Blog

A regularly updated website or web page, typically one run by an individual or small group, that is written in an informal or conversational style.

Compress ISO

Compress ISO with ECM.

 

Using ECM you can compress ISO very easily.

 

1) Download ECM from the Mac App Store.

 

Appstore

 

2) Launch ECM.

 

ECM

 

3) Select an ISO to compress to the ECM format.

 

ISO

 

4) Drag and drop the ISO to ECM.

 

ECM Drag & Drop File

 

ECM Drag & Drop

 

5) Select a path to export the ECM file.

 

ECM Path

 

6) Click „Convert“.

 

ECM Convert

 

7) The file was converted into an ECM file.

 

ECM Converted

 

8) You can observe the new weight of your new file, and that the ISO size was reduced.

 

ECM File size reduction

 

ISO ORIGINAL SIZE : 102.9MB
ECM NEW SIZE : 90.4MB

 

You can compress ISO files with ECM. Download ECM for OSX.

 

Share on FacebookTweet about this on TwitterPin on PinterestShare on Google+

iOS Mail app

iOS’s Mail app

 

Demonstration of proof-of-concept attack on iOS’s Mail app. Apple was notified about technical details of this vulnerability on 2015-01-15

 

The source of this iOS’s Mail app exploit was posted here : https://github.com/jansoucek/iOS-Mail.app-inject-kit

 

iOS 8.3 Mail.app inject kit

Back in January 2015 I stumbled upon a bug in iOS’s mail client, resulting in HTML tag in e-mail messages not being ignored. This bug allows remote HTML content to be loaded, replacing the content of the original e-mail message. JavaScript is disabled in this UIWebView, but it is still possible to build a functional password „collector“ using simple HTML and CSS.

It was filed under Radar #19479280 back in January, but the fix was not delivered in any of the iOS updates following 8.1.2. Therefore I decided to publish the proof of concept code here.

Update 2015-06-30:

The exploit got a nice CVE-2015-3710 sticker and was fixed by Apple in iOS 8.4 and OS X 10.10.4. Kudos to Apple for prompt response once it was published publicly.

Usage

  • Edit the e-mail address you would like to use for password collection in framework.php
  • Upload index.php, framework.php and mydata.txt to your server
  • Send an e-mail containing HTML code from e-mail.html to the research subject
  • Don’t forget to change the modal-username GET parameter value to the e-mail address of the recipient
  • You can use https://putsmail.com for testing purposes

Credits

Framework7: Vladimir Kharlampidi (http://www.idangero.us/framework7/) – Framework7’s CSS code was used for the login dialog styling

License

MIT

Notes

The code detects that the research subject has already visited the page in the past (using cookies) and it stops displaying the password prompt to reduce suspicion.

The e-mail address and password are submitted via GET to framework.php, which then saves them to the mydata.txt file, sends them out via e-mail to the specified „collector“ e-mail address and then returns the research subject back to Mail.app using redirect to message://dummy.

The password field has autofocus enabled. We then use focus detection to hide the login dialog once the password field loses its focus (e.g. after the subject clicks on OK and submits the password). Why even bother with this redirect nonsense when you can put <form> directly inside the HTML e-mail?

 

Share on FacebookTweet about this on TwitterPin on PinterestShare on Google+

Apple iWatch

Apple iWatch

 

Une vidéo de présentation faisant une démonstration de l‘Apple iWatch

 

 

Une autre vidéo montrant l‘Apple iWatch dans une optique „Health & Fitness“

 

 

Et finalement une Apple iWatch à 10 000$ réduite en miette…

 

 

Share on FacebookTweet about this on TwitterPin on PinterestShare on Google+

Apple WWDC 2014 – OS X 10.10 Yosemite

Apple WWDC 2014 – OS X 10.10 Yosemite

The Apple Worldwide Developers Conference (WWDC), is a conference held annually in California by Apple Inc. The conference is used by Apple to showcase its new software and technologies for software developers. Attendees can participate in hands-on labs with Apple engineers, as well as in-depth sessions that cover a wide variety of topics. Until 2007, the number of attendees varied between 2,000 and 4,200; however, during WWDC 2007, Steve Jobs noted that there were more than 5,000 attendees. The WWDC events held from 2008 to 2015 were capped, and sold out at 5,000 attendees (5,200 including special attendees).

 

Watch the WWDC 2014 Conference :

 

The WWDC 2014 was held from June 2 to 6, 2014 in Moscone West.

 

WWDC 2014

 

For the first time, the opportunity to purchase tickets was given at random to developers who were members of an Apple developer program at the time of the conference announcement, and who registered at Apple’s developer web site. Apple also gave 200 free tickets to students as Students Scholarships. The keynote began on June 2 and Apple unveiled several new software items, including iOS 8—the largest update to iOS since the release of the App Store—and OS X Yosemite, which features a completely redesigned interface inspired by iOS. No new hardware was announced at WWDC 2014, but the new Swift programming language was announced, along with a surplus of developer kits and tools for iOS 8. Bastille performed at the Yerba Buena Gardens,

and attendees received a black windbreaker with the letters „WWDC“ across the front and the number „14“ stitched on the back, along with a US$25 iTunes gift card to commemorate the 25th anniversary of WWDC.

 

Share on FacebookTweet about this on TwitterPin on PinterestShare on Google+
Seite 3 von 512345
Rbcafe © 2004- | Rb Cafe 1.3 | Kontakt Rbcafe | Rbcafe auf Twitter | Rbcafe auf Facebook | Datenschutz