“Hacker Safe” Sites are Really Hacker Friendly

This article was written on January 18, 2008 by CyberNet.

Hacker Safe Friendly One of the logos that users have come to trust is the “Hacker Safe” label placed on certain sites. Geeks.com has that logo on their site, but that didn’t stop them from getting hacked back in December. Are the sites that say they are Hacker Safe really all that secure?

The Hacker Safe program is run by McAfee’s ScanAlert service, and 62 different websites that are certified by them have been found to have cross-site scripting (XSS) attacks over the last year…including the ScanAlert site itself. Most of the sites have plugged the holes, but the 62 sites affected includes popular ones such as brookstone.com, cafepress.com, cduniverse.com, gnc.com, petsmart.com, and sportsauthority.com. All of those are “Hacker Safe” sites.

There was some speculation as to whether Geeks.com was Hacker Safe when they had their data breach in December, but I pulled up the archives for their site and the logo has been on their site for a long time. Unfortunately there was no archive available around the timeframe of the breech, but I think ScanAlert is just trying to cover their butt by passing off the blame.

I guess the moral of the story is that the Hacker Safe logo may give you some initial reassurances, but even some of the biggest sites are still left vulnerable. Try to make sure that the sites you are ordering from don’t store your personal information, such as a credit card number.

[via Information Week]

Copyright © 2011 CyberNetNews.com

Related Posts:


Microsoft Cracking Down More on Vista Piracy

This article was written on February 22, 2008 by CyberNet.

Microsoft must be extremely unhappy with the “quality” of the cracks available for Vista right now. Earlier this month we showed that the Vista OEM BIOS crack is still alive and kicking in Vista SP1 despite claims by Microsoft that those types of cracks had been patched. I would mark that up as an “oops” by Microsoft.

The Windows Genuine Advantage (WGA) team is flexing their muscles at all of the hackers out there right now though. Later this month Microsoft is going to release an update (via Windows Update) for both the RTM and SP1 copies of Vista that will notify users if they are running a pirated copy of Vista:

Gold and SP1-installed systems [will] detect the presence of the Grace Timer and OEM BIOS exploits then alert the customer of their presence. The dialog box (shown below) also provides customers with guidance about what they can do to fix it and provides a Web link for more details, so that customers can learn about the particular exploit and learn how to disable and remove it. If they are a victim of software piracy, the linked Web pages will provide information on how to get genuine software.

cracked version of vista

They then go on to say what the users will experience that are running Vista with one of the activation workarounds installed:

The timing of when customers will first see the “Activate Your Copy of Windows” message can vary depending on what exploit is running on their system. Customers whose systems have the OEM BIOS exploit, for example, may not see anything for 15 days due to the way activation was set up for our OEM partners. Systems that have the Grace Timer exploit will be immediately prompted to activate once SP1 is installed.

The update will not uninstall or disable the exploits that it finds, but a separate tool will be available to users who wish to do so. They expect that the next release of the exploitation analyzer will include the tool needed to remove the any of the activation workarounds. From what I gather the tool will not deactivate the system nor will it mark Vista as not genuine, but it’s possible that I’ve misunderstood just how this is going to work.

What I’m left wondering is whether Microsoft has plans to push out a new update to Service Pack 1 that is able to detect some of the additional OEM BIOS cracks that are out there. Those of you who are running pirated copies of Vista better tread lightly because Microsoft is coming after you! ;)

Copyright © 2011 CyberNetNews.com

Related Posts:


AT&T ramps up voicemail security, say hello to your new pin code

Have anything sitting in your voicemail that you’d prefer the rest of the world didn’t hear? When’s the last time you went about checking it, anyway? AT&T is now on a mission to save its carefree customers from themselves, and beginning today, all new subscribers will be required to set a voicemail password or affirmatively disable the security measure. Ma Bell’s new policy is a reaction to the current unauthorized intrusion hubbub in the media, combined with the very real threat of caller ID spoofing. Shockingly, its current customers won’t receive similar treatment until early next year, and only when they upgrade their handsets. Of course, you can easily secure your voicemail within the settings, and if you prefer the convenience of retrieving your messages without hassle, you’ll still have that option — much to Rupert Murdoch’s pleasure, that is.

AT&T ramps up voicemail security, say hello to your new pin code originally appeared on Engadget on Sat, 06 Aug 2011 13:06:00 EDT. Please see our terms for use of feeds.

