Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

HF News // Edition 240



[IMG]http://ihydra.net/hfnt/headers/Title240.png[/IMG]

The edition you are currently reading is the #240th edition of the HF News. To read any older editions of the HF News, please go here.



[img]http://ihydra.net/hfnt/headers/Headlines.png[/img]

Xch4ng3 Returns
After stepping down as Administrator followed by a short stay with the Mentors, Xch4ng3 has rejoined the forum team as Staff. We would like to thank Xch4ng3 for his remarkable dedication and hard work here on Hack Forums, which goes back to early 2011.

Mysterious New Awards
A puzzling set of awards has been added to the awards list. The green, purple, and gold Clover trio holds no clear requirements for obtaining them as of now; only that they appear to be for the lucky members. Members are speculating a casino-like project is underway, but Omniscient has not confirmed this, saying only they are in "Teaser" - the stage previous to Beta - mode. >>Source



[img]http://ihydra.net/hfnt/headers/UserNews.png[/img]

User News
Bans*
Vacations
Repfucks
Awards
  • TommyD received DaBomb award.
  • Joclings received the Cool award.
  • TommyD received the Spy award.
  • xadamxk received the Bronze Tutorial Award.
  • Cyrus donated for the Benefactor award.
  • Orchid donated for the Benefactor award.


* - As of the Monday prior to release.



[img]http://ihydra.net/hfnt/headers/NotableThreads.png[/img]

Announcement Threads

---Omnicoin Group Auction - Omniscient
---Omniscient talks about his plans to resume the Omnicoin group auction in the near future.

Entertaining Threads

---How many murders are on HF? - SprayPaint
---Do you believe there are murderers on Hack Forums? This user does.

Member Feedback Threads

---1 year+ in depth feedback - Joshz
---The user Joshz gives his feedback regarding Hack Forums in this thread. Check it out!

---1 Year HF Bday Thread + Feedback - Limited Edition
---The user Limited Edition gives his feedback regarding Hack Forums in this thread. Check it out!

Contests & Giveaways

---1.2 btc giveaway! - Young Nino
---How would you like to win 1.2 bitcoins? Enter this contest to test your luck at it!

---$35 3 WINNERS // AND MENTORSHIP - +One
---Three users have the chance to win $35 in this contest and you could be one of them. Hurry and enter now!



[img]http://ihydra.net/hfnt/headers/InterviewClique.png[/img]

Interview - angel. (Click to View)

[Image: support1.png]


[img]http://ihydra.net/hfnt/headers/HFNSupport.png[/img]

Do you enjoy reading the HF News? Do you think others might enjoy reading the HF News? Do you want to show your support for what we do?
Wear our Support Signature and show us you care! Numerous members don't even know we exist, make a change!

Support Signatures (Click to View)



[img]http://ihydra.net/hfnt/headers/GroupNews.png[/img]

Fortune sold - with a hint of dishonesty
Official group Fortune has been sold to eCoLoGy by PositiveEnergy. Many speculate that the deal was made in lieu of PositiveEnergy's diminishing funds, but there has been no hard evidence to support this claim. As for the new group, eCoLoGy has made mention of a "user-interaction" group, most likely meaning that he'll be heading in the direction of a lounge group with no main focus or theme (can I hear a "Long Live The Empire"). However, not everything is as clean cut as it seems. A recent report by Juicy- calls out PositiveEnergy for potentially executing an exit scam. PositiveEnergy has responded as of Friday with a promise to pay back whatever he owes.

Current Open Group Recruitments
Important Group Related Threads


[img]http://ihydra.net/hfnt/headers/OmnicoinNews.png[/img]

Omnicoin Price Triples After Auction Announcement
Earlier this week Omniscient announced that the official group auction with Omnicoin will indeed be returning. The past auction was delayed and eventually cancelled due to an attack against AllCrypt, the only Omnicoin exchange, and the Omnicoin network itself.

