LG G4 Stylus - the newest addition to the LG G4 family

Make Your Mark in Style with the LG G4 Stylus. LG introduces the newest addition to the LG G4 family. A mid-range phone packed with unbelievable specs and features that won't burn your wallet.

A few months after the celebrated homecoming of the LG G4 in the Philippines, mobile technology innovator LG Electronics introduces a new member in what seems to be an LG G4 family in the works. Bearing almost similar features as the flagship LG G4, LG Mobile Philippines introduces the LG G4 Stylus.

Key Specifications:

·     Display: 5.7-inch HD IPS Display (720 p)

·     Processor: 1.4 GHz Octa-Core

·     Memory: 8GB eMMC ROM, 1GB LPDDR3 RAM / microSD slot

·    Camera: Rear 13MP with LDAF / Front 5MP

·     Battery: 3,000mAh (removable)

·     Operating System: Android 5.0 Lollipop

·     Size: 154.3 x 79.2 x 9.6 mm

·     Colors: Titan Black and White

·     Other: Knock Code / Gesture Interval Shot / Glance View / Front Camera Light / Quick Memo+

*Specifications may vary depending on the market.

Supreme display

The LG G4 Stylus inherits the arc shaped body similar to the flagship smartphone; the slim arc design allows for perfect comfortable grip of the user preventing the device to slip and drop from your hand. Take note though that the G4 Stylus is a phablet that has a relatively larger screen compared to the flagship. With a zero-gap in-cell hybrid touch technology with 5.7-inch HD IPS screen 720p display, the G4 Stylus is the perfect handset for those who value better viewing experience for games and movies or for those who take notes seriously.

Make your mark in style

As the name suggests, the LG G4 Stylus comes with an enhanced rubberdium stylus pen perfect for taking down notes and memos. Enjoy the 5.7-inch screen and scribble and doodle away on the built-in Quick Memo+ application on the G4 Stylus. The enhanced stylus pen works together with in-cell hybrid touch technology which makes the screen more responsive to touch contact and lets you surf the net with maximum ease, write down notes, draw, edit photos, and color with such accuracy and precision. Both the young and the old can make the most of the stylus pen with coloring book apps like Colorfy available in Playstore becoming a trend today.     

Inherited features

The G4 Stylus carries staple features such as the functional rear keys, Gesture Shot, Knock Code, as well as Glance View, and Front Camera Light for better selfies. The G4 Stylus maintains its removable back plate which reveals a microSD card slot to further expand its built-in 8GB of internal memory. It also features a 13-megapixel rear camera with Laser AutoFocus and a 5-megapixel front camera, Dual SIM functionality, 1.4 GHz Octa-core processor, 1GB RAM, exceptional 3,000mAh battery life, and Android 5.0 Lollipop OS out of the box.

The G4 Stylus retails at Php 10,990and comes in Titan Black and White.

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr

PLDT and MICROSOFT launches DIGITAL CAMPUS SUITE, digitization of Education

PLDT, Microsoft to boost PH IT education,  launches Digital Campus Suite. All roads to the future education system lead to this.
       

Leading telecoms and multi-media service provider PLDT, through its business unit PLDT SME Nation, has launched together with global IT giant Microsoft Philippines a new service package called the (DCS) Digital Campus Suite. The DCS will enable students and academes access to online learning programs and to earn IT (information technology) certifications for critical IT skills that are now in-demand in today’s digitally-driven industries.

“We at PLDT are confident that this partnership can significantly contribute to enriching the digital content of Philippine education.  By enabling schools through these programs, we are helping them, both educators and students, to gain new critical skills and learn IT courses with globally competitive technology programs that have become essential in today’s digital work place,” said PLDT Chairman Manuel V. Pangilinan.

Through the Digital Campus Suite, schools will have high-speed connectivity with PLDT myDSL Biz or iGate, and online access to training courses of the Microsoft IT Academy Program.

Educators and students will have access to Microsoft’s digital curriculum and earn IT certifications in the Microsoft IT Academy Program for fundamental technology skills as well as courses that enable students to become more competitive for employment.

Schools will also receive licenses to Microsoft Office 365to help students and teachers interact and teach using Cloud tools and platforms.

The Suite also includes laptop, tablets, and WiFi access points in the campus for the use of students for their over-all digital education experience.

A study conducted by (IDC) International Data Corporation also revealed that increased spending on IT cloud services will open up and estimated 14 million new jobs worldwide.  The same report also noted that there is an apparent “widening ICT professional skills gap” and a “shortage of skills” in the Asia Pacific Region.

PLDT SME Nation has been very active in partnering with schools and learning institutions to build their technology and connectivity resources in support of the education sector’s need to improve ICT learning among the students and academe.

