Showing posts with label uk. Show all posts
Showing posts with label uk. Show all posts
Wednesday, February 15, 2017
Google adds Emergency Location Service to Android rolling out first in the UK and Estonia
Google adds Emergency Location Service to Android rolling out first in the UK and Estonia
You may be wary of making your location available to apps and service on Android, but that uneasiness goes away in an emergency situation. If you call emergency services, you want them to know exactly where you are, and now Android has the tools to make that happen. Well, if you live in the UK or Estonia. Those are the first two countries with support for the new Emergency Location Service.
When you call in an emergency with this service active, your location will automatically be transmitted directly to first responders (without passing through Google).
Read MoreGoogle adds Emergency Location Service to Android, rolling out first in the UK and Estonia was written by the awesome team at Android Police.
from Android Police – Android News, Apps, Games, Phones, Tablets http://ift.tt/2aFUVYu
via IFTTT
Available link for download
Sunday, February 12, 2017
Intentan envenenar agua de un planta depuradora en UK
Intentan envenenar agua de un planta depuradora en UK
Los ataques a los sistemas SCADA utilizados en el control industrial es algo que puede tener consecuencias graves si no se han hecho los deberes de seguridad adecuados. Los sistemas industriales utilizados en estos entornos están formados por una buena cantidad de componentes de distintos fabricantes, PLCs, protocolos especiales y sistemas que a veces pasan muchos años antes de ser cambiados - o tan siquiera actualizados -. Y por supuesto, tienen vulnerabilidades que aparecen en sistemas PLCs [PLCs exponen passwords, PLCs vulnerables a Brute-Force] en el equipamiento utilizado en la construcción del sistema y en el software que se haya desarrollado a medida para dicha plataforma.
 |
| Figura 1: Intentan envenenar el agua en una planta depuradora en UK |
Es un ecosistema complejo del que hay que preocuparse con cariño. Nuestro compañero en Eleven Paths Claudio Caracciolo (@holosec) conoce a la perfección estos entornos por su experiencia trabajando con ellos, y nos explicó en detalle cómo funciona en la charla que impartió dentro de las Eleven Paths Talks y que puedes ver online ya.
Figura 2: Comprendiendo la seguridad en sistemas industriales
Dicho esto, hoy quería centrarme en un caso explicado en el último informe Data Brech Digest publicado por Verizon, en el que cuentan cómo fue la investigación para descubrir el ataque que se había producido a un planta depuradora de agua de un distrito en Reino Unido. Los equipos de gestión del funcionamiento de la planta depuradora se dieron cuenta de que algo había pasado cuando saltaron las alarmas de control que vigilan que nada vaya mal en la planta al detectarse que la mezcla de componentes químicos que se estaba usando podría dañar la salud de las personas que la bebieran.
 |
| Figura 3: Intento de configurar agua "no potable" variando los compuestos químos |
Esto sucede porque los sistemas SCADA se crearon para ayudar a los ingenieros a tomar las decisiones de seguridad más adecuadas, pero además del sistema informatizado y automatizados existen controles que verifican que ningún fallo provoque una situación no deseada, como la de que el agua que se entrega a los usuarios sea de mala calidad y nociva para su salud.
Errores en la gestión de la seguridad de la planta depuradora
Tras la investigación realizada por el Equipo de Respuesta ante Incidentes, la explicación resulto ser la acumulación de una serie de BASICS de seguridad no realizados por la empresa que gestiona el IT de la planta de seguridad y que os paso a resumir a continuación.
1) Arquitectura no segmentada de la red
La empresa cuenta con una aplicación web/mobile a la que los clientes se pueden conectar para la gestión de sus cuentas y sus pagos. Esto está alojado en un servidor web, pero que tiene conexión directa con el servidor SCADA, basado en un AS/400 (que también debería fortificarse). Este servidor AS/400, además, tenía conexión de a Internet, por lo que una vez llegado a él se podría sacar datos. Llegando a un servidor, es fácil acceder a las credenciales de acceso a otros servicios, incluso acceder a las passwords de gestión de los PLCs e incluso mucho más fácil, ya que puede que haya sistemas PLC sin passwords o fácilmente saltables.
 |
| Figura 4: Arquitectura de red de los sistemas de la planta. Desde el AS/400 acceso a todo. |
2) Aplicación de pagos con mala gestión de identidades
Cualquier cliente de la empresa se podía conectar al sistema de pagos con un sistema de credenciales basado en usuario y contraseña, sin que hubiera ninguna protección de Segundo Factor de Autenticación o Autenticación Robusta, lo que permitía a un atacante hacerse fácilmente con alguna cuenta de usuario con ataques simples de phishing, troyanos, etcétera.
3) Aplicación de pagos con vulnerabilidades en el código del backend
La aplicación de pagos no estaba correctamente auditada y desde la sesión de un usuario era posible explotar bugs en el backend que permitieran acceder a los ficheros del servidor. No se sabe si la vulnerabilidad permitía subir una shell, era un ataque de LFI, o un Directory listing, pero con este fallo se podía acceder a los ficheros del servidor.
