News About Indonesia

Bank Account Hacking Software

2016-03-12T14:16:00.000-08:00

So there’s a lot of tutorial and tips out there on how to hack a bank account and the bank hacking software. Some hackers claim they have the original bank hacking software and they can do bank transfers to any account in the world. Sometimes they make this software free to download and they promise you it works with windows and other operating system. Don’t be deceived, you might end up downloading a trojan, zeus bot or malware.

Do Bank Hacking Software Exist?

I was going through a forum and came across someone selling a pdf tutorial on how to hack bank server and database using the full version of the software he has. I paused for a while and laughed because this dude knows nothing about bank hacking and money transfer. The truth is that there’s no software anywhere in the world that automatically hacks bank account number or routing number. There are sophisticated and malicious hacking tools but this one don’t exist.The dude was actually selling the uplink game. Lol.

Do Banks Get Hacked?

Since there’s no software for hacking bank accounts, do people still hack the bank ?. Yes, you can actually hack a bank but not automatically with a software. It requires a whole lot of process and certain information which I won’t discuss here but basically bank hacking can be achieved online through phishing and infected bank mails. You can gain access to the admin portal and bank database just by sending an infected mail to the bank staff and once he clicks, it’s done.

Our Services

BANK TRANSFER SERVICES

Now, you’ve known how this things work so it’s time for business.

We are a professional Russian hacking group and we have come with wonderful bank transfer services.

We combine a lot of tools coupled with over 15 years of experience in this field to present you with this services. We make use of powerful zeus botnets and advanced phishing and bulk mailing platform to gain access to bank login and database.

Bank transfers are now available to the following countries :

USA
UK
EU
Canada
Australia
Russia
Netherlands
China
Malaysia

Value of Transfers :

We transfer $2,000 – $10,000 per transfer to Personal accounts (Checking accounts, Savings accounts, Current accounts, Standard accounts). Transfers over $10,000 are available to Business or Corporate accounts only. If you require transfers over $10,000 you should contact us, the fee is not stated here but it’s negotiable.

Transfer Clearing time :

Same day service to UK/USA/EU/Canada/Australia – 1 to 2 business days service to Russia/Dubai/Singapore.
Fee :

$2000 – $4000: $450
$5000 – $7000: $750
$8000 – $10000: $1050

How to Order This Services

To order for our bank transfer services, you can contact us here : cleantransfers@gmail.com, we transfer to all US banks and virtually all banks in the world expect few.

NOTE: We don’t give test transfers and we don’t work on percentage with first time customers, only our regular customers get transfer on percentage basis. Don’t contact us begging for test or percentage, our customer service guy won’t respond to you.

Here are some news watch about our recent activities. Check the links:

In February 2015, we hacked up to $1 billion from more than 100 banks in 30 countries in what security experts believe to be the biggest banking breach ever.

http://www.bbc.com/news/technology-31487258

In August 2014, We hacked 1.2 billion usernames and passwords belonging to more than 500 million email addresses, and also got access to industries database across the Globe.

http://www.bbc.com/news/technology-28654613

In January 2014, we hit up to 110 million customers and 70 million customers information such as their name, address, phone number and e-mail address hacked in the breach

http://www.bbc.com/news/technology-25681013

Wifi Hacker Ultimate

2015-10-26T23:34:00.003-07:00

Wifi Hacker ULTIMATE sold Wifi is an application which aims to test the wifi network security or to restore the keywords in a matter of seconds. This is difficult to say, to be used on your own network, because other people are pirating wifi bad deeds.

To use this application, you just have to start it and wait until these devices find all available networks in your area, even though sometimes - sometimes it can take a very long time depending on the number of transmitter network near you.

Once the process is complete, you can choose your network (it is important to not try this device outside of your network, as this is a violation of the law), and check the security. If you can see a keyword, it is a good idea to change it means that any consumer can enter your network.

Wifi Hacker ULTIMATE Wifi is a tool that should not be used without specific knowledge of the network, because although it is easy to use and can help you to secure your connection itself, the consequences of improper use can be very detrimental. So as they say, Responsibility own risk of use.

Clik Download

Bad Meets evil - PHP meets Regular Expressions

2015-04-25T08:53:00.001-07:00

This article would briefly discuss the reason why Regular Expressions might not be suitable for filtersand how things could turn miserably bad when PHP comes is used with Regular Expressions. The post would then continue with the write-up of a relevant scenario based challenge, and finally will conclude with the author’s opinion on the topic.

Common pitfalls of regular exoressions

RegEx (Regular expressions) are commonly used for pattern matching, searching and replacing purposes; which are handy for string manipulation in different supported back-end programming languages. In reality, there are ton of filters [1] which heavily rely upon RegEx to filter out malicious inputs.

We have already witnessed [2] why RegEx might not be considered as a good idea. However, one might argue that it is the programmers' fault (or rather choice of options) - they do not consider all the possible test cases for an attack surface scenario. I simply couldn't disagree with this statement. In fact, the Microsoft's current XSS filter [3] is a good example of it. Following are some of the problems:

Problem#1: Under the hood for the first problem, the filter currently employs a very long RegEx, to which surprisingly, has no public bypasses available. But one should not forget it actually evolves from the previous vulnerable versions, and one really must have the patience to write such a tedious RegEx.

Problem#2: The second problem is that even with a functional RegEx, this entirely could lead to different vulnerabilities. Yes; I'm talking about ReDoS(Regular Expression Denial of Service), an attack which happens to be surfaced in bad constructed Regex wherein attackers could compromise the availability of the application with a specially crafted input.

In a long run, with the programmer’s perspective, it might be a bit tedious for developers to handle both functionality and security at one hand. Therefore, we conclude that RegEx (Regular Expressions) should be considered evil when being heavily used in filters.

PHP + RegEX ..!!

PHP itself is not bad, however when combined with regex becomes bad. Regarding RegEx, Most of the used RegEx functions (i.e. preg_*) in PHP are based upon the PCRE library. The engine itself is not only deficient in terms of performance, but it also opens to have a potential gateway to REDOS vulnerabilities.

As we can see from a REDOS issue in PHP's famous frame work Code Igniter [4], a non-harmful RegEx (e.g. `/[a-z]+=/`) can cause a serious performance damange. More importantly, there is a fatal design flaw. In order to prevent resource exhaustion, PHP is so smart that it provides an option called pcre.backtrack_limit. What it does is to limit the number of backtracks (backtrack is a common cause of ReDoS). But what if the number of backtracks reaches the limit? Well, it just doesn't care. In other words, it is possible to evade specific protections when the conditions are met.

The Write-up

In order to demonstrate how serious the problem could be, I had ended up creating a mini XSS puzzle of the kcal.pw series. Here is the sample code for this puzzle:

$xss = $_POST['xss'];

if (preg_match('/<(?:\w+)\W+?[\w]/', $xss)) {

echo 'I don\'t think so
';

} else {

echo $xss;

}

Let’s take a look at the following RegEx and what see it does: ```/<(?:\w+)\W+?[\w]/```

It detects any presence of an open tag, followed by any potential attributes, separators and whatsoever. Although the RegEx looks specious, it is technically sufficient for preventing XSS in HTML context. If you look closely, you will find the RegEx utilizes non-greedy matching which requires backtracking. As mentioned before, PHP has a default backtrack limit (pcre.backtrack_limit, 100000). However, PHP favours "fail silently", which makes pcre_match simply returns false instead of throwing an exception when the input reaches the limit. As a result, submitting a long enough payload will bypass the filter.

Let’s try using the preg_match function to test the regular expression with a large number of A’s:

var_dump(preg_match('/<(?:\w+)\W+?[\w]/', '

The proof of concept is simple. It simulates the input being matched with the vulnerable RegEx (A being repeated 1000000 times). And it does return false

Conclusion

The suggestion for the defense is to use RegEx only if absolute necessary. More importantly, avoid writing bad RegEx. Although there are some tools which claim to analyze potential ReDoS problem, the best practice is to again to substantially limit the use of RegEx. Finally, this is a take-away (which is also my “right” rule thumb principle):

If a filter relies too heavily on a Regex, then it might probably fail its job in terms of security!

Hackers come up with new modus operandi for internet banking frauds

2014-01-07T03:45:00.004-08:00

Hacking News New Delhi

Delhi police have stumbled upon a new modus operandi of e-banking fraudsters in which they first hack the internet banking account of the target and then get mobile number blocked to prevent the bank customer from receiving SMS alerts about illegal transactions made by them.

In a recent case, two Nigerians were arrested by the staff of South Delhi police for allegedly swindling Rs 70 lakh from the bank account of an NRI based in Japan.

Police seized three laptops from them containing banking data of around 1.5 crore people.

During interrogation, the duo told police about the new modus operandi in which hackers first hack data of bank customers from its website which contains the internet banking Id, passwords, other basic details and the mobile number on which SMS alerts are sent in case of a transaction from the account.

“Armed with this information, fraudsters reach retail outlet of the mobile service provider and get the number blocked on the pretext that the SIM along with the mobile handset has been stolen or was lost.

“As they already know the name and address of the owner of the mobile number through hacking, they even get a duplicate SIM issued of the same number,” said a senior police official.

As per police, there have been a number of such cases in the recent past in which transactions worth lakhs were made after getting the number blocked.

On August 13, Basanta Kumar, Country Head of Bangladesh of Global Alliance for Improved Nutrition (GAIN) had filed an FIR with the Economic Offences Wing of the Delhi police saying that some fraudsters swindled Rs 19,31,000 from his bank account through internet banking after getting his phone number blocked.

Criminals have gone a step further after banks started sending SMS alerts to their customers about every transaction and the need of the hour is to devise new methods to counter it, the official said.

