American Library Will Distribute USB Sticks With Privacy OS

The American library that previously defied all the Department of Homeland Security to run a Tor server does again of himself speaking, there is in fact decided to show a film about Snowden and USB sticks with the privacy operating system Tails to distribute to library visitors.

It is the Kilton Public Library in West Lebanon (New Hampshire), a community with 3500 inhabitants. The library was in the news because it had decided to set up a Tor server. The Tor network allows users to hide their IP address and visit censored websites. After an e-mail from the Department of Homeland Security and concerns of the police and the local administration, the library decided to temporarily stop the Tor server, but came back to that later turned server back on.

Among other things Edward Snowden responded to the decision by the library. Due to the positive reactions and tweet Snowden, the library authorities now decided next Tuesday Citizenfour, to show the documentary about Snowden, reports Valley News. In addition, USB sticks will be distributed to the privacy OS Tails. Tails (The Amnesic Incognito Live System) is a complete operating system that can be used from a DVD or USB stick. It is based on Debian and contains various tools to access the Internet anonymously. For example, among other things, made ​​use of the Tor-network.

Privacy Tails OS With Offline Mode For Sensitive Documents

There is a new version of the operating system focused on privacy Tails appeared, now an offline mode features. In this case, all network properties can be switched off. According to the developers, this is useful if it sensitive documents is underway.

Icedove further added, a modified version of the Mozilla Thunderbird email client. Icedove is at this stage a "technology preview", but according to the developers safe enough to be used in the context of Tails. In addition, in Tails 1.7 also numerous small bugs and fixes and the operating system would have to be something more compatible with hardware.

Tails is a complete operating system that can be used from a DVD or USB stick. Despite all the attention to the privacy Tails developers early this year showed that only 10 000 people daily in the privacy OS use.

Google Chrome OS Will Not Phase Out

Google has no plans to phase out its own operating system Chrome OS, all went to recent reports in the media suggests otherwise. Sources left against the Wall Street Journal that the ultimate aim of Google Chrome OS and Android to combine a single platform.

Supporting and developing two different operating systems namely would be costly and confusing for manufacturers. Hiroshi Lockheimer, senior vice president of Android, Chrome OS and Chrome Cast, argues that Google is to combine "the best" of both operating systems, but there are no plans to phase out Chrome OS. Google has just plans to add new features to Chrome OS as a new media player, a visual refresh, improved performance and security. In addition, there will be next year dozens of new Chromebooks, said Lockheimer.

Researchers Bypass Microsoft's EMET Security

Researchers have succeeded in the EMET security tool to circumvent Microsoft by a Windows Component are used to make 32-bit software on a 64-bit operating system running. EMET stands for Enhanced Mitigation Experience Toolkit (EMET) and provides Windows and applications from an additional layer of security.

This extra layer to make it harder for attackers to attack both known and unknown vulnerabilities in the operating system or installed programs or plug-ins. Researchers at Duo Security, however, found a way (pdf) to bypass the security of EMET.The attack is possible by WoW64 subsystem of Windows.

This system acts as a compatibility layer between 32-bit software and 64-bit Windows versions. While most Windows versions are now 64-bit, most Internet users still use 32-bit browsers. Research by Duo Security found that 80% of browsers on 64-bit Windows versions is a 32-bit process. For these browsers on a 64-bit system to use the "Windows on Windows" (WoW) used low.

The security measures EMET offers in WoW64 subsystem less effective. In the case of the attack Duo Security developed there may eventually be a 64-bit version will be attacked by a DLL, while WoW64 ensures that EMET only protects the 32-bit version of the file. To remedy this problem, Microsoft would have to make major changes to the operation of EMET.

Advice

Despite the successful attack the researchers state that EMET is still an important part of any security strategy. They also recommend the use of 64-bit software, because some parts of this abuse makes little trickier and other offers security advantages. Users and administrators also be advised where possible, true 64-bit software to run on 64-bit Windows versions.

