September
27

As you know the financial crisis is getting worse all over the world and Brokers have your funds in different Banks. So, you are trading in a reliable Broker but you do not know if your funds are safe or not.

Have you asked your Broker where are your funds deposited?. Imagine that the Bank where your funds are deposited by the Broker goes to bankruptcy…, few Brokers have your funds assured if something goes wrong.

I recommend you to read this interesting article:

http://www.forexpeacearmy.com/forex-forum/forex-basics-boot-camp/3033-wealth-protection.html

6
April
12

My IP neighbors

Posted In: Security, Tricks by Jose

Do you want to know which other websites are sharing the server in your hosting with your own website?. Well, now it´s very easy with this new tool and website:

MyIPneighbors

Maybe you have that curiosity. In my case I am sharing the server with 220 websites!

Enjoy!

0
April
12

Contrary to popular assumption, DRAMs used in most modern computers retain their contents for seconds to minutes after power is lost, even at operating temperatures and even if removed from a motherboard. 

Although DRAMs become less reliable when they are not refreshed, they are not immediately erased, and their contents persist sufficiently for malicious (or forensic) acquisition of usable full-system memory images. This phenomenon limits the ability of an operating system to protect cryptographic key material from an attacker with physical access. 

It can be used on popular disk encryption systems — BitLocker, FileVault, dm-crypt, and TrueCrypt — using no special devices or materials. 

Some more information:

Securosis

CITP

 

 

 

0
June
11

It seems that Stanford University wants to create a new Internet at the long term: more robust and available, inherently secure. Perhaps we should think about anonymity against security. What do you prefer?
Read these websites:

http://cleanslate.stanford.edu/

http://yuba.stanford.edu/ethane/

For more information download this WhitePaper: CleanSlateWhitepaperv2

0
June
2

There a lot of programs to encrypt your files, folders or devices (pen drives, hard disks, etc).

I recommend you a free open source software, it works with your Windows XP/Vista/200/2003 and Linux operative system: truecrypt

It´s very easy to use, and for example you can create a file with 700/800 MB or 4,7 GB of capacity and then save this file in your cd/dvd recorder, or you can create a file with the capacity of your choice to save it in your usb pen drive. You can even encrypt your hard disk/pen drive entirely: your information will always be encrypted and safe.

You only need to have this program installed. Once created this encrypted file you only need to load it with truecrypt, type your password, click on “mount” and a new folder will be created in “My PC” to read or storage your information. When you finish click on “dismount” and this folder will dissapear from “My PC”. Nobody will know what kind of file you have in your computer, only the choosen name of this file.

You can download this program with the tutorial here

6
May
29

Vista cracked

Posted In: Security by Jose

I don’t support piracy, I am only reporting the news.

A widely available release, located at the usual pirate havens, from a scene group entitled ‘NoPE’ (which doesn’t appear to have released much else) has quickly become the most highly sought-after asset of eye-patched, peg-legged, shoulder-mounted-parrot pirate types.

Vista has been leaked in every conceivable form and in all its various releases and flavors, but has still remained difficult to crack for the average swashbuckling black-beard.

Various timer programs forcing the activation to hold off indefinitely and other cracks haven’t come close to the efficiency of the recent OEM BIOS emulation tool-kit that has floated about - but which is significantly more difficult to use that a ‘normal’ crack or serial.

The NoPE release has a major key difference to other previous pirated copies of Vista - it is completely cracked, the product appears activated, updates work, and no key needs to be entered, straight from the installation media without any effort on the part of the pirate.

We presume that the hackers have managed to replace the Vista image on the DVD, with the pre-cracked version. Microsoft moved to an image-based install with Microsoft Vista, as opposed to the usual convoluted set up process.

Several readers have reported it working perfectly.

It’s taken a few months since the launch of Windows Vista, but the product now seems to be successfully cracked, and even simpler to install than previous leaked copies of Windows XP - which always required a serial.

It remains to be seen if Microsoft’s new anti-piracy measures, coupled with Windows Update, will be able to counter-measure this new release, even so, now the pirates have found a method to install pre-cracked versions on the installation media, Microsoft will have a significant fight on its hands to keep Vista piracy-free.

Source:  http://uk.theinquirer.net/?article=39679

Hack: Vista Loader 2.0 OEM Bios Emu (Google is your friend)

2
May
6

Rootkits

Posted In: Security by Jose

I think that a lot of people trust in their installed security programs and never heard about rootkits. You could have got some of them in your operative system: windows, linux…

It’s more probable that you could have some of them if you use windows o.s., in this case your security is compromised yet. Your security software: antivirus, firewall, antispyware, etc… means nothing. Someone could be controlling your machine and you will never know it.

