Thursday 8 December 2016

Mozilla and Tor Release Urgent Update for Firefox 0-Day Under Active Attack


Tor
Mozilla and Tor have introduced browser updates to sum up a Firefox consistence being hampered to identify men who sue the services related to privacy. It is a flaw in terms of security for the immediate release, which is being exploited on Windows. The official of Tor has assured their users that there isn’t any risk currently figured out in their knowledge. They are unable to discover any exploits for Operating System X or Linux as they have implanted several security measures. But still they have insisted the users to go for the update of their Tor Browser as soon as possible.

The Tor browser is said to forged on the Firebox browser which is an open source introduced by the Mozilla foundation. No sooner did the Officials of Mozilla named Daniel Veditz came to know of this problem, he posted on his blog assuring that the issues has been fixed in some currently issued versions of Mozilla Firefox for all the popular users. He further disclosed that the attack code has been discovered who did the exploitation and measures are being taken against it.

The mishap revealed codes when the targets fed malicious JavaScript related to vector graphics. The culprit sent the IP and MAC address of the target to the server, which controlled attacks. The code resembled the technique which investigated network used by law-enforcing agencies, specially that which identified Tor-protected users who seemed to propagate child pornography.

Further similar step was taken in this regard and it was discovered this vulnerability reducing measure was created by FBI or some law-implementing agency. This shows that how restricted government hacking can become a serious threat to the larger web as anyone can use it to attack Firefox users. A different Mozilla security has proved that it can also affect Mozilla’s Thunderbolt e-mail applications and also the extended support version of Firefox used by Tor browsers. It was suggested that this flaw existed in the browser since five years.

The ridiculous load given by the exploit of code-execution is very much similar to that of FBI which it used in 2013 to discover the ones who used trade child pornography via Tor-anonymized website. The source code to the Tor group was absolutely complete, the exploit could be made easily available to lots of people which they manage to use by making slight changes to it.

Other than an update for Firefox an update to NoScript, which is an extension of Firefox in relation to the Top Browser was also released. NoScript is useful, as it does not allow the users to opt for the sites that can and cannot use JavaScript in the browser. Later for privacy reasons the Tor browser installed NoScript in such a manner that permitted all sites to affiliate JavaScript in the browser. Though this point in terms of privacy is still not clear.

It is advisable that the Firefox and Tor users should fix their problems at once. The users are considered to be protected from the attack by keeping the Firefox security to highest level, that may restrict few sights but it is proven safe.

Wednesday 7 December 2016

Facebook Messenger Launches Instant Games

Facebook Messenger Instant Games

Instant Games Launched by Facebook


Recently Instant Games a series of titles which can be played in the Messenger iOS and Android app, or through the website of the company, had been launched by Facebook. As per TechCrunch, the game is quick to load as they tend to be delivered through HTML5 instead of full downloads. Real time multiplayer presently is not available though players can participate through high score rankings.The preliminary slate of game comprises of titles such as Galago, Pac-Man, Space Invaders together with Words With Friends Frenzy with free of ads as well as in-game purchases at present.

Screenshots of their high scores can be sketched by the players and share games to their Facebook News Feed that would enable t other players to join in promptly. In the case of developers, Instant Games access is in closed beta wherein they need to apply for the same.

As for the public, though the games seem to be accessible in 30 regions, including Canada, Russia, the U.S., Germany, Hong Kong, and Taiwan. Mainland China has been excluded where Facebook has been banned. Facebook has been anticipating that some friendly competition would get the user to spend some more time in Messenger and compete asynchronously through high scores rather than directly simultaneously. Hence it is appropriate to try your luck at times.

Available on iOS/Android


Instant Games, in the long run could earn Facebook ad dollars from the developers who tend to promote their games or a cut in payments but there are no in-games purchases permitted yet. Instant Games has been launched in 30 countries with 17 games from classic developers such as Bandai Namco, Konami and Taito together with latest studios comprising of Zynga and King.

It is made available on latest iOS and Android devices and can be located by hitting the game controller icon in Facebook Messenger thread towards the photos and stickers buttons. Moreover, one could also play through platforms from Facebook on desktop due to an overlaid phone screen.

Social gaming had been dominated by Facebook around 2008 when its desktop app platform had been well-known for playing around for utilities. It had earned a peak of quarter-billion dollars for each quarter on its 30% tax on in-games purchases. Their addictive as well as viral nature enabled Facebook to develop its user count as well as commitments.

