Also, SSL does not make your website secure.

It only means the data in transit between the browser (the person checking your website) and the server (your website) is encrypted.

The only thing about this post that caught my eye was "Special Adviser to the Governor on Religious Matters". .What does this entail? What does this even mean? What qualifications do you need to be an SA on religious matters? Nigeria, I hail!

Confident of your computer hacking skill? Test your skills by applying for the 2017 Capture The Flag (CTF) Hackathon, a fun challenge designed to accommodate all levels of skills and experience.

Organised by NaijaSecCon, team-participants will contend for a total prize money of N200,000 and the opportunity to meet, collaborate, and partner with elite hackers, security researchers, thought leaders, influencers, and technical bigwigs at the NaijaSecCon 2017, a conference scheduled to hold on May 4, 2017 in Lagos. The challenges to be solved by participants include: clientside ownage, web applications, malware analysis, reverse engineering and binary analysis, basic exploit development, basic forensics, and unix forensics.

To register, ensure that you have a 3 – 6 members on your team as there will be a qualification round scheduled to take place online from April 13 – 21, 2017. Only 10 teams will be invited for the final round on May 4, 2017.

To participate, visit http://ctf.naijaseccon.com/

NaijaSecCon '17 - Nigeria's first-of-its-kind cyber-security conference, exclusively focused on technical content delivered by ethical hackers and security experts that will leave you shocked and enlightened.

The session will unveil the latest cyber attacks, techniques and tactics used by today’s hackers and demonstrate ways to protect your networks and critical data. Whether you’re a large corporation or a small business, you should attend this mind-blowing event.

Consequently, the NaijaSecCon17 hosts as part of its maiden Cyber security Conference, a Capture The Flag (CTF) Competition. The CTF competition aims to promote interest in Cyber security and identify individuals and teams with recognition-worthy skills.

Come and See budding and full-fledged Cyber security enthusiasts {n00bs and 3lit3s} race against time to solve challenges and capture flags in our Hackathon, with challenges including, but not limited to Network Security, Programming, Cryptography, Web Application Security, Reverse Engineering and Digital Forensics. It is a battle of wits, skills and humour, to see who would Conquer. The winners go home with a cash prize of N200,000.00 Naira.

How to Take Part

To register for the conference, visit http://naijaseccon.com

To participate in the Ethical Hacking challenge, visit http://ctf.naijaseccon.com/

Time
May 4th, 2017

Sponsorship
To be a sponsor, contact sponsorship@naijaseccon.com

WikiLeaks on Tuesday released what it said is the full hacking capacity of the CIA in a stunning 8,000-plus page disclosure the anti-secrecy website contends is “the largest ever publication of confidential documents on the agency.”

The 8,761 documents and files -- released as “Vault 7 Part 1” and titled “Year Zero” -- were obtained from an “isolated, high-security network” at the CIA’s Center for Cyber Intelligence in Langley, Va., a press release from the website said. The trove had been “circulated among former U.S. government hackers and contractors,” one of whom “recently” gave the archive to WikiLeaks. The CIA allegedly employs more than 5,000 people in its cyber spying operation and had produced more than 1,000 programs as of 2016.

“We do not comment on the authenticity or content of purported intelligence documents," a CIA spokesperson told Fox News.

The collection of purported intelligence documents includes information on CIA-developed malware -- bearing names such as “Assassin” and “Medusa” -- intended to target iPhones, Android phones, smart TVs and Microsoft, Mac and Linux operating systems, among others. An entire unit in the CIA is devoted to inventing programs to hack data from Apple products, according to WikiLeaks.

WIKILEAKS OFFERS REWARD FOR INFO ON OBAMA MISDEEDS

Some of the remote hacking programs can allegedly turn numerous electronic devices into recording and transmitting stations to spy on their targets, with the information then sent back to secret CIA servers. One document appears to show the CIA was trying to “infect” vehicle control systems in cars and trucks for unspecified means.

WikiLeaks hinted that the capabilites revealed in Tuesday's disclosure could have even darker utility than simply spying.

“It would permit the CIA to engage in nearly undetectable assassinations,” the release stated.

“As an example, specific CIA malware revealed in ‘Year Zero’ is able to penetrate, infest and control both the Android phone and iPhone software that runs or has run presidential Twitter accounts,” the WikiLeaks release stated.

The agency allegedly maintains a database of malware created in other nations -- WikiLeaks specifically cites Russia -- in order to disguise its own hacking attempts as the work of another group.

Read more here: http://forums.afrocybersec.com/threads/wikileaks-releases-entire-hacking-capacity-of-the-cia.84/

A severe security vulnerability has been discovered in the CloudFlare content delivery network that has caused big-name websites to expose private session keys and other sensitive data.

CloudFlare, a content delivery network (CDN) and web security provider that helps optimize safety and performance of over 5.5 Million websites on the Internet, is warning its customers of the critical bug that could have exposed a range of sensitive information, including passwords, and cookies and tokens used to authenticate users.

