Winter Olympics website Hacked

2/12/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1My7mRq4ONaWtW5UqnTwKc6O_83l8K6Es3HlQtB6FbgadLO2oivYS6_VwE4k_dYgsAd5wsWa1A06gxGP3uj9ZhiPOLflEZQ14G7sNxy3513K5VMckLbP2jG9FjU74CRHx7HK-3A16kFsQ/s1600/f16c2dba-0e1c-11e8-a09e-8861893b1b1a_1280x720_131300.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Winter Olympics website hacked" border="0" data-original-height="551" data-original-width="980" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1My7mRq4ONaWtW5UqnTwKc6O_83l8K6Es3HlQtB6FbgadLO2oivYS6_VwE4k_dYgsAd5wsWa1A06gxGP3uj9ZhiPOLflEZQ14G7sNxy3513K5VMckLbP2jG9FjU74CRHx7HK-3A16kFsQ/s640/f16c2dba-0e1c-11e8-a09e-8861893b1b1a_1280x720_131300.jpg" title="Winter Olympics website hacked" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Winter Olympics website hacked</td></tr>
</tbody></table>
<span style="background-color: white; font-family: "arimo" , "arial" , "freesans" , "helvetica" , sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;"><br /></span>
<span style="background-color: white; font-family: "arimo" , "arial" , "freesans" , "helvetica" , sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">The Pyeongchang 2018 Winter Olympics' website went down just before the event's Friday opening ceremony, thanks to a cyber-attack, and </span><b style="font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">stayed down for about 12 hours</b><span style="background-color: white; font-family: "arimo" , "arial" , "freesans" , "helvetica" , sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">.</span><br />
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
The outage left users unable to print tickets or view information about the games. Some networks around the games venues also went down.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
Speculation quickly suggested the outages were not accidental and at a Sunday evening news conference, Pyeongchang 2018 spokesperson Sung Baik-you confirmed they were caused by an attack.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<br /></div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<b>"We know the cause of that problem, but that kind of issues occur very frequently during the Olympic Games," he said. "We have decided with the IOC that we are not going to reveal the source."</b></div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
International Olympics Committee (IOC) head of communications Mark Adams suggested the problem could be ongoing. He told the briefing "We wouldn't start giving you the details of an investigation before it has come to an end, particularly because it involves security which at these games is incredibly important. I am sure you appreciate we need to maintain the security of our systems."</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
"At the moment we are making sure our systems are secure, which they are, so discussing details of it is not helpful."</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
"This is normal practice," Adams insisted. "You will understand that maintaining secure operations is our focus. That's the focus of any organisation that has been hit by such a thing. An in line with best practice, which is industry practice, we are not going to comment on the issue because it is an issue we are dealing with."</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
<br /></div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
Adams later added that the IOC has not identified the attacker and would not name them at a press conference, but promised a "full report" into the incident. He would not commit to making it public.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
As North Korea has made peaceful overtures towards the South ahead of the games, <b>it's thought to be unlikely it's behind whatever attack hit the Games' website</b>.</div>
<div style="background-color: white; font-family: Arimo, Arial, FreeSans, Helvetica, sans-serif; font-size: 16.0000400543213px; line-height: 24.0000610351563px;">
The North has, however, assaulted the world with a 200-plus troupe of cheerleaders that performs choreographed song and dance routines in the stands at the games. The troupe is going a bit viral, a demonstration of the North's ability to distribute propaganda about its capabilities.</div>
</div>

Winter Olympics website hacked The Pyeongchang 2018 Winter Olympics' website went down just before the event's Friday openi...

