A $50 device and an app can easily steal your PC’s log-in

You’d think protecting your computer with a strong password can keep it safe, but apparently, all it takes to steal your log-in credentials is a $50 piece of hardware and an app. According to R5 Industries principal security engineer Rob Fuller, he was able to pilfer usernames and passwords from locked computers using a USB device loaded with a hacking app called Responder. The stolen passwords are encoded, sure, but once they’re in another person’s possession, they can be cracked. One of the small, Linux-powered computers he used (USB Armory) costs $155, but the other (Hak5 Turtle) costs only $50. Computers share log-in credentials with them, because they recognize the devices as trusted Ethernet adapters.

Fuller said the combination worked on all versions of Windows and even on El Capitan, though he still needs to check whether his Mac experiment was a fluke. He also said that the hack was so easy to pull off, he "tested it so many ways to confirm" since he had such a hard time believing it was possible.

He captured the process on cam, which you can watch below, and explained how it works in an email to Ars Technica:

"What is happening in the video, is the USB Armory is being plugged into a locked (but logged in) system. It boots up via the USB power, and starts up a DHCP server, and Responder. While it’s doing this, the victim is recognizing it as a Ethernet adapter. The victim then makes route decisions and starts sending the traffic it was already creating to the Armory instead of the "real" network connection. Responder does its job and responds to all kinds of services asking for authentication, and since most OSs treat their local network as "trusted" it sees the authentication request and automatically authenticates. Seeing that the database of Responder has been modified the Armory shuts down (LED goes solid)."

Of course, this is a non-issue if you exclusively use your computer at home, and there’s nobody living there you don’t trust. But if you tend to bring laptops to coffee shops and other places, check out this prevention technique Fuller recommends, or just make sure you never leave your computer unattended.

Via: Ars Technica

Source: Rob Fuller

from Engadget http://ift.tt/2cFG8kx
via IFTTT

India’s richest man offers free 4G to one billion people

India’s richest man is rolling out a $20 billion mobile network that could bring lightening-fast Internet to hundreds of millions of people.

Indian consumers are already celebrating the arrival of Mukesh Ambani’s new Reliance Jio service, seizing on the billionaire’s promise to deliver rock bottom prices and download speeds that will enable streaming video.

The 4G network, which reaches more than 80% of the country, officially went live Monday with a set of generous introductory offers. Indians will be able to use Jio for free until the end of 2016, and pay as little as 149 rupees ($2.25) a month for data after that.

“Anything and everything that can go digital is going digital — at an exponential rate,” Ambani told investors last week at his company’s annual general meeting. “Life is going digital.”

Only one fifth of adults in India have access to the Internet. Few public Wi-Fi spots exist, and fast broadband connections require infrastructure that is rarely found in poorer urban areas, much less rural ones.

But that is changing fast. If the Jio network succeeds, Ambani will be able to capitalize on a seismic shift that could see hundreds of millions of Indians come online in the coming years — in most cases via a smartphone.

It’s a market that tech industry giants desperately want to crack. Google (GOOG) has installed free Wi-Fi at train stations across India, and Facebook (FB, Tech30) tried to offer a free version of its platform.

mukesh ambani
Mukesh Ambani is taking a big risk building a network from scratch.

Ambani has invested billions constructing nearly 100,000 telecoms towers across India. He estimates that Jio already covers some 18,000 cities and 200,000 villages. By March 2017, his aim is to reach 90% of the population.

Building a national 4G network from scratch represents a major risk for Ambani, who got out of telecoms about 15 years ago after a dispute with his brother, Anil Ambani, who controls Reliance Communications.

The brothers, who together are estimated to be worth $26 billion, have patched things up in recent years. Jio will be able to use radio frequencies owned by Reliance Communications.

Related: 900 million Indians can’t get online. Here’s why.

Rival networks have responded to the launch of Reliance Jio with special offers of their own, making a price war a near certainty. Airtel has slashed its prices for 3G and 4G service by 80%, and Vodafone (VOD) has boosted the amount of data in its plans by nearly 70%.

