Developer Needed
If you are capable of coding in PHP and other Web Dev languages, please contact me if you're willing to do a free project for Writers. You must be experienced with PHP, jS, HTML, and CSS - any other web dev language is a plus. There is no prize or reward so if you're seeking for one, don't contact me.
Stolen Account Policy Change
Despite the longed-for 2-factor authentication (2FA) system finally being implemented, only a measly few hundred have it enabled and so members with the ability to make use of this excellent security feature are still managing to lose their accounts. From now on, members who have lost their accounts without 2FA activated will not have them recovered and they will be closed instead. To make the warning clearer, those without 2FA activated face losing several site privileges as basic as posting in the near future. Furthermore, members will have a notification shown similar to a PM notification until they activate the 2FA feature. >>Source
Unlimited Paid Stickies?
Previously, only one paid sticky was allowed per member at any time. This rule is due to be officially lifted and members may soon be able to purchase an unlimited number of stickies (likely within reason). >>Source
The Rise and Fall of a Section
A suggestion was made for a comedy section to offer a place for sharing 'funny thoughts, bits, jokes, and stories', and so Omniscient added the Improv Comedy and Stand-Up under Personal Life. Just over 24 hours since launch, it was shut down after a ridiculous percentage of content was either racist and/or violated site policy. >>Source
---Sales Tag Change - Omniscient ---A few changes to the Sales Tag feature has been added for a short period of time.
---Gauth Notice - Omniscient ---The new Gauth feature is now becoming a requirement for those who have access to this feature. Click the link to read more.
---Omnicoin Group Auction - Omniscient ---Get ready for the group auction! Closing his thread, Omniscient has stated to hopefully have the auction going sometime this week!
---MoTM - Omniscient ---With the return of the wonderful member Froggy, MoTM will be restored under her control starting June.
---Stolen Account Policy - Omniscient ---With the new requirement for Gauth to be used by members with access to the feature, any stolen accounts that did not have Gauth enabled will be permanently closed.
---Blank White Page - Omniscient ---Members were receiving a blank white page when clicking on HackForums' links.
---Sucuri Captcha - Omniscient ---There is a new captcha that has been poping up as extra security for HackForums.
---Server Update - Omniscient ---An amazing new server update that is soon to come for HackForums! This new update can bring a lot of new features such as notifications!
Justin Timberlake: Welcome to this week's edition of the HF News, today I'm joined by Ego™. How are you doing? Ego™: Doing alright, currently in the hospital with a collapsed lung.
Justin Timberlake: Oh wow, I hope you recover soon. Any shoutouts you'd like to make? Ego™: Thanks mate. I'd like to make a shoutout to the guys in Null, my partner in Crime; Dubitus, and all the users affiliated with The Black Hand.
Justin Timberlake: Could you tell us some more about The Black Hand and how it came to be? Ego™: Basically, Ive been on the forum for roughly a year and a half. Dubitus is a very close friend of mine, I consider him Mr. Miyagi, as he taught me most of my knowledge about doxing. He opened a group called The Black Hand and it was unofficial to start off with. The main aim was to neutralise the amount of scamming and overall internet fraudulence on forums. We started off as roughly 4 members, but then realised we could make it so much more. We now have 11 members in the TBH main branch, and we are working on an absolutely amazing project. We also launched our student program and released our Doxing Bible.
Justin Timberlake: Seems like a really cool thing to do, and I see you guys are now officially a subset of Null, so congrats on that. Could you spill any details about your new project? Ego™: Yeah sure. We have had this massive idea for am extremely long time, of a place where users can go to resolve deal disputes based on investigation work. As well as an extremely safe and verified market place. We are launching our own website, which will host a dispute resolution center as well as a extremely secure transaction area.
Justin Timberlake: That sounds awesome, I can't wait to see it in action. So what exactly is the student program? Is it just a general class meant for all skill levels or is it meant for more serious users? Ego™: The student program is a 3-4 hour course in which users are taught the latest doxing and footprint removal methods. We provide a class every Sunday, and collaboration and questions are more tham welcome. We take users from all skill levels, some never tried doxing and are now hosting doxing services and such. After going through the course, you will get 24/7 mentoring via our student chat on skype, and if you show interest and persue more knowledge in the field, we move you up to the trials chat, meaning you have a shot at joining TBH's main branch with the core members.
