Tuesday, August 30, 2011

More chat application

It looks like more companies are releasing messaging and chat application just after BBM fro Blackberry then WhatApps which works in multiple platforms, now I heard that Samsung is releasing it chat application called ChatOn. This application which come preinstalled on the samsung phone and some smart phones running its Badda and Google Android and this will be effective from October onward.

Friday, August 26, 2011

SQl ingection


I am not trying to promote hacking hire but to whether you vulnerable or not. This touches the most those who uses website that have database like SQL server. When someone has an intention of accessing your website using your admin password he/she just do that by using SQL injection which is very easy methods to use.

Steps to use SQL injection
log to any website that has database on use forms.
In the place for administrator type Admin.
In the place for password type x' or 'a'='a
or
In the place for password type x' or 1=1--

After this you migth gain access to website database or you might be required to try more trick and I guess the good hacker won't stop till he/she able to logs in.

Way of protecting your website
The administrator of those website vulnerable to this kinds of hacking can escape fro this by using MySQL escape sting or MySQL real escape string.

Monday, August 8, 2011

Real name policy

In social network the majority use alias names to identify them selves to others as security majors as they afraid of unknown attack from strangers they meet from these site. What if someone write something that is aggressive to others and worth reporting to the police, is it possible to report it using these alias name? I guess not.The real name policy introduced by Google got many people talking and some angry.

 The reason some were angry is that Google has deleted all those who do not follow this policy from using Google+. This policy is for Google+ and it state that the users must use their real First Names and Last Names or else they loose their Google+ account. Though I have not seen the strategy that Google will use to make sure that the name and surname you entered is your real one or not, I think other social site should follow this trend too.

Friday, August 5, 2011

McAfee cyber report was very shoking

A report by McAfee cybersecurity expert couple of day back was very shocking. They reported that they discovered a five year cyber campaign. What shocked the the most is that since 2007, attacker has an access to the UN secretary's computer but nobody ever noticed that which again bring many question about the security of important data at United Nation (UN) computers. I very worried about what they been doing to the information they have been receiving from this computer.

Obvious the number one suspect was China yet no body has proved it. Though I know that there many organisation on the list of these attack but their full access to UN secretary computer leave question for me and I we are pointing fingers to wrong country yet the suspect is out there laughing at us.