Archive for March 30th, 2008

Vista hacked on 3rd day thru Adobe Flash. Linux Undefeated. 0

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

After Mac was hacked in 2 minutes at the CanSecWest Conference, it was now the time for Vista to get hacked on the 3rd day. Vista’s security was compromised through the popular 3rd party software, Adobe Flash.
“The contest, which saw a MacBook Air get hacked on Thursday, relaxed the rules even further. On the first day of the contest, only the operating system could be targeted, but on the second day that was expanded to include standard applications. An undisclosed Safari flaw led to the MacBook Air’s downfall through the OS X operating system.”
The MacBook Air went first; a Fujitsu laptop running Vista was hacked on the last day of the contest; but it was Linux, running on a Sony Vaio, that remained undefeated as conference organizers ended a three-way computer hacking challenge Friday at the CanSecWest conference.

Mobile phones ‘more dangerous than smoking’ 0

Mobile phones could kill far more people than smoking or asbestos, a study by an award-winning cancer expert has concluded. He says people should avoid using them wherever possible and that governments and the mobile phone industry must take “immediate steps” to reduce exposure to their radiation.

The study, by Dr Vini Khurana, is the most devastating indictment yet published of the health risks. It draws on growing evidence – exclusively reported in the IoS in October – that using handsets for 10 years or more can double the risk of brain cancer. Cancers take at least a decade to develop, invalidating official safety assurances based on earlier studies which included few, if any, people who had used the phones for that long.

Earlier this year, the French government warned against the use of mobile phones, especially by children. Germany also advises its people to minimise handset use, and the European Environment Agency has called for exposures to be reduced. Professor Khurana – a top neurosurgeon who has received 14 awards over the past 16 years, has published more than three dozen scientific papers – reviewed more than 100 studies on the effects of mobile phones. He has put the results on a brain surgery website, and a paper based on the research is currently being peer-reviewed for publication in a scientific journal.

He admits that mobiles can save lives in emergencies, but concludes that “there is a significant and increasing body of evidence for a link between mobile phone usage and certain brain tumours”. He believes this will be “definitively proven” in the next decade. Noting that malignant brain tumours represent “a life-ending diagnosis”, he adds: “We are currently experiencing a reactively unchecked and dangerous situation.” He fears that “unless the industry and governments take immediate and decisive steps”, the incidence of malignant brain tumours and associated death rate will be observed to rise globally within a decade from now, by which time it may be far too late to intervene medically.

“It is anticipated that this danger has far broader public health ramifications than asbestos and smoking,” says Professor Khurana, who told the IoS his assessment is partly based on the fact that three billion people now use the phones worldwide, three times as many as smoke. Smoking kills some five million worldwide each year, and exposure to asbestos is responsible for as many deaths in Britain as road accidents.

Late last week, the Mobile Operators Association dismissed Khurana’s study as “a selective discussion of scientific literature by one individual”. It believes he “does not present a balanced analysis” of the published science, and “reaches opposite conclusions to the WHO and more than 30 other independent expert scientific reviews”.

Indonesian Government Website Hacked Over Porn Ban 0

According to a government official, hackers have defaced the Web site of Indonesia’s information ministry in response to a government move to restrict access to pornographic material on the Internet. On Tuesday, Indonesia’s parliament had passed a new information bill that criminalises the transmission of pornographic material on the Web. Under the law, anyone found guilty of transmitting pornographic material, false news or racial and religious hate messages on the Internet could face up to six years in prison or a fine of 1 billion rupiah ($109,000).
In response, hackers posted a message two days later on the information ministry’s Web site (http://www.depkominfo.go.id) saying: “Prove that the law has not been made to cover government stupidity.” The message was accompanied by a mocked-up photograph of a local information technology expert, who has been advising the government on the new law, depicted with a bare chest. The message has been removed and the Web site was now running normally, said Gatot Broto, an official at the ministry.

View: Full Story at Reuters

Mac Hacked in 2 minutes 1

It may be the quickest $10,000 Charlie Miller ever earned.
He took the first of three laptop computers — and a $10,000 cash prize — Thursday after breaking into a MacBook Air at the CanSecWest security conference’s PWN 2 OWN hacking contest.
Show organizers offered a Sony Vaio, Fujitsu U810, and the MacBook as prizes, saying that they could be won by anybody at the show who could find a way to hack into each of them and read the contents of a file on the system using a previously undisclosed “0day” attack.
Within 2 minutes, he directed the contest’s organizers to visit a Web site that contained his exploit code, which then allowed him to seize control of the computer, as about 20 onlookers cheered him on. He was the first contestant to attempt an attack on any of the systems.
Miller was quickly given a nondisclosure agreement to sign, and he’s not allowed to discuss particulars of his bug until the contest’s sponsor, TippingPoint, can notify the vendor.
Contest rules state that Miller could only take advantage of software that was preinstalled on the Mac, so the flaw he exploited must have been accessible by, or possibly inside, Apple’s Safari browser.

Source: http://news.yahoo.com/s/infoworld/20080327…infoworld/96676