Yesterday I wrote about how to recognize and avoid a clickjacking attack that's making the rounds on Facebook. My own daughter at college got hit. She's smart. She immediately wiped out the post it created, but not before I captured handy screenshots to help others recognize and avoid the attack.
Today a new and different attack hit, once again close to home. My wife noticed that several of her friends had posted a link to "Hilarious - 20 reasons you should drop out of school", with a cute and funny picture. She clicked to have a look and encountered a Facebook quiz that started out innocuous but eventually asked for personal information. When it requested permission to access her account she shut it down.
more @ http://blogs.pcmag.com/securitywatch/2010/09/dont_click_anything_on_faceboo.php
Thursday, September 30, 2010
Moving security beyond passwords
Entering your username and password on a standard website gives you access to everything from your email and bank accounts to your favorite social networking site. Your passwords possess a lot of power, so it's critical to keep them from falling into the wrong hands. Unfortunately, we often find that passwords are the weakest link in the security chain. Keeping track of many passwords is a pain, and unfortunately accounts are regularly compromised when passwords are too weak, are reused across websites, or when people are tricked into sharing their password with someone untrustworthy. These are difficult industry problems to solve, and when re-thinking the traditional username/password design, we wanted to do more.
As we explained today on our Google Enterprise Blog, we've developed an option to add two-step verification to Google Apps accounts. When signing in, Google will send a verification code to your phone, or let you generate one yourself using an application on your Android, BlackBerry or iPhone device. Entering this code, in addition to a normal password, gives us a strong indication that the person signing in is actually you. This new feature significantly improves the security of your Google Account, as it requires not only something you know: your username and password, but also something that only you should have: your phone. Even if someone has stolen your password, they'll need more than that to access your account.
more @ http://googleonlinesecurity.blogspot.com/2010/09/moving-security-beyond-passwords.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+GoogleOnlineSecurityBlog+%28Google+Online+Security+Blog%29
As we explained today on our Google Enterprise Blog, we've developed an option to add two-step verification to Google Apps accounts. When signing in, Google will send a verification code to your phone, or let you generate one yourself using an application on your Android, BlackBerry or iPhone device. Entering this code, in addition to a normal password, gives us a strong indication that the person signing in is actually you. This new feature significantly improves the security of your Google Account, as it requires not only something you know: your username and password, but also something that only you should have: your phone. Even if someone has stolen your password, they'll need more than that to access your account.
more @ http://googleonlinesecurity.blogspot.com/2010/09/moving-security-beyond-passwords.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+GoogleOnlineSecurityBlog+%28Google+Online+Security+Blog%29
Friday, September 24, 2010
Wednesday, September 22, 2010
Mac Hacks: 17 AppleScripts To Make Your Life Easier
If you are an experienced professional, chances are you have a good set of tools and a work process that you repeat on a daily basis to handle your work. That’s good; it’s how you become more productive, and become an expert. But with repetitive processes come repetitive mechanical work. Whether it’s opening a file in Photoshop to change the format or adding an iCal to-do item based on an email you received, these little tasks can be streamlined. That’s the purpose of AppleScripts.
AppleScript is a scripting language developed by Apple to help people automate their work processes on the Mac operating system. It accomplishes this by exposing every element of the system’s applications as an object in an extremely simple, English-like language. AppleScript is to the Mac OS as JavaScript is to browsers.
Quite a few AppleScripts are available on the Web, ready for you to use, so you don’t even need to look at their code. This article presents you with 17 of the most useful ones.
If you’re interested in learning this language, here are some good resources to get started:
AppleScript is a scripting language developed by Apple to help people automate their work processes on the Mac operating system. It accomplishes this by exposing every element of the system’s applications as an object in an extremely simple, English-like language. AppleScript is to the Mac OS as JavaScript is to browsers.
Quite a few AppleScripts are available on the Web, ready for you to use, so you don’t even need to look at their code. This article presents you with 17 of the most useful ones.
