Ezúttal 7db Solaris exploit érkezett:
https://medium.com/@shadowbrokerss/message-5-trick-or-treat-e43f946f93e…
https://www.myhackerhouse.com/hacker-halloween-inside-shadow-brokers-le…
https://en.wikipedia.org/wiki/Equation_Group
Our research team has uncovered new way to leverage mechanisms of the underlying Windows operating system in order to inject malicious code. Threat actors can use this technique, which exists by design of the operating system, to bypass current security solutions that attempt to prevent infection. We named this technique AtomBombing based on the name of the underlying mechanism that this technique exploits.
AtomBombing affects all Windows version. In particular, we tested this against Windows 10.
Unfortunately, this issue cannot be patched since it doesn’t rely on broken or flawed code – rather on how these operating system mechanisms are designed
[ AtomBombing: A Code Injection that Bypasses Current Security Solutions ]
Ian Beer of Google Project Zero, who found a deep-down vulnerability in the XNU kernel, first reported it to Apple in February this year, and it took until now to clean it up properly.
[ How Google's Project Zero made Apple refactor its kernel ]
Conclusion
My final conclusions about this device are very positive. The OnePlus 3 is a serious contender agains the iPhone 7/7 Plus and the new Google Pixel smartphone. If you want to decide for yourself, I’ve prepared a ZIP file of full resolution RAW DNG files captured with the OnePlus 3 smartphone so you can take a closer look.
About the author: Alessandro Michelazzi is a professional portrait and lifestyle photographer based in Florence, Italy. The opinions expressed in this article are solely those of the author. To see more of Alessandro’s work, visit his website or follow him on Facebook and Instagram. A version of this review was published here
http://index.hu/tech/2016/10/27/ropteben_lopnak_dront_a_hekkerek/
Pórázokat felcsatolni :)
http://www.securityweek.com/nexus-6p-iphone-6s-hacked-mobile-pwn2own-20…
Az iOS-en valószínű ezek lehettek:
- CVE-2016-4673: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution
- CVE-2016-4677: Processing maliciously crafted web content may lead to arbitrary code execution
via https://support.apple.com/en-us/HT207271
Androidos legalább ilyen súlyos lehet, a leírás alapján "install a rogue application on Nexus 6P without user interaction", tehát még weboldal meglátogatásra sem volt szükség.
Each team under the contest rules has five minutes, over three attempts for a total of 20 minutes to pop devices.
All of the exploits were triggered by browsing to a malicious website.
Korábban ugyanez a csapat: https://hacked.com/hackers-successfully-remote-attack-a-tesla-model-s/
Do you like headphone jacks?
— Carl Pei (@getpeid) October 25, 2016
"Apple (AAPL, Tech30) just posted its first annual sales decline since 2001, the year it launched the iPod and kicked off a tremendous run of groundbreaking products.
The tech company revealed Tuesday that annual sales fell to $216 billion in the 2016 fiscal year ending September 30, from a record $234 billion in 2015.
The sales decline is closely connected to the falling sales for the iPhone, which remains Apple's largest source of revenue"
http://money.cnn.com/2016/10/25/technology/apple-earnings-decline/index…
Recently, I have been interviewed over the phone by a Google recruiter. As I qualified for the (unsolicited) interview but failed to pass the test, this blog post lists the questions and the expected answers. That might be handy if Google calls you one day.
For the sake of the discussion, I started coding 37 years ago (I was 11 years old) and never stopped since then. Beyond having been appointed as R&D Director 24 years ago (I was 24 years old), among (many) other works, I have since then designed and implemented the most demanding parts of TWD's R&D projects* – all of them delivering commercial products:
- Global-WAN (a C/VHDL distributed L2 VPN
relying on a custom kernel-bypass IP stack and our own post-quantum encryption)- G-WAN (a 200 KB application
server with 17 scripted programming languages C/C++, C#, Objective-C, Java, Go, PHP, etc.)- Remote-Anything (a patented enterprise network management solution, 280 millions of licenses deployed in 138 countries)
Google's representative stated that both management and up-to-date coding skills were required (a rare mix). But having exercised the former for more than 2 decades and the latter for almost 4 decades was not enough: I failed to give the "right answers". Is Google raising the bar too high or is their recruiting staff seriously lacking the skills they are supposed to rate?
Let's have a look!
Folytatás:
