Twitter Hires Renowned Apple Hacker Charlie Miller For Twitter Security Team

Twitter Hires Renowned Apple Hacker Charlie Miller For Twitter Security Team

It is almost impossible task for social networks to keep everything safe against hacks and other vulnerabilities. Hackers will constantly find their way around anything that you put in place. So they often deals with hackers & turn themselves to beef up the security level. Social networking giant Twitter exactly did the same thing. The micro-blogging network has hired the famous/infamous Apple hacker, Charlie Miller, to be a part of its security team. Charlie Miller, a popular figure among hackers, broke the news via his Twitter account, saying, “Monday I start on the security team at Twitter. Looking forward to working with a great team there!” Twitter issued a short statement noting that Miller’s title will be that of Software Engineer, but declined to discuss any further details.

Charlie Miller has a background as a Global Exploitation Analyst in the National Security Agency, and has hacked devices running on iOS, OSX, and Android. He is considered to be a white-hat hacker, which means that he hacks to expose vulnerabilities in a system in order to have those weaknesses fixed. Five year ago, Miller was said to be the first to hack the iPhone using the device’s browser, exposing the handset’s vulnerability to security attacks. Several months after this, he was likewise able to hack a MacBook Air in just two minutes. This feat allowed Miller to win the Pwn2Own hacking competition. Miller also showed a way to hijack iPhones through SMS in 2009. In 2011, he used the MacBook power adapter to implant malware on the laptop. In the same year, his license as an Apple developer got revoked because Apple found that he breached the development agreement. 

In more recent times, Miller had been working on Android devices. In June, he was able to overcome Bouncer, Google’s security program. He has furthermore experience in using Near Field Communications to control Samsung and Nokia handsets with a simple wave of another phone that is within the vicinity. 

While talking about Charlie Miller, we must have to take another name and that is Nicholas Allegra, the world-famous hacker known as "Comex", creater of JailbreakMe.com; who later has been hired by Apple itself . In case of Twitter we must have to say, apart from Miller, Twitter also hired Moxie Marlinspike, a hacker who specializes in SSL and VPN encryption.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Twitter Hires Renowned Apple Hacker Charlie Miller For Twitter Security Team"https://www.voiceofgreyhat.com/2012/09/Twitter-Hires-Renowned-Apple-Hacker-Charlie-Miller.html</a>

Fingerprint Security Solution For Apple Mac OS X Lion & Snow Leopard By AuthenTec

Fingerprint Security Solution (Fingerprint Sensor & TrueSuite Identity Management) For Apple Mac OS X Lion & Snow Leopard By AuthenTec

We have earlier discussed the new security implementation of Microsoft and the new technology is called picture password. Now Apple also introducing digital security system in Mac OS. AuthenTec, a leading provider of mobile and network security launches Fingerprint Security Solution including an Eikon fingerprint sensor and TrueSuite identity management software - for Apple Mac laptops and desktop computers running on Lion and Snow Leopard operating systems.

The new Eikon-TrueSuite offering from AuthenTec includes the following features:-

• Web site logon (new) – logon to websites with a swipe of the finger; no need to type passwords

• QuickLaunch (new) –launch and logon to favorite websites; associate

• websites with different fingers

• Easy fingerprint enrollment/setup

• Mac logon

• Fast user switching

• Automatic updates (new) – ensure your software always incorporates the newest features

The new Eikon fingerprint reader for Mac and matching TrueSuite user software will be available in March for $59.95 from Apple.com, and AuthenTec’s Web store


According To Release Note:-
 

“Based on the strong demand from the Mac community, we are pleased to offer a
fingerprint security solution with features and functions that enhance the user experience and support the newest Apple OS,” said Tom Aebli, AuthenTec Vice President of Software and eCommerce. “AuthenTec is pleased to offer Mac users the same fingerprint security and convenience features already enjoyed by millions of Windows PC users.”

AuthenTec’s software and eCommerce business supports the millions of fingerprint sensors already integrated into laptops, tablets and mobile phones. The software and eCommerce portfolio includes AuthenTec’s TrueSuite identity management software, Eikon fingerprint readers for PC and Mac, KeepVault online backup services, and mobile and PC applications that enhance security and the user experience.

-Source (AuthenTec)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Fingerprint Security Solution For Apple Mac OS X Lion & Snow Leopard By AuthenTec"https://www.voiceofgreyhat.com/2012/01/fingerprint-security-solution-for-apple.html</a>

iPhone Event October Will Be Held On Apple Campus

Apple intends to host the October 4th media event on their own campus in Cupertino, California, according to a new report from WSJ’s AllThingsD. The event is expected to be headlined by the iPhone 5 (or iPhone 4S), in addition to introducing the next iPod touch, iOS 5, iCloud, and Mac OS X 10.7.2 update. This is a change to Apple’s tradition of hosting larger event sat San Francisco’s Yerba Buena Center. Although AllThingsD isn’t sure as to why the events location is different, they propose a few theories. The other side to not booking the YBCA is that it has kept the event date hidden from the public, something that was relatively easy to guess due to the public accessibility of the Yerba Buena Centers event calendar. Few details on any new hardware have surfaced, and there is an ongoing debate as to whether a true iPhone 5 will be revealed or if the iPhone 4S will be the next-gen iPhone. While there is plenty of speculation in the tech world as to the specifics of the next phone, it’s important to remember that Apple goes to incredible lengths to keep products secret, as demonstrated by the immense security precautions surrounding the iPad when it was in testing prior to public launch.

