TechWorld

High-speed cameras taking 100,000 pictures in one second are enough to fascinate us. But what about a camera that can film at a rate of 5 trillion images per second. It’s created by the researchers Elias Kristensson and Andreas Ehn at the Lund University in Sweden. The camera can make light slow enough that it could be analyzed by humans. In other words, it can be used to record events happening in the 0.2 trillionths of a second. In 2011, a similar camera device was created by the MIT Media Lab. But it was slower and capable of capturing 1 trillion images per second. The researchers demonstrated the camera by filming photons of light traveling a distance equivalent to the thickness of a paper. The trillion camera works in a different way in comparison to the normal high-speed cameras. [youtube https://www.youtube.com/watch?v=2fjP02EpJac?feature=oembed&w=669&h=502] In the method, laser light pulses with a unique code are slashed on the subject. The reflected pulses captured by ...

We’ve known for a while that Microsoft doesn’t care too much about Windows phones these days, but this time it’s official. Not as in Microsoft provided us with a statement official, but as in 10Q SEC filing official, which Microsoft needs to file every quarter after its earnings report. Documents published by Microsoft for Q3 come with a little change from the previous quarter, and as spotted by DrWindowsPhone, the mobile platform isn’t getting any new improvements. As you can see in the screenshot included in this article, in Q2 Microsoft planned “significant improvements in research, development, and marketing for existing products, services, and technologies, including the Windows operating system, […] and Windows Phone.” For the next quarter, Windows Phone is no longer listed as a platform getting investments, and this is just another sign that Microsoft is giving up on this platform. As we’ve told you last week, Microsoft also confirmed in the call with financial analysts after th...

It is not easy being a spy or a soldier: you have to be completely foucsed in dangerous situations, assess information in the field, speak many foreign languages, and also handle all kinds of technical weaponry and equipment. Learning how to do all of this needs a lot of training, which is why the US Department of Defence research wing wants to figure out other ways to make their workers learn the vital skills faster – even if they have to zap them to get the job done. To explore all the possibilities, Defence Advanced Research Projects Agency or DARPA has awarded more than US$50 million in their funding to eight teams which are researching on how electrical stimulation of the nervous system can help them facilitate learning. The four-year program is called TNT(Targeted Neuroplasticity Training), aims to be the identity safe and also optimal neurostimulation methods which can activate what is called synaptic plasticity, the ability of synapses to weaken or strengthen, and by doing so, ...

Microsoft is holding a new event tomorrow, and this time the focus will be on the company’s education efforts, bringing us several new products, including a brand new Windows 10 version. On May 2, Microsoft is expected to take the wraps off a new operating system SKU called either Windows 10 Cloud or Windows 10 S (the first name has already been used for preview builds before the release of the Creators Update, but it’s not clear if the company wants to keep it for the production version as well). Windows 10 S will be limited to Windows Store apps and will spearhead the company’s efforts in the education business, as it will be primarily installed on more affordable devices whose role will be to challenge the growth of Google’s Chromebook here. As a result, Windows 10 S is more or less the successor to Windows RT, the operating system version that Microsoft launched in 2012 and which was installed on the original Surface RT and then on the Surface 2. Microsoft is expected to highlight ...

Recent attacks associated with the TrickBot banking Trojan have been targeting private banks, and the threat is also sharpening its focus on business banking, IBM’s X-Force security team warns. Campaigns observed in the UK, Australia, and Germany were showing new redirection attacks focused on new brands, including private banks, private wealth management firms, investment banking, and a retirement insurance and annuity company. The Trojan also added some new brands to its list of targeted business banks, the security researchers say. TrickBot was initially observed in October last year, when Fidelis Cybersecurity researchers determined that the threat had a strong connection to the Dyre gang . Before the end of 2016, the new Trojan was observed in a series of attacks targeting banks in the UK and Australia , as well as in campaigns aimed at financial institutions in Asia . IBM has since  discovered that the malware is targeting 20 new private banking brands and eight building societi...

Yapizon the Bitcoin exchange of South Korea suffered from a massive data breach earlier this week. Hackers stole about 3816.2028 Bitcoin (about US$5 million) which is nearly 37% of total user funds. According to official statement from exchange in Korean language, this attack took place on the Saturday, April 22, 2017, a hacker has compromised four of the total exchange’s hot wallets. A hot wallet means a Bitcoin wallet that is online and is connected to the Internet in some way. As if this data breach was not enough to annoy the users, exchange has decided to make use of 37 percent of the user balances to accommodate the loss of 37 percent in the incident. But to compensate all this loss, the exchange is planning to issue the ‘Fei’ tokens to the “priority members.” Fei is the service product which exchange has been trading eversince 2014. “After so many discussions, the legal and accounting consultations and reviews, has come to the conclusion that this losses incurred in this case sh...

