About

Saturday, December 21, 2013

The U.S Shutdown is a Cyber Intelligence Security Risk

The government shutdown increases the risk of a cyber attack against the U.S. due to the fact that many workers who monitor threats have been furloughed, a lawmaker said, according to Defense Tech.
Sunst at the Capitol, Washington DC, USA 
Rep. Tammy Duckworth, D-Ill., a member of the House Armed Services Committee, cited recent figures from the Office of the Director of National Intelligence indicating about 70 percent of the intelligence community’s civilian employees took mandatory leaves of absence, known as furloughs, because of last week’s shutdown.
“If somebody wanted to attack us, this would be a great time to launch an attack on the United States,” the congresswoman said during a cybersecurity conference held Tuesday at the Newseum in Washington, D.C., and hosted by Politico. “The people who do these jobs are not working.”
Duckworth, a former Army helicopter pilot who was critically injured in Iraq, was among several...

Click here to see:


Post by 
newWorld

NSA Tried to Crack U.S. Funded Anonymity Protection System

The National Security Agency (NSA) has repeatedly tried to develop attacks against people using Tor, a software tool designed to protect online anonymity – and which is primarily funded and promoted by the U.S. government itself to help political activists, whistleblowers, militaries, and law enforcement officials.
Among the NSA documents disclosed by Edward Snowden, are documents detailing the NSA’s efforts and showing its successes against Tor.
The U.S. never learns
Tor — acronym for The Onion Router – is an open-source public project which bounces its users’ Internet traffic through several other computers, which it calls “relays” or “nodes,” to keep it anonymous and avoid online censorship tools.Tor receives about 60 percent of its funding from the U.S. government, mostly from...

CLICK HERE TO SEE MORE 

Post by
newWorld

Digital Privacy Services Enjoying a Surge in Demand

Digital privacy services such as encrypted e-mail, secure instant messaging, and services that provide hard-to-track IP addresses are enjoying a surge in demand as individuals and businesses seek to protect information from spies and hackers in the wake of the National Security Agency’s (NSA) surveillance program revelations.
Yahoo News reports that experts say these services promise security, but that they may also slow down computer performance. Moreover, these services are not likely to deter those who are determined to hack into a particular computer network.
 23349961_s feature
According to HLS News Wire the new geek wars between tech industry programmers and government agents, fraudsters, and hackers will create many more privacy services, but computer networks and digital devices are still at risk from savvy hackers.

CLICK HERE TO SEE


Post by newWorld 

Tech Firms Would Rather Shut Down Than Cooperate With NSA

Revelations of the surveillance programs of the National Security Agency (NSA) and the U.K. Government Communications Headquarters (GCHQ) have sparked technical innovations, legal challenges, and pursuits of political reforms in the United States and Britain.
According to HLS News Wire Google, Microsoft, Yahoo, along with other leading technology firms, have been implementing new policies to rebuild users’ confidence after disclosure that the NSA is capable of accessing the companies’ servers. At users’ requests, some companies have joined legal calls for the government to release information about NSA surveillance practices.
 4668726_s feature


The Guardian reports that technology firm Lavabit, a secure e-mail provider...
CLICK HERE TO SEE  

Post by
newWorld

The NSA is Spying on Online Games

So many spies in the chatrooms of games like World of Warcraft, they have to avoid running into each other. Now spies aren’t just listening in on personal phone calls and reading private e-mails, they are also monitoring your gaming.
18210965_s featureBased on new information disclosed by former National Security Agency contractor Edward Snowden, a joint report by The New York Times, ProPublica and The Guardian alleges that U.S. and British spies have conducted surveillance and gathered data in online games such as World of Warcraft and Second Life.
According to Yahoo spy activity...
CLICK HERE to see the full news: 

Post by
newWorld
The U.S National Security Agency (NSA) is reported to have installed computer malware in 50,000 computer networks around the globe. Reports in theWashington Post, based on documents provided by Edward Snowden, revealed that by the end of 2008 the NSA had 20,000 computers infected, and the number has increased to about 50,000 infiltrated computer networks today.
According to HLS News Wire the infections, considered, “Digital Sleeper Agents,” remain inactive within ...
see the rest of the information here:





http://i-hls.com/wp-content/uploads/2013/12/6812144_s-feature.jpg                                                                                            

Post by newWorld

Monday, December 16, 2013

Ethical Hacking

Ethical Hacking:


Process of hacking and studying the vulnerabilities of the computer systems and networks for behalf of the company owner, and for the constructive purpose.
Ethical hackers will search for vulnerabilities in the network and computer systems by thinking in the way of how hacker could do achieve it. Once they found such an evil findings and try to strengthen those holes.

Ethical hackers are refered as white hat. These guys follow up certain ways to find out the security holes in the system:
- penetration testing
- Intrustion testing
- red teaming


How to become Ethical Hacker?

First you need good interest in hacking. Develop your network security and computer security skills by following the computer security experts blog. After sometime, you feel ok with the concepts. Then enroll yourself in ethical hacking course. They will setup how to perform ethical hacking practically. After the examinations, you will get the certication as "CEH"-"Certified Ethical Hacker".






Please find the information for Ethical hacking courses: http://www.eccouncil.org/

Regards,
newWorld

Tuesday, December 10, 2013

Photograph of the quantum machine


Photograph of the quantum machine developed by O'Connell. The mechanical resonator is located to the lower left of the coupling capacitor (small white square). The qubitis connected to upper right of the coupling capacitor.



Scanning electron micrograph of the film bulk acoustic resonator. The mechanically active part of the resonator is supported to the left by two metal leads which act as electrical connections.


Post by
newWorld

Quantum machine

A quantum machine is a human-made device whose collective motion follows the laws of quantum mechanics. The idea that macroscopic objects may follow the laws of quantum mechanics dates back to the advent of quantum mechanics in the early 20th century. However, as highlighted by the Schrödinger's cat thought experiment, quantum effects are not readily observable in large-scale objects. Consequently, quantum states of motion have only been observed in special circumstances at extremely low temperatures. The fragility of quantum effects in macroscopic objects may arise from rapid quantum decoherence. Researchers created the first quantum machine in 2009, and the achievement was named the "Breakthrough of the Year" by Science in 2010.

The first quantum machine:

The first quantum machine was created on August 4, 2009 by Aaron D. O'Connell while pursuing his Ph.D. under the direction of Andrew N. Cleland and John M. Martinis at the University of California, Santa Barbara. O'Connell and his colleagues coupled together a mechanical resonator, similar to a tiny springboard, and a qubit, a device that can be in a superposition of two quantum states at the same time. They were able to make the resonator vibrate a small amount and a large amount simultaneously—an effect which would be impossible in classical physics. The mechanical resonator was just large enough to see with the naked eye—about as long as the width of a human hair. The groundbreaking work was subsequently published in the journal Nature in March 2010. The journal Science declared the creation of the first quantum machine to be the "Breakthrough of the Year" of 2010.


Cooling to the ground state

In order to demonstrate the quantum mechanical behaviour, the team first needed to cool the mechanical resonator until it was in its quantum ground state (the state with the lowest possible energy). Specifically, a temperature T ≪ hf/k was required, where h is the Planck Constant, f is the frequency of the resonator and k is the Boltzmann constant.a[›] Previous teams of researchers had struggled with this stage, as a 1 MHz resonator, for example, would need to be cooled to the extremely low temperature of 50 μK. O'Connell's team constructed a different type of resonator, a film bulk acoustic resonator, with a much higher resonant frequency (6 GHz) which would hence reach its ground state at a (relatively) higher temperature (~0.1 K): this temperature could then be easily reached with a dilution refrigerator. In the experiment, the resonator was cooled to 25 mK.

Controlling the quantum state

The film bulk acoustic resonator was made of piezoelectric material, so that as it oscillated its changing shape created a changing electric signal, and conversely an electric signal could affect its oscillations. This property enabled the resonator to be coupled with a superconducting phase qubit, a device used in quantum computing whose quantum state can be accurately controlled.
In quantum mechanics, vibrations are made up of elementary vibrations called phonons. Cooling the resonator to its ground state can be seen as equivalent to removing all of the phonons. The team was then able to transfer individual phonons from the qubit to the resonator. The team was also able to transfer a superposition state, where the qubit was in a superposition of two states at the same time, onto the mechanical resonator. This means the resonator "literally vibrated a little and a lot at the same time", according to the American Association for the Advancement of Science. The vibrations lasted just a few nanoseconds before being broken down by disruptive outside influences. In the Nature paper, the team concluded "This demonstration provides strong evidence that quantum mechanics applies to a mechanical object large enough to be seen with the naked eye."

Monday, December 9, 2013

Terminology in computer security

The following terms used in engineering secure systems are explained below.
  • Authentication techniques can be used to ensure that communication end-points are who they say they are.
  • Automated theorem proving and other verification tools can enable critical algorithms and code used in secure systems to be mathematically proven to meet their specifications.
  • Capability and access control list techniques can be used to ensure privilege separation and mandatory access control. This section discusses their use.
  • Chain of trust techniques can be used to attempt to ensure that all software loaded has been certified as authentic by the system's designers.
  • Cryptographic techniques can be used to defend data in transit between systems, reducing the probability that data exchanged between systems can be intercepted or modified.
  • Firewalls can provide some protection from online intrusion.

