploit that completely bypassed one of the core security features in Mac OS X known as <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Gatekeeper</b>.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Apple released a patch in November, but now the same security researcher who discovered the original Gatekeeper bypass vulnerability said he found an equally obvious workaround.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Patrick Wardle, ex-NSA staffer and head of research at security intelligence firm Synack, said the security patch released by Apple was "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">incredibly weak</b>" and that the update was "<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">easy to bypass</b>" in minutes.</div>
<div style="background-color: white; border: 0px; color: #222222; font-family: 'Open Sans', arial, Helvetica, sans-serif; font-size: 16px; font-stretch: inherit; line-height: 31px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<h3 style="border: 0px; font-size: 1.4em; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Gatekeeper's Failure Once Again</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Introduced in July of 2012, Gatekeeper is Apple's anti-malware feature designed to block untrusted, dodgy apps from running, keeping Mac OS X systems safe from malware.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, the reality is slightly different, according to Wardle. Hackers can install malicious software on Mac computers, even when Gatekeeper is set to its most restrictive setting.</div>
<blockquote class="tr_bq" style="border-left-color: rgb(232, 232, 232); border-left-style: solid; border-width: 0px 0px 0px 5px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"Even on a fully-patched OS X 10.11.2 system, Gatekeeper is trivial to bypass," </i>Wardle wrote in a <a href="https://www.synack.com/2016/01/15/synack-s-shmoocon/" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">blog post</a>. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"So hackers can (re)start their trojan distributions while nation states can get back to MitM’ing HTTP downloads from the internet."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
In September, Wardle realized that before allowing any apps to execute on an OS X machine, Gatekeeper performs a number of checks, such as:</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<ul style="border: 0px; font-stretch: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Checking the initial digital certificate of a downloaded app</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Ensuring the app has been signed with an Apple-recognized developer certificate</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Ensuring the app has been originated from the official App Store</li>
</ul>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
But, what Gatekeeper fails to check is – whether the app already trusted by OS X runs or loads other files from the same folder.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
However, in the name of a security patch, all Apple did was simply blacklist the signed apps Wardle was abusing to bypass Gatekeeper, rather than fixing the underlying problem.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-family: inherit; font-size: 1.4em; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: left !important; vertical-align: baseline;">
How to Bypass Gatekeeper in OS X?</h3>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
This was not effective in preventing attacks. Wardle found a new Apple-signed file that allow him to do the same. Notably, the file was offered by the popular anti-virus firm Kaspersky Labs.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
All Wardle has done is:</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /><ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 20px 20px 20px 35px; outline: 0px; padding: 0px 0px 0px 5px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Identified an already-signed binary file (<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Binary A</b>) that runs a separate app (<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Binary B</b>) located in the same folder</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Renamed <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Binary A</b></li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Swapped out the legitimate <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Binary B</b> with a malicious one</li>
<li style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Then bundled malicious file in the same folder under the same file name, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Binary B</b></li>
</ul>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Now, Binary B needs no digital certificate or Apple developer certificate to run, so it can be used to install anything the attacker wants, completely bypassing Gatekeeper.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Wardle notified Apple about his latest finding, and the company rolled out an update blocking the new files Wardle privately reported it, which is not a right approach. Apple should come up with a more comprehensive fix to address the issue.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-family: inherit; font-size: 1.4em; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: left !important; vertical-align: baseline;">
How to Protect Yourself?</h3>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
In the meantime, Wardle suggested Mac users to only download software from the Mac App Store and be more careful while downloading apps from the internet.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: ' '; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
Wardle will be presenting his findings at the<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Shmoocon conference in Washington D.C </i>this weekend. He also released a complementary tool for Gatekeeper on Friday, a free tool dubbed<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><a href="https://objective-see.com/products/ostiarius.html" rel="nofollow" style="border: 0px; color: #1177b8; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Ostiarius</a></b>, that checks all file executions and blocks untrusted, unsigned code originating from the Web. </div>
</div>

Apple's Mac OS X Still Open to Malware, Thanks Gatekeeper

Apple's Mac OS X Still Open to Malware, Thanks Gatekeeper Apple Mac Computers are considered to be much safer than Windows computers ...