tag:blogger.com,1999:blog-5019903961354803156Sun, 10 Aug 2008 01:07:06 +0000http://www.Xnet.com.pk/news/noreply@blogger.com (Xnet Solutions)Blogger134125tag:blogger.com,1999:blog-5019903961354803156.post-6427297910981778495Sun, 10 Aug 2008 01:00:00 +00002008-08-10T07:03:26.548+06:00Easy CPE"The last HOPE" talks in audio and video.http://www.Xnet.com.pk/news/2008/08/easy-cpe-last-hope.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-9082587163849939820Thu, 31 Jul 2008 05:54:00 +00002008-08-10T07:07:06.797+06:00Easy CPE23-24 April 2008, Munich - Troopers 08 - get skilled or get ownedhttp://www.Xnet.com.pk/news/2008/07/easy-cpe-troopers-08.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-5203483951545209249Sat, 12 Jul 2008 10:43:00 +00002008-07-12T17:23:56.617+06:00Easy CPEMainly type B videos, but some type A. From the Supernova 2008 conferencehttp://www.Xnet.com.pk/news/2008/07/easy-cpe-supernova-2008.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-1486749488685236302Sun, 06 Jul 2008 09:13:00 +00002008-07-06T15:17:03.951+06:00Easy CPEREcon is a reverse engineering conference, held in Montreal. Videos from 2006http://www.Xnet.com.pk/news/2008/07/easy-cpe-recon.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-8358188570234390108Fri, 23 May 2008 09:47:00 +00002008-05-23T18:04:55.278+05:00Easy CPEHere are a list of web pages where you can watch information security talks and presentations and so earn CPEs that will help you renew your CISSP certification. Free and easy access. 24th Chaos Communication Congress. Torrents of mp4 and mkv files available at the botton of each talks page. Go for the mp4 as these are usually seeded. Defcon 15 and earlier talks are available in mp4 file http://www.Xnet.com.pk/news/2008/05/easy-cpe-watching-conference-videos.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-1482188739681206650Mon, 19 May 2008 08:06:00 +00002008-05-19T13:14:41.121+05:00UPSPowerHere are pictures of Xnet PP2100DC UPS in action. These are all from one location in Karachi. Click on the picture to get a bigger image. Sorry these images are not high quality. http://www.Xnet.com.pk/news/2008/05/online-power.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-6013129089417055387Fri, 02 May 2008 13:45:00 +00002008-05-02T18:55:44.993+05:00HardwareVirusbits protectionWormXnet OS Protector is an intelligent circuit card which protects PC system configuration and protect data on hard disk in simple and fast way. The installation and operation is simple and can be done in minutes without technical staff involvement. The form factor is a small PCI card. The concept is simple. Instead of Blacklisting (ie keeping track of all the new viruses and their signatures) OS http://www.Xnet.com.pk/news/2008/05/hardware-anti-virus.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-5877471540062827435Sat, 12 Apr 2008 07:26:00 +00002008-04-12T12:34:15.284+05:00HOWTOSetting up RAID1 on Mandriva 2008 1.Goal: Setup a system with two harddisks that contain identical data so that if one harddisk crashes, the system survives. 2.The system should still be able to boot without manual intervention. 3.A mail should be send if one harddisk fails. We chose only two harddisks also a CD-ROM or DVD-ROM must be connected to be able to install the system. Installationhttp://www.Xnet.com.pk/news/2008/04/howto-raid1-on-mandriva.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-547649517623857506Wed, 26 Mar 2008 04:56:00 +00002008-03-27T10:10:24.231+05:00Economic and Political SecurityNews ArticlePaper. Paper has been with us for thousands of years. With paper, once you learnt how to read a language, you could read any document. We are now entering the age of electronics. This is a world where most new documents are electronic in form. You cannot read them directly, they are machine readable only and we need hardware and software to do so. Because we are still at the beginning of this http://www.Xnet.com.pk/news/2008/03/document-freedom-what-is-it-and-why-is.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-8487927602554640808Tue, 18 Mar 2008 08:05:00 +00002008-03-18T13:14:59.511+05:00HackBanking and FinanceSo, it was not 'hacking', but 'fraudulent withdrawals'. However the fact is that there is a limit of Rs20,000/- and that is all that a client should be able to withdraw in one day. The attack managed to get Rs20 million from accounts that had zero money in them. Here is an image of the notice published in the papers. http://www.Xnet.com.pk/news/2008/03/national-bank-of-pakistan-refutes.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-6980917903579752369Sun, 16 Mar 2008 08:11:00 +00002008-03-16T13:15:13.455+05:00HackBanking and FinanceNBP security was bypassed by using other Banks ATM cards where the accounts had no balance. ==================================================== NBP admits gang withdrew Rs20m in Multan By Sher Baz Khan ISLAMABAD, March 15: The National Bank of Pakistan on Saturday said that some people had fraudulently withdrawn Rs20 million from its automated-teller machines (ATMs) in Multan, while the http://www.Xnet.com.pk/news/2008/03/national-bank-of-pakistan-admits-gang.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-1481548569529781575Sat, 15 Mar 2008 10:17:00 +00002008-03-15T15:22:31.118+05:00HackBanking and FinanceInsiderLooks like an inside job, with an employee subverting the security system of the ATMs. =============================================== NBP suspends inter-bank ATM service after fraud - By Sher Baz Khan ISLAMABAD, March 14: The National Bank of Pakistan (NBP) on Friday unilaterally suspended its One-Link service with 14 other banks after finding out that a cyber gang had withdrawn http://www.Xnet.com.pk/news/2008/03/national-bank-of-pakistan-atm-network.