"ORIGININULL"- A SIMPLE BUG THAT ALLOWS HACKERS TO READ ALL OF YOUR FACEBOOK MESSAGES CHAT

TECHBYTE: A security firm Cynet found a critical vulnerability in Facebook Messenger that allow the attacker to read all your personal messages affecting the privacy of one billion Facebook users. Facebook has fixed this issue after reporting by security by security firm.

                     Did you ever imagine that just by a running a website in your browser your all Facebook messages can be read by attacker and you will never know about this , no matter whether you are  using Facebook’s mobile app or web browser. Because these flaws affected both the web chat as well mobile application.

                      For example, if the user opens a website to which the hacker has directed them (via a malicious ad, a security issue, or the hacker’s own website), the hacker can then see all the Facebook Messenger chats, photos and other attachments which the user sends or receives. This happens even if the user sends the messages by way of another computer, or from their personal mobile device!

             Earlier this week , Ysrael Gurt, the security researcher at BugSec and Cynet , reported a cross-origin bypass attack against Facebook Messenger that allows hackers to access your chat, photos and attachments as well. With the help of messenger  Facebook manage the to replace the conventional text messages. Now around one billion active users trust Facebook for their conversations.

        The hack, dubbed “Originull,” enables an attacker to access and view all of a user’s private chats, photos and other attachments sent via Facebook Messenger. Dubbed “Originull,” potentially affects millions of website that use origin null restriction checks and exposes the website visitors to malicious elements.

“This security flaw meant that the messages of 1-billion active monthly Messenger users were vulnerable to attackers,” said Stas Volfus, Chief Technology Officer of BugSec.
“This was an extremely serious issue, not only due to the high number of affected users, but also because even if the victim sent their messages using another computer or mobile, they were still completely vulnerable.”

          Usually, the web browser protects  us from such hacks by only allowing Facebook pages to fetch the information. But, due to this bug, Facebook opens a bridge that allows the sub-sites of the social network to access the information.

                The main issue was misconfigured cross-origin header implementation on Facebook’s chat server domain, which is allowing the attackers to bypass the origin checks and access the Facebook chats from a malicious website.

   This video demonstration shows how the hack is happen --

See also :WHAT IS "MIRAI BOTNET" ? WHY SOMEONE IS TRYING TO SHUT DOWN THE INTERNET OF AN ENTIRE COUNTRY USING IT
 

Read More

HOW TO WRITE YOUR NAME IN UBUNTU , KALI , BASH SHELL OR ANY LINUX TERMINAL IN LESS THAN 5 MINUTES

TECHBYTE: In many videos you may have seen that people write there name in terminal. How they do that ?  Well in this post you will know that how to write your own name in your Ubuntu, Kali , bash shell or any Linux terminal using some simple commands.

                         If you are Linux user then your will have already familiar with terminal. In any Linux version like Ubuntu , bash shell , Kali etc terminal is very important part. We work on terminal , executes commands and also many more things .

         Just thing that whenever you open your terminal and the terminal came with your name written inside it. Cool is it not ?

    In this post you will know that how you write your name in your terminal by just writing Linux commands in your terminal. No matter you are familiar or you are a beginner  to Linux just follow simple steps and feel like a boss.   

If have any problems doing this , write it in your comments..

See Video: https://www.youtube.com/watch?v=sfMioBfKOXk

 

Now Lets start...

• First of all open your Linux terminal .
• Then if you are working as a root user then type this command   

              
           apt-get install figlet

•  If you are not a root user then you should have to type

                 
           sudo apt-get install figlet

      It will install figlet in your system.

• Now you have to  do some changes in "bash.bashrc file" which will be in your etc directory..
  

• So for editing this you have to go in your etc folder.

       
            type cd  /etc

    it will shift you in etc directory . Now you have to find bash.bashrc file in your current directory .

so just type ls command. it will show you all the finds inside etc directory.