Millions of Netgear Routers Vulnerable

2/11/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: right; margin-left: 1em; text-align: right;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9Z1CuHPFx2gWwQnNmtt8u5RYO91uU3Cmb3Q5n9oefAJZR5kN-2QD85zJtbCtcL5WUEIeoeLjNvbBF0S_5111uomZufNqA48_3KEQ8RdbTAU3Y5fGt5P15xplZwYI0On9237wkjEkdGn1k/s1600/router_back_label.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="" border="0" data-original-height="192" data-original-width="750" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9Z1CuHPFx2gWwQnNmtt8u5RYO91uU3Cmb3Q5n9oefAJZR5kN-2QD85zJtbCtcL5WUEIeoeLjNvbBF0S_5111uomZufNqA48_3KEQ8RdbTAU3Y5fGt5P15xplZwYI0On9237wkjEkdGn1k/s1600/router_back_label.png" title="Netgear Routers wonderable to be Hacked" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Netgear Routers wonderable to be Hacked</td></tr>
</tbody></table>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEincWcxLWVnPBm6fA4JIuoYKibbxMKRm2oSGclVczATNSqHZGWsAHd-6J6LYOIejPQh99u2fEsB0E8bl3mPGUCNYEx341q3-rSCJJ9U_2QFSU3eD8t0dE4m3sjdsgXMZD9Pg3B8IbMlRfSS/s1600/netgear_password_bypass.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="400" data-original-width="680" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEincWcxLWVnPBm6fA4JIuoYKibbxMKRm2oSGclVczATNSqHZGWsAHd-6J6LYOIejPQh99u2fEsB0E8bl3mPGUCNYEx341q3-rSCJJ9U_2QFSU3eD8t0dE4m3sjdsgXMZD9Pg3B8IbMlRfSS/s320/netgear_password_bypass.png" width="320" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Netgear Routers</td></tr>
</tbody></table>
<br />
<strong><span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">Security firm Trustwave has disclosed the details of several vulnerabilities affecting Netgear routers, including devices that are top-selling products on Amazon and Best Buy.</span></span></strong><br />
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">The flaws were discovered by researchers in March 2017 and they were patched by Netgear in August, September and October.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">One of the high severity vulnerabilities has been described as a password recovery and file access issue affecting 17 Netgear routers and modem routers, including best-sellers such as R6400, R7000 (Nighthawk), R8000 (Nighthawk X6), and R7300DST (Nighthawk DST).</span></span></div>
<br />
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">According to Trustwave, the web server shipped with these and other Netgear routers has a resource that can be abused to access files in the device’s root directory and other locations if the path is known. The exposed files can store administrator usernames and passwords, which can be leveraged to gain complete control of the device.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">An unauthenticated attacker can exploit the flaw remotely if the remote management feature is enabled on the targeted device. Improperly implemented cross-site request forgery (CSRF) protections may also allow remote attacks.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";"><b>Another high severity flaw affecting 17 Netgear routers, including the aforementioned best-sellers, can be exploited by an attacker to bypass authentication using a specially crafted reques</b>t. Trustwave said the vulnerability can be easily exploited.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">A flaw that can be exploited to execute arbitrary OS commands with root privileges without authentication has also been classified as high severity. Trustwave said command injection is possible through a chained attack that involves a CSRF token recovery vulnerability and other weaknesses.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">Two other command injection vulnerabilities have been found by Trustwave researchers, but they have been rated medium severity and they only affect six Netgear router models.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">One of the flaws requires authentication, but experts pointed out that an attacker can execute arbitrary commands after bypassing authentication using the aforementioned authentication bypass vulnerability.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">The other medium severity command injection is related to the Wi-Fi Protected Setup (WPS). When a user presses the WPS button on a Netgear router, a bug causes WPS clients to be allowed to execute arbitrary code on the device with root privileges during the setup process.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">“In other words, <b>if an attacker can press the WPS button on the router, the router is completely compromised</b>,” Trustwave said in an advisory.</span></span></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;">
<span style="font-size: small;"><span style="font-family: "trebuchet ms" , "geneva";">Netgear has put a lot of effort into securing its products, especially since the launch of its bug bounty program one year ago. In 2017, the company published more than 180 security advisories describing vulnerabilities in its routers, gateways, extenders, access points, managed switches, and network-attached storage (NAS) products.</span></span></div>
</div>

Hacking News Netgear Routers News Vulnerability Millions of Netgear Routers Vulnerable

Netgear Routers wonderable to be Hacked Netgear Routers Security firm Trustwave has disclosed the details of several vulnerabilit...

