Wednesday, 11 June 2014

Mozilla to Provide WebRTC-based Free Firefox To Firefox Voice and Video Calling feature

Firefox voip calling WebRTC protocol

Mozilla is planning to provide a new feature that will allow free audio and video calls between its Firefox web browser, thereby ending the need of any third-party client service or plugin.

Yahoo Toolbar Vulnerability Triggers Non-Exploitable XSS Payload on All Websites

yahoo hacking
Yahoo offers a web browser toolbar which includes apps for leading sites like Facebook, Yahoo! Mail, Weather and News. Yahoo Toolbar also known as Y! Toolbar is available for Internet Explorer, Firefox and Google Chrome web browsers.

Yahoo Toolbar is one of the most popular and widely installed web browser add-on/extension. Many popular softwares like Java Update and thousands of free software including some Antivirus products promote Yahoo toolbar and bundled it into their installer files.

A vulnerability has been reported in Yahoo Toolbar by Security Researcher Behrouz SAdeghipour, which causes cross site scripting flaw on popular websites like Flickr, Yahoo, Google, Pinterest, Youtube, Amazon, Twitter and many more.

Yahoo Toolbar vulnerability triggers all previous non-exploitable XSS payloads on popular websites as shown below in multiple screenshots provided by Behrouz to The Hacker News. 
yahoo xss 1

yahoo xss 2

yahoo xss 3

The vulnerability resides in the way Toolbar intercept and modifies the website pages in the browser to deliver additional content.

Tuesday, 10 June 2014

Apple iOS 8 Randomizes MAC Address while Scanning for WiFi Networks

ios8 Mac address random privacy

A quiet change in the privacy setting of its forthcoming iOS 8 smartphone Operating System, Apple could effectively block the path for advertisers, marketers, and other snoopers looking to collect data about you and your location from your Smartphone devices.

Vodafone Reveals Some Governments Have Direct Access to Their Data Centers

vodafone surveillanceVodafone, the world’s second-largest mobile carrier with more than 400 million customers around the world has issued its first "Law Enforcement Disclosure Report", reveals that the governments in some of the countries it operates, have direct access to its network allowing them to listen to all conversations.

iOS 8 Safari Browser Can Read Your Credit Card Details Using Device Camera

ios 8 credit card scanner hacking






While shopping online we need to first surf through number of pages and then finally have to fill credit and debit cards details manually into the browser, which is the annoying for most of the user. But now the new Safari feature in iOS 8 solves this problem by integrating camera-based Credit and Debit card reader.