“This initiative fully aligns with PLDT SME Nation’s effort to empower the future generation with an ICT-enabled education system.  ICT skills are no longer just added value to employment but are now necessities in today’s business and entrepreneurial landscape.  This initiative will allow these students to become adept in basic ICT skills and IT programs to prepare them for their chosen careers,” said PLDT FVP and Head of SME Business Kat Luna-Abelarde.

This partnership is seen to bridge that widening skills and education gap by empowering Filipino students the tools and knowledge to be able to compete and gain advantage in today’s job market.

“An educated population is what we need to build a progressive Philippine economy, but we can’t educate tomorrow’s leaders with tools from the past,” said Microsoft Philippines General Manager Karrie Ilagan.  “The increasingly competitive workplace is being driven by technology and digital literacy, and the Digital Campus Suite gives educators and students access to tools that will build their capability to excel in that environment.  We always strive to effect a positive change in the lives of our customers, and our partnership with PLDT SME Nation helps us create a bigger impact on all aspects of education.”

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr

Samsung J Series phones for the Selfie-Crazy users

Samsung releases new smartphones specifically focused on Selfie-crazy users.

Selfie or the process of the taking your own photos on your camera phone w/o the help of another person, is already part of the Pinoy Culture. 

Would it be nice to have a good camera phone that's created to focus on taking selfies? Well, this Samsung's answer  the selfie challenges you're having: Selfie-Phones Galaxy J5 and Galaxy J7

It's easy to take selfies these days. Simply snap from your phone and you're in to share it on social media sites like Facebook, Twitter, Instagram and the likes. But the challenge with selfie pictures is theyre usually blurred, out of focus, and shaky. 

Samsung sets the bar high in selfie craze

Filipinos just love posting their #blessed and #thankful moments with friends and family by means of a #selfie. As this trend becomes increasingly popular, Samsung introduces the best selfie device which offers the best-in-class upgraded selfie experience.

The selfie struggle is real
Given that the Philippines is home of fun-loving Filipinos who treat every single life event as an occasion worth celebrating and documenting. In fact, the Philippines is known as the selfie capital of the world. Selfies correspond to stories we want to tell the world— memories we want to preserve at its finest. Nevertheless, our best attempts could still fall short.

It usually takes about five failed selfie shots before a woman settles for the sixth to be shared in social media. Men are just as concerned about getting that perfect snap as they settle only after the fourth attempt.

Admit it or not, a post-worthy slash like-worthy selfie requires a great deal of time and effort. It takes a good number of minutes looking for decent lighting, finding a good background, getting a right angle, and finally selecting a filter before hitting the share button. Sometimes, you settle with one that’s too dark or a bit blurred or has someone cropped out of the frame. Now the question is: how do you best capture selfie-worthy moments at an arm’s length?

Your selfie-ready, selfie-friendly smartphone is now here

Samsung Electronics Philippines Corporation unveils the Galaxy J Series - Samsung’s best-in-class smartphones that upgrade your selfies to perfect J-Fies. With a 5MP front camera equipped with LED Flash, multiple J-Fie features and large super AMOLED screen, the 5.0” Galaxy J5 and 5.5” Galaxy J7 definitely set the bar high in the selfie arena. The days of so-so selfies will soon be gone as the new Samsung Galaxy J Series usher in the new age with an upgraded J-Fie experience.

The special J-Fie features make it effortless to achieve a flawless shot whenever and wherever. You can take your J-Fies in dark conditions with the LED Front Flash, make the whole gang fit with the wide angle selfie feature, make sure that no fingers are blocking the photo and that challenging angles are made easy by using the palm selfie feature, and instantly touch up and look fab by simply sliding various beauty face options. Out in the sun or inside a cave, during a party or while at a workout session, your Galaxy J Series will yield nothing but exceptional J-Fies.

Now you never have to worry when you run into a celebrity, or go out on a trip with the family, or simply pose for a #ootd.  Go ahead and upgrade your so-so selfies into no-fail J-Fies with the new Samsung Galaxy J-series! Capture life’s best with only the best.

Try out the new Samsung Galaxy J Series at a Samsung Experience Store near you. Get updates on products and launches through Samsung Mobile Philippines on Facebook, @samsungph on Twitter, or visit www.samsung.com.ph.

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr

ONEChampionship BRANDON VERA “The Truth” VS PARRY Set for Manila

Fil-AM MMA fighter Brandon "The Truth" Vera will be back to Manila for the One Championship Heavyweight World Champion title bout with Chi Lewis “Chopper” Parry

Months back Brandon Vera spends his time in the country on vacation and to also promote the fight between Ben Askren and Luis Santos. Now the Truth will return for the fight of his own.