If someone is able to install in your computer a rootkit, then you need to delete it but sometimes the unique solution is to format your hard disk and installing your o.s. again.

Remember: It doesn’t exist 100% security.

I recommend you to visit this webpage: http://www.antirootkit.com/ and download some of these antirootkit programs to check your computer.

I recommend these ones if you use windows o.s.:

- F-Secure Blacklight Beta

- Panda Anti-Rootkit (Tucan)

- RootKit Detective

- AVG AntiRootkit

- Rootkit-Revealer

If you use GNU/Linux or bsd you can install from your repositories one of these tools:

- chkrootkit

- Rootkit Hunter

For Macintosh:

- OS X Rootkit Hunter

You will be surprised how many invisible applications or hooked processes you could have been running. But be careful, some security programs use to hook some of your applications to work properly. Read from google if you find suspicious/invisible applications running inside your o.s.

Read some more about rootkits (remember: google is your friend). You can also visit this Blog: http://www.antirootkit.com/blog/

There is another solution: use a live cd: knoppix is the first and one of the best, although there are a lot of these live-cds out there (most of them use GNU/Linux o.s. and they are very easy to use).

Nobody can install a malicious program into your cd, but be careful: you must take some other precautions surfing internet: phishing, redirections, etc.

2
April
13

IP ID field

Posted In: Security by Jose

Each original IP packet has a set of values (source address, destination address, protocol, identification, fragment offset, bit MF -more fragments-…).

In a flow of packets with certain values, the IP ID field will vary for each packet (usually increasing it in a unit), thus identifying univocally each one of the packets.

So, if we would be receiving a flow of packets (for example in a tcp connection) sent by a system with an implementation of the IP protocol like this one, we would see a continuous sequence of IP ID numbers like 44567, 44568, 44569…

Actually it’s very usual to find in computer networks devices such as NATs (Network Address Translators) and load-balancers. These devices are generically denominated “middle-boxes” and they mask by means of a network address an amount of different devices.

For example, behind this IP address: 128.0.0.1 (the visible IP to the outside) could be other devices behind and invisible to everybody. But although the existence of more than one system behind the same IP address is transparent to all the users, it’s possible to detect network configurations like the mentioned one through the “Identification” (ID) field.

Let’s go. Suppose that the system 128.0.0.1 has a load-balancer that distributes different requests to a “farm” of servers. Using the utility hping (http://www.hping.org) we could send an amount of connection requests (SYN segments) and observe the IP ID field of the obtained answers.

For example:

#hping2 -c 10 -i 1 -p 80 -S 128.0.0.1

HPING 128.0.0.1 (eth0 128.0.0.1): S set, 40 headers + 0 data bytes

46 bytes from 120.0.0.1: flags=SA seq=0 ttl=56 id=57645 win=16616 rtt=21.2 ms

46 bytes from 120.0.0.1: flags=SA seq=1 ttl=56 id=57650 win=16616 rtt=21.4 ms

46 bytes from 120.0.0.1: flags=SA seq=2 ttl=56 id=18574 win=0 rtt=21.3 ms

46 bytes from 120.0.0.1: flags=SA seq=3 ttl=56 id=18587 win=0 rtt=21.1 ms

46 bytes from 120.0.0.1: flags=SA seq=4 ttl=56 id=18588 win=0 rtt=21.2 ms

46 bytes from 120.0.0.1: flags=SA seq=5 ttl=56 id=57741 win=16616 rtt=21.2 ms

46 bytes from 120.0.0.1: flags=SA seq=6 ttl=56 id=18589 win=0 rtt=21.2 ms

46 bytes from 120.0.0.1: flags=SA seq=7 ttl=56 id=57742 win=16616 rtt=21.7 ms

46 bytes from 120.0.0.1: flags=SA seq=8 ttl=56 id=57743 win=16616 rtt=21.6 ms
46 bytes from 120.0.0.1: flags=SA seq=9 ttl=56 id=57744 win=16616 rtt=21.3 ms

— 128.0.0.1 hping statistic —

10 packets tranmitted, 10 packets received, 0% packet loss

round-trip min/avg/max = 21.1/21.3/21.7 ms

As you can see there are 2 numerical sequences to the IP ID field. This shows that the system 128.0.0.1 is in fact a load-balancer who distributes the received requests to 2 different systems, and these last ones are who really are in charge to process the information.

With this same technique it’s possible to detect, in many cases, the amount of existing systems behind other types of middle-boxes, such as NATs.

