Example

The Biggest DDos Attack in History, Disrupts Global Internet

<div dir="ltr" style="text-align: left;" trbidi="on"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYxOwxxaDSMQ2NY8lDW-BiOTx0Ol572rg8y8Or4cycH7U3ReYqkwm6Z4rfetPUTGv_uVHVCCE3dVzk9sYDRISJ67IaQGEJBkFkKoBi8P38v6E7rMIvF5x-ic30OxGdY68gAnWAXtWDzck/s1600/disconnected_internet.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYxOwxxaDSMQ2NY8lDW-BiOTx0Ol572rg8y8Or4cycH7U3ReYqkwm6Z4rfetPUTGv_uVHVCCE3dVzk9sYDRISJ67IaQGEJBkFkKoBi8P38v6E7rMIvF5x-ic30OxGdY68gAnWAXtWDzck/s320/disconnected_internet.jpg" /></a> <div dir="ltr" style="text-align: left;" trbidi="on">Anti-spam organisation Spamhaus has recovered from possibly the largest ‪DDoS‬ attack in history. A massive 300Gbps was thrown against Spamhaus' website but the anti-spam organisation was able to recover from the attack and get its core services back up and running. CloudFlare, the content delivery firm hired by Spamhaus last week to guard against an earlier run of DDoS attacks, was also hit, forcing it into taking the highly unusual step of dropping London as a hub in its network - as a <a href="https://twitter.com/CloudFlareSys/status/316284579247960064" rel="nofollow" target="_blank">Twitter update</a> by CloudFlare on Monday explained. <blockquote class="twitter-tweet">Our peering in London has been dropped due to a large attack. Modifying routes to avoid degradation.Affecting location: London, GB — CloudFlareStatus (@CloudFlareSys) <a href="https://twitter.com/CloudFlareSys/status/316284579247960064">March 25, 2013</a></blockquote><script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script> Spamhaus supplies lists of IP addresses for servers and computers on the net linked to the distribution of spam. The blacklists supplied by the not-for-profit organisation are used by ISPs, large corporations and spam filtering vendors to block the worst sources of junk mail before other spam filtering measures are brought into play. Spammers, of course, hate this practice so it's no big surprise that Spamhaus gets threatened, sued, and DDoSed regularly. Those affected by what they regard as incorrect listings also object about Spamhaus' alleged vigilante tactics. The latest run of attacks <a href="http://www.spamhaus.org/news/article/694/ddos-update-20-march-2013" rel="nofollow" target="_blank">began</a> on 18 March with a 10Gbps packet flood that saturated Spamhaus' connection to the rest of the Internet and knocked its site offline. Spamhaus's blocklists are distributed via DNS and widely mirrored in order to ensure that it is resilient to attacks. The website, however, was unreachable and the blacklists weren't getting updated. The largest source of attack traffic against Spamhaus came from DNS reflection, launched through Open DNS resolvers rather than directly via compromised networks. Spamhaus turned to CloudFlare for help and the content delivery firm was able to mitigate attacks that reached a peak of 75Gbps, as explained in a blog post <a href="http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-offline-and-ho" target="_blank">here</a>. Things remained calm for a few days before kicking off again with even greater intensity - to the extent that collateral damage was seen against services such as Netflix, the New York Times reports. Spamhaus' site remains available at the time of writing on Wednesday. Steve Linford, chief executive for Spamhaus, <a href="http://www.bbc.co.uk/news/technology-21954636" rel="nofollow" target="_blank">told the BBC</a> that the scale of the attack was unprecedented. "We've been under this cyber-attack for well over a week.But we're up - they haven't been able to knock us down. Our engineers are doing an immense job in keeping it up - this sort of attack would take down pretty much anything else," he said. Turning up the volume of DDoS attacks <blockquote class="tr_bq">A blog post by CloudFlare, written last week before the latest run of attacks, explains the mechanism of the attack against Spamhaus and how it can be usde to amplify packet floods. The basic technique of a DNS reflection attack is to send a request for a large DNS zone file with the source IP address spoofed to be the intended victim to a large number of open DNS resolvers. The resolvers then respond to the request, sending the large DNS zone answer to the intended victim. The attackers' requests themselves are only a fraction of the size of the responses, meaning the attacker can effectively amplify their attack to many times the size of the bandwidth resources they themselves control. In the Spamhaus case, the attacker was sending requests for the DNS zone file for ripe.net to open DNS resolvers. The attacker spoofed the CloudFlare IPs we'd issued for Spamhaus as the source in their DNS requests. The open resolvers responded with DNS zone file, generating collectively approximately 75Gbps of attack traffic. The requests were likely approximately 36 bytes long (e.g. dig ANY ripe.net @X.X.X.X +edns=0 +bufsize=4096, where X.X.X.X is replaced with the IP address of an open DNS resolver) and the response was approximately 3,000 bytes, translating to a 100x amplification factor.</blockquote>CloudFlare reckons 30,000 unique DNS resolvers have been involved in the attack against Spamhaus. "Because the attacker used a DNS amplification, the attacker only needed to control a botnet or cluster of servers to generate 750Mbps - which is possible with a small sized botnet or a handful of AWS instances," it explains.</div></div>

