Logging The Cyber World

Tags: applidium, crack apps, iphone 4s, Siri, siri protocol

It’s been a trying month for Apple’s security team: First, a researcher pokes a hole in the company’s tight control of its App Store. And now another group of hackers claim they’ve cracked its newest crown jewel and Google killer, the voice command and search tool Siri, to run on any device–potentially even Google’s.

“Today, we managed to crack open Siri’s protocol,” reads a blog post by a group of French security researchers and consultants at the Paris-based firm Applidium. “As a result, we are able to use Siri’s recognition engine from any device. Yes, that means anyone could now write an Android app that uses the real Siri! Or use Siri on an iPad! And we’re going to share this know-how with you.”

More on Forbes

In an effort to continue their reign of hacking news supremacy, both LulzSec and Anonymous have claimed responsibility for a 10 gigabyte file containing social security numbers, credit card details, and vast amounts of police files including emails and confidentially sent tips on crimes. This information comes from more than 70 so-called “small-down” law enforcement agencies. Both hacking groups say they want to show solidarity with with Topiary and the Anonymous PayPal LOIC defendants as well as others – Topiary being the supposed name of one Jake Davis, a teen suspected of working with LulzSec to illegally hack several institutions.

This team of hackers, Anonymous and LulzSec, working under the name AntiSec, aka Anti-Security, released this file containing aproximately 100,000 emails from officers in states such as Louisiana, Mississippi, Arkansas, and Kansas amongst other files. Inside these emails was at least one appearing to contain dozens of tip-offs about local seemingly illegal incidents from members of the public, including names and addresses of the supposed offenders and/or tipsters.

More here

Tags: affiliate site, fbi, fbi battleships, lulzsec, lulzsec hackers

Mischief-making hacking group LulzSec hacked into the systems of an FBI-affiliated public-private partnership organisation, defacing its website and leaking its email database in the process.

Website defacements included mooching messages such as “LET IT FLOW YOU STUPID FBI BATTLESHIPS” and a video clip. Part of the message suggests that LulzSec launched the attack as some sort of response to the Obama administration’s plans to make hacking an act of war.

More on TheRegister

Tags: bit defender, facebook block, facebook malware, facebook security, malicious content, SafeGo

According to data from security company BitDefender, there’s harmful content behind about 20 percent of posts on a Facebook news feed.

BitDefender said about 60 percent of attacks on Facebook stem from threatening third-party apps, according to a report in the Register. About 22 percent of the offending apps claim to tell you who has been snooping on your profile, 15 percent tout extras in social games like Farmville, 11 percent offer counterfeit advertisements for a “dislike” button, and 7 percent focus on social iterations of console games like “Super Mario Brothers.”

More on PCMag

Tags: 3PAR, antivirus, chip-maker, intel, mcaffe, software deal

Intel Corp will acquire security software company McAfee Inc. in an all-cash deal worth USD 7.68 billion that will bolster the world’s largest chip-maker’s computing portfolio, especially in wireless mobility offerings.

The chip-maker will purchase all the common shares of McAfee at a price of USD 48 per piece, valuing the deal at USD 7.68 billion, Intel said in a statement today.

Both the companies have a good presence in India.

In the backdrop of improving economic conditions, there have been a slew of deals worldwide in recent months. Earlier this week, computer-maker Dell on Monday had announced that it would acquire data storage company 3PAR Inc. for USD 1.15 billion.

Read more

Tags: botnet, botnet masters, mariposa network, ring network, virus infected computers

SAN FRANCISCO – Authorities have smashed one of the world’s biggest networks of virus-infected computers, a data vacuum that stole credit cards and online banking credentials from as many as 12.7 million poisoned PCs.

The “botnet” of infected computers included PCs inside more than half of the Fortune 1,000 companies and more than 40 major banks, according to investigators.

Spanish investigators, working with private computer-security firms, have arrested the three alleged ringleaders of the so-called Mariposa botnet, which appeared in December 2008 and grew into one of the biggest weapons of cybercrime. More arrests are expected soon in other countries.

Spanish authorities have planned a news conference for Wednesday in Madrid.

Read more at Yahoo News

Tags: erasing history, internet, online tracks, privacy, private browsing

Apple calls it “Private Browsing.” Microsoft calls it “InPrivate.” Google’s new Chrome browser calls it “Incognito.” And yes, practically everyone else calls it “Porn Mode.”

Chrome’s launch on Tuesday confirmed a new feature as a must-have in Web-browsing software: a cloak of invisibility that hides the user’s path around the Web. Incognito browsing, like a similar setting in a new version of Internet Explorer released last week, is designed to erase any trace of the sites you’ve recently visited, wiping away cached pages and browsing history from your hard drive and turning off the browser’s autocomplete function, which can reveal what you’ve recently typed into text boxes.

That private mode can be used for hiding indiscretions in the Web’s red-light district, or, as Google innocently suggests, for planning “surprises like gifts or birthdays.”

Read the complete article at Forbes.com (Technology)

Tags: fedora, hacking, Linux, Open Source, red hat, security

Linux distributor red Hat has issued a critical security update after its servers were hacked last week.

The organisation has acknowledged the attack, and one on the Fedora servers as well. It says that it is investigating to see if data was stolen or malware introduced to its systems.

“In connection with the incident, the intruder was able to get a small number of OpenSSH packages relating only to Red Hat Enterprise Linux 4 (i386 and x86_64 architectures only) and Red Hat Enterprise Linux 5 (x86_64 architecture only) signed.

More at vnunet.com

Tags: botnets, facebook worms, koobface, myspace worms, network worms, networking sites, networms

Kaspersky Labs has detected two variants of Networm that attack MySpace and Facebook users. The worms transform victim machines into zombie computers to form botnets.

Kaspersky analysts are warning users that the worms, Win32.Koobface.a. and Networm.Win32.Koobface.b, are designed to upload additional malicious modules with other functionality via the Internet. “It is highly probable that victim machines will not only be used for spreading links via these social networking sites, but the botnets will also be used for other malicious purposes,” the analyst firm said in a statement.

Complete story @ Yahoo! News

Tags: aliens, government, hackers, NASA, UFO

“One of these people was a Nasa photographic expert, and she said that in building eight of Johnson Space Centre they regularly airbrushed out images of UFOs from the high-resolution satellite imaging. What she said was there was there: there were folders called “filtered” and “unfiltered”, “processed” and “raw”, something like that.” – Full interview @ BBC News