Cisco UMBRELLA (OpenDNS) Vulnerability

Important session cookie vulnerability discovered by ViR4X. Read more details in the official report:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180316-umb

#box - IoT platform from the future!

Life changing experience...

The Internet is dramatically expanding and with it, our everyday devices, appliances and... things in general.

#box is the new IoT platform that interconnects all these things together and enables smart house, car, hospital, you name it... automation bases on user predefined scenarios!

See pictures below and visit http://hashbox.net/ to get informed as we update  the site.

GreyOS - Free and Open Source O/S

GreyOS is a Meta-OS that runs on top of a Web browser.

The project wants to achieve a high response interface that is entirely online. This way you need no more installations, you have no security issues, antivirus, defrag, updates, etc.

Developers may download the source code of GreyOS (Alpha version) from: https://sourceforge.net/projects/greyos/

You may also see the DEMO on: http://greyos.gr/

World's first autonomous WiFi Headset!

A good friend of mine, Dimitris Martinos and I had a cool idea...

We thought, how about you could listen to your favorite music from let's say Spotify but use only a paid or headphones that are wireless and autonomous. That would mean you won't even need your smartphone, tablet or computer anymore to use them. Just wear them and you are on the go...

Imagine how beautiful and easy your life would be if for instance you had to go for a walk or jogging or even hear some music and relax. Just like that. No apps, no list selection, nothing!

This is how "WiFi Music Flow" or "MF-1" headset came to life :-)
A WiFi-based headset that streams music directly into your ears. The headset also has one touch screen that enables you to play, pause, play next / previous song and finally inccrease or decrease the volume.

We are proud to present you our work in progress and hope to have this ready ASAP!

3D WiFi - FREE WiFi in a bubble!

“3D WiFi Fencing” is a sustainable game changing technology that provides Open Free WiFi & added-value services for hotels, cafe bars, restaurants, malls, airports, etc. in a dynamic 3D space radius.

How 3D WiFi Fencing works?

1. A “3D WiFi Box” is installed in place. (e.g. ceiling)
2. Plug-in the AC Cord and an Ethernet cable from your router.
3. Users choose the “3DWiFiCube” network -while in range- from any smart device and get connected.

Why 3D WiFi?
We believe that WiFi-based services around the globe are resource intensive, somehow limited and offer low grade of satisfaction. 3D WiFi Fencing is the technology that facilitates a way for providers to control these resources, eliminate loss, enhance quality, overcome barriers and incorporate efficient applications that enable higher user satisfaction.

Applications of 3D WiFi Fencing?

• 3D ranged WiFi services (IPS & OPS)
• Floor management
• Customer personalization
• In-shop real-time promo & advertising
• Reporting & statistics
• Building & homeland security
• IoT channeling

3D WiFi Box Advantages?

• Instant access with no password
• Super fast Internet
• Battery economy (up to 4 hours)
• Firewalling & dynamic traffic shaping
• Added-value services
• Anonymous statistics

3D WiFi Fencing is a green and efficient technology by design. It provides:

• Instant network scan & connection
• No encryption overhead (WPA/2-PSK)
• Boosted signal power (less mW/data)

If used by 50% of the available mobile devices, it would save about 4TW/day!

More info here.



Support this innovation by clicking at Fund 3D WiFi Bubbles

FAKE FB - Fake profile examiner

FAKE FB is a simple Chrome extension that enables you to check with one click if any Facebook profile is fake!

FAKE FB uses advanced micro-A.I mechanisms and several metrics to achieve that. It almost feels like "Magic" and it works!

Currently FAKE FB is in Beta, but it has a success rate of at least 95%.

Download FAKE FB

ALPHA Script - A Unified & Abstract way to program and deploy once for any cloud!

"It's a matter of perspective!"

ALPHA Script is an Abstract & Unified Programming Meta-Language that interconnects diverse infrastructures under one model. The specifications are Free and Open Source for everyone to contribute.

Practically, ALPHA Script interconnects any Cloud, O/S and programming language by providing an interface in the form of a language agnostic code. This code is not compiled or run on any system. Instead it is used as an intermediate language and enables code parsers on any system to read it and convert it to a native code or to another script. As an example we can have ALPHA Script to C/C++, JAVA, PHP, JS, Python, etc.

