Daily Archives: July 21, 2017

Tor network will pay you to hack it through new bug bounty program … – ZDNet

Posted: July 21, 2017 at 11:52 am

Tor

The Tor Project has joined with HackerOne to launch a public bug bounty program aimed at finding vulnerabilities which could compromise the anti-surveillance network.

The Tor network is a system of nodes and relays used to mask online activity, as well as access areas of the Internet not indexed by so-called "clear web" search engines.

While sometimes associated with Dark web illegal trading and nefarious goods, Tor is also a key tool for activists, privacy enthusiasts, and journalists looking to keep their online activities private.

Cybercriminals and governments alike are constantly poking the system to find vulnerabilities to exploit for surveillance purposes.

This year, the FBI used a "non-public' vulnerability to unmask individuals connected to child pornography, but as the agency refused to reveal how this was achieved, the case was dropped.

Tor is not 100 percent safe from compromise; no system is. However, to close the net on any bugs which may be used in similar ways in the future -- no matter the cause -- Tor is asking researchers to scour the network for any weak links.

"Millions of people around the world depend on Tor to browse the internet privately and securely every day, so our security is critical," The Tor team says. "Bugs in our code pose one of the biggest threats to our users' safety; they allow skilled attackers to bypass Tor's protections and compromise the safety of Tor users."

On Thursday, Tor launched a public bug bounty program under the moniker #HackTor. Hosted on the HackerOne platform, the scheme is specifically targeting security flaws in the Tor network daemon and Tor browser used to access the network.

In particular, Tor would like to see reports of any remote code execution flaws, local privilege escalation, unauthorized access of user data, or attacks that cause the leakage of crypto material of relays or clients.

Depending on the severity of the issue, researchers can expect to earn up to $4,000 per report.

The public bug bounty follows in the steps of a private program launched in January 2016 which resulted in three denial-of-service flaws and four edge-case memory corruption bugs being discovered, fixed, and rewarded.

See also: The 10 step guide to using Tor to protect your privacy

Tor Browser chief Georg Koppen told HackerOne that the decision to go public was made once the private system allowed the Tor team to better organize their workflow.

"We want to expand relationships with the research community and make our software more secure in the process," Koppen says. "Reported bugs will help us to address issues before they can potentially become a threat to our network of users."

"I can easily see expanding the program's scope beyond Tor and Tor Browser to cover other parts of our software ecosystem or even infrastructure as well," he added.

Read the original post:
Tor network will pay you to hack it through new bug bounty program ... - ZDNet

Posted in Tor Browser | Comments Off on Tor network will pay you to hack it through new bug bounty program … – ZDNet

Tor Project to launch public bug bounty project – CIO Dive

Posted: at 11:52 am

Dive Brief:

The nonprofit Tor Project announced it plans to launch its first public bug bounty project, working with HackerOne, according to VentureBeat. The Tor browser is the controversial program that allows people to troll the internet without being tracked.

The Tor Project wants to find vulnerabilities that could compromise the anti-surveillance network.

Tor launched a private bug bounty program last year. The new program is public, which means anyone can participate. Tor Project said a legitimate bug report could land a researcher up to $4,000.

Bug bounties are growing in popularity among companies looking to keep on top of vulnerabilities. For one thing, such programs are often much cheaper than the cost of recovering from an attack. The average cost of recovery from a single security incident is estimated to be $86,500 for small and medium businesses and $861,000 for enterprises,according to a recent report from Kaspersky Lab.

The number of enterprise bug bounty programs grew more than 300% over the last year, according to the 2017 State of Bug Bounty Reportreleased by BugCrowd earlier this month.

HackerOne is well known for helping big-name companies improve their security posture, and its efforts appear to be paying off. In April, HackerOne announcedit received $40 million in series C funding led by Dragoneer Investment Group and the company said its hacker community tripled to nearly 100,000 last year.

Large companies like Google, General Electric, Microsoft, United Airlines, Western Union, Tesla Motors and Fiat Chryslerhave all participated in bug bounty programs over the last few years.

The rest is here:
Tor Project to launch public bug bounty project - CIO Dive

Posted in Tor Browser | Comments Off on Tor Project to launch public bug bounty project – CIO Dive

Everything You Need to Know About Cryptocurrency | Digital …

Posted: at 11:52 am

If youve ever had a company or friend offer to pay you with Bitcoins or another type of digital money, youve encountered cryptocurrency, also called crypto-money or cryptoassets.

Cryptocurrency is a digital currency that is created through the use of encryption software. This approach is a solution to security and control issues that prevented a purely digital currency from being successfully developed in the past. If you hear someone talking about one of these currencies, its almost certainly in a cryptocurrency format. This type of digitally created and secured money is currently in a period of very cool experimentation, so lets take a look at how it work, why its popular, and where cryptocurrency is heading in the future.

