hacker

Yahoo Mail hijacking exploit selling for $700

An exploit selling for $700 may put millions of Yahoo Mail users at risk of having their e-mail account hijacked and their browsers redirected to malicious sites.

Marketed by an allegedly Egyptian hacker on a cybercrime forum, the exploit targets a cross-site scripting (XSS) vulnerability in Yahoo.com that allows attackers to steal and replace tracking cookies, as well as read and send e-mail from a victim's account. Typically, an attacker will encode a malicious link in e-mails; the script is executed when the unsuspecting recipient clicks on the link, allowing access to the cookies and other sensitive information. … Read more

Hacker found guilty of massive AT&T-iPad site breach

A hacker has been found guilty of breaking into an AT&T Web site and stealing data of more than 100,000 iPad users.

Andrew Auernheimer, 26, was convicted Tuesday in federal court in New Jersey of one count of conspiracy to gain unauthorized access to computers and one count of identity theft. The jury reached its verdict within hours of beginning deliberations, according to Wired.

After the verdict was announced, Auernheimer tweeted that the outcome had been expected and that an appeal was planned.

Hey epals don't worry! We went in knowing there would be a guilty … Read more

Anonymous escalates its 'cyberwar' against Israel

Anonymous' hacking campaign against Israel to protest its attacks on Gaza escalated today with the release of a list of thousands of individuals who supposedly donated to a pro-Israel organization.

The collective posted a Pastebin document that it said featured names -- and in some cases home addresses and e-mail addresses -- of donors for the Unity Coalition for Israel, which claims to represent "the largest network of pro-Israel groups in the world." The document appears to be quite old: one of the military e-mail addresses belonged to Douglas Feith, the U.S. undersecretary for defense under Bush, … Read more

Israel government Web sites hit by hacker blitz

Israel's government Web sites have been bombarded by hackers in the last couple of days, logging more than 44 million hacking attempts since Israel launched the Gaza air strikes on Wednesday.

One of the attempts was successful, Finance Minister Yuval Steinitz told Reuters, noting that an unidentified site was offline for about 10 minutes before being resurrected. Popular targets include defense-related sites, as well as those of Israel's prime minister, president, and Foreign Ministry.

Most of the attacks have been traced to Israel and the Palestinian territories.

"The ministry's computer division will continue to block the … Read more

Protect yourself from social-network malware (video)

First there was e-mail spam clogging up your in-box. Now there's social malware making its way into your Facebook newsfeed.

If you've ever seen a spammy message from a friend promising a "Free iPad" or "Free" airline tickets, chances are it's socware (pronounced "sock ware") -- a phrase coined by engineering professors and graduate students at the University of California, Riverside, in a new study.

Their study analyzed 12,000 users of MyPageKeeper, a free app they developed to identify suspicious posts and help protect Facebook users from them. Of that … Read more

'Saturday Night Live' Web site defaced in apparent hacking

Hackers appear to have infiltrated and defaced several NBC Web sites, including the page for "Saturday Night Live."

The page's usual content was replaced with a message that the site had been hacked by "pyknik" and scrolling text with the nursery rhyme "Remember, Remember The Fifth of November Gunpowder and Treason Plot." The message also indicated that "user info" and "passwords" had been exposed, but it was unclear where this information was allegedly taken from.

The nursery rhyme is about a conspiracy to blow up the English Parliament in … Read more

Superstorm Sandy 'hurricane hackers' gather to help

A new kind of digital activist has emerged from the devastation of Superstorm Sandy this week -- the hurricane hacker.

This weekend, an in-person "Sandy CrisisCamp" will take place in Boston, cities on the West Coast, and even New Zealand. The events are basically set up as cross between a hack-a-thon and a workshop where geeks come together to design and code projects that can help local communities prepare for and cope with crisis.

Among some of the projects CrisisCampers will be working on are crowdsourcing tools to categorize images for building damage, allowing FEMA to prioritize its efforts, and a simple Google doc that attempts to keep track of all the sources of Sandy recovery data in a single place.… Read more

Homeland Security chief: Banks 'under attack' by hackers

U.S. Homeland Security Secretary Janet Napolitano said today that hackers are "actively" attacking some of the country's largest financial institutions.

According to a report in The Hill, America's top security official issued the warning at a Washington Post event today, but didn't specify the nature of the attacks.

"Right now, financial institutions are actively under attack," The Hill quoted Napolitano as saying. "We know that. I'm not giving you any classified information... I will say this has involved some of our nation's largest institutions. We've also had our … Read more

The 404 1,156: Where your cell phone is sick (podcast)

Leaked from today's 404 episode:

- Another reason not to buy books: Hackers installed credit card readers at 63 stores across the country, New York City included.

- Attention New Yorkers: It's officially time to freak out about Hurricane Sandy.

- SDSU study confirms that five-second rule is pretty much bull.

- A license plate frame that defeats red light camera flashes.… Read more

Apple parts ways with hacker famous for iPhone jailbreaking

Apple's experiment with employing a hacker famous for jailbreaking the iPhone has ended.

Nicholas Allegra, also known as Comex, was hired at Apple after gaining fame with the JailBreakMe, a Web site that simplified the process of removing Apple-installed protections from the phone -- a practice Apple opposes. When Apple hired him as an intern in August 2011, Allegra was a high-profile member of the jailbreaking community, regularly publicizing security vulnerabilities in Apple's iOS software.

However, Apple ended the 20-year-old Brown University student's employment last week, Allegra revealed today.

"So... no point in delaying. As of … Read more