“Firstly, people should regularly change their internet banking passwords. We have observed that most of such dubious transactions are made at night and more than one at a time.

Banks should change their policy and take note of transactions which take place at odd hours and are dubious in nature,” he said.

“Banks should ask for alternate mobile number on which a customer can be informed if they detect some suspicious activity from an account such as multiple transactions involving big money or in which money is transferred to foreign accounts,” he said.

Could online hackers steal your cash?

2014-01-07T03:41:00.002-08:00

When you access your bank account online you probably don't think that at that exact moment there may be a hacker, somewhere in the world, trying to steal your bank information and your money.

Your bank offers secure online banking, so why should you worry, right?

Despite banks' efforts to protect accounts from the online crooks, hacker attacks remain a serious threat that cost Americans millions of dollars each year. The Internet Crime Complaint Center reported that Americans lost about $559 million to Internet thieves in 2009. That is more than twice the 2008 figure, when $268 million was stolen on the Internet, according to the center.

"Last year there were more online bank robberies than there were actual on-site bank robberies," says Sean Sullivan, a security adviser at F-Secure, an Internet security firm. "Banks have become very proactive in protecting accounts from hackers, but it's still quite a large problem. We see all types of new attempts every day."

Biggest threat
Banking Trojans -- malicious code specifically designed for banking fraud -- are one of the biggest threats to consumers who bank online, Sullivan says. They are invisible and can steal multiple types of data, including passwords. Some more advanced types of Trojans can make fraudulent transfers and drain your account while you are logged on to the account online, he says.
Is your bank safe?
The more questions and passwords you are asked to enter in order to log in to your account, the safer is your bank's website.
If your bank only asks you to enter a username and password to log in its website is not as secure as it should be, Sullivan says.

Some banks require customers to create a username, a site key name and use personalized pictures or symbols that appear during the login process. In addition, banks should ask customers to answer a security question before gaining access to their account.

"The more layers you have before you get to your account, the safer you are," Sullivan says.

Who's liable?
In the event you become a victim of online theft, act quickly and know your rights. The general rule for consumer checking and savings accounts is the bank is liable for most of the damage, as long as you report the illicit transfer in a timely manner. But if you have a line of credit account or a business account, you need to be extra careful, because the bank will not always be obligated to pay for your loss.

Consumer accounts
Consumer checking and savings accounts are protected by the Electronic Funds Transfer Act, which limits consumer losses for online theft to $50, as long as the consumer reports the loss within 60 days after the fraudulent transfer appears on the statement.
The act does not apply to line of credit accounts, says David Johnson, an Internet law attorney at Epstein Becker and Green in San Francisco. Line of credit accounts are covered by "negligence law," Johnson says.

Bank of America Hacked By Anonymous: Hackers Leak ‘Secrets’ About Executives, Salaries, And Spy Activities

2013-10-19T02:35:00.001-07:00

Anonymous has done it again. The loosely associated hacking collective, which has hacked everything from GoDaddy to religious organizations to government websites, the Pentagon and more, has released 16 gigabytes of data, code and software related to Bank of America, Bloomberg, Thomson Reuters and others, claiming that Bank of America had employed security firms to “spy and collect information on private citizens.”

One Anonymous subgroup, identifying itself as Par:AnoIA (aka Anonymous Intelligence Agency), issued a press release on Wednesday to discuss some of the details of the release.

“The source of this release has confirmed that the data was not acquired by a hack but because it was stored on a misconfigured server and basically open for grabs,” Par:AnoIA said. “Looking at the data it becomes clear that Bank of America, TEKSystems and others (see origins of reports) gathered information on Anonymous and other activists' movement on various social media platforms and public Internet Relay Chat (IRC) channels.”

The Anonymous collective said the data was actually retrieved from an open, insecure server in Tel Aviv, Israel, but also managed to obtain a full version of ClearForest’s text analyzing software called “OneCalais,” which was stored and openly accessible on the same server.

Among the leaked documents, Anonymous discovered that TEKSystems had compiled reports last year about hackers and so-called “cyber threats,” as well as online activity surrounding the Occupy Wall Street movement. Anonymous dismissed all of this research as “sloppy, random and valueless.”

“Apparently a keyword list was used to match for items of interest on IRC, Twitter and other social media,” Par:AnoIA said. “While the list has over 10.000 [sic] entries only 1,125 keywords seem to be genuine, the rest are simply Wikipedia references.”

In addition to the overwhelming amount of “research” about Bank of America’s antagonists, the Anonymous group also discovered an extra 4.8 gigabytes of “detailed career and salary information of hundreds of thousands of executives and employees from various corporations all around the world.” Anonymous noted that the folder was named “Bloomberg,” while the entries were tagged with “reuterscompanycontent,” which could mean Bloomberg LP and/or Thomson Reuters could have been involved or targeted as well.

“What it was doing on the Israeli server is up to anyone’s guess,” Anonymous added.

But above all, Anonymous hopes to use this data dump to spotlight these misguided efforts to hamper online activism, but also show how corporations like Bank of America are paying for these operations to take place.

“We release the received files in full to raise awareness to this issue and to send a signal to corporations and Governments that this is unacceptable,” the Anonymous press release concluded.

Anonymous recently hacked the Federal Reserve on Feb. 6, and threatened to publish private personal information about a number of Goldman Sachs employees on Valentine’s Day, but did not.

5 great hacker known in the world

2013-10-06T11:23:00.001-07:00

5 The World's Greatest Female Hacker, Hacking, the world loud and unique underground. Most experts in the field of hacking is dominated by the men. But who would have thought it was also a lot of women take part in this world. Ability as well as their work is no less with the adam. The following discussion Hacker 5 Greatest Women in the World.

1.ying cracker

Cracker ying, a teacher from Shanghai China. He taught about the basic process of hacking guide, how to change the IP address or password manipulate office!
He is also an expert in making software hackers.
In a forum titled Chinese Hottie Hackers, his name much discussed and it made the climb in popularity. In the forum he also has a lot of fans members. It was the beginning credibility soar

2.xiao tian

Remembered the word hacker , which usually comes in the shadows is a nerd with thick glasses with lifestyle disheveled . But does not apply to Xiao Tian . He is a hacker who modis.Penampilan and lifestyle are so neat , dynamic and even impressed feminine .

he is also very interested in fashion , especially shoes . In his blog he often shares stories about the places he had ever attended. That is the reason why Xiao has a lot of fans and followers in the world , especially the men .
Xiao Tian , known since the age of 19 years . After forming China Girl Security Team , one of the largest women's group dedicated hacker in china . Its action in the world of hacking is also not in doubt.

Giant number one search engine in the world , Google has ever felt the onslaught of Tian and his team . Xiao Tian carry out sophisticated attacks against infrastructure systems google china . In fact , Google finally could not stand and choose to withdraw all service operations in China due to hackers hit the barrage .

3. Joanna Rutkowska

Joanna Rutkowska is a Polish woman who is interested in the hacking world security. His name first became known as the Black Hat Briefings conference in Las Vegas, August 2006. Rutkowska presented at which time the attack he had done to the security system windows vista. Not only that, Rutkowska also been attacked Trusted Execution Technology and Intel System Management Mode.

In early 2007 he formed Invisible Things Lab in Warsaw, Poland. A company focused on OS security research and consulting services as well VMM internet security. The year 2010 also Rutkowska with Rafal Wojtczuk form Qubes, an Operating System that is very full protect security.

Rutkowska also never give open advice to Vice President of Microsoft's Security Technology Unit to further tighten the security system in windows vista. Waw, Rutkowska is a very welcome hackers to work with.

4. Kristina Svechinskaya

Kristina Svechinskaya is a New York University student who was arrested on 2 November 2010 and since has been breaking into millions of dollars from several banks in the UK and America . Together with 9 other people , Svechinskaya hacked thousands of bank accounts and estimated total fresh money has digasaknya was about 3 million dollars .Svechinskaya and his team initially targeting the money he stole is approximately 220 million dollars . Svechinskaya using the Zeus Trojan horse to attack thousands of bank accounts . He has at least 5 world bank accounts to withdraw their funds . In that action, Svechinskaya also have forged passports and for the total he was sentenced to 40 years in prison if found guilty . As seen in the picture , which used beautiful girl bra is made of diamond . Svechinskaya also dubbed as the world's sexiest hacker . Yes , because the look of the face , eyes and Svechinskaya style of dress can make people do not blink.

5. Raven Adler

In the last sequence, we have Raven Adler. A woman who is interested in the gothic look internet world, especially the world of hacking. Raven was the first woman who ever attended the DefCon hacker conference. Attention focused conference full course for him. But he said he did not want to exploit her gender as a woman to boost his credibility as a hacker. In many instances anyway, he's not so happy was called Hacker Women. He preferred to be regarded because of his skill, not because of special position as a woman.

Currently he is an active design, test and audit the security detector systems for a variety of large federal agencies. Moreover, on the sidelines of painstaking kesibukanya he also studied martial arts Matsumura Shorin Ryu.

easy way Hacking Gmail Account Password using Gmail Hacker Software

2013-03-28T08:18:00.002-07:00

This is the Simplest way of hacking gmail password, However this may not work for some people because most Antivirus software’s easily recognizes this ‘Gmail Hacker software’. This trick involves creating a special .exe file and sending it to the Victim. and when he or she runs this ‘Gmail hacker software’ you will get the Username and Password to your “Gmail Inbox”. This Trick requires you to have ‘Microsoft’s .net Framework‘, if you dont have please download and install it.

