Researchers Reverse-Engineer Dropbox, Cracking Heavily Obfuscated Python App

rjmarvin writes “Two developers were able to successfully reverse-engineer Dropbox to intercept SSL traffic, bypass two-factor authentication and create open-source clients. They presented their paper, ‘Looking inside the (Drop) box’ (PDF) at USENIX 2013, explaining step-by-step how they were able to succeed where others failed in reverse-engineering a heavily obfuscated application written in Python. They also claimed the generic techniques they used could be applied to reverse-engineer other Frozen python applications: OpenStack, NASA, and a host of Google apps, just to name a few…” Read more of this story at Slashdot.

View original post here:
Researchers Reverse-Engineer Dropbox, Cracking Heavily Obfuscated Python App

Wall Street Traders Charged With Copying Code To Start Their Own Company

coondoggie writes “Talk about starting a business on shaky ground. The Manhattan District Attorney’s office says former Wall Street traders stole electronic trading source code and data from their then trading firm in an effort to start up their own financial business.” Sending yourself pilfered code through your company email account is probably not the wisest plan. Read more of this story at Slashdot.

View original post here:
Wall Street Traders Charged With Copying Code To Start Their Own Company

Dark Day In the AWS Cloud: Big Name Sites Go Down

An outage of one company’s servers might only affect that company’s customers — but when a major data center for Amazon hits kinks, sites that rely on the AWS cloud services all suffer from the downtime. That’s what happened today, when several major sites or online services (like Instagram and AirBnB) were knocked temporarily offline, evidently because of problems at an Amazon data center in Northern Virginia. From TechCrunch’s coverage of the outage: “The deluge of tweets that accompanied the services’ initial hiccups first started at around 4 p.m. Eastern time, and only increased in intensity as users found they couldn’t share pictures of their food or their meticulously crafted video snippets. Some further poking around on Twitter and beyond revealed that some other services known to rely on AWS — Netflix, IFTTT, Heroku and Airbnb to name a few — have been experiencing similar issues today.” Read more of this story at Slashdot.

Read More:
Dark Day In the AWS Cloud: Big Name Sites Go Down

Sources Say Amazon Testing Its Own Wireless Networking Service

Google has captured lots of attention with its municipal fiber efforts in Kansas City and Austin; Amazon, say some anonymous sources, is experimenting with a networking project of its own (distinct from its Whispernet 3G content delivery service) to connect users’ devices to the internet. Rather than fiber, though, Amazon’s tests involve spectrum controlled by satellite communications company Globalstar Inc., according to sources “who asked not to be identified because the test was private. … Amazon continually tries various technologies, and it’s unclear if the wireless network testing is still taking place, said the people. The trial was in the vicinity of Amazon’s Lab126 research facilities in Cupertino, the people said. Lab126 designs and engineers Kindle devices.” Read more of this story at Slashdot.

Visit link:
Sources Say Amazon Testing Its Own Wireless Networking Service

Three Banks Lose Millions After Wire Transfer Switches Hacked

mask.of.sanity writes “Criminals have stolen millions from three unnamed U.S. banks by launching slow and stealthy denial of service attacks as a distraction before attacking wire payment switches. The switches manage and execute wire transfers and could have coughed up much more cash should the attackers have pressed on. RSA researcher Limor Kessem said, ‘The service portal is down, the bank is losing money and reliability, and the security team is juggling the priorities of what to fix first. That’s when the switch attack – which is very rare because those systems are not easily compromised [and require] high-privilege level in a more advanced persistent threat style case – takes place.'” Read more of this story at Slashdot.

Read More:
Three Banks Lose Millions After Wire Transfer Switches Hacked

Researchers Release Tool That Can Scan the Entire Internet In Under an Hour

dstates writes “A team of researchers at the University of Michigan has released Zmap, a tool that allows an ordinary server to scan every address on the Internet in just 45 minutes. This is a task that used to take months, but now is accessible to anyone with a fast internet connection. In their announcement Friday , at the Usenix security conference in Washington they provide interesting examples tracking HTTPS deployment over time, the effects of Hurricane Sandy on Internet infrastructure, but also rapid identification of vulnerable hosts for security exploits. A Washington Post Blog discussing the work shows examples of the rate with which of computers on the Internet have been patched to fix Universal Plug and Play, ‘Debian weak key’ and ‘factorable RSA keys’ vulnerabilities. Unfortunately, in each case it takes years to deploy patches and in the case of UPnP devices, they found 2.56 million (16.7 percent) devices on the Internet had not yet upgraded years after the vulnerability had been described.” Read more of this story at Slashdot.