• Now you have to do some changes in this file. so open it with editor. I am using leafpad for doing this .

   
             type   leafpad bash.bashrc


Note that the name should be right . Here leafpad is only a  editor you can use your own test editor name in place of leafpad.

• It will open bash.bashrc file in editor . Now you have to make changes in it, so go to the bottom of file and type

      
     figlet  " your name here "


Note that whatever you want to write it must be inside  " " .

• Now save your file by pressing cntrl + s .

  Now you have done . You have successfully written your own name in  terminal.

Here is my video ,Watch it and if you have any problems ask them by doing comments and found useful then like and subscribe also.

Found this post useful Like and Share it or want to give any suggestions just do comments ...

See also : GOOGLE'S AI CREATED ITS OWN SECRET INTERNAL LANGUAGE AND ITS AMAZING !

Read More

GOOGLE'S AI CREATED ITS OWN SECRET INTERNAL LANGUAGE AND ITS AMAZING !

TECHBYTE: Google's Neural Machine Translation System went live in September. Its a machine language based system for performing language translations effectively. Google's AI and language developer thinks that it is using its  own internal language to translate it. 

               Since September Google announced that its Natural Machine Translation System had gone in live. Google Neural Machine Translation (GNMT)   system is a machine learning based system capable of performing language translations effectively .  Google has done a lot of research to enhance its translation capabilities . Now its tries to understand a complete meaning of sentence instead of individual words and phrases to translate . 

GNMT’s creators were curious about something. If you teach the translation system to translate English to Korean and vice versa, and also English to Japanese and vice versa… could it translate Korean to Japanese, without resorting to English as a bridge between them? 

They have developed a concept they call “Zero-Shot Translation”. Google’s Multilingual Neural Machine Translation system is able to translate a pair of languages It involves a single Neural Translation Machine (NMT) model to translate between multiple language pairs.

 The researchers trained the system with examples of Japanese⇄English and Korean⇄English pairs.The system was expected to perform Korean⇄Japanese  translations, although, it was never taught to do so. It performed the Korean⇄Japanese translation up to a reasonable extent.

It produces "reasonable" translations between two languages that it has not explicitly linked in any way, means no English allowed.  This raised a quation-

 According to the researchers, the system has developed its own language, or “interlingua”, using which it relates different languages according to their sentence semantics rather than focusing on sentences phrase-to-phrase.

   

The Multilingual Google Neural Machine Translation has been implemented for Google Translate. Also, 10 of the 16 newest language pairs are being translated using multilingual system.

 

Read More

WHAT IS RASPBERRY PI ? EVERYTHING YOU SHOULD KNOW ABOUT PI..

TECHBYTE: Ever wondered that you have a small credit card-sized computer that you can keep that in your pocket and do mostly all the thing that you do with a desktop or with your laptop. Then yes it is possible, in this post you will know all about RASPBERRY PI.

                               The Raspberry Pi is a credit card-sized computer that plugs into your TV and a keyboard. It is a capable little computer which can be used in electronics projects, and for many of the things that your desktop PC does, like spreadsheets, word processing, browsing the internet, and playing games.

     The Pi is developed by the Raspberry Pi Foundation, which is a registered charity in the UK and aims to promote the study of science and other topics.

               

                  This small sized Raspberry Pi  computer comes with the board features a processor, RAM and typical hardware ports you find with most computers like HDMI port , USB , Ethernet  ports , Card reader and many more things that you use in your desktop.

     This means you’re able to do most things a desktop computer can do such as document editing, playing HD video, playing games, coding and much more.

The main operating system for the Pi is Raspbian and is based of Debian. It is a distribution of Linux so you will probably find it a little different if you’re use to a Windows computer. Besides Raspbian you can install other operating systems such as Ubuntu mare, Ubuntu Core, OSMC, RIS OS, Windows 10 IoT and much more. Recently Linux Based SUSE has released the first official 64-bit Linux-based operating system for Raspberry Pi 3.

   There are 3 different models of the Pi that you will currently find . 

