NSA opens massive cryptologic center in Georgia

The National Security Agency/Central Security Service officially opened the new NSA/CSS Georgia Cryptologic Center.

The $286 million complex will provide cryptologic professionals with the latest state-of-the-art tools to conduct signals intelligence operations, train the cryptologic workforce, and enable global communications.



NSA/CSS has had a presence in Georgia for over 16 years on Ft. Gordon, when only 50 people arrived to establish one of NSA’s Regional Security Operations Centers.

“This new facility will allow the National Security Agency to work more effectively and efficiently in protecting our homeland,” said Sen. Saxby Chambliss. “It will also attract more jobs to the Augusta area. The opening of this complex means that Georgians will play an even greater role in ensuring the safety and security of our nation.”

The new NSA/CSS Georgia Cryptologic Center is another step in the NSA’s efforts to further evolve a cryptologic enterprise that is resilient, agile, and effective to respond to the current and future threat environment.

NSA/CSS opened a new facility in Hawaii in January 2012 and is also upgrading the cryptologic centers in Texas and Denver to make the agency’s global enterprise even more seamless as it confronts the increasing challenges of the future.

Read More

Get paid 100USD From Amazon, Just do this Survey in Web App Security

So Long time Not blogging at all, since from the day i signed for my CCNA and CCNP Classess, Course are going are pretty good learned a lot with hand on with cisco routers and switches now am back on with some serious deal Here its

if u are a Pen tester or Web App security consultant here its for u, Just answer fr this 25 questions and u could be a lucky winner to win 100USD From amazon

Some of the questions can be perceived as difficult to answer. However, if all this data was known, or easy to identify, there would be no reason to gather estimates on the topic. Consequently, we ask that you complete this survey and provide us with your beliefs and best estimates, even if you are uncertain about the answer to the questions asked. Also, the answer format will enable you to account for this uncertainty. By completing this survey you will: Help the community to quantify the effort required to find vulnerabilities in web applications. Be able to compare your answers to the answers of others. Have a chance to win a 100 USD gift certificate on Amazon. The survey consists of 24 questions spread out over 8 pages (this page being the first). After completing the survey you will receive a link that displays your answers and compares them to aggregates of all answers received. The survey will remain active until the 22nd of March 2012. If you have cookies enabled you will be able to use this browser to return to an uncompleted survey for two weeks. In other cases, the below link can be used to return to your survey at any point in time until the survey closes.

Permanent link to your survey: http://surveys.ics.kth.se/WASecurity/?respondent=088414147114D13BF8FB68D58621B20C

Read More

An inside look at the National Security Agency (NSA).

The following video is an official release by the NSA, for PR purposes. 
The movie can also be found on the agency's Website.

The Must Watch for all Computer security enthusiasts,


Thanks

Read More

Mark Zuckerberg tells 8th graders “there’s no shortcuts” and to make friends

When I graduated from eighth grade, my class got a pizza party. When the students at Belle Haven Middle School in Menlo Park, Calif. graduated, they got Mark Zuckerberg. Zuckerberg, or Mark Zuckerman, as the principal accidentally introduced him as, spoke at the eighth-grade graduation relaying some of the most important life lessons he’s learned during his 27 years on this planet.
Mr. Z, as the principal also called Zuckerberg, is moving the Facebook offices to Menlo Park and said the company is going to be neighbors with the school. Zuckerberg stressed three main things in his speech that he claims society got wrong: There are no shortcuts in life, great relationships are extremely important, and do what you love.
Zuckerberg started by saying that everything that’s worth doing is actually really hard and take s  a lot of work. He said society often isn’t quite right when things in movies and TV appear to have come to fruition without much work. Mr. Z alluded to the Social Network movie in one of his examples. He said that a film about a kid in college with an idea that became this big business overnight “couldn’t be further from the truth.” He said it’s “not about a single moment of inspiration or brilliance.” Instead, it’s about years and years of hard work and practice. He said that a lot of building a company or product like Facebook is just about determination and believing that you can do it. He stressed that it’s actually hard work that underlies everything that you do, and “there’s no shortcuts.”
Secondly, Zuckerberg stressed the value of friendship and forming good relationships with people you can trust. He said that a lot of people will tell you to just focus on school and grades while you’re growing up, but that it’s important to focus on having friends and really enjoying yourself, too. Zuckerberg said that a lot of times the experts tell you that you can’t do something even when you think you can. He said this is another thing that society gets wrong a lot. Zuckerberg said great friendships are what makes life a lot of fun and meaningful and enables you do to awesome things.
 Watch this Video here :

Lastly, Zuck told the students to “do what you love.” He said that you can set your minds to a lot of different things, and you can overcome things you don’t like doing, but that it’s a lot easier to focus on challenges that you actually enjoy doing. “If you do stuff that you love, it’s a lot more meaningful and takes on a lot more purpose,” said Mr. Z.
It all sounds so easy coming from Zuckerberg, the world’s youngest billionaire. But who knows, maybe some of these eighth graders will be working with Zuck in a few years.

Read More

How to Use Google Wave , Tool for Hacking

I Thought i was Fooled When Google WAVE Was released On April 1 , After a day only i Fathom that Google Wave Service Exists ..Well Coming to tha Point ,Many security researchers and hackers are familiar with BeEF, a browser exploitation framework by Wade Alcorn. In short, BeEF is a program that brings together various types of code for taking advantage of known vulnerabilities in web browsers. If a target computer loads a certain bit of code within a web page, that code connects to a server control panel which can then execute certain attacks against the “zombie” machine.
After noting potential security issues with the gadgets in Google Wave, I set about to finally setup a BeEF testbed and see if Google Wave was as capable a platform for malware delivery.

Example of a BeEF zombie spawned via Google Wave

The picture above shows the results. I successfully created a Google Wave gadget that creates a new BeEF zombie whenever someone views the wave. This does not allow for the keylogger function of BeEF, but I did send an alert dialog (as shown) and used the Chrome DoS function to crash the browser tab. (I could also detect that the zombie machine had Flash installed – imagine the possibilities of using Flash or PDF exploits in an auto-loaded gadget.)
What’s even more disconcerting is that BeEF can integrate with Metasploit to potentially take over a victim’s machine. I do not currently have Metasploit setup to test using Autopwn, but based on my experiences so far, I’m fairly confident such an attack would succeed.
All of these demonstrations about security and Google Wave point to four general weaknesses in Wave’s current structure:

1. Allowing scripts and iframes in gadgets with no limits apart from sandboxing
2. Lack of control over what content or users can be added to a wave
3. No simple mechanism for verifying gadget sources or features
4. Automatically loading gadgets when a wave is viewed

Any one of these issues would be cause for concern, but taken together they present such alarming possibilities as a user getting their computer hacked simply by viewing a wave. Whatever may be said about Google Wave’s usefulness, I have to conclude that the product is not ready for prime time until these types of problems are addressed.

Read More