'Biggest Leak in History' : iPhone source code LEAKED

2/08/2018 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTCpeNjQs-nRH19WHT0uo3TGM3QzlaCoLEL9HNvuBaGcH_oNbmXIs7_4F-0-rh8Z8oAXu9cDxitDTxsYpjzC_RimkEKFsnzifm9jjBbqGJ9dtaLLrCdh0aIngAkJnvBQAkQ8xKfnL8lo0Z/s1600/iPhone-code-leaked.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="350" data-original-width="590" height="376" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTCpeNjQs-nRH19WHT0uo3TGM3QzlaCoLEL9HNvuBaGcH_oNbmXIs7_4F-0-rh8Z8oAXu9cDxitDTxsYpjzC_RimkEKFsnzifm9jjBbqGJ9dtaLLrCdh0aIngAkJnvBQAkQ8xKfnL8lo0Z/s640/iPhone-code-leaked.jpg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">'Biggest Leak in History' : iPhone source code leaked</td></tr>
</tbody></table>
<br />
Someone just posted what experts say is the <a href="http://www.hackerschronicle.com/search/label/Source%20Code" target="_blank">source code</a> for a core component of the iPhone’s operating system on GitHub, which could pave the way for hackers and security researchers to find vulnerabilities in iOS and make iPhone jailbreaks easier to achieve.<br />
The GitHub code is labeled “<b>iBoot</b>,” which is the part of iOS that is responsible for ensuring a trusted boot of the operating system. In other words, it’s the program that loads iOS, the very first process that runs when you turn on your iPhone. It loads and verifies the kernel is properly signed by Apple and then executes it—it’s like the iPhone’s BIOS.<br />
<br />
The code says it’s for iOS 9, an older version of the operating system, but portions of it are likely to still be used in iOS 11.<br />
<br />
Apple has traditionally been very reluctant to release code to the public, though it has made certain parts of <a href="http://www.hackerschronicle.com/search/label/iOS" target="_blank">iOS</a> and MacOS open source in recent years. But it has taken particular care to keep iBoot secure and its code private; bugs in the boot process are the most valuable ones if reported to Apple, which values them at a max payment of $200,000. “<b>This is the biggest leak in history</b>,” Jonathan Levin, the author of  on iOS and Mac OSX internals, told me in an online chat. “It’s a huge deal.”<br />
<br />
Levin said the code appears to be the real iBoot code because it aligns with code he <a href="http://www.hackerschronicle.com/search/label/Reverse%20Engineering" target="_blank">reverse engineered</a> himself. A second security researcher familiar with iOS also said they believe the code is real. We don’t know who is behind the leak. Apple did not respond to a request for comment.<br />
Having access to the source code of iBoot gives iOS security researchers a better chance to find vulnerabilities that could lead to compromising or jailbreaking the device, Levin said. That means hackers could have an easier time finding flaws and bugs that could allow them to crack or decrypt an iPhone. And, perhaps, this leak could eventually allow advanced programmers to emulate iOS on non Apple platforms.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU63mWjBrFYlpcwlnVfohdJ3jJYYUz3pFHIjjJ9SMS2KhaSZoi1vjJki5mM2UC_mjSFhiO_dLHxvYOsiwY48cUww3Qv2BBsj5jAKJmBg8HeRn65NyZdg5cAB6c35aF7ey3kLZXmS3qCEXB/s1600/ios-code.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="482" data-original-width="640" height="301" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU63mWjBrFYlpcwlnVfohdJ3jJYYUz3pFHIjjJ9SMS2KhaSZoi1vjJki5mM2UC_mjSFhiO_dLHxvYOsiwY48cUww3Qv2BBsj5jAKJmBg8HeRn65NyZdg5cAB6c35aF7ey3kLZXmS3qCEXB/s400/ios-code.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both;">
<a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">Vulnerabilities </a>in previous versions of iBoot allowed jailbreakers and hackers to brute-force their way through the iPhone’s lock screen and decrypt a user’s data. But newer iPhones have a chip , which has hardened the security of the device.</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
For regular users, Levin added, this means that tethered jailbreaks, which require the phone to be connected to a computer when booting, could soon be back. These jailbreaks used to be relatively easy to pull off and were common, but are now extremely hard to come by on up-to-date iOS devices, which have advanced security mechanisms that make it hard for even highly skilled researchers from even looking for bugs, as they need to first jailbreak the device before beginning to probe the device.</div>
<div class="separator" style="clear: both;">
It’s these security improvements . Nowadays, finding bugs and vulnerabilities in iOS is something that requires a significant amount of time and resources. That’s why the jailbreaking community gets excited for any leak of source code or any exploit.</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
“iBoot is the one component <a href="http://www.hackerschronicle.com/search/label/Apple" target="_blank">Apple </a>has been holding on to, still encrypting its 64 bit image,” Levin said. “And now it’s wide open in source code form.”</div>
<br /></div>

