Subscribe
Add to Technorati Favourites
Add to del.icio.us



For you who longing for free Android antivirus, this is an exciting  news for you. Avast, one of the famous antivirus vendors, now has launched Android Antivirus you can use for free! This Antivirus mobile is named Avast Mobile Security.
Avast Free Mobile Security supports a number of features that are usually available only in paid-for Android security software. These include privacy reports, call and SMS filtering, SIM-card change notifications, firewall and application management.

By using Avast Mobile Security in your Android phone, your cell phone will be protected from virus, threat, hacker, even it’s able to minimize your loss if your Android cell phone is stolen. The antivirus component supports real-time protection and automatic updates. Updates can be configured to only be downloaded over certain types of connections and the interface can be protected with a password.
Call and SMS filtering can help device owners block annoying advertising calls or spam text messages. Users can define groups of phone numbers and configure the blocking intervals for them.The firewall component is only available for rooted devices because it requires special system-level access to enforce its rules. Device owners can use it to block individual applications from accessing the Internet over certain types of connections.
If your cell phone Android version is Android 2.1.x, 2.2.x, or 2.3.x, so you can download and install Avast Mobile Security directly from Android Market.

Hewlett-Packard (HPQ) released a firmware update Friday that is says will fix a susceptibility in some of the Palo Alto company’s popular LaserJet printers that researchers said could allow hackers to remotely take control of the devices. The company stressed that it will be “communicating this proactively to customers and partners” though not, it seems, just yet, with the press release on the update giving no details of the changes made by HP and failing to reveal which devices the new firmware is available for.
Last Month, team of researchers from Columbia University discovered that some Hewlett-Packard LaserJet printers, and possibly similar devices, did not verify software upgrades contained within so-called remote firmware updates. The researchers were able to offer firmware updates that included malicious software and then take control of the printer.Once the researchers were able to take control of HP printers, they were able to accomplish a host of potentially dangerous tasks. They said they could print a tax return while sending a copy to a hacker’s remote computer, compromising a host of personal information; easily disable printers; and even command a printer to continuously heat up its ink-drying component until it started to catch fire.
On Friday, HP issued a news release reiterating that no customers have reported unauthorized access to their LaserJet printers, and offered a firmware update that the company says will “mitigate this issue.” The update is available at www.hp.com/support, in the “Drivers” category.


ANONdroid is a JonDonym proxy client for Android smartphones. This nice piece of software is under ongoing development by the AN.ON project of the university Dresden. Project leader is Dr. Stefan Köpsell. ANONdroid uses the core libraries of JonDo with a smartphone compatible GUI.

ANONdroid acts as a proxy for your internet applications and will forward the traffic of your internet applications encrypted to the mix cascades. It is still under development, but a first version is ready for download from theAndoid market.
a secure browser configuration is important for anonymous surfing we recommend the use of Orweb browser. It is a browser for Orbot, but can be used with ANONdroid too. After installation you have to change the proxy settings of Orweb to localhost:4001.
How It Works
When you start the JAP client program, JAP first connects to the InfoService to check if the program version is still current. If the version of the program is no longer compatible with the software of the mix, the user is automatically offered a program update, since otherwise the JAP service could no longer be used.
In the next step, JAP registers with the first mix station of the chosen mix cascade. A permanent network connection between JAP and the first mix station remains until logoff.
On installation of JAP, the user already configured the web browser so that each packet of data sent goes through JAP instead of directly to the internet. JAP encrypts the data and sends it to the first mix station. The first mix station then mixes the data with that of other users and sends it to the second mix station which passes it on to the third mix station which decrypts and sends the data through a cache proxy to the internet.
Each mix carries out cryptographic operations on the message so that the JAP-encrypted data is only readable when it’s gone through the proper mixes in the proper order. That way it’s insured, that an eavesdropper either only receives unreadable (encrypted) data or can no longer determine the sender. In order for it to work correctly, only one mix in the cascade need be trusted not to inform the eavesdropper as to the method of message mixing. Here is a description of the exact method of encryption.

Download ANONdroid

BBC News Reported that the Federal Bureau of Investigation (FBI) announced recently that key infrastructure systems of three US cities had been accessed by hackers. Such systems commonly known as Supervisory Control and Data Acquisition (SCADA) are increasingly being targeted by hackers.
 
At a recent cybersecurity conference, Michael Welch, deputy assistant director of the FBI’s cyber division, said “hackers had accessed crucial water and power services.The hackers could theoretically have dumped sewage into a lake or shut off the power to a shopping mall.”

“We just had a circumstance where we had three cities, one of them a major city within the US, where you had several hackers that had made their way into SCADA systems within the city,” Welch told delegates at the Flemings Cyber Security conference.“Essentially it was an ego trip for the hacker because he had control of that city’s system and he could dump raw sewage into the lake, he could shut down the power plant at the mall a wide array of things,” he added.
 
In the city of South Houston, Texas, a hacker named pr0f claimed to have broken into a control system that supplied water to the town. Pr0f claimed the system had only been protected by a three-character password which “required almost no skill” to get around.
 
