Sunday, 18 August 2013

How to protect yourself from apps that make Wi-Fi hacking simple

Using public or open Wi-Fi networks without taking your security into consideration is a bad idea. You don't even have to crack the network's passwords to grab tons of data from unsuspecting users on the network-We've shown you how to do it, and how to stop it from happening to you. Now, dSploit, a security toolkit for Android, makes that process so simple anyone can do it. Here's how it works, and how to protect yourself.

What is dSploit?
dSploit is actually a suite of security tools bundled together in one application. It runs on rooted Android (2.3+) devices, its code is freely available at GitHub, and it's actually a great utility if you're a security professional or otherwise enjoy the ins and outs of network security, hacking, and penetration testing. We want to be clear that we're not villainizing the tool here; unlike apps like Firesheep, Faceniff, and Droidsheep, dSploit isn't made for the sole purpose of cracking networks or hijacking user sessions. It can certainly sniff out passwords transmitted in plain text on an open network, and it can crack poorly secured Wi-Fi networks. It can also scan networks for vulnerabilities, crack keys on common routers, and of course, hijack browser, website, or social network sessions and hold on to them. You can see a full list of the tool's features here.

For a security professional, an amateur looking for an affordable way to learn more about network security (or who's been tasked by their office to secure their Wi-Fi but can't afford professional pen-testers), or someone looking to protect their own network, dSploit can be a valuable resource. It can also be a valuable resource for people looking to steal your data. That's why we're going to talk about how it works and how you can protect your passwords and private data from anyone else using it.

How dSploit (and other apps like it) work
dSploit makes it easy to do two things: Sniff out passwords being sent unencrypted, and hijack active browser sessions so you can masquerade as someone who's already logged in to a site or service. In both cases, they're really one-touch operations once you have the app installed. The former is easy to do. If someone is visiting a site, or logging in to a service without using HTTPS or SSL, your password is likely being sent in clear text. Anyone sniffing packets on a network can capture them without having to do any real kind of packet inspection, and once they have it, they'll try it on as many sites and services as possible to see if you use it for other accounts. The video above, from OpenSourceGangster, explains how the app works in detail, and how to use it.

The latter is a bit more intricate. If you're not familiar with session hijacking, it's the process of capturing cookies to exploit a valid active session that another user has with a secured service in order to impersonate that other user. Since no sensitive data like a login or password is transmitted in the cookie, they're usually sent in the clear, and in most cases they're used by web sites and social networks as a way of identifying a user with a current session so the site doesn't forget who you are every time you reload. This is the most common attack vector for apps that sniff out passwords and sessions via Wi-Fi. We showed you how this works when Disconnect, one of our favorite privacy protecting browser extensions, added protection against widget jacking and session hijacking, if you want to see an example.

dSploit approaches session hijacking in a similar manner to the other tools we've mentioned, mostly because it works well. The folks over at MakeUseOf explain how the app works in further detail, including some of the things you can do with it. Many web sites just encrypt your username and password, and once that handoff is made, everything else is unencrypted. While many sites have moved to HTTPS (and there are tools to help that we'll get to a little later), most require you to activate their HTTPS features. Many other sites haven't bothered moving to HTTPS universally at all.

What's the real risk here?
The real risk from tools like this varies. The odds of you encountering someone in your local coffee shop running dSploit, Firesheep, or any other app like them to capture passwords and hijack sessions is pretty slim, but as we've mentioned, it only takes one person to ruin your day.

Someone could just capture as many Facebook or Twitter sessions as they can (after which they can change a user's password and keep the Facebook account for themselves), hijack Amazon shopping sessions and grab address and credit card information, read your email and chats, and so on. The risk goes up with more and more tools available that are easy for anyone to use, and with the number of people out there who simply don't protect themselves by encrypting their data.

How can I protect myself?
Protecting yourself from these tools like it is actually remarkably easy if you put in the effort to actually do it:

* Turn on HTTPS on every site that allows you to connect with it, and install HTTPS Everywhere. This will make sure you're using HTTPS at all times, whenever possible, and none of your web browsing traffic is sent unencrypted.

* Get a privacy-protecting browser extension like Disconnect, which also protects against widget jacking or side-jacking. Disconnect is our favorite, but it shouldn't be the only tool in your toolkit.

* Use a VPN when browsing on public, free, or other open networks. We've explained why you should have a VPN before. We've even explained how to tell if a VPN is trustworthy. Using a VPN is the best way to make sure all of your data is encrypted and safe from anyone else on the same network, whether it's wired or wireless, public or private.

