XP no longer being patched by MS

Even though they keep supporting Internet Explorer 6, they’re not going to support XP?

Microsoft had stated the reason for continuing support for IE6 was that it came with Windows XP and so they had to keep supporting it. Now it turns out that they’re not supporting XP either. Not exactly their road map, but oh well.

XP is thus fully broken, with a security hole in the TCP/IP implementation.

You’re doing well, MS – it took you long enough to fix the hole for Vista et al as well!

Microsoft: No TCP/IP patches for you, XP.

UCSniff updated

UCSniff can be placed on a laptop and put in a network where it will VLAN hop untill it finds the VoIP VLAN channel. It then throws out spoofed ARP packets like a man-in-the-middle attack and gets all voice and video traffic thrown to itself. Together with a plugin called VideoJak they can then insert video loops into the stream, meaning that whoever sees the camera output (the guard) will only see the loop and not what the webcam is seeing.

Surveillance camera hack swaps live feed with spoof video • The Register.

Stolen RAF files are blackmailer’s dream

It turns out that the UK government is absolutely fantastic at keeping your data secure! Not only were the 2 harddrives that went missing last year September with all the RAF’s personell information on it unencrypted; it turns out they contained details of extramarital affairs, drug problems, financial problems all with names and details. The records were used to track personell with potential problems in gaining security clearances!

Sniffing keyboard keystrokes

The Ecole Polytechnique team did its work over the air. Using an oscilloscope and an inexpensive wireless antenna, the team was able to pick up keystrokes from virtually any keyboard, including laptops. “We discovered four different ways to recover the keystroke of a keyboard,” said Matin Vuagnoux, a Ph.D. student at the university. With the keyboard’s cabling and nearby power wires acting as antennas for these electromagnetic signals, the researchers were able to read keystrokes with 95 percent accuracy over a distance of up to 20 meters (22 yards), in ideal conditions.

If pulling keystrokes out of thin air isn’t bad enough, another team has found a way to get the same kind of information out of a power socket. Using similar techniques, Inverse Path researchers Andrea Barisani and Daniele Bianco say they get accurate results, picking out keyboard signals from keyboard ground cables.

Chinese hackers crack iTunes Store gift codes, sell certificates | iLounge News

A group of Chinese hackers has succeeded in cracking Apple%u2019s algorithm for encoding iTunes Store Gift Certificates92, and are creating discounted certificates using a key generator. Outdustry reports that a number of the codes are available on the site Taobao, with $200 cards selling for as little as $2.60. The owner of the Taobao shop offering the cards admitted that the codes are created using key generators, and that he paid to use the hackers%u2019 service. He also said that while the price of the codes has dropped steadily, store owners make more money as the number of customers grows.

Chinese hackers crack iTunes Store gift codes, sell certificates | iLounge News