Justin Timberlake: So far it seems like an amazing group to be a part of, so much to learn. Have you guys released any official products or services? Ego™: We've released our Doxing Bible, which contains basically everything we feel a doxer and footprint removal enthusiast needs to know about. It has private methods and is truely one of the best doxing ebooks Ive ever seen hit the forums, granted this could be slightly biased considering I wrote half of it... But from reviews it has a great reputation.
Justin Timberlake: Haha I'm sure it's worth the buy. How did you come across HF in the first place? Ego™: Like most of us I presume. Just somewhere to gain knowledge about hacking, realising its more than a hacking forum, and have been here ever since.
Justin Timberlake: It certainly is. What do you do outside of HF? Ego™: I do a load of sports. And when I'm not overwhelmed with work, I will party with friends and play some FIFA
Justin Timberlake: You can never go wrong with FIFA. What's one thing you'd like to see added to the site? Ego™: Well, like I said when applying for Archive, I'd like to see a more secure marketplace. Which adam replied with, "not being possible at the current time", although The Black Hand is about to released the first extremely secure forum based marketplace ever to hit the interwebz. Its completely secure, and I can't wait to prove him wrong ahha.
Justin Timberlake: It'll be awesome, can't wait to see it. Is there anything else you'd like to say to our readers before we wrap up this interview? Ego™: I realise there has been a lot of critisism towards The Black Hand recently, and I'd like to address the fact that we are doing actions and releasing products/services to better the community and to assist the members. We are a group based around going after scammers and multi-accounters, etc. There were some posts yesterday calling us "skids" and such, which is okay, people can think what they want. But we only have 11 members over the course of 5-6 months. Our members specialise in this field and we work hard to maintain professionalism and excellence when assisting users. That being said, come to me if there are any questions involving the group as I'd be more than happy to answer them.
Do you enjoy reading the HF News? Do you think others might enjoy reading the HF News? Do you want to show your support for what we do?
Wear our Support Signature and show us you care! Numerous members don't even know we exist, make a change!
Bittrex Price Wavers With Uncertainty Over Auction
When news first came out about the upcoming official group auction with Omnicoin, many members immediately began stocking up their stashes of Omnicoin, hoping to board the hype train before it carried the price through the roof, and catch a great deal on a group. As time passed, the hype quickly dropped, and the price of Omnicoin quickly returned to it's normal level. With a lack of hype, uncertainties about the auction began to arise, causing the price to fluctuate, hitting a high of 1497 satoshis, and a low of 700 satoshis in this past week (source). Although the price has fluctuated, the volume has stayed at a high level, regularity hitting over 1 BTC worth of trades every day.
Check out the Bittrex market here, and get in on the trading.
What's your opinion on the new Stolen Account not being recovered if you didn't have 2FA?
Codermal:
"I believe it's a wonderful idea. The person who originally got their account stolen is 100% responsible for getting compromised in the first place and not having 2FA activated."
Roger Waters:
"Members are idiots for not having this enabled as soon as it was released to Ub3r Members. I don't care who you are, if you don't have this enabled you are asking to be hacked, especially since you can see who doesn't have this enabled using the Trust Scan feature. The practice of closing members accounts and not having them recovered is a good policy and I'm honestly surprised this wasn't implemented when 2FA was first released. Hopefully members will start taking the right precautions to keeping their accounts safe."
Abide:
"Personally I think that accounts without 2 Factor Authentication should be expected to be stolen, and it's the users responsibility to secure their accounts with all the resources Omniscient gives them. HackForums users are constantly targeted off-site by people, and all users should have 2FA on their account if they do not want their account to be at risk. If you do lose access to your account or it is stolen, it is your own fault for not using the utilities that are provided to secure your account, and you should not be able to regain access to your account. If you are an active and dedicated member on HF, you should have the common sense to secure your account, not enabling 2FA simply shows that you don't care what happens to it. I treat my HF account like a bank account, and I am confident that it will not be stolen with the 2FA feature enabled."
