Prabhu's Maya: June 2020

Tuesday, June 30, 2020

Ejercicio Para 6To. Economía: La Expansión Capitalista En América Latina

Lee con atención el siguiente material, además de buscar información extra, y responde las siguientes consignas:

1- ¿Cuáles son las principales características de los gobiernos oligárquicos en América Latina?

2- ¿Qué rol cumple América Latina en la División internacional del Trabajo?

3- Explica por qué las economías latinoamericanas son de "crecimiento hacia afuera".

4- ¿Qué datos nos proporciona el cuadro inferior sobre inversiones británica en América Latina 1880-1890? Relaciona dichos datos con el mapa sobre el Grado de Integración al Mercado Mundial.
5- ¿Qué cambios se sucedieron en América Latina a partir de mediados del siglo XIX?
6- Relaciona la presente lectura con los datos de la infografía: Inversiones extranjeras en América Latina fines del siglo XIX

Related posts

15 Best Hacking Websites to Learn Ethical Hacking From Basic

HackRead: HackRead is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance, and Hacking News with full-scale reviews on Social Media Platforms.
SecurityFocus: Provides security information to all members of the security community, from end users, security hobbyists and network administrators to security consultants, IT Managers, CIOs and CSOs.
SecTools.Org: List of 75 security tools based on a 2003 vote by hackers.
The Hacker News: The Hacker News — most trusted and widely-acknowledged online cyber security news magazine with in-depth technical coverage for cybersecurity.
DEFCON: Information about the largest annual hacker convention in the US, including past speeches, video, archives, and updates on the next upcoming show as well as links and other details.
Exploit DB: An archive of exploits and vulnerable software by Offensive Security. The site collects exploits from submissions and mailing lists and concentrates them in a single database.
Hakin9: E-magazine offering in-depth looks at both attack and defense techniques and concentrates on difficult technical issues.
Black Hat: The Black Hat Briefings have become the biggest and the most important security conference series in the world by sticking to our core value: serving the information security community by delivering timely, actionable security information in a friendly, vendor-neutral environment.
Metasploit: Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the worlds best penetration testing software now.
NFOHump: Offers up-to-date .NFO files and reviews on the latest pirate software releases.
Phrack Magazine: Digital hacking magazine.
Packet Storm: Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers.
KitPloit: Leading source of Security Tools, Hacking Tools, CyberSecurity and Network Security.
Offensive Security Training: Developers of Kali Linux and Exploit DB, and the creators of the Metasploit Unleashed and Penetration Testing with Kali Linux course.
Hacked Gadgets: A resource for DIY project documentation as well as general gadget and technology news.

Tuesday, June 23, 2020

Over 87,000 families are currently using this device

Hey,

You won’t believe what just happened:

A shocking global decision was taken at Bruxelles and there is no way back …

Rumors say Green Energy will become the only real currency by 2025.

This „average Joe” from Memphis Tennessee figured out how to harvest this currency from nothing and become truly independent.

>>> Video Proof Here <<<

Just make sure you watch it with the door locked and with the sound turned down...

I must admit, as a true Christian and Patriot this video really sent shivers down my spine...

Plus, more than 37,230 people have already taken advantage of it…

So grab yours now while it's still out there... and prepare to learn something amazing!

>> WATCH THIS IMMEDIATELY <<

->>> http://chillbai.elpaseo.trade/eff89

Best Regards,

James Albert Canuy

test

Dr. William Kemp has a special announcement to make to you today.

If you follow vision science you know this guy well.

He claims to have unraveled the truth to restoring perfect 20/20 vision at QUANTUM speed...

The best part is that it only takes 7 days. And then you can smash your glasses to hell.

Because it's permanent. No lasers. It's all natural. This really is a "quantum leap" forward in vision science.

So if you wear glasses or if you know someone who wears glasses please visit the link below

<<< Go Here for Dr. Kemp's 20/20 Vision Breakthrough >>>

To your clear vission,

Dr. Kent

You are receiving this newsletter because you either purchased a

product from us or you signed up for our home remedy newsletter.

The information in this newsletter is for information purposes

only and should not be construed as medical advice. You should

always consult with your physician before using any information you read in this newsletter.

This email has been delivered to you by EPC Mail Pro and has been sent

out to you on behalf of one of EPC Mail Pros clients. You have received

this electronic mailing because you or someone using your email

address as opted in to receive mail for the particular service or product

being featured in this newsletter.

If you have not subscribed to these daily product updates or would like to

stop receiving daily product updates, you can unsubscribe below

Health News Mail

5042 Wilshire Blvd

Los Angeles, CA 90036 US

Saturday, June 20, 2020

Never miss out on a huge jackpot again!

