[SECURITY] Fedora 22 Update: torbrowser-launcher-0.2.4-1.fc22

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

[SECURITY] Fedora 23 Update: torbrowser-launcher-0.2.4-1.fc23

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

Adversary Resistant Computing Platform: SubgraphOS

Subgraph OS is an adversary resistant computing platform. The main purpose of Subgraph OS is to empower people to communicate, share, and collaborate without fear of surveillance and interference. What this means in practical terms is that users of Subgraph OS can safely perform their day-to-day...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

OnionCat - An Anonymous VPN-Adapter (P2P layer 3 VPN based on Tor or I2P)

OnionCat is a VPN-adapter which allows to connect two or more computers or networks through VPN-tunnels. It is designed to use the anonymization networks Tor or I2P as its transport, hence, it provides location-based anonymity while still creating tunnel end points with private unique IP addresse...

Locky Ransomware Now Part Of Massive Spam Attack

Researchers are tracking a massive spam campaign pelting inboxes with Locky ransomware downloaders in the form of JavaScript attachments. The huge spike, reported by security firm Trustwave, represents an extraordinary uptick in the attempted distribution of the Locky ransomware. Trustwave said...

On FBiOS, Tor, Operation Blockbuster, and RSA 2016

Mike Mimoso and Chris Brook discuss the news of the week including the ongoing FBiOS battle, a judge’s confirmation that the DoD funded research to uncloak Tor users, and news surrounding Operation Blockbuster. They also preview next week’s RSA Conference in San Francisco, Calif. Download: Music ...

Judge Confirms CMU Paid to Break Tor

A U.S. district court judge has confirmed what has probably been the worst-kept secret in security, that Carnegie Mellon University’s Software Engineering Institute was indeed contracted by the Department of Defense to study how to break Tor anonymity. A motion to compel discovery filed by Brian...

Judge Confirms Government Paid CMU Scientists to Hack Tor Users for FBI

Everything is now crystal clear: The security researchers from Carnegie Mellon University CMU were hired by the federal officials to discover a technique that could help the FBI Unmask Tor users and Reveal their IP addresses as part of a criminal investigation. Yes, a federal judge in Washington...

Ricochet — Most Secure Peer-to-Peer Encrypted Messenger that Sends No Metadata

There are several encrypted messaging apps for mobile and desktop platforms that shipped with "The Most Secure" tagline but ends up in de-anonymizing the real identity of its users in some or the other way. In fact, very few encrypted messaging apps available today deal with the core problem of...

How Just Opening an MS Word Doc Can Hijack Every File On Your System

If you receive a mail masquerading as a company's invoice and containing a Microsoft Word file, think twice before clicking on it. Doing so could cripple your system and could lead to a catastrophic destruction. Hackers are believed to be carrying out social engineering hoaxes by adopting...

Locky Ransomware Borrows Tricks from Dridex

It’s been difficult to keep track of all the different strains of ransomware that have plagued users over the last year or two. Unlike many of them the latest to grab headlines is spreading through a decidedly old school vector: document-based macros. Named Locky, the ransomware appears to borrow...

Deep Web Search Engines to Explore the Hidden Internet

Do you know: There is a vast section of the Internet which is hidden and not accessible through regular search engines and web browsers. This part of the Internet is known as the Deep Web, and it is about 500 times the size of the Web that we know. What is DEEP WEB? Deep Web is referred to the da...

Tor: [tor] pre-emptive defenses, potential vulnerabilities

Replacing all tormalloc calls with torcalloc and tormalloczero ============================================================== Zeroing memory upon allocating it will prevent vulnerabilities that consist of transmitting data buffers which are not wholly initialized with the intended data or contain...

Default Apache Configuration Can Unmask Tor Hidden Services

Attention Tor Onion Hosters! A year old loophole in Apache Web Server, uncovered by an unknown Computer Science Student, could potentially unmask the real identity of .onion-domains and servers hidden behind the Tor-network. Although the loophole was reported on Reddit and to the Tor Project mont...

Tor: [tor] control connection pre-auth DoS (infinite loop) with --enable-bufferevents

In control.c, this is the loop that retrieves data from the input buffer of the connection, or returns if no complete linefreed-terminated line is available connectionfetchfrombufline returns 0. c 4225 while 1 4226 sizet lastidx; 4227 int r; 4228 / First, fetch a line. / 4229 do 4230 datalen =...

Tor: libevent (stack) buffer overflow in evutil_parse_sockaddr_port

in evutil.c: c 1798 char buf128; ... ... 1809 cp = strchripasstring, ':'; 1810 if ipasstring == '' 1811 int len; 1812 if !cp = strchripasstring, '' 1813 return -1; 1814 1815 len = int cp-ipasstring + 1 ; 1816 if len intsizeofbuf-1 1817 return -1; 1818 1819 memcpybuf, ipasstring+1, len; Length...

Tor: [tor] libevent dns remote stack overread vulnerability

Hello, the nameparse function in libevent's DNS code is vulnerable to a buffer overread. c 935 static int 936 nameparseu8 packet, int length, int idx, char nameout, int nameoutlen 937 int nameend = -1; 938 int j = idx; 939 int ptrcount = 0; 940 define GET32x do if j + 4 length goto err; memcpy&t3...

Tor: smartlist_add, smartlist_insert (may) cause heap corruption as a result of inadequate checks in smartlist_ensure_capacity

Walkthrough of the vulnerability smartlistadd and smartlistinsert both invoke smartlistensurecapacity prior adding an element to the list in order to ensure that sufficient memory is available, to exit if not enough memory is available and to detect requests for an invalid size: c static INLINE...

Anonymous VPN Adapter: OnionCat

OnionCat is a VPN -adapter which allows to connect two or more computers or networks through VPN-tunnels. It is designed to use the anonymization networks Tor or I2P as its transport, hence, it provides location-based anonymity while still creating tunnel end points with private unique IP...