Posts

The ticket booking website for Indian Railways has been hacked and the personal data of around 1 million passengers are feared to have been stolen from the server of the e-ticketing portal Indian Railway Catering and Tourism Corporation (IRCTC). IRCTC is India’s largest e-commerce website, lakhs of transactions are conducted every day. Customers provide details like Pan Card numbers and address while filling up online reservation forms which could be stolen by the hackers....

However, unlike its competitors, CDKeys doesn’t have joysticks, skins, in-game currencies, and software in its niche. They came about the time when digital copies of popular games took off. They started with PC game keys and, later on, expanded to include Xbox Live, PSN, Nintendo Games, and gift cards for Steam and iTunes. The keys work fine just like other keys from their competitors. You need to sign up, select the product you like to purchase, pay for the same, and wait for the keys to be sent via email....

According to the BBF, there are several data models you can use with the consumer-premise equipment WAN management protocol. Each data model in TR 069 contains parameters and objects that define many capabilities and functions of a broadband CPE or other devices. This includes their syntax, addressable name, data types, and a normative explanation of how each can be used. The TR-069 is RPC (remote procedure call) based protocol. That means it consists of two unique applications that directly interact with each other via a set of defined methods....

Researchers will lawfully be able to reverse engineer products and consumers can repair their vehicle’s electronics, but the FTC is only allowing the exemptions for a two-year trial run. FTC introduced a similar change back in 2014 when it announced that you can successfully unlock your own smartphone for security research purposes and not suffer the consequences. The same thing has been introduced for cars and smart TVs and hacking them for the sole purpose of learning about security loopholes is definitely allowed....

For those unaware, Color Message was advertised as an app that allowed users to personalise their default SMS messages. The analysis of the Color Message application done by the researchers through the Pradeo Security engine showed that the app accessed users’ contact list and exfiltrated it over the network to Russian servers. Joker is considered a “fleeceware” form of malware, as its main activity is to simulate clicks in order to generate revenue from malicious ads, intercept SMS to subscribe users to unwanted paid premium services unbeknownst to them and commit billing fraud....

— Kim Dotcom (@KimDotcom) December 29, 2014 Kim had back in February 2013 first announced that Mega would be expanding into email, voice, video and “mobile” area. Kim made it very clear that while servers that hold data are on U.S. Soil including Gmail (Google), iCloud (Apple), and Skype(Microsoft) can be requisitioned at any time and for any reason to reveal the private data of its users. The Mega servers are not only purposefully off U....

Despite the bad name, Kodi still remains popular with the public. Looking at its increased popularity, even Sony Electronics actively promoted Kodi on its website and recommended users of its Android TVs to download Kodi to access add-ons. However, the official Kodi project Twitter account has now directly accused Sony of “actively preventing” owners of Sony-made TVs, powered by Android TV, from installing the Kodi app. For those unaware, Kodi is an open source, cross-platform streaming and media player solution that allows you to access all of your digital audio, movies, TV shows, music collection, and photo library from a single, convenient place....

However, a new 10-minute-video obtained by Motherboard, shows an Italian surveillance contractor called RCS Lab demo the hacking tool intended for use by police forces and government agencies. It also shows that the cops need very little technical knowledge to remove a scary level of information from a target’s computer. The video shows off a software product from Italian firm RCS Labs called Mito3, which allows the RCS employee to set up these kinds of attacks with ease by just applying a rule in the software settings....

Two IBM-built supercomputers, Summit, and Sierra, installed at the Department of Energy’s Oak Ridge National Laboratory (ORNL) in Tennessee and Lawrence Livermore National Laboratory in California, respectively, retain the first two positions in the top 10 list. Sunway TaihuLight and Tianhe-2A (Milky Way-2A), both developed by China hold the third and fourth position on the list respectively. These are followed by the new entrant, Frontera in the top 10 list at fifth position....

This new approach includes a monthly subscription pricing model, deeper involvement with other open source projects, contributing a huge cache of mainframe code to open source and participating in the newly launched Open Mainframe Project. IBM and Canonical are teaming up to create an Ubuntu distribution for LinuxOne and existing z Systems mainframe hardware. IBM’s Power servers, which run Unix and Linux are already supported by Ubuntu Linux. IBM and Canonical did not say exactly when Ubuntu for mainframes will be available....

