Welcome to InviteHawk - Your Open Source for Sharing Torrent Invites -

  • We're one of the best invite forum on the internet! Here you will find free invites, free seedboxes, free bonuses, and even you can Buy/Sell your torrent invites or accounts
  • InviteHawk gives you the opportunity to get into the best private trackers out there either by buying your way in or just grab free invites given by our members
  • InviteHawk gives you a platform to earn money by selling the extra invites and accounts you have of torrent sites
  • Get the best deals and discounts for various torrent sites only on InviteHawk
  • Never miss a chance to signup on a tracker with open registrations. InviteHawk sends you regular updates about sites with open signups. Just subscribe to our Open Signup Section
  • Get to know everything about a tracker with all the updated information by checking out the tracker reviews



Advanced Members
  • Content count

  • Donations

  • Joined

  • Last visited

  • Feedback

  • Points

    22,040 [ Donate ]

Community Reputation

144 Trusted User

About AlphaKing

  • Rank
    Forum Royalty

Profile Information

  • Gender

Recent Profile Visitors

305 profile views
  1. @gunnerkid Welcome here ! Keep doing good work.
  2. @Skylights I'm applying Like + rep added .......
  3. If your Social Security number gets hacked in any data breaches, including recently hacked T-Mobile, then there's a way to prevent hackers from misusing your identity (i.e. identity theft). The solution here is that you can institute a security freeze at each of the three credit bureaus, Equifax, Experian, or TransUnion. Once frozen, nobody will be allowed to access your credit report, which will prevent any identity thieves from opening new accounts in your name. Because most creditors required to see your credit report before approving a new account. But, if they are restricted to see your file, they may not extend the credit or open a new account in your name. However, there are some disadvantages of doing so. 1. Cost The cost of a security freeze differs by state (check yours here). However, it is often free for already affected people, but the issue is – if you want to let anyone check your credit, you will need to pay a fee every time to lift the freeze. This happens not just for your credit applications, but your credit report also gets pulled when you register for a mobile phone contract or apply for a new job or a new apartment as well. The credit agencies will provide you a unique password to lift the freeze and charge up to $12 each time you lift the freeze. So this option can get costly. 2. Once Used, Nobody can Help Moreover, if an identity thief has already used your stolen data to open accounts in your name, then a credit freeze will not help you out. You can check your credit report for free three times a year at annualcreditreport.com. If you suspect any fraud, change your passwords, notify your financial institutions, keep an eye on your financial statements, and report to police.
  4. An old vulnerability in the Signalling System No. 7 (SS7) telecom network protocol was used by Positive Technologies researchers to access and steal data from a test account, which they had registered recently at Coinbase, a bitcoin exchange platform. It is thus, identified that through exploiting the SS7 flaw, an attacker could access text messages containing authentication codes and make financial transactions from the Bitcoin platform. In its press release, Positive Technologies stated that this had already happened in spring of 2017 when cybercriminals managed to access text messages containing online banking authentication codes sent to customers of Telefonica Germany (O2), a German mobile firm and used the codes to make financial transactions. Positive Technologies’ research revealed that they just needed to use the SS7 flaw to compromise Coinbase account was the first and last names and the phone number of the account holder and his Gmail address. Through exploiting the SS7 flaw, researchers intercepted SMS text messages sent to Gmail phone numbers and Coinbase users trying to change their passwords using two-factor authentication. Whoever can access the SS7 system can also intercept texts containing verification codes which can be stolen by attackers to gain full control of the accounts. In case of Coinbase, virtual funds can easily be extracted from the account. According to Positive Technologies’ head of telecommunications security department Dmitry Kurbatov: “Unfortunately, it is still impossible to opt out of using SMS for sending one-time passwords. It is the most universal and convenient two-factor authentication technology. All telecom operators should analyze vulnerabilities and systematically improve the subscriber security level.” The SS7 system is used by telecom operators for ensuring full protection of text messages and telephone calls. It is a set of telephony signaling protocols that are used to set-up and tear down a majority of PSTN/public switched telephone network calls around the world. Furthermore, it performs many important functions like prepaid billing, local number portability, translation of numbers and SMS (short messaging service) along with other main telecom services. It was developed in 1975 while in 2008 it was identified to be vulnerable to hacking. In 2014, it was reported that the SS7 vulnerability could be used by governmental agencies and non-state actors alike to track the movements of mobile phone users from any location around the world with 70% accuracy. Positive Technologies shared a video detailing the way a hacker can compromise a Gmail account through using basic information such as mobile number just because of the SS7 flaw. When hacking was successful, researchers showed how the same SS7 flaw could be used to compromise a Bitcoin wallet.
