SDS

This is Deja Vu of an attack from years ago where RAM was accessed from the firewire buss.  This study published back in Sept 2011 (that i am late to discover) revisits this attack on Lion.  Security researchers from frameloss published the specifics on an attack and how to avoid it.  Learn how your password could be extracted from your computer’s memory via your firewire port.  Even when you thought it was locked!  Even with FileVault!

Mostly you must turn off fast user switching, and activate a feature that dumps the password for added security.   read all about it here. . .

http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/#more-540

The long wait is finally over.  Due to the diligent efforts of EVERYBODY in the scene,  (@pod2g, @planetbeing, @saurik, @pimskeks, @p0sixninja, @MuscleNerd, and @xvolks) we can finally jailbreak our A5 devices.  iPhone 4s and iPad 2 are now jailbroken and untethered with the latest and most complex jailbreak to date.  Works with iOS 5 or iOS 5.0.1.  Representing hundreds if not thousands of man hours (it even takes forever to run).  Enjoy!  i included a donate link at the bottom if you wish to buy them a beer.

Download Absinthe from Chronic:
http://greenpois0n.com

or Dev-Team Tools here:  (currently CLI only)
http://blog.iphone-dev.org/

Donate to the combined effort. (despite paypal)

how my supposed to blog while driving if Siri isn’t reliable. honestly, the most frustrating part is that the purple bullets that represent the processing of a voice command request just disappear and there’s nothing! no sorry I couldn’t make that work for you, no sorry I’m having trouble connecting to the network right now. nothing. I feel that Siri was far too popular and utilized for the piddly servers that Apple has devoted to the project. in my opinion Apple needs to do two things to resolve this problem. First, they need you reintroduce the voice commands that were available without the network like they have in the iPhone 4 and 3GS. Second, they need to provide more capacity to the Siri network. this way if they got the Siri equivalent of the fail whale, they’d at least be able to handle some of the audio processing that previous phones have been capable of.

The battery problems fixed in apple’s latest iOS update (5.0.1) are a very strong temptation. However, I fear it may delay my inevitable jailbreak. I also imagine that this example of a delta update might even aid the dev team and others working to free our phones of tyranny. Ideally I would like to see a jailbreak able to download and patch the update before installing. Thus maintaining the jailbreak through the update. am I dreaming?

all the ssl blacklists are updates. we can return to thinking we are safe. Apple included the patches in a Security Update, Firefox updated to 6.0.2. Jailbroken iOS users can update or install “sslfix” in Cydia to get the protections that apple has yet to release.

After watching Moxie’s BlackHat talk, we seriously need to fix SSL. It is holding up too many technologies to be this insecure.

Their recents exploits include hacking FBI affiliate Infragard (Atlanta Chapter).  They defaced the website, stole account information, and messed with their users.  Particularly Karim Hijazi of Unveillance.  LulzSec alleges that Karim (in a chat on IRC) offered them money and information to hack and his competition in the security industry.  This kind hypocritical behavior is specifically deplored by hackers.  Hijazi’s company email was posted online and in LulzSec’s official statement they threaten the release of his personal email as well.  LulSec started taking donations with BitCoin.  They used some of the money to pay for servers and their “lulzsecurity.com” domain which appears at present to be down.

AirFlick is a new piece of software that easily lets you send videos and pictures to your apple tv from a computer without hassling with itunes. it is simple, fast, and best of all free!  It’s created by teacher, writer, coder, hacker, and all around great gal, Erica Sadun.

Oficial Site for Erica’s AirPlay related software
http://ericasadun.com/ftp/AirPlay/

The vulnerability has been seen in the wild.  it’s more then theoretical now.  be safe(r), update.

firefox advisories

Or should i say toys? Pwnage Tool is added to greenpois0n and limera1n. So now anyone can update their iOS devise without updating the baseband. Apple TV 2 even added to it’s mighty pwnage!

Apple, announced great new features for OS X! Like facetime and app store (maybe we’ll even get some real package management). Showed off iLife 11 and Mac OS 10.7 Tiger! Many features and software available Today! Tiger is slated for summer of 2011, but facetime beta and iLife 11 are available already. Lastly, new macbook air. Thinner and more solid then every! Also, amazing battery life. I’m looking forward to getting my hands on it.