Skip to Content

AOL Tech

hackers posts

Movie Gadget Friday: Weird Science

Ariel Waldman contributes Movie Gadget Friday, where she highlights the lovable and lame gadgets from the world of cinema.


We last left off on the cyberpunk streets of LA in Strange Days. This week, in honor of the loss of the man behind so many 1980's icons, Movie Gadget Friday is paying homage to filmmaker John Hughes with a look into the 1985 cult-classic Weird Science. Tapping into the geek-fiction fantasies of most tinkering teenagers, real-life gadget specs are stretched to surreal capabilities to create the ultimate female bombshell. It's without surprise that the character's name, Lisa, was inspired by the Apple Lisa, Apple's first GUI computer.

Apple keyboard gets hacked like a ripe papaya, perp caught on video


As far as Apple is concerned, the Black Hat 2009 hackers conference didn't end soon enough. Having promptly patched the iPhone vulnerability, Cupertino is facing another security hole, this time in its keyboards. A hacker going by the pseudonym of K. Chen has come up with a way, using HIDFirmwareUpdaterTool, to inject malicious code into the keyboard's firmware. While it's not yet possible to perform this hack remotely, the fact it occurs at the firmware level means no amount of OS cleanser or anti-virals will remedy it -- which might be a bit of a bother to MacBook owners who can't simply swap to an uninfected keyboard. Panic is hardly advisable, as Chen is collaborating with Apple on a fix, but if you want to be freaked out by his simple keylogger in action, hit up the video after the break.

[Via OS News]

Mysterious cyber-attacker hits at federal websites, crisis averted?


It looks like a nefarious cyber-attack which affected several federal websites in the United States was a little more far-reaching than initially thought. The attack -- which started on the 4th of July -- targeted websites in both South Korea and the United States, including the Treasury Department, Federal Trade Commission and Secret Service. Various problems were still being reported days later, and while there's no official word on who the attackers were, those "people familiar with the matter" we know and love seem to be pointing their fingers at North Korea. So far as we know, no irreparable damage has been done, but we're not sure anyone would tell us if it had.

Nokia 1100 seemingly hackable, making a big comeback

Apparently some shady hackers and cyber-criminals have recently started offering upwards of $30,000 for the Nokia 1100 which were manufactured at a specific plant in Bochum, Germany. You may ask yourself, "why?" Well, beyond the obvious answer (style), certain makes of the super-popular handset can apparently be reprogrammed to use someone else's phone number, allowing them to receive text messaged bank passwords (common in parts of Europe), thus making it much, much easier to steal people's money. The software flaw has been pointed out by Ultrascan Advance Global Investigations, who were contacted by police who had noted the curiously high offering prices on the old-timey candybar. Nokia has contended that it has not identified any software problems which would allow such use, so it's hard to say what exactly is going on at this point, but we'll let you know if we hear anything concrete.

[Via SlashGear]

PlayStation 3 used to hack SSL, Xbox used to play Boogie Bunnies


Between the juvenile delinquent hordes of PlayStation Home and some lackluster holiday figures, the PlayStation has been sort of a bummer lately, for reasons that have nothing to do with its raison d'etre -- gaming. That doesn't mean that the machine is anything less than a powerhouse -- as was made clear today when a group of hackers announced that they'd beaten SSL, using a cluster of 200 PS3s. By exploiting a flaw in the MD5 cryptographic algorithm (used in certain digital signatures and certificates), the group managed to create a rogue Certification Authority (CA) which allows them to create their own SSL certificates -- meaning those authenticated web sites you're visiting could be counterfeit, and you'd have no way of knowing. Sure, this is all pretty obscure stuff, and the kids who managed the hack said it would take others at least six months to replicate the procedure, but eventually vendors are going to have to upgrade all their CAs to use a more robust algorithm. It is assumed that the Wii could perform the operation just as well, if the hackers had enough room to spread out all their Balance Boards.

