EPIC Sues DHS Is Monitoring Suspicious Words on Social Networks

The Electronic Privacy Information Center (EPIC), has filed suit in US District Court against the Department of Homeland Security. The grounds for the suit is a refusal by DHS to reply to a Freedom of Information Act request filed by EPIC in April of this year.

According to EPIC’s Press Release the center of the issue is a plan by DHS to create fake accounts on social networking sites and use those accounts to monitor the networks for certain key words – such as “drill,” “infection,” “strain,” “virus,” “trojan,” and others. The complaint was filed in the District of Columbia, and asks the court to compel DHS to process EPIC’s FOIA request, as well as to order DHS to produce the records EPIC has requested, to acknowledge EPIC as news media, and to pay EPIC’s legal bills for the suit.

The impetus for EPIC’s request was an announcement by DHS that it planned to implement a Social Media Monitoring and Situation Awareness Initiative, whereby it would monitor social media sites in order to gain realtime information on events. The DHS announcement states that the goal of the initiative is not to collect personally identifiable information except in extreme cases – e.g., a person trapped in rubble with their mobile phone who is posting their status (as happened during the Japanese tsunami).

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">EPIC Sues DHS Is Monitoring Suspicious Words on Social Networks"https://www.voiceofgreyhat.com/2012/01/epic-sues-dhs-is-monitoring-suspicious.html</a>

Thousands of Sites Hacked By The Hackers Army (#OPfreePalestine)

Few days ago The Hackers Army has declared their new operation named #OPfreePalestine. Today they have their 1st blow. More than 1100 sites get hacked including 88 hosting sites, 31 Important Netherland server rooted, France no 1 hosting rooted by The Hackers Army. The list of hacked sites and the message can be found in a pastebin release. Also the official press release of  The Hackers Army can be found on a YouTube video.  

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Thousands of Sites Hacked By The Hackers Army (#OPfreePalestine)"https://www.voiceofgreyhat.com/2012/01/thousands-of-sites-hacked-by-hackers.html</a>

HashDOS Vulnerability Present In Most Of The Web Frameworks,Told Security Researchers In 28th C3

At the 28th Chaos Communication Congress security conference in Berlin, Germany researchers demonstrated a newly realized vulnerability that is present in most web frameworks.  Alexander “alech” Klink and Julian “zeri” Wälde delivered a demonstration and lecture titled "Efficient Denial of Service Attacks on Web Application Platforms". In their lecture they explained in detail how most web programming languages utilize hashes and manage collisions.

According to an exclusive report by ns "The type of hashing used by PHP, Java, Python and JavaScript in this attack is not a cryptographic hash, it is a simple mathematical hash used to speed up storing and retrieving data posted to web pages." 

Under normal circumstances, the collisions in the hashes are managed by built-in language constructs and are not really an issue. However, in these types of attacks, the attacker can send pre-calculated values that will result in all of the hash values being the same, which will crash the majority of servers. On that same Sophos post, they stated that, "An example given showed how submitting approximately two megabytes of values that all compute to the same hash causes the web server to do more than 40 billion string comparisons." which is an nearly inconceivable for just looking some data for a webpage. Apparently the keepers of the language Perl, went ahead and did something about this vulnerability some time ago, but nobody else followed suit, so they are all at risk. Hopefully, the people behind PHP, Python, and other applicable languages will actually pay attention this time and go ahead and make the necessary changes.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">HashDOS Vulnerability Present In Most Of The Web Frameworks,Told Security Researchers In 28th C3"https://www.voiceofgreyhat.com/2012/01/hashdos-vulnerability-present-in-most.html</a>

500+ Israeli & US Sites Hacked By Hitcher

More than 500 websites hacked by dangerous Pakistani hacker Hitcher of Pak Cyber Force. All those hacked sites belongs to United States, Israel, Egypt, New Zealand, Taiwan and so on. List of hacked sites can be found in a pastebin release. Earlier this Hitcher has hacked many big names in the WWW including  Wipro Limited, Quadrant Televentures Ltd. (Aka HFCL Infotel) Media Centre, Fin Bank of Nigeria Hacked By Hitcher (Database),Cambridge Communications Limited, Progate Group Corporation, Geological Society Of India also he have done many mass defacement in his name. 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">500+ Israeli & US Sites Hacked By Hitcher"https://www.voiceofgreyhat.com/2012/01/500-israeli-us-sites-hacked-by-hitcher.html</a>

Microsoft Testing To Fix The Windows Phone SMS Vulnerability

Few days ago we have covered that Khaled Salameh discovered a serious vulnerability on Windows phone 7.5 "Mango". He reported this vulnerability to WinRumors & Microsft. 

Now Microsoft has found the root cause behind the SMS vulnerability in its Windows Phone operating system. Although it’s good that Microsoft has found a fix for the bug in Windows Phone devices, the exploit may also affect its other applications. So far it’s known to work not only through SMS messages but also through Facebook chat or Windows Live Messenger. The malicious code could be used to crash Windows Live Messenger in a way that would prevent all your contacts from signing in.

Microsoft is still investigating its other products that may be affected, including its desktop applications. Salameh revealed that the following applications are vulnerable to the SMS attack string: Windows Live Messenger, Windows Live Mail, Silverlight-based apps, Visual Studio 2010, Expressions Blend, and Windows Presentation Foundation-based apps.

Update: Microsoft's Greg Sullivan, senior product manager of Windows Phone, has confirmed that the company is working with device partners to issue a fix, but refused to reveal any timings for its release. "We are working on an update to address the issue and will work with our partners to coordinate its release," said Sullivan in a statement issued to us on Thursday.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Microsoft Testing To Fix The Windows Phone SMS Vulnerability"https://www.voiceofgreyhat.com/2012/01/microsoft-testing-to-fix-windows-phone.html</a>

Technology Development Board (Govt.Of India) Hacked By XtReMiSt

I hope you all remember the name XtReMiSt. Yes you are right this is that XtReMiSt of Muslim Liberation Army who has hacked thousands of high profiles sites before. If you dig the decent past you will find that XtReMiSt. has hacked and defaced Bathinda Police Official Website, Baran Police, Jalgaon Janta Bank, Crime Investigation Department (CID) West Bengal and many Govt, University, Research Center, Engineering Colleges, Banks and so on. On the last day of 2011 XtReMiSt gave another boom. This time the official website of Technology Development Board (Department of Science and Technology, Govt. of India) get hacked and defaced. He has also created a deface mirror on Zone-h. 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Technology Development Board (Govt.Of India) Hacked By XtReMiSt"https://www.voiceofgreyhat.com/2011/12/technology-development-board-govtof.html</a>

Hundreds Of Domains Hacked By ZCompany Hacking Crew (ZHC)

Dangerous hackers group ZCompany Hacking Crew (ZHC) strikes again. In this attack they have hacked more than 100 sites. List of hacked sites and deface mirrors can be found on a pastebin release. Earlier this group has hacked millions of websites among them blogs of .co.in was hacked, 78K sites compromised by zhc, All India Radio, All India Congress, Highway Police Maharashtra, T-Series and many Govt. sites of India and US. In short ZHC is considered as one of the strongest hacktivist group in Pakistan and Asia pacific. 

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Hundreds Of Domains Hacked By ZCompany Hacking Crew (ZHC)"https://www.voiceofgreyhat.com/2011/12/hundreds-of-domains-hacked-by-zcompany.html</a>