ALPHA Script is all about being fast and reliable. So, the programs of ALPHA Script are converted into JSON models that can be easily compressed, sent, decompressed very quickly and then parsed by any JSON parser.

ALPHA Script is a strong tool for developers. It offers a formalized and easy way to harness the dynamics of the Cloud and the Web but it is also useful for older systems. Due to its nature, ALPHA Script prolongs the life of old or deprecated software. It does that by enabling developers to transparently convert an old application and deploy it on new, otherwise unsupported, systems without actually changing any line of code.

So, ALPHA Script provides a full duplex conversion that helps new and old software to converge and work side by side.

References:
https://www.youtube.com/watch?v=PD7ddSFFAHc

https://www.youtube.com/watch?v=4L8CpksDXmE
https://www.youtube.com/watch?v=dVcwxhfihdo


Specifications:
https://sourceforge.net/projects/alphascript/

PANDOO - The world's first Personal Computer, on the Cloud!

PANDOO is revolutionizing the way people everywhere experience their computers and the cloud!

PANDOO is a FREE cloud-based operating system that empowers you to do everything you need, in a single browser window, from any Internet-connected device, anywhere.




How PANDOO Works




Why PANDOO is the Future of Computing:

• NO downloads
• NO long load times
• NO tabs or confusing navigation
• NO expensive software or licensing fees
• UNLIMITED cloud storage
• UNLIMITED computing power

Code once, deploy everywhere! Write quality code with less effort on PANDOO’s secure and powerful development infrastructure, and help create a new Internet experience.

Presentation Video of PANDOO

Development Status
The PANDOO team has spent years on the underlying technology that makes PANDOO possible, and have created an early DEMO (Alpha version) where more than 600 registered users are already getting a sense of what’s possible with PANDOO. The demo is only the beginning, and we have many plans for future development and improvement...


PANDOO goes Indiegogo
PANDOO has launched an Indiegogo campaign on the 20th of May. Your contribution is vital to PANDOO's success. We call you all to join and be part of this global innovation!

http://igg.me/at/pandoo-os
Contribute Now!

HashCoin :: Real-time payments and more...

HashCoin is the world's first digital commodities technology platform with real-time payment confirmations, decentralised digital rights management and deeds of ownership across multiple media applications.

Conceived and architected by Dr. Roy Murphy and now partnered with me, we are excited to deliver HashCoin as a FREE and Open Source solution to the world.

So, come on... What are you waiting for?

Get in the list and stay tuned. Amazing things will happen!

http://hashcoin.technology/

PANDOO - The Web at your fingertips, only for you whenever and wherever you need it!

P   A   N   D   O   O
...is  all  about  you.

PANDOO is a big challenge envisioned by a team of innovators who want to create the ultimate online platform that will be able to satisfy all Internet users needs at the same time but also personalized for every single one of them!

In a few words, PANDOO, currently on development, will be a place and space on the web where different user needs will be satisfied in person as if the Internet and its services where developed specifically for each user. For instance, wouldn't it be great if search results on your favorite singer could get back with only highly relevant and important information rather than millions of irrelevant and annoying data...

PANDOO will provide you with all these apps, games, services, tools, social networks, files, etc. that you want or already use. You will get to have what you need, whenever and however you like it and organize it as you want. In addition, your desktop will get into a new dimension. Your personalized space will satisfy only your own needs. Your layout, your colors, your labels, your style...

Truly, Y O U R S. Everything in one place but with you personal "touch"!

...and as far as it concerns security. Well, security in PANDOO is by design the Νο 1 priority. Your personal data will not ever be accessed or asked as long as you don't grant specific access for your needs...

Finally, we left the best thing for the end. PANDOO operates beyond any device and has absolutely no requirements in latest software and hardware. Just get online, access PANDOO with your password and you have the Internet organized exactly as you asked for it on any device.

How simple life is with PANDOO...

For more information please go to: http://pandoo.cc/ and subscribe to get to know more on the progress of the platform that will revolutionize the web as we know it today.

PANDOO -  http://pandoo.cc/

...because you are all special and we know it!

Make a Call... on-the-fly! :S

Hello guyz!

I hope you missed me and my blog...
This one is gonna be VERY funny and Geeky, I swear!!!

I don't have an application ready yet for that but I will show you a way to make phone calls with your land-line phones on-the-fly without ever touching the dial-pad. No extra hardware, no automation, no Bluetooth, no WiFi, no nothing.

