Recent Post

Showing posts with label Web Related Stuff. Show all posts
Showing posts with label Web Related Stuff. Show all posts

Wednesday, October 5, 2011

OMG ! Bing stealing search results from Google !


There has been a rumor running around that Microsoft is using Google to improve Bing’s search results. The guys from Bing obviously denied everything and now, Google released their proof.
Google had created fake search results for some jibrish – never searched – queries and waited for Bing to eat the bait. And they did.
Here is one example where for the query “delhipublicschool40 chdjob” Google inserted a search result for a credit union:

A few days past and the same credit union showed up on Bing for that query:

Tuesday, October 4, 2011

Vulnerablity in wordpress : Giving Malware


Google up inurl:wp-content/1/ [Warning: just google it up, don't visit any of the site in the search results. They are full of activeX viruses!]. This is what I see now:
What you see is a list of sites that were hacked through the latest WordPress Vulnerabilitythat allows hackers to insert spam into your blog.
This is just great. WordPress is the most common blog software out there, and at this minute there are over 90,000 website that were spammed (still counting…) I’m sure that most of these sites owners never heard of this exploit and some of them will probably never will. The damage is enormous. This exploit made them look like spammers in Google eyes, and Google like Google – She never forgets anything. If you are a spammer, you are out of the index in one second.
In my opinion, the best way to deal with these hacks is Active Network Scanning. This kind of services are usually provided by an external company that scans your site for vulnerabilities on a daily basis (like Hacker Safe, but better). Once a new vulnerability is discovered to the world, it is automatically added to their scanning system and is tested on your site. This can definately help you sleep better.
Life shows that there is no way your web site can be safe. It is just the nature of software that it is full of holes. If only you scan your website for vulnerabilities, at least you know about it on time and hope there is something you can do about it…
Important comment: if you are not in this list, it does not mean that you are safe. There are lots of other URLS that were used for this attack… This IS fun!
update: (April 12 2008): Checked again the list, and it seems like most of the hacked pages were removed from Google’s index. It DOES NOT mean that the vulnerability is fixed, it just means that Google had identified that these pages as pages that should be ignored and removed from the index. This is semi good news for those that were hacked and afraid their ranking will go kaput. Just semi because they are still vulnerable and will surly be attacked again in the next wave…
It seems like the number of WordPress vulnerabilities is growing constantly. The most popular blogging software that exists is becoming a huge security hole. In fact, this post is written with WordPress and it feels less secure than ever. This makes me think about moving my blog to blogger or wordpress hosting site, instead of fighting the patches on my own server.

Friday, September 2, 2011

Are You Ready For Social Music On Facebook?

News reports suggest Facebook is soon launching its music service with the help of third party players like Spotify and Last.fm. The announcement is likely to be made at the upcoming f8 conference. Facebook gave us a glimpse of the feature couple of months ago in its hidden code. "Vibes" as it will probably be called will allow users to select and listen to music with their Friendsf8 Are You Ready For Social Music On Facebook?

The deal with the music companies would probably be similar to the deal between Facebook and game developers. Applications would be allowed to run on Facebook, but a certain amount of commission would be charged. Successful companies like Zynga have demonstarted what it takes to operate on Facebook.

While Spotify currently supports Facebook Likes, the new service will deeply integrate it into a Dashboard.

According to Gigaom, Facebook Connect and Facebook Likes are key components of this service and will go in a long way to encourage social behavior. The music service will appear as a tab on the left side of the homepage and upon clicking will take you to a music Dashboard.

We can’t wait for the service to be launched. Readers, tell us what you think.

Saturday, August 27, 2011

Are Social Networking Teens More Apt to Smoke, Drink and Use Drugs?


150x97 Are Social Networking Teens More Apt to Smoke, Drink and Use Drugs?

With kids back in or in the process the next few weeks of returning to school, a new report out from the National Center on Addiction and Substance Abuse (CASA) at New York’s Columbia University certainly must have some parents a little edgy.

According to the CASA survey, American teens of middle and high school age are more apt to engage in smoking, drinking and using drugs should they also be surfing social networking sites. The two social networking sites which received the most attention were Facebook and MySpace.

The study points out that teenagers devoting any time at all to social networking sites were a whopping five times more inclined to light up a cigarette, three times more likely to consume alcohol and twice as apt to include marijuana in their daily lives.

Proof is in the Pictures

Among some other tidbits from the survey of 12-to-17-year-olds:

  • 70 percent of surveyed teenagers admit to using social media sites;
  • 40 percent of all teenagers have viewed pictures on those sites of kids engaging in alcohol or drug usage – half of those individuals were not yet teens – they were 12 or younger;
  • Exposure to the above-mentioned images appears to lead to greater usage of alcohol and marijuana.