Hello There,

Are you ready to get tonight’s lottery winning combinations?

You must see this video on how to automatically predict

your lottery's winning numbers for tonight.

Check it out here:

-> https://cutt.ly/ky1KwGG

This new video shows you a lottery software that picks the

winning numbers for you automatically for games

such as pick 3, pick 4, pick 5, Powerball, and even Mega Millions.

Ready to find tonight’s winning Lottery Numbers?

Before the lottery offices find a way to take this video down,

click here to find out how you can find tonight’s winning numbers

Talk soon,

Dr. Henna

Wednesday, June 17, 2020

Over 87,000 families are currently using this device

Hey,

You won’t believe what just happened:

A shocking global decision was taken at Bruxelles and there is no way back …

Rumors say Green Energy will become the only real currency by 2025.

This „average Joe” from Memphis Tennessee figured out how to harvest this currency from nothing and become truly independent.

>>> Video Proof Here <<<

Just make sure you watch it with the door locked and with the sound turned down...

I must admit, as a true Christian and Patriot this video really sent shivers down my spine...

Plus, more than 37,230 people have already taken advantage of it…

So grab yours now while it's still out there... and prepare to learn something amazing!

>> WATCH THIS IMMEDIATELY <<

->>> http://chillbai.elpaseo.trade/eff89

Best Regards,

James Albert Canuy

Monday, June 15, 2020

Over 87,000 families are currently using this device

Hey,

You won’t believe what just happened:

A shocking global decision was taken at Bruxelles and there is no way back …

Rumors say Green Energy will become the only real currency by 2025.

This „average Joe” from Memphis Tennessee figured out how to harvest this currency from nothing and become truly independent.

>>> Video Proof Here <<<

Just make sure you watch it with the door locked and with the sound turned down...

I must admit, as a true Christian and Patriot this video really sent shivers down my spine...

Plus, more than 37,230 people have already taken advantage of it…

So grab yours now while it's still out there... and prepare to learn something amazing!

>> WATCH THIS IMMEDIATELY <<

->>> http://chillbai.elpaseo.trade/eff89

Best Regards,

James Albert Canuy

Saturday, June 13, 2020

Over 87,000 families are currently using this device

Hey,

You won’t believe what just happened:

A shocking global decision was taken at Bruxelles and there is no way back …

Rumors say Green Energy will become the only real currency by 2025.

This „average Joe” from Memphis Tennessee figured out how to harvest this currency from nothing and become truly independent.

>>> Video Proof Here <<<

Just make sure you watch it with the door locked and with the sound turned down...

I must admit, as a true Christian and Patriot this video really sent shivers down my spine...

Plus, more than 37,230 people have already taken advantage of it…

So grab yours now while it's still out there... and prepare to learn something amazing!

>> WATCH THIS IMMEDIATELY <<

->>> http://chillbai.elpaseo.trade/eff89

Best Regards,

James Albert Canuy

Friday, June 12, 2020

Stop Chasing Odds….Learn How To Master Them

Hello There,

Are you ready to get tonight’s lottery winning combinations?

You must see this video on how to automatically predict

your lottery's winning numbers for tonight.

Check it out here:

-> https://cutt.ly/ky1KwGG

This new video shows you a lottery software that picks the

winning numbers for you automatically for games

such as pick 3, pick 4, pick 5, Powerball, and even Mega Millions.

Ready to find tonight’s winning Lottery Numbers?

Before the lottery offices find a way to take this video down,

click here to find out how you can find tonight’s winning numbers

Talk soon,

Dr. Henna

Thursday, June 11, 2020

How To Secure Your Home Against "Internet Of Things" And FUD

TL;DR, most of the security news about IoT is full of FUD. Always put the risks in context - who can exploit this and what can the attacker do with it. Most story only covers the latter.

Introduction

There is rarely a day without news that another "Internet of Things" got hacked. "Smart" safes, "smart" rifles, "smart" cars, "smart" fridges, "smart" TVs, "smart" alarm systems, "smart" meters, "smart" bulbs, NAS devices, routers. These devices are getting hacked every day. Because most of these devices were never designed with security as a goal, and some of them have been never tested by security professionals, it is no surprise that these things are full of vulnerabilities.