  5. If you want to migrate from the content blocker Adblock Plus to uBlock Origin, you may be able to do so in mere seconds depending on whether you have added custom rules to Adblock Plus or not. I don't want to get into reasons for migration away from Adblock Plus. Some users prefer the extension over others, but it is undeniable that uBlock Origin is a very popular extension as well. There are two main use cases when it comes to migrating from Adblock Plus to uBlock Origin: 1.Custom filters are used in Adblock Plus. 2.Custom filters are not used, but some changes may have been made, for instance to the subscription listing. Please note that migrating works in all browsers, even across different browsers. The best use case for the migration is obviously if you just use vanilla Adblock Plus without any modifications whatsoever. How to migrate from Adblock Plus to uBlock Origin The second use case allows for a straightforward migration that won't take longer than a minute to complete in best case. Here is what you need to do: Step 1: Install uBlock Origin in the browser in which Adblock Plus is installed. It is not recommended to run both content blockers at the same time normally, but doing so makes it easier to migrate. Step 2: Open the Adblock Plus Settings, and check the filter lists. Are you subscribed to additional lists? https://cdn.ghacks.net/wp-content/up...lter-lists.png Step 3: If so, keep the page open, and open the uBlock Origin settings and go to the 3rd-party filters tab. If you see the lists there, check it if it is not checked already to subscribe to it. https://cdn.ghacks.net/wp-content/up...ck-filters.png Step 4: If the list is not listed by default, go back to the Adblock Plus settings and open the source of those lists. In Firefox, you'd click on the cogwheel icon next to the list, and select source for instance. https://cdn.ghacks.net/wp-content/up...us-sources.png Step 5: The source is a URL that you then copy and paste on uBlock Origin's custom listing on the 3rd-party filters tab. https://cdn.ghacks.net/wp-content/up...om-filters.png Step 6: Open whitelisted websites afterwards in the Adblock Plus settings. These sites are allowed to run advertisement. https://cdn.ghacks.net/wp-content/up...es-adblock.png Step 7: Copy any URL you see listed there, open the Whitelist tab of the uBlock Origin settings, and paste the selection in the text field there https://cdn.ghacks.net/wp-content/up...ist-ublock.png That's all there is to it. You have migrated to uBlock Origin. You can disable Adblock Plus for now, and start using the new content blocker. The process requires another step if you have added custom filters to Adblock Plus. Custom filters are rules created by users of the software, usually for sites, services and elements that are not blocked by the subscribed rule sets. Step 1: Open your filter list in Adblock Plus, and copy all filters https://cdn.ghacks.net/wp-content/up...ock-origin.png Step 2: Open the My Filters listing of the uBlock Origin settings. Paste the filter list entries from Adblock Plus in the field. https://cdn.ghacks.net/wp-content/up...rt-filters.png
  6. It can be difficult to know which way to turn when it comes to online security. Learn about viruses, spyware and malware removal as we demystify digital threats. Online security is a massive concern for organisations and individuals alike, and software which can prevent viruses, or help with malware removal, is highly sought-after. However, with so many different terms being discussed, it can be difficult to know where to turn. It’s rare these days to go even a month without hearing about a high-level cyberattack. Whether it’s an attack on public services such as the WannaCry incident, which almost brought the UK’s NHS to its knees, or an assault on corporations such as Petya, or NotPetya, which compromised shipping company Maersk and vast amounts of data at Equifax and Deloitte, the threats are real, and no organization of any size should consider themselves exempt from being targeted. Insurance and risk management experts estimate that, in 2017, cybercrime cost the global economy $450 billion, and the total is expected to hit $6 trillion by 2021. While most of these attacks are aimed at large organisations, many threats are also levelled at individuals. This means that it is essential for the modern internet user to have a good standard of education when it comes to the various types of threat to their own internet security. One size does not necessarily fit all when it comes to fighting these issues, so knowing the differences between them is key. In our first beginners’ guide to online security, we will be looking at three different terms used to describe digital threats – malware, viruses and spyware – defining them, and looking at ways to help you avoid becoming compromised. Malware You’ve probably hear the term malware a lot, but are maybe not sure which specific threat the term refers to. Well, you may be surprised to learn that malware is not a specific type of threat, but rather a catchall term for all harmful and/or intrusive software. The word is a contraction of ‘malicious software’, and covers viruses, worms, ransomware, Trojan horses, spyware, and many other threats. So, when you are searching for malware removal software – such as Malwarebytes – you know that, if the application states it tackles malware, it will locate and eliminate a wide range of online threats. Malware can also be an intentional element of otherwise legitimate software. For example, a few years ago, it was discovered that a piece of software released by Sony was secretly installing malware on their customers’ computers. The software was designed to fight piracy, but the type of software it was based on – and its ability to install itself secretly – carried with it inherent risks that can lead to the security of the target system being compromised. The scandal caused no small amount of trouble for Sony, and the software was recalled as a result. Viruses As its name suggests, a computer virus works much in the same way as its biological namesake. Once the malicious file is deployed, the virus’s code begins to rapidly replicate and replace the existing computer code. But why would anyone want to infect your computer with a virus? Well, from blackmailing a victim into handing over money in exchange for removing the virus (ransomware), to political motives such as shutting down an opponents’ site or spreading false information – the motives for a virus attack are varied. Indeed, many viruses are developed by anonymous coders just for fun – they get a thrill from a successful attack. And some are even created out for apparently “noble” reasons, such as to highlight a flaw in a system’s security. The perpetrators of virus-based attacks will normally use social engineering to trick their victims into activating the malware. They might send an email, claiming to be from Microsoft Security or a similar body, saying that several viruses have been found on the target’s computer and they need to click a link or download a file to activate a malware removal program. However, once the target has clicked the link, the software is installed, and their computer is now truly infected. This is known as a phishing scam. Sometimes attackers will phone the target and attempt to deceive them into allowing access to their system. The best advice we can give you is to never click a link in an email, and never believe anyone who calls you out of the blue. If they purport to be from a company you really do business with, then head to the company’s website manually and log in that way. However, if you have made a mistake and believe your computer to be infected, you’ll need to install some malware removal software to find and delete the virus. If you no longer have control over your system, then you should contact an IT professional or the police for advice. Spyware Broadly speaking, spyware is any malware which secretly collects data on its target, or takes control over a computers’ functions. Once installed, the software is typically very hard to detect and can send data to a source where it can then be used to blackmail the target, or to damage their lives in some way – making explicit photographs public, for example. Spyware can have a legitimate function, such as the code which allows Facebook and other companies to access your browsing habits so they can present you with targeted advertising. Most people accept this application as the price they must pay for free online services – but it’s important to be alert to any potential misuse of this power. Many anti-spyware software packages have been developed to deal with these threats, and can help block your computer from any software – both legitimate and malicious – which aims to track your usage and/or data. Final Thoughts Understanding the varying nature of online threats is an important step towards effectively combatting them. Hopefully, in defining a few commonly-used terms, we have shed some light on the sorts of threats to look out for when using internet-connected devices. Remember that smartphones and tablets are also vulnerable to these threats, and need to be protected just as much as your home computer does.
