GLOBE Telecoms released an official statement regarding web defacement

A group of hackers defaced the website of a telecommunications company this week, allegedly over its poor Internet service.

For several moments, the group calling itself "Blood Security Hackers" defaced the pages in the website of Globe Telecoms.

Globe Telecom explained that the hacks were conducted on sites run by a third party affiliated with the telco. Globe also assured the public that no sensitive information was stolen and that immediate action has been undertaken to shore up the security breach.

GLOBE Telecoms released an official statement regarding web defacement.

http://www.globe.com.ph/press-room/globe-statement-on-web-defacement

At around 10:00 pm yesterday, November 27, Globe Telecom detected a defacement in four Globe websites hosted by a third party vendor Movent. All four websites (mybusiness.globe.com.ph, duo.globe.com.ph, payroll.globe.csme.com and update.globe-csme.com) have been taken down immediately so we can conduct the appropriate security checks.

"The server where the four websites are hosted is managed by a third party partner and outside of the Globe Corporate and Enterprise Network, where appropriate preventive and detective controls are in place. The attack is isolated on their end and was brought about by an unpatched vulnerability which is currently being addressed. Rest assured, our security incident response teams are currently investigating and conducting forensics in various areas to make sure that the incident is properly managed," said Globe Chief Information Security Officer Anton Bonifacio.

Globe assures its customers that no critical customer data have been compromised as these information are not stored in the affected websites. The said websites are used for advertising and marketing purposes only and are not connected to any of the private internal customer systems. Globe also said that its own Globe-hosted websites were not compromised.

 

 Up to now 3 of the said website still under maintenance :

Read More

Glassesonline Quality Eyewear Store

Looking for branded Eye wear ?
Checked Out this site !! http://www.glassesonline.com.ph/

You can buy  quality  Eye-wear at low prices,  As Philippine's first online glasses store, they offer a wide selection of high quality prescription eyeglasses, frames, contact lenses and branded sunglasses for both men and women.


Here's  my Original Ray Ban  from Glasses Online.

Great customer service and flexible returns all over Philippines.
They actually contact you for confirmation that you receive your item or any problem on delivery.

Sign up Now!! on their website to receive updates on promotions, new products and amazing discounts!

Read More

Win a brand new Mitsubishi Mirage by playing ECO DASH available for download via App Store and Google Play!

Mitsubishi Philippines likes to share with you Eco Dash, free and new game app that gives Filipino players a chance to win a Mitsubishi Mirage for the grand prize and an iPad mini for the monthly top 5 winners with the highest scores!

Mitsubishi Motors Philippines Corporation (MMPC) is taking its digital campaign to an exciting spin with the Mirage
Eco Dash Game application.

Mirage Eco Dash lets players drive their very own Mitsubishi Mirage as they navigate obstacles, collect coins and
power-ups in a mad dash to be on the top of the online Eco Dash leaderboards. What sets this game app apart from
the others is that it gives its players a chance to win exciting prizes monthly. At the end of every month until February
2015, the top 5 players will be given an iPad Mini. To make this even more exciting and worth spending your time,

MMPC is giving away a brand new Mirage GLS MT for the top player on the culminating event. MMPC will have a
Mirage Eco Dash finals event wherein the top 10 in the leaderboards by end of February 2015 plus the 3 wildcard
winners from the offsite mall competition which will be done in Manila, Cebu and Davao, will compete to determine
the overall champion and win the Mirage GLS MT grand prize.
“With the Mirage Eco Dash, we hope to provide our players with a fun and challenging game that rewards their time
spent on the game” Mr. Froilan Dytianquin – MMPC Vice President for Marketing Services said. “We also want to let
them know more about the Mirage thru in-game trivia that will appear when you’re playing the Mirage Eco Dash. The
Mirage has been a popular choice among our young car enthusiasts, young professionals and even to those who are
just starting their own families” Mr. Dytianquin added. The Mirage Eco Dash game also embodies certain features of
the Mirage such as its fuel efficiency, eco friendliness and that with the different accessories that you can add this
small car is a fun car to own and drive.
The Mirage Eco Dash game was officially launched during the opening of the 5
th
Philippine International Motor Show
at the World Trade Center in Pasay City. Personalities like Ellen Adarna, Rico Blanco and Marki Stroem gave their fans
and the media something to share on Social Media as they competed to see who the better Eco Dasher was.