The fraudsters are stealing a large sum of money from the victim’s bank accounts by taking the control of their mobile phones and then intercepting the texts messages sent by the banks. The fraudsters are again gathering as much info as possible on the victims and using a method we warned the public in the past named SIM splitting, to gain the access to bank accounts of people. This is the Money investigation found which one victim from the London lost £22,300 when these fraudsters raided their Santander accounts using the method. Two more victims had drained   £19,500  from their accounts after the criminals intercepted their bank’s text messages. How does this fraud work? Step 1: Initially the fraudsters have harvested as much as they can about the targetted individual. This includes intercepting their post, searching public information on the search engines/social media, tricking them into the installing of malware or buying the information from the Organised Crime Groups. Step 2: ...

Researchers have recently discovered hundreds of vulnerable apps on Google Play Store which are allowing hackers to inject them with malicious code which, upon downloading, steal all data from an infected Android device. The problem, according to the researchers [PDF] is that some of the apps are creating open ports on smartphones, which is not a new problem since the same issue was faced by computers but it is something new when it comes to smartphone technology. A team from the University of Michigan has tried to use a custom tool for scanning more than 24,000 applications, and 410 of them were found to be flawed. At least one of those apps has been downloaded so many times that there are potentially millions of Android devices which are vulnerable. Researchers also stated: – “These newly discovered exploits can lead to a large number of severe security and privacy breaches. For example, remotely stealing sensitive data such as contacts, photos, and even security credentials and perf...

As recently as April 4, a security camera recorded two people simply walking around a car and one of them was holding some type of bag close to the front door of a house. Next thing you know; they managed to steal a BMW. This has happened only days after a Mercedes was taken in a very similar way in the United Kingdom. The car in question, the £60,000 BMW X5, seemed to have disappeared from the driveway while its owners slept. Upon investigating the CCTV footage, it was revealed that two thieves stole it by using some transmitting device that was apparently hidden inside the bag which extended the signal coming from the car keys inside the house. This model uses a keyless start system, which means that the car can be unlocked only by having the fob relatively close, or in this case, transmitting its signal so that the car would assume that you have the keys with you. Since both of the vehicles were stolen in Essex, it’s believed that they are being stolen by a gang that’s targeting val...

 Tinder users have many motives for uploading their likeness to the dating app. But contributing a facial biometric to a downloadable data set for training convolutional neural networks probably wasn’t top of their list when they signed up to swipe. Read More

You know what's universally regarded as un-fun by most programmers? Writing assembly language code . As Steve McConnell said back in 1994 : Programmers working with high-level languages achieve better productivity and quality than those working with lower-level languages. Languages such as C++, Java, Smalltalk, and Visual Basic have been credited with improving productivity, reliability, simplicity, and comprehensibility by factors of 5 to 15 over low-level languages such as assembly and C. You save time when you don't need to have an awards ceremony every time a C statement does what it's supposed to. Assembly is a language where, for performance reasons, every individual command is communicated in excruciating low level detail directly to the CPU. As we've gone from fast CPUs, to faster CPUs, to multiple absurdly fast CPU cores on the same die, to "gee, we kinda stopped caring about CPU performance altogether five years ago", there hasn't been much nee...

Over the last twenty years, I've probably built around a hundred computers. It's not very difficult, and in fact, it's gotten a whole lot easier over the years as computers become more highly integrated. Consider what it would take to build something very modern like the Scooter Computer : Apply a dab of thermal compound to top of case. Place motherboard in case. Screw motherboard into case. Insert SSD stick. Insert RAM stick. Screw case closed. Plug in external power. Boot. Bam done. [youtube https://www.youtube.com/watch?v=PKf1I759PPQ&w=420&h=315] It's stupid easy. My six year old son and I have built Lego kits that were way more complex than this. Even a traditional desktop build is only a few more steps: insert CPU, install heatsink, route cables. And a server build is merely a few additional steps on top of that, maybe with some 1U or 2U space constraints. Scooter, desktop, or server, if you've built one computer, you've basically built them ...

The UK government has complained to the Twitter over a block on the access to data from the social network, they are reportedly using this to track potential terror attacks, said the officials on Wednesday. “The government has protested against the decision and is in an ongoing discussion with the Twitter and trying to get access to this data,” said a Home Office spokesman. The Prime Minister Theresa May’s spokesman have declined to specify exactly what that data was and why it is important, saying just “we wish to have access to that information”. But he told the reporters that: “This fight against terrorism is not just one for the security services and the police.Tech companies and social media have a role to play.” A Daily Telegraph newspaper has reported that the government is tracking terms related to the potential terror attacks using a third-party firm, but this is now blocked. In a blog post in November, the Twitter executive Chris Moody has said their firm encouraged the devel...

Apple’s using a Lexus RX450h SUV for its autonomous vehicle testing program, as revealed by documents filed with the California DMV in accordance with licensing requirements for self-driving tests in the state. Now, Bloomberg has images of the vehicle in action , captured by a chance observer who saw the vehicle pull out of an Apple facility in Silicon Valley. The SUV looks pretty much like similar test cars used by Waymo, the former Google self-driving car company whose headquarters are pretty much just down the road from Apple’s Cupertino HQ. The equipment adorning the SUV include optical cameras, LiDAR, and radar, all of which appear to be off-the-shelf components, including Velodyne’s top-of-the-line LiDAR unit atop a frame that extends a few feet out from the roof of the vehicle. Judging by these spy shots and the information found in the DMV documents made public by a public records request, Apple is very early in its autonomous technology program compared to companies like Waymo...