  7. Jaron Varsano is also developing the project. After working together on Wonder Woman, former Warner Bros. exec Sue Kroll and Gal Gadot are partnering on the Fidel Castro movie My Dearest Fidel. Warner Bros. Pictures — where Kroll's Kroll & Co. shingle has an exclusive deal — has acquired the film rights to Peter Kornbluh’s recently published Politico article, “My Dearest Fidel: A Journalist’s Secret Liaison With Fidel Castro." Narcos co-creator Chris Brancato is adapting for the screen. My Dearest Fidel will center on ABC journalist Lisa Howard, who engaged in what Kornbluh describes as “intimate diplomacy” with Cuba’s revolutionary leader. During her three trips to Havana, she positioned herself as one of Castro’s leading American confidants, becoming a key asset in the establishment of a top-secret channel between Washington and Havana to discuss reconciliation after the Cuban Missile Crisis. Along with Kroll and Gadot, Jaron Varsano, the actress' husband, would produce the project as a possible starring vehicle for Gadot. “I’m so excited to bring this story to life with great creative partners in Gal, Jaron, Peter and Chris,” Kroll said Wednesday in a statement. “This is a remarkable true story, anchored by an incredible woman, and lends itself to a dramatic and thrilling cinematic experience.” Added Gadot: “When I first read Peter’s article, I was entranced by his thrilling account of a complicated, fascinating woman in the midst of a high-stakes, real-life drama. I knew immediately that I had to be involved creatively with telling Lisa Howard’s story, and am thrilled to be producing this film with Sue.” My Dearest Fidel marks the first major feature project that has been set up since Kroll established her eponymous banner. Kroll, who is serving as an executive producer on Bradley Cooper's A Star Is Born, is in development on The Six Billion Dollar Man, starring Mark Wahlberg.
  8. Infinity War Screenwriters Reveal Timeline of Thanos’ Infinity Gauntlet 9 hours ago by Taylor Williams in Movie News Comment (2) The Marvel Cinematic Universe’s timeline has been a bit of a tough one to follow for less invested fans, and with Avengers: Infinity War now in theaters, another question about the timeline of the shared universe has come to light: When did Thanos’ Infinity Gauntlet get made? In an interview with Collider, screenwriters Christopher Markus and Stephen McFeely were asked about the timeline of Thanos getting the Gauntlet, and when the device was made. “I think the Gauntlet was made when Loki was pretending to be Odin,” Markus answered. “Presumably, Eitri was running a relatively regular business and people would have gone there and said something. So, it hasn’t been that long.” RELATED: Infinity War Writers Explain What Happened to Sharon Carter In Avengers: Infinity War, it’s revealed that Eitri the Dwarf King, portrayed by Peter Dinklage, fashioned the Infinity Gauntlet for Thanos in hopes he’d spare the lives of the dwarves living on Nidavellir. Instead, Thanos slaughtered all of the dwarves and turned Eitri’s hands to stone after the Gauntlet was completed. According to Markus’ response, these events happened sometime between the ending of Thor: The Dark World — when Loki first began pretending to be Odin — and the mid-credits scene in Avengers: Age of Ultron when Thanos dons the Gauntlet and vows to retrieve the Infinity Stones himself. RELATED: Is Thor’s Stormbreaker More Powerful Than the Infinity Gauntlet? Well … In theaters now, Avengers: Infinity War is directed by Joe and Anthony Russo and stars Robert Downey Jr., Chris Evans, Chris Hemsworth, Mark Ruffalo, Jeremy Renner, Scarlett Johansson, Paul Bettany, Anthony Mackie, Paul Rudd, Elizabeth Olsen, Tom Holland, Benedict Cumberbatch, Chadwick Boseman, Chris Pratt, Zoe Saldana, Dave Bautista, Bradley Cooper, Vin Diesel, Tom Hiddleston and Josh Brolin, among others.
  9. Facebook Privacy Setting That Makes Your Identity Vulnerable If you pay attention to the security settings in your Facebook profile, you will find a privacy setting that says ‘Who can look me up?’, or "Who can look you up using the phone number you provided?" which has been set to ‘Everyone’ by default. This configuration allows you to search anyone just by entering his or her phone number; as a result, the search box in Facebook will display the profile of that person. But, Can you imagine, How Cybercriminals can take advantage of this crucial privacy blunder? By exploiting this default feature with a simple trick, the researcher was able to link thousands of phone numbers to respective Facebook accounts. Moreover, this security flaw in the search facility of Facebook has recently led to data stealing of about 1.5 million Facebook users. Moaiandin has alerted Facebook about this serious issue and asked them to make the Facebook APIs pre-encrypted. However, the security loophole remains intact, allegedly leaving the social site's 1.44 billion users open to social engineering attacks and identity theft. The researcher has contacted Facebook twice since discovering the flaw. Though, Facebook apparently doesn’t consider it a vulnerability that can be abused. According to Facebook Security Team, there are controls in place to monitor and mitigate such kind of API abuses. The company said it has strict rules that limit how developers could use the APIs and immediate action against anyone who break them. How to Fix Facebook Privacy Issue Meanwhile, security measures can be taken and you can keep yourself safe from being a victim of such activities. For this you can follow some simple steps given below: -Do not share your phone number in your profile. -Alternatively, Change the ‘default’ settings to ‘Friends only’. But, to give it a thought what does a person gain out of this act? An attacker with malicious intent could sell the collective database of the ‘personally identifiable information’ in the black market, which can put a users' life at risk. Moreover, if you are a victim of such attacks, then you should think of what the hacker’s next step could be! Identity theft, financial losses, malware infections and phishing attack..and what not!
