BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking. Regardless if you’re making BackTrack your primary operating system, booting from a LiveDVD, or using your favorite thumbdrive, BackTrack has been customized down to every package, kernel configuration, script and patch solely for the purpose of the penetration tester.
According to team Back track This release is their best one yet! Some pesky issues such as rfkill in VMWare with rtl8187 issues have been fixed, which provides for a much more solid experience with BackTrack.We’ve have Gnome and KDE ISO images for 32 and 64 bit (no arm this release), as well as a VMWare image of a 32 bit Gnome install, with VMWare Tools pre-installed.
We are mighty excited and are already downloading this release just as we speak!
Download Backtrack 5 R1

Sony says Anonymous group bears indirect responsibility
* Sony waited 2 days before contacting FBI about breach
* Justice Department, FBI open investigation
* New York attorney general subpoenas Sony (Adds analysts' comments, details on investigations)
By Diane Bartz and Jim Finkle
WASHINGTON/BOSTON, May 4 (Reuters) - Sony Corp (6758.T) blamed Internet vigilante group Anonymous for indirectly allowing a hacker to gain access to personal data of more than 100 million video game users.
The accusation came in a letter to Congress and prompted renewed complaints that the Japanese electronics giant's disclosure had been inadequate and tardy.
The company said it waited two days after first discovering data was stolen from its PlayStation video game network before contacting law enforcement, and did not meet with FBI officials until five days later.
"Sony has been the victim of a very carefully planned, very professional, highly sophisticated criminal cyber attack," Kazuo Hirai, chairman of the board of Sony Computer Entertainment America, said in a letter to the U.S. Congress.
The theft prompted the U.S. Justice Department and Federal Bureau of Investigation to open an investigation, officials said on Wednesday. [ID:nW1E7FT00X]
"It is something we are taking extremely seriously," said U.S. Attorney General Eric Holder.
He said the government is also probing the theft of reams of email addresses and names that Alliance Data Systems Corp's (ADS.N) Epsilon marketing unit discovered last month.
New York Attorney General Eric Schneiderman has subpoenaed Sony entities over the breaches.
Schneiderman subpoenaed Sony for conversations and documents that related to its security systems and any representations about those systems made to consumers, said a source familiar with the issue. A Schneiderman spokesman declined comment.
GOOD ENOUGH?
Wedbush Securities analyst Michael Pachter said Sony's public disclosures have not been sufficient to quell customer concerns about the theft.
He would like to see Sony notify each of the 12.3 million customers whose credit credit data may have been stolen.
"Sony needs to make a statement to consumers: 'You will not be harmed, and we will indemnify you against any harm,' And they just have not done that in any of their apologies."
Sony said that its video game network was breached at the same time it was defending itself against a major denial-of-service attack by a group calling itself Anonymous. A denial-of-service attacks makes a server or system unavailable by overwhemling its network with internet traffic.
Anonymous is the name of a grass-roots cyber group that in December launched attacks that temporarily shut down the sites of MasterCard Inc (MA.N) and Visa Inc(V.N) using simple software tools available for free over the Internet.
The group attacked the two credit card companies with denial-of-service attacks that overwhelmed their servers for blocking payments to WikiLeaks.
Sony said on Wednesday that Anonymous targeted it several weeks ago using a denial-of-service attack in protest of Sony defending itself against a hacker in federal court in San Francisco.
The attack that stole the personal data of millions of Sony customers was launched separately, while the company was distracted protecting itself against the denial-of-service campaign, Sony said.
The company said it was not sure whether the organizers of the two attacks were working together.
Sony did say that its PC gaming unit, Sony Online Entertainment, discovered last Sunday a file planted on a server that was named "Anonymous" and had the words "We are legion," in it. But the self-styled vigilantes denied involvement in the data theft.
They released a statement via YouTube last month saying that while the group's organizers had not stolen the data, it was possible some members of the group were involved in the matter. (bit.ly/mG3WvT)
Members of Anonymous involved in the denial-of-service campaign may have decided to seize the opportunity to steal the data while Sony was distracted protecting its network, said Jeff Moss, chief security officer for the Internet Corporation for Assigned Names and Numbers, or ICANN.
'HALF-BAKED' RESPONSE
The company noticed unauthorized activity on its network on April 19, and discovered that data had been transferred off the network the next day. It waited until April 22 to notify the FBI.
Sony chose to disclose the latest details of the attacks in a letter to the U.S. House Energy and Commerce subcommittee on commerce, manufacturing and trade rather than testify in a hearing on cyber attacks that was held on Wednesday.
Lawmakers expressed disappointment that Sony and Epsilon declined to appear at the hearing and pledged a bill that would require companies to do a better job of safeguarding their customers' data and to quickly disclose to customers when their data was lost.
Subcommittee Chairwoman Mary Bono Mack noted with dismay that Sony first disclosed the breach on a blog.
"Sony put the burden on consumers to search for information, instead of accepting the burden of notifying them," she said. "If I have anything to do with it, that kind of half-hearted, half-baked response is not going to fly in the future." (Additional reporting by Liana B. Baker and Joan Gralla in New York; Editing by Maureen Bavdek, Gerald E. McCormick and Steve Orlofsky)