•  The original Raspberry Pi 1 Model A was released on February 2012.
•  Raspberry Pi 1 Model A+ was released in November 2014.
•  Raspberry Pi 1 Model B and Pi 1 Model B+.

       The original and first Raspberry Pi included a 700 MHz processor and came with 256MB RAM.The  Raspberry Pi 2 chip came with a quad-core Cortex-A7 900 MHz CPU and 1GB RAM and a Gpu equal to that of 2001 Xbox.
The Raspberry Pi 3 is the latest version of the Pi and beats version 2 in performance and features.
 that are- 

• Broadcom BCM2387 chipset
• The 1.2GHz 64-bit quad-core ARM Cortex-A53 CPU
• Integrated 802.11n wireless LAN and Bluetooth 4.1
• 40 pin extended GPI
• 4x USB 2.0 ports
• Stereo out and composite video port
• HDMI Port
• CSI (Camera Interface Interface) and DSI (Display Serial Interface) ports
• Micro SD card slot
• Micro USB power source

Recently, the Pi Foundation released an official touch display for Raspberry Pi. If you want to get started  with Raspberry Pi, you need to buy the appropriate parts like Raspberry P board, SD cards, USB power supply cable and other little things.

Found this post useful, comment  your suggestions.  

Read More

" THE APPLE OF CHINA " LAUNCHED A NEW GORGEOUS SMARTPHONE WITH COMPLETELY NEW LOOK - XIAOMI MI MIX

PHONEBHTE: Chinese smartphone maker company Xiaomi launches a new smartphone MI MIX  with great and new look . It has nearly edge-less border  and a front camera at bottom  which makes it different from others. Lets have a look on this fastest selling device of Xiaomi.

            Some are saying that the next iPhone will feature that design that is used in the smartphone made by company which is called "The Apple of China" .  Xiaomi named this phone Mi Mix . The company  revealed that it sold all the 10,000 units of Mi Max in in a record 10 seconds. That's  why  it is called the fastest-selling device in Xiaomi's history.

         The  phone has been launched two days ago and it breaking selling records. The phone replaces the phone's traditional borders and bezels with a front face that is nearly all screen.It's rumored that Apple will likely attempt the same feat on  their next iPhone.

What's making this phone so special?

Xiaomi Mix sports a 6.4-inch screen with advanced black display technology, which offers edgeless viewing experience with 91.3 percent screen-to-body ratio. No other handset boasts this feature as yet. Another highlight of the Mi Mix is its body, which is made of ceramic, including the frame and the side buttons.

              It uses Cantilever piezoelectric ceramic acoustic technology and ultrasonic proximity sensor.Mi Mix is available in two editions, its special edition is coming in 6 GB RAM with 128 Gb  storage power while standard edition have 4 GB RAM and 32 Gb storage.

Specifications of Xiaomi's Mi-Mix-

 

Model Name	Xiaomi Mi Mix
Display	6.4-inch edgeless screen with black screen technology, 17:9 display ratio, large 16:9 viewing area
Oprating System	Android 6.0 with skin MIUI 8.0
Processor	14nm (nanometer)-based 64-bit 2.35Ghz Qualcomm Snapdragon quad–core (Kryo core x 4) CPU, which can clock up to 2.4GHz speed
GPU	Adreno 530
RAM	4GB/6GB
Storage	128GB/256GB
Camera	Main: 16MP camera with PDAF (Phase Detection Auto Focus), LED flash
	Front: 5MP camera with wide-angle view of field
Battery	4,400mAh with Quick Charging v3.0 technology
Network	4G-LTE
Bluetooth	Yes 4.2
Port	Yes, Type C USB port
Wi-Fi	802.11 b/g/n/ac
Audio	HD audio quality, 192kHz / 24-bit resolution with lossless support
GPS	high precision GPS
Other	Ceramic body, Fingerprint sensor,NFC (Near Field Communication) for contact less transaction (Read, write, card emulation, P2P, Mi Pay ready)
Price	Mi Mix 4GB + 128GB: ¥3499 (around $517/€475/Rs. 34,549)
	Mi MIX Pro with 18 karat gold rim (6GB + 256GB) will cost ¥3999(approx. $590/€543/Rs.39,495)

       The next round of the Mi Mix flash sale will be held on November 8.The company on the launch day said that it will manufacture only 10,000 units per month.