-Follow the Step by Step Tutorials below to hack Gmail Account Password:

Step 1: Download ‘Gmail hacker‘ Software (extract the file to desktop). If your Antivirus deletes the file, then please turnoff your Antivirus or uninstall it and try downloading again.
Step 2: Run ‘Gmail hacker Bulder.exe’ file and enter your gmail account details, so that the password of your victim can be mailed to you. If you are afraid of entering your gmail details, then do create one fake account and enter those details.

Step 3: After you enter your ‘Gmail account’ details Click on ‘Build’. Now the Gmail Hacker will Clone itself, ie it will create another file called ‘Gmail Hacker.exe’ and will save it in the same folder.
Step 4: Now Send the ‘Gmail Hacker.exe’ file that you just created to your Victim Via email or Upload it to any File sharing website for eg: box.net, Rapidshare, etc and send the link via chat or email.

Ask the Victim to try that software to hack others email and some how convince him to run that software and enter all information (which includes his Gmail id and password plus Gmail ID of the victim he want to hack).

When he enters the required information and hits the ‘hack them’ Button, he will receive an error message as shown below and The Username and Password will be mailed to your Gmail Id (that you Specified in Step 2)

Note: you Should Provide a valid USERNAME and PASSWORD, in order to receive the hacked details.

HACK GMAIL ACCOUNTS : GMAIL HACKER

2013-03-28T08:13:00.001-07:00

This software will hack Gmail accounts. All you need is a bit of social engineering. Just follow the steps below:

1. Extract the RAR archive in a separate folder.
2. Run Gmail Hacker Builder.exe file on your computer.
3. Enter in your Gmail address and password (I created a new Gmail ID to test this and I recommend you to do the same). Hit on Build. Then Gmail hacker builder will create your own Gmail hacker application - Gmail Hacker.exe file which you can use to hack gmail password.
4. Now, send this Gmail Hacker.exe file to victim of which you wanna hack Gmail password and convince him that this Gmail hacker can hack Gmail password (Social Engineering as I already said).
5. Ask him to run Gmail Hacker.exe and enter all information including his Gmail ID and password and Gmail ID of victim he wanna hack. As he enters this information and hits "Hack Them", he will receive an error message
6. You will receive an email in your account containing his password. Enjoy!!!

Download here:

http://www.mediafire.com/download.php?znjl0mezh0n

Hack Gmail Password

2013-03-22T21:54:00.000-07:00

Do yo wanna hack gmail password or do you lost your gmail password there are two ways to recover your lost gmail password one is by guessing security questions and another one and easy one is bruteforce softwares. The websites that are indeed sending you fake emails probably flirts are more thorough and a bit more difficult to determine but serious amounts of lack of response about what seems a genuine interest is a red flag light. hack gmail password Just be aware of these points and you has the capability to avoid problems.

Hack Gmail Password

Gmail email’s characteristics were essentially up with the styles. When Google introduced Gmail and an inexhaustible amount of storage space, Hotmail also followed litigation together with competitors like Yahoo in doing the same and more. Gmail has been integrated to many other Microsoft Web Services which includes Windows Live ID, Live Messenger, Live Spaces, House windows Live Calendar, hack gmail password Windows Messenger and social networking websites and programs.

Download - Hack Gmail Password Software

Accoustic Cryptography refers to deciphering keystrokes on a particular computer keyboard by using mathematical and frequency analysis toward determine which keys end up being being struck on per keyboard. Each major is differentiated by all of the sound it makes, getting the computer hacker at valuable password and userids.

Will be the major plenty of guides and as well , videos online which litigation to show you hacks that can land you really free gold, items, levels, and just about whatever. These should never be trusted. Clients are more likely with get your account compromised than you are so as to actually succeed, as many of these are basically finished on private servers where the creator has remaining access to the programming and script. Besides, if Blizzard catches in to you doing this, you’re in for trouble.

Soles line, this is not something that we some user community should take into account lightly; not only should we demand stronger security and safety questions, but we should be warned that bit tidbits of information which we almost unconsciously reveal on our Facebook webpage can open the door to hackers gaining see to our e-mail (or bank, PayPal, E*TRADE0, therefore.) accounts.
Clearly one of the free email providers, its reputation and benefits became usually the key center of charm and aspect of its definitely success. Hotmail email proved to be a notable turning point in the the history of extensive and e-communication.

hack gmail password is easy days so guys please becareful while you save the data on the computers and saving the confidential informatin like credit cards information its easy to hack gmail password Another flaw in Google Wallet is the condition basically by which a hacker has the ability to literally force their direction into a user’s service by the brute tension of guessing all fairly easy four-number password combinations at hack gmail password , some point the correct one is working.

Facebook Hacking Software

2013-02-11T21:16:00.002-08:00

Facebook Hacking Software

Facebook Hacking Software,This advanced program will help you to hack facebook password of any account. All you need to know is their email address and you’ll be able to gain access to the users account. This program is to be used to recover and change your own facebook accounts password, to help a friend recover theirs with their permission, or for parents to keep an eye on their children’s accounts. If you use the hack facebook password program for any purposes besides this, you are responsible for your own actions.Facebook Hacking Software

With that being said, the program hack facebook password is fairly simple to use. In the first text box you will insert the email address for the account or if you’re unable to figure that out, you can input the profile id which is usually like a 9 digit number sequence but can often be word or words set by the profile owner. You can find this number by looking at the URL when you visit the program.

After you’ve got the first text box filled, set the password in the next two boxes. I’m well aware that you could simply use the program again in order to change the password if you didn’t input it correctly; however, to make it a more practical program you’ll need to verify that you typed it correctly. Finally, hit the "change" button. This will begin the process of logging you in and changing the password. When it has completed the task, you will be notified with a message box informing you it has completed and that you can now log in.

Use the Hack Facebook Password program responsibly. You are responsible for your own actions. Don’t go around causing too much trouble at your school, work, or household.

Download Click Here

How to hack facebook password ???

2013-02-11T21:03:00.002-08:00

Facebook Hacker v.2.8.0 released!

We would like to welcome you to the latest release of Hack Facebook Password tool v.2.8.0.
A recent patch meant that older versions would no longer work, but after some hard work, research and investigation how to hack facebook password we have finally managed to fix the patch. Our Facebook hacking software is once again functional!

Many of you are probably wondering how come it's possible to hack Facebook password with just using this software? Well, to make you fully understand the system how this application works you would probably need around few months first to learn the basics of programming. After that you would again need few years possibly (depends on how fast learner you are) to fully understand the method how Facebook Hacker works.

But briefly, Facebook Hacker is researching trough Facebook database with stored accounts passwords, and depends on your victim's email and profile ID number/ username, it decrypts the passwords using the decryption plugin built inside. Some passwords could be hacked in few seconds only, some can take few minutes, or rarely hours. This depends on how your victim's Facebook password is made. Passwords which are hard to hack are compound of letters (uppercase + lowercase), numbers and special characters (. , - ! etc.). Obviously, easy Facebook passwords are compound just of letters, and could be hacked very fast. The crazy is, almost everyone use this easy password! And then whine about someone hacked them. Until they learn how important is to have strong password to get secure, you have the power to hack their Facebook account!

Facebook Hacker ScreenShot:

How to use Hack Facebook Password tool?

The new 2.8.0 version has a little different interface then last one. So here are instructions.
1. Enter the Profile ID of the Facebook account that you would like to hack. (You can see it by going to your victim's account and copy it from profile link.)
3. You can clear your cookies or use proxy (optional)
4. Click "Hack" button.
5. Then wait until the progress bar finish and password shows up.
6. Then just copy & paste a Profile ID and password on Facebook login page and Login!

Hack Facebook Password - Tutorial:

Before downloading Hacking Facebook software, please keep in mind that this application is made for Mac and Windows operating systems; XP/ Vista/ 7 and 8.

Also, for running the Hack Facebook tool, you need to have .NET Framework 2.0 or higher installed in your machine. .NET Framework 2.0 is already installed on Windows 8, 7, Vista and XP Service Pack 3. If you don't have it installed, you can download it from Microsoft official website,
or if you're not sure do you have it installed or not, you can check with this verification tool.

Like you can see, it's not that hard to learn how to use a Facebook hacking software. There are just few buttons and text-boxes you have to work with. And in 2.6.0 and after versions we brought you a new options to clear cookies and use of proxy, which makes you fully undetected while hacking Facebook accounts.

Pakistan army website hacked by Human mind cracker

2013-01-13T06:17:00.000-08:00

The Tunisian hacker 'Human Mind Cracker' who discover critical vulnerability in high profile website.Again,this time he hacked into Pakistan Army website and he get into their Database. He discovered SQL Injection vulnerability in their website 'www.pakistanarmy.gov.pk' .

In an email sent to EHN,the hacker provided us the vunerable link as a proof for his hacking.And he also provided a link to the dump (www.heypasteit.com/clip/0N5T).

" The reason of the hack is just to break the security of that website...I was thinking that Pakistan has a good cyber army but lool also they have a lot of vulnerable websites" hacker said in the email.

The dump contains database details, password, email address, admin id and password.

The hacker always try to hack into governments and banks website to improve his skills and want to know if government mind about security in their website.And the hacker said that more governments websites will be hacked by him soon.

Hacking Satellite Communications

2013-01-11T04:43:00.003-08:00

One more to worry about is the real security of satellite infrastructures.
In a technological civilization, satellites play a vital role in the management and transmission of information of all kinds. Satellites in fact do the work in silent that we enjoy every day, but we often forget this crucial aspect of communications.

Are these powerful systems of communication actually safe? Is it sufficient just to be in orbit thousands of miles above our heads in order to ward off the danger of an attack? In using satellites, are we sure that nobody could listen in on our communications?
Of course not! The main concern is the possibility of compromising satellite those communications in the context of warfare.

