Now Your Eyes Can Zoom With Telescopic Contact Lenses

6/30/2016 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWReQlyYDnHjT-v7lO7-9ryZivDnUg5wPt6M3J1GTvr66pqffSxKyqZ0-i2bOIlKgRL0jpOjNvODSgBrTHgO5G0mB6XkRXoTjR_mpkDDOU8xllnKlxguDWnCpxx8X70GG45hU3xk9vysY/s1600/Now-Your-Eyes-Can-Zoom-Eith-Telescopic-Contact-Lenses.jpg" imageanchor="1"><img border="0" height="424" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWReQlyYDnHjT-v7lO7-9ryZivDnUg5wPt6M3J1GTvr66pqffSxKyqZ0-i2bOIlKgRL0jpOjNvODSgBrTHgO5G0mB6XkRXoTjR_mpkDDOU8xllnKlxguDWnCpxx8X70GG45hU3xk9vysY/s640/Now-Your-Eyes-Can-Zoom-Eith-Telescopic-Contact-Lenses.jpg" width="640" /></a></div>
<br />
Contacts have some clear advantages over eyeglasses, from being impossible to knock off by a hit or fall, to being essentially invisible unlike the edges of the eyeglass lenses. Now, they have just gained a huge new asset.<br />
<br />
We have all seen science fiction films about enhancements to our physiology, and fantasy ones where characters could see in the far distance.<br />
<br />
Now we can finally claim that we have the means to give everyone and their grandmother telescopic vision. Researchers at the Swiss Federal Institute of Technology have introduced contact lenses with zoom support.<br />
The zooming contact lenses<br />
<br />
The brainchild of researcher <span class="highlight pop">Eric Tremblay</span>, the contacts were revealed at the American Association for the Advancement of Science annual meeting in California.<br />
<br />
They are still a prototype, but they can be very useful to counteract age-related mascular degeneration (AMD for short). Age-related muscular degeneration being the main cause behind loss of sight in adults over the age of fifty.<br />
<br />
The lenses have built-in telescopes that can zoom in at 3X. The lenses themselves are rigid, but they are also larger than the normal ones, covering not just the cornea but the sclera as well (the white of the eyes).<br />
<br />
1.5 mm thick, the lenses have a ring of tiny aluminum mirrors inside, to bounce light around and magnify the view 2.8 times, increasing the perceived size of objects.<br />
<br />
You can switch between normal and zoomed view by winking the right eye, thus interrupting the light being reflexed from the contact to the glasses.<br />
<br />
And thus we reach the main drawback: the contacts don't work alone, but in tandem with <a href="http://www.hackerschronicle.com/search/label/Gadgets">smart glasses</a> which can distinguish between blinks and winks.<br />
<br />
When winking, the light being reflected from the contacts to the glasses is interrupted, activating a polarized filter in the glasses which guides light towards the telescopic part. Winking the left eye resets things to normal view.<br />
Practical applications<br />
<br />
The zooming contact lenses might not be superman-level telescopic vision, especially since they'd work while the Clark Kent persona is active, but they are still a significant achievement. Human tests haven't been carried out yet, however, and the amount of time the contacts can be worn is restricted, for health reasons.<br />
<br />
Source: Softpedia<br />
<br /></div>

Contacts have some clear advantages over eyeglasses, from being impossible to knock off by a hit or fall, to being essentially invisible...

