ثغرة أمنية في تطبيق Android و iOS Phone: إصلاح فوري لـ 150 مليون مستخدم

سارع تطبيق تروكولر الشهير لحظر المكالمات إلى الإصلاح بعد أن تم تحديد عيب أمني بواسطة باحث مستقل ، وكشف بيانات المستخدم بالإضافة إلى معلومات النظام والموقع. قام الباحث بتطوير POC يظهر أنه يمكن زرع "رابط ضار" في مكان صورة الملف الشخصي لاستهداف الهجمات المحتملة على المستخدمين الآخرين الذين ينقرون على الملف الشخصي. يمكن تنفيذ هجوم بأي معرفة للمستخدم.

أكد تروكولر المشكلة لي ، موضحًا أنه "تم لفت انتباهنا مؤخرًا إلى وجود خطأ صغير في خدمات التطبيق لدينا مما سمح بتعديل ملف التعريف الخاص بالفرد بطريقة غير مقصودة. نشكر الباحث الأمني ​​لإبلاغنا بذلك والتعاون معنا. تم إصلاح الخلل على الفور ". تم تطبيق الإصلاح على واجهات برمجة التطبيقات الأساسية داخل النظام الأساسي نفسه ، ومع ذلك ، يجب على جميع المستخدمين التأكد من قيامهم بالتحديث إلى أحدث إصدارات تطبيقات تروكولر .

تم تطوير تروكولر في السويد لإدارة تحدي مكالمات الرسائل الاقتحامية (SPAM) وفرز المتصلين غير المعروفين. المنصة متاحة عالميًا ، لكنها تحظى بشعبية خاصة في الهند ، حيث تقول الشركة إنها أصبحت أداة الاتصال الأكثر استخدامًا بعد عمالقة وسائل التواصل الاجتماعي. على الصعيد العالمي ، تفتخر الشركة بـ 500 مليون عملية تنزيل لتطبيقاتها عبر الأنظمة الأساسية و 150 مليون مستخدم نشط يوميًا.

Visit full article here : https://arkm.link/تروكولر/

اكتشف الباحث المقيم في الهند إيهراز أحمد الخلل ، وكشفه لوسائل الإعلام المحلية والشركة ، وانتظر الإصلاح قبل طرحه للجمهور. أوضح لي أن "الخلل يسمح للمهاجم بإدخال رابطه الضار كعنوان URL للملف الشخصي. يتم استغلال المستخدم الذي يشاهد الملف الشخصي للمهاجم عن طريق البحث أو من خلال نافذة منبثقة ". قال أحمد إنه يمكن استخدام الخلل لشن هجمات خطيرة على الأجهزة المستهدفة ، على الرغم من أن هذا لم يكن نطاق إثبات المفهوم وقد قللت الشركة من شأنه.

ما فعله أحمد من خلال POC الخاص به هو "جلب معلومات المستخدم مثل عنوان IP و User-Agent والوقت. لن يلاحظ المستخدم الذي يزور الملف الشخصي هذا لأنه يحدث جميعًا في الخلفية ، وبالنسبة للمستخدم ، سيبدو مثل أي ملف تعريف آخر ". مع الخلل الذي تم تصحيحه الآن والذي يؤثر على واجهة برمجة تطبيقات تروكولر ، فإنه يمثل تهديدًا محتملاً لجميع التطبيقات والأنظمة الأساسية.

تعرضت تروكولر لمشاكل أمنية من قبل ، بما في ذلك التحقيق في انتهاكات الخصوصية في نيجيريا والبيع المزعوم لبيانات المستخدم الهندي على الويب المظلم ، وكلاهما في وقت سابق من هذا العام. جاء ذلك في أعقاب تقارير أخرى عن الهجمات الإلكترونية والثغرات الأمنية في وقت سابق من تاريخ المنتج.