Data Leak iOS News Source Code 'Biggest Leak in History' : iPhone source code LEAKED

'Biggest Leak in History' : iPhone source code leaked Someone just posted what experts say is the source code for a core comp...

Fake tech support scam : Google Chrome users be Alert

2/07/2018 The Hackers Chronicle 0

Google Chrome Hacking News News Scam Fake tech support scam : Google Chrome users be Alert

Fake tech support scam : Google Chrome users be Alert Tech support scams are increasingly hitting Windows users on the Google Chrome br...

Is IBM Cloud Blumix insecure ?

8/03/2017 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0-WaNEDO6AXAm3Ym8BB067AYfipaSRdX1H7ejEHJK_o0nLbpSeekz1IHr6IcY1ai2IaVWUIMpZRgP0SFPiXjwghWRdhIY4ELsRDE2PqtHA9QuTA-axzW-pkS_nAyYeQbzjRNPuqKg4uk/s1600/ibm+insecure.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="399" data-original-width="1103" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0-WaNEDO6AXAm3Ym8BB067AYfipaSRdX1H7ejEHJK_o0nLbpSeekz1IHr6IcY1ai2IaVWUIMpZRgP0SFPiXjwghWRdhIY4ELsRDE2PqtHA9QuTA-axzW-pkS_nAyYeQbzjRNPuqKg4uk/s640/ibm+insecure.jpg" width="640" /></a></div>
<br />
An e-mail has gone out from IBM about its Bluemix cloud: after next Tuesday, the SoftLayer APIs will no longer accept connections encrypted with the ancient TLS 1.0.</div>
<div>
It's not <i>quite</i> a surprise that the 1990s-era protocol was still accepted: a great many services are still midway through their deprecation plans.</div>
<div>
To give just one example, Salesforce <a href="https://help.salesforce.com/articleView?id=TLS-1-0-Disablement-Critical-Update-Console-CRUC-Setting&type=1" rel="nofollow" target="_blank">began</a> its phase-out of TLS 1.0 in production instances on July 22, 2017.</div>
<div>
And the PCI Council, which had originally wanted TLS 1.0 gone last year, had to extend its deprecation date to 30 June 2018 (and it's still <a href="https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls" rel="nofollow" target="_blank">blogging </a>early warnings for members, in case they're still failing to catch up).</div>
<div>
In the Bluemix e-mail, IBM notes: “There should be no impact to customers using a modern web client. This notification is intended to be informative only.</div>
<div>
The two services affected by the depreciation are api.softlayer.com and api.service.softlayer.com – so there's another community that's got to pay attention, namely developers who wrote to the APIs and used TLS 1.0 to secure their API access.</div>
<div>
TLS 1.0 has long been known as insecure, as far back as 2011 when it was bitten by the BEAST exploit. ®</div>
</div>

Encryption Hacking News IBM Is IBM Cloud Blumix insecure ?

