Enable HAProxy stats in Cent OS

3/30/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipybvTyxMYGeHrvEwrVBcT-kUT58xnUwFzVVC3e0NsVS6_nizojFEnAcCpx9taJFEKFTlWxwdhkBAtm7J_Ew69rq4XOyKayQLdg0hli6nDuGc3zA-oJBTDuHL8Ty2gZKpkKMHtPGpqmBE/s1600/haproxy-stats-hackerschronicle-com.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Enable HAProxy stats in Cent OS" border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipybvTyxMYGeHrvEwrVBcT-kUT58xnUwFzVVC3e0NsVS6_nizojFEnAcCpx9taJFEKFTlWxwdhkBAtm7J_Ew69rq4XOyKayQLdg0hli6nDuGc3zA-oJBTDuHL8Ty2gZKpkKMHtPGpqmBE/s1600/haproxy-stats-hackerschronicle-com.png" title="Enable HAProxy stats in Cent OS" width="400" /></a></div>
<br />
HAProxy Stats provides a lot of information about data transfer, total connection, server state etc. After installing HAProxy if you want to view HAProxy stats in your web browser, You can easily configure it by making few changes in your <a href="http://www.hackerschronicle.com/search/label/HAProxy" target="_blank">HAProxy</a> configuration using following steps.<br />
<br />
<h3>
1: Enable Stats in HAProxy</h3>
To enable stats edit your haproxy configuration file(<span class="highlight">/etc/haproxy/haproxy.cfg</span>) and add below entry after defaults section.<br />
<div class="content shadow-radial">
listen  stats   192.168.10.10:1936<br />
mode            http<br />
log             global<br />
<br />
maxconn 10<br />
<br />
clitimeout      100s<br />
srvtimeout      100s<br />
contimeout      100s<br />
timeout queue   100s<br />
<br />
stats enable<br />
stats hide-version<br />
stats refresh 30s<br />
stats show-node<br />
stats auth admin:password<br />
stats uri  /haproxy?stats</div>
<br />
<br />
<h3>
2: Access HAProxy Stats</h3>
<br />
Your can access HAProxy stats using following url. Change ip with your haproxy server ip address.<br />
<div class="command wobble-horizontal">
URL: http://192.168.10.10:1936/haproxy?stats<br />
Login user: admin<br />
Login password: password</div>
<br />
<br />
<br />
<h3>
3: Change Login Details</h3>
<br />
If you want to changed login details of HAProxy stats, edit your configuration and update “stats auth” value like below<br />
<br />
<div class="command wobble-horizontal">
stats auth  username:password</div>
<br />
<br />
Save configuration file and restart HAProxy to update service.<br />
<br />
<h3>
4: Change HAProxy Stats URL</h3>
<br />
To change url of haproxy stats edit configuration file and update following value.<br />
<div class="command wobble-horizontal">
stats uri  /ha-stats<br />
or<br />
stats uri  /stats</div>
<br />
<br />
Save configuration file and restart HAProxy to update service.<br />
<div class="command wobble-horizontal">
service haproxy restart </div>
<br />
Now you can access url like <span class="system pop">http://192.168.10.10:1936/ha-stats</span> or <span class="system pop">http://192.168.10.10:1936/stats</span>.<br />
<br />
<b>Congratulation’s!</b> HAProxy stats configuration has been completed successfully. Read next article to <a href="http://www.hackerschronicle.com/search/label/HAProxy">setup ACL in HAProxy</a>.</div>

HAProxy Stats provides a lot of information about data transfer, total connection, server state etc. After installing HAProxy if you wan...