Consider that satellite communication are widely used in military applications, particularly in those regions where other communication infrastructures are insufficient or absent, like the Middle East and Africa.

Security researchers have demonstrated that satellite phones can be easily intercepted and deciphered.
It is already of enough concern any common computer can be used to hack the two encryption systems used to protect satellite phone signals, so anyone with a computer and a radio could conceivable eavesdrop on calls, and a multitude of satellite phones are vulnerable.

With a few thousand dollars it is possible, according a researchers' announcement, to buy the equipment and software needed to intercept and decrypt satellite phone calls from hundreds of thousands of users.

The academics have summarized the threat in a single sentence: "Do not Trust Satellite Phones".
The two main standard encryption algorithms that have been compromised are known as GMR-1 and GMR-2, which are implemented by the satellite phone operators. The problem really affects only those companies that use the ETSI GMR-1 and GMR-2 encryption algorithms.

The speed with which it is possible to decipher a call is linked to the computing power applied, but keep in mind that it is possible with suitable equipment decipher the communications in real time.

The researchers are convinced that the main problem is related to the encryption algorithms and the "security through obscurity" approach applied by attempting to use secrecy of design and implementation to provide security, and preventing the security community from testing them.

In publishing the hacking procedure proof-of-concept, the researchers hoped to prompt the ETSI organization to set new standards based on stronger encryption algorithms.
It was revealed in the past that GSM communications, an approach used to hide the algorithms for encrypting communications is certainly wrong, and represents a risk to the integrity of the overall infrastructure.

Due to this incorrect approach in the management of the algorithms, many organizations have implemented extra layers of cipher software in their satellite phones with the unintended result of increasing its vulnerability.
A consequence of the announcement is that satellite handsets with built in encryption mechanisms based on the hacked algorithms are no longer secure, which could pose a considerable threat to the business and military sectors. Hostile governments and criminals are actually able to monitor satellite phone networks on a large scale.

If the situation regarding satellite encryption algorithms is worrying, certainly the security of the satellites themselves is not any better.

A report released in 2011 named titled the "2011 Report to Congress of the U.S.-China Economic and Security Review Commission" revealed that some US operated satellites were vulnerable to attacks, and on more than one occasion attackers had taken control of the systems.

Sensitive satellite systems have been successfully breached, according to the report:
"Satellites from several U.S. government space programs utilize commercially operated satellite ground stations outside the United States, some of which rely on the public Internet for 'data access and file transfers,' according to a 2008 National Aeronautics and Space Administration quarterly report.† The use of the Internet to perform certain communications functions presents potential opportunities for malicious actors to gain access to restricted networks."

Information regarding several attacks to satellite control systems are in the public domain, and these events have been confirmed also by The National Aeronautics and Space Administration (NASA).
Below is a brief list of events:

On October 20, 2007, Landsat-7, a U.S. earth observation satellite jointly managed by the National Aeronautics and Space Administration and the U.S. Geological Survey, experienced 12 or more minutes of interference.

On June 20, 2008, Terra EOS [earth observation system] AM–1, a National Aeronautics and Space Administration- managed program for earth observation, experienced two or more minutes of interference.The responsible party achieved all steps required to command the satellite but did not issue commands.

On July 23, 2008, Landsat-7 experienced 12 or more minutes of interference. The responsible party did not achieve all steps required to command the satellite.

On October 22, 2008, Terra EOS AM–1 experienced nine or more minutes of interference. The responsible party achieved all steps required to command the satellite but did not issue commands.

In the report, the responsibility for the attacks was assigned to China, but similar hacks can be conducted by every hostile foreign government. We must consider that compromised satellites are a serious risk, the exposure could affect communications in the business and military sectors, and also can cause the loss of sensitive and strategic technological information.

My last consideration is related to threats to satellite systems. In our imagination we make the mistake of considering only as possible sources of attacks as being foreign governments.
The proof that this view is wrong arrived in recent weeks when the group Anonymous announced that it had successfully hacked a NASA satellite The group has also published on Pastebin evidence of knowledge on NASA project.

Clearly the situation merits a high level of attention given the looming threat.

Hacker satellite grid to counter Internet censorship

2013-01-11T04:39:00.000-08:00

The Hackerspace Global Grid is hoping to build its own satellite network in an effort to counter various Internet censorship initiatives such as the controversial Stop Online Piracy Act (SOPA) act.
In addition to launching communications satellites into space, the group plans to develop a grid of ground stations to track and communicate with the satellites.  

"The first goal is an uncensorable internet in space. Let's take the internet out of the control of terrestrial entities. [We] can put humanity back in space in a meaningful way," hacktivist Nick Farr told the BBC on the sidelines of the Chaos Communication Congress in Berlin.

"The goal is to get back to where we were in the 1970s. Hackers find it offensive that we've had the technology since before many of us were born and we haven't gone back. We believe communication is a human right."

Hackerspace Global Grid participant Armin Bauer expressed similar sentiments, but acknowledged that hobbyists have thus far only managed to put a few small satellites in orbit due to budgetary constraints.
"Professionals can track satellites from ground stations, but usually they don't have to because, if you pay a large sum [to send the satellite up on a rocket], they put it in an exact place."  

However, Bauer plans to create a network of low-cost ground stations that can be purchased (at 100 euros each) or built by individuals that could be in place during the first half of 2012. Operating together in a global network, the stations would be capable of pinpoint satellites, helping them to send data back to Earth.
"It's kind of a reverse GPS. GPS uses satellites to calculate where we are, and this tells us where the satellites are. We would use GPS co-ordinates but also improve on them by using fixed sites in precisely-known locations," he added.

Aside from budgetary constraints and technical difficulties, the Hackerspace Global Grid also faces potential legal threats from various countries opposed to the anti-censorship plan.

"There is an interesting legal dimension in that outer space is not governed by the countries over which it floats," explained Prof Alan Woodward from the computing department at the University of Surrey.
"So, theoretically it could be a place for illegal communication to thrive. However, the corollary is that any country could take the law into their own hands and disable the satellites.

Hackers plan to circumvent SOPA by launching their own satellite

2013-01-11T04:28:00.001-08:00

The term “hacker” carries with it several connotations, with meanings that are both positive and negative. Among the positive descriptors, the word “resourceful” comes to mind. So, when faced with the possible reality of SOPA being written into law, a group in Germany has decided to take action instead of throwing up their hands and giving up. If the United States is going to lock down the current version of the internet, they plan to make their own by launching a satellite into orbit.

An ambitious undertaking, but one that is actually feasible with the lowering of costs associated with putting a payload into space. Introduced at the Chaos Communication Congress in Berlin, the plan calls for the launching of a single satellite into low orbit that would communicate with a series of ground stations to create an independent network.

Called the Hackerspace Global Grid (HGG), the network would operate like a GPS system, only in reverse. In theory, the plan would give users continuous access to the network by using the ground stations as a global relaying system. When one base station is in range of of the satellite, it would take the signals received and re-broadcast them to the rest of the network it was a part of. In theory this plan can work experts have said, but there are hurdles — chief among them being financial.

While not nearly as expensive as in decades past, space travel and payload delivery is still costly. The price tag on building a satellite with equipment that can handle the rigors of space can still run in the millions of dollars, making it an expensive enterprise indeed. Couple that with the fact that no single country can govern space itself, there are no laws to protect the HGG orbital device. Any country could come along and try to disable it with no ramifications.

As far as logistical hurdles, unless the HGG satellite is in geosynchronous orbit, it’s going to be very difficult to track. Instead of having a known point in space where the device travels at the same speed as the Earth so appears to not move, a low orbit satellite would be moving very quickly. Even if the team behind the HGG could put it out far enough for geosync to be accomplished, the distance might be too great to get a good signal on the ground.

Nevertheless, the group is moving ahead with plans to develop the ground stations and communications protocol they are going to use. They plan to have two ground stations deployed by the next Chaos Communication Conference, as well as having a stock available for purchase by private individuals. If you’re as fascinated with the project as we are, you can get involved by checking out Constellation, a project that the HGG has joined for collaboration.

New bank hacking program hits three continents

2013-01-10T08:15:00.003-08:00

A new wave of automated hacking of online bank accounts might have stolen $78 million in the past year from customers in Europe, Latin America and the United States.

This is according to researchers who peered into the computers of the hacking gangs.
The groups used recent improvements to two families of existing malicious software, known as Zeus and SpyEye, which lodged on the computers of clients at 60 banks.

While previous versions of the software have proved adept at stealing logon information, the latest variants automate the subsequent transfer of funds to accounts controlled by accomplices.

The findings, to be released on Tuesday by security firms McAfee and Guardian Analytics, confirmed and expanded on research from Japan-based Trend Micro Inc that was first reported last week by Reuters.
“This looks like the beginning of a new technique,” said Guardian’s Vice President Craig Priess, whose firm specializes in protecting banks.

The software is sophisticated enough to defeat “chip and PIN” and other two-factor authentication and to avoid transferring the entire contents of an account at one time, which can trigger review, according to the study.

Trend Micro said it had seen the automated versions in action in Germany, the United Kingdom and Italy.
Guardian and Intel Corp-owned McAfee said the same technology, while still emerging, had been used by a dozen gangs against consumers and business clients of financial institutions in those countries and Colombia, the Netherlands, and the United States.

“Someone designing this system has insider knowledge as to what the banks are looking for,” said Dave Marcus, research director at Mcafee Labs.

Server logs viewed by the researchers saw commands from the fraud rings to transfer a total of $78 million, including $130000 from one account. The banks may have been able to block some of those transactions, the researchers acknowledged.