According To Apple:-

"Perhaps the release date was too much of a moving target to risk booking a large space like Yerba Buena Center for the Arts (YBCA), which has hosted a number of big product unveils in the past. Perhaps, the company felt a more intimate venue was best for newly installed CEO Tim Cook’s first media event. Perhaps YBCA was simply already booked. Whatever the reason, the world will get it’s first look at the next iPhone at Apple’s Town Hall Auditorium in early October."

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">iPhone Event October Will Be Held On Apple Campus"https://www.voiceofgreyhat.com/2011/09/iphone-event-october-will-be-held-on.html</a>

Now Mac OS X 10.7 Lion can be Installed in a Virtualized Environment

Mac OS X 10.7 Lion will bring quite a few new features from a user interface stand point. However, it looks like Lion will also bring a long awaited capability for the more advanced users. Apple will allow users to install Mac OS Lion client in a virtual environment. In 2007 Apple allowed Mac OS X Server to be installed in a virtualized environment, like VMWare Fusion and Parallels, but now Mac OS X Lion client will be possible to install in a virtual machine.

According to the end-user licensing agreement for Mac OS X 10.7 Lion, users can install up to two additional copies or instances within virtual operating system environments on each Mac Computer they own.

Why is this important? As we mentioned, this might not affect the everyday user but if you are a developer, you will be able to test your application in a virtualized environment without affecting your base installation. Or, if you like to test new software, you will be able to do so in a virtualized environment and then decide if you want to move that new software in your base, everyday desktop. And, if you buy/try an app from the Mac App Store, following the Mac App Store rules, you are entitled to install that app on all your Mac OS X installations, including the virtualized ones.

What makes this possible? We believe Apple is realizing that Mac OS X it self is not a huge stream of money. This explains the price of Mac OS X Lion at just $29.99 (Mac OS X 10.5 Leopard was priced at $129 in 2007). Where is Apple making its money? This is from the Mac App Store. The more Mac OS X environments out there, more potential customers for developers, more money for Apple (Apple is getting 30% of the app revenue).

The licensing agreement specifically mentions that users are entitled to install Mac OS X 10.7 Lion on virtual environments running on a Mac. So, if you are a Windows user, or have Windows computers at home, you are not allowed to run a virtual machine with Lion on these machines. However it will be interesting to see if users can easily port such a virtual machine on a Windows environment running VMWare Workstation or Parallels for Windows.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Now Mac OS X 10.7 Lion can be Installed in a Virtualized Environment"https://www.voiceofgreyhat.com/2011/07/now-mac-os-x-107-lion-can-be-installed.html</a>

Apple Released Mac OS X Lion v10.7.3 & Closes Security Hole

Apple Released OS X Lion v10.7.3 & Closes Security Hole

As expected Apple has released security update 2012-001 for Mac OS X 10.7.3 and, for Mac OS X 10.6.8 Snow Leopard. In this release they have addressed a number of vulnerabilities in the company's desktop and server operating systems. According to Apple through this release they have patched more than 50 security holes such as remotely execute arbitrary code on a victim's system, gain access to private information or cause a denial-of-service (DoS).
The Client and Server updates fix issues in Address Book, ColorSync, CoreAudio, CoreMedia, CoreText, CoreUI, OpenGL, Internet Sharing, ImageIO, and in the QuickTime media player and various libraries used by Mac OS X. Other problems addressed include vulnerabilities in Apache, the libpng reference library, the PHP scripting language, Subversion and X11. Security Update 2012-001 also corrects problems in Tomcat and SquirrelMail.

Users can download Mac OS X Lion 10.7.3 (Client Standard Update 997.01 MB, Client Combo Update 1.2 GB, Server Standard Update 1 GB, Server Combo Update 1.34 GB) and Security Update 2012-001 (Client 192.73 MB, Server 212.09 MB) from Apple's Support Downloads page. Alternatively, Mac OS X users can upgrade to the latest releases using the built-in Software Update function. 

Additional information can be found on the support page.

For security issue all the users are advised to update their system as early as possible.

-Source (Apple, The-H)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Apple Released Mac OS X Lion v10.7.3 & Closes Security Hole"https://www.voiceofgreyhat.com/2012/02/apple-released-mac-os-x-lion-v1073.html</a>

Metasploit 3.7 Takes Aim at Apple iOS

The open source Metasploit vulnerability testing framework got a major overhaul this week with the release of Metasploit 3.7.
The Metasploit 3.7 release provides an enhanced session tracking backend that is intended to improve performance. Metasploit 3.7 also provides over 35 new exploit modules for security researchers to test, including new ones designed to test Apple's iOS mobile operating system security.
The Apple iOS Backup File Extraction module however is not an attack vector for directly exploiting iOS. Rather it is what is known as a post-exploitation module.
"The post-exploitation modules (post for short) are designed to run on systems that were compromised through another vector, whether its social engineering, a guessed password, or an unpatched vulnerability," HD Moore, Rapid7 chief security officer and Metasploit chief architect told InternetNews.com. "This module requires iTunes to be installed and for a backend to be accessible that has not been encrypted."