  10. The Heartbleed Bug The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs). The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users. What leaks in practice? We have tested some of our own services from attacker's perspective. We attacked ourselves from outside, without leaving a trace. Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication. How to stop the leak? As long as the vulnerable version of OpenSSL is in use it can be abused. Fixed OpenSSL has been released and now it has to be deployed. Operating system vendors and distribution, appliance vendors, independent software vendors have to adopt the fix and notify their users. Service providers and users have to install the fix as it becomes available for the operating systems, networked appliances and software they use Q&A What is the CVE-2014-0160? CVE-2014-0160 is the official reference to this bug. CVE (Common Vulnerabilities and Exposures) is the Standard for Information Security Vulnerability Names maintained by the MITRE. Due to co-incident discovery a duplicate CVE, CVE-2014-0346, which was assigned to us, should not be used, since others independently went public with with the CVE-2014-0160 identifier. Why it is called the Heartbleed Bug? Bug is in the OpenSSL's implementation of the TLS/DTLS (transport layer security protocols) heartbeat extension (RFC6520). When it is exploited it leads to the leak of memory contents from the server to the client and from the client to the server. What makes the Heartbleed Bug unique? Bugs in single software or library come and go and are fixed by new versions. However this bug has left large amount of private keys and other secrets exposed to the Internet. Considering the long exposure, ease of exploitation and attacks leaving no trace this exposure should be taken seriously. Is this a design flaw in SSL/TLS protocol specification? No. This is implementation problem, i.e. programming mistake in popular OpenSSL library that provides cryptographic services such as SSL/TLS to the applications and services. What is being leaked? Encryption is used to protect secrets that may harm your privacy or security if they leak. In order to coordinate recovery from this bug we have classified the compromised secrets to four categories: 1) primary key material, 2) secondary key material and 3) protected content and 4) collateral. What is leaked primary key material and how to recover? These are the crown jewels, the encryption keys themselves. Leaked secret keys allows the attacker to decrypt any past and future traffic to the protected services and to impersonate the service at will. Any protection given by the encryption and the signatures in the X.509 certificates can be bypassed. Recovery from this leak requires patching the vulnerability, revocation of the compromised keys and reissuing and redistributing new keys. Even doing all this will still leave any traffic intercepted by the attacker in the past still vulnerable to decryption. All this has to be done by the owners of the services. What is leaked secondary key material and how to recover? These are for example the user credentials (user names and passwords) used in the vulnerable services. Recovery from this leaks requires owners of the service first to restore trust to the service according to steps described above. After this users can start changing their passwords and possible encryption keys according to the instructions from the owners of the services that have been compromised. All session keys and session cookies should be invalided and considered compromised. What is leaked protected content and how to recover? This is the actual content handled by the vulnerable services. It may be personal or financial details, private communication such as emails or instant messages, documents or anything seen worth protecting by encryption. Only owners of the services will be able to estimate the likelihood what has been leaked and they should notify their users accordingly. Most important thing is to restore trust to the primary and secondary key material as described above. Only this enables safe use of the compromised services in the future. What is leaked collateral and how to recover? Leaked collateral are other details that have been exposed to the attacker in the leaked memory content. These may contain technical details such as memory addresses and security measures such as canaries used to protect against overflow attacks. These have only contemporary value and will lose their value to the attacker when OpenSSL has been upgraded to a fixed version. Recovery sounds laborious, is there a short cut? After seeing what we saw by "attacking" ourselves, with ease, we decided to take this very seriously. We have gone laboriously through patching our own critical services and are in progress of dealing with possible compromise of our primary