Permalink CNET  |  sourceAT&T Public Policy Blog  | Email this | Comments

LulzSec Hacks The Times with Brutal Murdoch Death Notice

Well, seems like LulzSec has returned, and moved beyond the DDOS attack! Not content to merely shut down one of Rupert Murdoch’s paper’s websites, the hacking group has instead planted a bizarro-Onionesque account of the mogul’s death-by-palladium on a Times redesign page masquerading as The Sun. Well played, #AntiSec. More »

Anonymous Is Working On AnonPlus, a Facebook For Hackers and Non-Hackers Alike

Rather than rest on their keyboards after being kicked off Google+, the hacking group known as Anonymous has created a holding page for AnonPlus, a “new social network where there is no fear…of censorship…of blackout…nor of holding back.” More »

Mini Space Invaders arcade cabinet big on nostalgia, small in size

Always wanted an 80’s arcade cabinet for your living room, but the square footage in your studio apartment won’t cooperate with your gaming plans? Well, a master mini craftsman has created a seven-inch replica of Space Invaders that can fit on your desktop, coffee table, or bedside stand. It was cobbled together using the guts of a Game Boy Advance, some lilliputian controls, and a custom cabinet coated in shrunken decals that’s made of medium density fiberboard. Best of all, thanks to those Nintendo internals, there’s an entire arcade’s worth of games at your tiny fingertips. Between this and its diminutive Donkey Kong cousin, perhaps mini arcade cabinets are the future of gaming. Video of the little gem in action is after the break.

Continue reading Mini Space Invaders arcade cabinet big on nostalgia, small in size

Mini Space Invaders arcade cabinet big on nostalgia, small in size originally appeared on Engadget on Mon, 11 Jul 2011 17:55:00 EDT. Please see our terms for use of feeds.

Permalink Oh Gizmo  |  sourcevcoleiro1 [YouTube]  | Email this | Comments

Hackers do Apple’s Job, Again

This article was written on October 17, 2007 by CyberNet.

iPod Classic on 5G

I think Apple needs to start taking some of their cues from hackers because they are truly demonstrating what the masses want. When the iPhone was originally released hackers were forced to find a way to get real third-party applications onto the device, and it didn’t take long for that to happen. Now Apple is trying to make amends by releasing a true SDK in February for the iPhone and iPod Touch.

And then Microsoft announced that the original Zune will be getting the same firmware update that the Zune 2 will have, and many people were angry that Apple didn’t do the same thing with the iPod Classic. Hackers went at it again and were able to port over the firmware to 5G and 5.5G iPods!

Information on the hacked firmware can be found here, and here is the page that you’ll need to download it from. If after installation your iPod doesn’t get past the Apple logo you’ll need to press and hold the center and play buttons at the same time until “Disk Mode” appears on the screen. From there you can restore your iPod’s firmware back to the original. The developer claims that this firmware update “cannot, and will not brick your iPod.”

Here’s a video demonstration that shows what the new firmware looks like on a 5G iPod:

[via iLounge]
Thanks for the tip Pieter!

Copyright © 2011 CyberNetNews.com

Related Posts:


DIY Bike Tire Puncture Guard Made From a Seatbelt

It’s neither practical nor pretty, but this DIY tire-liner certainly looks effective

Summer is officially here, in the Northern Hemisphere at least, and with it comes puncture season. Here in Barcelona, Spain, the lack of rain from May onwards means the streets build up a tire-killing collection of sharp detritus, from the remains of broken beer bottles to shards of smashed car headlamps.

Taking a trip of more than a few kilometers without a spare tube, pump and tools is foolish.

Unless you are Bike Hacks reader Nicolás, who came up with ingenious and cheap anti-puncture shield for his tires. He simply cut the straps off an old messenger bag, which were made of already-recycled seatbelt webbing. He then cut the belts to size and pushed them inside his bike tires before replacing them and fitting the inner tube as usual.

Seatbelts are pretty tough. Try shoving something sharp through one to test it out if you like. It’s certainly a lot tougher than weak and easy-to-cut bike tubes. My first concern would be about the added weight, and then the difficulty of getting the belt lined up to keep it in balance. But then, on an old Dutch bike which weighs a ton already, this could be a great low-tech solution. Sure, you can buy proper tire liners, but are they free? I’ll stick with my patch kit, for now, but in an emergency, I now have a new idea of what to use for a tire-boot to repair any gaping holes.

Seat Belt Bike Tire Hack [Nicolás on Bike Hacks]

See Also:


7 Tools to Help Prevent Getting Hacked

The #AntiSec lulzcapades are in full effect right now, and it seems like anyone is a candidate to be hacked, infiltrated, or compromised in some way. So what about you? We figured we’d offer up a few tools to fend off hackers, trackers, and invaders from all angles. More »

Rotary phone mod tweets your emoticons, heavy soldering still required

File this under ‘questionably useful, but darling nonetheless.’ ZviZvi over at Instructables needed to update an outdated product for his Industrial Design portfolio, so he took grandpa’s old rotary phone and implanted an Arduino soul. With an involved bit of slap n’ solder and a WiFly shield, our enterprising Israeli modder transformed this once-luddite tech into an emoticon-tweeting wireless terminal. While the phone’s LED-lit dial is only capable of outputting ten heartwarming expressions, that’s still ten more than any rotary phone’s ever had before. Sure, you could always use that ever-accessible laptop (or smartphone) for your Twitter needs, but where’s the fun in that? Per usual, budding inventors can tickle their Emo in the source link below.

Rotary phone mod tweets your emoticons, heavy soldering still required originally appeared on Engadget on Thu, 23 Jun 2011 13:08:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceInstructables  | Email this | Comments