New Security Operating System Released, Developed by US Airforce

3/23/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjr43MJcQ_RoAdlfakQeAvIMG1ZENb1OCxor6wM6h2HIKfD2ODbHIG_isrDEdwh07fKzDVjB5al-rDssdqDpmDb97MOdt3U_vbwgiawSz1oZS1xFgdKVyOuvqE3KWKETsYR6rENnN8H-ggN/s1600/Lightweight-Portable-Security.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Lightweight Portable Security (LPS) 1.5.0" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjr43MJcQ_RoAdlfakQeAvIMG1ZENb1OCxor6wM6h2HIKfD2ODbHIG_isrDEdwh07fKzDVjB5al-rDssdqDpmDb97MOdt3U_vbwgiawSz1oZS1xFgdKVyOuvqE3KWKETsYR6rENnN8H-ggN/s1600/Lightweight-Portable-Security.jpg" title="Lightweight Portable Security (LPS) 1.5.0" width="400" /></a></div>
<br />
Lightweight Portable Security (LPS) 1.5.0, a thin <a href="http://www.hackerschronicle.com/search/label/Linux" target="_blank">Linux</a> <a href="http://www.hackerschronicle.com/search/label/OS">operating system</a> that creates a secure end node from trusted media on almost any Intel-based computer (PC or <a href="http://www.hackerschronicle.com/search/label/Apple">Mac</a>), is now available for download.<br />
<br />
LPS 1.5.0 is a different kind of operating system, although it's still based on Linux <a href="http://www.hackerschronicle.com/search/label/Kernel">kernel</a>, like most of the distros out there. Unlike established OSes, this is more like a thin client than anything else and it practically boots from a CD or USB flash stick without mounting a local hard drive. Users don't even need to have root access for this to work, because nothing is actually installed.<br />
<br />
The distribution has been developed by the <a href="http://www.hackerschronicle.com/search/label/USA">US</a> Air Force Research Laboratory, as part of its Software Protection Initiative project, and can be used as a completely secure environment, mostly because the user can't install it and the outside world can't interact with anything.<br />
<br />
“LPS-Public allows general web browsing and connecting to remote networks. It includes a smart card-enabled Firefox browser supporting CAC and PIV cards, a PDF and text viewer, <a href="http://www.hackerschronicle.com/search/label/Java">Java</a>, and <a href="http://www.hackerschronicle.com/search/label/Encryption">Encryption</a> Wizard - Public. LPS-Public turns an untrusted system (such as a home computer) into a trusted network client,” reads the official website.<br />
<br />
The best thing about it is that no trace of the user activity is ever registered on the computer, which also means that no malware can affect the operating system. The developers say that any malware that might infect a computer can only run within a session, so, in theory, a user can improve the system's security by rebooting between sessions.<br />
<br />
A number of very important changes and updates have been implemented. For example, Linux Kernel has been updated to version 3.10.22 (not the latest build, but it's new enough), USB interface libraries <span class="highlight pop">libusbx</span> has been updated to version 1.0.16, libusb-compat has been updated to version 0.1.5, and PCSC-Lite has been updated to version 1.8.10 (CCID 1.4.14). <br />
<br />
Also, the desktop is now using <a href="http://www.hackerschronicle.com/search/label/Xfce">Xfce</a>, numerous user experience utilities have been added, a number of <a href="http://www.hackerschronicle.com/search/label/Browser">Browser</a> Bookmark updates have been added, <span class="highlight pop">FreeRDP</span> has been updated to version 1.1, the <a href="http://www.hackerschronicle.com/search/label/VMware">VMware</a> View Client has been updated to version 2.2, Mozilla <a href="http://www.hackerschronicle.com/search/label/Firefox">Firefox</a> has been updated to version24.3.0 ESR, <a href="http://www.hackerschronicle.com/search/label/Adobe">Adobe Flash Player</a> has been updated to version 11.2.202.346, <a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> has been updated to version 1.0.0l/0.9.8y, and LibreOffice has been updated to version 4.1.5.<br />
<br />
A complete backlog of improvements and fixes can be found in the <a href="http://spi.dod.mil/CHANGES.html" target="_blank">official changelog</a>. <span class="highlight pop">Download</span> <a href="http://spi.dod.mil/docs/LPS-1.5.0_public_deluxe.iso" target="_blank">Lightweight Portable Security</a> (LPS) 1.5.0</div>

New Security Operating System Released, Developed by US Airforce

Distro Download Lightweight Portable Security Lightweight Portable Security (LPS)1.5.0 Linux OS USA New Security Operating System Released, Developed by US Airforce

Lightweight Portable Security (LPS) 1.5.0, a thin Linux operating system that creates a secure end node from trusted media on almost a...