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-739850919593422434Sat, 23 Feb 2008 09:04:00 +00002008-02-23T14:08:47.048+05:00Black Hat researchers have engineered a way to easily and cheaply crack GSM's encryption By Kelly Jackson Higgins Senior Editor, Dark Reading WASHINGTON -- BLACK HAT DC 2008 -- A pair of researchers has created a low-cost and simple hack to crack the encryption in GSM mobile phones and intercept voice conversations and SMS text messages -- within minutes. David Hulton and a researcher who http://www.Xnet.com.pk/news/2008/02/encrypted-gsm-voice-calls-sms-messages.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-2309312397371432562Fri, 22 Feb 2008 06:39:00 +00002008-02-22T11:48:02.015+05:00InsecuritycryptoHardwareOnce the attacker has access to your hardware it becomes very very difficult to protect your assets. We show that disk encryption, the standard approach to protecting sensitive data on laptops, can be defeated by relatively simple methods. We demonstrate our methods by using them to defeat three popular disk encryption products: BitLocker, which comes with Windows Vista; FileVault, which comes http://www.Xnet.com.pk/news/2008/02/attacking-hard-disk-encryption.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-8067774717251710026Tue, 19 Feb 2008 09:55:00 +00002008-02-19T15:13:17.989+05:00Insecuritycryptoheise Security find that the Easy Nova Data Box PRO-25UE RFID hard drive case by German vendor Drecom sounds promising: hardware data encryption with 128-bit AES, access control via an RFID chip, but actually uses just a simple XOR.http://www.Xnet.com.pk/news/2008/02/fake-crypo.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-9146571816699229552Tue, 15 Jan 2008 09:53:00 +00002008-01-15T14:57:30.114+05:00VPNNews ArticleI found an interesting website all about VPNs over at vpntools.com. It has a lot of articles, but mostly at a basic, introductory level.http://www.Xnet.com.pk/news/2008/01/vpn-tools.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-1842218387309549464Wed, 21 Nov 2007 05:57:00 +00002007-11-21T11:10:58.519+05:00Amusementhttp://www.Xnet.com.pk/news/2007/11/security-and-usability.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-2278390749651939414Wed, 21 Nov 2007 05:48:00 +00002007-11-21T10:52:35.690+05:00cryptoPasswordHaving the MD5, the article discusses how to find the the original password. The solution is to use Google. This is using the big G as a Rainbow table.http://www.Xnet.com.pk/news/2007/11/google-as-password-cracker.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-8267952823498935935Sat, 20 Oct 2007 09:46:00 +00002007-10-20T14:52:34.290+05:00Amusementhttp://www.Xnet.com.pk/news/2007/10/suspicious-behaviour.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-203687240150358216Sat, 13 Oct 2007 06:30:00 +00002007-10-13T11:38:48.535+05:00Amusement Exploits of a Mom. XKCD.http://www.Xnet.com.pk/news/2007/10/sql-injection-kiddie_13.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-609823867347922819Sat, 22 Sep 2007 06:56:00 +00002007-09-22T11:59:41.286+05:00cryptoBackdoorSeptember 18th, 2007 by Adam Bozanich While developing an implementation of IKE for our platform, I noticed an astonishing behavior in the servers I was testing against: Not a single IKE implementation, which included products from the biggest names in network infrastructure, were validating the Diffie-Hellman public keys that I sent. A consequence of this is that any deployment of these servershttp://www.Xnet.com.pk/news/2007/09/widespread-dh-implementation-weakness.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-1821470159327626497Tue, 14 Aug 2007 15:12:00 +00002007-08-15T10:19:37.776+05:00 Pakistan Federal Minister for Information Technology, Awais Ahmed Khan Leghari, takes a keen interest in Xnet Solutions network security products. A birds-eye view of the Xnet Stand The Xnet Marketing Teamhttp://www.Xnet.com.pk/news/2007/08/itcn-2007-pictures_14.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-8094740018134364036Mon, 13 Aug 2007 11:13:00 +00002007-08-14T19:28:06.298+05:00 http://www.Xnet.com.pk/news/2007/08/itcn-2007-pictures.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-5993315687125651782Mon, 30 Jul 2007 05:25:00 +00002007-07-30T10:26:41.239+05:00WirelessVulnerabilitySecunia Advisory: SA26161 Release Date: 2007-07-25 Last Update: 2007-07-27 Critical: Moderately critical Impact: DoS Where: From local network Solution Status: Partial Fix OS: Cisco 4400 Series Wireless LAN Controller Cisco Catalyst 3750 Series Integrated Wireless LAN Controllers Software: Cisco Catalyst 6500 Series Wireless Service Module (WiSM) CVE reference: CVE-2007-http://www.Xnet.com.pk/news/2007/07/cisco-multiple-products-wireless-arp.htmlnoreply@blogger.com (Xnet Solutions)tag:blogger.com,1999:blog-5019903961354803156.post-505075985937474803Mon, 30 Jul 2007 05:21:00 +00002007-07-30T10:24:01.938+05:00VulnerabilityAnti-VirusCVE ID: CVE-2007-3026 Affected Vendor: Panda Software Affected Products: Panda AdminSecure 2006 Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Panda AdminSecure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AdminSecure agent which binds by default to TCP port http://www.Xnet.com.pk/news/2007/07/panda-software-adminsecure-agent-heap.htmlnoreply@blogger.com (Xnet Solutions)