An e-mail has gone out from IBM about its Bluemix cloud: after next Tuesday, the SoftLayer APIs will no longer accept connections encry...

Now Your Eyes Can Zoom With Telescopic Contact Lenses

6/30/2016 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWReQlyYDnHjT-v7lO7-9ryZivDnUg5wPt6M3J1GTvr66pqffSxKyqZ0-i2bOIlKgRL0jpOjNvODSgBrTHgO5G0mB6XkRXoTjR_mpkDDOU8xllnKlxguDWnCpxx8X70GG45hU3xk9vysY/s1600/Now-Your-Eyes-Can-Zoom-Eith-Telescopic-Contact-Lenses.jpg" imageanchor="1"><img border="0" height="424" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWReQlyYDnHjT-v7lO7-9ryZivDnUg5wPt6M3J1GTvr66pqffSxKyqZ0-i2bOIlKgRL0jpOjNvODSgBrTHgO5G0mB6XkRXoTjR_mpkDDOU8xllnKlxguDWnCpxx8X70GG45hU3xk9vysY/s640/Now-Your-Eyes-Can-Zoom-Eith-Telescopic-Contact-Lenses.jpg" width="640" /></a></div>
<br />
Contacts have some clear advantages over eyeglasses, from being impossible to knock off by a hit or fall, to being essentially invisible unlike the edges of the eyeglass lenses. Now, they have just gained a huge new asset.<br />
<br />
We have all seen science fiction films about enhancements to our physiology, and fantasy ones where characters could see in the far distance.<br />
<br />
Now we can finally claim that we have the means to give everyone and their grandmother telescopic vision. Researchers at the Swiss Federal Institute of Technology have introduced contact lenses with zoom support.<br />
The zooming contact lenses<br />
<br />
The brainchild of researcher <span class="highlight pop">Eric Tremblay</span>, the contacts were revealed at the American Association for the Advancement of Science annual meeting in California.<br />
<br />
They are still a prototype, but they can be very useful to counteract age-related mascular degeneration (AMD for short). Age-related muscular degeneration being the main cause behind loss of sight in adults over the age of fifty.<br />
<br />
The lenses have built-in telescopes that can zoom in at 3X. The lenses themselves are rigid, but they are also larger than the normal ones, covering not just the cornea but the sclera as well (the white of the eyes).<br />
<br />
1.5 mm thick, the lenses have a ring of tiny aluminum mirrors inside, to bounce light around and magnify the view 2.8 times, increasing the perceived size of objects.<br />
<br />
You can switch between normal and zoomed view by winking the right eye, thus interrupting the light being reflexed from the contact to the glasses.<br />
<br />
And thus we reach the main drawback: the contacts don't work alone, but in tandem with <a href="http://www.hackerschronicle.com/search/label/Gadgets">smart glasses</a> which can distinguish between blinks and winks.<br />
<br />
When winking, the light being reflected from the contacts to the glasses is interrupted, activating a polarized filter in the glasses which guides light towards the telescopic part. Winking the left eye resets things to normal view.<br />
Practical applications<br />
<br />
The zooming contact lenses might not be superman-level telescopic vision, especially since they'd work while the Clark Kent persona is active, but they are still a significant achievement. Human tests haven't been carried out yet, however, and the amount of time the contacts can be worn is restricted, for health reasons.<br />
<br />
Source: Softpedia<br />
<br /></div>

Gadgets Technology Wearable Technology Now Your Eyes Can Zoom With Telescopic Contact Lenses

Contacts have some clear advantages over eyeglasses, from being impossible to knock off by a hit or fall, to being essentially invisible...