This announcement caused a rush of demand on Bittrex, causing the price to triple in value in just a few hours. The auction will most likely take place later this month, ending in early June.

You can read more about it here.

Weekly Highlights
New OMC Exclusives

Click here to start your shop for a chance to be featured in the next edition.



[img]http://ihydra.net/hfnt/headers/SiteNews.png[/img]

Site Statistics
  • Total (Click to View)
  • Average (Click to View)

Ban Statistics
  • Last Week's Bans (Click to View)
  • Total Bans (Click to View)

Forum Counts
  • Tab Counts (Click to View)

Membership Counts
  • Groups (Click to View)

* - As of the Friday prior to release.



[img]http://ihydra.net/hfnt/headers/Memo.png[/img]

Sections Renamed
Opinion Weekly has been renamed to Opinion Central. It has been skipped for this edition but will continue next edition. Weekly Update is now called Memo.

Moment
Moment is on it's way, read more in its own section.

Header Images
Header images are finalized, the colors will remain as is for now, don't see a need to change them just yet. Let's hear some feedback on them!

[Image: support1.png]


[img]http://ihydra.net/hfnt/headers/HackingNews.png[/img]

The VENOM Vulnerability
A new vulnerability has come to light pertaining to several virtualization platforms and has been dubbed VENOM (Virtualized Environments Neglected Operations Manipulation). The vulnerability resides in the virtual Floppy Disk Controller (FDC) of the QEMU hypervisor package that is utilized in many very popular hypervisors such as Xenserver and KVM. The FDC allows the virtual host to communicate with the host machine's resources, including other virtual hosts, and a small buffer overflow vulnerability allows a malicious attacker to break out of the VM and access not only other VM's, but also the host controller's hardware, allowing it to connect to networks that the host is attached to, allowing it to perform lateral attacks to other machines on the host network. This is especially dangerous if, for example, the host is in a production network, but the VM's are in a DMZ, because this would allow a hacker to access production data and launch further attacks. Patches have been released by RedHat and Citrix (Xen).

Yet Another Microsoft Word Exploit
Word Macros have long-since been the vector of choice when attacking Office users. A new vector utilizing an old method has come to light, and it is undetectable by AV's. Saving a Macro-infested .Docx file as an MHTML document, and changing the extension to .doc(x) or by appending base64-encoded data via an MSO file will hide the macros from antiviruses. The reason it is new is that it uses a new format, MHTML. Luckily, AV's are catching on quickly to this vector and have added signature-based rules to induce detection of these hidden devils. The payload was distributed via spam email explaining to the victim that their order has been shipped. A curious receiver, who had not ordered anything, would likely be inclined to open the attached invoice, which is the malicious .doc file, and see what all the fuss was about. Until recently, their AV's would not have suspected anything. Of course, the user would have to enable macros, but less technologically savvy people would follow the instructions without so much as a google search to see if it was safe. You can find the original and deobfuscated macro here.

MacKeeper 0-day Exploit
MacKeeper is a software for Mac OS X that is made to clean and secure a computer system. The vulnerability let's the attacker execute malicious commands with admin privileges on Mac OS X systems when a specific web page is visited. The vulnerability affects any MacKeeper that is under the version of 3.4.1. That is because of the way MacKeeper malware removal handles it's custom URL's. If the user has not logged on to MacKeeper then the login screen will appear and the login will be part of the exploit which the user will not be aware of which then will result in the user giving access to the hacker. The vulnerability has been fixed on any version of MacKeeper that is higher than 3.4.1. The vulnerability could have put many users at risk if it wasn't handle properly. No known breaches with the exploits are known of at MacKeeper. This exploit runs a certain command and then goes onto uninstalling MacKeeper once the certain web page containing this 0-day exploit is visited. This exploit gives the attacker remote access to the system.