Microsoft Launched Windows 10 Experiment With Pirated Softwares

Microsoft will soon launch an experiment in which users of a pirated version of Windows 7 or Windows 8.1 simply a legal version of Windows 10 can upgrade. At present, users can install a free legal version of either operating system Windows 10.

According to Microsoft, users would an illegal version kinds of "creative ways" seeking to start the upgrading process, then purchase a legal version of Windows 10. How many users it will make Microsoft is not known, but because of these developments, there will soon be in the United States to start an experiment.

Users of a counterfeit version of Windows 7 or 8.1 will be able to make a legal version of its operating system via a mouse click. This can be done via the Windows Store or entering an activation code which is obtained somewhere else. If this make Microsoft allows more users with a genuine Windows version works will expand the experiment and rolling out in other countries.

Google Would Work On Android Version For Desktops

Google is currently developing an Android version for desktop computers, so let sources opposite the Wall Street Journal and The Verge know. Next year, Google would be working with several manufacturers to produce desktop computers running Android.

It would ultimately be the intention of Chrome OS and Android to combine one operating system as supporting and developing two different operating systems is costly and confusing for manufacturers can be. The emphasis on Android does not mean that Chrome OS will soon disappear, the Chrome-based operating system that is used in many cheaper laptops called Chromebooks.

Manufacturers who produce Chromebooks will be able to still use Chrome but also have a choice of Android, says Re / code.Google CEO Hiroshi Lockheimer, senior vice president of Android, Chrome Cast and Chrome OS, leave via Twitter that Chromebooks still much in demand, and Google is Chrome OS remains committed.

Smart Laptop Battery Microsoft Monitors User Behavior

Researchers at Microsoft are working on a smart battery system that monitors user behavior so as to obtain more power from the battery. "Instead of waiting for the perfect battery we use all the technology available today," says researcher Ranveer Chandra.

The researchers have devised a system that different types of batteries in combination with smarter software to laptops and tablets much longer to keep charging. The project is Software Defined Batteries (pdf) called and still is in the research phase. At present, it is often the hardware that determines whether the battery needs recharging, rather than the operating system.

Manufacturers are trying to make batteries or becoming more efficient, but in doing so mainly use better batteries. The developments in the battery field, developments in other areas of computer, such as faster processors and better screens, not able to keep up. In addition, people use their devices more often and for more complex cases. Therefore, there is a need for different options such as quick load for a large meeting or a long load so the laptop during a long flight lasts.

"Everyone wants a better battery and although lithium ion is pretty good, it may be our wishes and needs not keep up," said engineer Julia Meiners Hagen, normally for the development of Microsoft's Surface device is responsible but also working on this project. The software-defined battery system that the researchers devised uses a different approach. For example, the use of different battery packs, which are each optimized for a separate task.

Is then worked together with the operating system in order to determine whether the user is busy with, for example, a Word document, or working on a video. The system uses machine learning to teach the individual behavior of the user, so that the battery consumption can be extended based on how the device is used. "Even the optimization is personalized to the needs of the user," says researcher Anirudh Badam. The system can for example, that the user each day at noon gives a short presentation. This means that the computer would then have to be recharged. Ultimately, the system can also for other devices, such as telephones, can be used.

Microsoft Is Investigating Software Development Bug Free

No more blue screens or installing security updates may appear in the future, but Microsoft researchers say they have found a way to produce bug free software. "Program Verification is the last 40 or 50 years the holy grail in computing," said Bryan Parno, a researcher at Microsoft who has published a paper about the project (pdf).

The researchers warn that they are still far away from a world where large computer programs, such as operating systems, bug-free to be built. Recent developments, however, have made it possible for smaller-scale write software which can be mathematically proven that no errors are present so that the program freezes or contains vulnerabilities.

"These tools finally reach the point in this way so that developers can program software," says Jay Lorch, another researcher who works on the project. This involves improved hardware and faster algorithms. At this time, according to the researchers, it is still too expensive and impractical for example, to develop an operating system in this way, since these types of systems contain millions of lines of code that are often based on earlier work.