هذه المرة ، على الرغم من أن هذا يبدو عيبًا صارخًا لا ينبغي أن يكون قد وصل إلى المنصة ، يمكن الثناء على الشركة لتصرفها بسرعة. مع تحول تطبيقات المراسلة إلى حلول الدفع - مع استعداد أمثال Facebook لتشكيل السوق ، ترى تروكولر أن هذا هو التركيز الرئيسي لإيراداتها المستقبلية. على هذا النحو ، يصبح الأمن والثقة أكثر أهمية

أخبرتني الشركة "نحن بكل تواضع للترحيب بجميع المساهمات من مجتمع الأبحاث الأمنية". "لقد دخلنا في شراكة مع مجتمع من الباحثين وسنعلن قريبًا عن برنامج مكافأة حيث سنكافئ ، بصفتنا منظمة شفافة ومسؤولة ، الباحثين على مساهماتهم".

بالنظر إلى هذه المشكلة ، يبدو أن برنامج مكافأة الأخطاء لاستئصال الآخرين خطوة جيدة.

United Arab Emirates tackle state assaults

A number of weeks in the past, the United Arab Emirates (UAE) introduced the "sabotage" of 4 service provider ships off the Gulf Coast - and started investigating. There at the moment are some first outcomes: based on the Emirates, they declare to have been attacked by one other state. Such a classy and coordinated operation required "appreciable operational capability," based on a press release from the United Arab Emirates illustration to the United Nations.

In accordance with the report, the tankers had been particularly chosen. A number of groups of divers had most likely connected explosives to the ships in order that they didn't sink however turned maneuverable. As well as, he wanted quick boats, which had penetrated with a radical information of the area situated within the waters of the United Arab Emirates. The entire motion required the abilities of a secret service.

Tanker sabotage was reported in mid-Could. Among the many service provider ships involved additionally included a Norwegian tanker and two Saudi oil tankers. Riyadh and Washington see Iran behind the scenes and have strengthened their tone in opposition to Tehran. Iran, alternatively, had warned that it was essential to blame the nation for producing fabricated proof and that the battle needs to be provoked.
No person was injured on board the ships in the course of the incidents, based on the assertion distributed by the official Wam information company. Neither oil nor chemical substances have leaked.

الدفع التلقائي باي بال

Watch For Free: Historic Videos Of London's Bridges

The BFI has opened a treasury of free videos on London's bridges.

London's Bridges On Film combines historic footage of the Thames, which (in two senses) spans nearly 125 years.


The British Film Institute's collection was launched on the occasion of the first phase of the Illuminated River art project, during which most London bridges are to be given a new lease of life at night.

Blackfriars Bridge, 1896.

The earliest film, Blackfriars Bridge (1896), lasts just over 30 seconds and is still a haunting clock. We see various horse-drawn vehicles and pedestrians walk across the bridge. An elderly gentleman looks back in surprise at the camera. A teenager strolls to the south bank without taking his eyes off his newspaper. Every single man, every single woman, every single boy and every single horse is long dead, but the bridge and the background buildings are still part of our London.

Sidewalk Surfing (1978)

More recently, Sidewalk Surfing (1978) looks at Skate City Skatepark, which once stood near Tower Bridge. The footage opens and closes the London Bridge with some impressive, though reckless, skates.

The collection also contains complete documentation, such as a half-hour view of the reconstruction of the Grosvenor Railway Bridge (which connects Victoria with Battersea) in Railway Bridge Across the Thames (1968). Meanwhile, Rebuilding of London Bridge (1967) offers silent but intriguing footage of the demolition and renewal of this famous span.

Color on the Thames (1935).

Other highlights include Women & # 39; s Thames Swim (1921); Central London Street Scenes (1923), filmed for a Sherlock Holmes film; Opening of the New Lambeth Bridge (1932); River Thames Yesterday (1939), who took a last look at the Docklands in front of lightning; and South Bank (1973), a South Bank refurbishment report showing the construction of the National Theater and the NFT, the Hayward Gallery, and Queen Elizabeth Hall in the shadow of Waterloo Bridge.

Most, maybe all, of the films were previously seen on the BFI player, but this newly curated collection focuses on the theme.

As long as you're in the UK, you can now switch to the BFI's site and admire yesterday's bridges.

xxx video download

Kokoko!: Fongola assessment | Ammar Kalia's international album of themonth | Music

TThe music tradition in Kinshasa, the capital of the Democratic Republic of Congo, is deeply rooted. His experimentalism has lengthy accompanied the turbulent political historical past of the nation, producing form-shift teams, from 50-member soukous funk teams akin to TPOK Jazz within the 1950s to 1970s, the Chorrumba group Zaiko Langa Langa, and as soon as the one all-black orchestra on the earth , the Orchester Symphonique Kimbanguiste. Consisting of a separate altering collective of members consisting of at the very least 5 members, the Kinshasa group is Kokoko! proceed this legacy with their debut album Fongola.