* Use your head, and practice good internet hygiene. Hone your phishing and scam detection skills, turn your BS detecter up to max, and learn how to protect yourself from online fraud. Someone doesn't have to hijack your session or passwords to get to you-they could just as easily replace the website you're on with one that looks like it but insists you give it a ton of data first. Be smart.

* It doesn't take much to use HTTPS everywhere you can, fire up a VPN if you're going to be working from the library, or just not to use public Wi-Fi and wait until you get home or tether to your phone instead (that's always another option). However, if everyone did it, unscrupulous use of tools like these wouldn't' be an issue and only the people who needed them would use them. However, as long as they're so effective, it makes sense for you to take the necessary steps to protect yourself.

Saturday, 17 August 2013

e-ball Computer Technology


A new concept of pc is coming now that is E-Ball Concept pc. The E-Ball concept pc is a sphere shaped computer which is the smallest design among all the laptops and desktops. This computer has all the feature like a traditional computer, elements like keyboard or mouse., dvd, large screen display. E Ball is designed that pc is be placed on two stands, opens by pressing and holding the two buttons located on each side of the E-Ball pc , this pc is the latest concept technology. The E-Ball is a sphere shaped computer concept which is the smallest design among all the laptops and desktops have ever made. This PC concept features all the traditional elements like mouse, keyboard, large screen display, DVD recorder, etc, all in an innovative manner. E-Ball is designed to be placed on two stands, opens by simultaneously pressing and holding the two buttons located on each side. After opening the stand and turning ON the PC, pressing the detaching mouse button will allow you to detach the optical mouse from the PC body. This concept features a laser keyboard that can be activated by pressing the particular button. E-Ball is very small, it is having only 6 inch diameter sphere. It is having 120×120mm motherboard.
E Ball concept pc don't have any external display unit,it has a button when you press this button a projector will pop and it focus the computer screen on the wall which can be adjusted with navigation keys. If there is no wall then it has a paper sheet holder that divides into three pieces like an umbrella just after popping up,and it will show desktop on the paper sheet. Also, the E-Ball PC supports a paper holder and the paper sheet on the holder could act like a screen where you can watch movies or something. This concept PC will measure 160mm in diameter and it was designed for Microsoft Windows OS, sorry about the others. For the moment there is no word on pricing or when it’s going to be available, however, I am sure that everybody would like to see a small spherical PC like this one
Elements of E-Ball
Aren’t you tired of your PC? By his ugly shape and the way that it looks? Well, this is exactly what designer Apostol Tnokovski was feeling when he decided to create the smallest PC ever made. It’s not going to be like a PDA, it’s going to be a PC with all conventional components (mouse, keyboard, normal screen). The concept PC is called E-Ball and it’s shaped like a sphere because in Tnokovski’s opinion this is the best shape in nature and it draws everybody’s attention.E-Ball will feature a dual core processor, 250-500GB HDD, 2GB of RAM, integrated graphic card and sound card, 2 x 50W speakers, HD-DVD recorder, wireless optical mouse and laser keyboard, LAN and WLAN card, modem, Web cam and integrated LCD projector.
e-ball computer design
It contains wireless optical mouse and laser keyboard, and LCD projector.It has around 350-600GB of Hard Disk Drive.It contains 5GB RAM. It has two 50W speakers. It has LAN and WLAN card and a Web cam. When you want to carry it around you can easily “pack it” into a ball. This is a futuristic concept, and this, I think, is how the future computers will look like. This device has an optical keyboard and an holographic display. So you don’t have a physical keyboard and no monitor! Still, the mouse is physical but it fits in to the computer when you want to carry it around. The bad thing about using a virtual keyboard is that you need a smooth surface, otherwise I don’t know how will you be able to use it. It is strange enough to call this device a computer, because it is so small, but as far as I know it doesn’t lack any hardware part and tends to be a future machine found in any house or office. I don’t know exactly how this computer will be powered but I think it will have a powerful battery so you will have a great stand by time.
Working of E-Ball :
E Ball concept pc don't have any external display unit,it has a button when you press this button a projector will pop and it focus the computer screen on the wall which can be adjusted with navigation keys. If there is no wall then it has a paper sheet holder that divides into three pieces like an umbrella just after popping up,and it will show desktop on the paper sheet. Also, the E-Ball PC supports a paper holder and the paper sheet on the holder could act like a screen where you can watch movies or something. This concept PC will measure 160mm in diameter and it was designed for Microsoft Windows OS, sorry about the others. For the moment there is no word on pricing or when it’s going to be available, however, I am sure that everybody would like to see a small spherical PC like this one.
Working of E-Ball