Millions of health records, LEAKED

6/28/2016 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLH8RYn6seWRyOte7fXtY8K8pjplZLMBjUEMPHB27KS7ls5QCC0Jzb4NaBoSVfAeVodHSfn6y1kG2j7nR7RRpn2sZjb8EzvXwRmyGD8_cjfYBPqzkZW9R-KydPBqbJf4fnVfjjecvLBeE/s1600/health-records-dat-breach.jpeg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="347" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLH8RYn6seWRyOte7fXtY8K8pjplZLMBjUEMPHB27KS7ls5QCC0Jzb4NaBoSVfAeVodHSfn6y1kG2j7nR7RRpn2sZjb8EzvXwRmyGD8_cjfYBPqzkZW9R-KydPBqbJf4fnVfjjecvLBeE/s640/health-records-dat-breach.jpeg" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">The dark web seller has four batches of data, going for close to $1 million in bitcoin.</td></tr>
</tbody></table>
<br />
<br />
A hacker is advertising hundreds of thousands of alleged records from healthcare organizations on a dark web marketplace, including social security and insurance policy numbers.<br />
<br />
The seller, who goes by the name "<b>thedarkoverlord</b>" began listing the data over the weekend, but could not be immediately contacted on Monday.<br />
<br />
The largest batch of data, which the seller claims to contain a little over 9.2 million health insurance records from US patients, is on sale for 750 bitcoins. At Monday's rate, that's about $486,000. The data includes names, addresses, emails, phone numbers, dates of birth and social security numbers.<br />
<br />
We couldn't verify the authenticity of the data contained in the seller's ad. The seller did not have any points to their name, unlike other known hackers, indicating that they are new to the site. News site Motherboard contacted some users who confirmed that their data was in a sample that was received.<br />
<br />
The hacker said the data was stolen by exploiting an disclosed <a href="http://www.hackerschronicle.com/search/label/Vulnerability">zero-day</a> flaw in the remote desktop protocol (RDP), which can allow a user to remotely view another user's desktop.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAzvREp49HEWjUdGfKDRKILcDL3aKCdXrntu5j7Zj_tffLXRtaw2y4jD6yxyIY_qnd2kHKGqnh-AC6kr-Be9wbNxDLrME6ORJLvwJXFE3vqfwsjj8o8DFpFht59UIk7vnmOdpv2P0CGXw/s1600/health-recods-data-leak.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="467" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAzvREp49HEWjUdGfKDRKILcDL3aKCdXrntu5j7Zj_tffLXRtaw2y4jD6yxyIY_qnd2kHKGqnh-AC6kr-Be9wbNxDLrME6ORJLvwJXFE3vqfwsjj8o8DFpFht59UIk7vnmOdpv2P0CGXw/s640/health-recods-data-leak.png" width="640" /></a></div>
<br />
<br />
It's not all that surprising, given that earlier this year a hacker exposed thousands of insecure desktops that anyone can remotely view, thanks to poorly-configured remote desktop software. In one case, we were able to see a computer used in a pediatrician's office, which contained personal details on hundreds of patients.<br />
<br />
Another batch of data includes 207,000 records from an unnamed healthcare organization in the US midwest region, on sale for 170 bitcoins (about $110,100 at the time of writing).<br />
<br />
The seller also claims to have close to 397,000 records from members in Atlanta, Georgia -- most of which are from Blue Cross Blue Shield and United Healthcare, which is being sold for 300 bitcoin (or about $194,000).<br />
<br />
Another smaller batch contains records on 47,800 members from Farmington, Missouri, which is on sale for 60 bitcoins (or about $39,000).<br />
<br />
The hacker said in one listing that the data was stored on an "accessible internal network" and stored in plaintext -- which if true would be in violation of federal healthcare privacy rules. Another database was allegedly stolen from a Microsoft Access database.<br />
<br />
It's not clear where the data came from, but healthcare providers and hospitals have been increasingly targeted for customer and patient data in recent months. Anthem was notably hit last year, in which hackers took off with over 80 million records.<br />
<br />
According to recent data, the healthcare industry tallies up as the highest cost of a<a href="http://www.hackerschronicle.com/search/label/Data%20Leak"> data breach</a> per record.<br />
  </div>

Darknet Data Leak Hacking News Identity Theft News Millions of health records, LEAKED

The dark web seller has four batches of data, going for close to $1 million in bitcoin. A hacker is advertising hundreds of thousands...