Attempts to Build HTML5 Game Platform – Project Spartan


Presently 15% of time on Facebook.con tend to be spent on playing games but the payment profitsseems to have reduced to $196 million in the most recent quarter. Since users seemed to shift to mobile, Facebook noticed that it had been shut out of gaming and only iOS and Android could run native app stores.

 It was they who had benefitted from taxes on in-game payments. In 2011, Facebook had been frantically making attempts in building an HTML5 game platform known as Project Spartan but had failed since the mobile web standard had not been adequately strong to build games which could rival with flashy download with native apps. Over a period of time the developers have identified how to have improved graphics together with responsive gameplay out of HTML5.

Saturday 3 December 2016

Why Light Bulbs May Be the Next Hacker Target

Smarthome

Smart Light Bulbs – Wireless Fault - Hackers Take Control


Supporters debate that the Internet of Things provides several benefits like energy efficiency, technology convenience that can anticipate what one needs and also reduce congestion on the roads. However, placing a cluster of wirelessly connected devices in one spot could be tempting to hackers and would enable them to spread malicious code via air, just like a flu virus on a plane. Researchers had reported in a recent paper release that they had discovered an error in a wireless technology which is generally included in smart home devices like lights, locks, switches, thermostats and several of the components of the smart home of the future.

According to researchers at the Weizmann Institute of Science near Tel Aviv and Dalhousie University in Halifax, Canada, they focused on the Philips Hue smart light bulb and discovered that the wireless fault can permit hackers in taking control of the light bulbs. It may not sound like a great deal. But considering thousands or even hundreds of thousands of internet-connected devices in close proximity and the malware that is created by hackers could spread among the devices on compromising with just one of them.

Popular Websites Experience Outages/Interruption


Moreover they would not need to have direct access to the devices to pollute them. The researchers were capable of spreading infection in a network within a building by driving a car 70 metres away. The hackers had briefly denied access to complete chunks of the internet recently, by developing a flood of traffic which had overwhelmed the servers of a US company known as Dynthat assists in handling key components of the internet.

 Pinterest, Twitter, Reddit together with PayPal were down for most part of a day since their domain name provider, Dyn had been compelled to be offline. It had also resulted in popular Australian websites like ANZ, Coles, The Daily telegraph; Ebay, NAB, 9News and many others, to experience outages and interruption. Security experts are of the belief that the hackers discovered the horsepower essential for their attack by gaining control of a range of internet-linked devices.

Password Partially Blamed for Attack


However the hackers did not utilise the system provided in the report that had been released recently. A Chinese wireless camera company had stated that weak passwords on some of its products could be partially blamed for the attack. Although it had not been the first attempt hackers had utilised the Internet of Things to control an attack, the measure of effort against Dyn had been an eye opener to users who had not realized that the impact of internet-linked things joined in daily life would foresee new risks.

A widely respected cryptographer, Adi Shamir who assists pioneer modern encryption methods and is also one of the authors of the report, had commented that `even the best internet defense technologies would not stop such an attack.The new risk is said to come from a little-known radio protocol named ZigBee which had been developed in 1990s.

 ZigBee is a wireless standard which is used extensively in home consumer devices. Though it has been presumed to be secure, it has not been held up for scrutiny of the other safety methods utilised across the internet. The researchers had discovered that the ZigBee standard could be utilised in creating a computer worm to spread the malevolent software in devices which were internet-linked.

Comma.ai Goes Open Source with Self Driving Car Kit


Comma
Self driving car segment is popularly associated with Google and Apple automated car programs. But most of the people doesn’t known that BMW, Tesla and a number of other firms are working on the segment and each are going through a rapid phase of development to come up with their own version of safe and robust self-driving car within the mid next decade. Comma.ai is a lesser known player in the self-driving companies list but it has done a tremendous research and built a very reliable within a few years of its inception.

Comma.ai has announced that it will be coming up with its own software platform and it has future plans of bringing an associated hardware module which will be made available for free download on Github site. The best thing about this startup is that it will release its software platform and hardware module as an open source entity under the MIT license. This will help in development and engineering of self driving more easier and error free than before both for the enthusiasts and manufacturers alike.

Comma.ai is already works on a selected number of cars

Comma.ai’s developed self-driving platform is currently helps in powering the automation utility to just two cars namely the Acura ILX and Honda Civic. In order to bring the automated driving functionality to these cars this particular self-driving platform has to be supported with the LaneWatch package which is placed in the cars. Comma.ai brings a number of self driving capabilities to the vehicle which includes adaptive cruise control and self steering.