Mirage Eco Dash is available for free from the App Store and Google Play. Like and check-out the Mitsubishi Mirage
Eco Dash Facebook fan page for detailed mechanics on how you can win a brand new Mirage GLS MT.

Read More

Globe Telecoms Prepaid LTE SIM Now Available

Your latest phone deserves LTE speeds of up to 42mbps!

Grab the Globe Prepaid LTE SIM powered by Globe's largest 4G network. Now available at all Globe Stores nationwide.

The Prepaid LTE SIM cards are available in Combi and Nano SIM versions to fit all SIM card slot sizes. The Combi SIM fits current handsets with regular and micro SIM card slots, while the Nano version fits handsets with smaller card slots such as the iPhone 6 and 6 Plus.

The new Globe Prepaid LTE SIM cards are priced at Php40 (Combi) and Php100 (Nano). Starting Today, November 16, current prepaid subscribers who wish to have their current number on the new LTE SIM may proceed to the nearest Globe Store to have their SIMs replaced and bring a valid ID and your Globe SIM card (*terms, conditions, and payments may apply).

Of course, the LTE coverage may be dependent and will work best on your LTE-capable handset, and a location with a strong LTE signal to experience great speeds.  (dipende sa location mo yan kung may 4G LTE )

source : https://www.facebook.com/globeph/photos/a.106835214747.95522.30433734747/10152610735334748/?type=1




Upon purchase, Prepaid LTE subscribers can activate free Spotify and GoSurf access for one day by texting in FREEGS30 (for Combi SIMs) and FREEGS50 (for Nano SIMs) to 8888.

Read More

How to Login as Admin on Huawei BM623m with BM622m Firmware B016

How to Login as Admin on Huawei BM623m with BM622m Firmware B016

Someone PM me he cannot Login as admin on  BM623m after he downgraded to BM622m ..

A simple scripts should do the trick , Remember the Temporary Admin log in way back 2012 or 2013 for BM622m.

How to log in as  admin?

1. First  enable telnet first .
Login
username: user
password: 0SlO051O  ( zero ,capital S ,small letter L ,Capital letter o, zero, five,1,capital letter o)

2. After Login  open new Tab  (click the plus or ctrl+T ) type or copy paste this  check your LAN Telnet click apply..
http://192.168.254.1/advanced/acl.html

3. Now log in your Telnet  manually or create a vbs scripts .

TELNET 192.168.254.1
user:Firefly
Password:$P4mb1h1r4N4m4nT0!!
cd /etc
cp pbi_passwd pbi.bakf
cat > pbi_passwd
admin:0M4K4SrtZDwFC7Nh
^D
echo Feel The Power
exit
exit

Set cloner = CreateObject("WScript.Shell")
cloner.run"cmd"
WScript.Sleep 500

cloner.SendKeys"TELNET 192.168.254.1"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"Firefly"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"$P4mb1h1r4N4m4nT0!!"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"cd /etc"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"cp pbi_passwd pbi.bakf"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"cat > pbi_passwd"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"admin:0M4K4SrtZDwFC7Nh"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"^D"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"echo Feel The Power"
cloner.SendKeys("{Enter}")
WScript.Sleep 5000

cloner.SendKeys"exit"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

cloner.SendKeys"exit"
cloner.SendKeys("{Enter}")
WScript.Sleep 500

You can download it here :





4. Now log in as user:admin password:admin

You  can change the password permanently,  meaning  even you reboot or change mac the password remain the same..

You might also like: 
 How to Enable Windows Telnet

Read More

"Mag aral gumawa ng pag ibig" Facebook Fishing Scam

Another fishing scam "mag aral gumawa ng pag ibig"  it will re direct you to facebook ka look alike website themes and ask for  re log in you facebook account.

and if you did

Your Facebook Account  Information is save and can  spam  Facebook post.

DO NOT CLICK or Check  the URL  carefully...

This is Facebook page with an apps ...

Then it will redirect you to a fishing site  ....

 Check the URL  looks like a Facebook but it is NOT a Facebook

It pretends to be  Facebook to get to your Facebook info   ( email and password) it ask you to re log in..