GitHub under DDoS Attack

3/21/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4SJuTIBKWzzZyeE5rY1q-3V4zHR4PZ_xFuFmlaaG_TXzX6WCRrV6TBaYCEUY5Z1XDfOrGJM3tbmUCjWPZ2gb6cs-0dm-fusgc1yl7LGRgHjB4SYFYKAGitVKgsSimsmx-bPffRg-udhFy/s1600/github+under+ddos+attack.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="GitHub under DDoS Attack" border="0" height="153" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4SJuTIBKWzzZyeE5rY1q-3V4zHR4PZ_xFuFmlaaG_TXzX6WCRrV6TBaYCEUY5Z1XDfOrGJM3tbmUCjWPZ2gb6cs-0dm-fusgc1yl7LGRgHjB4SYFYKAGitVKgsSimsmx-bPffRg-udhFy/s1600/github+under+ddos+attack.png" title="GitHub under DDoS Attack" width="400" /></a></div>
It’s pretty clear that <a href="https://github.com/" target="_blank">GitHub</a> is one of the favorite targets for <a href="http://www.hackerschronicle.com/search/label/DDoS">distributed denial-of-service</a> (DDOS) attacks. The service is currently facing another attack wave. <br />
<br />
“We are currently working to mitigate an incoming DDoS attack. We’ll provide additional information as it becomes available,” GitHub <a href="https://status.github.com/messages" target="_blank">wrote</a> just a few minutes ago.<br />
<br />
The code repository hasn’t shared any additional details in the meantime and may not even do so if the attack isn’t much more serious than the regular DDOS attacks targeting it.<br />
<br />
GitHub handles such situations so often that it has gotten so accustomed to mitigating them that access to the service is usually restored within about 20 minutes.<br />
<br />
The service is armed with enough weapons to handle volumetric and complex attacks, so everything should be back to normal in no time.<br />
<br />
Last week, they faced one of the biggest attacks in recent months and, as a result, GitHub started working on ways to improve its DDOS mitigating capabilities to make sure that even uncommon operations could be blocked quickly, so that users could get their service back.<br />
<br />
On March 11, the attack was so wide that GitHub went down for 2 hours, a lot more than the regular 20 minutes that people are used to.<br />
<br />
<strong>[UPDATE 1:]</strong> The efforts to reduce the number of legitimate users who are flagged as attack traffic continues.<br />
<br />
<strong>[UPDATE 2:]</strong> GitHub is back to working order. </div>

Cyber Crime DDoS GitHub Hacking News News GitHub under DDoS Attack

It’s pretty clear that GitHub is one of the favorite targets for distributed denial-of-service (DDOS) attacks. The service is currently...

