Ransomware returns with 1024-bit encryption
Written by Raj on June 9, 2008 – 10:44 am -Virus analysts at Kaspersky Lab have intercepted a new variant of Gpcode, a malicious virus that encrypts important files on an infected desktop and demands payment for a key to recover the data.

The biggest change in this variant of the ransomeware is the use of RSA encryption algorithm with a 1024-bit key, making it impossible to crack without without the author’s key.
Here’s the explanation:
We recently started getting reports from infected victims, analysed a sample, and added detection for Gpcode.ak to our antivirus databases yesterday, on June 4th. However, although we detect the virus itself, we can’t currently decrypt files encrypted by Gpcode.ak – the RSA encryption implemented in the malware uses a very strong, 1024 bit key.
The RSA encryption algorithm uses two keys: a public key and a private key. Messages can be encrypted using the public key, but can only be decrypted using the private key. And this is how Gpcode works: it encrypts files on victim machines using the public key which is coded into its body. Once encrypted, files can only be decrypted by someone who has the private key – in this case, the author or the owner of the malicious program.
After Gpcode encrypts files on the victim machine, it adds ._CRYPT to the extension of the encrypted files and places a text file named !_READ_ME_!.txt in the same folder. In the text file the criminal tells the victims that the file has been encrypted and offers to sell them a “decryptor”:
«Your files are encrypted with RSA-1024 algorithm.
To recovery your files you need to buy our decryptor.
To buy decrypting tool contact us at: ********@yahoo.com»
There are three Yahoo e-mail addresses associated with the new version of the ransomware.
For more on this story, see Slashdot, Network World and Viruslist.com. Here’s background on the earlier version of GPcode.
Source: Zdnet Blogs
Tags: 1024-bit encryption, Gpcode, ransomware returns, RSA encryption
Posted in Security News | No Comments »
Microsoft Says No To Phone Numbers
Written by Raj on May 30, 2008 – 11:45 pm -Mary Jo Foley, a blogger @ Zdnet Blogs says:
I’ve been puzzling over transcripts of a couple of recent speeches by Microsoft Chairman Bill Gates where he discussed his vision for the end of phone numbers. But it wasn’t until today, when I learned more about Microsoft’s “Echoes” services platform for telcos that I began piecing together how Gates & Co. thinks Microsoft can do this.

This is from one transcript of an early May speech Gates gave in Japan:
“Right now the mobile phone, the desktop phone, the e-mail that you have on the PC, or instant messaging, these are all very different things, and the issues about how much of your information or your schedule, your current activity you share with people who communicate with you is not well designed…. By bringing together all of these kinds of communication, we can greatly simplify them. We can get rid of phone numbers, have it so when you say you want to contact someone, based on who you are and where that person is, they can decide whether to take the call or take a message about that, and so a great efficiency improvement that can be made there.” (emphasis mine)
So how does Microsoft propose getting rid of phone numbers? Here’s an overview, from the same source who originally tipped me on Echoes:
Starting with Echoes Wave 1 — the first iteration of Microsoft’s services platform for telco providers that is due out this summer — Microsoft plans to synchronize contacts. In other words, Live Messenger contacts will appear in a mobile user’s address book (if the carrier is using Echoes). The contacts will be synced via Windows Live Messenger, so duplicates are eliminated.
Messenger contacts will automatically appear in users’ phone address book, so that even if they don’t know one of their Live Messenger contact’s phone number, they still will be able to call it. Numbers will be able to ring simultaneously on multiple devices/systems. On the flip side, Echoes will help insure instant-messaging-to-SMS continuity. A user can send an IM to any mobile contact, and the contact can respond via a text message.
So what is it about Echoes that will enable this magic? This is the source’s explanation:
1. Echoes will assign a local mobile number to each Windows Live contact
2. Via its Address Book sync capabilities, Echoes will push these new new contacts into any mobile phone (no client required)
3. The user will be able to compose an SMS or place a voice call to these contacts
4. Echoes will ensure text messages are delivered to Windows Live contacts as chat conversations, and replies will be sent back from Messenger as SMS
5. Voice calls can be connected through Echoes directly from the mobile to the Windows Live Messenger user’s PC
6. As the mobile user will appear always “online” to friends (using Echoes client emulation server), conversations also will be able to start from the Windows Live cloud, pushed to the mobile as SMS
So what do you think? Does Microsoft’s plan sound workable? Is this something you’d want to use in the next year or two (which is when Microsoft is encouraging carriers to push the Echoes functionality out)?
Source: Zdnet Blogs
Tags: Echoes, microsoft, smarter communication, windows live messenger
Posted in Upcoming Technologies | No Comments »
Introducing The Revamped OLPC, $75 Laptop
Written by Raj on May 22, 2008 – 9:08 am -It’s take 2 for the One Laptop Per Child project–version XO-2 of its laptop geared for children in developing countries features two side by side screens. The XO-2 is expected to arrive in 2010.