The Biggest DDos Attack in History, Disrupts Global Internet

Anti-spam organisation Spamhaus has recovered from possibly the largest ‪DDoS‬ attack in history. A massive 300Gbps was thrown against Spamh...

Advance SystemCare Pro 6 Latest Version for 2013 License Key

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaTOZjApDwwKqNIbz4uxR814MRExNKnlXrslcFIKozKwPseajvmCckICM7oOqbJQoeDxpCEHPBKNB2-wSuUCR-P0oEPIyHtnBxYPU4G0zafsXk18XFqBFDUXRKBBVw_Mf_HW17dQs9og8/s1600/ascpro.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaTOZjApDwwKqNIbz4uxR814MRExNKnlXrslcFIKozKwPseajvmCckICM7oOqbJQoeDxpCEHPBKNB2-wSuUCR-P0oEPIyHtnBxYPU4G0zafsXk18XFqBFDUXRKBBVw_Mf_HW17dQs9og8/s320/ascpro.png" /></a>Advanced SystemCare PRO provides an always-on, automated, all-in-one PC Healthcare Service with anti-spyware, privacy protection, performance tune-ups, and system cleaning capabilities. This powerful and award-winning precision tool fixes stubborn errors, cleans out clutter, optimizes Internet and download speeds, ensures personal security, and maintains maximum computer performance automatically. Key benefits include: 1) Keeps your PC running at peak performance: Fully optimizes Windows for ultimate system performance and top Internet speed by unleashing the built-in power of your system, based on how you use your PC and your network configuration. 2) It turns your PC into a business PC, a productive workstation, an entertainment center, a game machine, or a scientific computing PC. 3) Defends PC security with extra protection: Detects and analyzes Windows security environment. Scans and removes spyware and adware using up-to-date definition files. Prevents spyware, hackers and hijackers from installing malicious programs on your computer. 4) Erases and updates your PC's activity histories. One click to solve as many as 10 common PC problems: Advanced SystemCare 5 inherits the ease-of-use from previous versions, with more powerful capabilities. With one click, it scans and repairs ten PC problems and protects your PC from hidden security threats. 5) Real-time optimization with ActiveBoost function: ActiveBoost, technology that actively runs in the background intelligently managing system resources in real-time, constantly detecting inactive resources and optimizing CPU and RAM usage. What’s New in Advanced SystemCare 6 <ul><li>Brand New User Interface – The New One-Click Solution Provides Maximum Convenience to Conduct a Comprehensive PC-Care with Just a Click of a Button.</li><li>New Web Surfing Protection – Creates a Safer Online Environment by Detecting Risky Websites and Other E-threats that May Harm Your PC.</li><li>New Internet Boost Technology – Provides Smoother Online Experience by Accelerating Internet Downloading, Web Surfing, Online Video and Gaming up to 300% Faster.</li><li>New Generation Disk Defragment Engine – Makes Disk Scanning and Optimization Much Faster by Intelligently Organizing Drive Data for Maximum Performance.</li></ul> License Key <blockquote class="tr_bq"><pre>4A639-FD966-C5435-512C4 (4 months from now) 65792-57FC4-5CEC1-677C4 (not sure)</pre></blockquote>

Advance SystemCare Pro 6 Latest Version for 2013 License Key

Advanced SystemCare PRO provides an always-on, automated, all-in-one PC Healthcare Service with anti-spyware, privacy protection, performanc...