New Exploits for Old PHP Vulnerability

3/21/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeGG4lt7wUJNvQFm-0o7PNWDCPIOWcdPtbdayQk8XXU_7X894V9XrXXZFZbCyf01xJDedbxeILXYJhMs3hvFtGa2aigOY3ciQ2wukeyTA387SDs8QVtbTD6S13wko308hpID3t4-WrS2x4/s1600/new+php+exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="New Exploits for Old PHP Vulnerability" border="0" height="238" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeGG4lt7wUJNvQFm-0o7PNWDCPIOWcdPtbdayQk8XXU_7X894V9XrXXZFZbCyf01xJDedbxeILXYJhMs3hvFtGa2aigOY3ciQ2wukeyTA387SDs8QVtbTD6S13wko308hpID3t4-WrS2x4/s1600/new+php+exploit.png" title="New Exploits for Old PHP Vulnerability" width="400" /></a></div>
Close to two years ago, a serious vulnerability in <a href="http://www.hackerschronicle.com/search/label/PHP">PHP</a> was accidentally disclosed after it was discovered months prior during a hacking contest. A patch was released in relatively short order, and one would assume that given PHP’s prevalence as a web development framework, the fix would have been applied just as quickly.<br />
<br />
But given the discovery last October of a new set of exploits for <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823" target="_blank">CVE-2012-1823</a>, that assumption may not be correct.<br />
<br />
Researchers at <a href="http://blog.imperva.com/2014/03/threat-advisory-php-cgi-at-your-command.html" target="_blank">Imperva</a> have been watching since Oct. 29 attacks exploiting the PHP bug. Attackers were using the new <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a> to deliver arbitrary code to websites running <span class="higlight">PHP 5.4.x, 5.3.x before 5.4.2 or 5.3.12</span>; those vulnerable versions account for about 16 percent of the sites on the web according to director of security research <span class="higlight">Barry Shteiman</span>.<br />
<br />
The new exploits were dangerous in that they allowed hackers to abuse an old vulnerability to not only run arbitrary code, but also adapt techniques found in <a href="http://www.hackerschronicle.com/search/label/Botnets">botnets</a> and crimeware kits to inject <a href="http://www.hackerschronicle.com/search/label/Malwares">malware</a>, steal credentials or system data from the server, or move laterally within the data center.<br />
<br />
“Not only are we seeing a vulnerability used after it was released so long ago, but what we’re seeing is attackers and professional hackers understanding what vendors understand—people just don’t patch,” Shteiman said. “They can’t or won’t or are not minded to fix these problems.”<br />
<br />
PHP is found on nearly 82 percent of websites today; these attacks target sites where PHP is running with CGI as an option, creating a condition that allows for code execution from the outside. Shteiman said the vulnerability affects a built-in mechanism in PHP that protects itself from exposing files and commands. A configuration flaw allows hackers to first disable the security mechanism, which in turn allows a hacker to run remote code or arbitrarily inject code.<br />
<br />
“With the new exploit, it’s the same relative technique, but what we’ve seen is a lot of automation,” Shteiman said. “The tool that attacked these systems is running an interesting subset of dictionaries that requires an attacker know where PHP is installed on the server. We’ve seen attackers trying different paths to see which backend contains the [PHP] executable.”<br />
<br />
The big-picture problem is the number of PHP websites still running vulnerable code despite the availability of a patch for close to two years now.<br />
<br />
“PHP is installed as an interpreter,” Shteiman said. “Replacing the existing instance of PHP with a new one means downtime. Sometimes you may have to change applications because some things that are now deprecated may require application changes. For that reason, sometimes organizations don’t patch or go a different route. They might use a new framework instead.”<br />
<br />
Original reports on the vulnerability triggered advisories from a number of organizations, including <span class="highlight">US-CERT</span>. The bug is a relatively simple one; researchers found that when they passed a specific query string that contained the -s command to PHP in a CGI setup, PHP would interpret the <span class="highlight">-s</span> as the command line argument and result in the disclosure of the source code for the application. They extended their testing and found they could pass whatever command-line arguments they wanted to the PHP binary.<br />
<br />
“You’d think these bugs would be long forgotten, but it isn’t so; they’re like the undead. Vulnerabilities never die,” Shteiman said. “They don’t die and we realize if we see this executed by botnets trying to onboard servers and by crimeware kits being sold, that means attackers understand they can rely on old problems because people won’t fix them and attackers don’t have to work too hard.”
</div>

Exploit PHP Programming Vulnerability Web Development New Exploits for Old PHP Vulnerability

Close to two years ago, a serious vulnerability in PHP was accidentally disclosed after it was discovered months prior during a hacking ...