E-Ball concept pc has a laser keyboard that is fully a concept keyboard that is visible when the pc is in working. The keyboard is not physical - it is interpreted by lasers that appear after you press the respective button. It recognizes your fingers with the help of an IR sensor when you are typing at a particular place, while the mouse is a pop out wonder making this an exiting piece of technology.
The software interface of E-Ball concept pc is highly stylized with icons that can be remembered easily that support all type of windows operating system. E-Ball concept pc work very easy while you are making video presentations, listening music watching large screen movies, and chatting on the net.
As years passes, the computer size is becoming smaller. This ball is known as E-Ball and its design is given by Apostol Tnokovski. He was trying to create the smallest PC in the world when he came across this idea.It is shaped like a sphere because in Tnokovski’s opinion this is the best shape in nature and it draws everybody’s attention. you'll see the pop-out laser mouse, a pico projector inside that illuminates either the wall or a sheet of paper for a screen, and that laser keyboard that would almost certainly be a clumsy input device. Fix that, and find a motherboard that’ll fit inside this palm-sized baby, and Apostol might be onto something here.E-Ball will feature a dual core processor, 250-500GB HDD, 2GB of RAM, integrated graphic card and sound card, 2 x 50W speakers, HD-DVD recorder, wireless optical mouse and laser keyboard, LAN and WLAN card, modem, Web cam and integrated LCD projector.

Friday, 16 August 2013

Soon, PC chip that mimics human brain


WASHINGTON: Scientists, including one of Indian origin, are developing a computer chip that mimics the human brain. Today's computing chips are incredibly complex and contain billions of nano-scale transistors, allowing for fast, high-performance computers, pocket-sized smartphones that far outpace early desktop computers, and an explosion in handheld tablets, the researchers said.

Despite their ability to perform thousands of tasks in the blink of an eye, none of these devices even come close to rivalling the computing capabilities of the human brain. But a Boise State University research team could soon change that.

Electrical and computer engineering faculty Elisa Barney Smith, Kris Campbell and Vishal Saxena have taken on the challenge of developing a new kind of computing architecture that works more like a brain than a traditional digital computer.

"By mimicking the brain's billions of interconnections and pattern recognition capabilities, we may ultimately introduce a new paradigm in speed and power, and potentially enable systems that include the ability to learn, adapt and respond to their environment," said Barney Smith, principal investigator of the study.

The project's success rests on a memristor - a resistor that can be programmed to a new resistance by application of electrical pulses and remembers its new resistance value once the power is removed.


Memristors were first hypothesised to exist in 1972 (in conjunction with resistors, capacitors and inductors) but were fully realised as nano-scale devices only in the last decade.

The team's research builds on recent work from scientists who have derived mathematical algorithms to explain the electrical interaction between brain synapses and neurons.

"By employing these models in combination with a new device technology that exhibits similar electrical response to the neural synapses, we will design entirely new computing chips that mimic how the brain processes information," said Barney Smith.

These new chips will consume power at an order of magnitude lower than current computing processors, despite the fact that they match existing chips in physical dimensions.

This will open the door for ultra low-power electronics intended for applications with scarce energy resources, such as in space, environmental sensors or biomedical implants.


LI-FI Technology: Amazing extension to the WI-FI



Whether you’re using wireless internet in a coffee shop, stealing it from the guy next door, or competing for bandwidth at a conference, you’ve probably gotten frustrated at the slow speeds you face when more than one device is tapped into the network. As more and more people and their many devices access wireless internet, clogged airwaves are going to make it increasingly difficult to latch onto a reliable signal. But radio waves are just one part of the spectrum that can carry our data. What if we could use other waves to surf the internet? One German physicist,DR. Harald Haas, has come up with a solution he calls “Data Through Illumination”—taking the fiber out of fiber optics by sending data through an LED light bulb that varies in intensity faster than the human eye can follow. It’s the same idea behind infrared remote controls, but far more powerful. Haas says his invention, which he calls D-Light, can produce data rates faster than 10 megabits per second, which is speedier than your average broadband connection. He envisions a future where data for laptops, smartphones, and tablets is transmitted through the light in a room. And security would be a snap—if you can’t see the light, you can’t access the data.