Huge IRS Cyber-Attack
Ever since the invention of social media, it has been trivially easy to find veiled information about someone. A group of hackers, who are now believed to have originated in Russia, breached an IRS (Internal Revenue Service) Website and stole over 100,000 records of American taxpayers' information which included Social Security Numbers, street address, birthdays, and much more. It has produced over $50 million worth of damages. The hackers were able to perform this attack by scouring social media sites looking for information on the would-be victims, and were able to correctly answer the security questions on the IRS website, allowing them to receive the transcripts. The hackers first began their attack in February of 2015, and over a period of the last four months, over 200,000 requests were sent to attempt to get the IRS information. A 50% rate may sound unsuccessful, but when we attacking such a large group, the results can still be devastating. This was dubbed the largest attack on a government organization in the last 5 years.
Starbucks Gift Card Vulnerability
In a more light-hearted, non-malicious exploit, a security researcher discovered a way to add essentially unlimited money to a Starbucks gift cards. The vulnerability is not in the card itself, but rather in the Starbucks website. More specifically, the section that allows you to check and manage the balances of the gift cards. The researcher uncovered a race condition, or a situation in which two or more operations attempt to execute at the same time, in said website. To see if his exploit worked in a real-world scenario, he purchased three gift cards with $5 each, performed the exploit, and ended up with $20 in gift cards by the end. This entire escapade was detailed in a blog post that can be found Here. Homakov was accused of fraud by a member of Starbucks' InfoSec team, even though a Starbucks official had told him that he'd receive a $1,000 bug bounty reward. Even though the difference was less than two dollars, it does still count as a fraudulent purchase. Luckily, it doesn't seem as if Starbucks will be pressing any charges.
Another Health Insurer Hacked
A seemingly popular target of malicious hackers is health insurance providers. A single place that contains millions of peoples' information is the holy grail for hackers. The first health insurance organization to be the victim of a cyber attack was Blue Cross, which had 11 million records stolen. The second was Anthem, whose victim count rose to over 80 million. The newest victim in this string of Health Insurance Hacks is CareFirst. Though they are substantially smaller than the previous two companies, having only 3.5 million customers in total, but are nonetheless devastated by the attacks. Hundreds of thousands of records including names, addresses, and credit card numbers, were taken from the CareFirst database. The methods used in the attacks are seemingly identical to those used by a group of Chinese-sanctioned hackers, though it has been denied by Chinese authorities.
Apple Provides Work Around for Unicode of Death Bug
In recent days, iOS users have been experiencing a Unicode of death bug which has caused users who received a text containing a specific message to have their phones crash. It first surfaced on Reddit on Wednesday. Fortunately, the bug does not result in any data loss, however, it is very cumbersome for iPhone users. The attack became widespread enough that one day later Apple issued a workaround for the bug. The instructed users who received the malicious messages to "Ask Siri to "read unread messages.”, Use Siri to reply to the message – then open Messages. In messages, swipe left to delete the thread or tap and hold the message, tap more, and delete the message from the thread." While not totally clear why this issue is affecting iOS users, but the issue is believed to originate from the Notification system. It is believed that the notification system cannot render the text, and crashes as such. A report from The Guardian claimed that this issue affects Apple Macs, iPads, and the Apple Watch. Apple says a software update in the near future will be available in the near future. >>Source
Angler Exploit Kit Continues to Evolve
The Angler Exploit Kit, one of the most sophisticated exploit kits available on the black market, continues to evolve. The exploit kit was spotted adding yet another Adobe vulnerability that Adobe had claimed to patch. In addition, the kit is dropping CryptoWall. Earlier this year, it was discovered that the kit was pushing a ransomware hardware, a cross between TeslaCrypt and AlphaCrypt, in addition to a slew of Adobe exploits Along with the earlier pushes were some instances of Bedep Trojan, which is used for click fraud. The exploit kid added yet another Adobe Flash vulnerability. This comes as a surprise since Adobe claimed they patched the issue, however, researchers have found instances of the vulnerability still present. The vulnerability exploits a rare condition in the shader class which triggers the vulnerability, thus allow attacks to execute code as they please. In January, the kit added two Flash vulnerabilities, one of which was a day zero vulnerability. >>Source