Brandon Vera has already gained popularity in showcasing his skills in the ring. He also gained respect from a lot of people including his fellow MMA fighter on and off the ring

Here's the official press release about Vera's upcoming fight in Manila this December:

CHALLENGE ACCEPTED: VERA VS PARRY SET FOR MANILA

WINNER TO BE CROWNED INAUGURAL ONE CHAMPIONSHIP™ HEAVYWEIGHT WORLD CHAMPION

26 August 2015 – Manila: ONE Championship™ (ONE) will return to Manila, Philippines for a grudge match between top-ranked heavyweight contenders Brandon “The Truth” Vera and Chi Lewis “Chopper” Parry at Mall of Asia (MOA) Arena on 11 December 2015, with the winner set to be crowned the inaugural ONE Championship™ Heavyweight World Champion. ONE: SPIRIT OF CHAMPIONS will play host to the titanic showdown, as world-renowned Muay Thai stylist and 8-time Grappler's Quest Champion Vera looks to claim the gold against unbeaten British kickboxing convert Parry, who challenged the Filipino-American Vera after both fighters recorded recent first round knock out wins.

CEO of ONE Championship, Victor Cui, stated, “We're thrilled to be returning to Manila to bring our loyal fans one of the biggest fights of the year! Brandon Vera and Chi Lewis Parry are two of the most exciting heavyweight fighters in the world, and with the ONE Heavyweight title on the line we can expect a fantastic fight! These two have been on a collision course for some time, and it will all come to a head at ONE: SPIRIT OF CHAMPIONS!”

The owner of 8 KO victories, Brandon Vera is one of the most recognizable figures in the game, as well as one of the most feared Muay Thai practitioners in the world. Renowned for possessing outstanding striking technique, Vera devastated Ukrainian heavyweight Igor Subora with a straight left and a flurry of kicks in his ONE Championship™ debut to the delight of the fans in Manila. Now, he will look to utilize his outstanding ability and vast experience fighting some of the very best fighters in the world to his advantage as he accepts the challenge of prodigious prospect Chi Lewis Parry.

Brandon Vera declared, “I'm excited to have the honor of fighting for the ONE Heavyweight World Championship in the Philippines,” adding, “I am very much looking forward to fighting Mr. Parry, especially since he's been asking for it!”

At 6'9, colossal British stand out Chi Lewis Parry has one of the most imposing frames in Mixed Martial Arts (MMA) today, and a record to match. With 5 first round finishes to his credit, Parry remains undefeated in MMA competition, making a huge statement against Cameroon's Alain Ngalani last time out. Stopping the fight with a succession of precision elbows, Parry immediately turned his attentions to Brandon “The Truth” Vera in his quest to be crowned the number one heavyweight in ONE Championship™. At ONE: SPIRIT OF CHAMPIONS, Parry will get his wish as Vera steps into the cage to meet him head on!

Parry stated,“Firstly, I'd like to state just how appreciative I am of this opportunity! ONE Championship™ is an elite organisation for a reason, they put on the fights the fans want to see. This clash with Vera has been brewing for over a year now and finally, the truth will be told, the score will be settled, and the world will witness greatness happen this December! Chopper's coming... to MANILA!”

Truly an exciting moment to see Vera back on the ring fighting in front of his contrymen who he is very much proud of

For more updates on ONE Fighting Championship, please visit www.onefc.com and follow Twitter and Instagram @ONEFCMMA and Facebook at www.facebook.com/ONEFCMMA.

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr

The Evolution of Samsung Mobile Display: From Galaxy S to Galaxy S6 edge+

What’s next for mobile display technology?  Samsung leads the way...

Samsung has already earned its spot as the leader of innovative technology and producing one of the best mobile display out there in the market. Samsung changed the game of mobile phones when most manufacturers want to make it small.

Now they're challenging the competition to produce not only larger, but better screen displays w/o the need to increase battery power consumption. This also starts the revolution to produce more touch-enabled devices even on home appliances, where it has it's own screen.

Every release of Samsung's latest display on a new Galaxy phone is creating waves across the globe

Evolution og Samsung Galaxy. Photo from http://www.nextisnow.ph/

To know more what's next for Samsung mobile display technology, here's the Official Press Release:

MANILA, Philippines; August 25, 2015 – Before Samsung Electronics Co. impressed the world with the unpacking of the Galaxy S6 Edge+ and Galaxy Note 5, the global leader in screen technology first introduced the flagship that started it all – the Samsung Galaxy S –  recognized then to be ahead of its time. Since then, Samsung has continued to excite consumers with bigger and brighter displays.