Apple's iOS was specifically targeted during this year's pw2own hacking challenge in which security researcher Charlie Miller was able to exploit the system. Apple has since patched the pw2own flaw.
"In large corporate environments, a single domain administrator login can yield access to hundreds of desktop systems, and the Metasploit Pro product makes it easy to scavenge these iTunes backup files from the entire network at once," Moore said.
Metasploit is a popular vulnerability testing frame and is available in Express, Pro and Open Source editions. The Metasploit 3.7 release follows the Metasploit 3.6 release, which came out in March and had a focus on compliance related issues.
With Metasploit 3.7, in addition to new exploit module, there is a focus on improving performance. The improvements to the session tracking system and the associated database in Metasploit 3.7, means that Metasploit is now faster.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Metasploit 3.7 Takes Aim at Apple iOS"https://www.voiceofgreyhat.com/2011/05/metasploit-37-takes-aim-at-apple-ios.html</a>

Apple Fixes OSX Revir-B Trojan Vulnerability

Apple has updated the bare-bones antivirus protection included with Mac OS X to detect a Trojan horse that poses as a PDF document. That Trojan, named "Revir.A" by Finnish security company F-Secure but "Revir.B" by others, masquerades as a PDF file . Unwary users who download and open the fake PDF actually start a malware chain reaction that infects a Mac with multiple pieces of attack code, including a "backdoor" designed to listen to a hacker-controlled server for further instructions. 

Apple added a signature for Revir on Friday to the detection engine called XProtect included with Mac OS X 10.6, aka Snow Leopard, and Mac OS X 10.7, better known as Lion. Since May, when Apple fought a weeks-long battle with makers of phony Mac security software -- usually called "scareware" or "rogueware" -- XProtect checks daily for new signature updates.
The new signature will detect Revir if a user downloads the fake PDF document using Safari, iChat or Mail -- Mac OS X's native email client -- and then displays a warning urging the user to toss the file into the Trash. On Monday, however, Mac-centric security company Intego said it had spotted a new piece of Mac malware disguised as an Adobe Flash installer.
Tagged "Flashback" by Intego, the Trojan installs itself when the fake Flash file is run, then deactivates the Mac outbound firewall Little Snitch , likely as an attempt to hide communication between the malware and its remote command-and-control server.
Flashback uses the same phony Flash distribution tactic as a Trojan horse named "QHost.WB" found by F-Secure in early August. Apple updated XProtect to detect QHost on Aug. Intego speculated that hackers may think the Flash installer trick will be effective because Lion, unlike earlier Mac OS X editions, does not come with the Adobe software pre-installed.
The French antivirus firm recommended that users download Flash Player only from Adobe's website, and if they're using Safari, to uncheck the box marked "Open 'safe' files after downloading" under the General tab to prevent fake installers like Flashback from running automatically. 

-News Source (Network World)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Apple Fixes OSX Revir-B Trojan Vulnerability"https://www.voiceofgreyhat.com/2011/09/apple-fixes-osx-revir-b-trojan.html</a>

New Browser-based iOS 'jailbreak' (Based on PDF exploit)

Hackers have once again released a "jailbreak" for iOS devices that can be completed through the Mobile Safari Web browser, taking advantage of an exploit found in the operating system's PDF reader.
The hack can be accomplished by visiting the website jailbreakme.com on an iPhone, iPad or iPod touch. It is compatible with all of Apple's current iOS-powered mobile devices, including the iPad 2 and iPhone 4. The hack was developed by "comex," Grant "chpwn" Paul and Jay "saurik" Freeman, and is compatible with iOS 4.3 through 4.3.3 on all iPads, the iPhone 3GS, GSM iPhone 4, and third- and fourth-generation iPod touch. It also works with iOS 4.2.6 through 4.2.8 for the CDMA iPhone 4.
The official site tells visitors they can jailbreak their iOS device to experience the software "fully customizable, themeable, and with every tweak you could possibly imagine." Jailbreaking is the term used to describe hacking iOS to allow users to install custom software and tweaks not approved by Apple.
The site also refers to jailbreaking as "safe and completely reversible," as users can restore their iPhone or iPad to the original, unaltered iOS software by restoring with iTunes. But jailbreaking is also a warranty-voiding process that Apple has warned users carries security risks. In 2009, a worm spread only on jailbroken iPhones that had enabled SSH for file transfer and did not change the default password.

Last July, the U.S. government affirmed that the process of jailbreaking is considered legal, though Apple is under no obligation to support users who have issues with hacked software.
The new "jailbreakme" site also asks users: "Please don't use this for piracy." While software can be legally downloaded or even sold through the jailbreak-only "Cydia" store, jailbreaking can also be used to pirate software that is sold on Apple's App Store.