Security experts predict there will be a rise in such attacks.”Such systems have become a target partly because of all the chatter about the lack of security. Hackers are doing it out of curiosity to see how poorly they are protected,” said by senior security consultant at Sophos.
 
However the firms that run SCADA systems, such as Siemens, often advise against changing passwords because the threat from malware is not a big a problem as if passwords are changed

The “Chinese Software Developer Network” (CSDN), operated by Bailian Midami Digital Technology Co., Ltd., is one of the biggest networks of software developers in China. A text file with 6 Million CSDN user info including user name, password, emails, all in clear text leaked on internet.
 
The Download Link (use xunlei to download the file) of the File is available on various social Networks. NowChinese programmers are busy changing their password now.
 
Just did some data ming on CSDN leaked user data. Some interesting findings. Here are the results of Top 100 email providers form 6M CSDN user emails :
@qq.com, 1976190
@163.com, 1766919
@126.com, 807893
@sina.com, 351590
@yahoo.com.cn, 205487
@hotmail.com, 202944
@gmail.com, 186843
@sohu.com, 104735
@yahoo.cn, 87048
@tom.com, 72360
@yeah.net, 53292
@21cn.com, 50709
@vip.qq.com, 35119
@139.com, 29207
@263.net, 24778
@sina.com.cn, 19155
@live.cn, 18920
@sina.cn, 18601
@yahoo.com, 18452
@foxmail.com, 16432
@163.net, 15173
@msn.com, 14211
@eyou.com, 13372
@yahoo.com.tw, 10810
@huiseo.cn, 8493
@csoftmail.cn, 7121
@citiz.net, 6605
@vip.sina.com, 5378
@189.cn, 5004
@etang.com, 4236
@chinaren.com, 3973
@yahoo.com.hk, 3899
@neusoft.com, 2930
@wormsoft.cn, 2780
@sogou.com, 2567
@bdqnok-cp.com.cn, 2551
@live.com, 2528
@mail.china.com, 2177
@china.com, 2169
@mail.ustc.edu.cn, 2038
@huawei.com, 1921
@vip.163.com, 1882
@sjtu.edu.cn, 1881
@371.net, 1805
@10pig.com.cn, 1782
@zte.com.cn, 1681
@cp-bdqnok.com.cn, 1632
@company-mail.cn, 1555
@msn.cn, 1522
@netease.com, 1499
@uggsrock.com, 1363
@bjtu.edu.cn, 1342
@hotmail.com.tw, 1313
@owlpic.com, 1277
@siteposter.net, 1275
@x263.net, 1183
@2008.sina.com, 1180
@elong.com, 1172
@yahoo.co.jp, 1049
@chongseo.com, 1033
@bofthew.com, 1022
@tyldd.com, 992
@fudan.edu.cn, 987
@marketnet.com.cn, 963
@newline.net.cn, 955
@stu.xjtu.edu.cn, 931
@online.sh.cn, 928
@msa.hinet.net, 927
@zju.edu.cn, 878
@king.com, 870
@cmmail.com, 844
@123.com, 838
@56.com, 836
@cpok-bdqn.com.cn, 818
@zj.com, 804
@china.com.cn, 803
@fm365.com, 763
@71mail.com.cn, 751
@avl.com.cn, 748
@bdqncpok.com.cn, 720
@mails.tsinghua.edu.cn, 719
@bit.edu.cn, 693
@mail.nankai.edu.cn, 640
@lzu.cn, 622
@xnmsn.cn, 602
@wo.com.cn, 599
@ah163.com, 598
@yahoo.ca, 594
@263.com, 563
@eastday.com, 561
@stu.edu.cn, 559
@188.com, 556
@mobile.csdn.net, 539
@csdn.net, 533
@sian.com, 519
@ymail.com, 518
@km169.net, 490
@emails.bjut.edu.cn, 488
@pp.com, 483
@pchome.com.tw, 480
 
Security is important, especially for online service. And NEVER store user password in clear texts.

Square Enix stated yesterday that somebody “may have gained unauthorized access to a particular Square Enix server” and took its members service offline in both Japan and the U.S. Today, the company clarified that 1.8 million customer’s accounts had been affected.
 
The company said it noticed that unknown parties had accessed the server for its free “Square Enix Members” site on Tuesday afternoon, and decided to shut down the service the same day. Users register on the server with their email addresses and sometimes their names, addresses and phone numbers, but the server holds no credit card information, a spokesman said.

The intruder breached an unknown number of servers that could hold data for the service’s one million members in Japan and 800,000 members in North America, but left untouched the servers with its 300,000 European members. In May, Square Enix said it suffered hacking attacks into the web site of a Canadian subsidiary and two product sites. It said 350 applicants’ resumes and up to 25,000 email addresses were stolen in that attack.

Vulnerability-Lab Team discovered a Memory & Pointer Corruption Vulnerability on Kaspersky Internet Security 2011/2012 & Kaspersky Anti-Virus 2011/2012. A Memory Corruption vulnerability is detected on Kaspersky Internet Security 2011/2012 & Kaspersky Anti-Virus 2011/2012.
 