[img]http://ihydra.net/hfnt/headers/SecurityNews.png[/img]

United Awards Miles to Those Who Discoverer System Bugs
United Airline has announced that will begin offering a bounty program for bugs found within their system. Many massive companies such as Google, Facebook, and Microsoft already offer a bounty program, and it looks like United wants to join the ranks. United said, "We believe that this program will further bolster our security and allow us to continue to provide excellent service. If you think you have discovered a potential bug that affects our websites, apps and/or online portals, please let us know. If the submission meets our requirements, we'll gladly reward you for your time and effort." Their program currently offers between 50,000 and 1,000,000 miles as a reward for exploit. United considers bugs that affect "confidentiality, integrity and/or availability of customer or company information" as potential bases for a reward. United said low severity vulnerabilities, things such as third-party issues affecting United, are worth 50,000 miles. Medium severity vulnerabilities, such as those that could lead to exposure of personal information, are worth 250,000 miles per vulnerability. Finally, high security vulnerabilities, such as those related to remote code execution are worth up to 1,000,000 miles. Security researchers must be MileagePlus embers to submit a vulnerability. Strangely, the company also said vulnerabilities that affect their on-board WiFi, on-board entertainment, and avionics are not applicable for these reward. >>Source

Penn State Security Breach Leaks 18,000 Peoples' Passwords
Pennsylvania State University's College of Engineering revealed on Friday that they had been targeted by two "highly sophisticated" cyber attacks over the last two years. The University's President, Eric Barron, issued an apology Friday that stating that the username and passwords of over 18,000 people may have been accessed. Fortunately, investigators believe that there was no breach of credit card information. In a different statement, Barron said that based on information from a security contractor hired by the school to investigate the attacks, at least one of the attacks originated from China. In his statement, Barron included, "We all will need to take additional steps to protect ourselves, our identities and our information from a new global wave of cybercrime and cyberespionage. Well-funded and highly skilled cyber criminals have become brazen in their attacks on a wide range of businesses and government agencies, likely in search of sensitive information and intellectual property." Penn State is one of many US colleges to have suffered a successful cyber attack. The University of California, LA, the University or Southern California, and the University of Maryland has all suffered similar attacks, that have exposed information on hundreds of thousands of people. Barron said on average Penn State "repels" more than 22 million cyber attacks from all around the world every day. >>Source

Researchers Discuss Google App Engine Vulnerabilities
A group of researchers for Poland claims, there are still several outstanding vulnerabilities in the Google App Engines for Java three of which include Java sandbox escapes. After three weeks without a statement from Google, the researchers reviled the vulnerabilities as well as proof of concept code. The code provided doesn't break the sandbox, but allows for a partial GAE bypass and could allow one to gain access to GAE's Java environment. The researchers said that the vulnerabilities stem mostly from an incorrect implementation of several methods and missing security checks in the Ape Engine. Security Explorations', the security researchers' company, CEO, Adam Gowdiak, said, “It should not take more than 1-2 business days for a major software vendor to run the received POC, read our report and/or consult the source code. This especially concerns the vendor that claims its Security Team has hundreds of security engineers from all over the world." He went on to say that several proof-of-concept-codes that he sent to Google stopped working in a production version of GAE, however, he said Google is yet to confirm the vulnerability was fixed. Gowdiak says that this would be the third time Google silently patched vulnerabilities. >>Source



[img]http://ihydra.net/hfnt/headers/GamingNews.png[/img]

Famous Dreamcast RPG Coming to Steam
GungHo Online Entertainment will be bringing the classic role-playing game Grandia II, originally published on the Sega Dreamcast in 2000, to Steam for the Windows PC following enthusiastic feedback from a survey taken in April. The game will be supporting both Steam achievements and trading cards. The game has been updated with HD graphics along with both mouse, keyboard, and gamepad support. "With the rise of digital downloads, it is especially important that classic games continue to remain available to play in some form," said president of GungHo America Jun Iwasaki. "Grandia II was chosen for a PC re-release because it represents both a hallmark of the Grandia series and an example of how great JRPGs can be." >>Source