This week's new jailbreak method is the second time hackers have exploited a PDF-related security hole in the Mobile Safari browser. The previous hack, issued last August, relied on a corrupt font to crash Safari's Compact Font Format handler.
Ironically, hackers who exploited the PDF security hole in iOS last year also delivered their own security fix to address the very same issue on jailbroken devices. The patch aimed to ensure that dishonest hackers would not be able to utilize the exploit for malicious purposes.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">New Browser-based iOS 'jailbreak' (Based on PDF exploit)"https://www.voiceofgreyhat.com/2011/07/new-browser-based-ios-jailbreak-based.html</a>

New MacGuard Phishing Attack Bypasses Mac OS X Password Requirement

A new MacDefender variant targeting Apple (NSDQ:AAPL)'s Mac OS X platform now can circumvent the password requirement to install fake antivirus software onto victims' computers.

The latest version of the fake antivirus MacDefender, known as MacGuard, was first detected by researchers at Mac security firm Intego. Unlike other versions of Mac Defender, MacGuard bypasses password requirements, and automatically installs without any user intervention.

Intego researchers first detected a fake antivirus attack with Mac Defender targeting the Mac OS X platform May 2. Like other fake antivirus schemes, known as scareware, the virus appeared on users' Macs via a pop-up or an infected link, offering a phony virus scan. The fake scan would inevitably claim to find a virus, and then would trick the user into submitting credit card numbers in exchange for bogus antivirus software.

Since it was first discovered earlier this month, alternately named versions of the MacDefender virus have emerged, such as MacProtector, and MacSecurity. Up until now, the different version have been the same application but with different names.

However, the new MacGuard, which is spread via SEO poisoning attacks, functions slightly differently. Initially, the installation package, known as avSetup.pkg, is downloaded automatically when a user visits a malicious or infected site, typically via an SEO poisoning attack.

If Safari's "Open safe files after downloading" feature is checked, the payload will open Apple's Installer and the user will see a standard installation screen, Intego researchers said. If not, users could see a downloaded ZIP archive and feel inclined to double click, which would also launch the Mac OS Installer.

The package then installs a downloader, dubbed avRunner, which then launches automatically while the installation package deletes itself from the user's Mac, essentially erasing its tracks.

"Unlike the previous variants of this fake antivirus, no administrator's password is required to install this program," Intego researchers said in an advisory. "Since any user with an administrator's account -- the default if there is just one user on a Mac -- can install software in the Applications folder, a password is not needed."

The downloader then installs the new MacDefener version, MacGuard, downloaded by the avRunner application from an IP address hidden in an image file.

Intego researchers say that users should be wary of Web pages that appear to be a Finder window.

"Leave the page, and quit your Web browser. If anything has downloaded, and the Installer application has opened, quit it right away; look in your Downloads folder for the file, then delete it," Intego said.

Apple issued an advisory earlier this week warning users of the MacDefender virus , saying that "In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants."

Security experts question how Apple will keep up with what appears to be a constant stream of MacDefender variants -- a tactic which emulates the myriad of fake antivirus attacks on the Windows platform.  

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">New MacGuard Phishing Attack Bypasses Mac OS X Password Requirement"https://www.voiceofgreyhat.com/2011/05/new-macguard-phishing-attack-bypasses.html</a>

iOS is Still Vulnerable

Apple's recent security patch for iOS is a lot more critical for users of iPhone, iPad, and iPod Touch devices to install than was initially suspected, according to Chester Wisniewski, a Sophos senior security advisor.

Apple's mobile operating system is vulnerable to an updated version of a tool called sslsniff, that "allows users to easily perform man-in-the-middle attacks against SSL/TLS connections," Wisniewski wrote Wednesday on Sophos' NakedSecurity blog.

What's more the new version of sslsniff can apparently "identify vulnerable Apple devices and allows anyone to snoop on secure communications."

"This patch should be applied immediately if you log in to any service on your device, especially things like your bank or PayPal," Wisniewski writes. "Users are particularly vulnerable to this attack if they frequently use public/open WiFi."

The vulnerability is present in iOS versions 4.3.4, 4.2.9, 5.0b, and earlier. Unfortunately for users of Apple devices even just a couple of generations old, there is no fix, according to Wisniewski.

"If you are using an iPod Touch generation one or two, or an iPhone older than the 3GS, you will be perpetually vulnerable," he writes. "Owners of these devices should not use them for any purpose for which security or privacy is required."

And like a number of recently identified security vulnerabilities in Apple's Mac OS X operating system, the latest iOS vulnerability has a documented history—as a flaw originally seen in Microsoft software.

"Oddly the flaw in iOS was a widespread flaw in WebKit and Microsoft's CryptoAPI nine years ago," Wisniewski writes. "It allows any valid certificate purchased from a Certificate Authority to sign any other certificate, which the client device will then consider valid.

"This allows anyone who can capture traffic from your iPhone, iPad or iPod Touch with man-in-the-middle techniques to intercept and read any and all encrypted SSL traffic silently and without notification to the user."

Security researchers at Recurity Labs have created a website, https://issl.recurity.com, which iOS users can surf to with their devices to see if they are vulnerable. Tests by Betanews on a variety of iOS devices not using the most current version of iOS verified that the site is a reliable method for testing.

