Humble Bundle Offers Collection Of Books On Hacking

Humble Bundle , a platform that offers all kinds of games and books at low prices, now offers a bundle of different hacking books too. It is about 13 DRM-free books from No Starch Press with a value of $ 366. The asking price of Humble Bundle is partly determined by users.

For the first four books may include users decide what they want to pay. For the next five books must be paid at least $ 14.75. The last four books going away for at least 15 dollars. Users may also pay more. A portion of the proceeds going to charity. Also, users can choose how their money is split between the publisher and the charity.

The books are by different authors and deal with practical malware analysis, programming in Python, Designing BSD Rootkits, bitcoin, working with the Arduino and Raspberry Pi, hacking the Xbox and use the Linux command line. Meanwhile, there are 45,000 book bundles sold. The campaign will run until 11 May.

Luxembourgers Develop USB-Cleaning Machine

USB sticks are for years by malware used to spread from computer to computer, but the Computer Incident Response Center (CIRC) of the Luxembourg government has now developed a real USB-cleaning machine to process simple and fast strange USB sticks.

The CIRCLean USB Sanitizer is a solution mean to retrieve documents from untrusted USB sticks. It converts an untrusted document automatically to a readable format and saves the clean file to a trusted or USB stick. As a platform used CIRCLean a Raspberry Pi, a small computer. This means that it is also not necessary to connect the suspect USB flash drive to a computer.

"CIRCLean can as a kind of air gap between the untrusted USB memory stick and the computer to be seen," said the Luxembourg CIRC. The advantage of the device is that no technical knowledge is required and anyone can use it. The software that is running on via the Raspberry Pi GitHub available and can be verified by anyone.

Windows Version For The Internet Of Things Will Bitlocker

A special version of Windows for the Internet of Things (IoT) is intended will have several security measures that are also present in the normal versions. Windows 10 IoT Core is a Windows version without the familiar "Windows shell experience." Developers can develop an app for the operating system immediately to the interface of the device.

Windows 10 IoT Core works currently only on the Raspberry Pi and the second MinnowBoard Max, two mini-computers.The operating system is still in development and Microsoft will soon roll out a new test version. This version will also add multiple security to the system, namely Secure Boot and Bitlocker. Microsoft's Bitlocker encryption software that allows both the complete system and individual files can be encrypted.

Secure Boot is a security standard developed by the computer industry. Once the computer is booted, the firmware verifies the digital signature of each element of the boot software, including firmware, drivers and operating system. If all the signatures are correct will restart the computer and displays the firmware control to the operating system. The test version of Windows 10 IoT Core is via the Windows Insider Program download.

Hacker Makes Tool To Unlock GM Cars Remotely

The well-known hacker Samy Kamkar has a tool designed to cars from manufacturer General Motors (GM) are located remotely open and start. GM offers car owners a service called OnStar with which the car can be found via a smartphone app, opened and started.

Kamkar developed for 100 dollars a small device, the OwnStar that a car or truck should be placed and the communication of the smartphone to the app to intercept. The problem with the app is that SSL be used to exchange encrypted data, but the certificate does not correctly check to ensure that there is communication with the real OnStar servers.

The Ownstar consists of a Raspberry Pi and three radios and can occur as a friendly network. Once the user's GM Remote Link app launch and the smartphone within range of the device is a man-in-the-middle attack is carried out in order to steal the user's credentials. Then these data are from a 2G GSM connection is sent to the attacker. With the login information, an attacker then follow the car, open the doors, start the engine or to sound the horn or alarm.

Starting on distance is not possible, this is still requires a human operator. GM is now working on an update to address the problem, as a spokesperson of the automaker opposite Wired know. During the upcoming Def Con conference in Las Vegas will Kamkar provide more information about his attack. The following video shows already see a short demonstration.

Anonymous Surfing Via Wi-Fi Network In Kilometers

An IP address usually leads to the physical location of an Internet user, but a security researcher has developed a hardware-based solution that makes it possible to surf the Internet anonymously via Wi-Fi networks that are located on kilometers away.

Even if the IP address is traced, the actual location and identity of the user is protected. The solution devised Benjamin Caudill , founder of Rhino Security Labs, the ProxyHam. Anonymity on the Internet is as Caudill under fire, especially for whistleblowers. Although Tor provides some anonymity, there is still a fundamental vulnerability present. Namely, the direct relationship between the IP address and a physical location.

"If your real IP address is detected, the game is over, a big threat if the enemy manages the infrastructure," he tells the notice of the ProxyHam. This device will present at the upcoming Caudill Defcon conference and Internet users must provide more anonymity. The ProxyHam acts as a hardware proxy traffic from the user sends to a Wi-Fi network that is located on kilometers away, says the researcher opposite Vice Magazine.

Hardware

The device consists of a Raspberry Pi computer with Wi-Fi card and three antennas. An antenna that connects to an open Wi-Fi network, for example at a Starbucks or library, and two antennas that send the data to and from the user via a 900Mhz frequency. A user can be located at a position of 4 kilometers. To make the connection ProxyHam the user must connect a 900Mhz antenna on the Ethernet port. An attacker would detect the user will find that only the IP address of the ProxyHam.

The signal emitted by the ProxyHam has such a low frequency that it is difficult to follow. In addition there are in this frequency range of other devices, such as cordless phones, baby monitors and walkie-talkies. Caudill is now working on new features, including an option to destroy the proxy to let themselves be messed with it. The researcher tries to hide the proxy in certain objects like a book. Because of this disguise it can take years before the device according to Caudill is found in a library.