One of the chief recommendations in the report is having social networking sites such as Facebook employing more technological expertise to reducing such images, along with denying access to children and teens who post such pictures.

While survey officials would not come out and say social media exacerbates the problem, it certainly does not help it.

Even though social media is still in its infancy stages, this most recent survey bears noting that both parents and their kids need to come to an agreement on how best to use social networking sites.

A 2009 report looking at similar issues noted that more than 1 out of every 10 teenagers has gone online to post a nude or seminude picture of themselves or others.

The report from Common Sense Media also pointed out that 22 percent of teens report they view their social networking sites more than 10 times daily.

Paying the Price down the Road

Along with the reported risks now for many teens that use social networking sites, there are potential negative implications down the road too.

Teenagers using different social media sites run the risk of posting images or comments that will impact them when it comes to trying to get into college, the military or even obtaining a part-time job.

Among the areas where a social media posting could wind up hurting a teen is:

  • College admissions – A 2008 Kaplan report claims one in 10 college admissions officials regularly reviews college applicants’ Facebook and MySpace pages, with nearly 40 percent of them discovering posts and images that portray students in a negative manner;
  • Business and medical schools – Admissions officers for both business and medical schools also regularly view sites such as Facebook to check up on prospective students;
  • Child porn – While we all know the dangers teens place themselves in by posting explicit photos or language to strangers on social networking sites, they can also put themselves in legal jeopardy. Posting or transporting photos of oneself or friends in scanty clothing or sexually suggestive poses is risky, especially if any of the individuals posing are under 18, given the end result could be child pornography charges. It’s one case to be charged with sending or obtaining child pornography as a minor, however those charges in adult court could carry not only prison time, but a lifetime of sex offender registry.

As you can see, there is much that can go wrong when teens take to social media sites.

Used properly, social media sites can serve as educational tools in helping brings events into the lives of teens that may otherwise miss out on such information.

Used improperly, social media can leave many teens facing more than just being grounded.




Saturday, August 13, 2011

iPad Owners Spend More Time Using in Bed than in Bathroom

Users of Apple's iPad and other tablets prefer to spend more time fiddling with their devices in bed than in the bathroom.



That’s the assessment of a new study by The Nielsen Co.



http://www.blogcdn.com/www.engadget.com/media/2010/04/ipad60019.jpg



Nielsen recently surveyed 12,000 tablet, e-reader and smartphone owners in the U.S. to find out where and in what situations people like to use the gadgets.The study also measured how long people use their devices compared to other situations. Use while watching TV, lying in bed, hanging out with friends and family, waiting for a doctor's appointment, and in the bathroom were all gauged.



Users of tablets, e-readers and smartphones said they spend about 3 percent to 4 percent of their gadget time in the bathroom. By comparison, about 21 percent of a tablet user’s time is spent lying in bed, and 11 percent of smartphone usage is spent on the mattress, according to the survey. Sixty-one percent of e-reader owners cited bedtime as a great situation for opening an e-book. And 37 percent of e-reading time was spent lying in bed among those surveyed.



The most popular place to use tablets appears to be in front of the tube.



Seventy percent of tablet owners cited watching TV as the most popular situation for using a tablet. This was also the biggest time suck with 30 percent of a user's tablet time spent in front of the set.



The least popular situation to pull out the electronic gizmos?



Tablet owners said they are least likely to use the device while commuting. Smartphone owners are most reluctant to pull out their device during a class or meeting. And 9 percent of e-reader users surveyed say they leave their gadgets at home when shopping or running errands.

Thursday, August 11, 2011

More Evidence Pours In Suggesting Google+ Is Slowing Down

Just as the initial euphoria surrounding Google+ shows signs of staving-off, it has become pretty clear that the site is losing its steam. While the site has opened the doors for the public with invites, there appears to be less of an enthusiasm from people outside the tech circle to make it a part of their daily lives.



http://cdn.moxiebird.com/wp-content/uploads/2011/07/google_plus_logo.jpg

The site which has already hit 25 million users is struggling to keep up with the growth rate witnessed by it in previous weeks. Chitika in its research found out that Google+ experienced a 34% erosion of its traffic from July 20th to July 31st. These results are in stark contrast to an earlier Insights study which indicated a 300% increase in the interest for Google+ from July 3rd to July 11th.

google plus growth More Evidence Pours In Suggesting Google+ Is Slowing Down

At one point the site handled about .007% of total web traffic. It has now been reduced to about 0.005%.