[Via ZD Net]

WPA cracked in 15 minutes or less, or your next router's free

WPA cracked in 15 minutes or less, or your next router's free
They always knew it could be done; that a hacker with enough time and processing power could watch your WPA-protected wireless network and, eventually, decrypt your precious datas. In under 15 minutes, though? "Inconceivable!" those hypothetical security experts would say -- but they're about to get a lesson from WiFi wizard Erik Tews. He'll be giving a presentation next week at the PacSec Conference in Tokyo, describing the "mathematical breakthrough" that, he says, enables him to crack WPA-TKIP in 12 to 15 minutes. There are some limitations, as the data sent from a connected device to the compromised router is apparently still safe, but anything headed t'other way is wide open, and could even be supplanted by bogus bits sent from a Cheetos-munching hacker slouching in a rusty Ford Taurus in the parking lot. Don't believe us? Tews was the guy able to crack WEP in under a minute last year, ironically advising people to switch to WPA ASAP at the time. We can only assume WPA2 is next.

India's Airtel claims "deadliest hackers" still can't crack its iPhone 3G

Hey, hackers! Now that we've got the attention of millions upon millions of incredibly talented individuals, here's your next challenge. India's Airtel -- which is offering Apple's iPhone 3G at a near-stratospheric price -- has claimed that "even the most deadly hackers on the planet won't be able to crack the codes that support the iPhone's Airtel applications with rival company SIMs." Just so you know, it appears that Airtel worked with Apple to develop "operator-specific iPhone applications," which is an interesting tidbit in and of itself. But let's focus on the task at hand here, and that's proving that making ridiculous claims about impenetrability always comes back to bite ya.

[Image courtesy of Zedomax, thanks Akshay]

The Wii finally gets DVD playback -- no thanks to Nintendo


Carrying on the rich hacker tradition of picking up the slack for companies that are unwilling or unable to provide the functionality users need, a team of Wii coders have given the console what Nintendo could not: DVD playback. By installing a small, hidden channel on a system, this package blesses the console with a libdi file (DVD access library), and allows you to watch your favorite videos with the MPlayer application, an open source media player. The install file will run on modded and unmodded systems, and the software is also capable of playing media from SD cards (though it's experimental right now). Finally Wii owners can join the ranks of, well... pretty much everyone else.

[Via TehSkeen; Thanks, brakken]

DARPA aims to create virtual environment for cyberwar simulations

Considering that mechanical beings will be fighting our real wars here in just a few years, it's no shock to see more focus placed on the areas where actual humans will still be the ones waging. DARPA is looking to create what it calls a National Cyber Range, which would essentially act as a training ground for cyber warriors. The setup would enable defense gurus to simulate battle against attacks our on nation's most highly prized data, and of course, give victors over virtual phishing scams immense bragging rights. Come to think of it, Estonia could have totally benefited from something like this last year.

[Via Information Week, image courtesy of Sandia]

Hackers reportedly targeting cities' power systems


We know, hackers tend to get a pretty bad rap these days, but with some of 'em out there creating ginormous gridlocks in Los Angeles and shutting down networks in enemy territories, we sort of understand the sentiment. Most recently, it seems that hackers are being blamed for "penetrating power systems (sound familiar?) in several regions outside the US, and in at least one case, causing a power outage affecting multiple cities." That's according to Tom Donahue, a CIA official, who failed to dole out critical details such as where or when the attacks occurred nor how many folks were actually left in the dark. 'Course, Bruce Schneier, CTO of security firm BT Counterpane, warns that these attacks could in fact be aided by individuals with administrative access to said systems, implying that "human vulnerability" could share at least some of the blame. Don't worry guys, we're faxing CTU right now, they'll be right on it within 72 business hours.

[Image courtesy of WPS]

Teen hacks tram system, derails trains

In yet another "innocent prank" that turned out to have very real-world effects, a 14-year-old Polish boy has admitted to modifying a TV remote in order to manipulate the junction-switching devices on the Lodz tram system, resulting in four derailed trains and 12 injuries. According to reports, the teenager snuck onto tracks to study the switching mechanisms, and used the resulting knowledge to re-direct trains "like any other schoolboy might a giant train set," as a police spokesman put it. The young man now faces charges in juvenile court for endangering public safety.