If Jio, which means “live life” in Hindi, is to become another mega business in Reliance’s stable of energy, media, chemicals and retail operations, the network will have to be able to handle the load from millions of new customers.

On Tuesday in New Delhi, a device on the Reliance network was showing impressive download speeds of 21 megabits per second. With $20 billion at stake, that kind of performance needs to be replicated across India.

— Huizhong Wu contributed reporting.

from Business and financial news – CNNMoney.com http://ift.tt/2cwI4sF
via IFTTT

The Do-Not-Call List Has a Gaping Hole

The “Do Not Call” list isn’t working anymore.

Sure, legitimate telemarketers will refrain from calling you if you’ve put your phone number on it. But criminal telephone spammers will call you anyway because it’s become so easy for them to evade U.S. law enforcement.

Now the Federal Communications Commission is hoping phone companies can fix the problem. “The bad guys are beating the good guys with technology right now,” FCC Commissioner Tom Wheeler said last month at the initial meeting of an industry-led team his agency has assembled to help beat back the robocall “scourge.”

Illustrations by Nicholas Little

Unwanted calls are the top source of consumer complaints to the FCC, with the agency fielding more than 200,000 a year, according to Wheeler. In one common illegal robocall, “Rachel from card services”—just an automated voice—says you qualify for a new credit card in an attempt to get financial information out of you. In one common extortion scheme, a voice claims to be from the Internal Revenue Service.

These calls are easy for scammers to make thanks to inexpensive automatic dialing machines and spoofing tools that hide the source of the call from your phone company and make your phone’s caller ID display a bogus number.

The charge of the “Robocall Strike Force,” which is headed by AT&T CEO Randall Stephenson and includes representatives from more than 30 technology companies, is to develop “comprehensive solutions to prevent, detect, and filter unwanted robocalls.” The group has until October 19 to submit a plan to the FCC.

We already have some tools for blocking and preventing unwanted calls. In addition to the National Do Not Call Registry (which is run by the Federal Trade Commission) there are smartphone apps that can block known spammers or send their calls straight to voice mail. If you have certain landline and mobile services, you can use a product called Nomorobo, which screens incoming numbers against a database of known spam callers.

But spammers can easily get around these defenses by spoofing other numbers, using standard software on voice-over-Internet phone systems, says Henning Schulzrinne, a professor of computer science and electrical engineering at Columbia University, who served as the chief technology officer for the FCC from 2011 to 2014 and will return to that role next year. Spoofing not only gives phony information to you, but also to the telephone service providers, who currently have no way of determining the actual source either. Complicating things further is that many spammers call from other countries, out of the reach of U.S. law enforcement.

That’s why the Internet Engineering Task Force, a group of engineers that develop and upgrade open-source technical standards for the Internet, is working with communications companies on a new way to verify the source of voice-over-Internet calls. The service provider originating the call would add a cryptographic signature to indicate that the caller is legitimately using the number. Separate carriers along the way could then validate the signature and catch spoofed numbers.

How aggressively will telecom companies work on this? Many carriers have little incentive to participate in anti-spam efforts because they profit from increasing traffic of any kind on their networks, says Gail-Joon Ahn, director of Arizona State University’s Laboratory for Security Engineering for Future Computing. But that could change, Schulzrinne says, as the number of customer complaints about robocalls keeps rising.

from Technology Review Feed – Tech Review Top Stories http://ift.tt/2chY7uc
via IFTTT

Best PC Virtual Reality Headsets

Here are the best Virtual Reality Headsets currently available for the PC. Ranging from $400 to over $1000, these are truly the ultimate gaming peripherals.

from Tom’s Hardware http://ift.tt/2chD91t
via IFTTT

How Natalya Brikner Became a Rocket Scientist and CEO Before 30

As Natalya Brikner worked her way through a PhD at MIT’s Space Propulsion Laboratory, she assumed she’d go on to become a professor in the field. She grew up in a small town in northwest Oregon watching the stars and thinking about the aliens among them. Studying rocket propulsion represented a practical application.