The slowdown was first noticed by serial entrepreneur Paul Allen last month. On his Google+ account he noted,”Last week we saw two days where more than 2 million signed up in a single day. If that rate had continued, Google+ would have reached 20 million users by last Sunday night. But the last four days have averaged only 948,000 new users and yesterday the site added only 763,000. Yesterday’s growth of 4.47% was the slowest viral growth since Google opened up invites back on July 6th.”

So, should you write-off Google+? Not until it comes out of its invite only mode. Remember, Google+ is treading the path of Google’s other product Gmail which witnessed slow but steady growth over the years.

Facebook News Feed Gets An Upgrade And Its A Major One

http://fastgush.com/wp-content/plugins/social-media-widget/images/cutout/64/facebook.png



Facebook has revamped its News feed to allow similar topic posts to appear in a single thread. Facebook engineer said,”We want to show you the most relevant and interesting information, and this test is designed to show you trends among what your friends are saying. ”

But wait, that’s not the major update. In fact its the additional brand tagging feature that is the icing on the cake. As seen below, users’ updates are clubbed together and a link to Harry Potter Page appears at the top right.

First noticed by Inside Facebook, the feature allows a greater engagement between users and brands and an opportunity for brands to appear right with News feeds – which by the way has become so difficult because of the ever changing Edgerank algorithm. Users can explicitly tag a Page or allow Facebook’s natural language processing to detect what users are talking about.

Facebook is also planning to allow unfiltered News stream – which means, Facebook will not determine what to show in user’s news stream.

As with any update there would be the initial backlash but this update is an important one for Facebook at a time when it is struggling to keep up with the demands of brands and advertisers.

facebook news feed Facebook News Feed Gets An Upgrade And Its A Major One

Saturday, July 23, 2011

Ani-Shell v1.3 Released

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEheYt8c9R2vwo5BBZR5YGhIX_2drLaxFx6htC0val73zHGg07LuiEp2MWEPc7gpvAlcuOpXko-8__n8B950A1aThs5qZCjllFuvb8UFsYUBnLl1BMiOTUREu7gplCFKZ6pLzQ_ELhFG-dE/s1600/Matrix+in+CMD.jpg


==[0x00] Introduction

Ani-Shell is a simple PHP shell with some unique features like Mass Mailer ,
...A simple Web-Server Fuzzer , DDoser, Back Connect , Bind Shell etc etc ! This shell
has immense capabilities and have been written with some coding standards in
mind for better editing and customization.

====[0x001] Customisation

1. Email Traceback is set to Off as default and emails will not be sent , If you are setting
this feature on make sure you change the default email address (lionaneesh@gmail.com) to Your email
address , Please Change it before using.

2. Username and Passwords are set to lionaneesh and lionaneesh respectively , Please change them for better
security.

3. As a default Lock Mode is set to on! This should not be change unless you want your shell exposed.


====[0x0002] Default Login

Username : lionaneesh
Password : lionaneesh

==[0x01] Features

[0x01A] Shell
[0x01B] Platform Independent
[0x01C] Mass - Mailer
[0x01D] Small Web-Server Fuzzer
[0x01E] DDoser
[0x01F] Design
[0x02A] Secure Login
[0x02B] Deletion of Files
[0x02C] Bind Shell
[0x02D] Back Connect
[0x02E] Fixed Some Coding errors!
[0x02F] Rename Files
[0x03A] Encoded Title
[0x03B] Traceback (Email Alerts)
[0x03C] PHP Evaluate
[0x03D] Better Command Execution (even supports older version of PHP)
[0x03E] Mass Code Injector (Appender and Overwriter)
[0x03F] Lock Mode Customization

=============[0x0101] New in this version

[0x0A] Mail Bomber (With Less Spam detection feature)
[0x0B] PHP Decoder
[0x0C] Better Uploader
[0x0D] Fixed some Coding errors