How does a currency exist in a totally digital format? What is it based on? While the process varies a little between different cryptocurrencies, they all follow the same general system.

First, cryptocurrency chooses a base unit and how much that particular unit is worth when compared to other currencies (often, the U.S. dollar is used as a baseline). Some cryptocurrencies are more imaginative than others at this point. They try to represent debt registries, contracts, or the act of currency exchange itself. It can get a little weird, but ultimately the unitin some way relates to the value of other currency, as is true of all currencies in the world.

Units of cryptocurrency are then created, typically when a transaction occurs. The units are carefully formed and preserved through algorithmic encryption, then linked together in vast chains of data, where the currency can be tracked and exchanged.

However, at this point, cryptocurrency is still too vulnerable and too easy to fake. The currency units need to be timestamped and processed to make them more concrete and harder to copy. A third party developer can do this, but most cryptocurrencies prefer to crowdsource the process to those with the right hardware and software to mine the currency.

Mining uses algorithms to go through each transaction, encrypt the cryptocurrency, and add it to a digital ledger, essentially verifying it and cementing its position online. This process may also be referred to as consensus protocols orconsensus platforms, depending on the currency. This process is meant to make the currency impossible to duplicate, though whether its successful is up for some debate.

Some cryptocurrencies are highly centralized, with someone usually the organization that created the process/software making decisions about how much currency is created and how it is used. Other types are very decentralized, controlled only by how and where people are willing to use them.

Link:
Everything You Need to Know About Cryptocurrency | Digital ...

Posted in Cryptocurrency | Comments Off on Everything You Need to Know About Cryptocurrency | Digital …

New Virtual Reality Cryptocurrency Gets $2.1 in Funding – Investopedia

Posted: at 11:52 am


Investopedia
New Virtual Reality Cryptocurrency Gets $2.1 in Funding
Investopedia
As the cryptocurrency world expands, it's difficult to say exactly how many other industries it will impact. Nonetheless, one industry that has already been affected by the expanding digital currency realm is gaming. As mining operations have ...

Link:
New Virtual Reality Cryptocurrency Gets $2.1 in Funding - Investopedia

Posted in Cryptocurrency | Comments Off on New Virtual Reality Cryptocurrency Gets $2.1 in Funding – Investopedia

Cryptocurrency Gets Its Biggest Test Yet – Fortune

Posted: at 11:52 am

Photos, Stock exchange: CBS via Getty Images; Paper: AssalveGetty Images

In the coming months a startup based in Waterloo, Ontario, is set to kick off a grand monetary experiment, one that will put to the test a new model for business that could prove to be either the webs next great economic engine, or a multibillion-dollar bubble thats as combustible as the Hindenburg.

The concept at stake is cryptocurrency , a form of digital money that exists independent of traditional banks or governments. Over the past few months, the market for cryptocurrencies has rocketed to more than $100 billion (and fallen back to $60 billion) amid extreme enthusiasm and volatility. So-called token sales, or initial coin offerings , also known as ICOs , have raised hundreds of millions of dollars, creating substantial fortunes out of little more than ones, zeros, and pitches. The movements critics compare it to the tulip-bulb manias of centuries past and say it will end the same way.

Advocates, however, believe cryptocurrencies could represent an important way for tech companies to raise cash. Instead of users trading their time, attention, and energy for free services, while a few supermassive landlord corporations reap all the profits (hello, Facebook ( fb ) ), cryptocurrencies could enable participants to be remunerated for their contributions on the platforms, with yet-to-be-invented moneys. Imagine users getting paid by the like.

So far, while their nominal value has soared, cryptocurrencies have mostly been a vehicle for speculators . But in the coming months, for the first time, a mainstream company with an established user base will try its hand at launching a crypto token to its 15 million monthly active users, potentially multiplying by a factor of five overnight the number of people using digital currency, according to estimates by the Cambridge Center for Alternative Finance . The company is Kik, the maker of a chat app favored by American teens , which intends to mint tokens enabling users to transact through its network.

Kik will join more than a hundred early-stage projectswith names like Brave , Civic, and Tezosin hosting token sales in order to fund themselves . But Kik hopes to be among the first to get people to use the tokens for something other than trading, flipping, or speculating.

Ted Livingston, founder and CEO of Kik, had the idea for a cryptocurrency in the back of his mind in 2014 when he launched Kik Points, a video-game-like in-app virtual money. The company shuttered the pilot program last year, but Livingston was pleased with it: The points traded hands an average of 300,000 times per day, more than three times the average number of transactions per month on Bitcoins network during that time. Kiks customers mostly used the points to buy stickers and smileys, but the company intends its new Kin tokens, the batch of to-be-released computer coins, to enable users to do everything from tipping peers, to ordering pizza, to paying for premium content.