RCE, Information Disclosure and XSS Flaws Found in PayPal

4/15/2014 cyb3r.gladiat0r 4

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuIwDgMNaan2uhQRa6VZRiUWTr7JTxgzIBKLz-HDBPC4RznLPMoODa6G5BeZfIo1MifcSy-nP72XWL_DHOY8DwNS8DiHOsRrkhGL1_ilr16MwDXTioCptQS659nbw7bwNvhKfBPK8iKaA/s1600/RCE-Information-Disclosure-and-XSS-Flaws-Found-in-PayPal-Partner-Program-Video.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="RCE, Information Disclosure and XSS Flaws Found in PayPal " border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuIwDgMNaan2uhQRa6VZRiUWTr7JTxgzIBKLz-HDBPC4RznLPMoODa6G5BeZfIo1MifcSy-nP72XWL_DHOY8DwNS8DiHOsRrkhGL1_ilr16MwDXTioCptQS659nbw7bwNvhKfBPK8iKaA/s1600/RCE-Information-Disclosure-and-XSS-Flaws-Found-in-PayPal-Partner-Program-Video.jpg" title="RCE, Information Disclosure and XSS Flaws Found in PayPal " width="400" /></a></div>
<br />
A security expert has managed to identify three <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerabilities</a> on <a href="http://paypal-marketing.com/">paypal-marketing.com</a>, the website used by the payment processor for the <a href="http://www.hackerschronicle.com/search/label/PayPal">PayPal</a> Partner Program.<br />
<br />
Behrouz Sadeghipour has found and reported a <a href="http://www.hackerschronicle.com/search/label/XSS">cross-site scripting (XSS)</a> issue, a <a href="http://www.hackerschronicle.com/search/label/Remote%20Code%20Execution">remote code execution</a> flaw and an <a href="http://www.hackerschronicle.com/search/label/Information%20Disclosure">information disclosure vulnerability</a>.<br />
<br />
Initially, the researcher found the XSS flaw, which he reported to PayPal’s security team on March 19. The XSS was addressed on April 9.<br />
<br />
One day after the XSS was fixed, Sadeghipour identified an information disclosure issue, which he later leveraged for remote code execution. The expert said he was looking for an SQL Injection bug, but he found an RCE instead.<br />
<br />
To demonstrate the existence of the RCE to PayPal, he sent the company’s security team three links showing that he could retrieve the Process ID (PID), the script owner’s Group ID (GID) and the script owner’s User ID (UID) by replacing a parameter in the request with <a href="http://www.hackerschronicle.com/search/label/PHP">PHP</a> commands.<br />
<br />
By April 11, PayPal had addressed the vulnerability. The company has promised to reward the researcher in the next payment cycle.<br />
<br />
Sadeghipour highlights that the RCE he has found is a remote code execution, not a remote command execution bug. This vulnerability allows an attacker to run PHP functions. The flaw produces the same sort of results, but by leveraging PHP.<br />
<br />
Check out the proof-of-concept video for the PayPal Partner Program vulnerabilities. Additional technical details are available on <a href="http://nahamsec.com/2014/04/paypal-marketing-remote-code-execution/">Behrouz Sadeghipour's blog</a>.<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/BB3rSd_muBc" width="560"></iframe><br />
Source: <a href="http://softpedia.com/">Softpedia</a></div>

RCE, Information Disclosure and XSS Flaws Found in PayPal

Hacking News Information Disclosure News PayPal Remote Code Execution Vulnerability XSS RCE, Information Disclosure and XSS Flaws Found in PayPal

A security expert has managed to identify three vulnerabilities on paypal-marketing.com , the website used by the payment processor for...