For Dowloads Send a Email  request to  lionaneesh@gmail.com

Friday, July 22, 2011

Zone-H banned on some Indian ISPs: some work arounds










As some of you prob­a­bly know, Zone-​H has been banned from some Indian ISPs fol­low­ing the E2-​labs scan­dals and a law­suit from E2labs and Zaki Qureshey in an indian court, who claimed our doc­u­ments and arti­cles were defam­a­tory (great joke!).
Zone- ​H was unable to defend itself as we didn’t receive any noti­fi­ca­tion from the court. What is even fun­nier (scarier?), is that blog​gernews​.net has also been banned…
Check out their articles:
http://​www​.blog​gernews​.net/​1​24029
http://​www​.blog​gernews​.net/​1​24890
http://​www​.blog​gernews​.net/​1​26528
http://​www​.blog​gernews​.net/​1​26831
As you can see from the doc­u­ment they received, the block­ing is directly linked to the same court order:
http://​www​.blog​gernews​.net/​i​n​d​e​p​t​h​/​i​n​d​i​a​/​i​n​d​i​a​3.jpg
http://​www​.blog​gernews​.net/​i​n​d​e​p​t​h​/​i​n​d​i​a​/​i​n​d​i​a​4.jpg
http://​www​.blog​gernews​.net/​i​n​d​e​p​t​h​/​i​n​d​i​a​/​i​n​d​i​a​5.jpg
http://​www​.blog​gernews​.net/​i​n​d​e​p​t​h​/​i​n​d​i​a​/​i​n​d​i​a​6.jpg

There is a great arti­cle on the Wall Street Jour­nal about these deci­sions from Indian courts that directly attack free speech:
http://​online​.wsj​.com/​a​r​t​i​c​l​e​/​S​B​1​0​0​0​1​4​2​4​0​5​2​7​4​8​7​0​4​3​9​6​9​0​4​5​7​6​2​2​6​4​6​0​1​6​7​5​5​3​1​7​4​.html

Any­way this news is for those indian vis­i­tors that can­not con­nect to Zone-​H. You should know that the block is on the DNS of each ISP, this is why some vis­i­tors can visit Zone-​H and some cannot.
There are some workarounds, the first one is to use a dif­fer­ent DNS ser­vice, such as the Google DNS:
8.8.8.8 and 8.8.4.4

Sec­ond workaround: Use Tor, which also prox­ies DNS requests.

Another workaround is to use another Zone-​H domain, we will try to make var­i­ous DNS entries point­ing to Zone-​H. Just lookup the Zone-​H IP and point a domain to it! An exam­ple of an unof­fi­cial domain:
www​.zoneh​.co​.cc.

Other unof­fi­cial domains:
http://​www​.zoneh​.us​.to
http://​zh​.ignorelist​.com
http://​zoneh​.i2w​.net

Monday, July 18, 2011

Contrary To Reports, 33% of Google+ Users Are Actually Female

2178435033 a0e202bc04 m Contrary To Reports, 33% of Google+ Users Are Actually Female

33% of total user base on Google plus is actually female – so says Ancestry.com founder Paul Allen. Couple of days ago, news outlets reported skewed male-female ratio on Google plus, a conclusion derived from two statistical sites SocialStatistics and FindPeopleOnPlus.

Data on these sites reveal that the number of males on Google plus far exceeds the number of females. SocialStatistics says Google plus is made up of 86% males while its counterpart FindPeopleOnPlus says it’s about 73%.

But both these sites track only a handful of profiles and any conclusion from their data can be as good as a wild guess. SociaStatistics tracks 31,904 profiles while FindPeopleOnPlus,on a better side, tracks 947,996 profiles.

Paul Allen, who had earlier predicted that Google plus would reach 20 million by this weekend has a more accurate set of data. According to his estimations, which he arrived after hours of calculations, Google plus is made up of 66.4% Males and 33.6% Females. He also notes that the when compared to previous weeks, the female population on Google plus has dramatically increased.

Facebook on the other hand had more women than men in first few years. At one point women contributed two-thirds of its total user base. The fact that Facebook started in colleges while Google plus started in the Silicon Valley may be the reason why there is a stark difference in their gender ratios.

Monday, July 11, 2011

Delicious To Wear A New Look By The End Of The Year

Delicious is on a path of revamping itself into a new avatar, thanks to a renewed focus from its new owners Chad Hurley and Steve Chen. Under Yahoo, Delicious was ignored for the most part which affected its ability to stay relevant with times.DELICIOUS logo1 Delicious To Wear A New Look By The End Of The Year

First noticed by TNW, AVOS the parent company of Delicious has posted job openings to bring back Delicious from ruins. The company needs a Web developer, Web browser extension developer, an application developer, a Communication manager and a General counsel. The development roles would be to build and refine features for delicious.com while the Communication manager needs to manage a high visibility launch and ongoing product releases.

While there is no blueprint as to how Delicious would look like, it is certain that the social bookmarking service would make a thundering comeback later this year.

