Amazon Unveils $50 Tablet

FirmBee / Pixabay

Analysts said there are few comparable tablets at such a low cost as the new Amazon Fire. Amazon.com introduced a tablet of $ 49.99, a price that analysts estimate is low enough to highlight in a crowded market and will attract more consumers to its online services. The new tablet Fire, one of the new and improved devices launched by Amazon, has a 17 cm screen and a front and rear camera. The device will be marketed in late September.

“There is a part of the market (tablet) that is growing right now and there are tablets under $ 100, “said Dave Limp, senior vice president of Amazon devices, adding that the Fire HD device the company was selling last year was $ 99. Analysts said there are few comparable tablets as low as the cost of the new Fire. The apparatus includes a quad processor and storage capacity of 12 gigabytes.

“The lesson we learned from consumer electronics is that when the market matures, consumers opt for the cheaper an if you know this will happen, you might want to go in there, “said James McQuivey, Forrester principal analyst.

Amazon posted a depreciation of $ 170 million in the third quarter of 2014 after struggling to sell its inventory of smartphones, with a cost of $ 200 per unit. The company says it does not seek to make a profit with the Fire devices, but uses them to attract more customers for their services, like Prime, which is a purchase program for $ 99 per year.

The Fire tablet will also be available in a special edition for children (Kids Edition) – is the same model, but with a bulky protective cover. It will cost US $ 100 and comes with a two year warranty. Although this costs twice as much as the regular Fire, it is guaranteed by which Amazon will replace it for two years if you break it.

For the extra money, the Kids Edition also comes with a one year free subscription to Fire Amazon for Kids Unlimited, which includes a lot of books, apps and games focused on children and education. Disney and Nickelodeon are some of the brands that are part of this service, with popular titles such as Dora the Explorer and SpongeBob SquarePants.

The service also includes a web browser with parental controls to give your children access to websites and YouTube channels that have been set by Amazon and researchers as suitable for children. Also, you can add other websites yourself if you agree that your children may see them.

On Thursday, Amazon also unveiled a new line of Fire HD tablets 8 and 10 inches and enhanced Fire TV devices.

Read More

Malware Attacks Online Poker Players

OpenClipartVectors / Pixabay

The Players of online poker have a new opponent:  malware. Online poker players are being targeted by malware (a type of computer virus) to spy on your virtual deck of cards. According to the BBC, the software shares the cards in your hand with the creators of the virus, which then is recorded in the same game and the hackers will try to win the game.

The last time there was malware related to poker was PokerAgent, a Trojan that spread through Facebook, used to steal login credentials of users on the social network, information from credit cards and credit level poker games site Zynga.

The security company that found the computer virus, found it hiding in a software designed to help poker fans to play better. The malicious program also addresses other useful information on the victim’s computer, such as usernames and passwords.

Victims typically downloaded the Trojan Win32 / Spy.Odlanor to be hiding in installers and resources such as data sources or poker calculators, as reported in WeLiveSecurity ESET blog. “In some cases, the malware is downloaded to the victim’s system through programs like Shark Tournament, Poker Calculator Pro, Smart Buddy or Poker Office”, explained in the blog. Like all typical computer Trojans, users usually become infected with Win32 / Spy.Odlanor unknowingly downloading another useful application from sources other than the official websites of the software authors. This malware pretends to be harmless installation programs for various general purpose applications such as Daemon Tools or MTorrent.

The objectives of malware are players using known sites PokerStars and Full Tilt Poker said Robert Lipovsky, ESET security researcher. Once installed malware makes screen captures, allowing attackers to see the cards of the victims. In order to carry out the scam attackers must locate and participate in the table where the infected machine is playing. For this, the attacker makes a screen for the user identity of the web poker, helping the scammers find their table, according to the blog.

When a machine is infected, the software monitors PC activity and comes to life when the victim is connected to either poker sites. It is there that the malware starts capturing screen activities of the victim and of the cards dealt. The images are sent to the attacker. These show the cards after each change of the player’s cards and the user ID in the online game. This allows the attacker to follow the victim and participate the same game.

.In the latest versions of malware, functionality of theft of general purpose data by running a version of NirSoft WebBrowserPassView has been added to the Trojan Odlanor. This tool detected by ESET as Win32 / PSWTool.WebBrowserPassView.B, despite being a potentially unwanted application is a legitimate program, and is able to extract passwords of various web browsers.

The Trojan communicates with its C & C server, whose address is rigidly coded in binary file through HTTP. Part of the extracted information such as the version of malware and computer identification information is sent in the URL parameters. The rest of the information collected, including an archive with screenshots or stolen passwords, data is sent in the POST request.

We have seen several versions of the malware in the wild; the oldest dating back to March 2015. According to ESET LiveGrid® telemetry data, the highest number of detections come from countries in Eastern Europe: many of the victims were in the Czech Republic, Poland and Hungary. However, the Trojan poses a potential for any online poker player threat.

“We’re not sure about whether impostors play in person or automatically through tools,” explained Lipovsky from the blog. In any case, the crooks still have to play well to win the game.