AT&T Hacker Sentenced to 41 Months in Prison

<div dir="ltr" style="text-align: left;" trbidi="on"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6PdUa3bD7ewVPNJpEejQmtUhEGlLTAKLu8jbovAWta1-NFQJkdb8W9vG11PXhBksjhv0omkNJeQi48uxlo-LXOXw0O4Ih6NHiB0BDHqA2HwThU7Y3DWpzDF4NGMD2BHvuTaZhTHQLDho/s1600/AT-T-Hacker-Andrew-Auernheimer-Sentenced-to-41-Months-in-Prison-2.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6PdUa3bD7ewVPNJpEejQmtUhEGlLTAKLu8jbovAWta1-NFQJkdb8W9vG11PXhBksjhv0omkNJeQi48uxlo-LXOXw0O4Ih6NHiB0BDHqA2HwThU7Y3DWpzDF4NGMD2BHvuTaZhTHQLDho/s320/AT-T-Hacker-Andrew-Auernheimer-Sentenced-to-41-Months-in-Prison-2.png" /></a>Andrew Auernheimer – aka “Weev,” the Internet activist found guilty in November 2012 of hacking into the systems of AT&T and stealing the details of around 120,000 iPad owners – has been reportedly sentenced to 41 months in prison and three years of supervised release. Tweets are being posted from the courthouse where the trial is taking place. <a href="https://twitter.com/Timcast" rel="nofollow" target="_blank">Tim Pool</a> of Timcast, who has been following the trial from the court, says Auernheimer and his co-defendant Daniel Spitler will also have to pay $73,000 (56,000 EUR) in restitution to AT&T. “Judge stated the sentence she administered would help weev down a ‘positive path’ and give him ‘respect for the law’,” Pool wrote. One noteworthy aspect is the fact that the prosecution apparently used Auernheimer's Reddit <a href="http://www.reddit.com/r/IAmA/comments/1ahkgc/i_am_weev_i_may_be_going_to_prison_under_the/" rel="nofollow" target="_blank">AMA</a> (ask-me-anything) to justify the sentencing. In addition, at one point in the trial, court agents asked Weev to hand over his phone. He gave the device to his lawyer instead, after which he was “quickly grabbed, pinned, and cuffed.” Auernheimer maintained his innocence up until the last minute. He has highlighted on numerous occasions that he wasn’t trying to cause any harm. His tweet just before the trial. <blockquote class="twitter-tweet">No matter what the outcome, I will not be broken. I am antifragile. — Andrew Auernheimer (@rabite) <a href="https://twitter.com/rabite/status/313658826387779585">March 18, 2013</a></blockquote><script async="" charset="utf-8" src="//platform.twitter.com/widgets.js"></script></div>

AT&T Hacker Sentenced to 41 Months in Prison

Andrew Auernheimer – aka “Weev,” the Internet activist found guilty in November 2012 of hacking into the systems of AT&T and stealing th...