Kik plans to mint a total of 10 trillion Kin tokens, selling a trillion to the public, holding on to 3 trillion for itself, and setting aside 6 trillion for a nonprofit that will manage a rewards program for loyal users. Its a new way to compete, its a new way to monetize, and its potentially a new way to exit as well, Livingston says.

If past ICOs are any indication, Kiks will bring in a substantial sum no matter what. What industry watchers will be eyeing, however, is whether Kin will actually catch on, fueling a mini-economy within and outside the app. If it works, the experiment could signal to the world the viability of the much-hyped and, until now, mostly theoretical token-based business model.

Success will pave the way for other traditional companies to do it, says Jake Brukhman, cofounder of CoinFund, which advises companies, including Kik, on blockchain tech. Indeed, crypto enthusiasts have proposed companies such as Twitter ( twtr ) , Snap ( snap ) , and Reddit as leading candidates for eventual token sales.

Either that, or the movementwhich depends on widespread adoption to justify multibillion-dollar valuationscould implode and leave many aspiring entrepreneurs and investors in the dust. For the Internets next big thing, that would be a little more than Kin, and less than kind.

A version of this article appears in the Aug. 1, 2017 issue of Fortune.

Read this article:
Cryptocurrency Gets Its Biggest Test Yet - Fortune

Posted in Cryptocurrency | Comments Off on Cryptocurrency Gets Its Biggest Test Yet – Fortune

How Do You Get Rich Off of a New Cryptocurrency? – Investopedia

Posted: at 11:52 am


Investopedia
How Do You Get Rich Off of a New Cryptocurrency?
Investopedia
Cryptocurrencies have been the most exciting financial topic of 2017 for many investors, and with good reason. Bitcoin jumped in price, reaching highs of more than $3,000 earlier this year. Ethereum and Ripple, the second- and third-largest digital ...

and more »

See original here:
How Do You Get Rich Off of a New Cryptocurrency? - Investopedia

Posted in Cryptocurrency | Comments Off on How Do You Get Rich Off of a New Cryptocurrency? – Investopedia

Latest Cryptocurrency Hub: Kazakhstan? – Investopedia

Posted: at 11:52 am


Investopedia
Latest Cryptocurrency Hub: Kazakhstan?
Investopedia
The Kazakhstan government announced this week that its AIFC will partner with the external financial organizations to make for an accommodating regulatory climate to encourage cryptocurrency, blockchain, and fintech companies to settle in the area.

Link:
Latest Cryptocurrency Hub: Kazakhstan? - Investopedia

Posted in Cryptocurrency | Comments Off on Latest Cryptocurrency Hub: Kazakhstan? – Investopedia

Hackers steal $34 million in second Ethereum cryptocurrency theft this week – PC Gamer

Posted: at 11:52 am

Flickr via Doctorow. Click for original.

One of the most popular cryptocurrencies in the world is drawing increased attention from hackers, or at least that has been the case this week. For the second time in a span of just three days, hackers have been able to make off with millions of dollars worth of Ethereum, leaving vigilante white hat hackers scrambling to prevent further theft.

In this latest robbery, the hacking group (or individual hacker, we don't know yet) exploited a vulnerability in Parity, a digital wallet service where cryptocurrency miners can store their Ethereum. In doing so, the hackers were able to swipe over 153,000 Ether worth approximately $34 million from three separate multi-signature Ethereum wallets, according to the most recent estimates.

Following the latest heist, Parity founder Gavin Wood issued a critical security notice to users.

"A vulnerability in Parity Wallet's variant of the standard multi-sig contract has been found," Wood wrote. He goes on to advise users to "immediately move assets contained in the multi-sig wallet to a secure address."

In the meantime, white hat hackers have been able to siphon some 377,015 Ether worth more than $85 million to prevent further loss.

"White hat group(s) were made aware of a vulnerability in a specific version of a commonly used multi-sig contract. This vulnerability was trivial to execute, so they took the necessary action to drain every vulnerable multi-sig they could find as quickly as possible," the White Hat Group stated on Reddit.

Those funds will be issued back to their owners after the group is able to create another multi-sig for each individual with the same settings as before, minus the vulnerability that made theft possible in the first place.

This is not the only black eye for cryptocurrencies, or even the only theft this week. Back on Monday, hackers made off with an estimated $10.3 million in Ethereum currency from CoinDash. In that instance, it is believed the culprits simply replaced the legitimate Ethereum wallet address listed on CoinDesk with one that belonged to them.