Apple Blocks Outdated Flash Versions on OS X
After a major flash update two weeks ago, on May 27, Apple added older versions of Flash to a blacklist for OS X. “If you’re using an out-of-date version of the Adobe Flash Player plug-in, you may see the message ‘Blocked plug-in,’ ‘Flash Security Alert,’ or ‘Flash out-of-date’ when attempting to view Flash content in Safari,” said Apple in a security advisory. This is not an uncalled for move from Apple, on numerous occasions dating all the way back to 2012, Apple has blocked outdated versions of Flash on it's software, particularly after major Flash updates are released. Apple noted that there is a way to run the Flash plugin in safe mode for users who need older versions. On May 12, Apple released an update for Flash that patches 18 different vulnerabilities in the software, all of which allowed for remote code execution. Flash users were urged to upgrade to 17.0.0.188. The update resolved four memory corruption vulnerabilities, one heap overflow flaw, an integer overflow bug, three type confusion bugs, and a user-after-free vulnerability that allowed for remote code execution. In addition, the issue addresses a time-of-check time-of-use race condition that could bypass Internet Explorer's Protected Mode. Three other remote code execution bugs were patched. >>Source
Daily Challenges Coming to The Binding of Isaac: Rebirth It was announced on May 27 that, as a part of its Afterbirth expansion pack, The Binding of Isaac: Rebirth will be getting daily challenges in a similar vein as those already present on the game Spelunky. This is what the official Binding of Isaac blog had to say about the new feature: "Every day the game will generate a specific seed that will be generated the same for everyone (minus locked things) and you can now compete against the internet for best score in the run," said the blog post. "This feature was one of my favorites in Spelunky and I always wanted to do it in Isaac... but how do you score a game like Isaac? More on that in a later post..." As for the Afterbirth expansion itself, developer Edmund McMillen has stated that it would easily “extend the gameplay time by another 100-200 hours." Some of the listed additions, along with the daily challenges, are more than 100 new items, 10 new challenges and a "full new game mode that will totally change how you play." The list, which is being constantly updated, can be located on the gaming news website Polygon. >>Source
No Cyberpunk 2077 Discussion Until 2017
CD Projekt Red, the developer of the successful Witcher 3: Wild Hunt, has made an official statement saying that they aren’t planning on discussing the details of their next game, Cyberpunk 2077, until at least 2017. This news comes from a discussion with the developer with news organization Reuters, which focused on the success and future plans for CD Projekt Red, which is based in Poland. CD Projekt CEO Adam Kicinski said that, "We hope and we are certain that Cyberpunk has even bigger commercial potential," he said. "It is too early to talk about it, though." Cyberpunk was announced in 2012 and is expected to be developed by a different group within CD Projekt Red. Neither a release date nor expected platforms have been announced; however, the studio has said that it will probably be released on the Xbox One, Playstation 4, and PC. CD Projekt Red plans on focusing their time and efforts on Witcher 3: Wild Hunt for the next three years. >>Source
Games for Gold for June 2015
The free games for the Xbox 360 and Xbox One as a part of the Games for Gold program for the month of June have been announced. The options available for Xbox One Gold members are Massive Chalice, a turn based strategy game that was funded through Kickstarter, and Pool Nation FX, which was free for the month of May as well. These two deals will be available June 1. On June 1, Gold members on the Xbox 360 will have Just Cause 2 made available to them for free through June 15. On June 16, Thief will be made available to Gold members on the Xbox 360 through June 30. The entire list of past games offered for free as part of the Games for Gold program can be found here. >>Source
iOS Bug Allows iPhones To Crash With Single Message
A fairly strange bug which has been apparently been discovered by a group of Reddit users this week. The bug allows an individual to crash an iOS device with a simple string of text. The glitch will only work when it shows up as a lockscreen notification or banner alert. Why exactly does this glitch iOS devices? The system tries to abbreviate the string of text with an ellipsis, which when done with non-Latin characters like Arabic, restarts the device completely. Apple has responded by saying that the bug will be fixed in a later software update. >>Source
Fast Food Chain KFC Releases A Keyboard That's "Finger Clickin' Good"