The trick is easy. Just use an online tool to generate the old fashion PSTN DTMF tones and with your phone microphone open play them. Open up your loud speakers and enjoy the magic!

Links to DTMF generators:
http://www.mediacollege.com/audio/tone/dtmf.html
http://www.audiocheck.net/audiocheck_dtmf.php
http://aggemam.dk/code/dtmf

Links to read about DTMF:
http://en.wikipedia.org/wiki/Dual-tone_multi-frequency_signaling
http://www.engineersgarage.com/tutorials/dtmf-dual-tone-multiple-frequency

See it as a teleportation of your will to call someone without ever moving your butt from the sofa.

Good ha?

STAY TUNED for more to come!

All4Greece.org

An initiative bringing together the BEST developers in Greece with National and International Experts in social finance, startups, marketing, local currency, development and ICT, to ENVISION, PROTOTYPE and DEPLOY Innovative solutions.

Is where Innovation Economy meets Capital Economy.

The first event takes place in Thessaloniki but it aims at reaching also other major cities in Greece. In order to start participating please register by filling the form at http://www.all4greece.org/

WordPress :: A Dirty Hack

Aah, WordPress...

So well known, well coded, well designed, well... not really!

When it comes to solve a problem you have to be a hacker to find and open the secret back door. This is what happened. While I was trying to solve an issue the other day I came up with an idea to counter pass the problem in a... dirty way, he he he :-), to upload my site. The problem was a misconfigured path to the web server. I built the site in my local LAMPP installation in a subfolder and I had to set explicitly non-relative paths. So, when I uploaded the site on the web server it was like a devastated building. You get the picture right? 

No CSS, Javascript and images loaded plus the fact that my admin panel was inaccessible and redirected to my localhost. A disaster!

So, although the straight way is to install a new WordPress on the server side and transfer all needed templates, data, set paths and do all the mambo jumbo I had this dirty idea: 

What if I go to General --> Settings menu in my local installation and change the localhost paths to my website URL?

So, I did... and guess what? It worked! I was redirected to my website administration panel which now works perfectly and also all the non-relative paths in the front-end are now fine and the site is up and running.

«Don't learn to Hack... Hack to learn!»

Joomla - Missing Menus in front-end and back-end

Is'n it obvious? It's a bug or a code written the wrong way. It's a Joomla after-all...

OK, Joomla is crap I know but, we and you, use it a lot and you may have come to this unfortunate, yet easy to solve, problem that all your menus in the frond-end and/or back-end are missing after you transferred the site to another server.

There are numerous forums and a few thousand chimps out there that will tell ya:
"Oh really? Then your site is screwed! So, just backup everything and either install a new Joomla and input everything from the beginning or try again and again... Or change permissions maybe? Wait, there is more...."

LOL, these guys never give up!!!

Now, we all know as engineers that there is always our way or the high way...and we like OUR way! ;-)

So, the whole "trick" is only inside two files. The only thing you need to do is to add an ampersand (&) in front of two variables and everything will work as they should be!
See below for the files and the lines where you need to add the ampersand in front of the variables.


Back-end
Directory: libraries/joomla/html/
File: html.php
Line: 87
Code: return call_user_func_array(array($className, $func), &$args);


Front-end
Directory: modules/mod_mainmenu/
File: helper.php
Line: 72
Code: function &getXML($type, $params, $decorator);

or

Directory: libraries/joomla/cache/handler/
File: callback.php
Line: 99
Code: $result = call_user_func_array($callback, $args);

The bug is this. The variables "$arg" and "$params" or "$args" are passed by value to the functions as parameters. But, they have to pass by reference. This happens because when a new class object is being registered in the Joomla code, which was previously created or accessed by reference, it returns a null if requested by value.
So, the solution is to write this: "&$arg", this: "&$params" and this: "&$args".


Enjoy Reversing and continue giving total solutions where others hit walls. Happy Hacking!

Il Pulcino Pio - Tweets (A DSP and image engineering to sound engineering)

Hello there guyz!

This is a fancy hack from an old idea that a friend of mine had. We started playing around this idea when we were at high school. My good friend and I began about 12 years and today having an engineering background I advanced it by also giving a funky tone..

