LG unveils its new 'G Pay' mobile payment platform

The service could do well in Korea where LG has large market share, but it will be an uphill battle against Apple, Google and Samsung in the U.S.

There are  many other products with the word “Pay” in the name. But that won’t stop LG, which just announced its mobile payment offering called G Pay. 

Add it to the list of formidable foes: Android Pay, Samsung Pay, and of course Apple Pay.

LG made the rumor official Thursday with an announcement on its Facebook page. There could be some room for G Pay in South Korea, where LG has a heavy presence. But in the U.S. it will do battle with Android Pay, which is getting a major push from Google, while Samsung is also trying for attention with its own Samsung Pay. And, increasingly, credit card companies and banks are building mobile payments into their own apps.

At least Samsung’s solution differentiates itself by supporting Magnetic Secure Transmission (MST), which allows you to pay at any terminal with a swipe reader. It picked up the technology when it acquired LoopPay, and supports NFC as well. By all accounts, it appears G Pay will work with the standard NFC model.

The true story: It seems everyone is jumping to the mobile payment System. However, with big giants like Google, Samsung, and Apple already in the ring.

Source

Facebook is working on 'Dislike' button, 

Says Mark Zuckerberg

If you don't Don't like any post, or update on Facebook? don't worry Soon, there will be a button for that.

"Not every moment is a good moment," said Facebook's co-founder and CEO Mark Zuckerberg in a Q&A session at the company's headquarters. He said he realizes people may not want to "like" a current event such as the Syrian refugee crisis or a family member passing away. But he also doesn't want users to merely vote up or down on people's posts.

Ultimately, he said, he hopes to offer users a more expanded way to share their emotional reactions. "It's surprisingly complicated to make an interaction that's that simple," he said.

Website hackers hijack Google webmaster tools to prolong infections

The Google Search Console which was formerly known as the Google Webmaster Tools, is a very useful service for administrators to understand how their websites perform in search results.

In addition to providing analytics about search queries and traffic, it also allows webmasters to submit new content for crawling and to receive alerts when Google detects malware or spam issues on their websites.

That last part is very important, because website infections can quickly lead to lost traffic and reputation. Users who click on links in search results that lead to websites hosting malware or spam will receive scary warnings until those websites are cleaned by their owners.

Google allows more than one person to claim ownership over a website in his or her  own Search Console accounts. That's not unusual because running a website usually involves multiple people. The owner, the site administrator and the search optimization specialist can, and often are, separate individuals and they can all benefit from the Search Console data in their respective roles.

Getting verified as a website owner in the context of the Google Search Console can be done in different ways, but the easiest is to upload an HTML file with a code that's unique for every user into the website's root folder.

However, many of the vulnerabilities that allow attackers to inject malicious code into websites also give them the ability to create rogue files on the underlying Web servers. Therefore, they can use such flaws to verify themselves as new website owners in the Google Search Console by creating the needed HTML files.

Such abuses are actually increasingly common, according to researchers from Web security firm Sucuri, who have seen many webmasters complaining on technical support forums about rogue owners showing up in their Google Search Console.

According to the Sucuri researchers, by becoming verified owners for compromised websites, attackers can track how well their BHSEO campaigns perform in Google Search. They can also submit new spam pages to be indexed faster instead of waiting for them to be discovered naturally by Google's search robots, they can receive alerts if Google flags the websites as compromised, and, most importantly, they can remove legitimate owners of the site from the Search Console.

whenever legitimate website owners receive "new owner" notifications from Google, webmasters should thoroughly investigate them.

"In most cases it means that they had full access to your site, so you should close all the security holes and remove any malicious content that the hackers might have already created on your site," Sinegubko said.

Source

Don't use waterproof Xperia phones underwater, Sony says

Sony Mobile is warning against immersing its waterproof phones in water.

Sony Mobile is changing its stance over its waterproof phones. Apparently, when the company says Xperia phones are waterproof, it just means that if you try to use them underwater you’ll end up with proof that H2O can destroy your phone. Well, not quite—but Sony’s got a lot of explaining to do.

The company was not available for comment at this writing. We’ll update this article should the company respond.

The waterproof explanation page for Sony Mobile Xperia phones now includes the following disclaimer, “Remember not to use the device underwater,” as first noted byXperia Blog. That’s a surprising turnaround considering the company has advertised Xperia waterproof phones with images of people using their phones underwater.

Xperia waterproof phones typically have an IP65/68 rating, which means they are completely resistant to dust, can resist low-pressure water jet spray for at least 3 minutes, and can remain functional after immersion below a minimum 1 meter (3.28 feet) depth.

The problem seems to be that when Sony tested each device to achieve its IP rating the test wasn’t exactly rigorous. “Sony devices that are tested for their waterproof abilities are placed gently inside a container filled with tap water and lowered to a depth of 1.5 meters,” Sony’s waterproof page says. “After 30 minutes in the container, the device is gently taken out and its functions and features are tested.”