Be  vigilant  Online... don get fooled...

Another Old Facebook color scam  reborn again.. becuase many believe that they can change there FB background..

Same to Who Views your Facebook Profile..

Read More

How to Remove Network Numbers and WiFi Profiles on Windows 7

About network number is just a mere reference on how many times a network core was changed.
In some cases a new configured network with a new SSID adopts older names but because the security encryption or password changed and you cannot connect.

Examples of different names for the same Network during different configs:

Network name has its specific settings, which are not simply replaced by a new Network configuration... And this Network settings, tagged by Network numbers, are stored somewhere in the system. My doubt is this: do this records somehow interfere with new Network configurations? I tend to say they do.
If not, why is the merge tool? Merge is useless on WiFi because if you change routers WiFi configs you can't merge. simply delete or edit the profile..

How to remove Network numbers on LAN

1. Open "Network and Sharing Center"
sample click this

2. Click on the "Icon"(a house icon for me) under "View your active networks".
This will open the "Set Network Properties" dialogue. Here you can rename a network connection or change the icon for that network connection.

You can Click on "Merge or Delete Network Locations" to see a list of stored network connections.

You can merge or delete connections here as well as see if a network connection is in use and managed or unmanaged.
Merge this tools is unusable for me because I change security regularly
Delete this is very useful on WiFi but i have better solution on WiFi

To many networks to Merge or Delete  better just rename the Network :p

How to remove SSID on Wireless Connection

Ok like what I sad  If you used the same name SSID  but different Network security key (password) you can NOT CONNECT.
1. Again Open "Network and Sharing Center"
sample click this

 2. Click Manage Wireless Networks
 Right Click the network you want to Remove or Change Properties.

If you click Properties you can able to view Network security Key (password) and change with the new one if you already change your  Router WiFi password.

Other way  direct right click  the network SSID click the properties to view password or change it..

Read More

Security researchers from UK have found a way to steal larger amounts of money from people's pockets using just a mobile phone

Researchers on Wednesday at the 21st ACM Conference on Computer and Communications Security, detailed the attack which rely on a “rogue POS terminal” running on a mobile device that could be pre-set to a large amount of money, a wireless transfer of up to 999,999.99 units in any currency.

Security researchers from Newcastle University in the UK have found a way to steal larger amounts of money from people's pockets using just a mobile phone, due to a security glitch Visa’s contactless payment cards.

Contactless payment cards use a cryptoprocessor and RFID technology to perform secure transactions without a need to insert the card in a reader, even an NFC-equipped mobile device may also be used as a payment card. But there is a specified limits country-wise.

Contactless payment cards are meant to have a limit of £20 per purchase in UK, using which shoppers can buy things by simply tapping their card on a scanner, without having to type in a PIN. But exploiting a flaw in its protocol could allow cyber criminals to manipulate the cards to transfer up to $999,999.99 in foreign currency into a scammer’s account.

'Multiple safeguards'

They said transactions with the card were approved in less than a second.

"All the checks are carried out on the card rather than the terminal, so at the point of transaction there is nothing to raise suspicions," said Martin Emms, lead researcher on the project.

"By pre-setting the amount you want to transfer, you can bump your mobile against someone's pocket or swipe your phone over a wallet left on a table and approve a transaction."

He acknowledged the study had not looked at the security systems banks have in place to prevent fraud.

But he added it was not clear, looking at the payment protocol, how banks would deal with the problem.

Visa said it had reviewed the research and it did not take into account "multiple safeguards put into place throughout the Visa system".

"For these reasons we do not believe the findings to be a cause for concern, as it would be very difficult to complete a fraudulent payment of this kind outside a laboratory environment," its statement said.

The good news is that the research team haven’t tested how Visa’s system reacted to a rush of foreign currency transfers, and whether it would flag them up as a possible fraud or not.
But the experts are worried that the contactless payment cards system is insecure, and that cybercriminals would likely use the flaw to set up hundreds or thousands of fraudulent transactions in smaller amounts to evade detection.

"Our research has identified a real vulnerability in the payment protocol, which could open the door to potential fraud by criminals who are constantly looking for ways to breach the system," Emms said.