Back when the world was used to LCD screens and LED was in its infancy, Samsung had already taken a big leap with the Super AMOLED display. The Super AMOLED display was Samsung's improvement of the already-developing AMOLED technology. It featured a sharper image and a more capacitive touchscreen with considerably less glare from sunlight.

On another front, Samsung was also pioneering the big screen. The Galaxy Note series coined and defined the term “phablet.” A portmanteau of “phone” and “tablet,” Samsung’s phablets showed what it meant to enjoy the best of both world. The series started off with a 5.3” HD Super AMOLED display. At the time, having a 5.3” screen was a big deal that it crossed into phablet category.

Rather than settling for the best, Samsung kept on reinventing itself. After the Samsung Galaxy S came the arguably iconic Galaxy S II, which featured a brighter and more energy efficient display. Then came the Samsung Galaxy S III, which featured the Samsung S Series' first 720p display. As if 480p resolution wasn't enough, the Galaxy S III's HD Super AMOLED display allowed users to experience HD videos played in vivid reproduction. At this time, the Galaxy Note II grew by 0.2 inches, further expanding the definition of phablet.

As smartphones were starting to realize their potential as multimedia devices, Samsung stayed at the forefront of the trend and announced that things were only going to get bigger. The Samsung Galaxy S4 turned it up a notch with a Full HD Super AMOLED display. It was Samsung's first entry into the 5-inch 1080p market, which was the widest phone resolution available to consumers then.

The Full HD Super AMOLED display was a vast improvement not only for the movie-watching market, but also for mobile gamers. 2012 saw the rise of the mobile gaming phenomenon with stunners like Infinity Blade. 2013's Samsung Galaxy S4 was more than equipped to handle a post-console gaming world with a full HD display and an Adreno GPU to boot. This same Super AMOLED display was also enjoyed by the Galaxy Note 3, which had already crossed the 5.7” screen mark. If the Galaxy S4 was the clearest a phone can handle, the Galaxy Note 3 broke all barriers and competition by offering the widest and sharpest image possible at the time.

While the Samsung Galaxy S5 focused more on design, connectivity, and fitness, the camera received a major update which allowed it to take 16MP photos, a feature particularly enhanced by the Galaxy S5's Full HD Super AMOLED display. Users saw an evolution in smartphone photography.

Users also an evolution in the phablet industry. For the very first time, the Galaxy Note series’ upgraded their screens to the revolutionary Quad HD Super AMOLED display, a standard that only started gaining traction now. With the Galaxy Note 4’s 5.7” screen, users were guaranteed image resolutions of up to 2K. At the time, 2K was a standard made popular only in TVs. The Galaxy Note 4 brought it to everyone’s pockets.

Samsung's current head honcho this year, the Samsung Galaxy S6 amplifies what makes Samsung a pack leader in today's tech industry. Samsung's current flagship sports the Quad HD Super AMOLED display, ramping up the resolution of smartphones to 2K proportions. The Samsung Galaxy S6 isn't just a device to watch movies from; it's an entire cinematic experience with the most true-to-life display in the market. To crunch in some numbers, the Quad HD Super AMOLED display churns out 577 pixels per inch, arguably one of the highest ratios available in smartphones today.

Then there’s the Galaxy S6's sibling, the Samsung Galaxy S6 Edge. More than just a crystal clear display, the Samsung Galaxy S6 Edge features one of the latest technologies of today, which is just starting to gain traction everywhere else: curved technology. The Samsung Galaxy S6 Edge gives users a different perspective in life, a way to see beyond the "now."

Being the innovators that they are, Samsung didn’t just stop with a bigger and better display. They saw a way to change the way we see screens, more than just its size. The Galaxy Note Edge showcased the biggest and best screen displays the tech industry could offer. With an improved S Pen, the stylus which went beyond what it means to be a stylus, the Galaxy Note Edge pushed the envelope of devices by featuring both a crystal clear 16:10 screen and the latest curved edge technology seen only in Samsung devices.

Last August 13 (New York Time), Samsung unpacked the Galaxy S6 Edge+ and the Galaxy Note 5, both with big 5.7” screens. With Quad HD Super AMOLED display optimized for this measurement, the new devices feature more true-to-life displays that will revolutionize the user’s viewing experience. The Galaxy S6 Edge+ pushes the boundaries of curved technology, while the Galaxy Note 5 revolutionized how we use screens with a new and improved S Pen.

One has to ask what's next for Samsung as users are realizing that bigger is definitely better. Because Samsung continuously leads the wave of every tech trend with its innovations, it will be a treat to see how Samsung will push the boundaries even more.