Initially, therefore, is especially given to systems where safety and reliability are very important. Also, the researchers focus on systems that communicate only with other computers, since they are more predictable. "People are very complicated, so specifying how a man with a program handles is very complex," said Lorch.

"If we are successful, people will look back over 10 to 15 years and say they can not believe that it has been programmed in this way. It is compared with doctors who operate without anesthetics or sterilized equipment," Parno adds. The project, known as the Iron Fleet bears, this week will be presented at the 25th ACM Symposium on Operating Systems Principles.

Windows Version For The Internet Of Things Will Bitlocker

A special version of Windows for the Internet of Things (IoT) is intended will have several security measures that are also present in the normal versions. Windows 10 IoT Core is a Windows version without the familiar "Windows shell experience." Developers can develop an app for the operating system immediately to the interface of the device.

Windows 10 IoT Core works currently only on the Raspberry Pi and the second MinnowBoard Max, two mini-computers.The operating system is still in development and Microsoft will soon roll out a new test version. This version will also add multiple security to the system, namely Secure Boot and Bitlocker. Microsoft's Bitlocker encryption software that allows both the complete system and individual files can be encrypted.

Secure Boot is a security standard developed by the computer industry. Once the computer is booted, the firmware verifies the digital signature of each element of the boot software, including firmware, drivers and operating system. If all the signatures are correct will restart the computer and displays the firmware control to the operating system. The test version of Windows 10 IoT Core is via the Windows Insider Program download.

Malware On Google Play Infected 200 000 Android Devices

Criminals have managed to place two infected apps on Google Play downloaded between 200,000 and 1 million times. These are two versions of an app called Brain Test. Once users have downloaded the app which tried four different exploits to gain root access. In case this was managed persistent malware installed posing as a system module.

Then the app installed additional applications on the infected machine. In order to prevent removal Brain Test uses two system applications in order to monitor the removal of one of the components. Once one of the parts is removed, the second reinstallation. The malware was discovered by a user who deleted the infected app, but then saw how returning to the unit by itself again.

After being briefed by security company Check Point has one of the infected apps September 15 removed. The first version was removed from Google Play on August 24th. Android Users whose phone has been infected are advised to delete the app. In the case which comes back to the persistent system module is installed, which means that the operating system via an official ROM must be re-installed.

Red Hat Warns Ceph Hacked Websites

Attackers have managed various websites of Ceph to hack, the free software storage platform developed by Red Hat. It involves ceph.com and download.inktank.com. Both websites are hosted outside the infrastructure of Red Hat.

Via download.inktank.com can Ceph Red Hat for Ubuntu and CentOS are downloaded. Ceph.com offers the upstream packages "for the Ceph community versions. The investigation into the hacking of the websites is ongoing, but as seen Red Hat, there is no code on the compromised websites. Yet the software developer says it can not be excluded that the sites any time or compromised code offered.

For both the software download.inktank.com as ceph.com also be new digital keys used with which the software is signed. Users should only use Ceph software that is signed with these new keys. In addition, managers of CentOS and Ubuntu using Ceph precaution download and install the new software autographed. Red Hat notes that managers of Red Hat Enterprise Linux systems need to take any action.

Torrent Tracker Windows Blocks 10 Users

A torrent site where users can download content illegally decided to block Windows 10 users, since the operating system "is nothing more than an espionage tool", so let the administrators know. Visitors to the torrent tracker ITS automatically to a video on YouTube redirected, which claims that all Windows 10 computer monitors.

TorrentFreak reports that also consider two other torrent trackers to not allow users with Windows 10. "Microsoft recently released Windows 10. We want our members to know that we consider to block the operating system on FSC. This means that you no longer running Windows 10 can use the site," according to the administrators of torrent tracker FSC.

