Internet Explorer 8 hacked within 24 hours

If you’re going to announce that your new browser is the safest on the market, you’d best be damned sure you’re right. It seems Microsoft releasing Internet Explorer 8 out of open beta yesterday was a red flag to a bull (or a challenge to a hacker), because within 24 hours a new exploit has been found in the browser.

The feat occurred at the annual CanSecWest security conference, which hosted its PWN2OWN hacking contest, where the exploit was found. A German hacker going by the name of Nils found it and claims a prize of $5000 in cash and a Sony Vaio laptop as a prize.

It’s only fair to mention that the same hacker managed to claim an additional $10,000 for successfully hacking Safari and Firefox. There’s still two days left for more browsers to succumb to the hacker’s codey wiles – perhaps Chrome and Opera will let their guard slip as well.

Quick! Encrypt your hard drives now: Euro police could be hacking your PC

hacker-and-cop.jpg

It’s very easy to become alarmed by some of the scaremongering stories which appear in certain sections of the UK press when it comes to technology and privacy, but this one – if abused – could be pretty serious indeed.

According to The Times, The Home Office has developed plans to give the UK police force the power to remotely hack into the personal computer of anyone it suspects might be involved with something dodgy — you know, terrorism, paedophilia, drug trafficking, that kind of thing — without a warrant, with the additional joyous notion that police forces from across the European Union can request information on any British Citizen.

Yes, it does all sound a bit Daily Mail, but unsurprisingly it’s raised the hackles of the human rights group Liberty, which has said that it will mount a legal challenge.

WPA Wi-Fi security gets cracked

lock-and-key.jpg

There are several ways to crack a wireless network’s security. The weakest, WEP, can be easily cracked using customized Linux software, but until today, Wi-Fi Protected Access (or WPA) had been considered secure. Not any more. Researchers have announced that they’ve developed a way to partially crack the encryption standard, but I warn you, it’s not easy.

The researchers, Erik Tews and Martin Beck, have found a way to break the Temporary Key Integrity Protocol (or TKIP) in as little as 15-12 minutes. They have not yet, however, managed to crack the encryption keys used to secure the data that travels from the PC to the router.

iPhone Dev Team releases PwnageTool 2.0.1 for iPhone 2.0 jailbreaking

iphone_pwned.jpg

The iPhone Dev Team yesterday announced the release of their PwnageTool 2.0.1, allowing any iPhone to be “jailbroken” in order to run unsanctioned third-party applications.

Seems there are a huge number of people who want to hack into their iPhone, as demand took down their servers for a period of time.

The software will jailbreak and unlock any first generation iPhone or iPod Touch running either version 1 or version 2.0 firmware, and will jailbreak the iPhone 3G. They’re still working on a way to unlock the newest iPhone so that it can be used on any other network…

Hackers can exploit ISPs quest for cash by spoofing non-existent web sites

safari_cant_find_website.png

For a while now, some Internet Service Providers have been taking advantage of unused domain names and subdomains in order to make some cash by displaying advertising when someone types in a non-existent web site address.

A recent study by IOActive security researcher Dan Kaminsky proves there’s a security flaw that could let malicious hackers set up authentic-looking web sites in order to fool Web users…