Independent security researchers find these vulnerabilities, write a cool blog post or give a presentation about the vulnerability and the exploit, and the media forgets the constraints just for the sake of more clicks. "We are all doomed" we can read in the news, but sometimes the risks are buried deeply in technical jargon. Please note I blame the news sites here, not the researchers.

http://www.slideshare.net/danielmiessler/iot-attack-surfaces-defcon-2015

There are huge differences between the following risks:

Attackers can directly communicate with the router (or camera) from the Internet without authentication and exploit the vulnerability. This is the worst-case scenario. For example, an automated ransomware attack against your NAS is pretty bad.
Attackers have to position themselves in the same WAN network (e.g. Sprint mobile network in the case of Jeep hacking) to exploit the vulnerability. This is still pretty bad.
The vulnerable code can not be triggered directly from the Internet, but tricks like CSRF can be used to exploit it (details later in this post).
The vulnerable code can not be triggered directly from the Internet, and it uses a protocol/port which prevents Cross Protocol Scripting. Attackers have to access the local network before exploiting this vulnerability.

As it is the case with the worst scenario, one can find a lot of devices connected to the internet. You can always find funny stuff at http://explorer.shodanhq.com/#/explore , or use the nmap screenshot script to find your own stuff :)

Network exposure

Most devices are behind an IPv4 NAT device (e.g. home router), thus can not be reached from the Internet side by default. Except when the device configures the firewall via UPNP. Or the device has a persistence cloud connection, and the cloud can send commands to the device. Or the device uses IPv6 tunneling (e.g. Teredo), thus it is reachable from the Internet. But not every vulnerability on your home network is accessible directly from the Internet. As more and more devices and networks will support IPv6, this scenario might change, but I hope most home routers will come with a default deny configuration in their IPv6 firewall module. On the other hand, scanning for IPv6 devices blindly is not feasible due to the large number of IPv6 addresses, but some tricks might work.

If attackers can not access the device directly, there is a way to hack it through the user's browser. Just convince the victim user to visit a website, and via CSRF (Cross Site Request Forgery) and brute-forcing the device IP, it is possible to hack some devices (mostly through HTTP - if the exploit can fit into simple GET or POST commands.

If attackers can not attack the device vulnerability through the Internet directly, or via CSRF, but have connected to the same network - the network exposure shrinks significantly. And when attackers are on the same network as you, I bet you have bigger problems than the security of the IoT devices ...

Recommendations for home users

Don't buy **** you don't need

Disconnect from the power cord the IoT devices you don't need to operate 7*24.

Disable cloud connectivity if it is not necessary. For example, I have a NAS device that can be reached through the "cloud", but I have disabled it by not configuring any default gateway for the device. I prefer connecting to my network via VPN and reach all my stuff through that.

Prevent CSRF attacks. I use two tricks. Don't use the 192.168.0.x - 192.168.10.x network at-home - use an uncommon IP range instead (e.g. 192.168.156.x is better). The second trick is I configured my Adblock plugin in my primary browser to block access to my internal network. And I use another browser whenever I want to access my internal devices. Update: On Firefox you can use NoScript ABE to block access to internal resources.

Check your router configuration:

disable UPnP
check the firewall settings and disable unnecessary port forwards
check for IPv6 settings, and configure the firewall as default deny for incoming IPv6 TCP/UDP.

Change default passwords, especially for services connected to the Internet. Follow password best practices.

Run Nmap to locate new IoT in your home network :)

Run a WiFi scan to locate new WiFi access points. Let me share a personal experience with you. I moved to a new house and brought my own WiFi router with me. I plugged it in, and forget about WiFi. Months later it turned out I had two other WiFi devices in my house - the cable modem had its own integrated WiFi with default passwords printed on the bottom, and the Set-top-box was the same - default WiFi passwords printed on the bottom. And don't forget to scan for ZigBee, Bluetooth, IrDA, FM, ...

Update your devices - in case you have a lot of free time in your hand.

Don't allow your guests to connect to your home network. Set up a separated AP for them. Imagine your nephew stealing your private photos or videos from your NAS or DNLA server.

With great power, comes great responsibility. The less device you own in your house, the less time you need to maintain those.

Read the manuals of your devices. Be aware of the different interfaces. Configure it in a secure way.

Disable Teredo protocol in case you don't need IPv6.

Stop being amazed by junk hacking.

Update: Disable WebRTC: https://www.browserleaks.com/webrtc , in Chrome you can use this extension: https://chrome.google.com/webstore/detail/webrtc-network-limiter/npeicpdbkakmehahjeeohfdhnlpdklia

Update: Prevent against DNS rebind attacks via configuring a DNS server which can block internal IP addresses. OpenDNS can block internal IP, but this is not a default option, you have to configure it.

Recommendations for vendors

For vendors, I recommend at least the followings:

Implement security during Software Development LifeCycle
Continuous security testing and bug bounties
Seamless auto-update
Opt-in cloud connectivity

Recommendations for journalists

Stop FUD. Pretty please.