Some highlights of the new laptop, according to a blogger at Zdnet, Larry Dignan:
- OLPC is betting that new developments in hardware, software, display and processor technologies will lower the XO-2’s price tag to $75.
- OLPC is going with the 1 watt power consumption target so XO-2 can be powered by a hand crank.
- The XO-2 will feature dual-touch displaces for the e-book.

The most interesting new feature is the two 16:9-ratio touchscreens, one of which can be used as a touch-sensitive keyboard. ZDNet’s John Morris compares it to a cross between an Apple iPhone and an oversized Nintendo DS. OLPC will market it as a feature packed e-book reader capable of holding up to 500 books.

The first generation XO laptop started off with a bang–but sales have fallen below expectations.

Nicholas Negroponte, leader of the OLPC project, wants the new laptop to be half the size and weight of its predecessor.
ZDNet’s Christopher Dawson wonders if the XO-2 could be vaporware.

In contrast, former OLPC partner, Intel, wants its second generation Classmate PC to go a different route beyond the emerging markets and into the mainstream.
Source: Zdnet Blogs
Tags: $75 laptop, OLPC, revamped OLPC
Posted in Upcoming Technologies | 5 Comments »
YouTomb Will Help You Know Why
Written by Raj on May 21, 2008 – 3:22 am -“A new service that provides information about the YouTube clips removed for copyright infringement”
(Click to enlarge)
Ever wanted to view a YouTube clip but you couldn’t do it because it had been removed for copyright complaints? Ever wanted to know what happened with the clip and what’s the reason for the removal?
Now you can get all the information straight from YouTomb, a new service that tracks the YouTube clips which have been removed for copyright complaints and publishes details about them.
As you know, YouTube hosts a huge amount of videos, some of them published without the authorization of the owners. Because of that, YouTube is based on the DMCA act which requires the Google video sharing service to remove a copyright infringement clip once the copyright holder requires it.
YouTomb is a project developed by MIT Free Culture and currently monitors 223,593 videos according to some stats placed on the official page. No less than 4416 were removed for copyright violation while 13,437 were deleted for other reasons, it is added.
(Click to enlarge)
Clicking on one of the YouTomb entries discloses the uploader, the upload time, the removal reason as well as the tags of the clip. Moreover, YouTomb also lets you know the time of the removal and how long it has been viewable through YouTube. However, please note that YouTomb does not allow you to view or download clips, it only provides data about the removed YouTube content.
“YouTomb is a research project by MIT Free Culture that tracks videos taken down from YouTube for alleged copyright violation,” it is mentioned in the About section of YouTomb.
“More specifically, YouTomb continually monitors the most popular videos on YouTube for copyright-related takedowns. Any information available in the metadata is retained, including who issued the complaint and how long the video was up before takedown. The goal of the project is to identify how YouTube recognizes potential copyright violations as well as to aggregate mistakes made by the algorithm.”
Source: Softpedia News
Tags: removed youtube videos, youtomb
Posted in Other Interesting News, Virtual World | No Comments »