One Billion Android Devices Vulnerable to Privilege Escalation

3/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCiKD_FEhu-RQVAa_lJ175vL01h9hBVKcmksZDJLCNNost1SUk2Mb4fOMJXs7a5tTxpzmB8x46z9taLlE9PjL1holFpeN3qdVlDF5z2Du49R-I_DiGlo_8J20Wi4vHFhnpZw0lswFNmGVU/s1600/android+vulnerability.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="One Billion Android Devices Vulnerable to Privilege Escalation" border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCiKD_FEhu-RQVAa_lJ175vL01h9hBVKcmksZDJLCNNost1SUk2Mb4fOMJXs7a5tTxpzmB8x46z9taLlE9PjL1holFpeN3qdVlDF5z2Du49R-I_DiGlo_8J20Wi4vHFhnpZw0lswFNmGVU/s1600/android+vulnerability.png" title="One Billion Android Devices Vulnerable to Privilege Escalation" width="400" /></a></div>
<br />
The first deep look into the security of the <a href="http://www.hackerschronicle.com/search/label/Android">Android</a> patch installation process, specifically its Package Management Service (PMS), has revealed a weakness that puts potentially every Android device at risk for <a href="http://www.hackerschronicle.com/search/label/Privilege%20Escalation">privilege escalation attacks</a>.<br />
<br />
 Researchers from Indiana University and <a href="http://www.hackerschronicle.com/search/label/Microsoft">Microsoft</a> published a paper that describes a new set of Android vulnerabilities they call Pileup flaws, and also introduces a new scanner called SecUP that detects <a href="http://www.hackerschronicle.com/search/label/Malwares">malicious</a> apps already on a device lying in wait for elevated privileges.<br />
<br />
 The vulnerability occurs in the way PMS handles updates to the myriad flavors of Android in circulation today. The researchers say PMS improperly vets apps on lower versions of Android that request OS or app privileges that may not exist on the older Android version, but are granted automatically once the system is updated.<br />
<br />
 The researchers said they found a half-dozen different Pileup flaws within Android’s Package Management Service, and confirmed those vulnerabilities are present in all Android <a href="http://www.hackerschronicle.com/search/label/Open%20Source">Open Source</a> Project versions and more than <span class="highlight pop">3,500</span> customized versions of Android developed by handset makers and carriers; more than one billion Android devices are likely impacted, they said.<br />
<br />
 An attacker could use a malicious application to <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a> this situation to access data on the device such as user credentials, activity logs, SMS data. The researchers also said a successful attack could also give a hacker control of new signature and system permission, leading to a deeper level of trouble.<br />
<br />
 The paper, “<a href="http://www.informatics.indiana.edu/xw7/papers/privilegescalationthroughandroidupdating.pdf" target="_blank">Upgrading Your Android, Elevating My Malware: Privilege Escalation Through Mobile OS Updating</a>,” was written by Luyi Xing, Xiaorui Pan, Kan Yuan and XiaoFeng Wang of Indiana University Bloomington and Rui Wang of Microsoft. The frequency of Android updates—estimated to be on average of every 3½ months— and the fragmentation of the Android market make it close to impossible to adequately secure devices, the researchers said.  “Every few months, an update is released, which causes replacement and addition of tens of thousands of files on a live system. Each of the new apps being installed needs to be carefully configured to set its attributes within its own sandboxes and its privileges in the system, without accidentally damaging existing apps and the user data they keep,” the researchers wrote. “This complicates the program logic for installing such mobile updates, making it susceptible to security-critical flaws.”<br />
<br />
 Pileup flaws, short for privilege escalation through updating, ramp up the permissions given to malicious apps once Android is updated without raising an alarm to the user. “Through the app running on a lower version of Android, the adversary can strategically claim a set of carefully selected privileges or attributes only available on the higher OS version,” the researchers wrote.<br />
<br />
 The paper said customized versions of Android, such as those developed by device makers and carriers, are especially vulnerable to Pileup attacks. The researchers said manufacturers are purposely conservative with regard to updates so as not to interfere with the user experience. Users who have apps currently installed, for example, expect them to work seamlessly after OS updates and upgrades; that means data and features must transfer. An attacker can get a seemingly benign app on a device that requests privileges not present on the lower OS version. Generally, the Package Management Service must compare the privileges present between updates and will generally grandfather in existing permission requests so as not to interfere with functionality.<br />
<br />
 “A third-party package attribute or property, which bears the name of its system counterpart, can be elevated to a system one during the updating shuffle-up where all apps are installed or reinstalled, and all system configurations are reset,” the paper said. “Also, when two apps from old and new systems are merged as described above, security risks can also be brought in when the one on the original system turns out to be malicious.”<br />
<br />
 Upon an <a href="http://www.hackerschronicle.com/search/label/OS">OS</a> upgrade, the PMS will install new and existing system apps, including third-party apps, and will register the permissions they declare. That means for a malicious app, the PMS recognizes all the permissions it requests and those are silently granted because it supposes that permissions with an existing app have already been approved by the user.<br />
<br />
 All of the issues have been reported to <a href="http://www.hackerschronicle.com/search/label/Google">Google</a>, the researchers said; Google has already patched one of the six vulnerabilities.<br />
<br />
 As for the team’s SecUP scanner, it inspects Android APKs already installed on a device, identifying those that are likely to cause privilege escalations during an update, the paper said. SecUP is made up of a number of components, including a vulnerability detector, exploit opportunity analyzer and a risk database, in addition to the scanner app, the paper said.<br />
<br />
 “The detector verifies the source code of PMS (from different Android versions) to identify any violation of a set of security constraints, in which we expect that the attributes, properties (name, permission, UID, etc.) and data of a third-party app will not affect the installation and configurations of system apps during an update,” the researchers wrote. “A Pileup flaw is detected once any of those constraints are breached.”<br />
<br />
 The analyzer then kicks in and searches Android factory images for places where privilege escalation could happen; that information is stored in the risk database. The scanner app uses that database to check third-party apps and alerts the user to any potential risks. </div>