How to patch your server against The Heartbleed Bug

4/09/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3>
 <div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhF8F3vAwnst4IayJY5zYLxQJ_-NQBqWbNlmhPEVZiV0HJTJ7pQWu9FwtvAUEJYWLEIgX9_d9Bem64Sv5Fo31Sy3Gcm3fcavtdzOuyp0vG39gFf-122r39HWCB-2l_fR_VVjbFKISUwlYCg/s1600/How+to+patch+your+server+against+The+Heartbleed+Bug.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to patch your server against The Heartbleed Bug" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhF8F3vAwnst4IayJY5zYLxQJ_-NQBqWbNlmhPEVZiV0HJTJ7pQWu9FwtvAUEJYWLEIgX9_d9Bem64Sv5Fo31Sy3Gcm3fcavtdzOuyp0vG39gFf-122r39HWCB-2l_fR_VVjbFKISUwlYCg/s1600/How+to+patch+your+server+against+The+Heartbleed+Bug.jpg" title="How to patch your server against The Heartbleed Bug" width="318" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</h3>
<h3>
What is the Heartbleed Bug?</h3>
<br />
The Heartbleed Bug is a serious <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerability</a> in the popular <a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).<br />
The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users. <br />
<br />
<h3>
Before you start</h3>
Check if your OpenSSL version is vulnerable to the <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a>. You can check it by typing in your terminal: <span class="highlight pulse">openssl version</span><br />
The result should look something like this:<br />
<div class="command wobble-horizontal">
# openssl version<br />
OpenSSL 1.0.1g 7 Apr 2014  </div>
<br />
<br />
Since we at <a href="http://www.hackerschronicle.com/">Hackers Chronicle</a> already patched our systems at the time of writing this guide, your result will probably be different.<br />
<h3>
What versions are vulnerable?</h3>
Status of different versions:<br />
<ul>
<li>OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable</li>
<li>OpenSSL 1.0.1g is NOT vulnerable</li>
<li>OpenSSL 1.0.0 branch is NOT vulnerable</li>
<li><a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> 0.9.8 branch is NOT vulnerable</li>
</ul>
<br />
Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug.<br />
<br />
Some operating system distributions that have shipped with potentially vulnerable OpenSSL version:<br />
<ul>
<li>Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4</li>
<li><a href="http://www.hackerschronicle.com/search/label/Ubuntu">Ubuntu</a> 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11</li>
<li><a href="http://www.hackerschronicle.com/search/label/CentOS">CentOS</a> 6.5, OpenSSL 1.0.1e-15</li>
<li>Fedora 18, OpenSSL 1.0.1e-4</li>
<li>OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012)</li>
<li>FreeBSD 8.4 (OpenSSL 1.0.1e) and 9.1 (OpenSSL 1.0.1c)</li>
<li>NetBSD 5.0.2 (OpenSSL 1.0.1e)</li>
<li>OpenSUSE 12.2 (OpenSSL 1.0.1c)</li>
</ul>
Operating system distribution with versions that are not vulnerable:<br />
<ul>
<li>Debian Squeeze (oldstable), OpenSSL 0.9.8o-4squeeze14</li>
<li>SUSE Linux Enterprise Server</li>
</ul>
<h3>
Ubuntu</h3>
open your terminal and type in the following:<br />
<span class="command wobble-horizontal">#sudo apt-get update<br />
#sudo apt-get install -y libssl1.0.0 openssl<br />
#openssl version -a <br />
//confirm the "built on" date is >= 2014-04-07<br />
sudo lsof -n | grep ssl | grep DEL <br />
//restart all listed services. Repeat this until no results are returned</span><br />
<br />
<h3>
<a href="http://www.hackerschronicle.com/search/label/Debian">Debian</a></h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">#wget http://security.debian.org/pool/updates/main/o/openssl/libssl1.0.0-dbg_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/openssl_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/libssl1.0.0_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_1.0.1e-2+deb7u5_amd64.deb<br />
<br />
#dpkg -i openssl_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl1.0.0_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl1.0.0-dbg_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl-dev_1.0.1e-2+deb7u5_amd64.deb<br />
<br />
#/etc/init.d/apache2 restart<br />
#/etc/init.d/ssh restart</span><br />
<br />
<h3>
CentOS</h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">#yum clean all && yum update "openssl*"</span><br />
<br />
Take note and ensure that it’s specifically <span class="system push highlight">openssl-1.0.1e-16.el6_5.7 (or later)</span> being installed. As this update has just been released, your yum mirror may not have this package yet. If your yum mirror/repository does not yet have this update, you can download and install the RPMs manually from another CentOS yum repository.<br />
<br />
After updating the packages, run the following command to see what processes still have the old, deleted OpenSSL libraries open:<br />
<span class="command wobble-horizontal">#lsof -n | grep ssl | grep DEL</span><br />
<br />
You must restart each process that still has the old libraries open.<br />
<br />
Examples of processes that may still have the old libraries open:<br />
<ul>
<li>mysql</li>
<li>postfix</li>
<li>webmin</li>
<li>openvpn</li>
<li>osad</li>
<li>nrpe</li>
</ul>
<h3>
<a href="http://www.hackerschronicle.com/search/label/Red%20Hat">Fedora/Red Hat</a></h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">$ yum update openssl</span><br />
<br />
Restart services that rely on OpenSSL<br />
<span class="command wobble-horizontal">$ lsof | grep libssl | awk '{print $1}' | sort | uniq</span><br />
<br />
<h3>
Test your website against Heartbleed Bug</h3>
<a href="http://possible.lv/tools/hb">Heartbleed Test - provided by possible.lv</a><br />
<a href="http://filippo.io/Heartbleed/">Heartbleed Test - provided by filippo.io </a><br />
<br />
Source: <a href="http://scanarch.com/" target="_blank">Scan Arch</a> </div>

How to patch your server against The Heartbleed Bug

Bug Centos CVE-2014-0160 Debian Heartbleed Bug Linux Tutorials OS Patch Red Hat Ubuntu Vulnerability How to patch your server against The Heartbleed Bug

What is the Heartbleed Bug? The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software librar...