and secondary key material. All this just in case we were not first ones to discover this and this could have been exploited in the wild already. How revocation and reissuing of certificates works in practice? If you are a service provider you have signed your certificates with a Certificate Authority (CA). You need to check your CA how compromised keys can be revoked and new certificate reissued for the new keys. Some CAs do this for free, some may take a fee. Am I affected by the bug? You are likely to be affected either directly or indirectly. OpenSSL is the most popular open source cryptographic library and TLS (transport layer security) implementation used to encrypt traffic on the Internet. Your popular social site, your company's site, commerce site, hobby site, site you install software from or even sites run by your government might be using vulnerable OpenSSL. Many of online services use TLS to both to identify themselves to you and to protect your privacy and transactions. You might have networked appliances with logins secured by this buggy implementation of the TLS. Furthermore you might have client side software on your computer that could expose the data from your computer if you connect to compromised services. How widespread is this? Most notable software using OpenSSL are the open source web servers like Apache and nginx. The combined market share of just those two out of the active sites on the Internet was over 66% according to Netcraft's April 2014 Web Server Survey. Furthermore OpenSSL is used to protect for example email servers (SMTP, POP and IMAP protocols), chat servers (XMPP protocol), virtual private networks (SSL VPNs), network appliances and wide variety of client side software. Fortunately many large consumer sites are saved by their conservative choice of SSL/TLS termination equipment and software. Ironically smaller and more progressive services or those who have upgraded to latest and best encryption will be affected most. Furthermore OpenSSL is very popular in client software and somewhat popular in networked appliances which have most inertia in getting updates. What versions of the OpenSSL are affected? Status of different versions: OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable OpenSSL 1.0.1g is NOT vulnerable OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT vulnerable Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug. How common are the vulnerable OpenSSL versions? The vulnerable versions have been out there for over two years now and they have been rapidly adopted by modern operating systems. A major contributing factor has been that TLS versions 1.1 and 1.2 came available with the first vulnerable OpenSSL version (1.0.1) and security community has been pushing the TLS 1.2 due to earlier attacks against TLS (such as the BEAST). How about operating systems? Some operating system distributions that have shipped with potentially vulnerable OpenSSL version: Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4 Ubuntu 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11 CentOS 6.5, OpenSSL 1.0.1e-15 Fedora 18, OpenSSL 1.0.1e-4 OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012) FreeBSD 10.0 - OpenSSL 1.0.1e 11 Feb 2013 NetBSD 5.0.2 (OpenSSL 1.0.1e) OpenSUSE 12.2 (OpenSSL 1.0.1c) Operating system distribution with versions that are not vulnerable: Debian Squeeze (oldstable), OpenSSL 0.9.8o-4squeeze14 SUSE Linux Enterprise Server FreeBSD 8.4 - OpenSSL 0.9.8y 5 Feb 2013 FreeBSD 9.2 - OpenSSL 0.9.8y 5 Feb 2013 FreeBSD Ports - OpenSSL 1.0.1g (At 7 Apr 21:46:40 2014 UTC) How can OpenSSL be fixed? Even though the actual code fix may appear trivial, OpenSSL team is the expert in fixing it properly so latest fixed version 1.0.1g or newer should be used. If this is not possible software developers can recompile OpenSSL with the handshake removed from the code by compile time option -DOPENSSL_NO_HEARTBEATS. Should heartbeat be removed to aid in detection of vulnerable services? Recovery from this bug could benefit if the new version of the OpenSSL would both fix the bug and disable heartbeat temporarily until some future version. It appears that majority if not almost all TLS implementations that respond to the heartbeat request today are vulnerable versions of OpenSSL. If only vulnerable versions of OpenSSL would continue to respond to the heartbeat for next few months then large scale coordinated response to reach owners of vulnerable services would become more feasible. Can I detect if someone has exploited this against me? Exploitation of this bug leaves no traces of anything abnormal happening to the logs. Can IDS/IPS detect or block this attack? Although the content of the heartbeat request is encrypted it has its own record type in the protocol. This should allow intrusion detection and prevention systems (IDS/IPS) to be trained to detect use of the heartbeat request. Due to encryption differentiating between legitimate use and attack can not be based on the content of the request, but the attack may be detected by comparing the size of the request against the size of the reply. This seems to imply that IDS/IPS can be programmed to detect the attack but not to block it unless heartbeat requests