So far, Samsung has allowed users to enjoy the best in entertainment, the best in gaming, the best in photography, and the best in productivity through its drive to build the best in technology. The next is truly now. Samsung has given us what we need to live and dream big. Only time will tell what next will soon become now through Samsung.

With the new Samsung Galaxy S6 Edge+ and the Galaxy Note 5, the next Galaxy truly is now. Samsung has unveiled a vision only few have dared to dream. They continue to make the next enjoyable for users all over the globe.

Here's how to Pre-order your Samsung Galaxy S6 edge+ or Galaxy Note5

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr

Top 4 GrabCar Promo Codes to try this August from GrabTaxi Philippines

Did you take advantage and enjoy the GrabTaxi/ GrabCar/ GrabCarplus Promo Codes we've been sharing on our site lately? Well, here's more GrabTaxiph promo codes you can use for the rest of August

• "GrabitlikeitsHot" Promo Code for Grab/ GrabCar Plus- 200 Pesos off for up to 3 Rides
• "Shell" Promo Code for Grab/ GrabCar Plus- 100 Pesos off
• "GrabNow" Promo Code for Grab/ GrabCar Plus - 100 Pesos off
• "Salute" Promo Code for GrabCar /GrabCar Plus - 50 Pesos off. up to 10 rides

Update:

Try MochaGirls Grabcar promocode and get 200 pesos off.

Use NATASHA to get 100 pesos off your grabcar or grabcar plus ride

Til September 1 only! Grab on!!!

Don't forget to share this GrabCar promo codes to your family, friends and colleagues.

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr

Official Faraday Docker Images

Docker

A couple weeks ago we did another post where we talked a bit about Docker.

As we had said before, we are already using Docker as a platform for testing our installation process for our product Faraday

We thought it might be useful for everyone to put together an official image of Docker. For that we are going to base our image in Ubuntu 14.10 which by default comes with Faraday, CoudbDB, and SSH all pre-configured. The username is root and the password toor.

 Starting-up Faraday

root@isrlab:~/dev# docker run -t -i infobyte/faraday /root/run.sh

With this command, we start by running the container with Faraday connecting it to couchdb with a test workspace, with the name "workspace".
Faraday is started with ./faraday.py -gui=no-gui --update without a graphic environment, it is going to start trying to update Faraday to the newest version in the github repository. 

To obtain the IP direction of the container:

root@isrlab:~/dev# docker inspect $(docker ps -lq) | grep \"IPAddress
          "IPAddress": "172.17.0.62",

Interface Web-UI:

Directing the browser to http://172.17.0.62/reports/_design/reports/index.html you will be able to access Faraday's Web-UI.

Interface ZSH:

To start to execute commands, we can utilize the ZSH interface, to do this everyone should connect to the SSH with the username root and the password toor.

root@isrlab:~/dev# ssh root@172.17.0.62
root@172.17.0.62's password:
root@250f83a02a3a:~# cd faraday/
root@250f83a02a3a:~/faraday# ./faraday-terminal.zsh
>>> WELCOME TO FARADAY
[+] Current Workspace: workspace
[+] API: OK
[faraday](workspace) 250f83a02a3a# ping 127.0.0.1
[faraday](workspace) 250f83a02a3a# ping 127.0.0.1 >&1 > /root/.faraday/zsh/output/09cfbbb7-ab8a-44ca-9a64-9128029d8f41.output && python2 /root/.faraday/zsh/plugin_controller_client.py send_output cGluZyAxMjcuMC4wLjE= "/root/.faraday/zsh/output/09cfbbb7-ab8a-44ca-9a64-9128029d8f41.output"
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.059 ms
[faraday](workspace) 250f83a02a3a#

Interface QT GUI:

To work with the QT GUI we should start running docker another way:

root@isrlab:~/dev# docker run infobyte/faraday /root/run_service.sh

In another console we should run:
To get the IP direction of the container: 

root@isrlab:~/dev# docker inspect $(docker ps -lq) | grep \"IPAddress
        "IPAddress": "172.17.0.62",

root@isrlab:~/dev# ssh -X root@172.17.0.62
root@172.17.0.62's password:
root@250f83a02a3a:~# cd faraday/
root@250f83a02a3a:~/faraday# ./faraday.py

* To execute commands, it is important to keep in mind that the tools should be installed inside of the Docker.

Importing reports:

Additionally when executing the commands, one way to incorporate information to the Faraday platform is copying the tools' output reports.
To go about this, we need to copy, for example, output_nmap.xml to $HOME/.faraday/report/[workspace_name]
Once this has been interpreted and incorporated to the data base, the report is copied to $HOME/.faraday/report/[workspace_name]/process

This we can do by copying the reports to the containers via sftp or we can use a file sharing function between the host server and containers.