Sunday, July 10, 2011

Pinboard Is Growing Like Crazy, Adds 25 Million Bookmarks In A Year

Pinboard, the bookmarking site which emphasizes more on speed over socializing has had a remarkable growth story. Without being caught into the social trap, the site channeled its resources towards maintaining up-times and offering a serious paid alternative to Delicious.
Ever since its launch, the site has been queitly adding numbers to its service – many of whom came during the infamous Delicious exodus in Dec 2010. Last year at the same time, the site had 3.5 million bookmarks, 11.2 million tags, 2.5 million urls, 187 GB of archived content. Fast forward 365 days and we have a completely different picture. The site now boasts of 27 million bookmarks, 16 million URLs, 3 TB of archived content and about 12,500 active users.
Unlike Delicious which had absolutely no revenue model, Pinboard had a solid business model that helped the company gain trust and a sense of confidence from its users. Users were willing to pay for quality service, which Pinboard provided each and every day. Delicious loss was Pinboard’s gain – so much so that the company witnessed a sharp spike for few days when Delicious users marched into Pinboard’s fort.
pinboard spike Pinboard Is Growing Like Crazy, Adds 25 Million Bookmarks In A Year
As founder Maciej Ceglowski wrote on his blog, ” If Pinboard were not a paid service, we could not have stayed up on December 16, and I would have been forced to either seek outside funding or close signups. Instead, I was immediately able to hire contractors, add hardware, and put money in the bank against further development. I don’t claim the paid model is right for all projects that want to stay small and independent. But given the terrible track record of free bookmarking sites in particular, the fact that a Pinboard account costs money actually increases its perceived value. People don’t want their bookmarks to go away, and they hate switching services. A sustainable, credible business model is a big feature.”
Pinboard’s story can really be a case study for all the social media startups that still haven’t figured out a way to make money.
If you have a really good product in place then you can always bank upon your users to pay for the services you offer.

Friday, July 8, 2011

Google+ says to invite people to try Google +



Now a days you guys know Google has launched there  new social networking website called Google+ has become very popular .. But it was available to limited people who have get invite to join Google+ . But now Google+ asks to invite people to join Google+
invite your friends and they will be get accounts on Google plus 


Facebook Gets A Sidebar Chat

Something strange happened today when I logged into Facebook. The site asked me if I wanted my chat box to be put on the right hand side-bar. I said “lets try it” and clicked the “Try Now ” button.

Upon clicking the button, my chat box was moved from the left hand side to the ride hand side. The box listed 19 of my friends which I assume are the ones with whom I interact the most. The new feature also includes a search box at the bottom which allows me to search any of my friends.

Assuming this is a new feature, facebook is probably testing it on a bunch of accounts(which it always does).

Tell us if you find this feature activated in your facebook profile.

Update: Clicking the Hide Sidebar option in settings switches the box to the current mode(on the left) with a maximize window option. facebook messages 4 Facebook Gets A Sidebar Chat

facebook messages1 Facebook Gets A Sidebar Chat

facebook messages 3 Facebook Gets A Sidebar Chat

Devil shell 2.0 Released



Devil shell v2.0 Last free version by Underground Deviil the admin of team nutsTeam nuts has release his shell with powerfull features which make Devil Shell 2.0 Differ from Other Shell are

* Front/Deface Page cretor without knowladge of HTML and user friendly
* Undetectable by Google Dork
* Back-Connect [Available in Paid Version]
* Database Dump [Automatic Dump available in Paid Version]
* SQL and Linux Command Run
* Front/Deface Page Creator
* Mail Bomber Testing
* DDoS attacker Testing
* Self kill
* Indiviusal Login's





                   Screenshot of Devil Shell 2.0 Specially for noobs

























User Name and Password Of Devil Shell 2.0

Username: ugdevil
Password12345678

Monday, June 13, 2011

US military creates fake online persons all over the internet

The US military awarded a contract for software to create 500 fake personas on social networks in order to secretly influence online debate in its favour, it has been reported.

US military Creates fake online persons !

 

The $2.76m contract was won by Ntrepid, a Californian firm, and called for an "online persona management service" that would enable 50 military spies to manage 10 fake identities each.
The personas should be "replete with background , history, supporting details, and cyber presences that are technically, culturally and geographacilly consistent", a US Central Command (Centcom) tender document said.
It added: "Individual applications will enable an operator to exercise a number of different online persons from the same workstation and without fear of being discovered by sophisticated adversaries.
"Personas must be able to appear to originate in nearly any part of the world and can interact through conventional online services and social media platforms."
The project would be based at MacDill Air Force base in Florida, The Guardian reported. The contract was first revealed by The Raw Story, a US news website. 
It also called for internet traffic from the project to be "mixed" with traffic from outside Centcom to provide "excellent cover and powerful deniability".
A Centcom spokesman however said the fake social media personas would not "address US audiences".
"The technology supports classified blogging activities on foreign-language websites to enable Centcom to counter violent extremist and enemy propaganda outside the US," said Commander Bill Speaks.
If used against US citizens such "sock-puppetry" techniques, as they are known online, would bring legal fire on the military.
The MoD meanwhile said it could find no evidence that British forces was involved in Operation Earnest Voice, a $200m anti-jihadism psychological operation, of which Centcom's "online persona management service" contract was thought to be part.

