Archive

Archive for the ‘Security’ Category

How to: Make a password less SSH Login

March 10th, 2010 oDx No comments

First  you will have to generate key on local machine.

For that type in the following command in a terminal. Here we are using RSA encryption.

ssh-keygen -t rsa

It will ask you for a password but you can leave it blank.

Note you could also pick -t dsa if you prefer DSA encryption.

Ensure that the remote server has a .ssh directory

Make sure the server your connecting to has a .ssh directory in your home directory. If it doesn’t exist you can run the ssh-keygen command above, and it will create one with the correct permissions.

Copy your local public key to the remote server

If your remote server doesn’t have a file called ~/.ssh/authorized_keys2 then we can create it. If that file already exists, you need to append to it instead of overwriting it, which the command below would do:

scp ~/.ssh/id_rsa.pub remote.server.com:.ssh/authorized_keys2

Now ssh to the remote server

Now you can ssh to the remote server without entering your password.

Security

Now keep in mind that if someone need to login to the remote server, all s/he need is the file on your local machine ~/.ssh/id_rsa, so make sure it is secure.

  • Share/Bookmark

Critical flaws in iPhone, iPod Touch Patched

February 3rd, 2010 oDx No comments

Today Computerworld reported, Apple has patched many of the critical flaws which was present in iPod Touch and iPhone.

The Patched flaws are:

  • Playing a maliciously crafted mp4 audio file may lead to an unexpected application termination or arbitrary code execution
  • Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution
  • A person with physical access to a locked device may be able to access the user’s data
  • Accessing a maliciously crafted FTP server could result in an unexpected application termination, information disclosure, or arbitrary code execution
  • Mail may load remote audio and video content when remote image loading is disabled

According to Apple, the iPhone 3.1.3 update improves the accuracy of battery level.

iPhone and iPod Touch owners can wait out the update interval. iTunes will automatically check Apple’s update servers once a week or you can also retrieve iPhone 3.1.3 manually by selecting “Check for Update” under the iTunes Help menu and then docking the iPhone to a PC or Macintosh.

  • Share/Bookmark
Categories: Gadgets, Security Tags: , , ,

TechCrunch got Hacked

January 26th, 2010 oDx No comments

Today the famous technology news website Techcrunch went down, even now its not working.

The navigation to main page of techcrunch now shows the visitors, a message, which says,

WHAT A F**kING USELESS HACK ISN’T IT? BLEH. and a link to http://dupedb.com/

The title of the website says “LOL HACKED”. Well now it is one of the trending topics in twitter.

The link given seems to be a warez sharing website for illegal downloads. Stay with me for more updates on the story.

—————————————————————————-

  • UPDATE #5: Again Back online
  • UPDATE #4: Today  the site went down again.

See the ScreenShot

  • UPDATE #3: Techcrunch is back, and there is no news about this on, TechCrunch.. :D
  • UPDATE #2: Techcrunch admitted it was was compromised today. Now they have a message for the visitors.

Earlier tonight techcrunch.com was compromised by a security exploit.

We’re working to identify the exploit and will bring the site back online shortly.

  • UPDATE #1: Now the message has been removed, and it shows we will be back soon.

  • Share/Bookmark
Categories: Security Tags: ,

Avast Antivirus 5 Released

January 20th, 2010 oDx No comments

-

The newest version of the popular Avast Antivirus is finally available for download. It’s lighter, faster, and more feature-filled than ever, bringing a new behavior shield, heuristics engine, and code emulator to keep you protected at all times.

Apart from its far easier-to-navigate interface, Avast has a few new features that make it hard to turn down. Its new code emulator can emulate a suspicious executable’s code, isolated, for use in its new heuristics engine, designed to detect malware that would otherwise be undetectable with normal definitions—in other words, spotting malware by learning what the code does. If you use the pro version, you also get their new sandboxing feature for even further protection.

Apart from the new features, Avast has also lowered scanning times as well as the resources necessary to scan and update—a common issue with antivirus programs that are always running in the background. If you’re already an Avast lover (and many of you are), you can either wait for the program to update itself in the near future or go download 5.0 straight from Avast. If you’ve tried Avast and turned it down before, it may be worth another look—you may find that its former cons (such as the difficult-to-use GUI and resource use) are now more up to your standards.

Avast Antivirus is a free download, Windows only.

  • Share/Bookmark
Categories: Security, Useful Appli'ns Tags: ,

McAfee gives away its Internet Security Suite to all Facebook Users

January 13th, 2010 oDx No comments

The Computer Security Giant McAfee along with the Social Community Networking Giant Facebook are taking a big step to improve the security of normal computer users. Today USAtoday posted anews saying,

Tonight, they announced McAfee will make a complimentary six-month subscription of its Internet Security Suite software available to Facebook’s 350 million users.

After six months, Facebook users will be eligible for a special discounted subscription for the software package, which offers PCs protection from viruses, spyware and other online threats.

All users should join the fan page for McAfee to avail this offer. McAfee Internet Security Suite will initially be available to Facebook users in the U.S., UK, Australia, Italy, Germany, the Netherlands, Spain, France, Canada, Mexico and Brazil.

  • Share/Bookmark

Chinese search engine Baidu Got Hacked

January 12th, 2010 oDx No comments

Today Guardian.co.uk reported that the famous Chinese Search engine Baidu Got hacked. Chinese internet users were unable to use the Baidu search engine after it was targeted by hackers called the ‘Iranian Cyber Army’.

Guardian Said,

The search engine is widely regarded as having good relations with the Beijing government and has never been associated with sensitive content. That led other internet users to speculate that foreign hackers were attempting to discredit Iran.

China’s state-run People’s Daily website reported that Baidu’s website began redirecting to a site attributed to the Iranian Cyber Army at around 8am (midnight GMT). The People’s Daily site published a screen grab showing a message reading “This site has been hacked by the Iranian Cyber Army”, alongside a picture of the Iranian flag.

Other users said they could not open the Baidu site, but it was back up and running by around 11.30am. In a statement, the company said: “Services on Baidu’s main website www.baidu.com were interrupted today due to external manipulation of its DNS (Domain Name Server) in the US. Baidu has been resolving this issue and the majority of services have been restored.”

Via:guardian.co.uk

  • Share/Bookmark
Contact Us

*required fields

Thank you. Your message has been sent.
There was an error while sending your message. Please try again later.
Plugin by psd to wordpress Solutions.