Switched On: iPhone SDK won't chase hackers away

Each week Ross Rubin contributes Switched On, a column about technology, multimedia, and digital entertainment:


The better part of a trade show keynote and six months of anticipation preceded the iPhone's launch, but a casual post on Apple's Web site signaled its relaunch as a platform supported by third-party native applications. Apple's attempt to protect the security of a wireless network by encouraging Web 2.0-based applications taking advantage of Ajax technologies could not realistically mimic the capabilities provided by native applications, at least without some way to provide offline functionality using developing technologies such as Google Gears. Furthermore, there were a host of utilities that have evolved on other smartphones (such as system-wide search or alternative input methods) that were beyond the scope of such an approach.

So, come February, Apple will return to its PC heritage and extend its party to third parties. Developers get their iPhone. Users get their applications. And normally reticent bloggers emerge from their keyboards and podcasting microphones like woodland creatures after a storm, just a little more likely to share their timid opinions with the world. Unfortunately, the rationale of all iPhone hackers cannot be swept away as easily as a fingertip switches among open Web sites in the iPhone's Safari browser.

Switched On: Touched by a hacker

Each week Ross Rubin contributes Switched On, a column about technology, multimedia, and digital entertainment:

I glanced at the clock, 1:36 PM. Perhaps I should not have gotten my hopes up. For weeks I'd been exchanging e-mail with an elite hacker who promised to speak with me about the latest attempt to free hardware from the shackles of manufacturers that bind it, sticking it to such companies by making their products more desireable.

Just then, Skype lit up like a flaming notebook battery. It was the notorious hacker 5m0kNcR4K. A shadowy figure in the videoconferencing window spoke in a disguised voice.

"I'm in ur Skype, grantin' ur interview. Do not try to identify me. By using advanced digital video effects, I have pixelated my facial image, put myself in silhouette, and added a big blue dot in front of my face."

"What video effect makes it look like you have bunny ears?"

"Oh, that's just a mask I picked up at Party City."

"We could have just spoken by phone, you know. Or just used VOIP. Besides, I thought we were set to talk at 1 PM."

"I thought 13:37 would be more appropriate."

'Speed' in a grocery store? FBI investigates telecommuting robbers


High-tech foreign criminals may have hacked into retail security systems in order to remotely monitor customers and employees in the course of at least 12 bold robberies in as many states during the past week, officials say. FBI agents are seeking an individual or group of conspirators who have been calling stores and banks from Texas to Kansas to Rhode Island on pre-paid, overseas cellphones and informing whomever picks up that a bomb will be detonated at the location if funds are not wired to a specific offshore account. What's more, the caller claims to have visual surveillance of the premises and proceeds to give certain accurate details about the environment -- in one case attempting to get a hostage to cut off another's fingers, and in another forcing everyone in the store to strip naked. CNN is reporting that at least $13,000 has been extorted so far -- though the total is likely much higher -- and that investigators are now pursuing a suspect in Portugal "who appears to be linked to the account number" that the money is being transferred to.

Read- CNN
Read- KPHO

[Via Slashdot]

Nintendo teams up with customs to crack down on Wii modders

Hide away that soldering iron, Nintendo is on to you crazy kids. The company has issued a press release "in support of" recent raids by US Immigrations and Customs Enforcement agents, which executed 32 search warrants in 16 states to weed out those responsible for the distribution of "illegal modification chips." Apparently this is the largest enforcement action taken against video game piracy, and Nintendo has been working hand in hand with the Department of Homeland Security to pull it off. Since April, Nintendo claims to have seized more than 91,000 counterfeit (er, "backup") Wii discs globally. Of course, the whole issue of whether mod chips, when used harmlessly to enable homebrew and backups, should be illegal in the first place is still a sticky issue (the DMCA seems to frown on the idea), but it looks like if you are indeed trading in the illicit stuff, Nintendo and the fuzz are hoping to track you down for a little chat.

Update:
Looks like Wii modders aren't the only ones on the run. No console is safe!
Zune HD ExposedHTC Hero: Android Evolved
Follow us on TwitterEngadget Video



AOL News

Joystiq

Download Squad

TUAW

Daily Finance

Asylum

Autoblog

Switched.com

FanHouse

Autoblog Green