View the original here:
Researchers Release Tool That Can Scan the Entire Internet In Under an Hour

Effects of Parkinson’s-Disease Mutation Reversed In Cells

An anonymous reader sends this quote from a press release at Eurekalert: “UC San Francisco scientists working in the lab used a chemical found in an anti-wrinkle cream to prevent the death of nerve cells damaged by mutations that cause an inherited form of Parkinson’s disease. A similar approach might ward off cell death in the brains of people afflicted with Parkinson’s disease, the team suggested in a study reported online in the journal Cell on August 15 (abstract). … Mutations that cause malfunction of the targeted enzyme, PINK1, are directly responsible for some cases of early-onset Parkinson’s disease. Loss of PINK1 activity is harmful to the cell’s power plants, called mitochondria, best known for converting food energy into another form of chemical energy used by cells, the molecule ATP. In Parkinson’s disease, poorly performing mitochondria have been associated with the death of dopamine-producing nerve cells in a region of the brain called the substantia nigra, which plays a major role in control of movement. Loss of these cells is a hallmark of Parkinson’s disease and the cause of prominent symptoms including rigidity and tremor. A UCSF team led by Shokat, a Howard Hughes Medical Institute Investigator, used the chemical, called kinetin, to increase mutant PINK1 enzyme activity in nerve cells to near normal levels. ‘In light of the fact that mutations in PINK1 produce Parkinson’s disease in humans, the finding that kinetin can speed mutated PINK1 activity to near normal levels raises the possibility that kinetin may be used to treat these patients, ‘ Shokat said.” Read more of this story at Slashdot.

More:
Effects of Parkinson’s-Disease Mutation Reversed In Cells

Battle of the Office Suites: Microsoft Office and LibreOffice Compared

For a long time, Microsoft Office has been the reigning champ of office suites, but that doesn’t mean the free alternative, LibreOffice, isn’t worth considering. Let’s take a look at how the two compare, and if it’s finally possible to ditch the paid option for the free one. Read more…        

More:
Battle of the Office Suites: Microsoft Office and LibreOffice Compared

Behind the Story of the iPhone’s Default Text Tone

An anonymous reader writes “In a fascinating post from Kelly Jacklin, the long time Apple software engineer details how he helped create the default text alert sound on the iPhone — a sound otherwise known as ‘Tri-tone.’ The history of the the pleasant text alert sound that we’ve all come to know and love stretches all the way back to 1998, nearly 10 years before the iPhone ever hit store shelves.” Here’s Jacklin’s post. Read more of this story at Slashdot.

Follow this link:
Behind the Story of the iPhone’s Default Text Tone

Xerox Confirms To David Kriesel Number Mangling Occuring On Factory Settings

An anonymous reader writes with a followup to last week’s report that certain Xerox scanners and copiers could alter numbers as they scanned documents: “In the second Xerox press statement, Rick Dastin, Vice President at Xerox Corporation, stated: ‘You will not see a character substitution issue when scanning with the factory default settings.’ In contrast, David Kriesel, who brought up the issue in the first place, was able to replicate the issue with the very same factory settings. This might be a serious problem now. Not only does the problem occur using default settings and everyone may be affected, additionally, their press statements may have misled customers. Xerox replicated the issue by following Kriesel’s instructions, later confirming it to Kriesel. Whole image segments seem to be copied around the scanned data. There is also a new Xerox statement out now.” Swapping numbers while copying may seem like bizarre behavior for a copier, but In comments on the previous posting, several readers pointed out that Xerox was aware of the problem, and acknowledged it in the machine’s documentation; the software updates promised should be welcome news to anyone who expectes a copier to faithfully reproduce important numbers. Read more of this story at Slashdot.

View the original here:
Xerox Confirms To David Kriesel Number Mangling Occuring On Factory Settings