Let's check out an example:

root@isrlab:~/dev# mkdir -p /tmp/workspace/process #We need to create a structure of the valid directories 

We start running a container sharing the directory of the host server /tmp/workspace in /root/.faraday/report/workspace/

/root/.faraday/report/workspace/
root@isrlab:~/dev# docker run -t -i -v /tmp/workspace/:/root/.faraday/report/workspace/ infobyte/faraday /root/run.sh

Now we can start using the tools inside the host server and this is going to be interpreted as if it were inside the container for Faraday in the workspace called "workspace"

root@isrlab:~/dev# nmap localhost -xO /tmp/workspace/output_nmap.xml

We are able to copy all types of reports supported by Faraday (+ 40 plugins supported) root@isrlab:~/dev# cp /root/reports/nessusscan.nessus /tmp/workspace/

We hope you thought this was helpful!
Best!

Blackhat 2015

A couple weeks ago we had announced here, we were going to be presenting at BlackHat 2015. This year we had the opportunity to give a presentation at Arsenal, an area where independent researchers and the OpenSource community shows off their latest tools.

The conference consisted of 4 days of intense talks with a vast array of topics. Ranging from hacking a rifle with linux, attacking digital fingerprint systems on smart phones and even controlling remotely a Jeep Cherokee.

Charlie Miller and Chris Valasek presented probably the most hyped talk of the conference (and it did not disappoint) where they went over in detail how to effectively hack into a Jeep Cherokee. The talk was a culmination of years of research into how the systems inside cars function and how someone would be able to take control over a vehicle remotely. They were able to do this by accessing to Uconnect, the Jeep´s remote control systems. With this device, it is possible to access the factories' servers in which one can download applications, obtain information and even connect the passengers to the web. Probably the scariest option of all of this was when he demonstrated how to gain control of the vehicle.  The Uconnect uses WPA2 to acces the Wi-Fi, but Miller and Valasek reduced the pass phrases space to a couple of dozen because the key is generated using the system's activation time as a seed for the key generation.

Another one of the discoveries that really caught our eye was how port 6667/tcp was able to be opened with the D-Bus service. This service was used to establish communications between processes, but in the case of the jeep it was configured with root privileges and without authentication. The researches didn´t have to discover any vulnerabiilites or execute any exploits to be able to launch commands in the vehicle. This was a result of a service known as ¨execute¨ which runs the function. By doing this, Miller and Valasek didn´t waste time in creating their own scripts which let them execute actions (that might be unwanted or sub-optimal) such as GPS tracking of the vehicle, controlling the AC/ Heating, the volume of the radio and being able to open the car from a far away even if it´s not running.

For us, one of the most interesting talks in BlackHat came from Michael Auger and Runa Sandvik. In their talk they showed how to hack a rifle with the Linux operating system. The research was done for rifles from the company, Tracking Point, which makes rifles with telescoptic sight, a targeting support system and with wi-fi connectivity which allows someone to see what the shooter is seeing on an external device. One of the most interesting things they were able to do was modify the aiming system so that the shooter always misses the shot (and maybe hits something else you weren´t planning on).

The Arsenal event was held the 5th and the 6h and it was the second time Infobyte had presented Faraday, and the third time overall in Arsenal. In 2010, we presented Evilgrade, a modular framework that allows the user to take advantage of poor upgrade implementations by infecting fake updates. Then the following year (2011), we presented for the first time, Faraday, the first IDE for collaborative pentests.

Federico Kirschbaum, founder and CTO of Infobyte, showed off some of the newest features of the platform. From the totally renovated dashboard and reporting and a bunch of new plugins. We were lucky to have a great turn out and as always, we saw A LOT of enthusiasm from the community.


For those that are interested in testing out a bit Faraday, you can find a free open-source version online, which you can download here. Also, if you weren't able to make it to Vegas and see us in person, we are going to be doing a webinar soon. We will keep everyone posted.

Any questions or feedback you can write us at communications@infobytesec.com or you directly on Faraday´s website.

