Sunday, November 14, 2010

Hacker Hits British Navy Website with SQL Injection Attack

A hacker reportedly exploited a SQL injection vulnerability on the Website of Britain's Royal Navy, according to media reports.

The incident took place Nov. 5, when a hacker known by the alias TinKode is believed to have attacked the site and stolen passwords and usernames. Right now, the site bears the message stating that: “Unfortunately the Royal Navy's Website is currently undergoing essential maintenance. Please visit again soon.”

TinKode posted about the attack on Twitter and linked to his security blog, where visitors could find more information about the attack. The hacker, who is believed to be Romanian, has been tied in the past to attacks against NASA and U.S. Army-owned sites as well, Sophos Senior Technology Consultant Graham Cluley told eWEEK.

“TinKode's attack is particularly embarrassing for the British Ministry of Defence, as just last month protecting against cyber-attacks was declared in the National Security Strategy to be a 'highest priority for UK national security' alongside international terrorism, international military crises and major accidents/natural hazards,” Cluley blogged.

“We can all be thankful that Tinkode's activities appear to be have been more mischievous than dangerous,” he added. “If someone with more malice in mind had hacked the site they could have used it to post malicious links on the Navy's JackSpeak blog, or embedded a Trojan horse into the site's main page.”

SQL injection is a well-known class of vulnerabilities found on the Web. According to a recent report from White Hat Security, SQL injections are the sixth most prevalent attack class, though cross-site scripting and information leakage were in the lead by far. SQL injection also was mentioned as a topic on the "2010 CWE/SANS Top 25 Most Dangerous Software Errors" list released in February.

In an article here, eWEEK compiled a list of tips to help organizations prevent SQL injection vulnerabilities before hackers get a chance to exploit them.

In a statement, the Royal Navy reportedly said that the Website had been temporarily suspended.

"Security teams are investigating," according to the statement. "Access to this Website did not give the hacker access to any classified information."

“Hopefully efforts are in place now to secure any vulnerabilities and reduce the chances of such a serious security breach happening again in future,” Cluley blogged. “It is to be hoped that the ultimate impact of this attack will be egg on the face of the Ministry of Defence (and better security practices in future), rather than a more significant assault on a Website presenting the public face of an important part of the armed forces.”

Tuesday, November 2, 2010

Three Words....

Life was dark, life was dull, life was dry, even it was peeing with rain, even my body was wet to skin, but my soul always remained dry. I never enjoyed the pleasures of life, never enjoyed the pleasures of whether, never enjoyed the pleasures of teen age (like hanging out and stuff). I would see my class mates always working out a hook-up plan for holidays, I was never invited. Everywhere I go, it was just me, I mean JUST me (it hurts alot!). I never understood why my class mates always used to wait anxiously for the lunch-time bell to ring, never understood why my classmates grin over the moon when the weekend is around the corner. Maybe I wasn't like them? Maybe I was a little different from them? Or maybe I was a nerd? No, after having continuous check-ups from doctor arranged by my pitiful parents, I came to know I was a perfect and a normal girl. And am I not a nerd (this time, doctor didn't prove it but me). Because I have been getting C in my past exams, nothing more that it. I don't study, I am not a jockey person. I would become envious while seeing my female friends going out with their boyfriends, going to movies, bowling, mall, window shopping and god knows what else. Its just that, I was not going with the flow, neither against it. I was on the fence. Every morning I would wake up smiling, a broad grin on my face, hoping that today is my day, MY DAY! But nothing in particular happened, same old boring and social-less routine until one morning, I woke up with a feeling that something good this time is waiting, that I would only have to reach out and grab it. I was humming a song (god knows what song) just random humming while brushing my teeth. Got a lovely dress ready for school, today was a party at my school. I put up some curls in my long dark hair, my hair got all bushy type, I liked it. I put up my dress quickly as I didn't want to be late for party, went downstairs, had breakfast, bid my mom farewell and off I went.


I had this excitement arousing in myself, some weird excitement that today was some day, some out of ordinary is going to take place and its going to change my life. "what's up?" my dad asked me, looking all over my face while driving, his long face frowning with confusion as to what am I up to. "Nothing." I said, smiling to myself, as if hiding an ugly secret. I got out of my dad's Mercedes car, school was looking kind of fancy today, maybe today was a party, that's why. I entered my school and started walking towards my class. I passed many classes, all students were dressed in their best party clothes, whole of the class rooms were vibrating with party music, esp "Kesha - Tik Tok". Many girls out of inspiration were dressed as Kesha the singer, they looked real lunatics. I passed a group of boys and got myself a remark "looking unusual, where's that lousy worn-out clothes of yours that you wear everyday?". I mumbled "jerks" through my teeth not even taking the slightest bit of problem to move my lips. Finally I reached my class which was in the 3rd floor. I walked in, noticed my class teacher having a chat with another teacher. My class was decorated with flashy eye-catching particulars and ribbons. Almost nobody took notice of me, I was invisible to everyone of them and felt as though some ghost was gliding through busy human souls and would pass through them giving them no trouble of noticing what went through them. Gosh, I felt hurt. The boys in my class finally noticed my hurt expressions and called on to me, "hey you want to hook up? How about after party? We can go to my house." Sure I know why he was calling on me like that. I politely told him to 'buzz off'. I took a chair for myself and later on, the couple dancing event started. Now we were to find ourselves a partner for dancing, I decided to be a spectator as who is gonna ask me out. So I just sat there looking dumb, my eyes watering. "Sid! Sid! .......... SID!" Teacher was calling on me across the classroom waving at me to get my attention. I waved back (finally), went to her to know what was up, "Sweet biscuit, would you be so kind to get me couple of glasses from my locker", said my teacher in her British accent. I went to get what she wanted (phew , finally I was busy, yeah some party :(..)