The app includes several features that you can’t get on the normal iPhone app, as previously noticed by The Verge. As he opens it, he first refers that this is the “yellow version of the Facebook app, which is our internal build.” You can see it briefly on the screen here: Later, as he exhibits one way to start broadcasting live video, he says “you can tap on the composer at the top,” as he selects the “Whats on your mind?...

Qbot (aka Qakbot) BotnetRussian involvement In what could be the wake up call for both the United States Federal authorities and banking officials, more than half (59 per cent) of sniffed sessions were reportedly from accounts at five of the largest US banks. Russian involvement Proofpoint has traced the infrastructure of QBot all the way to Russia. The researchers said that the there was a Russian speaking cybercrime group behind the scam and it was targeting American as well as European banks around the globe though the primary targets seemed American banks....

Few details of the plan temporarily went live on a Microsoft webpage Tuesday, which VentureBeat captured in a screenshot before the page was wiped clean. “We are evaluating a new service, called Microsoft Wi-Fi that will bring hassle-free Wi-Fi to millions,” a Microsoft spokesperson said in a statement to Time while declining to elaborate on any further details from the leaked webpage. Those details are describing a network of 10 million hotspots in 130 countries that will lets subscribers dodge the over-elaborate login routines they’ve come to love and hate at airports, cafes or any other public places....

The exploit depends on an attacker inserting a link to an SMB resource (network share) inside an email or a Web page that gets noticed via Outlook. Inside the image tags, the attacker can camouflage the link to his network share. Further, they can put the link to a network share hosted on his own network instead of the proper image link. When a user tries to use the link via Internet Explorer, Edge, or Outlook, their computer even via the Internet will automatically send their login credentials to validate on the criminal’s domain....

According to some reports on Microsoft Community forum, the KB4015438 update issued by Microsoft for Windows PCs and laptops fails to install. However, there is no clarity whether the update gets an error or it just takes forever to complete. To make matters worse, the new patch is also causing problems, which was in fact supposed to address the problems experienced by the previous cumulative update (KB4013429). One user explains, “Previously, the problem was with KB 4013429, but after some days and Four Hours wasted, finally it is replaced by KB4015438....

It seems Microsoft is stealthily embracing Linux! A Windows hacker, Walking Cat has noted that the latest Windows build 14251 aka Redstone has two Linux files called LXCore.sys and LXss.sys. Windows Power User in a blogpost noted that though Microsoft had been using Linux in its Project Astoria for Windows 10 Mobile, this is the first time somebody found Linux files on a proper Windows 10 desktop version. Microsoft had incorporated Android subsystem in Windows 10 Mobile under its Project Astoria which was reportedly shelved....

Thanks to Twitter user WalkingCat, who has discovered files referencing to a new platform codenamed “Andromeda OS,” and a new device codenamed “Factory OS Andromeda Device” in the latest Windows 10 17672 SDK. It is thought that Microsoft is perhaps ready with a final version of the hardware ready to be tested internally. — WalkingCat (@h0x0d) May 23, 2018 As previously reported, the Andromeda OS code refers to is an upcoming modular operating system for mobile version that can be tailored to specific devices the software will be running on, and will allow Microsoft to add or remove features....

Windows OS is more than 30 years old now and is based on old and demanding code, architecture and features. With the introduction of Andromeda OS, Microsoft is looking to make Windows 10 a universal OS that will allow it to adapt to each specific device without being based on particular, prior product variants. In other words, Andromeda OS will turn Windows 10 into a modular system suitable for different architectures rather than the x86 architecture used by desktops, laptops, and tablets running Intel or AMD chips....

For those unaware, earlier this month at the Google I/O 2018 demo, the search giant had displayed a similar product called Google’s Duplex, where the AI bot can make a phone call and talk to a real human being in order to complete tasks on behalf of the users, such as dinner reservations and scheduling hair appointments. In other words, the AI pretends to be human and make phone calls....

Apparently, only those people who manually installed the Windows 10 October 2018 update feature are facing this problem, since Microsoft had not started automatically rolling this latest update. Users took to social media forums such as Twitter, Reddit, and even Microsoft’s own support website to complain that the Windows 10 October 2018 update process deleted their documents, including user profiles, photos and music. Microsoft confirmed the news to suspend the public delivery of Windows 10 October 2018 update on its Windows 10 Update History page....