Thursday, June 9, 2011

4 Responses to Twenty reasons why it’s kicking off in cyberspace !!

4 Responses to Twenty reasons why it’s kicking off in cyberspace !!




1. At the heart of it is a newly politicised generation of hackers who have moved from a lulz-based psychic-economy to an engaged, socially-aware and politically active attitude towards world events, primarily as a reaction to the way governments and multinationals dealt with the fallout of Wikileaks. The “politicisation of 4chan” and the birth of Anonymous have set the stage for a practice of socially-engaged hacktivism of a form and scale we’ve not seen before.
2. This new “political hacktivist” class are digital natives and have become evangelised by passing through the immoral free-for-all of 4chan, to the development of a political critique and political programme through Anonymous.
“ this is the digital natives striking back here
people that live, eat, breathe and sleep on the internet”
(quoting from the lulzsec irc channel yesterday)

Digital natives are radicalised primarily by the threat to their internet freedom, with the continued shift in policy by global governments against the assumed freedoms of the net (laid out in the past). A natural by-product will be the continued radicalism of youth online.
3. Much like the IRL uprisings in Africa, Middle East and Europe, there’s a generational aspect to the way this conflict is playing out– although, like those uprisings, this is as much a symptom as a cause. A generation bought up on MTV, fed an endless stream of sophisticated advertising, naturally trained in memetic exchange, are going to know how to fight an infowar much more instinctively, and hence at greater speed and adaptability. An IRL manifestation being the role of the “citizen journalist” in the age of old media’s death rattle.
4. For net natives, there’s a definite sense of an international, borderless identity, whereby on a day-to-day level national borders hold less and less meaning. If your interactions with a fellow computer users are the same whether they live in London, Texas or Cairo, the narratives of national difference start to break down. Instead, they define according to their roles and activities online, and their values and political beliefs: a new, international class of immateriality, with all the repercussions of online solidarity that holds.
5. This erosion of borders has manifested itself strongly in the way newly radicalised hacktivists related to the unfolding events of the Arab Spring. As Paul Mason points out in his blogpost “People have a better understanding of power. The activists have read their Chomsky and their Hardt-Negri, but the ideas therein have become mimetic: young people believe the issues are no longer class and economics but simply power.” This highly problematic retreat from a fundamentally economic analysis has, despite it’s problems, enabled a casual ease with which the issue of international solidarity is approached.