The band was shaped in 2016 at a neighborhood block celebration of their Ngwaka neighborhood and delivered to the studio by French producer Débruit, who made a reputation for himself with 4 experimental albums that cowl Haitian hip-hop and Turkish folks. Fortuitously, the recordings have retained their sense of spontaneity: their debut single Tokoliana from 2017 combines crisp digital drums and pulsating kick drums with amorphous synths and vocals that swap from guttural choruses to stifled shouts of pleasure. Fongola - additionally produced by Débruit - retains up the vitality of avenue events and develops them additional. Add to that Kokoko's distinctive mixture of DIY devices akin to bottle percussion and three-string guitars.

Opener Likolo rattles via an ensemble of evocative guitar phrases earlier than singer Makara Bianko's distinctive baritone vocals break via, promising the underlying drone the promise of a darker vitality. The dynamics of Azo Toke are enhanced by a rip-roaring soukous rhythm, whereas Buka Dansa is euphoric with its rising synthesizers and call-and-response vocals in hot-chip model.

Kokoko! Work greatest at this frenzied tempo, as mirrored of their dwell reveals, the place the group vibrates in matching kettle fits and tastes their home-made devices dwell. So when the vitality subsides, Fongola stops, as with the sparse guitar and synthesizer ballad Singa and the clinking love. Fortuitously, few of those pacemakers exist, and Fongola ultimately establishes Kokoko! as commanding new voice a folk-synth polyglot, which drives the multi-faceted sound of kinshasa.

Additionally out this month

Turkish producer Grup Ses works with an electrical Saz participant Electrical Hafiz to create Varyete, a report that sounds as if Turkish people had been going via Jimi Hendrix's distorted aura and underlined by a rattling J-Dilla model: an unlikely however deeply fascinating combine. The originating from Morocco re-issue label Habibi Funk revealed in 1973, the Gnawa radio report Al Hadaoui the 14-member household band Attarazate addahabia and singers Faradjallah, There are many polyrhythms and Faradjallah's vocals rise above guitar tracks that may not be incorrect in a Nile Rodgers session. Started to publish music professionally within the seventies, as a carimbo singer Dona Open Additionally produces a extremely cheerful assortment of Brazilian dance music on Rebujo, their hoarse tenor, which establishes the bubbly and percussion-heavy instrumentation.

ytmp3

Tricks to Win and Dominate the Mafia Wars Sport - The Most Intense Tricks to Ever Be Launched

Consider it or not, Mafia Wars has over 19 million customers enjoying a web based sport. So many individuals need to know the best way to dominate Mafia Wars, and are ready for intensive tricks to be launched. That is completely insane, this sport is without doubt one of the hottest video games ever launched on this date. You may play it on Fb, MySpace and even Yahoo. Most individuals play it on Fb. Now these 19 million individuals now not have to attend, as a result of I'm going to launch some wonderful tricks to dominate this complete sport.

As in actual life, work is without doubt one of the most vital issues. As in actual life, you must work to dominate the mafia wars. Cash is the important thing to the entire sport, and the way do you get cash? Nicely, clearly, working. You'll not solely earn some huge cash working, but additionally get a whole lot of expertise. Like in actual life! Unusual, sure?

Now, secondly, you must get some wonderful gear. You have to have first-class issues to have the ability to dominate the sport Mafia Wars. So this contains varied weapons, armor and autos. All this provides you with the chance to guard your loved ones and develop into the most effective mafia household for the entire sport after some laborious work.

Talking of defending your loved ones, you have to be sort to your loved ones. Nobody needs to affix your mafia in case you are not pals with your loved ones. To dominate the Mafia Wars sport, it's crucial that you just be sort to your loved ones and assist them in all potential methods. Your loved ones also needs to return a service that creates a particularly robust household.