Recently, there was a fuss about a Microsoft agreement entered into force on August 1, which states that Microsoft may block pirated games. Some websites think that the agreement applies to Windows 10, but the operating system is not mentioned in the agreement. However, for example, are mentioned Xbox and Windows games from Microsoft, as well as online gaming service Xbox Live.

Israeli Company Working To Not Hack Windows Version

If an Israeli start-up is all the security problems of Windows will soon belong to the past. Morphisec , as the company is called, is working on a Windows version who says he is not hacking. In the first instance, it was the intention to develop a on hacking bar operating system for military applications, such as rockets, and aircraft.

The founders realised then that their work also had commercial applications in preventing zero-day attacks. It is in this case to vulnerabilities for which no security update is available. To protect users from attack memory-specific Windows applications is randomised, so the late founder opposite Business Insider know. Because the memory addresses constantly change, an attacker here not develop and exploit for the leak can not be attacked. Further technical details are, however, not given, and whether and when the operating system is displayed. However, there would now be a beta test.

Researcher: Root Certificates Added Quietly Windows

Microsoft has quietly 18 new root certificates to Windows without notice has been here somewhere. So says a researcher with the alias " Hexatomium ". Root Certificates determine which SSL certificates are trusted by the operating system.

It is therefore important to know which organizations and certificate authority's root certificate is added. The researcher reports that he is the new root certificates through the RCC-auditing tool has discovered. Through the program, users can control which root certificates are heard in the Windows root CA to store and which have been added quietly.

In addition to the SHA1 hash of the license and the name of the associated certificate authority is no additional information is available. On Hacker News lets a user know that the certificate authority named RXC C2 is actually Cisco. Remarkably Cisco sets its own documentation Cisco RXC certificate policy ( pdf ) which certificate authorities should always use meaningful names. Feather in the list of additional root certificates include certificates of Swedish, Tunisian and Indian authorities.

Frisian USB Stick For Anonymous Surfing Costs 999 Euros

A Frisian company has launched a USB flash drive 999 which users can go online anonymously and encrypted communication. The Crypto Boss, as the stick is called, comes with a browser, photo editing suite, accounting, email client and an office suite. Also, there PGP encryption software included to be able to e-mail. It therefore seems to privacy operating system Tails.

By default, the operating system of the Crypto Boss using the Tor network, which users can go online anonymously. Data is stored on the USB drive, so there are no traces on the hard drive of the computer. Furthermore, all data is encrypted by default. To use the Crypto Boss, users must also specify a password.

"The big advantage of Crypto Boss versus others is that we provide a combination of hardware and software that is immediately ready for use. Other privacy-centric operating systems must be downloaded by the user and installed in a very roundabout way to a USB stick. The Crypto Boss is much more user friendly and actually used by everyone from the box, "said the Frisian company behind the stick located in Drachten.

The Crypto Boss comes in three versions. The 32GB version costs $ 999, while versions of 64GB and 128GB respectively cost 1199 euro and 1399 euro. If USB drive seems to be using the Corsair Flash Survivor Stealth. For users who are looking for a similar, cheaper solution is the aforementioned Tails . This is also an operating system to the Internet with anonymous and encrypted communication which also contains various tools like LibreOffice, GIMP and Audacity. It is also free to download and use.

VirusTotal: "Knock Knock Searching With Google For Mac Malware"

A program for Mac OS X that shows what programs and scripts are automatically started is now able to quickly malware via VirusTotal tracks, the online anti-virus service from Google. Knock Knock for OS X is similar to Microsoft's Autoruns for Windows and provides a detailed overview of what all is happening on the operating system.

VirusTotal is a website where users can upload files in order to submit it by 50 different virus scanning. Early this year, Microsoft decided to VirusTotal with Autoruns integrate , allowing Windows users now easily able to detect malware. Patrick Wardle, developer of Knock Knock, has now followed that example and VirusTotal added to his application.