are blocked altogether. Has this been abused in the wild? We don't know. Security community should deploy TLS/DTLS honeypots that entrap attackers and to alert about exploitation attempts. Can attacker access only 64k of the memory? There is no total of 64 kilobytes limitation to the attack, that limit applies only to a single heartbeat. Attacker can either keep reconnecting or during an active TLS connection keep requesting arbitrary number of 64 kilobyte chunks of memory content until enough secrets are revealed. Is this a MITM bug like Apple's goto fail bug was? No this doesn't require a man in the middle attack (MITM). Attacker can directly contact the vulnerable service or attack any user connecting to a malicious service. However in addition to direct threat the theft of the key material allows man in the middle attackers to impersonate compromised services. Does TLS client certificate authentication mitigate this? No, heartbeat request can be sent and is replied to during the handshake phase of the protocol. This occurs prior to client certificate authentication. Does OpenSSL's FIPS mode mitigate this? No, OpenSSL Federal Information Processing Standard (FIPS) mode has no effect on the vulnerable heartbeat functionality. Does Perfect Forward Secrecy (PFS) mitigate this? Use of Perfect Forward Secrecy (PFS), which is unfortunately rare but powerful, should protect past communications from retrospective decryption. Please see https://twitter.com/ivanristic/statu...80081897467905 how leaked tickets may affect this. Can heartbeat extension be disabled during the TLS handshake? No, vulnerable heartbeat extension code is activated regardless of the results of the handshake phase negotiations. Only way to protect yourself is to upgrade to fixed version of OpenSSL or to recompile OpenSSL with the handshake removed from the code. Who found the Heartbleed Bug? This bug was independently discovered by a team of security engineers (Riku, Antti and Matti) at Codenomicon and Neel Mehta of Google Security, who first reported it to the OpenSSL team. Codenomicon team found heartbleed bug while improving the SafeGuard feature in Codenomicon's Defensics security testing tools and reported this bug to the NCSC-FI for vulnerability coordination and reporting to OpenSSL team. What is the Defensics SafeGuard? The SafeGuard feature of the Codenomicon's Defensics security testtools automatically tests the target system for weaknesses that compromise the integrity, privacy or safety. The SafeGuard is systematic solution to expose failed cryptographic certificate checks, privacy leaks or authentication bypass weaknesses that have exposed the Internet users to man in the middle attacks and eavesdropping. In addition to the Heartbleed bug the new Defensics TLS Safeguard feature can detect for instance the exploitable security flaw in widely used GnuTLS open source software implementing SSL/TLS functionality and the "goto fail;" bug in Apple's TLS/SSL implementation that was patched in February 2014. Who coordinates response to this vulnerability? NCSC-FI took up the task of reaching out to the authors of OpenSSL, software, operating system and appliance vendors, which were potentially affected. However, this vulnerability was found and details released independently by others before this work was completed. Vendors should be notifying their users and service providers. Internet service providers should be notifying their end users where and when potential action is required. Is there a bright side to all this? For those service providers who are affected this is a good opportunity to upgrade security strength of the secret keys used. A lot of software gets updates which otherwise would have not been urgent. Although this is painful for the security community, we can rest assured that infrastructure of the cyber criminals and their secrets have been exposed as well.
  11. Open notepad Copy this code in the text file.... Quote: "X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*" without quotos.... then save it with the name fakevirus.exe If this file got deleted immediately ....that means ur antivirus is working n updated This thread was made by some1 else Am not taking the credit for it
  12. VirusTotal is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means to detect false positives, i.e. innocuous resources detected as malicious by one or more scanners. VirusTotal’s mission is to help in improving the antivirus and security industry and make the internet a safer place through the development of free tools and services. https://www.virustotal.com/
  13. You spent all night downloading all of your favorite music or files ... and this morning, something just isn’t right. Here are 10 quick signs that you may have accidentally downloaded a virus. 1. Slower system operation 2. Downloading progress: very slow or at a complete standstill 3. Reduced memory on your machine 4. Unusual error messages (DO NOT CLICK ON THESE) 5. Your computer screen is moving things by itself or exhibits really strange activity 6. Programs or files will not open 7. Uncontrollable pop-ups that will not stop. 8. Your modem or hard drive is working overtime: An indicator of this may be the light on your broadband or external modem. Is constantly lit? You may even be able to hear your system continually working (struggling). 9. Names of files or folders have unexpectedly changed. 10. Rebooting your computer does not change anything. Don’t panic just yet. If you have anti-virus software on your computer, sometimes it can fix the problem on its own by running a complete system scan. If nothing shows up during this scan, or the anti-virus software will not open or repair your system, consider contacting a professional for further instruction. Source : Internet
