Monday, August 4, 2014

Sunday, December 22, 2013

Malicious Firefox plugin scans websites for exploitable SQL injection vulnerabilities.


    Beware a malicious Firefox browser add-on that infects PCs and makes them scan websites for known exploitable vulnerabilities. The Firefox plugin, which has infected more than 12,500 systems to date, ties into what its developers have dubbed the "Advanced Power" botnet, according to security reporter Brian Krebs, who first reported on the attack campaign.
       The add-on has been in circulation since at least May 31, 2013, according to malware analysis service Malwr. When the malware was first spotted, only two out of 47 antivirus engines were recognizing it as malicious code, according to Virus Total. By August 2013, however, 29 out of 45 antivirus scanning engines were flagging the code as malicious.
        The malware sports a range of malicious capabilities, including password hijacking and data exfiltration. But those capabilities, at least to date, don't appear to have been activated on compromised -- aka zombie -- PCs that are part of the Advanced Power botnet. Rather, the compromised Windows systems appear to have been used solely to scour the web for sites that are vulnerable to SQL injection attacks.

Bangladesh Padma Oil Company website defaced


       A hacker with online name "z3r0c0000l" has hacked into the one of the Bangladesh Government website "Padma Oil company Limited" and defaced the site(pocl.gov.bd) The hacker didn't mention any specific reason for the attack.  The defacement just reads "owned by  z3r0c0000l".  When an user click in the page, it shows an alert message "You need to really get more security". This is not the first time the Padma oil site come under a cyber attack.  This website has a long history of being a victim to cyber attacks.

        In 2011, algerian hackers defaced the main page, according to zone-h record(www.zone-h.org/mirror/id/15866087).  In 2012, the Pakistan hacker group 'Pak Mad Hunters' defaced the site again (www.zone-h.org/mirror/id/18739453). Last month, Indian hacking group named 'Indian mad hunters' defaced (zone-hc.com/archive/mirror/54abb22_pocl.gov.bd_mirror_.html) It's not sure whether all of the hacker group exploiting the same unfixed vulnerability or the site has multiple vulnerabilities. At the time of writing, the website is still defaced.  The mirror of the defacement is available here: http://www.zone-h.org/mirror/id/21396192

Saturday, December 21, 2013

Swiss researchers have created a metallic cube that can "walk" across a surface.

      Swiss researchers have created a metallic cube that can "walk" across a surface. Staff at the Federal Institute of Technology Zurich crammed a series of inertia sensors and constantly-spinning rotors (called reaction wheels) into a 15-centimeter cube, dubbed Cubli, that enable the contraption to move around on its own. When one or more of the weighted rotors abruptly stops spinning, the machine sort of jumps on its edge -- all thanks to centrifugal force. Once upended, the rotors act like a gyroscope to maintain Cubli's position. Halt another wheel and things get really crazy: the device defies gravity, tipping up and balancing on one of its eight corners. By repeating these motions in succession, the gizmo uses a series of controlled falls to slowly hop across a surface. In terms of practical applications, the Swiss researchers said this tech could aid in remote planetary exploration, possibly giving the Curiosity rover and its ilk some company. All noble goals, but for now the lab says that Cubli is just a high-tech toy. And that? That's perfectly fine.




Wednesday, December 18, 2013

The Linux server is the size of an RJ45 port ...

                                                 

   Lantronix announced an IPv6 certified version of its tiny, RJ45-sized embedded Linux networking server called the XPort Pro Lx6 aimed at IoT applications.
      Lantronix’s Xport Pro has long been a favorite of embedded engineers looking for a low-cost networking server that doesn’t consume much space or power. The new XPort Pro Lx6 is almost physically identical to the original, but adds full IPv6 compliance, making it more feasible as an IoT platform for unattended M2M (machine-to-machine) communications.

As before, the XPort Pro Lx6 measures only 33.9 x 16.25 x 13.5mm and weighs 9.6 grams. The 32-bit RISC CPU appears to be the same, but instead of coming standard with 8MB SDRAM, it now ships with the previously optional 16MB.

    Like the XPort Pro, the new model offers 16MB of flash storage and a 10/100Mbps Fast Ethernet port. The device runs on 3.3VDC power, and the previously optional, industrial temperature range of -40 to 85°C is now standard. The device is available with embedded Linux or Lantronix’s homegrown Evolution OS.
                                     
                                                                 Inside the XPort Pro


As can be seen in a close comparison between the XPort Pro and pin-compatible XPort Pro Lx6 data sheets, aside from the addition of IPv6 support, even the firmware is almost identical.

XPort Pro Lx6 highlights include:
  • Simple device setup, configuration and monitoring
  • Robust, hardened Device Server Application Suite
  • Web server, customizable with CGI, with content updatable via FTP
  • Web manager, with support for CLI and XML Configuration Records
  • Multiple session connectivity modes, remote firmware upgrades, and configuration with enterprise class management interfaces
  • FIPS 197 compliant 256-bit AES encryption

Will IoT boost slow IPv6 adoption?

      The IPv6 protocol, which is designed to greatly extend IPv4′s limited number of available Internet addresses, has been available for years, and was formally launched in June 2012. Yet despite widespread support from carriers and equipment manufacturers, according to a recent IT-Director.com report, on Dec. 9, 2013, only 2.24 percent of users were accessing Google search over IPv6.
      The adoption of IPv6 has been slowed by the recession, but with the economy picking up, and IPv4 addresses growing increasingly scarce, things should start changing in 2014. The numerous product announcements surrounding IoT bode well for the momentum of the protocol.
       In addition to extending IP addresses from 32 to 128 bits, IPv6 supports auto-configuration, as well as Multicast Neighbor Solicitation messages to resolve IP addresses to link-layer addresses, says Lantronix. IPv6 also manages membership in local subnet groups using Multicast Listener Discovery (MLD) messages, and enables devices to determine the IP address of the best default gateway via ICMPv6 router solicitation and router advertisement messages. It also supports 1280-byte packet size or greater without fragmentation, says the company.

Can’t find what you need online? Use Dotmic to make your lives simpler

           Dotmic is one stop solution for online shopping in India. It is an eCommerce search engine that helps people search and compare prices of products from different online stores. Unlike most comparison stores Dotmic gathers product information using self developed web crawlers called dotbot. The startup has also successfully developed high speed search algorithms that enable its users to search across millions of products from hundreds of stores. Wider product range and much faster processing helps customers browse, compare, select and continue with their online shopping experience compared to any other online store in India. This search engine presents you with deals and coupons from various eCommerce companies in addition to the search results for eCommerce products.


Wednesday, December 4, 2013

Draw circuits instantly with the Circuit Scribe pen

          If you tended to fall asleep in that physics class, a circuit is a loop through which an electric current can pass. You use the Circuit Scribe to draw that physical loop. You can pair it with accessories like batteries, LEDs and sensors to give it different functions. It can also be paired with platforms like Arduino and Raspberry Pi for added functionality.  



         Working electronic circuits can be drawn by a pen on a piece of paper. It uses conductive silver ink to let anyone create an electrical system.


                                                        Fore more watch the video