Dubbed Cloudbleed, the nasty flaw is named after the Heartbleed bug that was discovered in 2014, but believed to be worse than Heartbleed.

The vulnerability is so severe that it not only affects websites on the CloudFlare network but affects mobile apps as well.

What exactly is "Cloudbleed," how it works, how are you affected by this bug, and how you can protect yourself? Read more here: http://forums.afrocybersec.com/threads/serious-bug-exposes-sensitive-data-from-millions-sites-sitting-behind-cloudflare.59/

Interestingly, Nairaland runs on Cloudflare. The consequence of this is: potentially Nairaland's traffic which obviously passes through Cloudflare (even https) might be public.

We have broken SHA-1 in practice.

This industry cryptographic hash function standard is used for digital signatures and file integrity verification, and protects a wide spectrum of digital assets, ranging credit card transactions, electronic documents, open-source software repositories and software updates.

It is now practically possible to craft two colliding PDF files and obtain a SHA-1 digital signature on the first PDF file which can also be abused as a valid signature on the second PDF file.

For example, by crafting the two colliding PDF files as two rental agreements with different rent, it is possible to trick someone to create a valid signature for a high-rent contract by having him or her sign a low-rent contract.

Read more here http://forums.afrocybersec.com/threads/sha1-function-is-now-dead.55

CaptainBomb:
Account Number 0030187377- Access Bank-Babalola Olashile Tobi.

Just sent you something.

Will have your sister in prayers.

God Bless

CaptainBomb:
yes sir.. On my way to the island with placard to seek for help.. Over 150k needed for test alone.. I will be @ 1004 side

Please drop your account details asap.

God bless

Just came across your story - Have they given you a fee yet at Luth?

Thinking aloud - I've seen people create web dev/programming forums for Nigerians (Africans at large) and then it packs up after some months.

My questions are :

1. What would be the cause? Lack of Publicity? Zero drive? Lack of "Quality" contributors? Poor business model?

2. What can be done differently?

On a different note - If one was to start a web dev forum today:

1. What PAID "forum software" would you recommend?
2. Is it advisable to have a chatroom feature within a forum (i.e. where members can chat themselves up like the Facebook chat)? Pros? Cons?

Thanks in advance for your contributions.

How did they get this statistics?

Having your website hacked is inevitable.

Yes, you can try to make it quite secure - but then again, there is no such thing as 100% security.

My website once got hacked - no thanks to the outdated wordpress plugins I had.

**deleted

favoured234:


Yes you earn 650K and a room costs about 500K
With your 650K can you marry a wife and keep her in Dubai
Do you have a room of your own or how many of you are sharing a standard room
Be here spitting out the bright side and continue misleading people with huge figures

Lol. Some of us believe that - when we travel, our problems get solved.

Yes, living in dubai might not be all that rosy - but frankly speaking, what do you expect when you come in to a country with just your GCE/WAEC or no cert(s) at all?

You expect to work in an audit firm? Or a bank? Or a Government entity?

Ofcourse not. .Best you can ever end up with is - Receptionist, working in deira as agent/cargo boy, working in sharjah selling spare parts, or in some iron and steel factory in Abudhabi carrying heavy metals and doing menial jobs. Salary ranges from 800aed - 4500aed for this category. I'd say the factory workers get a bit lucky here - as they might earn between 800aed - 1500aed, but their accommodation and feeding gets catered to. Their expenses is practically zero - 800aed to naira is about 90k+ Naira. Are they better off in Nigeria? Maybe/maybe not - to each their own.

Another category are the Nigerians in the real estate firms in Dubai. The salary ranges from 5k aed - 15k aed, but the twist here is - they largely depend on commissions. So if you're lucky enough to sell a unit for your company, then you get a percentage. This market has since crashed since Buhari came in - as the corrupt guys laundering these funds can no longer do so. .

Having said that, some Nigerians do get lucky - especially if you are a specialist in your field - with some years of experience. Once you have something people want. .something unique. .employers will come for you. .and guess what, they won't come with low-ball offers. I know some Nigerians here in Dubai that earn 10kaed monthly, some earn 20k aed, some earn 40k aed, some get free accommodation, return ticket to home country every year etc.

At the end of the day, what applies here in Dubai, applies everywhere else too. You have something valuable to offer potential employers? They come for you. .You have nothing to offer - no show. Nothing ever comes easy.

This is barbaric! Filming your daughter and posting it on the internet.

How is this different from underage pornography?

dhtml18:
Even if I want to send my CV, i don too old (>70yrs) and it is only my BVN that is showing well.

Egbon Tony, oya recommend someone na.

Uncle, how much is this?

Position Summary

This is a 6-months contract job with Hero78 Nigeria Limited and functions may include acting as lead web developer, and lead iOS and/ or Android developer, gathering requirements around functionality and translating those requirements into simple but effective web and mobile solutions, designing mobile user interfaces, developing and maintaining websites, enhancing web/mobile user experience.