                                                                                                                                                                       -News Source (NakedSecurity)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">iOS is Still Vulnerable"https://www.voiceofgreyhat.com/2011/07/ios-is-still-vulnerable.html</a>

Apple Premium Reseller - Alma Store Hacked By Indian Hackers

Apple Premium Reseller - Alma Store Hacked By Indian Hackers

After successful hack of Stanford University again two Indian hackers named Yash and C0de Inject0r from Team Nuts has hacked into a official website of Alma Store, Apple reseller in Azerbaijan. Hackers claimed that during hack they have dumped the full data base including premium account details. They have also cleared a deface mirror on z-z0ne.tk. Reason of this hack is still unknown. Also in 2011 a hacker group named Swagg Security claimed the responsibility of the attack on Apple Supplier Foxconn. Another hacker named HodLum from Turkey has defaced Apple Education & Seminar Events official website.  

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Apple Premium Reseller - Alma Store Hacked By Indian Hackers"https://www.voiceofgreyhat.com/2012/03/apple-premium-reseller-alma-store.html</a>

JailbreakMe Security Flaws Will be Patched by Apple

Shortly after the JailbreakMe hack that uses Mobile Safari to jailbreak iPhones, iPads and the iPod touch hit the Web, Apple announced that it will be patching the potential security flaw the hack takes advantage of, according to Yahoo! Finance. 

Jailbreaking is a process that hacks iOS so third-party apps that aren’t available through Apple’s iTunes-based App Store can be installed. Unlike other jailbreak tools, JailbreakMe doesn’t require a computer to handle the hacking process. Instead, users only need to go to the JailbreakMe Web site on their iPhone, iPod touch or iPad, and the security flaw the hack takes advantage of is exactly what Apple plans to patch. 

While patching the flaw will take away the ease of use that JailbreakMe offers, it will also block a security flaw that could potentially be used for more nefarious deeds. The flaw takes uses specially crafted PDF documents to install software on user’s iOS devices, potentially without their permission or knowledge. So far, there aren’t any reports of malicious uses of the flaw, only the JailbreakMe hack.

Bethan Lloyd, a spokesperson for Apple, said the company is “aware of this reported issue and developing a fix that will be available to customers in an upcoming software update.” There isn’t any word yet on when to expect the security update to be released

-News Source (Mac observer)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">JailbreakMe Security Flaws Will be Patched by Apple"https://www.voiceofgreyhat.com/2011/07/jailbreakme-security-flaws-will-be.html</a>

Mac OS X Lion Said Good-Bye to Analog Communications (Modem)

Mac OS X Lion has killed off a number of things including, but not limited to Rosetta, visible scrolls bars, Quicken (see Rosetta), and unnatural scrolling. Now another casualty is the venerable analog modem.
According to users on MacRumors Forums it is true that Apple has killed off support for the analog Apple USB Modem in Mac OS X Lion since the device is no longer working after they upgraded from Mac OS X Snow Leopard.
When you will try to plug your Apple USB Modem into an available USB port on your iMac and MacBook Air (both running Mac OS X Lion) we will receive the following error message.
"You can not use Apple usb Modem withn this computer"
The problem is being blamed on two issues: the required modem drivers are missing and the drivers only work when your Mac kernel is running in 32-bit mode. Since Lion generally runs in 64-bit kernel mode by default the drivers will not work unless you boot your machine into 32-bit mode. A lively discussion about 32 vs. 64-bit mode can be found here.
The forum discussion included a work around that required modification of your system files and instructions on starting your Mac in 32-bit kernel mode. Unfortunately at press time I wasn’t able to get the suggested work around to work on either of my Macs.
One person, HellDiverUK, on the forum made a comment that I can agree with when they asked, “Modem?” followed by “Last millennium is calling, it wants its outdated technology back. ”  We think Apple agrees and that they are telling you that it looks like it is time to say good-bye to the analog modem and look to alternatives like encrypted email, zip files, PDFs, or secure FTP.

For more information and help to resolve this click Here

-News Source (Culture Of Mac)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Mac OS X Lion Said Good-Bye to Analog Communications (Modem)"https://www.voiceofgreyhat.com/2011/08/mac-os-x-lion-said-good-bye-to-analog.html</a>

Oct. 16 "Will be Steve Jobs Day in the State of California"

This Sunday will be declared "Steve Jobs Day" in the tech pioneer's home state of California, as Apple holds a memorial service for its late founder. California Gov. Jerry Brown tweeted Friday evening that Oct. 16 "will be Steve Jobs Day in the State of California" -- a salute to come 11 days after the computer genius died aged 56, following a long battle with pancreatic cancer.
Apple has invited some of Silicon Valley's biggest names to a private memorial service for Jobs on the same day, according to a copy of the invitation and several invitees cited by The Wall Street Journal on Friday. The event will be held at Stanford University's campus Sunday evening. It follows a small private funeral held for the Apple co-founder and chief executive last week. The memorial is expected to be attended by Silicon Valley luminaries and others close to Jobs, said the invitees. Guests to the invitation-only service were asked to respond to Emerson Collective, a philanthropic organization established by Laurene Powell Jobs, the father-of-four's wife.
Apple also plans to host an event for Apple employees to celebrate Jobs' life at its headquarters in Cupertino, Calif., on Oct. 19.