I was encountering difficulties while opening her locker, "Mind if I help?", a good looking guy said with utter politeness, blue eyes, kind face. "Sure", I said. He did it. "Thank you!". "No problem, not at all, I am Sam by the way". " I am Sid", shaking hands with him, his hands reminded of me about my fluffy blanket I used to put on myself while I was young. So here we are, I have made friends with a blue-eyed boy, who was a bit taller than me, one class senior than me. My sixth sense was right, something really out of ordinary happened that day, me and Sam bunked school party and went to party ourselves. We broke a bread in Grand Restaurant, had bowling in the Mall, couple dancing in Love Cafe ( which I was looking forward to). Well, to cut the story short, our friendship was suddenly changed into relationship, at once, I got a life which I once dreamed of. I was happy, always smiling person, I was everything opposite of what I used to be. I started loving life, I was born again!


It was 30th March, April month was around the corner. Yes, April Fool was the main topic of gossip and discussion in most groups. Many friends of mine had talked about April Fool and their plans to fool people. I was least bothered about it as I was busy with my love life and boyfriend Sam. We had started dating and were absorbed in our activities.


3rd April, my boyfriend Sam came up to my house, wearing long coat, hands covered with gloves, muffler around his neck, gosh, he looked handsome! "Sid baby, tomorrow we have arranged party, all our friends are gonna be there, and you should come too, because its not just a party, I am going to do something special, so you better come too". "Really?!", I cried excitedly "sure I am in, but what's this special thingy? gimme some hint.". "Oh, Sid babe, alright, I will say three words to you tomorrow. Bye, see you soon!". He sped off with his chopper bike.
I came to my room, my heart beat has raced up a bit. Yes! I was waiting for this moment, THREE WORDS! I thought. THREE WORDS... WHAT COULD THEY POSSIBLY BE? OFCOURSE, THEY ARE GONNA BE; I LOVE YOU SID. These words sounded so musical in my mind, they sounded like romantic poem being sung by a beautiful voice. I was high above the sky now, I was feeling romantic, I was possessing all the positive feelings that ever existed in the world. I went to sleep early, I realized that I was feeling a bit nervous too but it didn't matter. I closed my eyes and started dreaming, imagining the scenario where Sam is going to say those THREE WORDS to me! Oh, I couldn't sleep, I can't sleep like this, so I thought of watching a romantic movie which I did.


I woke up early the next morning, birds were chirping in the fine weather, clouds were forming charming shades on the ground and cool breeze was blowing through my window. Perfect weather for perfect day! I thought. So I just roamed about my house stubbornly trying my best to kill my time.
Atlast here it was, party time! I put on my best dress and Sam came to pick me up. We reached the Party Hall and everybody was already there, while we were entering, it created quite a stir around the crowd, everybody looked at us and started whispering ( I didn't really care). Sam introduced me to his friends and we sat down to our table. The party was off the hook! Fully decorated hall was amazing! Atlast, it was time for Sam's three words. Sam invited me on the stage and introduced me to all the people invited. Finally, he said those Three words. The very three words that I would never have wished to hear. With microphone gripped tightly between his hands, he said aloud "APRIL FOOL, SID".


 My heart skipped and stopped beating for sometime. I checked my chest to see if I am gonna die soon, I really wanted to die. Those three words struck me like a thunder bolt right through the organs of my head making them electrified and left them jam stuck. All the blood gushed to my face, I was hurt, broken hearted. I realized I was angry. On top of that, "Sid, please meet my girlfriend, Natalie" Sam introduced his girlfriend to me, the beautiful little cow! My eyes had started to water and tears begin to fall down which caught everybody by surprise. Sam, surprised, half laughing, "Sid, you alright?". He didn't seem to know why I was crying, he was heartless. I cried out loud, "April Fool!" and everybody was relaxed that I was only faking my tears which isn't true, They were true tears and Sam broke up with me with those Three Words, the very words that I have been waiting for all night, the very words I would never wish to hear!


To get out of my misery, I left that school, left that city and settled in Arab country and studied in Woman's College, yes that's right, only single-sex college!
Site Meter