Free Hearthstone Card Packs for European Players
Two classic Hearthstone card packs are being distributed for free to players in the European Hearthstone region. These card packs come as an apology for bad connectivity in the region throughout last week. This announcement comes from the official Hearthstone blog, which can be found here. "We know access to Hearthstone in Europe was spotty last week," according to the post. "Sorry about that, and we really appreciate your patience as we worked to get the tavern back into shape. "As a thank-you for bearing with us, all Hearthstone accounts in the European Hearthstone region created prior to May 3, 2015 will enjoy two free Classic Hearthstone card packs, free of charge." The packs won’t be set to expire and will show up in the “Open Packs” section and have an expected delivery time of 24 hours. >>Source

Ratchet & Clank Won’t Appear on the Playstation 4 Until 2016
The remake of the original game in the Ratchet & Clank Playstation series, which was set to be released sometime this year, has now been announced to be released in the spring of 2016. This news came from Insomniac brand development director Ryan Schneider on the official Playstation Blog on May 13. A feature animated film based on the Ratchet & Clank game series has been given a release date of April 29, 2016, with the Playstation 4 game being expected to be released around the same time. According to Schneider, the Playstation 4 version of Ratchet & Clank "re-tells the origin story that ties in closely and expands upon the movie's narrative." Schneider says the game will also feature new levels, new weapons and "completely redone visuals." The original Ratchet & Clank was released on the Sony Playstation 2 in 2002, with the most recent installment of the series being 2013's Ratchet & Clank: Into the Nexus for PlayStation 3. >>Source



[img]http://ihydra.net/hfnt/headers/TechNews.png[/img]

World's First 6TB SSD Coming Very Soon
Can't pick between the large space of an HDD or the speediness of an SSD? Well, turns out you won't have to - for long. Japanese electronics company Fixstar has announced that they will be releasing a line of SSDs in flavors of 1TB, 3TB, and the monstrous 6TB. The drives will come at a hefty price, with the only announced price being for the 1TB variety which will retail at $820 USD. The 6TB drive will be capable of handling write speeds of 520 Megabytes per second, and a read speed of 540 Megabytes per second, while only being 2.5 inches long. >>Source

Galaxy S6 and S6 Edge Getting "Iron Man Edition"
In a cross promotion with Samsung, Marvel has decided to add a little Avengers flavor to the Smartphone world. Iron Man color-schemed versions of Samsung's Galaxy S6 line are expected to be released this June. As of yet, Samsung has not announced whether the release will be solely abroad, or if it will hit the west. Images of the alleged design can be found here. >>Source

$10k Apple Watch At 1/10 The Price
With Apple's golden watch retailing anywhere from $10,000 to $17,000, Various jewelers have decided that they can do an equal job, at a fraction of Apple's five figure cost. A company that goes by the name of Watch Plate, will do the job themselves for $399, or about 25 times less than what the tech giant is asking for. While the buyer must supply the Apple Watch for the process, the price difference will continue to be enormous. Jeweler Watch Plate claims they use 24 karat rose gold as well as 24 karat yellow gold for plating the devices. They have also claimed that the entire process takes no longer than three days. >>Source



[img]http://ihydra.net/hfnt/headers/WorldNews.png[/img]

Ramadi's Battle
Over 500 people have been killed in Ramadi over the last two days as Islamic State (IS) now claims it has taken over the city. Fighting first begun last year but IS recently renewed their push for the city in April, besieging the city an putting it under serious threat with suicide and car bombings. It was reported after many bombings, the police and army defending the city started to retreat leaving behind equipment. The IS has now claimed the city is under their full control saying: "God has enabled the soldiers of the caliphate to cleanse all of Ramadi." A spokesman for the regional governor confirmed the statement: "Anbar operations command has been cleared," Muhannad Haimour told the AFP news agency. We don't have an accurate count of casualties yet but we believe at least 500 people, both civilian and military, have been killed over the past two days." Although taken over, Iraq's prime minister, Haider al Abadi has sated he has Shia militia on stand-by for the retake over the unstable city. >>Source