4) Credenciales de acceso al sistema SCADA en AS/400 sin 2FA
De nuevo, el acceso al sistema SCADA utilizaba usuarios y contraseñas sin ninguna protección de Segundo Factor de Autenticación, así que cualquiera que se hiciera con las credenciales podría entrar a manipular el servidor.
5) Credenciales almacenadas en el servidor de la aplicación de pagos
Como sucede en muchos casos, las herramientas de adminsitración de servidores permiten guardar información de las conexiones que realizan los técnicos para que sea cómodo acceder a ellos a golpe de clic. Según parece, en el servidor de la aplicación de pagos había un fichero .INI con las credenciales del sistema SCADA, así que una vez accedido a los ficheros del servidor fue fácil obtener el acceso al sistema SCADA.
 |
| Figura 5: Cúmulo de fallos en la gestión de las credenciales de acceso a los sitemas |
6) Reutilización de credenciales en distintos sistemas
Al final, los atacantes se pudieron llevar la base de datos de los usuarios, ya que las credenciales funcionaban en otros sistemas conectados, como el servidor que hospedaba la aplicación financiera de la planta.
Por suerte, al manipular las cantidades de productos químicos con las que se hace la depuración del agua, las alertas de seguridad de la planta levantaron las alertas. De nuevo, un caso en el que el cúmulo de errores de seguridad lleva a que casi Security se convierta en Safety y haya un verdadero problema para los clientes de esta planta. Hay que agradecer que las Infraestructuras Críticas aplican conceptos de defensa en profundidad para no depender totalmente de un sistema informatizado y, en este caso, ha evitado una catástrofe.
Saludos Malignos!
Sigue Un informático en el lado del mal - Google+ RSS 0xWord
Available link for download
Friday, December 2, 2016
Guide to Acquiring UK Credit Cards
Guide to Acquiring UK Credit Cards
All credit cards come in many shapes, colors and sizes. They come in different types and brands with their own list of great deals to offer. UK credit cards are not different from these. When you apply for a UK credit card online, there are three easy steps you can follow. First, you can search through the list of UK credit cards you might find while surfing the net. Then, you can compare the rates and the fees of these UK credit cards side by side and prepare for the process of elimination. After you have weighed the pros and cons and the advantage and disadvantages of your top choices, you can now make the final decision, which among the UK credit cards offered would best suit your needs. Then, you may proceed with your UK credit card application by filling out the form online.
Things you should know before getting UK credit cards
Indeed, "plastic" has tremendously redefined the way people spend their money. In the US alone, more and more Americans are using credit cards because of the financial convenience it brings. When it comes to the UK, studies show that the Britons owe hundreds of millions in credit card debts. Being a flexible and accessible method of acquiring credit, various UK credit cards are being offered by major lenders to provide ultimate convenience to the consumers.
Applying for UK credit card can be both easy and difficult at the same time. Well, it can be surprisingly easy compared to spending the money itself. Getting a UK credit card is quite as easy like splurging your bucks on shopping spree. But, the difficult part when you have a UK credit card or any other credit card for that matter, is when the monthly bill arrives. Before getting a UK credit card, make sure to visit some guide and glossary so you will have all the information you need. Searching for important tips before you choose your UK credit card will help you become educated in your purchasing decision. Being informed before filling out for a UK credit card application will also help you reduce the possibility of getting stuck up in a credit card debt trap.
Reading some tips will also help you decide for yourself which among the list of UK credit cards would best suit your financing needs. You can choose the right UK credit card by comparing their features, interest rates, and benefits. Among the UK credit cards available, you should find the credit card with 0%, has the best rates and APR for balance transfers or purchases. Most importantly, never forget to look for the UK credit card with lowest rates by reading the descriptions carefully before you apply for a credit card online.
Top UK Credit Cards
Since more than half a million pounds are spent on UK credit cards every minute-amounting to tens of billions spent each year-it is very important to choose the best credit card for you. Here are some of the top UK credit cards available. With their own sets of great deals to offer, its up to you, which among these UK credit cards is best for you. First among the list is Marbles. It offers up to 52 days interest free credit, 0% balance transfers for the 1st 6 months, and 14.9 % APR. If youre the type of person who wants almost everything customized, this UK credit card lets you choose what your card will look like. It also lets you manage your account online. This UK credit card is designed in one of the safest and secure credit card systems around.
If you are looking for a UK credit card that offers from 0% APR on balance transfers, from 15.9% APR on card purchases, no annual fees, and a free 24-hour help line, then you might want to try Virgin Card. This UK credit card can actually be your exclusive pass to an exclusive online membership online stuffed with great money-off deals.
Another is the Egg Card that automatically gives you free purchase in transit protection for items. You can actually pay for all or part of your fare using this UK credit card plus the benefit of free personal travel accident insurance.