  14. Security experts consider keylogging as the most dangerous threat because it allows cyber criminals to capture everything you type on your keyboard. This includes passwords so that they can gain access to your online accounts such as your email, banking, forums, websites and etc to steal valuable information. If keystroke logging is not damaging enough, your webcam, screen, clipboard and microphone can also be secretly captured and logged without your knowledge. There are a couple of different methods to protect yourself against keyloggers. First you can use an on-screen virtual keyboard where your mouse will be used to select the keys when entering your password instead of typing it from the physical keyboard that is logged. A good antivirus can also recognize some of the known and unknown keyloggers through virus definition or heuristic analysis. Finally, a dedicated anti keylogging tool that constantly monitors the behavior of running applications and notifies you if it detects any potential keylogging activity. In this article we’ll be putting 3 anti keylogging programs named Zemana AntiLogger, SpyShelter Premium and DataGuard AntiKeylogger to the test with real keylogging tools that are popular and widely being used to determine the effectiveness of each program. 1. Zemana AntiLogger Zemana AntiLogger is a program we’ve mentioned a lot over the years because it’s been one of the leading tools to block several different types of hack methods. The shareware version of AntiLogger costs $29.95+taxes although they sometimes have giveaways for a free 1 year license, worth keeping an eye out for. Zemana also claims to be fully compatible with nearly every antivirus/security package available, there is a compatibility chart on their website so you can check beforehand. Apart from the basic keystroke protect which is what the free version of Zemana features, the full version also offers Anti-SSL logging protection against banking trojans and SSL sniffers, a screen capture prevention module to block image grabs of your desktop activity, protection against copying Clipboard data, and a module to stop hijacking of connected webcams and microphones. The System Defense feature blocks against several types of attack that try to inject DLL code, load low level kernel drivers, or modify the system registry/memory. Zemana AntiLogger is compatible with Windows XP, Vista, 7 and 8 (32-bit and 64-bit). Note: The “Free” version of Zemana AntiLogger only encrypt keystrokes and does not notify nor block any detected keylogging activity. It’s a very different method to protecting against keyloggers and you can read more about the keystroke encryption test that we’ve done. 2. SpyShelter Premium While SpyShelter also offers a cut down free personal version of it’s Stop-Logger application, one of the crucial advantages the premium version offers is full support for 64-bit systems, the free version is 32-bit only. Note the keystroke encryption driver for SpyShelter does not work on Windows XP systems. SpyShelter Premium is available in single or 5 user packs starting from €20 for a years protection for 1 user. Windows XP up to Windows 8 (32-bit and 64-bit) is supported. SpyShelter Premium has a number of defense modules including kernel mode keylogger protection with keystroke encryption, webcam and VOIP audio hacking protection, clipboard data hacking prevention, an anti-screen capture module, and also a System Defense guard that acts as a Host Intrusion Prevention System (HIPS) to protect critical areas from code injection such as memory and the registry. An Internet Security module blocks trojans and hack attempts through SSL, HTTPS, POP, SMTP and FTP. Suspicious files can be sent to the Virus Total online scanner with a click of the mouse. 3. DataGuard AntiKeylogger DataGuard AntiKeylogger is at a disadvantage from the outset because none of its product line has been updated for a few years, that also includes their more user friendly NextGen AntiKeylogger products. As a consequence, DataGuard AntiKeylogger does not work on Windows 8 and supports Windows 2000 SP4 to Windows 7 32-bit versions only. Prices range from the Free basic version up to the Ultimate version we’re looking at here, priced at $59. DataGuard AntiKeylogger Ultimate offers protection against several different methods of keylogging, Windows clipboard monitoring, protection against capturing screenshots, and text blocking to prevent capturing text from opened documents and windows. Keyboard filters, DirectX based and kernel level keyloggers can also be blocked. The kernel level message filters will only work on Windows 2000 and XP. Source : Internet.