If you’re interested in learning this language, here are some good resources to get started:
- Official AppleScript Website
Apple’s page on AppleScript. - AppleScript Language Guide
Apple’s in-depth guide to AppleScript. - MacScripter
The greatest AppleScript forum. - Learning AppleScript
Macworld’s article on the fundamentals of writing AppleScripts. - AppleScript Users
AppleScript Mailing List.
How to Jailbreak the Apple iPad
Within within 24 hours after launch, the the iPhone Dev Team (a group of hackers which works to jailbreak Apple products) released a preliminary jailbreak video. Since then, they’ve released a dirt simple way to jailbreak your iPad called Spirit. But why would you want to jailbreak the iPad? We’ll tell you:
Don’t Miss: All of our iPad and iPhone projects
How to Jailbreak the iPad:
When you jailbreak the device, you can run apps that haven’t been approved by Apple.- Download the Spirit Jailbreak Tool (available for both Mac and Windows)
- Jailbreaking the iPad with Spirit is a simple process and takes under 30 seconds.
- Once it’s jailbroken, you’ll run an app called Cydia, a directory of powerful applications.
- If everything goes horribly wrong, there is an undo button to restore your iPad to it’s previous state.
How to: Setup Windows, OS X, and Ubuntu on One Machine
more @ http://hacknmod.com/hack/how-to-setup-windows-os-x-and-ubuntu-on-one-machine/
Hacking Windows Using Linux
Friends on net we found out that many of you are asking for hacking windows using Linux or other operating systems.
So here i m writing the trick which allows you to hack the admin password of windows using linux.
Firstly,Windows is installed on you computer and then you need a live CD of linux,here we will use a live CD of UBUNTU.
Boot from the Live CD and perform the 7 easy step to hack the windows Admin password.
Steps:
1: Install a program called chntpw
Command is: $ sudo apt-get install chntpw
The rpm pakage installed is the packege to change password.
2: After successfully installing chntpw, you have to access the Windows NTFS partition by mounting it and allowing read/write support.
Use Mount system Call.
3: After that, navigate to WINDOWS/system32/config
use cd command to navigate.
4: Once inside the config directory, issue this command:
$ sudo chntpw SAM
Command to reset admin password.
As you are in Linux the security of windows is bypassed and the password can be changed easily.
5: A long display of information will follow.
Just ignore them.
6: Once you are prompted to reset the password, it is recommended to leave the password blank with an asterisk (*).
7: Reboot, with windows and you can now login to Windows with full administrative access.
Linux Quick Hacks
Ascii Character Lister
To list printable characters and their ascii values, do the following:perl -e 'foreach $x (32..126){print "_" . chr($x) . " " . $x . "\n"}' | grep '_\$'To find the ascii code for a specific character (other than the space character, use $ in this example), do this: perl -e 'foreach $x (32..126){print "_" . chr($x) . " " . $x . "\n"}' | grep '_\$'Normal characters don't need and can't use the backslash, so to find the asci value of lower case 'd' you'd do this: perl -e 'foreach $x (32..126){print "_" . chr($x) . " " . $x . "\n"}' | grep '_d'To find the character corresponding to an ascii value, do this (example uses 100 as the ascii value):
perl -e 'foreach $x (32..126){print "_" . chr($x) . " " . $x . "\n"}' | grep ' 100'
Man pages formatted as text
Man pages look great on console screens, but piped to files or to browsers they quickly degenerate into cluttered conglomerations of reverse linefeeds and backspaces designed to simulate "bold" on your console screen. You get rid of the clutter by piping the output of man through thecol command. With no args, col blows off the reverse linefeeds but leaves the backspaces (^H). The command you want (using the ls man page as an example) is:man ls | col -bx > myfile.txtThe preceding command writes the man page to myfile.txt, without backspaces (the -b) and with spaces substituted for tabs (-x).
more @ http://www.troubleshooters.com/linux/quickhacks.htm
Subscribe to:
Posts (Atom)

















