And final however not least: while you work rather a lot, you'll have some huge cash. The very best recommendation I may give you is to take a position this cash. Purchase property, begin at a low degree, after which develop. You may make such a big funding, and you'll have many alternatives if one thing unhealthy occurs. This provides you with an enormous return on all of your investments that can assist you dominate mafia wars.

Listed here are among the finest suggestions I may give you. I do know that you could be suppose that you just already knew this, however don't take it severely. So many individuals learn this and suppose that they're doing simply that, however in actual fact it's way more. You have to be dedicated to this and observe all four steps precisely. It will enable you to on the street to domination in Mafia Wars.

Soccer: The Love of My Life

I'm loopy soccer. It began at six, and now, at 59, it's worse than ever. I spend the afternoons on a Saturday in a pub that I cannot usually enter and fever with my staff, the BVB.

More often than not I watch
1 Thirty
on the Fruchtallee in Hamburg. Right here guests put on black and yellow and drink the beer of the Dortmund stadium. There are 4 screens and a giant display screen. On the way in which to the bathroom, BVB t-shirts with autographs grasp on the wall. The ceiling is embellished with scarves.

I choose to take a seat within the first row of chairs within the non-smoking room - as a result of it's much less smoke. Others make sure that to fulfill with their associates
1 Thirty, I'm going alone. My solely acquaintance is Andreas, an electrician, a karate coach, for my age. He meets him nearly each week. I have no idea his surname. He's speaking to a retailer with me. The opposite males ignore my feedback. That's what I usually speak to myself. And I'm glad I undoubtedly don't meet any of my associates right here. As I play whereas watching soccer. My god Jasper, 21, from Bochum, needed to go to the pub when he visited me in Hamburg. He discovered me embarrassed, he confessed later. One might categorical his sympathy and fewer voice.

Martina Keller

additionally talks in regards to the soccer habit to the radio and the way he tries to get at the least a few of them underneath management: the 55-minute operation Soccer too (SWR / BR / NDR) is offered within the ARD library.

I import vital video games within the calendar. I'm wanting ahead to this for weeks. However when it begins, I'd wish to be again once more. I really feel palpitations, the worst of all. And the worst comes. The opposite day within the Munich recreation: BVB participant Zagatou places the ball in entrance of his personal field, Lewandowski is hiding subsequent to him. And naturally it makes it clear. Unbelievable!

Andreas compares to me with a dominant fan and appears completely at BVB video games. Dancing the discofox, the document label, Lindy Hop and the like. Typically it seems on a silk shirt when it comes straight from the ground.

Then again, I watch BVB and all the things else: Bundesliga, Second League, Cup, European Girls's Championship, Girls's World Cup, Premier League, Primera División, Champions League, Europa League, worldwide ... I'm watching some issues on TV. As well as, I've registered for BVB TV if I've misplaced a recreation of my staff. There can be video games once more.

I've been enjoying once more for 3 years now. In Union 03, District League Hamburg West, second lowest league. The youngest of my staff is within the early 20s, the primary two 40. Then nothing will come for a very long time. After which I.

I'm enjoying Sturm or attacking the center stage. Typically at six. My aggressive return after 30 years was brief - 15 minutes. In the meantime, I'm typically within the early eleven, even one aim on the finish of 2017, 1-1 towards Eidelstedt. Instant acceptance with extension from left to header. The ball jumped instantly beneath the road, sadly within the center. Fortunately the goalkeeper was too younger.

I nonetheless had soccer footwear for the reason that eighties. Black footwear with silver-red strips, on the tab a three-dimensional emblem. With these I educated within the early months. However each time there have been bubbles. So I went out to purchase a brand new one, one of many outdated ones I acquired with me. One such once more, I informed the vendor. He pulled a number of fashions from the shelf. Then he requested: Can I take an image?

So my footwear are prepared for the museum - and I might be the mom of my compatriots. Additionally the grandmother of some opponents. However soccer is the most important relationship of my life.

This article is from TIME no. 24/2019. Here you can read the whole issue.

It began in 1966, with the ultimate of the World Cup towards England in Wembley. I used to be six and watched the sport on TV. After the defeat, my upset dad and mom needed to blow up first. I solely had one thought in her hand:
We're Vice President World Champion.
I don't keep in mind the photographs, simply this overwhelming feeling. And the prediction for the following World Cup, 4 years later in Mexico.

