jimmyLi's blog

http://www.twitter.com/Gr33nRage          Hacker: Gr33nRage Target: www.fisu.gov.ua (Intelligence service of Ukraina) available databases [4]: [*] information_schema [*] mysql [*] szru [*] test Database: mysql [17 tables] +---------------------------+ | columns_priv | | db | | func | | help_category | | help_keyword | | help_relation | | help_topic | | host | | proc | | procs_priv | | tables_priv | | time_zone | | time_zone_leap_second | | time_zone_name | | time_zone_transition | | time_zone_transition_type | | user | +---------------------------+ Database: mysql Table: user [7 entries] +------------------+ | Password | +------------------+ | *a0*7*d*64f*96*b | | 3b**14g*34j**6qt | +------------------+

Blizzard.com.ua – a Ukrainian website dedicated to Blizzard games fans – has been breached by hackers operating under the Anonymous and AntiSec banners.   “About time you get you Content Management Systems updated son?!” they wrote next to the data leak sample. This indicates that the attackers leveraged an unpatched security hole in order to gain access to the site’s databases. The paste published on peoplesliberationfront.net contains a link to a 7 megabyte file that stores 19,106 usernames, passwords, email addresses and other user details. According to Cyber War News , besides this file, there are two other databases out there, apparently containing administrator details and information belonging to World of Warcraft players.  Hopefully, this will act as a wakeup call for the site’s administrators and they’ll address the vulnerability, but also notify their users to ensure that their details cannot be misused. Source:...

Skype, the online phone service long favored by political dissidents, criminals and others eager to communicate beyond the reach of governments, has expanded its cooperation with law enforcement authorities to make online chats and other user information available to police, said industry and government officials familiar with the changes. Surveillance of the audio and video feeds remains impractical — even when courts issue warrants, say industry officials with direct knowledge of the matter. But that barrier could eventually vanish as Skype becomes one of the world’s most popular forms of telecommunication. The changes to online chats, which are written messages conveyed almost instantaneously between users, result in part from technical upgrades to Skype that were instituted to address outages and other stability issues since Microsoft bought the company last year. Officials of the United States and other countries have long pushed to expand their access to newe...

LinkedIn yesterday confirmed that there was a breach of security, and that member passwords were dumped by the attackers. The password hashes have been posted on the Internet in a 250 Megabyte text file, and it is generally assumed that people have started to break the hashes to reveal the underlying passwords. All in all, about 6.5 million LinkedIn user accounts are affected by this. LinkedIn itself has taken counter measures to protect affected users accounts from being compromised. Probably the biggest protection in this regard is that affected account passwords have been invalidated, so that they can’t be used anymore to log in to LinkedIn. All affected members will receive an email from LinkedIn that contains instructions on how to reset the account passwords. LinkedIn notes that these emails will not contain links, to avoid copy cat emails that use this for phishing. It basically comes down to reseting the user account password to receive a new one. Affected mem...

. /$$                 /$$            /$$$$$$                    .| $$                | $$           /$$__  $$                    .| $$       /$$   /$$| $$ /$$$$$$$$| $$  \__/  /$$$$$$   /$$$$$$$ .| $$      | $$  | $$| $$|____ /$$/|  $$$$$$  /$$__  $$ /$$_____/ .| $$      | $$  | $$| $$   /$$$$/  \____  $$| $$$$$$$$| $$      .| $$    ...