SQL Injection vulnerability in Yahoo

4/08/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTL6tV9kV7M1jnMiGsqJkN05t-AAte545WWB5lT0nMMl0ySjeeSv-ygAOYGGJvzdimuyEVq_HIt9dcbu4rZcVtV_Z2PbTp21u8eEUudbExSQnpDf5ZFe1jmLYBwiCnMTZz5yrKpNpBlAZ5/s1600/Expert-Finds-8-Files-Vulnerable-to-SQL-Injection-in-Yahoo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Expert Finds 8 Files Vulnerable to SQL Injection in Yahoo HK Promotions Pages" border="0" height="351" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTL6tV9kV7M1jnMiGsqJkN05t-AAte545WWB5lT0nMMl0ySjeeSv-ygAOYGGJvzdimuyEVq_HIt9dcbu4rZcVtV_Z2PbTp21u8eEUudbExSQnpDf5ZFe1jmLYBwiCnMTZz5yrKpNpBlAZ5/s1600/Expert-Finds-8-Files-Vulnerable-to-SQL-Injection-in-Yahoo.png" title="Expert Finds 8 Files Vulnerable to SQL Injection in Yahoo HK Promotions Pages" width="640" /></a></div>
<br />
Security researcher <strong>Behrouz Sadeghipour</strong> has identified several <a href="http://www.hackerschronicle.com/search/label/SQL%20Injection">SQL Injection</a> <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerabilities</a> in a Hong Kong subdomain of <a href="http://www.hackerschronicle.com/search/label/Yahoo">Yahoo</a>. He reported his findings to the company and all the security holes have been fixed.<br />
<br />
According to the expert, the flaws have been found in various files on the Hong Kong promotions subdomain (<a href="http://hk.promotions.yahoo.com/">hk.promotions.yahoo.com</a>). <br />
<br />
He decided to analyze this subdomain because it contains a lot of Flash files and PHP scripts that could be vulnerable, and it doesn’t appear that the pages have been created by Yahoo’s core developers. <br />
<br />
Furthermore, since the pages are in Chinese, it’s likely that they’re ignored by many auditors.<br />
<br />
The expert has managed to identify a total of eight vulnerable files. Following his analysis of the Yahoo HK promotions subdomain, Sadeghipour sent 5 reports to the company. <br />
<br />
The list of pages on which he found SQL Injection vulnerabilities includes the Emotive2012 page, the <a href="http://www.hackerschronicle.com/search/label/Nikon">Nikon</a> Photo Itinerary page, and the Education page. By leveraging these bugs, the researcher managed to gain access to names, email addresses and other information.<br />
<br />
Yahoo addressed the issues within a month after being reported. The expert has told me that the company has removed the vulnerable files. <br />
<br />
As some of our readers might know, this isn’t the first time <strong>Sadeghipour</strong> finds serious vulnerabilities in Yahoo’s Hong Kong subdomains. Last month, he identified a <a href="http://www.hackerschronicle.com/2014/03/remote-code-execution-in-yahoo.html">remote code execution flaw</a>.<br />
<br />
At the time, he found an administrator panel for the hk.yahoo.net subdomain that could be accessed with <span class="highlight pop">admin/admin</span> credentials. <br />
<br />
For additional details on the SQL Injection vulnerabilities found in Yahoo, check out <a href="http://nahamsec.com/2014/04/yahoo-sql-injection/">Behrouz Sadeghipour‘s blog</a>. You can also check out the proof-of-concept videos he made for a couple of the flaws:<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/8MuWtVqj4iU" width="560"></iframe><br />
<br />
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/8HN-91UxUh8" width="560"></iframe><br /></div>

Hacking News News SQL Injection Vulnerability Yahoo SQL Injection vulnerability in Yahoo

Security researcher Behrouz Sadeghipour has identified several SQL Injection vulnerabilities in a Hong Kong subdomain of Yahoo . He...