At one point or another, we've all been stuck eating greasy finger foods, when a text message you want to reply to rolls in. KFC has rolled out an interesting piece of technology that may have just solved your prior texting-while-eating issues. On the restaurant's new food trays, comes a bluetooth keyboard that can connect to your smartphone and be used while you eat. The keyboard will debut in German KFC restaurants only as of now. A demonstration of the tray in action can be seen here. >>Source
LG G4 Gets US Release Date & Pre-Order Special
LG's upcoming flagship has gotten a US release date with carriers Verizon, Sprint, and T-Mobile. The phone will be in consumer's hands June 3-5th, depending on your carrier. Those who preorder though, according to LG, will get a either a 32GB or 128GB micro-SD card and an additional battery, depending on what carrier you preorder through. Not only that, but some pre order customers have reported their devices are already on their way. If you're not into pre-ordering, the phone can be purchased normally on contract for $200, or $550 off contract from a variety of sellers. >>Source
Murder Trial Over Rana Plaza Collapse
Police in Bangladesh have charged the owner of the Rana Plaza complex with murder for the collapse of the building in 2013 which killed almost 1,100 people. Sohel Rana is the main owner being charged but along with himself, over 42 other government officials are being charged. Everyone is being accused of ignoring warnings to not allow workers into the building the day before it collapsed and it has since been known as the worst industrial disaster in the country's history. The initial charge for the owner is culpable homicide but in view of the seriousness of the accident they have been since moved up to murder and if convicted the defendants may face the death penalty. Mr Rana tried to flee to India after the disaster happened but was arrested a few days after just before he left. More than 2,500 people were rescued from the building alive but suffered serious injuries. >>Source
Malaysian Airlines Bankrupt
The airlines which faced two massive disasters last year has announced that it is 'technically bankrupt' and are going to go through an intense reconstruction programme in which over 6,000 workers are expected to lose their jobs. The news of such is not as surprising as it may seem as the airline was on the decline since before the disasters and since Christoph Mueller took over in May there were expected to be big changes. The airline is still operating as normal and no flights have been affected. In March last year, Malaysia Airlines flight MH370 disappeared with 239 passengers and crew aboard. The plane is still missing. Four months later, flight MH17 was shot down by a suspected ground-to-air missile while in Ukrainian airspace, with the loss of 298 passengers and crew. These two disasters hit the nail in the coffin and caused massive loses. >>Source
Body Found In Suitcase In Japan
Japan is known for some weird cases of homicide and suicide and this week proves no different as a woman's body was found in a suitcase, left abandoned inside a suitcase at Tokyo's main train station. The suitcase was originally left inside a locker but after no one claimed the luggage it was opened by train staff to find the body. "There was an abnormal odour when we opened the suitcase. Then we saw hair," an unnamed employee told reporters. The victim seems to be around the age of 70 - 90 and around 4ft 7ins tall. Police have said there are no obvious injuries to the body and are currently examining security camera footage to find the person who left the suitcase behind. >>Source
Every week - assuming we get enough submissions - the HF News will feature the best submitted battlestation.
Send iHydra a message by clicking here and including an imgur link of your battlestation!
(1)(Click to View)[img]http://www.safelyendangered.com/wp-content/uploads/2014/08/mutation.gif[/img]
(2)(Click to View)[img]http://s3.amazonaws.com/theoatmeal-img/comics/dog_how_see/1.png[/img]
[img]http://s3.amazonaws.com/theoatmeal-img/comics/dog_how_see/2.png[/img]
(3)(Click to View)[img]http://www.safelyendangered.com/wp-content/uploads/2012/11/Transform.png[/img]
(4)(Click to View)
[img]http://www.safelyendangered.com/wp-content/uploads/2013/08/penguin-copy1.png[/img]
(5)(Click to View)
[img]http://files.explosm.net/comics/Matt/Furries,-The-only-people-who-take-the-birds-and-the-bees-metaphor-literally..png[/img]
(6)(Click to View)[img]http://files.explosm.net/comics/Kris/key.png[/img]
![[Image: support1.png]](https://hackforums.news/assets/v5/support1.png)
![[Image: pugQCoc.gif]](https://i.imgur.com/pugQCoc.gif)
![[Image: POVfq7u.png]](https://i.imgur.com/POVfq7u.png)
![[Image: bTTz7WE.png]](https://i.imgur.com/bTTz7WE.png)
![[Image: pdoOihY.png]](https://i.imgur.com/pdoOihY.png)
![[Image: jnjVN9E.png]](https://i.imgur.com/jnjVN9E.png)
to ![[Image: archive.png]](https://hackforums.net/images/modern_bl/groupimages/english/archive.png)