"This tool is very useful for quickly finding malware on Mac OS X systems, and integration with VirusTotal give further momentum to our efforts to protect Mac OS X users," says Emiliano Martinez VirusTotal, which since 2012 part of Google.Last year VirusTotal decided already to the analysis of OS X and iOS malware improve and the corresponding upload tool .

Apple Close Two Vulnerabilities In Mac OS X Yosemite

Apple has released a security update for Mac OS X Yosemite that fixes two vulnerabilities in the operating system, which could allow an attacker at worst arbitrary code with system privileges on the computer. The first problem was in the iCloud Keychain and occurred in the processing of data during the recover of the iCloud Keychain.

An attacker with a "privileged" network position could then execute arbitrary code via several buffer overflows. The second leak that Apple has solved ensured that could run malicious app code with system privileges. Security Update 2015-003 for Mac OS X 10.10.2 Yosemite also includes the contents of Security Update 2015-002 . The updates can be downloaded via the Mac App Store and Apple's download site .

Expert Warns Of Patch Policy Windows 10

Windows 10 has yet to appear, but a security of the Slovak anti-virus company ESET has both end users and businesses warned that Microsoft's patch policy for the new operating system the door for zero-day attacks open.

With Windows 10, Microsoft will roll out updates in several ways. There will be a Long Term Servicing (LTS) branch for companies with important systems. In this case, only security updates will be rolled out, but no new features. Then there is the "Current branch for Business". By computers and devices to set this new feature updates will be rolled out after they have been tested extensively in the consumer and validated.

In this way, systems can be upgraded with great certainty. Talking only about new features. Security updates are still always immediately available. Finally there are the consumers that all updates, both security and new features, immediately received.According to expert Aryeh Goretsky it makes sense to divide Windows users into different groups to test patches. He suspects that the patches are rolled out among consumers and not repaired properly works first before they are distributed to companies.

This approach brings under the expert also has its disadvantages. Consumers and organizations that do not run the enterprise version of Windows 10 could receive less well tested patches and so may have to deal with crashes. Companies on the other hand, may have to wait longer until Microsoft feels that the updates have been tested enough and she gives green light.

Goretsky says the wait is still how the new patch policy of Windows 10 will turn out, but already advises that if the delay with which companies receive updates ensures that the attack surface increases, organizations are better off with an older enterprise version of Windows that receives updates rather than the enterprise version of Windows 10.

Microsoft Allows Users To Download Windows 7 ISO

Microsoft has launched a new website where users with a valid license can download a full version of Windows 7, for example, if they have no CD or want to install the operating system from a USB stick.However, this is only the "retail versions" of Windows 7.

These are versions which are sold in retail stores, among other things. Computers that are supplied as standard with Windows 7 use in most cases, an OEM version and who can not use the " Microsoft Software Recovery download "website. To download users must first give up their license the ISO file, after which the language as well as a 32-bit or 64-bit version can be selected. The ISO is then burn to a CD, but there is also a special Microsoft tool to convert the ISO to a USB stick.

Microsoft points to the site to another page where users ISO files from Windows 8.1 can download without specifying the license key. The difference is that windows 7 without a license key can be installed, after which the operating system 30 days is to be used fully. Windows 8.1, however, install only with a valid license.

Privacy OS Tails adds to bitcoinportemonnee

This week there's a new version of it appeared on privacy-oriented operating system Tails, including a bitcoinportemonnee as addition. Tails stands for The Amnesic Incognito Live System and is designed to leave minimal traces on the Internet. With the advent of Tails 1.3 several vulnerabilities have been resolved, but also added several new features.

The first feature that in the eye is the presence of sprint Electrum , a user for the digital wallet currency bitcoin. Another new feature is keyringer , a program that can be managed in encrypted fashion secrets and exchanged. For this, the software uses GnuPG and Git. Tails is a complete operating system that can be used from a DVD or USB stick. Despite all the attention to the privacy Tails developers recently showed that a daily basis but 10,000 of the privacy OS use.