Adaptive cruise control backed with Comma.ai self driving platform allows the car to slow down from any given speed to a slower speed as per the traffic movement ahead while the self-steering allows users to leave the car completely on the auto-pilot kind of mode.

The advantage & disadvantage of self driving platform at a glance

As stated earlier a number of car manufactures, equipment supplier and even well established technology companies are trying their hand at developing their own home-grown self driving cars. The potential of the self driving technology is vast as it will not just bring a drastic fall in the car crashes and ultimate deaths but it will also help in reducing the traffic congestion which has become a chronic disease in mega cities. It does have it won a disadvantage which includes a major and detrimental impact on the jobs along with the economy.

Comma.ai is moving swiftly towards bring self-driving all cars alike

At the inception Cooma.ai offered to develop a self-driving car within $1000 but what it actually meant was that it will help in retrofitting the existing cars with self-driving capability through hardware and software support. On the same lines it is making its self-driving platform in open-source which will help hackers, engineers, communities and manufactures to add new capabilities and extend the application of this platform to a more diverse range of cars regardless of the region and location.

Six Benefits of Using Offshore Software Testing Services

Today, many companies are looking for ways to save money while maintaining an efficient, profitable organization. They want to expand their services to reach consumers on other parts of the globe. Some of these companies are taking advantage of offshore software testing services to help them achieve their business goals. Consider some of the benefits that these companies enjoy by having their software tested by a service located offshore.

A Staff of Experienced IT Professionals

When companies opt for offshore software testing services they are benefiting from the expertise and knowledge of a team of IT professionals. These individuals are familiar with many types of software and know how to identify bugs that can put a company at risk. Also, their practical experience enables them to anticipate possible problems with the software and make the appropriate adjustments to prevent these issues from occurring. This can be an especially valuable service for a growing company. In addition, IT professionals working for a software testing company located offshore are trained in different testing methods such as dynamic and static. A company can rely on the skills and training of IT professionals who work for a reputable software testing service located offshore.

Saving on the Payroll for In-House Employees

Another benefit of having software tested offshore is a company doesn’t have to hire a team of IT experts to work in-house. This reduces the overall payroll and the amount of health benefits a company must provide to workers. Plus, IT professionals working off-shore don’t have to be trained by the company. They already have the training necessary to evaluate and test software. In short, they are ready to do the work! Going offshore for software testing means a company doesn’t have to overburden its own IT staff members who are busy working on other types of projects. QAwerk is one example of a good option when it comes to offshore software testing services.

Access to the Latest Technology

When companies go offshore for their software testing services they benefit from use of the latest technology. These IT professionals are familiar with all sorts of cutting-edge technology that can only contribute to the security and operation of a company’s software. Most companies want to stay ahead of the curve in regard to software used to train employees, manage the payroll, organize departmental projects and much more! They want to be using the newest programs before their competitors in the industry are even aware of their existence. Companies can enjoy this level of technology when they garner offshore software testing services.

Paying Less for More

Going offshore for software testing allows companies the opportunity to pay a reasonable price for this valuable service. Many offshore businesses that do this type of work ask a fair price for their services. In many cases, a company would have to pay in-house IT workers more than they would pay software testers located offshore.

Focused Work

An offshore organization that tests software has a company’s unique goals in mind. They can focus their complete attention on fulfilling the needs of a company. This is a much better situation than asking an overworked, in-house IT staff to try to fit software testing into their busy schedule. The testing work is sent out to a staff that has the skills and talent to complete it.

An Effective Use of Time

An offshore organization that tests software is able to get the testing work done in a prompt, thorough way. A company may need software testing done in a specific amount of time so it can introduce a new project or training program to the staff. This can be accomplished by IT professionals working offshore. Or, maybe a company has a few short-term projects it needs done instead of a long-term one. An offshore software testing service can handle this type of work as well. Companies that want flexibility in their software testing services have that option available to them.

Finally, these are just six of the many benefits that a company can enjoy by using software testing services located offshore. As a note, it’s important for a company to do some research to find out about the reputation and reliability of any software testing service located offshore. Looking at reviews provided by previous clients as well as ratings given to the service by experts in the industry are both helpful. A company that uses offshore software testing can save money while still providing excellent service to its customers.