There are several other examples of thieves stealing large amounts of cryptocurrencies, as Gizmodo points out. Back in June of last year, hackers stole $53 million cryptocurrency from venture capital fund Decentralized Autonomous Organization. And then there was the situation in which $450 million of Bitcoin vanished from trading hub Mt. Gox a few years ago.

Despite the risks, mining for cryptocurrency continues be popular, much to the detriment of PC gaming. If and when things ever settle down, it will likely be due to plummeting values rather than the fear of theft.

Here is the original post:
Hackers steal $34 million in second Ethereum cryptocurrency theft this week - PC Gamer

Posted in Cryptocurrency | Comments Off on Hackers steal $34 million in second Ethereum cryptocurrency theft this week – PC Gamer

Bitcoin nears record high price after ‘milestone’ in fierce debate over its future – CNBC

Posted: at 11:51 am

The new code update called BIP 91 has been locked in with 93.8 percent of miners showing support for the proposal in the last 24 hours, according to Coin Dance, a site which tracks bitcoin blocks.

It is essentially a software update that miners need to run. So 93.8 percent of miners are signaling their intention to run it.

There will now be a two-day grace period for miners to prepare for the activation of BIP 91. Following that, there will be an adjustment period which could take two weeks. The actual increase of the block size might not take place until November.

And there could be some potential issues. For example, one bitcoin developer Bryan Bishop, said that miners might not upgrade their software, even though they are signaling that they will.

And there is still a bit of caution in the market.

"It's premature to say the worst is over. But we have reached one important milestone down the road in bitcoin scaling. And there are a few more milestones coming up," Bobby Lee, CEO of BTCC, a bitcoin exchange told CNBC by phone on Friday.

See original here:
Bitcoin nears record high price after 'milestone' in fierce debate over its future - CNBC

Posted in Bitcoin | Comments Off on Bitcoin nears record high price after ‘milestone’ in fierce debate over its future – CNBC

Bitcoin is booming because a split in the cryptocurrency has been narrowly averted – Quartz

Posted: at 11:51 am

Bitcoin has risen as much as 28% over the past 24 hours, driven by news that an imminent split in the cryptocurrency has been narrowly averted. The price of bitcoin nearly hit $3,000 late on July 20, within spitting distance of its all-time high, set last month.

The remarkable rally took place as bitcoins miners coalesced around one of several competing proposals that would increase the number of transactions that can be processed on the network. The issue has gained urgency in recent months, because one of the measures, known as Bitcoin Improvement Proposal 148 (BIP 148), would lead to a split in the cryptocurrency on Aug. 1 if implemented.

The price rallied as bitcoins miners began broadcasting their support for a less radical proposal, BIP 91, in increasing numbers yesterday. This proposal avoids the so-called hard fork by stopping short of altering the hard-coded limit on transaction capacities that is the bone of contention within the bitcoin world, while offering slightly enlarged transaction capacity.

The threshold for activating BIP 91 is 80% of all the processing power on the bitcoin network. That was achieved in the early hours of July 21. Currently 97% of the processing power on the network, which is largely controlled by miners, is voting in favor of BIP 91.

But its not settled yet. Although enough miners have signaled support for their preferred proposala process akin to broadcasting a preference over the networkenough of them must now run the software that implements this proposal within the next two and a half days. Failure to maintain a simple majority of the processing power, also called the hash rate, would mean BIP 91 does not activate. This would put the bitcoin world back at square one, with just a week to go before the potentially destabilizing hard fork on Aug. 1.

There are also still signs that the fundamental disagreement that led to this showdowna civil war, as some call itis far from resolved. The fight is between bitcoins miners and the influential programmers who contribute to bitcoins open-source code, known as the core developers. The core devs say bitcoin is at risk of being controlled by a cartel of miners who, by virtue of their huge investments in processing power, are able to dictate what changes are made to the codeanathema to bitcoins decentralized founding ethos. But the miners, and other heavy users, like payment processors, point out that the bitcoin network could be abandoned if it doesnt enlarge its limited capacity soon.

The architect of BIP 91, James Hilliard, a miner himself, told industry publication CoinDesk: This is where mining centralization makes things easier, because I can just message everybody on WeChat and help them if needed. That may be so, but it wont comfort the parts of the bitcoin world concerned with centralization of the cryptocurrency, even if the current fix to bitcoins problems goes according to plan.

Read next: Bitcoins civil war threatens to blow up the cryptocurrency itself

More:
Bitcoin is booming because a split in the cryptocurrency has been narrowly averted - Quartz

Posted in Bitcoin | Comments Off on Bitcoin is booming because a split in the cryptocurrency has been narrowly averted – Quartz