Dear Readers,
It is pleasure for me to announce that I have stared a new Blog http://www.technostorm.net. This site is hosted on High-Level Domain registered from Domain.com and use their premium Hosting.
I will be focusing on that blog now, It will cover variety of subjects from Blogging to Technology news and Review of Interesting Softwares. If you guys like my writing style then that will be a treat for you. It is designed and runned professionally on Wordpress. The Platform of Blogger gave me limited space as a blogger but on Wordpress there are so many Plugin that makes it fun for me to Blog and make is fun for you to Read. So guys Dont Forget to Visit it and Like the Facebook page.

Facebook Page: http://www.facebook.com/ts.official

LINK : http://www.technostorm.net

Last week, a user in Jordan reported seeing a fake certificate for torproject.org. The user did not report any errors when browsing to sites such as Gmail, Facebook, and Twitter, which suggests that this was a targeted attack. The certificate was issued by a company called Cyberoam. We first believed that this incident was similar to that of Comodo and DigiNotar, and that Cyberoam had been tricked to issue a fake certificate for our website.




After a bit of research, we learned that Cyberoam make a range of devices used for Deep Packet Inspection (DPI). The user was not just seeing a fake certificate for torproject.org, his connection was actually being intercepted by one of their devices. While investigating this further, Ben Laurie and I found a security vulnerability affecting all Cyberoam DPI devices.

Examination of a certificate chain generated by a Cyberoam DPI device shows that all such devices share the same CA certificate and hence the same private key. It is therefore possible to intercept traffic from any victim of a Cyberoam device with any other Cyberoam device - or to extract the key from the device and import it into other DPI devices, and use those for interception.

Ben and I wrote a security advisory and notified Cyberoam of this vulnerability at 17:00 UTC on Saturday, June 30. We made it clear that we intended to publish this blog post and the security advisory on Tuesday, July 3, and encouraged them to respond promptly if they had any comments. At the same time, we notified browser vendors and asked that they blacklist the Cyberoam CA certificate in their browsers.
Cyberoam have not yet commented on this issue, apart from acknowledging our first email and saying that they are looking into it. The Cyberoam CA certificate is not trusted, and so browsers will show users a warning (unless someone has already installed the certificate). Users with the Tor Browser Bundle are not affected.

Originally Blogged at: https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372

The patches are no the way due tuesday for the three Critical and six Important issues in Microsoft Products.  Only three of the nine security bulletins are ranked Critical, while the remaining six are rated as Important.
An Intresting thing to notice is that one of the Critical Issue is with IE9 , the flag ship of the Windows Browsers. Now the thing is that it only effects the latest version not any older one. That really means that new mistakes are being found.

"

Many are expecting a patch for CVE-2012-1889: a vulnerability in Microsoft XML Core Services, which is currently being exploited in the wild

," says Marcus Carey @http://www.net-security.org/secworld.php?id=13206

Arab Anonymous hackers on Sunday showed hundreds of Israeli email addresses and their passwords on the website of Anonymous Arab. It is yet unclear which website was hacked to obtain the the emails and passwords.

There was apparently penetration of an Israeli site which cannot be determined at this stage, a site that requires identification by email address and a password, as is usual at forum, content and commercial sites.

[Sources: http://thehackernews.com/2012/07/islamic-anonymous-hacker-post-hundreds.html]

Well here is a master piece. Dariusz Ganski, of Sunny Bank, Kingswood used his Rocket mind and some equipment to tap into BT phone boxes and made 648 calls lasting 43 hours. These calls were worth atleast £1000 and ended up him in Jail for 18 months. It was revealved this guy was making calls for game credits n all that stuff.. It kind a lame. But still he ended up famous!

Japanese legislature had approved a bill that would be a big blow to the Piracy in the country, with penalties on the downloading of the copyrighted material. Once a Law it could end up some lads in jail for two years and fine of $25,000. Now that was enough to make the Anonymous angry.... The Robin Hood of internet freedom and .. you can say now piracy freedom too, Hacked many Japanease Govt Site!

Anonymous took the full responsibility of the attack over their Twitter channed @op_japan . They hit many sites including finance ministry , Supreme court and some political Parties Sites.
They said following in the message :

"To the government of Japan and the Recording Industry Association of Japan, you can now expect us the same way we have come to expect you in violating our basic rights to privacy and to an open internet.

According to the Recording Industry Association of Japan, 4.36 billion files were illegally downloaded in the country in 2010. So all the guys who were worried they should know some one is there for them , when rain is falling down (Read it > Bill is falling down!)

Fifteen years ago a keylogger was exactly what the name implied; software (or sometimes hardware) that logged keystrokes. Back in the days of Microsoft DOS this was all you needed but these days that would only show you half the picture. As technology has advanced so has the way you track and monitor it, especially as the majority of our computer activities now involve the internet.

If you haven't heard of a keylogger before (or computer monitoring software as it's more commonly known these days) it's software that you can install to run silently, hidden on your computer. Once running it monitors everything that goes on on your computer, and using a secret key combination and password you can 'un-hide' the software at any time to view the reports.

The first feature is almost always the ability to record keystrokes. If I had a keylogger on my computer right now it would be recording this as I type it and tell me that it had been typed in Microsoft word, along with the date and time. Good keyloggers will also tell you which website you are typing into, which means you can also record passwords and web based email.

A modern keylogger (or computer monitoring software) will usually take screenshots at set times. This could either be every X seconds/minutes, or simply whenever a new window or website is focused or called. Application use and website visits will also be monitored, along with the date, time and duration of visits.

This is usually the standard set of features you'll find on most keyloggers, a long with a handful of more advanced features. Printer jobs can be monitored, along with which printer was used and the time and date. File activities can also be monitored, which involves logging new, saved, opened and deleted files. Both of these features can be handy for offices, where monitoring documents and print jobs is important.

Remote e-mail reporting is another feature you'll find in a lot of 2012 keyloggers. You'll be able to enter your SMTP details and get the logs sent to your email account, eliminating the need to go back to the actual computer to view the logs. Some software even boasts a remote log in feature, that enables you to log in to the monitored computer in real time to view and read reports.

Although most of these features are becoming common, computer monitoring software can now monitor pretty much any aspect of your technological life. Webcams and microphones can be monitored with some software, meaning you can identify exactly who's using your computer. In fact, keyloggers have even spread to cell phones. A program installed on your cell can tell you everything from exactly where the phone is to who's being texted and called.

The features in todays computer monitoring software are so advanced that whatever your need, you'll find a solution. If you need stealth and a hidden solution, there will be software to match. If you need absolute remote reporting, you'll find something. In fact, there are now so many features that the term 'Keylogger' should be obsolete. 2012 is the year of Computer Monitoring Software.

Lewis Waller, the author of this article runs 'Gecko Monitor' – the powerful and stealthy computer monitoring software. To download a free trial of Gecko Monitor head to http://www.geckomonitor.com/