So, let's see what is this about by having engineering lesson that are FUN :-)

See the video to get the idea:

Generally the software we developed is useless, it's only for fun, but you never know... maybe someone will find it other than amusing a great tool for productions :-P

In order to understand it you have to know the basics of:

1. Mathematics

2. Physics

3. Programming (any language)

4. A bit of Sound Engineering

5. Time for hacking!

You may also read these:

http://en.wikipedia.org/wiki/PCM

http://en.wikipedia.org/wiki/Fast_Fourier_transform

http://en.wikipedia.org/wiki/Amplifier

http://en.wikipedia.org/wiki/Amplitude_Modulation

http://en.wikipedia.org/wiki/Frequency_modulation

And these:

http://en.wikipedia.org/wiki/Spectrum

http://en.wikipedia.org/wiki/Spectogram

http://en.wikipedia.org/wiki/Spectrum_analyzer

Finally, download GoldWave to test it:

http://en.wikipedia.org/wiki/Goldwave

Now, lets go for it...

This software is tweeting aka transmitting - playing - sound files which were previously engineered in a way that Capital letters and numbers can be seen into a spectrum analyzer.

The idea behind the process is simple yet smart. A properly modulated, in amplitude and frequency, signal can be propagated in time and space in a way that we can depict it in a spectrum analyzer. But, although the idea is easy we have somehow to make this tiny wave to have the wideness that the human eye can see. So, for every pixel of the character we transmit we add many waves on top of each other and voila! We can choose an effective frequency range and have the results.

In our example for instance, all the words can be depicted in the range of 3500Hz - 4200Hz.

In order to see the messages you have to configure Gold Wave's spectum analyzer range to the above range and start a recording or monitoring. 

Now, if you "Tweet" with Il Pulcino Pio you will see in the spectrum analyzer your message. 

Enjoy after downloading the file!

http://s000.tinyupload.com/index.php?file_id=03019934198726042823

If an error occurs make sure you have the "MSVBVM50.DLL" in your system. 

If not, download it from the Internet.

P.S:

Greetings to my old friend P. Gasteratos (we developed a crazy thing... But I like crazy things. Hehehe...)

REpulse - Reverse Engineering pulse!

I call all the hackers of Greece to form a group of people who will hack and reverse.
The name of the team is REpulse. Feel the pulse of RE ;-)

hackerspace.gr - Hackfest 14

On-the-fly MP4 streaming on recording!

OK, it took me 2 days but finally it worked!

I developed a bottom up "hack" & workaround that enables on-the-fly read and streaming over a H264 video file that is being recorded at the same time, encapsulated in a MP4 format...

RevEng-ed and Hack-ed!

IRC Channel for RevEng

For more information on Reverse Engineering (RE) and its applications, for tutorials, talks and more visit our IRC channel: #reveng at GRnet.

RevEng the commercialization!

Hackers & Hacking Philosophy

Θέλω να θίξω ένα θέμα σχετικά με το τί πραγματικά είναι ο hacker και το hacking. Επειδή λοιπόν οι περισσότεροι δεν το έχετε ψάξει καν στο Internet και ακούτε τις μαλακίες που λένε τα ΜΜΕ και κάτι χαζοπεριοδικά θα σας πω με 2 λόγια την ουσία και εσείς μετά ψάξτε το σύνολο στο web!

Γενικά το hacking είναι "ΤΡΟΠΟΣ ΖΩΗΣ" και ο hacker γεννιέται.

Γιατί ο hacker είναι αυτός που όταν όλοι οι άλλοι λένε: "Α! αυτό δε γίνεται!", εκείνος βρίσκει τον τρόπο να το κάνει! Δηλαδή πιστεύει ότι ΤΙΠΟΤΑ ΔΕΝ ΕΙΝΑΙ ΑΔΥΝΑΤΟ... και φυσικά δε κάθεται πάντα να παίζει με έτοιμα εργαλεία αλλά ψάχνετε για να βρίσκει πως κάθετι που θέλει να κάνει, δουλεύει.

Κάπιοι από εσάς γεννηθήκατε έτσι. Κάπιοι άλλοι όχι αλλά μπορείτε να εκπαιδευτείτε σε αυτή τη λογική!

Το πιος θα λέγεται πραγματικά hacker θα φανεί μέσα στα χρόνια!

ΚΑΛΟ ΔΙΑΒΑΣΜΑ!