The new Robert Walters UK Jobs Index reveals that the job vacancies for IT professionals increased by 12% in the first quarter of 2017 when compared to the same time in the last year. Developers and software engineers are particularly sought after, accounting for the 14% of total demand while the vacancies for IT managers made up by 4% of total number of the roles. “The UK IT sector has enjoyed a strong steady growth over past several years and is largely resistant to slowdown in the hiring seen by other sectors in midst of economic and political uncertainty last year.” “However, start of 2017 has nevertheless seen a significant increase in IT hiring, with the developers particularly sought after. The demand from startup firms in the fin-tech has played a major role in this, along with the large established companies investing heavily in the cyber security.” “With many high-profile data breaches over past few years involving in the prominent companies, employers are now increasingly re...

  In an operation targeting cybercrime across Asean, the Interpol says it has identified thousands of compromised systems that included command-and-control (C2) servers infected with malware and websites run by governments. Some 8,800 of the servers across eight countries were found to be infected with various malware codes including those targeting financial institutions and used to launch DDoS (distributed denial-of-service) attacks. Investigations involving these systems were still ongoing, according to a statement released by Interpol, which ran the Asean operation out of its Global Complex for Innovation in Singapore. It added that some 270 websites were found to have been infected with a malware code that exploited a vulnerability in the website design software. These compromised sites included those run by governments, which might contain personal data of their citizens, it said. “A number of phishing website operators were also identified, including one with links to Nigeri...

Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born as a didactic project for learning python language, I decline every responsibility for any abuse, including malevolent or illegal use of this code. Installation  1 2 3 $ git clone https : //github.com/codepr/creak.git $ cd creak $ python setup . py install or simply clone the repository and run the creak.py after all requirements are installed: 1 $ git clone https : //github.com/codepr/creak.git It is required to have installed pcap libraries for raw packet manipulations and dpkt module, for dns spoofing options is required to have installed dnet module from libdnet package, do not confuse it with pydnet (network evaluation tool) module. It can use also scapy if desired, can just be set in the c...

Ken-Pachi / August 12, 2016 / Comments Off on Mara framework v0.2(beta) – Mobile Application Reverse Engineering & Analysis Framework. / Android Tools, Anti Malware/Virus – Malware Analysis, Encryption, Framework, Registry Analysis, Security Tools Changelog v0.2(beta): * Adding Preliminary Analysis (*new Features) * Adding APK Manifest Analysis (*new Features) * Tools Update tools/editors/com.maskyn.fileeditor-59.apk tools/editors/sublime-text_build-3114_amd64.deb * setup.sh * mara.sh Mara Framework v0.2 MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a tool that puts together commonly used mobile application reverse engineering toolsets, in order to make the task or reverse engineering and analysis easier and friendly to mobile application developers and security professionals. Mara Features supported: * APK Reverse engineering Disassembling Dalvik bytecode to smali bytecode via baksmali and apktool Disassembling Dalvik bytecode to java b...

The U.S. Air Force launched a new bug bounty program dubbed “Hack the Air Force” on Wednesday, continuing a trend within the U.S. military that began last year with Hack the Pentagon and Hack the Army. Before the Pentagon’s bug bounty programs launched, it was illegal to search for vulnerabilities on Defense Department networks. The trend has extended overseas, as well, with the U.K. government’s announcement of its own bug bounty program last month. The Air Force program is directed by HackerOne, the bug bounty platform behind Hack the Pentagon that just raised a $40 million investment in February, and Luta Security, the security consulting firm driving the U.K. program. HackerOne and Luta Security are partnering to deliver up to 20 bug bounty challenges over three years to the Defense Department. “This outside approach — drawing on the talent and expertise of our citizens and partner-nation citizens — in identifying our security vulnerabilities will help bolster our  cybersecurity,”...

Kali Linux is the favorite operating system of ethical hackers. Last year, the developers of this ethical hacking toolset decided to switch to the rolling release model. This means that instead of being based on the standard Debian releases, Kali Linux rolling distro ensures that it’s regularly being updated with latest features and patches. But, in the rolling model, the release of updated images isn’t much important. But, the latest release, i.e., Kali Rolling 2017.1, brings in a bunch of exciting features and updates. So, let’s take a look at the major highlights: Kali Linux 2017.1 new features RTL8812AU Wireless Card Injection support This release brings wireless injection support to 802.11ac standard. This has happened due to the implementation of drivers for RTL8812AU chipsets. For installing the driver, you simply need to run the following command: 1 2 apt – get update apt install realtek – rtl88xxau – dkms CUDA GPU Cracking support Thanks to the improvements in packaging, the u...