Millions of health records, LEAKED

6/28/2016 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLH8RYn6seWRyOte7fXtY8K8pjplZLMBjUEMPHB27KS7ls5QCC0Jzb4NaBoSVfAeVodHSfn6y1kG2j7nR7RRpn2sZjb8EzvXwRmyGD8_cjfYBPqzkZW9R-KydPBqbJf4fnVfjjecvLBeE/s1600/health-records-dat-breach.jpeg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="347" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLH8RYn6seWRyOte7fXtY8K8pjplZLMBjUEMPHB27KS7ls5QCC0Jzb4NaBoSVfAeVodHSfn6y1kG2j7nR7RRpn2sZjb8EzvXwRmyGD8_cjfYBPqzkZW9R-KydPBqbJf4fnVfjjecvLBeE/s640/health-records-dat-breach.jpeg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">The dark web seller has four batches of data, going for close to $1 million in bitcoin.</td></tr>
</tbody></table>
<br />
<br />
A hacker is advertising hundreds of thousands of alleged records from healthcare organizations on a dark web marketplace, including social security and insurance policy numbers.<br />
<br />
The seller, who goes by the name "<b>thedarkoverlord</b>" began listing the data over the weekend, but could not be immediately contacted on Monday.<br />
<br />
The largest batch of data, which the seller claims to contain a little over 9.2 million health insurance records from US patients, is on sale for 750 bitcoins. At Monday's rate, that's about $486,000. The data includes names, addresses, emails, phone numbers, dates of birth and social security numbers.<br />
<br />
We couldn't verify the authenticity of the data contained in the seller's ad. The seller did not have any points to their name, unlike other known hackers, indicating that they are new to the site. News site Motherboard contacted some users who confirmed that their data was in a sample that was received.<br />
<br />
The hacker said the data was stolen by exploiting an disclosed <a href="http://www.hackerschronicle.com/search/label/Vulnerability">zero-day</a> flaw in the remote desktop protocol (RDP), which can allow a user to remotely view another user's desktop.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAzvREp49HEWjUdGfKDRKILcDL3aKCdXrntu5j7Zj_tffLXRtaw2y4jD6yxyIY_qnd2kHKGqnh-AC6kr-Be9wbNxDLrME6ORJLvwJXFE3vqfwsjj8o8DFpFht59UIk7vnmOdpv2P0CGXw/s1600/health-recods-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="467" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAzvREp49HEWjUdGfKDRKILcDL3aKCdXrntu5j7Zj_tffLXRtaw2y4jD6yxyIY_qnd2kHKGqnh-AC6kr-Be9wbNxDLrME6ORJLvwJXFE3vqfwsjj8o8DFpFht59UIk7vnmOdpv2P0CGXw/s640/health-recods-data-leak.png" width="640" /></a></div>
<br />
<br />
It's not all that surprising, given that earlier this year a hacker exposed thousands of insecure desktops that anyone can remotely view, thanks to poorly-configured remote desktop software. In one case, we were able to see a computer used in a pediatrician's office, which contained personal details on hundreds of patients.<br />
<br />
Another batch of data includes 207,000 records from an unnamed healthcare organization in the US midwest region, on sale for 170 bitcoins (about $110,100 at the time of writing).<br />
<br />
The seller also claims to have close to 397,000 records from members in Atlanta, Georgia -- most of which are from Blue Cross Blue Shield and United Healthcare, which is being sold for 300 bitcoin (or about $194,000).<br />
<br />
Another smaller batch contains records on 47,800 members from Farmington, Missouri, which is on sale for 60 bitcoins (or about $39,000).<br />
<br />
The hacker said in one listing that the data was stored on an "accessible internal network" and stored in plaintext -- which if true would be in violation of federal healthcare privacy rules. Another database was allegedly stolen from a Microsoft Access database.<br />
<br />
It's not clear where the data came from, but healthcare providers and hospitals have been increasingly targeted for customer and patient data in recent months. Anthem was notably hit last year, in which hackers took off with over 80 million records.<br />
<br />
According to recent data, the healthcare industry tallies up as the highest cost of a<a href="http://www.hackerschronicle.com/search/label/Data%20Leak"> data breach</a> per record.<br />
  </div>

Darknet Data Leak Hacking News Identity Theft News Millions of health records, LEAKED

The dark web seller has four batches of data, going for close to $1 million in bitcoin. A hacker is advertising hundreds of thousands...