Saturday, January 24, 2015

China denies involvement in Outlook.com attack

The Chinese government has denied any involvement in a recent cyber attack against Microsoft's Outlook.com, and it even went as far to accuse a watchdog group of slander for suggesting that the country could be behind it.




"The Chinese government is a staunch defender of the Internet's security, and resolutely opposes any form of cyber attack," the Cyberspace Administration of China said on Thursday.

On Saturday, Microsoft's email service faced a brief "man-in-the-middle" style attack in China, according to the watchdog and anti-censorship group GreatFire.org. Microsoft later confirmed the attack took place, stating that a "small number of customers" were being routed to a server impersonating Outlook.com

Although the hacking attempt lasted only a day, it was just the latest man-in-the-middle style attack to hit a foreign Internet service in China. In October, Apple's iCloud faced a similar attack, and weeks before that, Yahoo as well.

GreatFire.org and other security analysts suspect that Chinese authorities could be behind the attacks, given that the hackers would need access to China's state-owned Internet service providers to launch them.

China has always rejected claims that the country sponsors hacking attempts, so Thursday's denial was no surprise. But the country's cyber authority also blasted GreatFire.org for alleging that the government could have a role behind the Outlook.com attack.

"This is unprovoked speculation, and purely amounts to disinformation and slander from anti-China forces based abroad," the government office said.

In addition to monitoring cyber attacks in China, GreatFire.org is also notable for its activism to undermine the country's online censorship. It's done this by creating functioning mirror sites to foreign internet services that have been blocked in China.

The country's government, however, isn't pleased. In the same posting, the cyber authority's spokesman Jiang Jun accused GreatFire.org of launching "unprovoked attacks" against the Chinese government.

He also alleged GreatFire.org of using the Outlook.com hacking attempt as a way to "incite discontent", after China had recently shut down a swath of illegal Internet sites and social media accounts.

In response, GreatFire.org on Friday questioned why Chinese authorities weren't doing more to investigate the recent man-in-the-middle attacks.

"If CAC (Cyberspace Administration of China) claims they are not responsible, how could someone get into the backbone of the Chinese Internet and implement nation-wide attacks for six times over the course of two years without being noticed?" the group said in an email.

"All of our writings are backed up by hard data," the group added. "How is it groundless?"

GreatFire.org has said it was founded by three members, without the aid of any other groups. The members have yet to reveal their identities for security reasons. But one of them said back in 2012 that he was a foreigner living in China, and previously worked as a Web developer.

Google reveals Mac security holes before Apple's fix is ready




Microsoft isn't the only big tech firm grappling with surprise security flaw disclosures these days. Google's Project Zero security unit revealed at least two unpatched vulnerabilities in OS X (Yosemite appears to have mitigated a third) that theoretically help attackers take control of your Mac. The search company says it privately notified Apple about the holes back in October, but automatically published the details after Project Zero's usual 90-day cutoff period. Apple's usual policy is to decline comment on exploits like this until it has a solution. However, relief is at least relatively close -- iMore reports that an upcoming Yosemite update (10.10.2) is expected to tackle these flaws. The main question is whether or not Apple can deliver its fix before malware writers find a way to use those bugs for sinister purposes.



http://www.engadget.com/2015/01/23/google-reveals-zero-day-mac-exploits/

Wednesday, January 21, 2015

cafe news

 powerful program for iranian
based on RSSE






Threads

Cooking, health, children, parents, text, movie and interview the stars, and the world's newest musical, technological, political, social, economic, sporting and read hundreds of articles and other interesting



why use cafe news?

Low size and high load
chat to user  member app 
Storage of Entries and Browse Offline
Storage news Favorites
Ability to write and share news
Ability to automatically update content

Read news distinction of news
time sync NTP
Internal browser
develop by behnood NB


BUY




compare beef vs Mutton




lync server vs cisco router

hi

LYNC
A program developed for video conferencing, chat, telephone center  (can be replaced PBX)
The ability to communicate with exchange  mail server and outlook
As can communicate with the Portal Builder(share point) ok
So you can have a social network like Facebook by SharePoint
 you can have a mail server  like yahoo by exchange
you can have a Messenger  like yahoo Messenger by lync server

 best feature lync server
Reduced price why?
Suppose you live in the United States Your friend in China, you can communicate friend by internet  like skype 
You can  lync replace pbx  reduce use important  phone in network
based work PSTN  TDMA(wireless network ) QOS، VOIP، IPT (In the future ipv6) 


BIG problem :(

You must be a member active directory  (domain services)

how to solve? 
1 use RADIUS  ldap Authentication 
2store account radius in sql server 
3router cisco conect to radius  and WID،SQL SERVER 

crate a web site optional name=
 sharifi.com
you use  ip http sever Authentication  for cisco router  and   LDAP Authentication 
finish step store account in database authentication by ACDS  and lync use account 
example  alex@sharifi.com 
NOTE
1 router  should support URPF 
2 use static ip address 
3 use QOS for router Otherwise you will have delayed 
4 use a DDNS (optional) Speed up 

GOOD LUCK