In a report on the BBC, Visa Europe said that "we have reviewed Newcastle's findings as part of our continued focus on security and beating payments fraud" and that their research "does not take into account the multiple safeguards put into place throughout the Visa system", adding that it would be "very difficult to complete this type of transaction outside of a laboratory environment."
Visa Europe also said that the company is updating its protection to require more payment card transactions to be authenticated online, making this kind of attack more difficult to carry out.



source:
http://www.bbc.com/news/uk-england-tyne-29862080

http://www.ncl.ac.uk/press.office/press.release/item/contactless-cards-fail-to-recognise-foreign-currency

Read More

Some new Sony Xperia handsets seem to contain the Baidu spyware.

The Baidu folder appears to be created by Sony’s ‘my Xperia’ service each time a connection is made and is reported to be sending pings to China. There is no further information known on what these pings are transmitting but nevertheless they do seem to be transmitting.

About a month ago, a group of community users of Sony smartphone detected the presence of a strange folder, named “Baidu”, mysteriously appeared from among those present in various versions of Android for these handsets.

“Just unpacked my Sony Z3 compact, haven't installed a single app and its connecting to China. I am not so concerned about the folder itself but my phone now has a constant connection to an IP address in Beijing which I am not too happy about.” Reddit user commented.

The creepy part is that the folder is created automatically without the owners permission and there is no way of deleting it. Even if someone tries to remove it, it instantly reappears as well as unticking the folder from device administrator equally seems to do nothing, neither does starting the phone in Safe Mode.

PERSONAL INFORMATION SEND TO CHINA
Going deep, several users reported they found that the Chinese government is able to detect the status and identity of the device, take pictures and make videos without the consent of the user. A user, going by the handle Elbird, posted on Sony Forums that with the help of Baidu folder, the Chinese Government can:

• Read status and identity of your device
• Make pictures and videos without your knowledge
• Get your exact location
• Read the contents of your USB memory
• Read or edit accounts
• Change security settings
• Completely manage your network access
• Couple with bluetooth devices
• Know what apps you are using
• Prevent your device from entering sleep mode
• Change audio settings
• Change system settings

Thankfully this is a spyware and you can check to see if you have or not. If you see the folder named Baidu in your device then your device contains the spyware. But, for users it isn't the folder which seems to be the real cause for concern, though; it’s the fact that the phones open a connection to servers.

According to the reports affected devices include the new Sony Xperia Z3 and Z3 Compact, and several users from the Reddit community have also reported about the presence of this folder on their mobile phones, too — and not necessarily phones made by Sony. One owns an HTC One M7, another an HTC One X, a few others the OnePlus One.

STEPS TO DISABLE BAIDU SPYWARE

1. Backup your important data and factory reset the device.
2. Turn on the device and go to Settings -> Apps -> Running and Force stop both “MyXperia” apps.
3. Then remove the baidu folder using File Kommander app.
4. Go to Settings -> About Phone -> Click 7 times on the Build Number to enable developer mode.
5. Download or Install the Android SDK on your computer and then connect the Sony device to it using USB cable.
6. Run the adb tool terminal : adb shell
7. In adb shell, type the command: pm block com.sonymobile.mx.android
8. Exit adb shell
9. Reboot the device.

Note that the spyware does not necessarily affect the process or functionality of your mobile devices, so you shouldn't be worried in this respect. Sony has not officially responded to this ‘baidu’ folder issue.

However, the company has recognized the issue and has said that in the next release the problem will be fixed. Unless Sony can roll out some kind of fix in the near future then it seems you might have to wait until Lollipop rolls out in January before you can get rid of Baidu.

Recently Chinese smartphone manufacturer Xiaomi has been called out for spying on personal user data using their smartphones. According to F-Secure Xiaomi Smartphones were sending user data back to the servers based in China.

Read More

The Launch of the Nxtty Crypto Messenger

The Launch of the Nxtty Crypto Messenger

DUBAI, UAE, October 27, 2014, PRNewswire

The Nxtty Crypto Messenger is a new, exciting messenger app that is launching on the 28^th October in the Google Play Store and brings with it the future in encrypted messaging services that are seamlessly integrated on a technology platform and design that has been developed for direct access to privacy in a mobile communication service.