Apart from that, the customers also get a 10% discount on home and travel insurance policies when they use this UK credit card. The GM platinum card, on the other hand, offers 14.9 % APR, 0% per annum on balance transfers and purchases for 5 months, and online account management. The best thing about this UK credit card is that the holder will receive a 100 free Rebate Points the first time you use it. This unique reward scheme makes this UK credit card more fun compared to others.
After weighing all the pros and cons, advantages and disadvantages, you may now choose the best UK credit card for you.
Things you should know before getting UK credit cards
Indeed, "plastic" has tremendously redefined the way people spend their money. In the US alone, more and more Americans are using credit cards because of the financial convenience it brings. When it comes to the UK, studies show that the Britons owe hundreds of millions in credit card debts. Being a flexible and accessible method of acquiring credit, various UK credit cards are being offered by major lenders to provide ultimate convenience to the consumers.
Applying for UK credit card can be both easy and difficult at the same time. Well, it can be surprisingly easy compared to spending the money itself. Getting a UK credit card is quite as easy like splurging your bucks on shopping spree. But, the difficult part when you have a UK credit card or any other credit card for that matter, is when the monthly bill arrives. Before getting a UK credit card, make sure to visit some guide and glossary so you will have all the information you need. Searching for important tips before you choose your UK credit card will help you become educated in your purchasing decision. Being informed before filling out for a UK credit card application will also help you reduce the possibility of getting stuck up in a credit card debt trap.
Reading some tips will also help you decide for yourself which among the list of UK credit cards would best suit your financing needs. You can choose the right UK credit card by comparing their features, interest rates, and benefits. Among the UK credit cards available, you should find the credit card with 0%, has the best rates and APR for balance transfers or purchases. Most importantly, never forget to look for the UK credit card with lowest rates by reading the descriptions carefully before you apply for a credit card online.
Top UK Credit Cards
Since more than half a million pounds are spent on UK credit cards every minute-amounting to tens of billions spent each year-it is very important to choose the best credit card for you. Here are some of the top UK credit cards available. With their own sets of great deals to offer, its up to you, which among these UK credit cards is best for you. First among the list is Marbles. It offers up to 52 days interest free credit, 0% balance transfers for the 1st 6 months, and 14.9 % APR. If youre the type of person who wants almost everything customized, this UK credit card lets you choose what your card will look like. It also lets you manage your account online. This UK credit card is designed in one of the safest and secure credit card systems around.
If you are looking for a UK credit card that offers from 0% APR on balance transfers, from 15.9% APR on card purchases, no annual fees, and a free 24-hour help line, then you might want to try Virgin Card. This UK credit card can actually be your exclusive pass to an exclusive online membership online stuffed with great money-off deals.
Another is the Egg Card that automatically gives you free purchase in transit protection for items. You can actually pay for all or part of your fare using this UK credit card plus the benefit of free personal travel accident insurance.
Apart from that, the customers also get a 10% discount on home and travel insurance policies when they use this UK credit card. The GM platinum card, on the other hand, offers 14.9 % APR, 0% per annum on balance transfers and purchases for 5 months, and online account management. The best thing about this UK credit card is that the holder will receive a 100 free Rebate Points the first time you use it. This unique reward scheme makes this UK credit card more fun compared to others.
After weighing all the pros and cons, advantages and disadvantages, you may now choose the best UK credit card for you.
Available link for download
Tuesday, September 13, 2016
Google’s Emergency Location Service comes to Android arriving first to UK and Estonia
Google’s Emergency Location Service comes to Android arriving first to UK and Estonia
The same combination of radios used to plot your position on Google Maps or tell your favorite apps exactly where you are located will now be used to help first responders more accurately pinpoint your location when you place an emergency call.
Google just rolled out Emergency Location Service for Android 2.3 and higher, covering up to 99 percent of Android handsets with that breadth of support. But its up to your mobile network provider and your local EMS to support this upgrade for enhanced 911 (E911) calls.
Emergency Services on Note 7, via SirHydarnes
Emergency Location Service leverages your mobile devices Wi-Fi, GPS and cellular radios to help first responders more accurately triangulate your position. This exchange of information, which is only transmitted during an E911 call, is between you and your local EMS. Google is keeping its hands off of the data and is making sure even the neediest of apps dont get a peek at it.
The service is available now through various emergency agencies and cell service providers in the UK and Estonia, including providers Vodafone and BT. As previously mentioned, it will be up to emergency response agencies and carriers to work with Google in order to expand this support to more regions, but we imagine it wont be long before we see this feature reach more countries in Europe. And whenever the Federal Communication Commission completes its ongoing campaign to nail down E911 rules in the US, youll surely see the service arrive in the states as well.
For now, those of you in the US will have to make due with E911 service that relies solely on cell tower triangulation. On top of that, the FCC is still trying to install rules that require mobile network operators to align cell tower antennas more precisely so that they provide more accurate location data.
from Android Authority http://ift.tt/2a9MdTS
via IFTTT
Available link for download
Subscribe to:
Posts (Atom)