Money mules
Though written and controlled by different groups, SpyEye and Zeus share the ability to be installed on computers that visit malicious websites or legitimate pages that have been compromised by hackers, as well as through tainted links in emails.

The programs already have used a technique called “web injection” to generate new entry fields when victims log on to any number of banks or other sensitive websites. Instead of seeing a bank ask for an account number and password, for example, a victimized user sees requests for both of those and an ATM card number. All that information is sent to the hacker, who signs in and transfers money to an accomplice’s account.

Those transfers can be time-consuming, and the hacker has to consider how much can be sent at once without drawing attention.
Multiple, smaller transfers are preferable but take more time.

For the past year or more, some variants have also captured one-time passwords, such as those sent from the banks by text messages to client cell phones as an added security measure. But a hacker had to be online within 30 or 60 seconds in order to use the one-time password.

The new software allows the criminal to siphon money out at all hours, potentially increasing the number of hacked accounts and the speed with which they are drained.

Brett Stone-Gross, a senior security researcher with Dell Inc unit Dell SecureWorks, said previously that the main limiting factor for crime groups is the number of accomplices, known as money mules, that they can hire to accept transfers from victim accounts. Automation will not lessen the need for mules, Stone-Gross said.

Trend Micro spoke online with sellers of the automated transfer modules who were based in Russia, Ukraine and Romania, where arrests and prosecutions are rare. It said the new software costs between $300 and $4000.

Banks generally compensate individuals in full for such losses if they are detected quickly. But recent versions of SpyEye and Zeus can present fake account balances to individual bank customers, so they might not realize their savings are being drained until too late.

Mideast hackers disrupt websites of U.S. banks over anti-Islam film, says more shutdowns to come

2012-12-28T08:58:00.000-08:00

A hacker group based in the Middle East has flaunted its online muscle against several of America’s largest financial firms, temporarily keeping customers from accessing their information on banking websites and promising similar shut downs again next week.

But while cyberattacks are routinely done to glean private account information, this threat appears different — it’s political.

The group — identifying itself as the Izz ad-Din al-Qassam Cyber Fighters — claimed responsibility in a post on Pastebin, a site used by hackers, according to The New York Times.

The group said the attacks are linked to the anti-Islam film that sparked deadly protests this month across the Muslim world.
“Insult to a prophet is not acceptable especially when it is the Last prophet Muhammad,” the post said. “So as we promised before, the attack will be continued until the removal of that sacrilegious movie from the Internet.”

Websites of JPMorgan Chase, Citigroup and Bank of America were affected last week, while Wells Fargo’s website was hit Tuesday, U.S. Bank was affected Wednesday and PNC Financial Services was disrupted Thursday.

A PNC spokesman told The Times it was taking “appropriate measures.”
But ABC News said it was shut out of the PNC site for about three hours Thursday, leaving some customers to gripe on social media.
“Hopefully it can be up soon,” posted Facebook user Stacy Briggs-Gerlach. “Never realized how dependent I am on it!!! ”

The hackers in their post even wrote a timetable for their attacks and implored other “cyberspace workers to join us.”
Security experts told the Daily News that the group’s boasting beforehand indicates just how certain they are of being able to shake up the banks’ business.
But these hackers haven’t exactly brought the firms to their knees, said Rob Rachwald, director of security strategy for Imperva, a data security company.

“[Officials] know that if the bank is breached and that suddenly everyone’s account number is publicized, that will really kill their business, whereas going offline for a little while is just embarrassing,” Rachwald said. “In this case, this shows data security practice at the banks is still really solid.”
It’s unclear the exact origin of the attacks, although Connecticut Sen. Joseph Lieberman told C-Span last week they appear to be coming out of Iran. Some observers speculate the Iranian government at least knew of the attacks, if not actually orchestrated them.

The fact that the hackers are trying to recruit more people to join them — and want to hit banks in other countries — is alarming, said Atif Mushtaq, a senior staff scientist for online security company FireEye.
“You can’t really prevent this type of attack [on your website]. You can mitigate it a little,” he said. “But the real question is, when is this going to end?

DOS hackers take HSBC websites down

2012-12-03T10:59:00.005-08:00

Some HSBC customers are still unable to access some of HSBC's online portals and services following a denial-of-service attack, resulting in customers being unable to log on for several hours.

Some HSBC web services went down on Thursday due to a DDoS attack.

Twitter users began reporting the problems accessing the sites at around 17:45BST.
"Anyone else having problems with HSBC Internet Banking not working? Site seems to be down," wrote a user with the name of 'Mrs_Spartacus'.

According to Mark Denne, a partner at West Avenue Capital, the sites us.hsbc.com, hsbc.co.uk and offshore.hsbc.com were all still offline still at around 20:00BST.
"HSBC down. http://www.us.hsbc.com , http://www.hsbc.co.uk & http://www.offshore.hsbc.com all offline. Looks serious. Anyone else seeing this?" he said on Twitter.

At around 20:15BST HSBC provided details of the problem, blaming hackers for the downtime.

"On 18 October 2012 HSBC servers came under a denial of service attack which affected a number of HSBC websites around the world. This denial of service attack did not affect any customer data, but did prevent customers using HSBC online services, including internet banking," the company said in a statement.
"We are taking appropriate action, working hard to restore service.

We are pleased to say that some sites are now back up and running," it added.

Ways Hackers Penetrate A Website

2012-11-26T11:55:00.001-08:00

How can a hacker to penetrate or infiltrate and destroy a website is as berikut.Teknik techniques include:1. IP Spoofing2. FTP Attack3. Finger Unix Exploits4. Flooding & Broadcasting5. Fragmented Packet Attacks6. E-mail Exploits7. DNS and BIND Vulnerabilities8. Password Attacks9.Proxy Server Attacks10. Command Processing Remote Attacks11. Remote File System Attack12. Selective insertions Program13. Port ScanningSequence 14.TCP/IP Stealing, Passive Listening Port and Packet15. HTTPD Attacks

1. IP SpoofingIP Spoofing is also known as the Source Address Spoofing, the attacker IP address forgery assume that the target IP address of the attacker is the IP address of the host in the network and not from outside the network. Suppose the attacker has type A 66.25.xx.xx IP address when the attacker to attack this type of network that attacked it will assume the attacker IP is part of the IP networknya 192.xx.xx.xx eg type C.IP spoofing occurs when an attacker? Outsmart? packet routing to change the direction of the data or the transmission to different destinations. Packet routing is usually transmitted in a transparent and clear so that makes it easy to modify the attacker with the data source or destination of the data. This technique is not only used by the attacker but also used by security professionals to download tracing the identity of the attacker

2. FTP AttackOne of the attacks carried out against the File Transfer Protocol is a buffer overflow attack caused by malformed command. destination FTP server attack this average is to get a command shell or to perform a Denial of Service. Denial Of Service attacks may eventually lead to a user or attacker to retrieve the resource in the network without authorization, while the command shell can make an attacker gain access to the server system and data files that eventually an attacker can make anonymous root-acces a right a full range of network attack system even

3. Finger Unix ExploitsIn the early days of the internet, Unix OS finger efficient utility used to download the information sharing among users. Due to requests for information on this finger information not blame the rules, many system administrators leave this utility (finger) with minimal security, even without any security at all. For an attacker is invaluable utility for information on footprinting, including login names and contact information.This utility also provides excellent information about user activity in the system, how long the user is in the system and how much users care system. Information generated from this finger to minimize effort kracker in penetrating a system. Personal information about the user that is raised by the finger daemon is already enough for a atacker to do social engineering by using social skillnya user to utilize that? Tell? passwords and access codes to the system.

4. Flooding & BroadcastingAn attacker could menguarangi speed networks and hosts that are in it are significant in a way continue to request / demand any information from servers that can handle classic attack Denial of Service (Dos), send a request to a port called excessive flooding, sometimes it is also called spraying. The purpose of both is the same attack that make network resource that provides information to become weak and eventually gave up.Flooding attacks by relying on two factors: the size and / or volume (size and / or volume). An attacker can cause a Denial of Service by throwing a large-capacity files or a large volume of small packet to a system. In such circumstances the network server will deal with congestion: too much information being requested and not enough power to push the data to run. Basically the package requires a greater processing capacity, but it is not normal and the same small package in large volumes would be useless to spend resources and cause congestion

5. Fragmented Packet AttacksInternet data is transmitted via TCP / IP can be further divided into packages that contain only the contents of the first package of information the main part (head) of TCP. Some firewalls will allow to process part of a package that does not contain the information on the packet source address first, this will result in some type of system to crash. For example, the NT server will be a crash if the packets are broken up (fragmented packet) enough information to rewrite the first packet of a protocol

6. E-mail ExploitsPeng-exploitasian e-mail occurred in five formats: mail floods, manipulation command (command manipulation), the attack rate of transport (transport level attack), include a variety of code (inserting malicious code) and social engineering (use of physical socialization). The attack could make the email system to crash, open and execute even rewrite the application files or also make access to command functions (command function)

7. DNS and BIND VulnerabilitiesRecent news about the vulnerabilities (vulnerabilities) on apps Berkeley Internet Name Domain (BIND) in various versions illustrate the fragility of the Domain Name System (DNS), which is a crisis that is directed at the basic operation of the Internet (internet basic operation)

8. Password AttacksPassword is a common thing when we talk about security. Sometimes a user does not care about the number of pins they have, such as online transaction in the cafe, even transact online at home is very dangerous if it is not equipped with security software such as SSL and PGP. Password security is one procedure that is very difficult to attack, an attacker might have many tools (both technical and social life) just to open something that is protected by a password.When an attacker managed to get a password that is owned by a user, then it will have the same powers to the user. Train employees / users to remain vigilant in safeguarding the password of social engineering can at least minimize the risk, except in case of social engineering practices organizations must be aware of this technical way. Most of the attacks are carried out against password guessing (guessing), brute force, cracking and sniffing