Syrian cyber space attacked, 60,000 accounts leaked

4/07/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_suIU5kyLsjT9DcN83rBXHHzojnYXZs8Hc1NrXyTDIkP2dT0afL1Izbq25PNpPokaCF2_JsuqVnXwtVwywleTEn8Lkwe7_q_v3WwnNslS352nDklaCv2fS53zdDhew6nglXlA_-accm1m/s1600/Syrian+cyber+space+attacked.jpeg" title="60,000 Personal Credentials Leaked From Syrian Sites" width="320" /></a></div>
<br />
<div dir="ltr" style="text-align: left;" trbidi="on">
Today a hacker from the European Cyber Army going by the handle <a href="https://twitter.com/Zer0Pwn" target="_blank">@Zer0Pwn</a> has announced a leak of data from two syrian based websites job.sy, realestate.sy.<br />
<br />
<a href="http://pastebin.com/7Y13ULux">The leak</a> which is titled “ECA vs. Assad | Part 1″ was posted to <a href="http://pastebin.com/7Y13ULux">pastebin</a> with a preview of some of the users data and a link to <a href="http://www.sendspace.com/file/tqa737">sendspace</a>. The attack is apart of a bigger operation that is going on towards what the hackers are claim are pro-assad targets.<br />
<br />
The data leak has resulted in over 60,000 Accounts being dumped online and between the two databases are users credentials which have encrypted passwords for job.sy but plaintext for realestate.sy. Both databases have full user details such as full names, contact phone numbers and home addresses. On the march 30th career-sy.com appears to of been breached and <a href="http://pastebin.com/wLJhHNd8">posted to pastebin</a> as well with 3 administrator credentials as well as the vuln entry point and link for the control panel login which is located on the job.sy server which career-sy.com redirects to now.<br />
<br />
Some attacks by other ECA members have been carried out and posted to twitter by <a href="https://twitter.com/ECA_Legion">@ECA_Legion</a> with data being leaked from syrianmonster.com, a syrian hosting website, ddos attacks on sites like syria-courts.com, sana.sy and moj.gov.sy. banquecentrale.gov.sy. The leak of data from the realestate.sy database appears to have plaintext passwords to accounts linked to www.scs-net.org which is one of the job.sy official partners to making all three sites linked together or even owned and operated by the same people possibly.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="60,000 Personal Credentials Leaked From Syrian Sites" border="0" height="65" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdO8G4iadsahZXY49VR9drtCxc6EuyXWRF1fJR5lWpcqEanBamppxMQn6vBvMylr1-B5Rna-JKFPASq5VwhkJs0dsJL0War1afHEyJOQILblFg99dZA2bq9dZn4LDEYcIM9V8z-XLWllwr/s1600/eca-leak-example-file.png" title="60,000 Personal Credentials Leaked From Syrian Sites" width="400" /></a></div>
<br />
Full dump info<br />
<br />
<a href="http://realestate.sy/">http://realestate.sy/</a><br />
<br />
File realestate.sy_users.sql<br />
File Contents:  3,257 Emails that are unique out of 3,517 Total emails Found.<br />
Information: Contains user names,email addresses, clear text passwords, full names, phone numbers, locations and site related information.<br />
<br />
File realestate.sy.sql<br />
File Contents: 4,912 Emails that are unique out of 13,223 Total emails Found.<br />
Information: Complete internal messaging system, site logs and administrator login logs with ips and cookie information.<br />
<br />
<a href="http://job.sy/">http://job.sy/</a><br />
<br />
File job.sy_users.sql<br />
File Contents: 50,017 Emails that are unique out of 52,483 Total emails Found. Included in the job.sy.sql file as well.<br />
Information: Contains user names, encrypted MD5 passwords, email addresses, home addresses and contact numbers and full names as well as other site related information.<br />
<br />
File job.sy.sql<br />
File Contents: 59,575 Emails that are unique out of 84,343 Total emails Found.<br />
Information: Contains logs with ip addresses and browser information, messages between job seekers and employees between, min resumes, job comments<br />
<br />
<a href="http://syrianmonster.com/">http://syrianmonster.com</a><br />
Only contains 1 administrator account with username and password.<br />
<br />
<a href="http://career-sy.com/">http://career-sy.com/</a><br />
3 administrator credentials with user names and encrypted passwords.</div>
</div>

Data Leak European Cyber Army Hacking News News Syrian cyber space attacked, 60,000 accounts leaked

Today a hacker from the European Cyber Army going by the handle @Zer0Pwn has announced a leak of data from two syrian based websites j...