The vulnerability is caused by an invalid pointer corruption when processing a corrupt .cfg file through the kaspersky exception filters,which could be exploited by attackers to crash he complete software process.
The bug is located over the basegui.ppl & basegui.dll when processing a .cfg file import.
Affected Version(s):
  • Kaspersky Anti-Virus 2012 & Kaspersky Internet Security 2012
    • KIS 2012 v12.0.0.374
    • KAV 2012 v12.x
  • Kaspersky Anti-Virus 2011 & Kaspersky Internet Security 2011
    • KIS 2011 v11.0.0.232 (a.b)
    • KAV 11.0.0.400
    • KIS 2011 v12.0.0.374
  • Kaspersky Anti-Virus 2010 & Kaspersky Internet Security 2010
The kaspersky .cfg file import exception-handling filters wrong or manipulated file imports like one this first test … (wrong-way.png). The PoC is not affected by the import exception-handling & get through without any problems. A invalid pointer write & read allows an local attacker to crash the software via memory corruption. The technic & software to detect the bug in the binary is private tool.

These command  help you to have more control over your windows machine and also provide you with number of options for  customizing your windowsenvironment. Moreover through some of these windows commands you can set or reset anything on your computer(if you have administrative privileges).

For Newbie

What is Command Prompt ?  

Command Prompt is a command line interpreter application available in most Windows operating systems.
Command Prompt is officially called Windows Command Processor but is also sometimes called the command shell or by its file name cmd.exe.Note: Command Prompt is sometimes incorrectly referred to as “the DOS prompt” or as MS-DOS itself. Command Prompt is a Windows program that emulates many of the command line abilities available in MS-DOS but it is not actually MS-DOS.

To use thse commands just -
Go to start ,
Click on run , or just press “WIN + R” for directly opening it, and enter any of these following commands -


  • compmgmt.msc  – It will open a computer management window
  • cmd – It will open a command prompt(dos shell not to be confused with cmd command)
  • diskmgmt.msc – It will open a disk management window
  • dfrg.msc – It will open a disk defrag window
  • devmgmt.msc – It will open a device manager window
  • eventvwr.msc – It will open an event viewer window
  • fsmgmt.msc – It will open a shared folders window
  • gpedit.msc – It will open a group policies window
  • lusrmgr.msc – It will open a local users and groups window
  • perfmon.msc – It will open a performance monitor window
  • rsop.msc – It will open a resultant set of policies window
  • secpol.msc – It will open a local security settings window
  • services.msc – It will open a Various Services window
  • msconfig - It will open a system configuration utility window
  • regedit – It will open a registry editor window
  • msinfo32 -It will open a system information window
  • sysedit -It will open a system edit window
  • win.ini – It will open a windows loading information(also system.ini)
  • winver – It will open a Shows current version of windows
  • mailto - It will open a Opens default email client.
  • PSR –  For recording purpose in win 7

This is a small, light-weight, fast, updatable and Open For All version of  WinBubbles .
In just few clicks, WinBubbles-Lite will let you access the most important Customizationfunctions of Windows 7 (and Vista) easily.

The powerful utility includes a built-in Graphical User Interface designer and programmer called RegDevelop that will let you update the program the way that you want. Add Features that is needed.

Any part on the program can be updated, Not just for the Programmers But For All.

Branding your new Vista and Windows 7 Machine

  •  Add or Change Original Manufacturers logo and information
  • Separately Customize the Performance Information and Tools Logo
  • Change or Customize the Background of Windows 7 Welcome Screen
  • Change the Owner Information
  • Add Message before logon
  • Customize Bubbles Screen Saver – Change to small/Medium size, Metallic Bubbles, remove the shadow and launch in a Black Background
  • Add “Move To” and “Copy To” Right-Click Menu
  • Opened with Notepad” Context/Right-Click Menu
  • Hide this file” and “Hide this Folder” Right-Click Menu – Standard and Run as Admin is included
  • No Folder Option (Logoff is needed in Windows 7)
  • Disable Regedit
  • Disable CMD.exe
  • Disable Windows Task Manager
  • Disable Changing of Wallpaper
  • Disable Control Panel
  •  Disable USB Drive in Windows 7 (Reboot is needed) and Vista
  •  Disable Control Panel
  •  Enter Username before login
  • Changing UAC levels launcher and *Change the settings to “Prompt for credentials”Note:Remember that image should be ( .bmp ) . So use the online converter  for converting any jpeg to bmp format .. ok enjoy  the GMMS

Robot Pirates a Pakistani hackers group has hacked more than 70 websites. Most of the sites belongs to USA. According to the hacker the main reason of this cyber attack is to protest the NATO’s attack against Pakistani Army. Previously some other Pakistani hackers also protested against NATO and they ware Pak Cyber Combat Squad, and so on. Robot Pirates released a pastebin where all the hacked sites and there mirror links & their messages are mentioned. Earlier this group has hacked many sites mostly Indian sites.