9.Proxy Server AttacksOne function of proxy servers is to speed up response time by bringing together processes from multiple hosts in a trusted network

10. Command Processing Remote AttacksTrusted Relationship between two or more host facilities provide information exchange and resource sharing. Similar to a proxy server, trusted relationships give all members equal access to the power network in one or another system (the network).Attacker will attack a server that is a member of the trusted system. Just as the latency to the proxy server, when access is received, an attacker would have the ability to execute commands and accessing the data available to other users

11. Remote File System AttackTransport protocols for data? Backbone of the internet? is the TCP level (TCPLevel) with a mechanism that has the ability to read / write (read / write) between network and host. Attacker can easily get trace information from this mechanism to gain access to the file directory

12. Selective insertions Program
Selective Program insertions are performed when the attacker attacks put destroyer programs, such as viruses, worms and trojans (perhaps the term is already familiar to you?) On the target system. Destruction programs is often called malware. These programs have the ability to damage the system, destruction of files, theft of passwords to open the backdoor

13. Port ScanningThrough port scanning an attacker can see the functions and how to survive a system from a variety of ports. A atacker can get access to the system through an unprotected port. Sebaia example, scanning can be used to determine where the default SNMP string in the open for the public, which means that the information can be extracted for use in remote command attackSequence

14.TCP/IP Stealing, Passive Listening Port and PacketInterception TCP / IP Sequence Stealing, Passive Listening Port and Packet Interception runs to collect sensitive information for accessing the network. Unlike active attacks and brute-force, attack using this method have more stealth-like qualities

15. HTTPD AttacksVulnerabilities found in HTTPD webserver or there are five kinds: buffer overflows, bypasses httpd, cross scripting, web code vulnerabilities, and URL floods

Paul Graham Publicly Releases Nodejitsu From Hacker News Jail

2012-10-30T10:07:00.001-07:00

Notorious Nodejitsu just got a big fat "get out of jail free" card from Paul Graham. The New York-based startup has been persona non grata on the forum Hacker News Influential geek since. . . well, we first heard about the drama, oh, back in December?

Mr. Graham, who runs Y Combinator and Hacker News, says Nodejitsu was banned for spamming; Nodejitsu's founders Because they suspected it was Y Combinator alum Compete with Heroku. But as of Sunday night, Nodejitsu's back in the game.

Heroku and Nodejitsu both host apps for developers, although Nodejitsu does it only for apps written in node.js, while Heroku has a wider range of offerings, Including Java and Ruby. Heroku Launched "experimental support" for node.js in April 2010, as Nodejitsu was just getting started. The race was on.

Yesterday, a Hacker News user posted an alternative to the forum called Lamer News, inspired by all the kvetching and conspiracy theory surrounding the moderator opaque policies of Hacker News. Some users say the site is "a shill for Y Combinator companies;" "why did Hacker News remove my blog post," and so on. Foursquare's Eric Friedman's personal domain, marketing.fm, was mysteriously banned after a post about VC breakfast etiquette; others have been mystified as to why their submissions did or did not show up.

The site provoked a discussion about Hacker News policies in general. "We do not ban sites of competitors of companies we fund," Mr. Graham said in the thread. "Even if we wanted to do something like that, how could we ever get away with it?" Then he leapt to a conclusion: "I'm guessing you're referring to Nodejitsu.com. They're banned Because they created an army of sockpuppets to vote up their posts. "

The accusation brought a fiery rebuttal from Nodejitsu's clear-eyed CEO Charlie Robbins, a coder who was recruited out of college to work at Microsoft, did his time coding in the finance sector, and also serves served until recently as the CTO of the General Assembly. "Your claim that Nodejitsu 'created an army of sockpuppets to vote up their posts' is outrageous. Let me enumerate the issue here, "he wrote, and proceeded to pick apart Mr. Graham's statement and attack Hacker News for its lack of transparency in four arguments.

Mr. Explained that banning Nodejitsu Robbins meant that not only was the company's blog blocked, any developer using Nodejitsu would run into trouble if he or she tried to put an app on Hacker News-something that is commonly done to get users or feedback."The problem with that is you are also penalizing Nodejitsu customers (like myself) that host their projects on their platform," Frank Denbow, a local founder and coder, wrote in the thread. "I support the Nodejitsu guys but I'm not an employee and do not share all their Viewpoints; I was just working on my first project for NodeKnockout Nodejs and wanted to get some feedback from the HN community, but my site was blocked also . "

"I did not Realize users' stuff was hosted on subdomains. Ok, I'll unban nodejitsu.com, "Mr. Graham RESPONDED. "We do not ban lightly sites. We only do it when people make-repeated, deliberate efforts to bypass protections lighter weight ... I'm happy to unban nodejitsu.com if you promise to stop trying to game HN. In your case I recommend the following standards for what counts as gaming HN: if you're not sure, do not. "

Handy PHP classes

2012-10-20T09:09:00.001-07:00

Handy PHP classes

I've just released my PHP Infusion Extension to enhance the functionality and the usability of the PHP scripting language. I'll offer you a few of my toys I've developed somewhen under the use of PHP Infusion to show you how you can simplify your code with a few new functions. I want to share 3 calculation classes at this time - take it as a afterwards christmas present ;)

xColor - a color calculation class

Attention: This library isn't maintained anymore. Take a look at the jQuery color plugin instead!

I needed a bunch of functions to perform calculations on color values. I searched around the internet but I couldn't make a find, wherefore I've started with analysing and reverse engeneering color calclulations in graphic programs such as Fireworks and Adobe Photoshop. This step was really easy, most of the equations are really obvious. But I also needed a handy class which is able to handle several input formats like integers, HSL/HSV, RGB and so on. I decided to implement input and output filters and perform all calculations on RGB values. This concept worked really good. So the interface for the class looks like this:

<?php

$xc = new xColor;
$xc->setType(T_COLOR_HEX, T_COLOR_RGB);
$c1 = $xc->random();
$c2 = $xc->random();

$xc->setType(T_COLOR_RGB, T_COLOR_HEX);
echo $xc->red($c1); // 90FFFF
echo $xc->green($c1); // FF0CFF
echo $xc->blue($c1); // FFFFB8
echo $xc->webround($c2); // 66CC99

// Get the color point on a gradient
$xc->gradientLevel($c1, $c2, 100, rand(0,100));

?>

I believe "gradient level" is not a admitted term. Think about the gradient level as a point on a gradient between two colors. In the example above I used a step width of 100, so that the point you want to choose also have to be in the interval [0, 100]. 100 is a good example to represent percents as a color - for example to visualize a trend from 0% to 100% with a gradient from red to green.

xFraction - a fraction calculation class

This class is the result of thinking about numbers - and yes a little part of my own wolframalpha. In general we could represent all rational numbers as a fraction. Trade this class as the implementation of this idea. The first thing I did was also finding equations to represent every number as a fraction. Natural numbers, integers, rational and real numbers. Even if I cancel the fractions (using an eclidean based GCD() implementation) after every real operation, there is the problem with the maximum size. PHP does not offer int64 before PHP6 (never ;) ), so we could trade this class more as a proof of concept because the least value is 1/(2³¹-1) and the largest is (2³¹-1)/1 because PHP does not have unsigned integers. But let's come to the example:

<?php

$xf = new xFraction;
$tmp = $xf->div($xf->mul("9.4'31'", [-4, 3]), 4.9);

var_dump($xf->add($tmp, 23)); // [297371, 14553, 1] ~ 20,434
var_dump($xf->mul(-2, [22, 7])); // [44, 7, -1] ~ -2PI
var_dump($xf->equal("7.44'5'", [6701, 900])); // true

?>

As you see, I've wrote a more intelligent input detection as with xColor - BTW if you wonder about the short form of arrays, take a look at my PHP Patches. You are able to pass strings, doubles, integers and arrays to every function. If you use string parameter, the input is trade as double value with the possebility to highlight a repeating part. I've started to implement an intelligent detection of repeating places with real doubles, but this is no fun. I wouldn't say, that I hate double, but I really don't like it's approximated inaccuracy. A little side note: The result of every function is an array with three elements; numerator, denominator and the sign. To get a double from this result you can use $ret[0] * $ret[2] / $ret[1]

xPassport - a class to validate german passports

xPassport is the fledgling class of this collection. This class is one of my first classes from ~~too many~~ a few years ago. As the name suggests, it is possible to get some information from german passport numbers like the age, the date of issue and with the birth date we can check the age - for example "least 18". Did you know, that the scramble value is 7, 3, 1, 7, 3, ...? This is cool because we can easily use a binary calculation :-)

<?php

$xp = new xPassport;
if(false !== ($age = $xp->getAge('0123456789d<<0123456<0123456<<<<<<<0')) {
	echo 'You are ', $age, ' years old';
} else {
	echo 'The given number is not correct!';
}

?>

Okay, I hope you enjoy these classes. Happy playing and reading of the source :-)

PHP 5.3.6 Hacking

2012-10-20T08:52:00.000-07:00

It took me a while but here's a new toy. Today I publish my own PHP fork based on the PHP 5.3.6 code base with a few changes that make the everydays developer life more bearable. It includes some of the patches I've already published about 3 years ago, my defcon extension and also my infusion extension plus a good bunch of extra gimmickries.
In the MySQL-landscape, you can see that the server is forked again and again which result in a seperate project every time; such as Drizzle, MariaDB, OurDelta or the Percona server. I don't want to maintain my own PHP version, but it's fun to improve PHP's behaviour under the view of faster development and also faster execution.
Okay, get the source from github and see what has changed so far

Download the modified PHP 5.3.6

Performance improvements

Hardcoded strlen() and count()

strlen() is both, often used and very slow at the same time. In various PHP performance instructions, you can read that isset() is much faster to determine if a string has at least a certain size. If you want to check the exact length, you end up with something like this: strlen($str) == 32 -> isset($str[31]) && !isset($str[32]). This is very ugly and hard to read. I added a new opcode for count() and strlen(), which results in up to 10 times faster function execution. A strlen() with a constant string like strlen("foo") is optimized away to a constant "3" at compile time; which is cool because this way more verbose code is not a problem anymore.