Nxtty is structured to be a whole and full-featured crypto messenger that aims to keep its in-built economy relevant and accessible with the use of Nxttycoin and through the NXTTYconomy that involves various features to connect, share, and use its crypto currency. The concept of the NXTTYconomy is to create a complete backdrop for Nxtty as a social messenger with anonymous Open Chat, private chat, a wallet feature, and a simple search option for contacts. Transactions are designed to take place in the app through the use of Nxttycoins that can be spent on intriguing and insightful photo posts from users while the wallet feature is designed to track incoming and outgoing Nxttycoins that will be fully transferable.

Nxtty will distribute the majority of itself to users who download and begin to use the app as the signal for its first time users to have the knowledge and key to the company. The first sign-up of 100,000 users will receive 2,500 Nxttycoins that work in the dynamics of the messenger for users who are active and want to tip posts in the Open Chat. Later on the Nxttycoins will become invaluable to the users who will be able to convert and spend them as a real currency. The 100,000 users that receive this will own and represent 25% of Nxtty through the crypto currency and they will have a dynamic lead in the world of crypto messaging with Nxtty's future developments.

Nxtty is the world's first mobile-based social enterprise that has erupted from the inherent need for privacy in our communication and will continue to follow with its streamlined design that has the ability to address the next generation privacy status.

Please find us on social media and discuss with us further:

Website: http://nxtty.com  

Facebook: Nxtty

Twitter: Nxtty @cryptomessenger

Instagram: @nxtty_app

Tumblr: http://cryptomessenger.tumblr.com 

Read More

Android L is for Lockdown : Unrootable but still open source

Root is, without a doubt, the (un)holy grail of the Android world. Those wonderful permissions that allow you as the user to pretty much do as you please with your device are certainly a major delight, and really one of the top reasons why Android devices have gained as much popularity as they have–not just among end users but among developers as well. There is yet another aspect of the OS that keeps people coming back for more, and that is the fresh, constant stream of updates and new OS versions. However, these two can hardly coexist with one another. Normally, whenever a new update for … well… anything comes out, it does so with features, bug fixes, and plugged holes. The latter are the ones that are normally required to obtain things such as root level access on our devices. This means that if you update, for the most part, you can kiss root goodbye. Granted, there are apps that will help root survive even an OTA upgrade but still companies making these OS and devices always are on the look out to ensure that the holes and exploits are plugged.

 XDA Senior Recognized Developer and Senior Moderator Chainfire has been warning us of all the upcoming changes in the Android world for quite some time now, especially since the newer Jelly Bean and KitKat updates hit the shelves. Well, so far, we can officially say that he has been dead on target on everything he has said regarding the increased security on new versions of Android. The newest Lollipop update, LPX13D, seems to break root, like most updates do. However, it seems to do more than just break it because with the correct combination of factors, a device can become unrootable. Chainfire goes on to explain that the reason why root gets “broken” is mainly because the script required to grant root is no longer allowed to run at boot time from init.d, but rather it is forced to run from a SELinux dedicated context instead. This, apparently, is a new requirement for all apps and services running at boot.

The solution that Chainfire provides is to enable root at kernel level. In other words, you need a custom kernel in order to obtain root. However, many times, you need root in order to flash a custom kernel. Fine, some of you might say that by flashing via custom recovery, that the kernel can be flashed with ease. What if the bootloader is locked? Better yet, what if the bootloader cannot be unlocked? Yup, you got yourself a stock device forever (or until someone gets past the security measures). Essentially, Google is giving manufacturers a golden opportunity to put root access to rest for good. They will not do it to their devices, as the Nexus line has an unlockable bootloader, but no one can guarantee the case will be the same for other manufacturers.

The latest and greatest installment of our beloved Android OS is Lollipop (Android 5), which is something that has been on pretty much everyone’s mouth in the tech world for the last week or so as it became available in the latest and most functional Developer Preview. The latest Lollipop installment is build version LPX13D, and aside from being one step closer to the final release, this one also brings the kiss of death for root, which pretty much is the case with all updates as we mentioned earlier. No biggie, right? We simply root again and be done with it, right? Or we simply use a root survival app and we keep going, right?? Nah, not exactly. There are several changes in device security, prompted in part by people and companies seeking the security and sanctuary of their precious data and nude pics. So, with that in mind, Google came to the rescue.


source:

Read More