Android Mobile Privilege Escalation Vulnerability One Billion Android Devices Vulnerable to Privilege Escalation

The first deep look into the security of the Android patch installation process, specifically its Package Management Service (PMS), h...

Beware of fake TOR Browser

3/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiBt1QSL4HNFa20maeD7wyQDw2r2V4OHLUj5f8HZFqobA9UOzm1cs5sK2XQY5LjYLr0yRTjR3rmAHmXEZgZC4M374lwKSPLPDWMAeYjI3MKtAZdb9EtYBhMOkviwmdrVFwVTWCKM5OFj-k/s1600/fake+tor+browser.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="207" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiBt1QSL4HNFa20maeD7wyQDw2r2V4OHLUj5f8HZFqobA9UOzm1cs5sK2XQY5LjYLr0yRTjR3rmAHmXEZgZC4M374lwKSPLPDWMAeYjI3MKtAZdb9EtYBhMOkviwmdrVFwVTWCKM5OFj-k/s1600/fake+tor+browser.png" width="320" /></a></div>
Members of the Tor anonymity service are warning that a <a href="http://www.hackerschronicle.com/search/label/Tor">Tor</a> iOS app available in Apple's highly curated App Store since November is a fake that is laced with adware and spyware.<br />
<br />
"Tor Browser in the <a href="http://www.hackerschronicle.com/search/label/Apple">Apple</a> App Store is fake," a <a href="https://trac.torproject.org/projects/tor/ticket/10549">report ticket published two months ago</a> on the Tor website by high-ranking volunteer Phobos stated. "It's full of adware and spyware. Two users have called to complain. We should have it removed."<br />
<br />
The ticket went on to say that Tor officials notified Apple of the <a href="https://itunes.apple.com/us/app/tor-browser/id712805884?mt=8">fake Tor Browser app</a> in December. In the intervening time, the app has remained available, touching off a series of exchanges among Tor members about how to respond. Ars was unable to confirm the claims of <a href="http://www.hackerschronicle.com/search/label/Malware">adware</a> or spyware. Still, the incident highlights the lack of transparency in the way that Apple vets the reliability of security apps and responds to complaints of rogue titles.<br />
<br />
"Apple responded today with chance for author to defend their app," one volunteer wrote shortly after the ticket was opened. "Sent another email to appstorenotices@," Phobos replied a few weeks later.<br />
Early Wednesday, some two months later, yet another Tor member wrote: "I think naming and shaming is now in order. Apple has been putting users at risk for months now." Another member quickly replied: "I mailed Window Snyder and Jon Callas to see if they can get us past the bureaucracy. Otherwise I guess plan C is to get high-profile people on Twitter to ask Apple why it likes harming people who care about privacy. (I hope plan B works.)"<br />
<br />
(Window Snyder and Jon Callas are both highly respected security researchers who have worked for Apple in the past. Callas has since left the company and is an executive with Silent Circle. <strong>Update:</strong> Snyder still works for the Cupertino company. In the past, she has worked for both <a href="http://www.hackerschronicle.com/search/label/Microsoft" target="_blank">Microsoft</a> and <a href="http://www.hackerschronicle.com/search/label/Mozilla" target="_blank">Mozilla</a>.)<br />
<h3>
Secret garden</h3>
Apple's App Store has long been referred to by critics and fans alike as a walled garden. The metaphor is used to describe the highly controlled environment of the official iOS app bazaar. Presumably, apps submitted by third-party developers are carefully scrutinized before they become available. That's in sharp contrast to the official Google Play store for Android, which is much less selective and where rogue or malicious apps regularly slip through the vetting process.<br />
<br />
Apple has never described exactly what its process is for ensuring the titles in its App Store are safe. Although the comparatively fewer reports of rogue apps for iOS suggest that the review process is more stringent than Google's, the report ticket from Tor's high-ranking members suggests that Apple may not be doing everything it can or should do to protect iPhone and iPad users.<br />
<br />
Fortunately, the <a href="http://www.hackerschronicle.com/search/label/Tor%20Browser">Tor Browser</a> app at issue has been downloaded a relatively small number of times, and so far there are no reports one way or the other that its behavior represents a serious threat to the people who have installed it. Still, its availability raises questions about exactly what Apple does to ensure the security and authenticity of other apps it hosts on its own servers. This article will be updated if Apple officials, who are routinely silent on such matters, respond to our request for comment.</div>

