security News and Updates

Pre order Blackphone 2, Blackphone 2 specifications

Silent Circle is the manufacture of Blackphone series and they have announced that they are now taking pre orders of Blackphone 2. The original Blackphone was released back in 2014 which got many awards and praises from tech bloggers who appreciated its focus towards security and privacy.

Pre order Blackphone 2, Blackphone 2 specifications

Read More

Windows XP Mainstream Support now officially retired

As planned for today, the Microsoft officially retired Windows XP mainstream support. However, extended support will continue till the year 2014. One would wonder, what are the differences between mainstream support and extended support? Well, there are not much. Both offer (free) security updates and phone/web support to the users. However, after today, any new bug-fixes or updates will require extended support contract.

Also, this effects all the versions (excluding Windows XP Embedded). Since, there are not any problems to be solved with the XP (except security holes), we do not need to worry about anything for our netbooks. However, it is encouraged to update to new version of windows (I recommend Windows 7).

Note 1: If Microsoft releases SP4 too, it will retire support for SP3.

Note 2: this deadline is also valid for Office 2003


Meet the World biggest security threat: BGP weekness

Two researchers have proved that it is possible to intercept internet traffic. Till date, it was known that only NSA(National Security Agency) could access this traffic.

The hacker exploits the BGP(Border Gateway Protocol) that lets him to monitor unencrypted traffic.

Here’s how it works. When a user types a website name into his browser or clicks “send” to launch an e-mail, a Domain Name System server produces an IP address for the destination. A router belonging to the user’s ISP then consults a BGP table for the best route. That table is built from announcements, or “advertisements,” issued by ISPs and other networks — also known as Autonomous Systems, or ASes — declaring the range of IP addresses, or IP prefixes, to which they’ll deliver traffic.

The routing table searches for the destination IP address among those prefixes. If two ASes deliver to the address, the one with the more specific prefix “wins” the traffic. For example, one AS may advertise that it delivers to a group of 90,000 IP addresses, while another delivers to a subset of 24,000 of those addresses. If the destination IP address falls within both announcements, BGP will send data to the narrower, more specific one.

“It’s a huge issue. It’s at least as big an issue as the DNS issue, if not bigger,”

said Peiter