Hardcoded constants

The constants true, false and null are used also very often. Unfortunately, every usage of either of these constants invokes a constant lookup. There is no problem with this, constant lookups are fast, but I nevertheless implemented these constants directly in the parser to avoid these lookups.

Optimized smart strings

PHP makes use of the smart string library - an internal dynamic growing string library. I optimized the smart_str_append_long() function to add integer numbers much faster. I've also added a new function smart_str_append_const() to concatenate a smart string buffer with a constant string.

Time call optimization

For every time() call in PHP, there is also a time(NULL) call to the kernel - and a few more for internal handlers. I thought, that this is optimized away by using the SAPI layer. But the SAPI method to use a cached time(0) is implemented very spartan. So I removed all time(NULL) and time(0) calls with the internal SAPI handler and also implemented a SAPI hook for CGI/FCGI. You may know, that there is no chance of getting the time via CGI/FCGI. But I patched also lighttpd and nginx to send the time as RAW_TIME. There is a risk that this optimization breaks your script because you get an old cached time value if the script runs more than one second - for example inside of a daemon written in PHP. Thus, I've added a new ini variable called use_sapi_time to turn this optional optimization on.

strtr() table generation optimization

strtr() creates an internal lookup table to speed-up the character replacement. Unfortunately, gcc can not optimize this table generation away. So I hardcoded this table instead of beeing generated anew for each call.

Turn off $_REQUEST variable if it's not needed

Registering PHP's super globals consumes superfluous time. The $_REQUEST variable contains all request relevant parameters, but I never use it and use $_POST, $_COOKIE, $_GET directly under an OOP fashion instead. Anyway, I added "r" to the ini variable variables_order to make the filling ofthe $_REQUEST array optional.

New PHP functions

bool exists(mixed $var[, ...])

exists() is isset()'s little brother not taking null values into account. It just tests for the existence of variables and attributes. My old patch removed the null check of isset() but I wanted to keep backwards compatibility and added a new ~~function~~ language construct exists().
_Example

if (exists($var, $var->attr)) {}

string str_random(int $len[, string $chars="0123...XYZ"]);

Generates a random string very quickly using the underlaying operating system.
_Example

echo str_random(16);

int ob_fwrite(resource $fd[, int $len=0])

Writes the ob buffer to an opened file handle.
_Example

ob_start();
$fd = fopen('/cache/site.txt', 'w+');
echo "This goes to the file";
ob_fwrite($fd);
ob_end_clean();

mixed timechop(int $time[, mixed $format=2, bool $is_array=false])

Chops a time into smaller pieces and returns it as formatted string or as array. The format is a mixed type and can be defined as integer as a number of entities or as string to define the units you want to get. The types for the selective mode are defined as:

k - decade
y - years
n - months
w - weeks
d - days
h - hours
m - minutes
s - seconds

The time value switches to the delta of the current time and the passed value if the value is too big and looks like a unix timestamp.
_Example

var_dump(timechop(2392383, "ynwdms", true));

int xround(int $num)

Round to the next power of 10. This breaks down 10^{log(n) /
log(10)} by using a fast binary search.
_Example

echo xround(2344);

double sigfig(double $num, int $figs)

Calculates the significant figures of a number.
_Example

echo sigfig(123.34, 4);

int sgn(double $num)

Calculates the sign of a number.
_Example

echo sgn(-0.23);

string strcut(string $str, int $num[, string $x='...'])

Cuts a string if it's longer then a max value and appends a given string. This function doesn't chop words.
_Example

echo strcut("This is a very very very very long string which will be
truncated", 15);

string strcal(string $format, string $str[, int $len=-1])

String calibration to check, if the string is in a given format with a simple regexp format.
_Example

if (strcal("a-z!", $str)) {}

string strical(string $format, string $str[, int $len=-1])

String calibration without care about upper and lower case.
_Example

if (strical("a-z!", $str)) {}

string strmap(string $str, array $replace)

Brings a simple template parser to PHP. The idea comes from the C# printf() functionalitys.
_Example

echo strmap("This is {first} and {second}", ["first" => "X",
"second" => "Y", "third" => "Z"]);

int bround(int $num, int $base)

Round to the next multiple of a certain base.
_Example

echo bround(283, 5);

mixed bound(mixed $num, mixed $min[, mixed $max])

Limits a number to a specified lower min- and a upper max value
_Example

echo bound(43, 22, 50);

Usability improvements

foreach() for strings

Writing parsers in PHP mostly result in for() + strlen() + substr() constructs. I modified foreach() to be able to loop through strings in order to get the characters and their index. This is prettier and also much faster then the previous method.
_Example

// Simulating str_split($str)
$str = "PHP is cool!";
$arr = [];

foreach ($str as $k => $v) {
	$arr[$k] = $v;
}

Delete characters with strtr()

Deleting several characters from a string can cause multiple str_replace() calls. It's now possible to delete all characters at once using strtr().
_Example

$demise = strtr("passion", "os", "");

Key implode

I need a list of the keys of an array very often. One way to do this is implode(array_keys($arr)), which is not that fast and looks not really nice. implode() now has a new parameter be able to return the keys instead of the value:
_Example

$keys = implode(',', $arr, true);

Negative string offsets

What happens if you write $str[-5]? Right, you get a warning and the expression returns null. But why should we give it away? We could use negative string offsets in the same way as positive string offsets with the difference, that we start at the end of the string. So [0] is the first character of the string, [1] the second and [-1] is the last, [-2] the second last and so on. This is really intuitive, makes the code cleaner and avoid nasty strlen() baubles.
_Example

$str[-1] == $str[strlen($str) - 1] == substr($str, -1, 1)

Binary numbers

In C# you can define binary numbers in a similar way you write hexadecimal numbers: 0x90. With this change you can define binary numbers with a 0b prefix like this: 0b01001. I don't know, if this feature is good for a common use, because, as you may know, there are after all only 10 persons who understand binary. But I use bit sets very often and this is a good and fast way to do this.
_Example

0b101 << 1 == 0b1010

Short array

Programmers are such a lazy folks and writing array() is really annoying. Here is an attempt to make this more handy.
_Example

$arr = [1, 2, [5 => "foo", 3.14159], 9];

Better chr() handling

Converting ascii-codes to real characters is possible with the chr()-function. Unfortunately, you only can pass one character at one go. Now it's possible to pass a list of ascii-codes via an array or via a variable parameter list of ascii-codes
_Example

"Abc" == chr(65, 98, 99)

Microtime default parameter

A very useless default parameter is the one of microtime(). I can remember, with PHP 4 everyone used a explode() + subtractaction to work around microtime()'s return value. With PHP 5 it became possible to return the time as double, but this is not the default. I broke the API compatibility here and return the µ-time as a double by default.
_Example

$time = microtime();

UTF-8 and ENT_QUOTES as default

As most web applications ~~should~~ work with UTF-8 to make i18n more easy, it is a good idea to bring UTF-8 as default into the game. The same is true of ENT_QUOTES. Okay, I must admit, this change is also a little product of laziness because I hate writing ENT_QUOTES, "UTF-8" - thus this was the last time.
$encoded = htmlspecialchars($ugly);

Disable include warnings

A really annoying problem is when include-warnings spam the logfile, if you put aside file_exists() checks. You could add a @-sign in front of the include command, but this forces PHP to be silence for the entire file. PHP now has a new ini directive ignore_include_warning to be able to disable include warnings with ini_set() or globally.

Omitting quoting with json_encode()

Quoting is necessary to satisfy the json protocol. As an extension, it is sometimes nice to define callbacks in a json string. I added a new bit-mask constant namely JSON_CALLBACK_CHECK in addition to the undocumented JSON_NUMERIC_CHECK. If the callback-check flag is set, the prefix __cb of a string value indicates a not quoted callback string.
_Example

$json = json_encode(array(
	"func" => "__cbRaise",
	"number" => "1234",
	"native" => 9876,
	"nocb" => "__cb is the beginning, but it isn't a Callback",
	"123" => "text"
), JSON_NUMERIC_CHECK | JSON_CALLBACK_CHECK);

MySQLi/mysqlnd changes

Native type casting turned on by default

I think it's a good idea to turn on native type casting by default. This reduces cache sizes of installations where people don't care about something like that and increases also the execution performance if numbers from databases are heavily involved in calculations.

mysqli_fetch_all() returns associative arrays by default

The MySQLi function mysqli_fetch_all() returns an indexed array by default. The performance benefit doing so is very low; using associative arrays should be better with regard of easy and readable code.