Fake Tools Tor Tor Browser Beware of fake TOR Browser

Members of the Tor anonymity service are warning that a Tor iOS app available in Apple's highly curated App Store since November is ...

Remote Code Execution vulnerability in Yahoo

3/19/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgypjQ4r7519iMUDXnRvxtq7XEu98Xs0kfpGwGcz8Xu-QsyVVSFJeEZJKw_d7Mkpn2K8Fgr_BV2c1QQejY8V9GFjS27VbysAvv7XoT_byjQQL01LKupnpin3qMovIsapjS8HuxWSJqcabQU/s1600/rce+in+yahoo.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgypjQ4r7519iMUDXnRvxtq7XEu98Xs0kfpGwGcz8Xu-QsyVVSFJeEZJKw_d7Mkpn2K8Fgr_BV2c1QQejY8V9GFjS27VbysAvv7XoT_byjQQL01LKupnpin3qMovIsapjS8HuxWSJqcabQU/s320/rce+in+yahoo.PNG" width="400" /></a></div>
<br />
Security researcher Behrouz Sadeghipour has identified a number of <a href="http://www.hackerschronicle.com/search/label/Vulnerability" target="_blank">vulnerabilities</a> on a Hong Kong subdomain of Yahoo (<a href="http://hk.yahoo.net/" target="_blank">hk.yahoo.net</a>). Fortunately, Yahoo has rushed to address the security holes reported by the expert.<br />
According to Sadeghipour, he came across the vulnerabilities while analyzing a <a href="https://www.blogger.com/www.hackerschronicle.com/search/label/XSS" target="_blank">cross-site scripting</a> (XSS) issue. While looking at the HTTP headers, he came across an administrator login page for the hk.yahoo.net domain.<br />
He simply tried to log in with the “<span class="highlight pop">admin</span>” username and “<span class="highlight pop">admin</span>” password and it worked. Once he gained access to the administrator panel, he found a page where he could upload images. <br />
There was an upload restriction, but the expert managed to bypass it by naming his file <span class="highlight pop">shell.php.jpg</span>. Once the file was uploaded, he simply renamed it to <span class="highlight pop">shell.php</span>.<br />
“I had read/write/execute permissions in /home which contains few more subdomains and website. Also, Linux kernel is VERY old and is a rootable. Not to mention I was able to read most DIRs and Files but NOT including /etc/shadow),” the researcher explained in a blog post.<br />
The vulnerability was reported to Yahoo on February 20 and it was patched the next day. However, so far, the company hasn’t rewarded <span class="highlight pop">Sadeghipour</span> for his findings.<br />
For additional details on these Yahoo vulnerabilities, check out the video proof-of-concept and the expert’s blog.
</div>
<iframe allowfullscreen="" frameborder="0" height="315" src="//www.youtube.com/embed/ymG00fiKU6o" width="560"></iframe></div>

Remote Code Execution Vulnerability XSS Yahoo Remote Code Execution vulnerability in Yahoo

Security researcher Behrouz Sadeghipour has identified a number of vulnerabilities on a Hong Kong subdomain of Yahoo ( hk.yahoo.net )....