Read More

Vulnerability and Security in WordPress

Unsplash / Pixabay

XSS vulnerability: updated plugins and WordPress themes

WordPress is the great manager of web content. So much so that it is estimated that over one hundred million pages in the world are built on this platform, ranging from a simple personal blog to more complex projects, such as media, online shops and corporate websites SMEs.

Attacking potential vulnerabilities of this CMS (Content Manager System) has become an obsession for many cybercriminals because if they get to exploit a vulnerability in the system, they could attack thousands of websites.

In recent weeks, millions of pages have been affected by an XSS (cross-site scripting) vulnerability discovered in versions 4.2 and earlier blogging platform, the same company that was responsible for launching tools to solve an automatic update “in those sites that it supports”.

The patch was released by WordPress hours after the vulnerability was discovered by Jouko Pynnönen, a security expert who is investigating failures code. In the security warning that WordPress released, he explained that the ruling could allow a hacker to take control of the server remotely, injecting a Java Script in the comments, change passwords or create new accounts, among others.

XSS is a script that attackers usually placed in the feedback form of a blog or website. When administered, it enters the comments section inside the WordPress control panel, the script starts and enables the remote control.

XSS vulnerability, as explained by the same company, a “common code pattern used in WordPress plugins and themes available from any source”. So any user who manages a WordPress page, regardless of where the subject or plugin, you had to be aware of this vulnerability and take immediate steps to ensure that the page or pages that are managed are secure.

There is no way of knowing exactly what plugins and themes have been affected, but when the upgrade and installation of the patch is deployed on the websites, special protection mechanisms to prevent such attacks are implemented.

In recent weeks GMK Medialab, an online marketing agency in Barcelona, ​​has worked to ensure that those of our customers using the WordPress plugins were using a safe platform and also have been updated. Likewise, we recommend following with updates in the coming weeks because it is important to always keep current with any and all updates.

If you are a member of the WordPress platform, you should be using one of the two most famous security plugins: iTgemes WordFence Security or Security. But there are also some basic safety measures in WordPress to use:

– Keep updated WordPress and plugins

– Uninstall themes and plugins that are not used.

– Use two-factor authentication. Simply using a password is no longer sufficient to certify the safety of access.

– Enforce strong passwords.

– Backup site daily.

– Install antivirus on the server.

Advanced security measures in WordPress

– Plugins against brute force (how to recover a password by testing all possible combinations to find the one that enables access).

– Forcing the login SLL: the connection is https.

– Lock requests originating “user agents” malicious, such as default user agent tools like Acunetix, Nikto or the like.

– Rename and change User ID “admin”.

– Block the execution of code in the uploads folder.

If you still have doubts whether your page is protected or not, we suggest you contact an experienced WordPress developer to see if your site has been hit or not.

Read More

The 3D Robotics Drone Carries GoPro to New Heights

SeldomScene / Pixabay

The company co-founded by Jordi Muñoz presents its first drone camera that takes action to the skies to capture amazing shots.

3D Robotics (3DR), a company based in Berkeley, California, and co-founded by Jordi Muñoz, presented on Monday its drone “Only” with four propellers that they say is the best marriage between a GoPro and drone. The result of three years of work is that the 3D Robotics Only provides not only smooth sailing but also allows the recording of quality video through the Only driver or an iOS or Android device. This is because the unmanned spacecraft has two brains: a Linux computer on the drone and another inside the controller.

“It’s just the latest technology for aerial shots, which lets you capture professional HD scenes with the touch of a simple and easy button,” said Muñoz. “It is only able to do this thanks to its high throughput by means of its two ARM9 processors, which use the Linux operating system. All this coupled with its sophisticated software, make this the only first truly ‘intelligent aerial vehicle ‘”.

The drone is still marked by GPS routes that allow automated takeoff and landing. Smart is the drone that the user can designate the GPS landing and return the drone on its own without the user having to handle it. Instead, the user can focus on video recording by the controller or the mobile app. Recordings and flight routes can be stored in the cloud, according 3DR. This means that the user needs to think less about flying the drone and more about shots to be captured. “What our users really want is to capture great images,” said Colin Guinn, President of 3DR income. “They want professional tools to capture those shots easily and consistently. Get what you want all the time.”

The drone can fly for a period of 25 minutes without loading the GoPro and up to 20 minutes with the camera set and Gimbal stabilization apparatus according to 3DR. Drone weight is 3.3 pounds (1,500 grams) but increases to 4 pounds (1,800 grams) with the camera and the Gimbal. The processor enabling unattended pilot is the Pixhawk 2. The drone can access Wi-Finetworks half-mile or 800 meters away and delay in the video recording is 180 milliseconds – which is quite fast. According to 3DR, the driver has a battery that would last about four hours but you can buy a rechargeable battery that would last eight hours.

With GoPro Hero, all recordings will be high definition. “Just expand your concept of what a drone can be and do,” said Chris Anderson, chief executive 3DR. “Instead of needing your talents to capture a good shot, you can let the software do all the work. And better yet, you can be in the shot– and be the subject of your own history, and not just be the director “.

The 3DR just launched on May 31 for US $ 999 in over 2,000 locations worldwide, 400 of them in Best Buy stores around the US. The 3DR only includes the GoPro camera, The gimbal will be sold separately for $ 399.

Read More