Imagen oficial de Faraday en Docker

Docker

Hace unas semanas estuvimos comentando en otro post sobre Docker

Hoy en día estamos utilizando docker como plataforma para testing de nuestro proceso de instalación en Faraday

Nos pareció muy interesante armar una imagen oficial de docker.  Para esto nos basamos en Ubuntu 14.10 por defecto viene con Faraday, CouchDB, SSH pre-configurado, Usuario root password toor

Inicializando Faraday:

root@isrlab:~/dev# docker run -t -i infobyte/faraday /root/run.sh

Con este comando inicializamos el container con Faraday conectado a couchdb con un workspace de prueba "workspace"
Faraday es inicializado con ./faraday.py -gui=no-gui --update sin entorno grafico, va intentar actualizar la ultima version desde el repositorio de git

Obtener la dirección ip del container:

root@isrlab:~/dev# docker inspect $(docker ps -lq) | grep \"IPAddress
          "IPAddress": "172.17.0.62",

Interface Web-UI:

Apuntando el navegador http://172.17.0.62/reports/_design/reports/index.html pueden acceder a la Web-UI de Faraday.

Interface ZSH:

Para empezar a ejecutar comandos podemos utilizada la interfase ZSH, para esto deben conectarse por SSH usuario root password toor

root@isrlab:~/dev# ssh root@172.17.0.62
root@172.17.0.62's password:
root@250f83a02a3a:~# cd faraday/
root@250f83a02a3a:~/faraday# ./faraday-terminal.zsh
>>> WELCOME TO FARADAY
[+] Current Workspace: workspace
[+] API: OK
[faraday](workspace) 250f83a02a3a# ping 127.0.0.1
[faraday](workspace) 250f83a02a3a# ping 127.0.0.1 >&1 > /root/.faraday/zsh/output/09cfbbb7-ab8a-44ca-9a64-9128029d8f41.output && python2 /root/.faraday/zsh/plugin_controller_client.py send_output cGluZyAxMjcuMC4wLjE= "/root/.faraday/zsh/output/09cfbbb7-ab8a-44ca-9a64-9128029d8f41.output"
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.059 ms
[faraday](workspace) 250f83a02a3a#

Interface QT GUI:

Para trabajar con la QT GUI deberíamos inicializar de otra manera el docker:

root@isrlab:~/dev# docker run infobyte/faraday /root/run_service.sh

En otra consola corremos:
Obtener la dirección ip del container:

root@isrlab:~/dev# docker inspect $(docker ps -lq) | grep \"IPAddress
        "IPAddress": "172.17.0.62",

root@isrlab:~/dev# ssh -X root@172.17.0.62
root@172.17.0.62's password:
root@250f83a02a3a:~# cd faraday/
root@250f83a02a3a:~/faraday# ./faraday.py

* Para ejecutar comandos tienen que tener en cuenta que las herramientas deben instalarlas dentro del docker

Importing reports:

Adicionalmente a la ejecución de comandos una forma de incorporar información a la plataforma de Faraday es copiando output reports de las herramientas.
Para esto tenemos que copiar por ejemplo output_nmap.xml a $HOME/.faraday/report/[workspace_name]
Una vez interpretado e incorporado a la base de conocimiento el report es copiado a $HOME/.faraday/report/[workspace_name]/process

Esto lo podemos hacer copiando los reports al containers via sftp o podemos utilizar una funcionalidad de file sharing entre equipo host y containers

Veamos un ejemplo:

root@isrlab:~/dev# mkdir -p /tmp/workspace/process #Creamos estructura de directorios valida

Inicializamos un container compartiendo el directorio del equipo host /tmp/workspace en /root/.faraday/report/workspace/

/root/.faraday/report/workspace/
root@isrlab:~/dev# docker run -t -i -v /tmp/workspace/:/root/.faraday/report/workspace/ infobyte/faraday /root/run.sh

Ahora podemos utilizar las herramientas en el equipo host y esto va ser interpretado dentro del container por Faraday en el workspace llamado "workspace"

root@isrlab:~/dev# nmap localhost -xO /tmp/workspace/output_nmap.xml

Podemos copiar cualquier report soportado por Faraday (+ 40 plugins soportados)
root@isrlab:~/dev# cp /root/reports/nessusscan.nessus /tmp/workspace/

Esperamos que sea de gran utilidad!
Saludos!

Disney Interactive announces the latest addition to disney infinity 3.0 Edition: STAR WARS

STAR WARS JOINS FORCES WITH DISNEY, DISNEY-PIXAR AND MARVEL IN THE ALL-NEW DISNEY INFINITY 3.0

Latest Edition of Disney Interactive’s Best-Selling Video Game Series Will Include Five Play Sets, New Toy Box Expansion Games and a Variety of Fan-Favourite Characters From Across The Walt Disney Company

PHILIPPINES (August 20, 2015) – Disney Interactive today announced that the Star Wars™ universe will join Disney, Disney•Pixar and Marvel in Disney Infinity 3.0 – the latest installment of the best-selling “hybrid toy / video game” of 2014.  The Disney Infinity 3.0 Starter Pack will be available from 1 September at a suggested retail price of PHP 2,999.00, and Disney Infinity 3.0 promises to deliver kids and families with a wider breadth of content and variety of gameplay than ever offered from Disney Infinity, including: 