Download SSLyze v0.6 – SSL Server Configuration Scanning Tool

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXa-QNvuy_Lxrm2MLOOu1AyLrl5XquNQSIxkBgrUsG0CTz4_EbXY9ZSLRjnUW37kirQWrOuJwyhyphenhypheneq61VPy2htfNEneRlPQufGJbfF9Kfnw964Opm0Q5ubbZ9_oJpqgbWQJ0ZYpplw4i4/s1600/SSLyze.jpeg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXa-QNvuy_Lxrm2MLOOu1AyLrl5XquNQSIxkBgrUsG0CTz4_EbXY9ZSLRjnUW37kirQWrOuJwyhyphenhypheneq61VPy2htfNEneRlPQufGJbfF9Kfnw964Opm0Q5ubbZ9_oJpqgbWQJ0ZYpplw4i4/s320/SSLyze.jpeg" /></a>SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers. Key features include: <ul><li>SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility</li><li>Performance testing: session resumption and TLS tickets support</li><li>Security testing: weak cipher suites, insecure renegation, CRIME and THC-SSL DOS attacks</li><li>Server certificate validation</li><li>Support for StartTLS with SMTP and XMPP, and traffic tunneling through an HTTPS proxy</li><li>Client certificate support for servers performing mutual authentication</li><li>Scan results can be written to an XML file for further processing</li></ul>While v0.5 saw the addition of a server side check for the <a href="http://arstechnica.com/security/2012/09/many-ways-to-break-ssl-with-crime-attacks-experts-warn/" rel="nofollow" target="_blank">CRIME attack</a>, that uses SSL Compression, v0.6 also has significant improvements. New in v0.6: <ul><li>Added support for Server Name Indication; see –sni</li><li>Partial results are returned when the server requires client authentication but no client certificate was provided</li><li>Preliminary IPv6 support</li><li>Various bug fixes and better support of client authentication and HTTPS tunneling</li></ul>ou can download SSLyze v0.6 here: Linux/OSX – <a href="https://dl.dropbox.com/s/h4cc7q68jdmxay3/sslyze-0.6_src.zip?dl=1" rel="nofollow" target="_blank">sslyze-0.6_src.zip</a> Windows 7/Python 32-bit – <a href="https://dl.dropbox.com/s/lexhsfejbjp209e/sslyze-0.6_Windows7_Python32.zip?dl=1" rel="nofollow" target="_blank">sslyze-0.6_Windows7_Python32.zip</a> Windows 7/Python 64-bit – <a href="https://dl.dropbox.com/s/l194sbqvnuuz2xs/sslyze-0.6_Windows7_Python64.zip?dl=1" rel="nofollow" target="_blank">sslyze-0.6_Windows7_Python64.zip</a> Read more <a href="https://github.com/iSECPartners/sslyze" rel="nofollow" target="_blank">here</a>.

Download SSLyze v0.6 – SSL Server Configuration Scanning Tool

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive,...

Pwn2Own ends with Oracle Java, Reader and Adobe Flash exploits

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIWoJMhqMCNQnGfIhsGws4Ob-M8B2sF-PCiL1VTurJoG1RgOEGyubfi2VhQTPuv_hZESNmdqkSpgtTNExgu6WQTtleiDgVrsIw0s7oASxKFpU6mTl5mj7orXiKXnabiOj2F3tfXWHtd0Y/s1600/google.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIWoJMhqMCNQnGfIhsGws4Ob-M8B2sF-PCiL1VTurJoG1RgOEGyubfi2VhQTPuv_hZESNmdqkSpgtTNExgu6WQTtleiDgVrsIw0s7oASxKFpU6mTl5mj7orXiKXnabiOj2F3tfXWHtd0Y/s320/google.png" width="200" /></a>Day two of the Pwn2Own competition at CanSecWest was again successful for French Vupen security, as they succeeded in exploiting Adobe Flash on Internet Explorer 9 on Windows 7 by chaining together three zero-days (an overflow, a ASLR bypass technique and a IE9 sandbox memory corruption) and earning themselves another $70,000. George Hotz exploited Adobe Reader XI (also on IE 9 on Win7), and Ben Murphy - the last contestant to target Java - has also managed to earn a prize even though he wasn't there, because James Forshaw, a winner from the previous day, agreed to serve as proxy and demonstrate the attack. All in all, ZDI has awarded over half a million dollars in cash prizes and, of course, the compromised laptops and ZDI reward points. The Google financed Pwnium hacking contest - also held at CanSecWest - this year requires contestants to "break" Chrome OS but has so far not witnessed a successful exploitation. In the meantime, Mozilla has already <a href="https://www.mozilla.org/security/announce/2013/mfsa2013-29.html" rel="nofollow" target="_blank">fixed</a> the use-after-free zero-day flaw exploited yesterday by Vupen Security, and Google <a href="http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_7.html" rel="nofollow" target="_blank">has issued</a> a Chrome update that fixes the flaws discovered by the MWR Labs team.

Pwn2Own ends with Oracle Java, Reader and Adobe Flash exploits

Day two of the Pwn2Own competition at CanSecWest was again successful for French Vupen security, as they succeeded in exploiting Adobe Flash...