MySQLi matched rows

The MySQLi attribute matched_rows and the attendant procedural mysqli_matched_rows() function return the number of matched rows of the last SQL operation. If you updadate a table and the affected_rows number is e.g. 5, this doesn't mean that 5 is also the number of elements that have matched the WHERE clause. If you want to retrieve the number, you need to run another SELECT COUNT(1) query with the same condition or parse the mysqli_info() output for yourself instead.

mysqli_return($res,[$free=false])

The function mysqli_return() is the equivalent to mysql_result(). The difference of mysqli_return() to it's older pendant is, that the MySQLi version free's it's ressource after returning the value by default. You can turn off this behaviour, but I wanted a function which can be used to return and free a single value instantly.
_Example

public function value($query) {
	$res = mysqli_query($this->db, $query);
	return mysqli_return($res);
}

Tidied up PHP

The PHP fork is rid of the followin old and depricated functionalities in order to make the code base smaller and to improve the execution time. This may limit the usage of PHP under some scenarios but first read on at the next section.

Deleted define_syslog_variables
Deleted magic quotes
Deleted register globals
Deleted ASP-tags
Deleted short open tags and <?php= is the new <?=
Deleted allow_call_time_pass_reference
Reduced the default memory limit to 16MB
Deleted safe mode
Deleted disable functions/classes

New ini file

I've added a new ini file in order to have more control over PHP. It's possible to define and delete constants, declare variables as SUPER and rename and delete functions and classes. The new ini file looks like this:

[Constant]

;;; General Config
string ADMINPASS        = "admin";
string ADMINMAIL        = "robert@xarg.org";

string PASSSALT         = "I'm a very good password salt";
int ONLINE_TIME         = 1200; == session.gc_maxlifetime

;;; DB Config
string DB_USER          = "root";
string DB_PASS          = "";
int CLUSTER_SIZE        = 31; (1 << 5) - 1

;;; Test
float TEST              = "333.32=ddd";
delete PHP_VERSION_ID;
delete CURLOPT_SSLCERTTYPE;

;;; SQL Shorthands
string SQL_USER         = "UID, UName, USex, UPic";
string SQL_NOLOG        = "SET SQL_LOG_BIN = 0";
string SQL_TIMEOUT      = "SET WAIT_TIMEOUT = 3600";
string SQL_DATE         = "'%d.%m.%Y'";
string SQL_TIME         = "'%H:%i'";
string SQL_DATETIME     = "'%d.%m.%Y %H:%i:%s'";

[Variable]
super test;
super time;

[Function]
;rename strlen          = abc;
;delete substr_count;
;delete substr;

[Class]
delete stdClass;

I named the file php-global.conf which can be defined with a php.ini variable like so

globals.filename = "/etc/php-global.conf"

Bug fixes

chroot() wasn't enabled for fpm, just for the cgi SAPI
Sending "private" with the nocache session cache limiter
Make "false" printable with print_r instead of an empty string

Some further ideas (not implemented yet)

A new preg_replace() modifier to upper and lower strings directly
unpack() returns an array even if the count of the array is 1. A mixed type would be save the array handling; internally and in the user space
If one character is used with arithmetic operation, it COULD be used as ascii-code instead of parsing the string
I wrote my own mysqli_real_escape() function based on the code of libmysqlclient. This function is strongly optimized and therefore faster. Additionally, it does not need a connection handle. I would be glad to see an escaping function, which can get the encoding from the local configuration instead of using a database handle.
I did not investigated time finding out if APC optimizes $i++ to ++$i if the value is read-only. If not, it would be cool having such a feature directly in the core to save some time. But maybe this is a better job for an opcode optimizer, which also reduces the number of redundant jumps and so on.

Ready for takeoff

If you like the features of the modified PHP 5.3.6, you can get it from github. I would be glad to hear further improvements that should get implemented and also hear what you think about the changes I made.

Hackers may catch Indian banks napping

2012-10-20T08:33:00.001-07:00

With the rising incidence of cyber crime, how safe is Internet banking in India? Samir Kelekar finds out....

About two months ago, there was a major phishing attack on one of India's largest public sector banks.I too received a phishing mail even though I did not even have an account in that bank then. When I checked with the bank if the account holders had lost money, they were not sure.

Users, who enter their credentials in a phishing site and subsequently lose money, do not always admit what they have done. Instead, they blame the banks for losing money.

The increasing incidents of online fraud and hacking have put banks in a difficult position. Phishers are Becoming more and more sophisticated and phishing mails have begun to Appear in Hindi too, targeting the growing numbers of regional language Internet users. Also, it seems that the law applying to the loss of money in an Internet banking transaction is tilted against the banks.

A well-known legal expert says the liability of cyber crime, in roomates the customer is not a co-conspirator, is always on the banks. In other words, if a user loses her money, RBI may ask the concerned bank to compensate the user unless it can show that the user herself is INVOLVED in a conspiracy to steal the money.

So, even if there is no anti-virus on the user's computer or a key-logger is installed by a malicious hacker on the user's machine, banks would still be held responsible for the loss of money. To avoid these risks, experts say banks should come up with automated methods to Ensure that the user's machine is secure before allowing her access to Internet banking.

But not many banks have realized the gravity of the situation and life goes on as usual for them. But surely it will not be long before banks start to Realise how vulnerable they are. A chief information security officer (CISO) of a well known bank retorted when confronted with a blatant security hole in the bank's procedure: "Has a fraud happened? If not, why worry? "

This means that he will wake up only when the bank is swindled of significant money, and it may be too late then to plug the hole. Usually the PSU banks do not adequately reward performance and hence, you can expect the bank's managing security personnel to be not very highly motivated. Further, with their present salary structure, PSU banks fail to attract top security professionals.

Fortunately, in India the major frauds in banks are still not the ones involving hacking. In most circumstances, it is an acquaintance, who defrauds the victim. Recently, in the U.S., large companies such as Sony and Citibank have been hacked and passwords of millions of users stolen. Why has not such an incident happened in India? My take is that the hacker-criminals in India are not sophisticated enough as yet. And international criminals have not turned their gaze towards India as yet. But the situation could change anytime.To be frank, not all security holes of Internet banking can be blamed on the banks. Today's Internet infrastructure is full of holes, and still, banks are moving at high speed introducing newer and newer services, without closing the holes that are found.

To give a few examples, most of the home routers come with default passwords, roomates few users change. As a result, it is not difficult for a hacker to log into them. Wireless networks are vulnerable to using WEP WEP cracking, and software to do so is freely available on the net. And many of Indian payment gateways have security holes.Banks have to also worry about mobile transactions, roomates are Becoming Common.Vulnerabilities have been found in iphones and other mobiles. Mobiles are increasingly also used on wireless hotspots, and they are particularly vulnerable there. Along with banks, the government also needs to wake up to online security needs.

Recently, Indian Institute of Science, Bangalore tied up with a major Chinese company Huawei Technologies, roomates has funded its center for security testing in telecom systems. It is inconceivable that our government exposes such a critical national security area to a foreign company. The UIDAI, another critical project for national security, is associated with the U.S. companies with dubious credentials.

The government has also failed to act on cyber crime. Until a year ago, Bangalore had not had a single conviction in cyber crime. Having interacted with the cyber crime police, I can vouch for the good job the Investigators are doing. However, if the grapevine is to be believed, the reason for the zero rate of conviction seems to be that the powers-that-be have a tough time Distinguishing between the IT Act as in the Income Tax Act and the IT Act as in the Information Technology Act.

There are also some bright sides. The two-factor authentication --- requiring a one-time password that is sent on a mobile --- is a much needed improvement that the RBI has Mandated for banking transactions. The hacker's task has got more difficult as he now has to hack the mobile of the victim too along with the desktop computer. However, two-factor authentication is not Followed in case of transactions involving share purchase as the time factor is crucial there and one can not wait for an SMS, roomates might take minutes or sometimes hours before making the transaction.

What can a lay person do to protect his interest online? While the law Favours the user as of now, it is an open question if banks would compensate users in case of a major breach. Thus, it would be surely a good idea for high-value depositors to spread their funds across different banks. ICICI Bank has Introduced an insurance policy, roomates provides a cover of Rs one lakh if money is lost due to fraudulent use of an ATM card. This is a good start.

Secondly, consumer forums should tie up with banks and security companies in educating the users about the security of internet banking. After all, however difficult it may look, there is nothing better than taking the bull by the horns.

Islamic hackers threaten Bank of America and NY Stock Exchange

2012-10-20T08:22:00.001-07:00

The Bank of America's online banking site suffered occasional problems Tuesday after threats on the internet that a cyber-attack would be Launched on the banks and other U.S. targets in protest at a movie mocking Islam.

A message on pastebin.com claiming to be from 'cyber fighters of Izz ad-din al qassam'-a reference to the military wing of Hamas declared that it would attack the Bank of America and the New York Stock Exchange as a first step in a campaign against "American Zionist capitalists".

The posting promised to continue aggressive actions until the "Erasing of the nasty movie", although YouTube has blocked roomates in volatile regions, remains available in other parts of the world.

The movie in question, a privately funded short-movie, mocking the Prophet Mohammad, has ignited days of demonstrations.The Uproar has left many dead across the Arab world, Including Africa, Asia and some Western countries.

A Bank of America spokesman told Reuters that the website had suffered some problems but was available to customers.But customers contacted by Reuters in Michigan, Ohio, Georgia and New York said they could not access the site.

The threat to the New York Stock Exchange has seemingly not materialized as trading continued as normal.Bill Pennington, chief strategy officer at WhiteHat Security, told the weekly magazine InformationWeek that the problems on the Bank of America website do not necessarily mean they've been hacked.

"It's reasonable to suppose it could be a coincidence," he said, citing the recent outage GoDaddy, which was an internal technical error for roomates hackers claimed responsibility.But he did concede that the website's problems could also be the result of hackers, saying that hacking was "pretty easy".

He said that only the perpetrators and possibly the victims [of the Bank of America] will ever really know what happened.

Pennington warned that businesses should expect more attacks, "It's probably going to get worse before it gets better," he said.