Small Network Scanner CUJO Great Success IndieGoGo

A small device that scans network traffic for malware and other attacks is a huge success on crowd funding platform IndieGoGo. CUJO has the size of a large apple and monitor the movement of all devices on the network. Users need to connect the device only on their router and CUJO does the rest, according to the description on IndieGoGo.

According to the developers CUJO acts as a gateway between the internet and the devices on the network. All traffic is then inspected at the package level and blocked in the event of malware or other threats. For this fit CUJO deep packet inspection (DPI) increased. In addition to paying for the device itself, which costs $ 49, there must be a subscription of $ 9 per month closure. The subscription fees are required according to the developers to detect new threats.

For this retrieves the local CUJO-device information from the CUJO cloud. Although CUJO network traffic scanning, users have advised locally on the computer to install a virus. In four days time CUJO already raised $ 90,000 by 1259 people on Indie Gogo, while $ 30,000 was intended. With just 28 days to go, the network scanner is now at 300% of the funding goal.If everything goes according to plan, the first CUJO are delivered next February or March.

Avast: Virus Scanner To Scan HTTPS Traffic

As more Internet traffic over SSL is encrypted, it is important that virus scanners can inspect HTTPS traffic, even though they have here a "man-in-the-Middle" with self-signed certificates to perform. That leaves anti-virus company Avast know, the free virus scanner is one of the most widely used anti-virus programs in the world.

An SSL certificate is used to encrypt traffic between websites and visitors. Traffic is theoretically no longer available by third parties. To still analyze whether the traffic is free of malware or other malicious code, Avast installs on computers a self signed certificate that is accepted by the browser. Normally give self-signed certificates in the browser a warning, because the publisher is not trusted. To solve this Avast adds itself as a certificate authority to the browser so that certificate or trust.

Once the browser a SSL connection setup the virus will own this certificate to use that now causes no warning. This way you will find there is actually a man-in-the-Middle (MITM) attack place. According to Avast this is necessary to scan the traffic.There is also a difference with traditional MITM attacks, said the virus fighter. "The" man in the middle "that we use is on the same computer as the browser and uses the same Internet connection."

Avast also announced that it generates a different private key for each certificate. A user would with its own installation therefore can not intercept traffic from other Avast users. Yet recently proposed a security researcher that the process of virus scanners, including those from Avast, safety HTTPS undermine.

Almost 97% Of Tor Traffic Goes To 'Normal' Websites

Almost 97% of the traffic that will generate Tor users to 'normal' websites over the internet anyone can visit, according to research from the Tor Project. Tor is a software that allows users not only to hide their IP address, but also makes it possible to visit Tor sites that are only accessible through the Tor network.These are the so-called "hidden services".

The Tor Project wanted to know how many of the Tor traffic goes to these hidden services. For this was the collaboration of several volunteers to share data from their Tor server. This enabled the Tor Project a small proportion (2% - 5%) of activities in hidden view services. Establish on the basis of current calculations, the researchers found that each day 30,000 hidden services are active. These websites generate every day 400 to 600Mbit per second of traffic, which amounts to about 5 terabytes of data per day.

Furthermore, it appears that is the Tor traffic from Tor users to these hidden services 3.4% of the total Tor traffic. This means that 96.6% of the Tor traffic to "normal" websites is that anyone can access through a browser. Tor came last year regularly negative in the news because Tor would mainly be used for visiting criminal Tor sites. Now it appears that the most traffic to websites is that outside Gate to visit.

The researchers suggest that it is still to preliminary results in that regard are established on the basis of a limited data set, and with a grain would have to be taken. The study was conducted over a period of several months, but the researchers plan to expand further in the future. They want to know how many people visit daily Tor sites and how often people try to visit a hidden service that no longer exists.

"Unfortunately, some of these questions with the current reporting infrastructure are not easy to answer, mostly because the collection in this way can reveal hidden information about specific services, as well as the results of the current system include excess  dates." The researchers are also looking at aggregation protocols for statistics that they can use in place of the current system, so they still safe to collect all kinds of statistics.

Gogo Inflight Internet Issues - "Wifi Service In Aircraft Used Fake Google Certificate"

An American company that offers WiFi in aircraft appears to use a fake Google certificate to filter YouTube, as discovered an employee of Google. It is Gogo Inflight Internet, which include flights on American Airlines, Delta Air Lines and United Airlines offered.

During her flight decided Adrienne Porter Felt, security researcher at the Google Chrome Security Team, YouTube visit and saw a fake certificate was used, in which they have a public tweet sent to Gogo. In response to the controversy surrounding the wifi provider gave yesterday a response. In it, the director that Gogo due to the limited bandwidth some streaming services does not support and various techniques used to block or restrict video streaming.

"Whatever technique we use to limit the bandwidth, the only impact on certain secure video streaming sites and not on the normal safe Internet traffic," says director Anand Chari. "These techniques are used so that anyone who wants the internet during the flight has a consistent browsing experience." Charitable stressed that no user information is collected by the techniques used Critics , however, are outraged and say that the company for blocking or filtering YouTube no need to use fake Google certificate.