DATABASES EXPOSED LIST :
[*] admin
[*] egw
[*] glpi
[*] information_schema
[*] lost+found
[*] mboost_forum
[*] multivea
[*] mysql
[*] openads
[*] phpcollab
[*] phpmyadmin
[*] pixcatcher

Blizzard's Mobile is Ringtone,Logo,Game, Java,Video,Theme,Mobile,Wallpaper,Screensaver etc. etc. Download Site with Alexa World Rank 3800.

Pakistani Hackers Forum at Pakhackerz.com has been hacked by Indian hackers group "Indishell".


Indishell Release a Message on Pastebin and also dump the whole database of Pakhackerz.com for download. 

HP computers FTP hacked by HexCoder
UPDATE : We have verified that this is just a anonymous FTP user access to ftp.hp.com . There is nothing like hack. Pakistani hacker HexCoder may try this to get attention. Anyway the access is available for all with :
Host : ftp.hp.com
Username : anonymous
Password : anonymous




Just Now we (The Hacker News) got a mail from Pakistani hacker named "HexCoder" . He Claim to hack FTP of HP computers at ftp.hp.com . 


Statement about this Hack by Hacker HexCoder,"I have done this by getting access to FTP successfully.All this by just mere stupidity!Oh and I will not share their database because its too big (9 GB)".



Source : THN

Welcome to hacking Beast , Yes now it is possible to search any content on Google search engine using your voice !! That means now no need to type the search content by using keyboard !
Requirnments :

1) Latest version of Chrome
2) Microphone installed on your PC/Laptop

First thing keep in mind that the chrome browser which you are using is updated ! One more thing that this service is available on .com only . .  .in , .au , .us will not support this . . Make sure that you are browsing www.google.com

So the page loads then in the right hand side of the text box there will be one small microphone image . . Just click on it and speak :)

If you need more information then check out the Video :)

Today the exclusive topic is What Is A Proxy Server And How To Use It for Security ?


How to use a proxy server ?

It is simple, just follow these instructions for Internet Explorer

1. Open Internet Explorer

2. In the Menu bar, select Tools, then Internet Options


3. After that click the Connection tab


4. In the Connection tab, on the bottom , you will find LAN settings;

5. In LAN tab, check "Use a proxy server for your LAN (These settings will not apply to dial-up or or VPN connections)", in Address add the IP Addresses of the proxy you would like to use, and add Port, and finally click OK. It looks like this:


In this example i am using an anonymous proxy server from United Kingdom with this IP address: 64.66.192.61 and port 80.

The same is for Mozilla Firefox

1. Open Mozilla Firefox

2. In Menu bar, select Tools, then Options…

3. After this will appear Options window, click Advanced tab


4. In Advanced tab, you will find Settings, click it

5. In Settings tab, check Manually proxy configuration, in HTTP Proxy add IP addresses from proxy server, and add Port, you can also set sites where you wont't use proxy server. For Example if you are from Germany, no sense to use a proxy server for German sites.
In the end click Ok;


I used the same proxy server(therefore the same address) also for Mozilla.