But not only that, you can also detect IP aliases (an “ip alias” is an ip who belongs to a network interface who it already has another address assigned). For example:

128.0.0.1, 172.0.0.1 and 170.210.17.150 could belong to the same network interface.

So, using hping like I used before we can find out (observing the IP ID field) if an IP is an alias of other different IP or not. We could send some requests to the first IP address and analyze the IP ID values, and then we could do the same with the other IP. If they follow the same pattern we will know that this address is an alias.

Well, not all systems follow this pattern increasing in a unit the transmitted packet. Some other systems use other ones, like maintaining it constant in some predetermined value, or they increase it in a certain amount. For example +256 for each packet transmitted to the flux of packets (for example in a tcp connection).

So, following the pattern’s variation of the IP ID field, you can determine the possible operative system. Although this information will contribute to the detection of that operative system, the result will be slightly precise.

Also with this technique you can find out if some machine is sending information to other machines and the amount of data sent…

Do you know how? ;)

The solution for these problems to reveal such type of information consists in “randomize” the identification field of the packets sent. In the communication protocols we should make possible to randomize the maximum amount of values.

Systems like OpenBSD (http://www.openbsd.org) realize this operation. It can avoid some attacks or obtaining some extra information like the one I’ve posted in this article.

0
March
24

Vmware

Posted In: Security by Jose

Perhaps some of you are using Gnu/Linux and you would like to have a windows operative system inside. It’s very useful if you need to install some other programs that it’s impossible to find in Gnu/Linux o.s. or if you don’t want to install windows but you need some of those programs.

For example I use marketiva and NorthFinance brokers to trade in forex through my Ubuntu Gnu/Linux :D

Well, this how-to is only about installing vmware player in Ubuntu.

You need:

- Windows CD

- vmware-player installed

First of all you need to install vmware-player. f you use the console you only need to write:

sudo apt-get install vmware-player (type your password and enter)

if you prefer graphics go to System-Administration- Synaptic and use the search function to find vmware player (type vmware and click on search), then you only have to click on vmware-player and Ubuntu will install the rest (I suppose that you know how to install programs in Ubuntu).

Well, now you have installed vmware-player. Now you need to create the virtual machine file.

Go to this link: easyvmx

In this website you only need to choose your settings and it will give you a file to download. If you need more options you can also go here
For example:

General Settings

Virtual Machine name: xp
Virtual Machine operating system: Windows XP Professional Edition

Virtual Machine Memory Size: 320 MB

Virtual Machine Disk Size: Disk Size 4,7 GB (Fits in a DVD)

Now, click on Create Virtual Machine, and download that file in your desktop. Once downloaded, unzip this file to a folder of your choice and then double click on the vmx file to start your virtual machine (for example: xp.vmx).
Now you can insert your Windows XP CD into your CDROM drive, and start installing windows!

Now you have windows installed. So, everytime you need to use your windows s.o. enter into this folder and click on the xp.vmx file. If it gives you some errors go to properties and tell Ubuntu that this file must be open with vmware-player.
Yes, you have installed windows but it goes very slow…

Well, you need to install vmware-tools inside the vmware.

How?, it’s easy: you need the windows.iso file. It comes with vmware-workstation, not with vmware-player. But don’t worry, I have this file for you, you can download it into your vmware folder from here:

http://noponzi.com/windows.iso

Now you only have to edit the xp.vmx file (not xp.vmdk) and change the lines about cdrom to mount windows.iso.

- Make a copy of the original xp.vmx file (for example with the name: xp_bk.vmx)

- Open your original xp.vmx file and change these lines:

ide1:0.present = “true”

ide1:0.fileName = “auto detect”

ide1:0.deviceType = “atapi-cdrom”

with these other lines:

ide1:0.present = “true”

ide1:0.fileName = “windows.iso”

ide1:0.deviceType = “cdrom-image”

Save this file and now open again your vmware with windows (clicking on your xp.vmx file). When you are in your windows o.s. go to open the cdrom and click on setup.exe. Once installed close your windows with vmware.

Now you need to delete the original xp.vmx file and rename the xp_bk.vmx file to the original name xp.vmx

That’s all. Now your windows will go faster and you have a windows operative system in your Ubuntu!

0
February
18

Interesting toolbar

Posted In: Security by Jose

It can be very interesting to install this DD (Due Dilligence) toolbar in your browser: it works with Explorer and Firefox. You can test some programs out there with the tools that this toolbar provides.

It’s a pity that this toolbar only works with windows o.s.

You can install this toolbar here:

Online Investment Due Diligence Toolbar

0