  • A microkernel is a carefully crafted, deliberately small corpus of software that underlies the operating system per se and is used solely to provide very low-level, very precisely defined primitives upon which an operating system can be developed. A simple example with considerable didactic value is the early '90s GEMSOS (Gemini Computers), which provided extremely low-level primitives, such as "segment" management, atop which an operating system could be built. The theory (in the case of "segments") was that—rather than have the operating system itself worry about mandatory access separation by means of military-style labeling—it is safer if a low-level, independently scrutinized module can be charged solely with the management of individually labeled segments, be they memory "segments" or file system "segments" or executable text "segments." If software below the visibility of the operating system is (as in this case) charged with labeling, there is no theoretically viable means for a clever hacker to subvert the labeling scheme, since the operating system per se does not provide mechanisms for interfering with labeling: the operating system is, essentially, a client (an "application," arguably) atop the microkernel and, as such, subject to its restrictions.
  • Endpoint security software helps networks to prevent data theft and virus infection through portable storage devices, such as USB drives.
  • Confidentiality is the nondisclosure of information except to another authorized person.[24]
  • Data integrity is the accuracy and consistency of stored data, indicated by an absence of any alteration in data between two updates of a data record.[25]
Some of the following items may belong to the computer insecurity article:
  • Access authorization restricts access to a computer to group of users through the use of authentication systems. These systems can protect either the whole computer – such as through an interactive login screen – or individual services, such as an FTP server. There are many methods for identifying and authenticating users, such as passwords,identification cards, and, more recently, smart cards and biometric systems.
  • Anti-virus software consists of computer programs that attempt to identify, thwart and eliminate computer viruses and other malicious software (malware).
  • Applications with known security flaws should not be run. Either leave it turned off until it can be patched or otherwise fixed, or delete it and replace it with some other application. Publicly known flaws are the main entry used by worms to automatically break into a system and then spread to other systems connected to it. The security website Secunia provides a search tool for unpatched known flaws in popular products.
  • Backups are a way of securing information; they are another copy of all the important computer files kept in another location. These files are kept on hard disks, CD-Rs, CD-RWs, and tapes. Suggested locations for backups are a fireproof, waterproof, and heat proof safe, or in a separate, offsite location than that in which the original files are contained. Some individuals and companies also keep their backups in safe deposit boxes inside bank vaults. There is also a fourth option, which involves using one of the file hosting services that backs up files over the Internet for both business and individuals.
    • Backups are also important for reasons other than security. Natural disasters, such as earthquakes, hurricanes, or tornadoes, may strike the building where the computer is located. The building can be on fire, or an explosion may occur. There needs to be a recent backup at an alternate secure location, in case of such kind of disaster. Further, it is recommended that the alternate location be placed where the same disaster would not affect both locations. Examples of alternate disaster recovery sites being compromised by the same disaster that affected the primary site include having had a primary site in World Trade Center I and the recovery site in 7 World Trade Center, both of which were destroyed in the 9/11 attack, and having one's primary site and recovery site in the same coastal region, which leads to both being vulnerable to hurricane damage (for example, primary site in New Orleans and recovery site in Jefferson Parish, both of which were hit by Hurricane Katrina in 2005). The backup media should be moved between the geographic sites in a secure manner, in order to prevent them from being stolen.


Cryptographic techniques involve transforming information, scrambling it so it becomes unreadable during transmission. The intended recipient can unscramble the message, but eavesdroppers cannot, ideally.
  • Encryption is used to protect the message from the eyes of others. Cryptographically secure ciphers are designed to make any practical attempt of breaking infeasible. Symmetric-key ciphers are suitable for bulk encryption using shared keys, and public-key encryption using digital certificates can provide a practical solution for the problem of securely communicating when no key is shared in advance.
  • Firewalls are an important method for control and security on the Internet and other networks. A network firewall can be a communications processor, typically a router, or a dedicated server, along with firewall software. A firewall serves as a gatekeeper system that protects a company's intranets and other computer networks from intrusion by providing a filter and safe transfer point for access to and from the Internet and other networks. It screens all network traffic for proper passwords or other security codes and only allows authorized transmission in and out of the network. Firewalls can deter, but not completely prevent, unauthorized access (hacking) into computer networks.
  • Honey pots are computers that are either intentionally or unintentionally left vulnerable to attack by crackers. They can be used to catch crackers or fix vulnerabilities.
  • Intrusion-detection systems can scan a network for people that are on the network but who should not be there or are doing things that they should not be doing, for example trying a lot of passwords to gain access to the network.

  • Pinging The ping application can be used by potential crackers to find if an IP address is reachable. If a cracker finds a computer, they can try a port scan to detect and attack services on that computer.
  • Social engineering awareness keeps employees aware of the dangers of social engineering and/or having a policy in place to prevent social engineering can reduce successful breaches of the network and servers.

Copied from wikipedia.

ShieldBreak: When Microsoft Patches a Zero-Day and the Researcher Patches the Patch

ShieldBreak: When Microsoft Patches a Zero-Day and the Researcher Patches the Patch Category: Vulnerability Research | Windows Security |...