6. There is a growing understanding of the infrastructure and fabric of the internet as a whole by a younger generation that grew up believing that decentralised infrastructure / free speech and the free sovereignity of the net was a given. That pioneer generation is now finding out that those ideals were only utopian notions afforded to them as result of governments slow ability to act and control the flow of data. As an (admittedly simplistic) example, whole organising infrastructures of UK activist and student groups were shut down wholesale during the recent purge of facebook groups.
7. There is an intensity of feedback that fuels the fire. Realtime results can be measured by everyone on the global stage, leading to a fueling of the ego of a close-knit group of hackers who are dropping the share price of a multi-billion pound corporation like Sony because it dared to assault the hacker ethic, one hack at a time.
This is sometimes matched by morale-boosting donations, such as with LulzSec, who yesterday received upwards of $7000 in bitcoins.
Not since the etoy.com saga of 1990s has the ability existed for real time participation in the dropping of a corporations share price been so readily available.
8. We are seeing the splintering of “hackers group” Anonymous into multiple manifestations that display a more comprehensive understanding of hacking techniques (although in many cases exploiting relatively low level techniques such as SQL injections; we’re certainly yet to see the use of computer science III).
These emergent groups are able to carry out sustained and targeted attacks under a rebrand of sorts, a multiplicity of approach that cannot be assigned entirely to the collective identity of Anonymous. This often allows group to act without the need to deal with moralfaggotry.
9. Anonymous is breaking apart but only in the sense that the media’s depiction of a grand narrative for the “hacking movement” ever held any truth. Anonymous as a group has always been inherently pluralistic with a healthy but constant wave of fail raids.
What creates this logical divergence from a single hive mind is the shift from a necessity for op in botnet assemblies, facilitated through the use of LOIC (Low Orbit Ion Cannon), with the DDoS now relegated to just another tool in a growing arsenal of a disparate emergent hackers movement.
10. The continued evolution of Operation Payback demonstrates both the power of this hacktivism, and how underdeveloped defence systems are. Op Payback was launched back in September 2010 as a reaction to the hiring of Aiplex Software by Bollywood movie rights holders, for the purpose of DDoSin’ The Pirate Bay for copyright infringment. During the first wave of attacks a large number of anons originating from 4chan targeted RIAA,
MPAA and ACS:LAW in a revenge attack in defence of internet sovereignty.
The operation evolved into a targeted attack on a series of laws firms who had targeted file sharers with legal threats. ACS:LAW was the worst hit when their database was leaked online leading to the demise of the company.
These attacks continued, targeting, amongst others, Sarah Palin and Gene Simmons.
With the advent of the Wikileaks Cablegate saga we saw an escalation of Op Payback, in defence of the organisation with the creation of hundreds of mirrors for the site, the alternative dissemination of leaks and the attack on those that had withdrawn services to the organisation as a result of state pressure.
The operation has again shifted gears with it now focusing on the PROTECT IP Bill.
11. Beyond Anonymous and hacktivism there exists a greater threat, and despite the reaction of Anonymous to the rhetoric of the Pentagon, much of the new mantra being espoused by governments globally relates to the first age of real cyber warfare. With entire parts of infrastructure now plugged into the network, there exists a real threat and possibility for hacker/cyberattack based offensives across borders. We saw this during the South Ossetia War in 2008, when Georgia suffered extensive damage from cyberattack, or in the ongoing standoff between Iran and the US/Israel, where the US/Israel succeeded in feeding Stuxnet, a worm, into the Iranian nuclear programme infrastructure.
12. Governments are responding with a conscious and concerted effort to reframe cyber activity and activism as criminality against state and capital, which, no doubt, will soon be upgraded to a form of terrorism. This bears analogies to similar reframing of narratives around workers movements throughout the 19th and 20th Century, not least the “strategy of tension” in Italy in the 1970s.
The eG8 summit, held at the end of May, was part of this restructuring of the official relationship between State and Net. Nicholas Sarkozy spoke to attendees (including Mark Zuckerberg) on the cultural repercussions of Facebook et al, but his speech betrayed a more pointed message for those who seek IRL change through virtual means, as reported on IPtegrity-
“The Internet is ‘not a parallel universe stripped of morals and all of
the fundamental principles which govern society in democratic countries’, he said.
…
‘Don’t let the technology that you have forged…the revolution that have started [sic] … carry along the bad things without any brakes, don’t let it become an instrument in the hands of thow [sic] who would attack our security and therefore our liberty and our integrity.’
13. The Pentagon have declared cyberterrorism and cyberattacks as a conventional attack of war, with the right for reprisals.
14. NATO have also begun to redefine the parameters of war in relation to cyber attacks and acts of “cyberterrorism”, declaring conventional retalliation to acts of “cyberwarfare” to be legitimate. The Information and National Security subsection of the NATO Spring Report this year is focused very specifically on Cablegate and Anonymous as known identities. This is the first time a NATO report has cited the existence of Anonymous.
“Observers note that Anonymous is becoming more and more sophisticated and could potentially hack into sensitive government, military, and corporate files.”
In the same paragraph it is suggested that “It remains to be seen how much time Anonymous has for pursuing such paths. The longer these attacks persist the more likely countermeasures will be developed, implemented, the groups will be infiltrated and perpetrators persecuted.”
15. Anonymous reacted directly to the Spring Report and “declared war on NATO”. Perhaps you may think this is the idle threat of basement dwellers, but NATO certainly don’t. Things are changing at unprecedented speed in the infowar.