·        Three (3) Star Wars Play Sets, one set in the timeline of Episodes I-III, the second set during the original trilogy, Episodes IV-VI, and the third based on Star Wars™: The Force Awakens™

·        Additional Play Sets offering distinct gameplay and environments, including a Disney-Pixar Play Set based on the upcoming film Inside Out, and a Marvel Play Set featuring Hulkbuster Iron Man, Ultron, and other Marvel characters

·        A fully enhanced Toy Box with two new multiplayer Toy Box Expansion Games, Toy Box Speedway (kart racing) andToy Box Takeover (action-adventure)

·        More figures of fan-favourite characters from across The Walt Disney Company, like Mickey and Minnie, Sam Flynn and Quorra from Tron: Legacy, Mulan and Olaf, among many others

“Disney Infinity is the only game where fans can play with Disney, Pixar, Marvel and Star Wars characters together in one experience,” said James Pitaro, President, Disney Interactive.  “We worked closely with Lucasfilm to deliver an authentic Star Wars game experience, featuring some of the most iconic stories and characters from the past, present and future.”

Each of the Star Wars Play Sets offers distinct experiences, with varied gameplay, environments and characters.  The Star Wars™: Twilight of the Republic Play Set takes place in the height of the Jedi’s powers, where players will use the Force™ and Lightsabers™ in epic battles and master their combat skills alongside Ahsoka Tano, Anakin Skywalker, Obi-Wan Kenobi, Yoda and Darth Maul.  The Star Wars™: Rise Against the Empire Play Set will take players on galaxy-spanning missions with Luke Skywalker, Princess Leia Organa, Han Solo, Chewbacca and Darth Vader, piloting X-wing fighters or the Millennium Falcon to fight stormtroopers, or exploring and partaking in land-based missions on planets like Tatooine, Hoth, and Endor.  Additionally, fans will have the unique opportunity to play with all of the Star Wars characters in all of the Star Wars Play Sets.

“Star Wars is a cross-generational franchise, and Disney Infinity 3.0 creates an incredible opportunity for families and fans to relive their favourite Star Wars moments,” said John Blackburn, Senior Vice President and General Manager of Disney Infinity.  “With the addition of Star Wars, Inside Out and new Disney and Marvel characters, Disney Infinity 3.0will be the most ambitious and diverse offering yet and also the most accessible.”

Disney Infinity 3.0 will also introduce an all-new, 3-D Toy Box Hub that will make it easier for players to choose from a wider selection of gameplay experiences — including platform, racing, and farming simulation games.  Two new multiplayer Toy Box Expansion Games will bring action-adventure gameplay in Toy Box Takeover and kart racing in Toy Box Speedway, where kids and families can play with popular Disney, Disney-Pixar, Marvel and Star Wars characters together in a structured setting.

Disney Infinity 3.0 is being developed by Avalanche Software in partnership with Ninja Theory, Sumo Digital, Studio Gobo and United Front Games, and will be available for the PlayStation®4 and PlayStation®3 computer entertainment systems, Xbox One, the all-in-one games and entertainment system and Xbox 360 games and entertainment system from Microsoft, the Wii U™ system from Nintendo, PC and iOS and Android devices.

The Disney Infinity 3.0 Starter Pack will include the Disney Infinity 3.0 Base and video game software, the Star Wars: Twilight of the Republic Play Set, Ahsoka Tano and Anakin Skywalker character figures, and a web code card that unlocks content for PC and mobile devices.  Other Disney Infinity 3.0 Play Sets, figures, and Toy Box Expansion Games will be sold separately.

All figures and Power Discs from the 1.0 and 2.0 editions of Disney Infinity will be compatible with Disney Infinity 3.0 in the enhanced Toy Box and, for the first time, Power Discs will be sold in labeled franchise-specific packs of four.  Additional Disney, Disney•Pixar, Marvel and Star Wars figures and Play Sets will be announced in the coming months.

For more information, please visit www.disney.com/Infinity and www.youtube.com/disneyinfinity, join the Disney Infinity Facebook Community (www.facebook.com/disneyinfinity) and Google+ community (plus.google.com/+DisneyInfinity), and follow us on Twitter (www.twitter.com/disneyinfinity) and Instagram (www.instagram.com/disneyinfinity). To access press materials, please visit http://www.disneyinteractive.com.

Like this story? Share it and don't forget to follow us on our social channels: Facebook, Twitter,  Instagram, Google+, Youtube, Flickr