Enable HAProxy stats in Cent OS

3/30/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipybvTyxMYGeHrvEwrVBcT-kUT58xnUwFzVVC3e0NsVS6_nizojFEnAcCpx9taJFEKFTlWxwdhkBAtm7J_Ew69rq4XOyKayQLdg0hli6nDuGc3zA-oJBTDuHL8Ty2gZKpkKMHtPGpqmBE/s1600/haproxy-stats-hackerschronicle-com.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Enable HAProxy stats in Cent OS" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipybvTyxMYGeHrvEwrVBcT-kUT58xnUwFzVVC3e0NsVS6_nizojFEnAcCpx9taJFEKFTlWxwdhkBAtm7J_Ew69rq4XOyKayQLdg0hli6nDuGc3zA-oJBTDuHL8Ty2gZKpkKMHtPGpqmBE/s1600/haproxy-stats-hackerschronicle-com.png" title="Enable HAProxy stats in Cent OS" width="400" /></a></div>
<br />
HAProxy Stats provides a lot of information about data transfer, total connection, server state etc. After installing HAProxy if you want to view HAProxy stats in your web browser, You can easily configure it by making few changes in your <a href="http://www.hackerschronicle.com/search/label/HAProxy" target="_blank">HAProxy</a> configuration using following steps.<br />
<br />
<h3>
1: Enable Stats in HAProxy</h3>
To enable stats edit your haproxy configuration file(<span class="highlight">/etc/haproxy/haproxy.cfg</span>) and add below entry after defaults section.<br />
<div class="content shadow-radial">
listen  stats   192.168.10.10:1936<br />
mode            http<br />
log             global<br />
<br />
maxconn 10<br />
<br />
clitimeout      100s<br />
srvtimeout      100s<br />
contimeout      100s<br />
timeout queue   100s<br />
<br />
stats enable<br />
stats hide-version<br />
stats refresh 30s<br />
stats show-node<br />
stats auth admin:password<br />
stats uri  /haproxy?stats</div>
<br />
<br />
<h3>
2: Access HAProxy Stats</h3>
<br />
Your can access HAProxy stats using following url. Change ip with your haproxy server ip address.<br />
<div class="command wobble-horizontal">
URL: http://192.168.10.10:1936/haproxy?stats<br />
Login user: admin<br />
Login password: password</div>
<br />
<br />
<br />
<h3>
3: Change Login Details</h3>
<br />
If you want to changed login details of HAProxy stats, edit your configuration and update “stats auth” value like below<br />
<br />
<div class="command wobble-horizontal">
stats auth  username:password</div>
<br />
<br />
Save configuration file and restart HAProxy to update service.<br />
<br />
<h3>
4: Change HAProxy Stats URL</h3>
<br />
To change url of haproxy stats edit configuration file and update following value.<br />
<div class="command wobble-horizontal">
stats uri  /ha-stats<br />
or<br />
stats uri  /stats</div>
<br />
<br />
Save configuration file and restart HAProxy to update service.<br />
<div class="command wobble-horizontal">
service haproxy restart </div>
<br />
Now you can access url like <span class="system pop">http://192.168.10.10:1936/ha-stats</span> or <span class="system pop">http://192.168.10.10:1936/stats</span>.<br />
<br />
<b>Congratulation’s!</b> HAProxy stats configuration has been completed successfully. Read next article to <a href="http://www.hackerschronicle.com/search/label/HAProxy">setup ACL in HAProxy</a>.</div>

Centos HAProxy Linux Tutorials Load Balancing Enable HAProxy stats in Cent OS

HAProxy Stats provides a lot of information about data transfer, total connection, server state etc. After installing HAProxy if you wan...