You have to hand it to Chinese bloggers - they are determined to get the truth out, no matter what.   OK, they are not facing the death sentence like their fellow counterparts in Iran but nevertheless, they still face prison for their opinions.  At the very least, their work will be deleted by faceless humorless [...]

Filed under: hax | No Comments »

A teenager faces felony charges and could spend decades in prison over allegations that he repeatedly broke into an acclaimed Orange County high school, hacked into computers to change his grades and stole tests — all in hopes of improving his college admissions prospects, authorities said Tuesday.
Omar Khan, 18, should be graduating with his Tesoro [...]

Filed under: hax, lulz, pwned | No Comments »

Gary McKinnon could become the first British hacker extradited to the U.S. for allegedly deleting data and accessing information on U.S. military and NASA computers.

Filed under: hax, news | No Comments »

An attack this week targeting the Metasploit Website redirected visitors to a phony page proclaiming the hack — but the hacking tool site’s servers remained intact.
HD Moore, creator of Metasploit and director of security research for BreakingPoint Systems, says the attack didn’t actually touch the Metasploit servers themselves. The attacker or attackers instead infected another [...]

Filed under: exploit, hax, security | No Comments »

More XSS (Cross-site Scripting) fun! After yesterday’s post I realized that not everyone reads hacker blogs so I feel it as my duty to post it here. Stefano Di Paola and Giorgio Fedon have found a universal XSS in PDF. RSnake found also a vulnerability on local PDF file execution. This is bad people; Every [...]

Filed under: exploit, hax, security | No Comments »

Chinese hackers caused two power blackouts in the United States in the last half decade, according to the cover story in tomorrow’s National Journal. American intelligence sources confirm that the People’s Liberation Army was responsible for intrusions in 2003 that likely caused North America’s largest blackout, which affected three states, parts of Canada, and 50 [...]

Filed under: hax | No Comments »

Here’s a technique we’ll not be adding to our list of fun ways to escalate your complaint: The 18-year-old who recently hacked Comcast.net and took down the company’s homepage and webmail told Wired that it was Comcast’s own fault… The hacker, known as EBK, called Comcast to let them know they’d been hacked. The manager [...]

Filed under: hax | No Comments »

Researchers have hacked a built-in maintenance application found on many smart phones that could open the door to hacking the cellular network itself.
David Maynor, CTO for Errata Security, this weekend at the Summercon security confab in Atlanta will demonstrate a tool built by Errata that provides a peek into the inner workings of the cell [...]

Filed under: hax, security | No Comments »

And school isn’t even out for the summer yet: A 15-year-old student allegedly hacked into his Chester County, Pa., high school’s computer network and stole personal information on 55,000 people.
The student, who attends the county’s Downingtown West High School, reportedly used a flash drive to siphon off the names, addresses, and Social Security numbers of [...]

Filed under: hax | No Comments »

Four Hightower students being investigated after scores were changed for 60 students.

SUGAR LAND — Four high school students are being investigated on suspicion of breaking into the Fort Bend Independent School District’s computer network and changing the grades of at least 60 students, according to court documents and school officials.
Investigators estimated the financial loss to [...]

Filed under: hax | No Comments »

Here is something for all you hackers out there reading my blog: all the videos from the previous year’s biggest and greatest hacker conference — DefCon 15!
I found these videos via this post on Roy/SAC’s blog. He bought a full set of DVDs for several hundred dollars and uploaded them to Google Video! I sincerely [...]

Filed under: hax | No Comments »

The SportsNetwork, a privately held sports website located in Hatboro, PA, has been under attack from hackers for about 24 hours. Early Sunday the site was defaced with “Tibet was, is and will always be part of China” messages. Engineers returned the site to normal, but late Sunday evening the site was again hacked and [...]

Filed under: hax | No Comments »

Click here.
For the unknowing… phpmyadmin is a web-based mysql admin tool. The google query is structured to find installs of phpmyadmin that aren’t password protected. This gives anyone full access to read and modify the database. Also, if the pages were password-protected, Google’s spider wouldn’t have been able to get in to index them in [...]

Filed under: b3st pract1c3s, hax, ugh | No Comments »

SAN FRANCISCO — Cracking a power company network and gaining access that could shut down the grid is simple, a security expert told an RSA audience, and he has done so in less than a day.
Ira Winkler, a penetration-testing consultant, says he and a team of other experts took a day to set up attack [...]

Filed under: hax | No Comments »

Does anybody know what distribution was used?
Something like RedHat or Fedora is pretty significantly hardened right “out of the box”, where there are other distros that aren’t as locked-down.

The MacBook Air went first; a tiny Fujitsu laptop running Vista was hacked on the last day of the contest; but it was Linux, [...]

Filed under: hax, linux, lulz, security | No Comments »