Google: Companies Must Treat With Respect Hackers

Hackers who find vulnerabilities in companies and organizations, which then report should be thanked and paid, rather than addressing legal. That left Google CEO Eran Feigenbaum during a speech at the Infosecurity trade fair know in London.

"It was as if you told a company that you had broken into their surroundings, they usually respond with legal action. They tried to stop you and made sure you could not tell anyone," Feigenbaum told the audience. "We have chosen a different approach, where we thank the people." According to Feigenbaum get companies thanks to hackers out a new set of eyes to look for problems.

"Even with 450 security professionals who regularly watch our software whether it is safe, you will get by working with the security community an entirely new contributions, bearing in mind things thought that you yourself would think," Feigenbaum showed later on CNBC know . He also advises companies to encourage hackers the "right" to do so by treating them with respect and pay. "It is important to thank them."

New oclHashCat Can Crack Protected PDF Documents

There is a new version of the popular password cracker oclHashcat appeared which now supports the cracking of password-protected PDF documents. Furthermore oclHashcat supports version 1:33 now 150 different algorithms, there is added a PBKDF2 kernel, the multithreaded loading glossaries supported and there are several other minor changes and fixes.

OclHashcat is a program that uses the processing power of the graphics card to crack password hashes. There is also a version called Hashcat that the power of the processor committed. From 1:33 Hashcat version two versions have appeared. A version optimized for video cards with an AMD chipset and a version intended for owners of Nvidia graphics card. Both Hashcat as oclHashcat used by security professionals, security researchers and penetration testers.

Gitrob - "This New Tool Crawls GitHub Sensitive Data"

For developers and organizations that work with GitHub is a new tool appeared which makes it possible to search the platform on sensitive data. GitHub is a popular online platform for software developers that code and files can be shared.

Also can work on projects together over the platform. Many companies and projects use GitHub to host both internal and public projects. Sometimes it happens that employees publish things that actually may not be published. This relates to sensitive data or business with which a system can be made ​​immediately. "This can happen by accident or because the employee does not realize the sensitivity of the information," said Michael Henriksen .

So it still happens regularly that developers publish things as private keys and credentials. Henriksen therefore developed Gitrob , enabling organizations and security professionals can find this kind of sensitive data. The tool collects all the public "repositories" of the organization, as well as all employees and their public repositories. Then all available files are collected and analyzed to see if they match patterns for sensitive files.

Henriksen works for SoundCloud and had to develop a system that monitors GitHub sensitive files. He notes that organizations can look through his tool or no sensitive files roam. In addition, penetration testers and more "offensive" security professionals can use the tool to collect information about a potential target.