I've performed by Wembley. Within the college hall. Within the yard. On the park. I simply acquired a ball and a few guys to let me in. I additionally kicked solely within the backyard. Maintain the ball, turning the storage wall, for hours. I simply destroyed my father's pink mattress, which punished the soccer ban on in the future - a most penalty.

My brother Friedel, then firstly of the 20th, needed to work consistently. We performed between carpets within the small gates. I usually put him getting ready to defeat. Not less than I believed so. When he lately admitted that he allowed me to get additional, I used to be disenchanted.

Plans of the Nice Coalition: the Bundestag decides on the migration package deal

Sooner deportation, simpler immigration of expert employees - the Bundestag votes on the Nice Coalition Migration Bundle. The eight banknotes are controversial.

By Anja Günther, ARD-Hauptstadtstudio

Doing homework, particularly now, the Grand Coalition has set itself. In accordance with the coalition settlement, this additionally means enhancing the present proper of asylum and residence. Means: higher management the migration and supply a extra certified labor immigration. Final Monday evening, when everybody was watching the SPD dominated by the disaster, he instantly mentioned: success has been profitable.

"The excellent news is that the coalition is working very effectively and might make good compromises," mentioned Eva Högl, the interior skilled of the SPD. Along with their Union counterparts Thorsten Frei and Andrea Lindholz, they introduced an settlement on eight particular person migration legal guidelines - all from the Federal Ministry of the Inside.

Two of those are central: the regulation on immigration of expert labor and the so-called regulation on ordered return. They regulate who must be deported quicker sooner or later and when - and who is especially welcome. The Bundestag ought to undertake all eight legal guidelines as an entire package deal. The chief of the CSU nationwide group Alexander Dobrindt is necessary "that we've taken a major step in direction of our objective of organizing and controlling migration".

Deportation is simplified

If the Bundestag approves at the moment, the next applies sooner or later: those that should depart the nation should anticipate a constant deportation. Duldungsregeln be tailored, tightened residence necessities, restricted social advantages. To cut back the danger of escape, individuals leaving the nation will be taken into custody.

There are already particular posts for deportation. However even in common prisons it must be quickly attainable. "For that reason we've established that if the departure date is exceeded by 30 days, then the circumstances for custody of the departure are given," says CDU deputy Thorsten Frei.

Above all, the opposition criticizes this side. An asylum seeker who has to depart the nation doesn't have enterprise in a traditional jail, says inexperienced celebration member Filiz Polat: "When you have not dedicated against the law, you can't be arrested and you are attempting to punish individuals with the heaviest sword within the been forcing an exit. "

The kindergarten has stiffened towards the immigration of simplified expert employees

The hardening of the asylum was significantly necessary for the Union. In return, the SPD has applied an immigration regulation of improved expert labor. Significantly certified international employees ought to have the ability to come to Germany extra simply. For instance, the precedence take a look at, which ensures German residents and EU aliens a proper of first entry, is revoked.

The Federal Minister of Labor Hubertus Heil stresses that "we manage a specialised immigration particularly for certified individuals, along with inside expert employees, which is the order we've created, and that's the reason it's a good package deal" .

Unanimous opposition within the opposition

A very good package deal? Effectively, not solely the greens say. The FDP doesn't take into account the method to immigration coverage to be sufficiently constant and the parliamentary group of the Left Social gathering accuses the federal government of inhumanity. The opposition as a complete, except the AFD, deplores the speedy tempo at which the Union and the SPD are driving their migration package deal by way of parliamentary procedures. One suspects GroKo's causes: to not complain, however to reveal vitality.

Seehofer: "It's essential to make the legal guidelines difficult"

Inside Minister Seehofer issued an announcement to the deliberate regulation on knowledge trade for discussions. On the Congress on Defiant Democracy, he mentioned that legal guidelines have to be difficult. "Then it received't be so." The Bundestag additionally votes at the moment with the migration package deal on the regulation on knowledge trade. This could enable the federal police and safety authorities higher entry to the central register of foreigners, together with delicate knowledge. Information protectors worry abuse.

NDR info reported on this matter on 7 June 2019 at 06:20.