-News Source (Mashable & FOX News)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Oct. 16 "Will be Steve Jobs Day in the State of California""https://www.voiceofgreyhat.com/2011/10/oct-16-will-be-steve-jobs-day-in-state.html</a>

Apple Supplier Foxconn Hacked By SwaggSec

Apple Supplier Foxconn Hacked By SwaggSec

Apple's controversial Chinese electronics manufacturer Foxconn under cyber attack. A hacker group named Swagg Security claimed the responsibility of the attack on Foxconn. In a posting on Pastebin, the group took credit for penetrating the systems, noting that "Foxconn did have an appropriate firewall, but fortunately to our intent, we were able to bypass it almost flawlessly". The posting pointed to a 6.5 MB torrent on The Pirate Bay which contained what appears to be CSV file dumps of database tables and other text files. The files included lists of what look like customer names, accounts and plain text passwords though many of those passwords are "foxconn" or "foxconn2".

In Their Press Release Swagg Sec Said:-

"Users of Cyberspace,
So Foxconn thinks they got 'em some swagger because they work with the Big Boys from Intel, Microsoft, IBM, and Apple? Fool, You don't know what swagger is. They say you got your employees all worked up, committing suicide 'n stuff. They say you hire chinese workers 'cause you think the taiwanese are elite. We got somethin' served up good...real good. Your not gonna' know what hit you by the time you finish this release. Your company gonna' crumble, and you deserve it. 

Upon switching the radio from Nicki Minaj's self-enforcing, lack of content, stereotypical song, "Stupid Hoe"; We switched on BBC Radio, the leading source of unbiased material. A short segment on the manufacturer giant Foxconn, came up reporting on the inhuman conditions the workers experience. A few days later an almost viral rumor about an Iphone 5 with a 4-inch screen being manufactured, as claimed by an employee from the infamous Foxconn. Now as a first impression Swagg Security would rather not deceive the public of our intentions. Although we are considerably disappointed of the conditions of Foxconn, we are not hacking a corporation for such a reason and although we are slightly interested in the existence of an Iphone 5, we are not hacking for this reason. We hack for the cyberspace who share a few common viewpoints and philosophies. We enjoy exposing governments and corporations, but the more prominent reason, is the hilarity that ensues when compromising and destroying an infrastructure. How unethical right? Perhaps for the layman who has conformed to a society raised by the government that actively seeks to maintain power and quell threats to their ventures. But to us and many others, the destruction of an infrastructure, the act of destruction that does not affect an individual, brings a sense of newfound content, a unique feeling, along with a new chance to start your own venture.
This is Swagg Security, we aim to to reshape your perspectives, our perspectives, by the inducing of entertainment. A unique approach to spreading a unique philosophy which brings the sought after tranquility. In a way we are "hacktivist", but in our own views we are Greyhats. We believe there is no reality in hacktivism, even with good intentions. We know those who claim to be "hacktivists" that inside of you, a suppressed part of you, enjoys playing a part in the anarchist event of hacking of an infrastructure. One which at the same time presents a challenge, upon completing reveals an almost unknown feeling of a menacing satisfaction. We encourage not to continue quelling such a natural emotion but to embrace it. Only when embracing what society has taught you to hinder, is when you realize your own identity.
We encourage media, security experts, and other interested individuals to explore our leaks. Foxconn did have an appropriate firewall, but fortunately to our intent, we were able to bypass it almost flawlessly. Of course with funding ourselves we did have our limitations. But with several hacking techniques employed, and a couple of days in time, we were able to dump most of everything of significance. We now appropriately give consent to other individuals reading this release, to scavenge through the leaks acquiring usernames and passwords; while attempting to find if they use the passwords anywhere else. Remember damage is bliss. Without further undue, the leaks."

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Apple Supplier Foxconn Hacked By SwaggSec"https://www.voiceofgreyhat.com/2012/02/apple-supplier-foxconn-hacked-by.html</a>

Spyware, Trojans Exploits iTunes & Gaining Access To Computers

A remote monitoring software" developed in Germany is designed to exploit a vulnerability in iTunes in order to infect target computers. An IT monitoring company advertises its ability to distribute spyware software for government agencies using fake iTunes updates. Apple iTunes has been rectified and closed a security hole. The exploit in question relies on the fact that, assuming Apple Software Updater is not active, iTunes uses an unencrypted HTTP request to query for the URL for the latest version of the program from the Apple server. Because the query is unencrypted, this URL could be modified. If a user were to respond to an iTunes update message, they could then be taken to a crafted web page intended to install the "remote monitoring tool" onto their computer. For the redirection to work, however, a Gamma customer would need to be able to actively interfere with the network, limiting its use to entities such as ISPs acting under government orders.

iTunes update to play Trojans :-

Unlike their Italian rivals of the company hacking team, which campaigned in Berlin also to new customers, the gamma-people even ensures that journalists had to leave before the presentation of their "Managing Directors" the hall. The fear has obviously good reasons: Gamma seems to operate at FinFisher dubious methods - that suggests marketing material SPIEGEL has obtained. After that, the authorities offered and government software works similarly to that of computer criminals who should be fought with it.