Instructions for Netscape:

1. Select the Tools Menu
2. Select Options
3. Select General
4. Select Connection Settings...
5. Check Manual Proxy Configuration
6. Enter the proxy server's IP address in the HTTP Proxy field and the proxy's port into the Port field.
7. OK your way out


Instructions for Opera

1. Select the Tools Menu
2. Select Preferences
3. Select Advanced Tab
4. Select Proxy Servers
5. Check the box next to HTTP
6. Enter the proxy server's IP address in the first box and the proxy's port in the box after "Port"
7. OK your way out

There is no such thing as an entirely secure browser. Let's be realistic: You will always need a good portion of common sense and Internet smarts to avoid nasty attacks hijacks. 

However, if you are paranoid about security, there is one browser that will reliably protect you from virtually all threats. It's a browser you already know: Firefox 4.0.1. Well, a boxed version of Firefox 4.0.1.
I am not exactly an adventurous Internet user as far as the dark corners of the web are concerned. Just I am not the kind of person to enjoy the silence in a dark alley in Chicago's south suburbs after dawn, I typically avoid websites I don't generally trust. I have had my fair share of spyware, trojans and other malware that caused me quite a bit of headache in the past and I am just more cautious than I was 10 years ago. Yet, that might change. I have just discovered a bulletproof wrapper for Firefox and, at least for now, I don't care that much anymore what is happening below the content the browser shows. There might be lots of malware and I really don't care anymore.
The reason is that I have started using BitBox as my browser for my general work-related tasks. BitBox is essentially a heavily armored version of Firefox 4.0.1 that is encased in Oracle's VirtualBox virtual machine (VM) environment that houses a secured Debian 6 Linux OS. That sounds relatively complicated, but once it is installed, this secure version of Firefox works just like a regular version of the browser. The difference is that it runs in a virtualized environment that is separate from your Windows XP/Vista/7.

The upside clearly is that you are dealing with a self-contained package. If you click on malicious malware, the usual EXE files cannot be executed in your Linux VM. You can download files, but they will not explicitly affect your Windows system and need to be manually moved out of the VM, if you have connected the drives. malware that infects Firefox during your session is automatically deleted the next time you start BitBox, as it always starts with its default configuration in the way it was installed. However, phishing attacks that target your personal data and may trick you in providing critical information will still require some common sense not to do so and will not protect you from the effects of such actions.
There are a few downsides. First, it is a hefty 990 MB download and the installed software will require almost 2 GB of space, as there is a need for Oracle's VirtualBox that is included in the package as well as a Debian 6 installation. Since the software is set back to a default level at every time it starts, it is not the most convenient browser to be used on an every day basis for the consumer. The deal breaker is its language. The software was developed for the German government and while it is available as a free download, it is only available in German. Unless you have basic knowledge of German, the installation will be a hurdle too high to overcome and even then it may be rather uncomfortable to be generally used.
The installation of the entire package is documented via PDF file and is somewhat straight forward, but some knowledge about virtual machines and virtualization in general does help when the individual components of the software are installed. In the end, you really want to know what is happening on your PC and you would want to know what effects a configured virtual drive on your PC has. Other than that, I was able to install BitBox within 15 minutes, once it was downloaded. The only criticism I would have is that developer Sirrix is not using the most recent version of Oracle's Virtual Box software (4.04 vs. 4.06). Custom configuration options include a specific download folder as well as a separate malware scanner as well as random root passwords for the virtual machine and proxy settings. During the installation, the software installs a Linux guest (Firefox) inside Virtual Box. Typically you would run the software form within VirtualBox, but Sirrix has managed to trim down the entire process to a single icon on the desktop.
I briefly mentioned it - this is not a browser to get deeply emotional about and discuss its performance features, but the concept is very compelling as far as browser safety is concerned. Plain browsing tasks make a lot of sense in such a package. In fact, I wonder, why such versions aren't offered by Mozilla and Google as well as Opera and Microsoft by default.