Description

Proven working experience in web and mobile programming;
Top-notch programming skills and in-depth knowledge of modern HTML/CSS - and also, Android/iOS SDK.;
Familiarity with at least one of the following programming languages: PHP, ASP . NET, Javascript, JAVA, C or Ruby on Rails;
A solid understanding of how web applications work including security, session management, and best development practices;
Adequate knowledge of relational database systems, Object Oriented Programming and web application development;
Basic knowledge of Search Engine Optimisation process;
Strong organisational skills to juggle multiple tasks within the constraints of timelines and budgets with business acumen;
Ability to work and thrive in a fast-paced environment, learn rapidly and master diverse web technologies and techniques;
Experience building web and mobile applications.


Interested candidates should forward a CV to rotimi at hero78 dot com . Please include links to websites or mobile apps developed by you.

Position Summary

This is a 6-months contract job with Hero78 Nigeria Limited and functions may include acting as lead web developer, and lead iOS and/ or Android developer, gathering requirements around functionality and translating those requirements into simple but effective web and mobile solutions, designing mobile user interfaces, developing and maintaining websites, enhancing web/mobile user experience.

Description

Proven working experience in web and mobile programming;
Top-notch programming skills and in-depth knowledge of modern HTML/CSS - and also, Android/iOS SDK.;
Familiarity with at least one of the following programming languages: PHP, ASP . NET, Javascript, JAVA, C or Ruby on Rails;
A solid understanding of how web applications work including security, session management, and best development practices;
Adequate knowledge of relational database systems, Object Oriented Programming and web application development;
Basic knowledge of Search Engine Optimisation process;
Strong organisational skills to juggle multiple tasks within the constraints of timelines and budgets with business acumen;
Ability to work and thrive in a fast-paced environment, learn rapidly and master diverse web technologies and techniques;
Experience building web and mobile applications.


Interested candidates should forward a CV to rotimi at hero78 dot com . Please include links to websites or mobile apps developed by you.

oracle434:
Oracle Tins

Hey, trying to reach you

guru01:
Website is not mobile friendly.
Challenges are not well explained.
No hint
Web challenge, is the worst at least I should be able to understand that one.

1. The website was a quick hack. .Plus, you are not meant to solve these challenges with your phones.

2. We have someone on the scoreboard with 860 points. .There are no ways to better explain the challenges than what we currently have.

3. Which of the challenges do you need a hint for?

4. The web challenges are pretty much easy. Look at the title of the challenge, check the webpage, the source, etc. .In CTFs, attention to details is key.

oracle434:

It means you can't hack and will never be able to hack...simple!

Hi Oracle, sent you an email.
Cheers.

crotonite:
the tests transcend the processing power of my wobbly gray matter!

Lol. We can go over them. What have you tried so far? (tried not to give obvious hints)

maleeks:
Some seems complex damn!

Which ones have you been able to solve?

Most of them are fairly easy to solve.

The scoreboard as of today

Hey Guys,

We are currently participating in a Capture The Flag ( "CTF" ) contest and we are looking for passionate security enthusiasts (developers, hobbyists, tinkerers, ethical hackers) to join our team.

Do you have what it takes to join a winning team and participate with the world's best IT Security Professionals?

If your answer is yes then display your skills and show what you have got, to earn a place in an Elite team of IT Security professionals.

We have developed challenges and hosted on http://ctf.naijasecforce.com/ to separate the wheat from the chaff. Register now and start going at the challenges.

Once you join our team, we will then participate as a team in a CTF scheduled to hold in July. The winner of the CTF contest will be made to represent Africa in Atlanta, US.

I will be here to respond to your queries.

All the best.

dhtml18:
Oya, where are those boys that use to fumble. And someone should please press the move-to-front-page button.

Hehe. .some programming challenges will come up soon.

We are also looking at developers with an understanding of one or more of these - PHP, Perl, python, Java, C, Assembly language and Reverse engineering.

guru01:
@slyr0x the challenges are not well explain.

Like which ones?

For the cryptography - they are all ciphertexts. .Just decode/decrypt accordingly.

Hey Guys,

We are currently participating in a Capture The Flag ("CTF" contest and we are looking for passionate security enthusiasts (developers, hobbyists, tinkerers, ethical hackers) to join our team.

Do you have what it takes to join a winning team and participate with the world's best IT Security Professionals?

If your answer is yes then display your skills and show what you have got, to earn a place in an Elite team of IT Security professionals.

We have developed challenges and hosted on http://ctf.naijasecforce.com/ to separate the wheat from the chaff. Register now and start going at the challenges.

Once you join our team, we will then participate as a team in a CTF scheduled to hold in July. The winner of the CTF contest will be made to represent Africa in Atlanta, US.

I will be here to respond to your queries.

All the best.

^^I will check that in a bit.

Updated


Lol, Jacob05 , you've got the wrong answer. I ran your code, saw the first 5.088459******* and then assumed you got it right.