 Li-Fi is a VLC, visible light communication, technology developed by a team of scientists including Dr Gordon Povey, Prof. Harald Haas and Dr Mostafa Afgani at the University of Edinburgh. The term Li-Fi was coined by Prof. Haas when he amazed people by streaming high-definition video from a standard LED lamp, at TED Global in July 2011. Li-Fi is now part of the Visible Light Communications (VLC) PAN IEEE 802.15.7 standard. “Li-Fi is typically implemented using white LED light bulbs. These devices are normally used for illumination by applying a constant current through the LED. However, by fast and subtle variations of the current, the optical output can be made to vary at extremely high speeds. Unseen by the human eye, this variation is used to carry high-speed data,” says Dr Povey, , Product Manager of the University of Edinburgh's Li-Fi Program ‘D-Light Project’. 
 
Introduction of Li-Fi Technology
In simple terms, Li-Fi can be thought of as a light-based Wi-Fi. That is, it uses light instead of radio waves to transmit information. And instead of Wi-Fi modems, Li-Fi would use transceiver-fitted LED lamps that can light a room as well as transmit and receive information. Since simple light bulbs are used, there can technically be any number of access points.
This technology uses a part of the electromagnetic spectrum that is still not greatly utilized- The Visible Spectrum. Light is in fact very much part of our lives for millions and millions of years and does not have any major ill effect. Moreover there is 10,000 times more space available in this spectrum and just counting on the bulbs in use, it also multiplies to 10,000 times more availability as an infrastructure, globally.

It is possible to encode data in the light by varying the rate at which the LEDs flicker on and off to give different strings of 1s and 0s. The LED intensity is modulated so rapidly that human eyes cannot notice, so the output appears constant.
More sophisticated techniques could dramatically increase VLC data rates. Teams at the University of Oxford and the University of Edinburgh are focusing on parallel data transmission using arrays of LEDs, where each LED transmits a different data stream. Other groups are using mixtures of red, green and blue LEDs to alter the light's frequency, with each frequency encoding a different data channel.

Li-Fi, as it has been dubbed, has already achieved blisteringly high speeds in the lab. Researchers at the Heinrich Hertz Institute in Berlin, Germany, have reached data rates of over 500 megabytes per second using a standard white-light LED. Haas has set up a spin-off firm to sell a consumer VLC transmitter that is due for launch next year. It is capable of transmitting data at 100 MB/s - faster than most UK broadband connections.
 
Genesis of LI-FI:
Harald Haas, a professor at the University of Edinburgh who began his research in the field in 2004, gave a debut demonstration of what he called a Li-Fi prototype at the TEDGlobal conference in Edinburgh on 12th July 2011. He used a table lamp with an LED bulb to transmit a video of blooming flowers that was then projected onto a screen behind him. During the event he periodically blocked the light from lamp to prove that the lamp was indeed the source of incoming data. At TEDGlobal, Haas demonstrated a data rate of transmission of around 10Mbps -- comparable to a fairly good UK broadband connection. Two months later he achieved 123Mbps.



How Li-Fi Works?
Li-Fi is typically implemented using white LED light bulbs at the downlink transmitter. These devices are normally used for illumination only by applying a constant current. However, by fast and subtle variations of the current, the optical output can be made to vary at extremely high speeds. This very property of optical current is used in Li-Fi setup. The operational procedure is very simple-, if the LED is on, you transmit a digital 1, if it’s off you transmit a 0. The LEDs can be switched on and off very quickly, which gives nice opportunities for transmitting data. Hence all that is required is some LEDs and a controller that code data into those LEDs. All one has to do is to vary the rate at which the LED’s flicker depending upon the data we want to encode. Further enhancements can be made in this method, like using an array of LEDs for parallel data transmission, or using mixtures of red, green and blue LEDs to alter the light’s frequency with each frequency encoding a different data channel. Such advancements promise a theoretical speed of 10 Gbps – meaning one can download a full high-definition film in just 30 seconds. 

TTo further get a grasp of Li-Fi consider an IR remote.(fig 3.3). It sends a single data stream of bits at the rate of 10,000-20,000 bps. Now replace the IR LED with a Light Box containing a large LED array. This system, fig 3.4, is capable of sending thousands of such streams at very fast rate.

 


Light is inherently safe and can be used in places where radio frequency communication is often deemed problematic, such as in aircraft cabins or hospitals. So visible light communication not only has the potential to solve the problem of lack of spectrum space, but can also enable novel application. The visible light spectrum is unused, it's not regulated, and can be used for communication at very high speeds.