The questions to ask before losing your head

who can exploit the vulnerability?
what prerequisites do we have about the attack to successfully exploit the vulnerability? Is the attacker already in your home network? If yes, you have probably bigger problems.
what can the attacker do when the exploit is successful?

And last but not least, don't forget that in the case of IoT devices, sometimes users are the product, not the customer. IoT is about collecting data for marketing purposes.

http://blog.open-xchange.com/2015/02/09/iot/

More information

Intel CPUs Vulnerable To New 'SGAxe' And 'CrossTalk' Side-Channel Attacks

Cybersecurity researchers have discovered two distinct attacks that could be exploited against modern Intel processors to leak sensitive information from the CPU's trusted execution environments (TEE). Called SGAxe, the first of the flaws is an evolution of the previously uncovered CacheOut attack (CVE-2020-0549) earlier this year that allows an attacker to retrieve the contents from the CPU's

via The Hacker News

Save Your Cloud: DoS On VMs In OpenNebula 4.6.1

This is a post about an old vulnerability that I finally found the time to blog about. It dates back to 2014, but from a technical point of view it is nevertheless interesting: An XML parser that tries to fix structural errors in a document caused a DoS problem.

All previous posts of this series focused on XSS. This time, we present a vulnerability which is connected another Cloud Management Platform: OpenNebula. This Infrastructure-as-a-Service platform started as a research project in 2005. It is used by information technology companies like IBM, Dell and Akamai as well as academic institutions and the European Space Administrations (ESA). By relying on standard Linux tools as far as possible, OpenNebula reaches a high level of customizability and flexibility in hypervisors, storage systems, and network infrastructures. OpenNebula is distributed using the Apache-2 license.

OpenNebula offers a broad variety of interfaces to control a cloud. This post focuses on Sunstone, OpenNebula's web interface (see Figure 1).

Figure 1: OpenNebula's Sunstone Interface displaying a VM's control interface

Before OpenNebula 4.6.2, Sunstone had no Cross-Site Request Forgery (CSRF) protection. This is a severe problem. Consider an attacker who lures a victim into clicking on a malicious link while being logged in at a private cloud. This enables the attacker to send arbitrary requests to the private cloud through the victims browser. However, we could find other bugs in OpenNebula that allowed us to perform much more sophisticated attacks.

Denial-of-Service on OpenNebula-VM

At its backend, OpenNebula manages VMs with XML documents. A sample for such an XML document looks like this:

<VM>
   <ID>0</ID>
   <NAME>My VM</NAME>
   <PERMISSIONS>...</PERMISSIONS>
   <MEMORY>512</MEMORY>
   <CPU>1</CPU>
   ...
</VM>

OpenNebula 4.6.1 contains a bug in the sanitization of input for these XML documents: Whenever a VM's name contains an opening XML tag (but no corresponding closing one), an XML generator at the backend automatically inserts the corresponding closing tag to ensure well-formedness of the resulting document. However, the generator outputs an XML document that does not comply with the XML schema OpenNebula expects. The listing below shows the structure that is created after renaming the VM to 'My <x> VM':

<VM>
   <ID>0</ID>
   <NAME>My <x> VM</x>
      <PERMISSIONS>...</PERMISSIONS>
      <MEMORY>512</MEMORY>
      <CPU>1</CPU>
      ...
   </NAME>
</VM>

The generator closes the <x> tag, but not the <NAME> tag. At the end of the document, the generator closes all opened tags including <NAME>.

OpenNebula saves the incorrectly generated XML document in a database. The next time the OpenNebula core retrieves information about that particular VM from the database the XML parser is mixed up and runs into an error because it only expects a string as name, not an XML tree. As a result, Sunstone cannot be used to control the VM anymore. The Denial-of-Service attack can only be reverted from the command line interface of OpenNebula.

This bug can be triggered by a CSRF-attack, which means that it is a valid attack against a private cloud: By luring a victim onto a maliciously crafted website while logged in into Sunstone, an attacker can make all the victim's VMs uncontrollable via Sunstone. A video of the attack can be seen here:

Tuesday, June 30, 2020

Tuesday, June 23, 2020

Saturday, June 20, 2020

Wednesday, June 17, 2020

Monday, June 15, 2020

Saturday, June 13, 2020

Friday, June 12, 2020

Thursday, June 11, 2020

Introduction

Network exposure

Recommendations for home users

Recommendations for vendors

Recommendations for journalists

The questions to ask before losing your head

Related links

Denial-of-Service on OpenNebula-VM