Apparently, it is clear from FinFisher promotional videos, for example, the software uses Apple's popular iTunes media supermarket to load with a fake software updates FinFisher-sniffing software on the computers of suspects.

The demand for surveillance technology for the Internet, such as the Gamma International Ltd. and hacking demonstration team in Berlin and they peddled, has risen significantly in recent years internationally. Security agencies worldwide are faced with the problem that increasingly suspicious encrypted communication over the Internet. Agreements, the suspects met earlier on relatively simple to intercept landline telephones or mobile phones to run, now increasingly encrypted Internet telephony services like Skype or encrypted computer chat. Authorities often get only with how to arrange suspects via cell phone to the next encrypted chat.

This issue promises companies like Gamma International Ltd. and hacking team to solve. However, this kind targeted surveillance measures are not easy to implement: Listening encrypted communication is only possible if it occurs before encryption. This software must be installed, the conversations, emails or chats ausleitet unnoticed on the computers of suspects - unencrypted to the security authorities. In plain English: the authorities have to hack into the computers of suspects. 

-News Source (Spiegel Online)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Spyware, Trojans Exploits iTunes & Gaining Access To Computers"https://www.voiceofgreyhat.com/2011/11/spyware-trojans-exploits-itunes-gaining.html</a>

Photoshop Elements 9 Elements for MAC is Now Available

Adobe's Photoshop Elements 9 Editor is now available through Apple's Mac App Store for $79.99. Not only does that mean you'll pay less than retail price for the photo-editing app, but it also gives us hope that greater things could be coming to the Mac App Store soon.
As 9to5 Mac points out, Elements 9 is the first Adobe app to become available in the Mac App Store and this is significant because it suggests that the digital media software maker might consider expanding its offerings there.
Of course, this particular app could merely be an experiment on Adobe's part, too. After all, the company makes a significant profit from the sales of traditionally boxed software — and doesn't have to give Apple a cut when it takes that route. (Apple gets about 30% from software sales made through the Mac App Store.)
Either way, we're pretty excited to see a major software maker such as Adobe dip its toes into the Mac App Store at least a little bit.
If you purchase Photoshop Element 9 via the Mac App Store, you will get all the features — such as the content aware-fill, Group Shot, Panorama, and Style Match Photomerge tools — found in the plain ol' boxed version you can get from a retail store. But  as Macworld noticed, you will not get the extra application normally bundled with the software:

The Mac App Store version of the application costs $80 and includes all the same editing tools as the full boxed version. However, unlike the full $100 version, it does not come bundled with the Adobe Elements Organizer application. This version is available only in English, and cannot be purchased anywhere outside of Apple's Mac App Store.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Photoshop Elements 9 Elements for MAC is Now Available"https://www.voiceofgreyhat.com/2011/07/photoshop-elements-9-elements-for-mac.html</a>

Linux-based mobile OS Targeting Android

A Linux-based mobile OS is set to launch in China, presenting a possible threat to competitors as they vie for smartphone and tablet customers in the Asian market.

Chinese ecommerce company Alibaba says it will launch its Aliyn OS at the end of the month, after working on it for three years. Phone manufacturer Tianyu intends to sell the Aliyn-based K-Touch Cloud-Smart Phone W700 for $416 in several days, with plans to market a tablet soon.

Aliyn's main features include the ability to run Android apps in the cloud, as well as those created with JavaScript and HTML5. It offers users cloud-based email, data, text message and photo storage too, besides regular web search and GPS.

"Introducing cloud apps to mobile devices not only brings a whole new user experience, but also greater ease for third-party mobile software developers who will be able to use Internet technology such as HTML5 and JavaScript to reduce the complexity in the app development process," said Wang Jian, president of Alibaba Cloud Computing.

In most regions of the world, Aliyn would face fierce and nearly devastating competition from Google's Android and Apple's iOS. But in China where Tianyu's new phone is set to launch, the OS may have a chance. The country's mobile broadband infrastructure is still underdeveloped and essentially up for grabs to whoever can create the biggest presence there first.

China is still behind in the smartphone market, though 3G subscriber numbers jumped nearly 50 percent to almost 70 million last April. But given the country's enormous population, 70 million is a small number compared to the U.S. market, in which nearly half of phone owners have smartphones.

If Aliyn can create a foothold in time, then, it may stand a chance against planned marketing onslaughts from rivals Apple, Google and Nokia, which are also angling for the Chinese market.

Apple's COO Tim Cook reportedly held talks with China Mobile to introduce the iPhone on its network. Doing so would give it 600 million more customers in the country, especially if Apple also decides to provide a cheaper, prepaid version of its iPhone 3GS.

Android smartphone maker HTC also reports increased success in the Asian market, shipping 11 million smartphones inside China this last quarter.

Other Android phone manufacturers too have their eyes on the populous country, as analysts predict over one billion people there will own smartphones in the next five years.

Nokia too is looking to push into Asia with lower-end handsets, which could take a chunk out of smartphone sales since the latter tend to be more affordable.

The competition is fierce, but this unexplored market is up for grabs, and upstarts like Aliyn may see success if it can grapple with rivals for the upper hand. 