16. Anonymous have started to engage in more active outreach programmes, such as bootcamp training. This is of particular importance for the generation that grew up online or politicised through anonymous and 4chan, many who were drawn to the “movement” with more radical inclinations and have had the time now to develop a deeper understanding of hacking tools etc… or at very least become adept skiddys.
Much of this is basic advice for how to look after yourself online, a form of practical mutual aid analogous to the protest handbooks distributed by Anonymous during the North African uprisings; rather than advice on how to build a shield to protect yourself against watercannon, these “bootcamps” feature advice on how to use proxies and encrypt data, for example.
17. Governments worldwide are now entering a race to mass-recruit cyberwarriors in order to bolster cyberdefense, with UK security services launching the “Cyber Security Challenge” as an attempt to create an army of white hats.
18. Lulzsec is the fastest growing and most prolific hacking group the internet has seen in recent years, having single-handedly declared war by attacking an FBI affiliated website Infragard.
Yesterday Lulzsec’s twitter account jumped from hundreds to 75,000 followers. Lulzsec is fundamentally representative of the evolution loosely drawn out in previous points. They appear to descend if only in lulzy rhetoric from the likes of Goatse Security, the GNAA and Gnosis.
19. Despite the enormous presumed weighting in favour of the authorities, hackers still hold primacy, and that’s what gives the situation such political potency. When the white hat security firm HBGary Federal attempted to create an expose of the true face of Anonymous they were swiftly shut down by a sustained assault by anonymous that clearly demonstrated their abilities, illustrating the inherent security flaws created by human complacency.
20.Hackers are upping their game to match the rhetoric used against them; indeed, in the past few years security breaches have shown the potential weaknesses in systems that could, in future, be exploited as part of war. Today, however, hackers are, essentially, exploiting those breaches. When a group makes a “significant and tenacious” attack on a lynchpin of the military-industrial complex like Lockheed Martin, talks of “potential” cyberwar become a thing of the past. We have arrived, we are deep within the first cyberwar.
As a hacker wrote last Saturday, “We all know that cyberspace has come to an intense moment of confrontation; it will become more and more difficult to focus on the very reasons of the conflict opening, as the fog of war is rising.” We are no experts in the field, but given the increased tempo and ever thicker “fog of war” we felt these events and organisations need wider discussion. Developing a general public understanding of these issues is vital if we are to prevent governments manipulating our understanding of events in order to suppress the sovereignty of the internet.The hacker cause, if such a thing can be pinned down, must surely be opening up the free flow of all information as widely as possible.
The mainstream media are proving incapable or unwilling to contextualise, to bring light to complicated, discreet and hidden worlds and languages; whilst they dither on the Assange personality cult, and whether it’s possible to be both a liberal messiah and a rapist simultaneously, governments are writing the script for the next decade of online repression. Equally, those currently engaged in online skirmishes should at least heed examples from the past.
We must educate ourselves, but beyond this we must engage practically in the application of the tools we currently have. As the events unfolding begin to accelerate at a pace not unlike the Arab Spring, we should look to the technologies and networks that are being developed such as diaspora, a p2p DNS, flattr and bitcoin. There is a necessity now to understand the implication of such projects and the pursuit of their pragmatic ideals, so that we can begin to push the current trajectory of the net away from ever-increasing control and surveillance and towards a liberatory project of free information exchange.
Knowledge is free.
We are Legion. We do not forgive. We do not forget. Expect us.
DSG: Ebaumsworld Division

Saturday, May 28, 2011

Which browser is the most secure, is that the question?

Over the past week I have been asked twice now for my opinion on the question “Which browser is the most secure?” Probably as a result of the release of Microsoft’s “Browser Choice” update. In my view, this choice that people are being prompted to make is leading most of us to ask the wrong question entirely. Your browser will not keep you safe, whoever made it, you need to take steps to keep *yourself* safe, whichever browser you choose.

This update no doubt exposes millions of users to a choice which they may not, in many cases, have even been aware they were able to make; the choice of which application to use when browsing the web. Many alternatives are available when making this important choice; Internet Explorer (natch), Mozilla Firefox, Safari, Opera, Google Chrome and seven others are on offer through the Microsoft pop-up.

Rightly security is many folks’ primary concern when browsing online these days, so they want to know which browser is the safest or will offer them the highest personal security. I’m not convinced though that “Which browser is the most secure?” is really the right question.

Every browser has its flaws, vulnerabilities and patches (or lack of them). In any case attacks are increasingly aimed not only at browsers but at application plug-ins like QuickTime, Flash or Acrobat that can be used in multiple different flavours of browser. Either that or they are simply attacks aimed at the individual using the browser (like phishing, pretexting and other social engineering attacks).

Better (and more useful) advice than “Which browser is most secure?” would be “How can I best secure my browser of choice?” Trend Micro offers free tools such as Browser Guard and the Web Protection Add On for Internet Explorer. Browser Guard detects and blocks popularly used exploit techniques (such as heap spray and buffer overflow as well as looking for shellcode) offering proactive protection against unknown threats. The Web protection Add-On blocksknown malicious sites. Many other tools and plug-ins for many other browsers are also out there such as AdBlock Plus or NoScript for Firefox just for example.

It’s different strokes for different folks and various security tools or techniques require varying degrees of familiarity with the browser, with technology or with threats in general in order to effectively protect you without ruining your Internet experience beyond redemption. Helpfully, different indpendent tests and opinions will give you conflicting advice, of course.

In most cases the best advice is stick with the browser you are most familiar with but take steps to secure it. If you suddenly jump into using a browser with which you are unfamiliar, just as a simple knee-jerk reaction your unfamiliarity may leave you less secure than you were before the change.