$22 Billion In Deals Between China And India
India has signed a trade agreement with China worth around $22bn in Shanghai as Prime Minister Narendra Modi's visit to China nears to a close. The agreement covers many sectors, including renewable energy, financial sectors, and ports. "Let us work together in mutual interests," said Mr Modi. "Now India is ready for business." Even more agreements were then signed covering education, railways, and scientific research making up $10bn of the deal. Mr. Modi's travel to China has been prosperous in creating an alliance between the two countries. During his visit Mr. Modi received a golden Buddha statue from an abbot at the Dacien temple in Xian. A statement made by China's foreign affair ministry has stated that the two countries "must work together to enhance mutual trust, control our differences and problems to avoid them interfering with bilateral relations". >>Source

Egypt Executes Six
Egypt has executed six men who were convicted of carrying out attacks on soldiers last year. The men who were hanged were accused of being members of militant group Sinai Province who have pledged an alliance with Islamic State (IS). They were all found guilty of killing two officers during a gunfight in March 2014. Although the men were hanged many were asking for a retrial of the men due to the "flawed" justice system in Egypt. Two groups, Human Rights Watch and Amnesty International claimed that three of the six men were in custody at the time of the attack in Arab Sharkas, a village north of Cairo and so therefore could not have carried out the attack. Amnesty International described the trial as "grossly unfair" and said the men were even tortured into confessing to the charges. >>Source

[Image: support1.png]


[img]http://ihydra.net/hfnt/headers/Battlestations.png[/img]

Every week - assuming we get enough submissions - the HF News will feature the best submitted battlestation.
Send iHydra a message by clicking here and including an imgur link of your battlestation!

freshandsticky's Battlestation



[IMG]http://ihydra.net/hfnt/headers/Moment.png[/IMG]

Moment is a new section that was suggested by multiple members. Members were looking to participate in HF News and we cannot fit everyone in Writers so we will begin to allow community members to write and submit articles of their own likings. There will be restrictions listed in the next edition along with how Moment will function in regards to articles. Moment isn't just for the community-submitted articles, we will also give "shoutouts" or public thank yous to people who are of help to HF News each week. This section is all about YOU!

Thank you to the following members for their continued support with HF News:




[img]http://ihydra.net/hfnt/headers/Comics.png[/img]

(1) (Click to View)

(2) (Click to View)

(3) (Click to View)

(4) (Click to View)

(5) (Click to View)

(6) (Click to View)



[img]http://ihydra.net/hfnt/headers/Credits.png[/img]

(Click to View)

[Image: support1.png]
Glad to see that it's finally up.
Great edition this week guys!

Keep up the good work!
We made it! Glad it's finally up.
That was one good read. Thank you HF News. Let's see how well the 'Moment' section does from the next edition. :)
[Image: wrYoU.png]
Going to read now.
Thanks guyyys! :p
Though it's cold and lonely in the deep dark night.
I can see paradise by the dashboard light.
Though it's cold and lonely in the deep dark night.
Paradise by the dashboard light.
Nice edition of HF news.
Reading now.
[Image: boostdroid-signature.gif]
SHOUTOUT TO YO BOY GARY.

[Image: 9EG6Tie.png]

This was a much better edition. It didn't feel rushed.
So much has happened on HF in the past week or two. This HF News is filled with a lot of it. I've spent more time reading and researching items in this edition than any previous I do believe.
Reading it asap,thanks! 😊
Actually pretty well written this week. News is getting better again imo.
World News made it this time. :3


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Mix11 hours ago 7 56 11 hours ago
Last Post: Raijin
by MixOct 10, 2026 09:57 AM 20 334 Oct 10, 2026 09:57 AM
Last Post: Jamika
by MixSep 29, 2026 08:52 AM 8 99 Sep 29, 2026 08:52 AM
Last Post: clark.dll