-News Source (Mobiledia)

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Linux-based mobile OS Targeting Android"https://www.voiceofgreyhat.com/2011/07/linux-based-mobile-os-targeting-android.html</a>

Apple Released Safari 5.1 With lots of New Features

Safari 5.1 is now available to download and introduces full screen mode, new multi-touch gestures, Reading List, and a whole lot more. The download is available via Software Update on your Mac or from Apple’s website, and is compatible with Macs running Snow Leopard 10.6.8 and above, and Windows PCs running XP, Vista or Windows 7. It’s been available to developers for some time, so those of you running the Lion beta before its release may already be familiar with its new features.

The update introduces Reading List, Apple’s Instapaper-like service that allows you to save articles, videos, and links to a list that you can access later. The service will also sync with iOS devices with the introduction of iOS 5 this fall.

Safari 5.1 also packs Safari Reader, which allows you to read websites and articles in a “clean, uncluttered space free from blinking, annoying ads.”

Multi-touch gestures allow you to control Safari by simply swiping, tapping and pinching your Magic Trackpad. Swipe forward and backwards to switch back and forth between pages, and double-tap with two fingers or pinch to zoom in and out.

Full screen web browsing allows you to browse your favourite websites without distractions from other applications

This update contains new features including:

- Reading List: Easily add webpages and links to your Reading List to browse when you have time.
- New Process Architecture: Safari has been re-engineered for improved stability and responsiveness.
- Resume: In the General pane of Safari preferences, you can now choose to launch Safari with the windows from your last browsing session.
- Better Privacy: A new Privacy pane in Safari preferences makes it easy to remove data that websites can leave on your system.

Other improvements include:

• - Private AutoFill: Safari lets you fill out forms quickly while keeping your personal information private.

• - Find Option: When you use Find, you can choose whether you want to search for text that contains or starts with the text that you type in the search field.

• - Drag-and-drop Downloads: You can drag items out of the Downloads window in Safari, so you can easily place downloaded files on the Desktop.

• - Advanced Web Technologies: Safari introduces support for full-screen webpages, media caching with the HTML5 application cache, MathML, Web Open Font Format, CSS3 Auto-hyphenation, CSS3 Vertical Text, CSS3 Text Emphasis, Window.onError, and Formatted XML files.

• - New Extension APIs: Developers can take advantage of new Safari Extension support for popovers, menus, new event classes, and interaction with Reader.

Safari 5.1 for Snow Leopard requires Mac OS X 10.6.5 or later.

Apple has also released a minor Safari 5.0.6 update for Mac OS X Leopard, bringing several improvements related to WebSocket web applications, HTML5 annotations, and display of content within frames on sites such as pandora.com.

To download Safari 5.1 Click here

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Apple Released Safari 5.1 With lots of New Features"https://www.voiceofgreyhat.com/2011/07/apple-released-safari-51-with-lots-of.html</a>

Is upgrading to Mac OS X v10.6 Snow Leopard still sensible??

While it might seem to some like buying a ticket to the ball game after the seventh-inning stretch, in a helpful article this week, MacFixIt's Topher Kessler advises a qualified "affirmative" to a number of readers still running older Intel Macs that came with OS X 10.5 Leopard or even 10.4 Tiger and are wondering whether they should upgrade to version 10.6 Snow Leopard. Kessler thinks that even with Apple's release of Mac OS X v10.7 Lion not far off, the OS 10.6 Snow Leopard upgrade—available on DVD for upgrading from Leopard or Tiger installations at a modest $29—is still a good idea. I agree unreservedly.

Kessler presents several good reasons why one should still upgrade to v10.6, not least of which that Snow Leopard may be the earliest OS version supporting a direct upgrade to the new OS. He also notes that for MobileMe users, it's a no-brainer. A couple of points in favor he didn't mention are that upgrading to OS v10.6.6 and later will also give you immediate access to the Apple Mac App Store, if that appeals. Also, compatibility with a number of newer software applications for which Snow Leopard is a minimum system requirement already, and there will be even more in the future.

Another point is that Mac OS X v10.6 Snow Leopard upgrade DVDs will likely not continue to be available from Apple for long, if at all, after the v10.7 Lion release, at least if past history is any reliable guide. Therefore, it might be a good idea to snag an uprade disk for possible future reference even if you don't install it right away.

The minimum Mac hardware for installing Lion has not been announced by Apple yet, but it's pretty safe to surmise that some early Intel Macs—possibly models with single-core processor silicon—will be bumped off the bottom rungs of the ladder of Mac OS X v10.7 support. So, for some, Snow Leopard will be the end of the Mac OS upgrade road and a requirement for future-proofing for at least a few more years.

Consequently, for $29, the Mac OS X v10.6 Snow Leopard upgrade is a pretty sweet deal if you have a Mac that will support it; especially an older model. The only downsides I've noticed compared with Mac OS X v10.5 Leopard is that Snow Leopard makes my 2.0GHz unibody MacBook run somewhat hotter, resulting in more cooling fan cycling.

SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-
<a href=">Is upgrading to Mac OS X v10.6 Snow Leopard still sensible??"https://www.voiceofgreyhat.com/2011/04/is-upgrading-to-mac-os-x-v106-snow.html</a>