But then a project she was working on with a labmate caught the attention of the rocket industry. They created the first working prototype that made use of a propulsion technology for tiny satellites. In 2014, Brikner and Louis Perna founded Accion to commercialize the technology. They demonstrated it in space for the first time one year ago this month.

Brikner and Perna never became professors, but today Brikner—now CEO of Accion—is lining up the first commercial orders for the Cambridge, Massachussetts-based startup’s propulsion systems. Some potential customers are interested in communications, which can include satellites that provide broadband Internet from low-Earth orbit. There are also eager prospects in the military space.

Natalya Brikner is the 29-year-old CEO of Accion Systems.

The dime-sized rocket engines contain a propellant in which charged particles accelerate to enormous speeds to create thrust, which would lend tiny satellites commonly used to collect images and other data from Earth the useful skill of repositioning themselves. The technology could someday be scaled up, too, allowing it to power larger satellites.

Compared to her time as a PhD student, Brikner now does very little research. She spends about 20 percent of her time brainstorming product ideas for proposals and hunting for “technological whitespace” in satellites and other fields, which she describes as extraordinarily fun. During the rest of her time, she’s charged with leading a growing company.

Along the way, Brikner, 29, has built a fanbase. She made the Forbes 2016 30 Under 30 list. Perna says Brikner has always stood out for her ability to be aware and analytical in the moment. She’s confident, with a pragmatic fearlessness.

“Natalya has always been and continues to be decisive,” Perna says. “She knows her preferences and doesn’t waste time on things that aren’t worthwhile.”

Brikner describes herself as hands-off, but still focused on personal and company growth. She likes to push people outside their comfort zones; she makes her employees learn skills and then present them at company seminars to further spread their knowledge.

Brikner says she’s never been afraid to ask for help. There were always advisors during her studies, plus students and entrepreneurs a few years ahead of her, who were willing to help her or back her up. She credits her coach and mentor Anna Rowley—a psychology consultant with a background at large tech companies—with helping her to settle into her role at Accion and keep her team motivated. She also received business and management advice from retired Raytheon CEO Bill Swanson.

Accion’s propulsion system is made to fit inside tiny satellites.

“I’ve found that people are usually extremely willing to help as long as you reach out and admit that you need it,” Brikner says. “People are very generous with their time.”

She started paying that back in high school, when she began dedicating a few hours a week to mentorship. Today she offers her services as a mentor to younger companies. She’s also focused on after-school STEM programs; Brikner says she is exposed to “sexism, and ageism, and other -isms every day,” and does her best to fix them by exposing both boys and girls to the sciences early. She also chooses mentors and advisors who support her values.

Accion’s propulsion system is about the size of a dime.

Accion isn’t Brikner’s first startup. As a graduate student she founded Asteria, which aimed to provide dedicated launches for small satellites based on a micro chemical rocket technology. Brikner says the founding team was a bit sloppy in its creation and decided to close the company before it raised any funds due to its shaky foundation. However, she believes the ideas behind the company still have merit and could someday be used by Accion.

Accion hopes to demonstrate the final version of its thrusters next year. After that, Brikner foresees them helping to dramatically cut the cost of building a satellite. Groups of farmers should soon be able to afford buying time on satellites that they can use to monitor the state of their fields, for instance. Or developing countries without space programs could launch satellites without great expense.

Accion is chasing down its goals with the help of 11 patents and $9.5 million in venture funding, plus a $3 million order from the Department of Defense. But it’s also stepping into the satellite industry at a time when other technologies are progressing rapidly. Mobile phones have pushed imaging and sensing technology to be smaller and smaller, making tiny satellites possible.

“We’re right on the cusp of what will become this huge growth in the small satellite sector,” Brikner says. “What we’re really focusing on is … making our customers’ satellites actually cheap enough to manufacture and launch so they can serve all these other exciting sectors that are popping up.”

from Technology Review Feed – Tech Review Top Stories http://ift.tt/2bFso4r
via IFTTT