Also  see : WHAT IS "MIRAI BOTNET" ? WHY SOMEONE IS TRYING TO SHUT DOWN THE INTERNET OF AN ENTIRE COUNTRY USING IT.

Read More

WHAT IS "MIRAI BOTNET" ? WHY SOMEONE IS TRYING TO SHUT DOWN THE INTERNET OF AN ENTIRE COUNTRY USING IT

TECHBYTE: Over the week , someone just used Mirai Botnet to knock the entire country offline. The attack was done on a small African country Liberia  sending it almost entirely offline each time.Botnet 14 also known as Mirai Botnet was responsible for this attack.

          Mirai is a piece of malware designed to hijack busybox systems (commonly used on IoT devices) in order to perform DDoS attacks. It  turns computer systems running Linux into remotely controlled "bots", that can be used as part of a botnet in large-scale network attacks.

       It uses the insecure Internet of Things devices and directs a massive amount of traffic to an online service or website. Some days ago  the cyber attack on Dyn DNS that resulted in shutting down of many popular websites like Reddit, GitHub, and Netflix.

     

              Now someone is trying to take down the whole Internet of a country by launching massive distributed denial-of-service (DDoS) attacks using a botnet of insecure IoT devices infected by the Mirai malware. Now it appears that Mirai knocked an entire country offline using another Mirai IoT botnet known as Botnet 14.

        Why someone tried this attack on a little-known country Liberia whose population is  around 4.5 million and where fewer than 10 per cent of its citizens have Internet access and the entire country is served by just two companies that share a single fiber optic cable. There is a possibility that someone is just testing the Mirai botnet’s capabilities.

      Security researcher Kevin Beaumont was one of the first peoples to notice this attack and wrote about this attack-

    “Shadows Kill” — Mirai DDoS botnet testing large scale attacks, sending threatening messages about UK and attacking researchers.

    Kevin names it as " Shadows Kill". Now  Mirau Botnet has been open source so anyone can use it . Liberia may be an example of knowing the capabilities of Mirai . The next step could be the entire continent or could have much bigger target.  

Also read: THE NEW 'HTML 5.1' HAS BEEN INTRODUCED TO REPLACE 'HTML 5'

 

Share your suggestions on this article and give your comments.

Read More

THE NEW 'HTML 5.1' HAS BEEN INTRODUCED TO REPLACE 'HTML 5' , AS THE NEW W3C RECOMMENDATION

TECHBYTE: The new standard version of HTML  has been published by W3C as the new recommendation. The World Wide Web Consortium (W3C) has declared the HTML 5.1 as the new official version of HTML with lots of new features to replace HTML 5.

                 HTML is the World Wide Web’s core markup language known as Hyper Text Markup Language. HTML is used to design webpages. The previous version of HTML was HTML 5. Now W3C has been come with its newer version HTML 5.1. 

        The World Wide Web said that this specification defines "the 5th major version, first minor revision of the core language of the World Wide Web: the Hypertext Markup Language (HTML)". In this newer version new features has come to help the web application authors, following its previous version. 

The full HTML 5.1 recommendation is here .

          In the advanced version of HTML new elements have been introduced based on research into prevailing practices. As compared to previous version of HTML , the latest version hasn't come with lots of features. There are a few features you can get excited for.

        The latest version brings the three main features that are the < picture >, < dialog >, and the < summary > & < details > combo tags. Some other features has been removed and some changes are made in the older version .

 List of complete set of changes is here.

       The  W3C  also mentions that W3C member are ready to produce the HTML 5.2 Recommendation in late 2017.  

Find this article useful , give us your suggestions. 

Also see:CRITICAL VULNERABILITY IN WINDOWS DISCOVERED BY GOOGLE.

Read More