In practical terms this means Xperia waterproof phones can stand up to a heavy rainstorm, a non-water immersing web browsing session in the bath, or a run under the bathroom faucet. But all those shots of fun loving people taking videos in lakes and chlorine-laden swimming pools? That's pushing it.

For the most part, however, Sony warns you on the limits of its non-waterproof waterproof phones. Case in point is the company’s Xperia M4 Aqua. Dubbed the “waterproof camera phone for everyone” it has this under the fine print: “You should not put the device completely underwater or expose it to seawater, salt water, chlorinated water, or liquids such as drinks. Abuse and/or improper use of the device will invalidate warranty.”

The impact on you at home: If you have an Xperia waterproof phone you should heed Sony’s warning even if you’ve taken underwater shots with your phone in the past. Should it get damaged during such an excursion, Sony could refuse to help and point to its support materials that warn against taking them into the water. Sure, it has tons of marketing materials encouraging the opposite, but those images aren’t to be taken literally, it seems.

Source

Linux Foundation's Comes up with security tips that can help sysadmins harden workstations

If you use Linux OS, especially as a systems administrator, the Linux Foundation has some security tips to share with you, and they're quite good.

Konstantin Ryabitsev, the Foundation's director of collaborative IT services, published the security checklist that the organization uses to harden the laptops of its remote sysadmins against attacks.

The recommendations aim to balance security decisions with usability and are accompanied by explanations of why they were considered. There are different severity levels: critical, moderate, low and paranoid.

Critical recommendations are those whose implementation should be considered a must-do. They include things like enabling SecureBoot to prevent rootkits or "Evil Maid" attacks, and choosing a Linux distribution that supports native full disk encryption, has timely security updates, provides cryptographic verification of packages and supports Mandatory Access Control (MAC) or Role-Based Access Control (RBAC) mechanisms like SELinux, AppArmor or Grsecurity.

The critical checklist also advises disabling hardware modules with direct full memory access like Firewire or Thunderbolt, filtering all incoming ports and setting up an encrypted backup routine to external storage.

Protecting passwords and cryptographic keys like those used to authenticate over SSH is extremely important, because they are some of the most sought after pieces of information by hackers. 

The Linux Foundation's recommendations include using a password manager, choosing unique passwords for different websites and protecting private keys with strong passphrases.

Recommendations flagged as paranoid are those that have significant security benefits, but which might take some effort to implement or understand. They include running an intrusion detection system and using separate password managers for websites and other types of accounts.

There are many other tips flagged as moderate or low severity that should definitely be considered as well, such as automatic OS updates, disabling the SSH server on the workstation, storing authentication, signing and encryption keys on smartcard devices and putting PGP master keys on removable storage.

When it comes to Web browsing, one of the most common and risky operations that users engage in, the Linux Foundation recommends the use of two separate browsers: Mozilla Firefox with the NoScript, Privacy Badger, HTTPS Everywhere and Certificate Patrol add-ons for work-related sites, and Google Chrome with Privacy Badger and HTTPS Everywhere for everything else.

Following the security tips in the Foundation's document is by no means a guarantee that the system will not get compromised, but it would certainly make the job much harder for attackers.

Ryabitsev said in the document's introduction. "These guidelines are merely a basic set of core safety rules that is neither exhaustive, nor a replacement for experience, vigilance, and common sense.".

Source

Always Endeavour  to stay Secured but not too Secure to be Secured.

Meet WordPress Version 4.3

WordPress  Version 4.3, was released to the public on August 18th, 2015. it was named after jazz musician Billie Holiday,

Features

* Fast previewing changes to Menus in the customizer 

* A new theme template has been added to the Template Hierarchy. 

* Changes to customizer Panels and Sections 

* New customizer Media Controls 

* The Site Icon API is fairly straightforward 

* Site Owners can now manage their site's favicon desktop and mobile.

* Comments are now turned off on pages and custom post types by default.

 And many other Feature. 

Do you think you can be totally secure on the Internet?

AT Defcon , One of The Largest tech Security Conferences of The year, There's No such Thing as Total Security from hackers.

When it comes to being safe from hackers, we could all take steps to do better, recently A Certain Political website was hacked, due to some vulnerabilities caused by carelessness & not putting Proper Security Measures in Place.

The Million Dollar Question Now is:

* What Measure is really safe?

* Do you think you can be totally Secure on the Internet?

The message is that you should always be ready for hack attack of any form, you should carry out routine maintenance, regular update & back up, data loss prevention & recovery measures, and an intrusion detection & prevention system should be put in place. With this measures in place u can be secure to a certain level. but not too secure to stay secured.