Technojunkie-Everything about digital world

Hostgator India Hosting Launches

2011-05-24T01:38:00.000-07:00

Hostgator India has launched hosting operation on Indian servers, and promises the same world class hosting services as its US operations. HostGator is one of the 10 largest hosting companies in the world and HostGator India accounts can now be bought at hostgator.in.

This is a big step as big hosting companies recognize the importance of millions of India based sites and the need to diversify their hosting business into India. We got an email from Hostgator offering a free 7 day test / trial account of their shared HostGator India accounts. You can email them to get a beta testing account. This was possibly sent out to current HostGator clients with a billing address in India only.

India Site Owners Advantage

HostGator India will now host your site on servers in India. They have already started an India office at Nashik, Maharashtra which provides 24×7 technical hosting and billing support. This will benefit Indian webmasters and small hosting resellers as their primary working hours will be in India time and you can physically visit the office if needed.

Additionally the latency to the Indian servers from within India and Asia is very low, so you get quick access times leading to quick loading admin/cpanel, faster loading sites with quicker site response time for visitors, without the need for a CDN for your primary Asian traffic.

Hostgator India Plans

The hosting plans and server pricing on hostgator.in are exactly same as US site hostgator.com. However, you will have to pay service tax @ 10.30% extra as required by Indian tax laws.

Right now don’t be surprised to see hosting plans in USD or lack of payment mode by local banks and credit cards, as they will all be integrated soon enough. The wait is over for Hostgator customers in India.

Facebook Scam: Watch the Osama Shoot down video

2011-05-07T03:07:00.000-07:00

Facebook is recently hit by a new scam – Watch the Osama Shoot down video. Most of the Facebook users are aware of such Facebook scams and yet, they click on such links. The recent Osama shoot down incident has attracted attention of major part of internet and Facebookis no option. Scammers have designed a Facebook page which appears to be a link to Osama shoot down video. I recently received a mail saying one of my friends have shared a link on my wall. When I checked the link, I found that it was another Facebook scam of Osama shoot down video.

Facebook Scam- Osama Shoot down video:

If one of your friends falls victim to this Facebook scam, you will see a link like this on your wall post:

Clicking on this Facebook scam link will take you to a Facebook page requesting you to complete a 5 step survey. This survey is nothing but a measure to spread this Facebook scam in all your friends.

If you complete these 5-steps, all your Facebook friends will receive this Facebook spam link on their wall, further spreading the scam. And what more, there is no such Osama shoot down video.

What to do to prevent such Facebook scams???

1. Never ever click on any suspicious link on Facebook. It can be any Facebook Phisher or Facebook scam. Both are meant to harm you.

2. If you have got any update about Facebook scam on your wall post, hit on X button and report it as Spam.

This will prevent you and your friends from falling to such Facebook scams. “Who viewed your profile” was one another recently noticed Facebook scam. There are many such Facebook scams. Make sure that you are not the victim.

Have you faced such Facebook scams before??? Got to share your views about thisOsama shoot down video Facebook scam??? Use our comments section. We are waiting for your views.

How to – Setup Your Own E-mail Server

2011-04-16T13:35:00.000-07:00

What is a Mail Server
You know this. A mail server allows you to receive mails from other mail servers around the internet, provided you create user accounts. It also allows your users to send emails to other mail servers.

For this tutorial, we’ll use a solution that is freeware, and does its job perfect. I’ve been using it for about one year, for my local development in php.

1 Mercury/32 Mail Transport System 4.01a
This one directly from Pegasus Mail, by David Harris

Download

Installation
This one is a little overwhelming, but once you’re done with it, the procedure for configure and get your server running becomes an easy, quick task.
Ill explain the steps carefully. Run the installer and press setup (this is a very simple self-extracting program, that leaves no trace in the registry, so to unistall, you simply remove the created folder in the installation)

Press the button New Installation
Since we wont be using support for Netware Networks, just press the button No Netware Support
Now select the directory where you want to install Mercury (or simply extract the contents, as explained before). Recomended is the standard windows installation path C:\Program Files\Mercury. Press the button Ok, accept this directory
Since the Mercury server can be used along with another mail client by the same company, Pegasus Mail (yes, the name of the company and the email client are the same), it asks you if you want to enable the support for such mail client. For reasons beyond the scope of this tutorial, we will not be using Pegasus Mail, so go ahead and press the button No Pegasus Mail integration
Now it asks you for the directory where it should put the user mailboxes. Just leave it as-is (If you followed the recomended installation path, the it should show C:\Program Files\Mercury\MAIL). Press the button Ok, accept this directory
Now it will ask you what protocol modules do you want to use. Basically, each one is a component in the form of a plugin, that will give you a given functionality. This is basically the core of the application. You can come back later and pick up the modules you want/require when you are more versed in these matters. For the moment just follow my advice to get this up quickly
Select only the modules Mercury S and MercuryP (the first and second ones in the list).
The first one will sit and listen from outside connections (aka when someone sends you an email to your own server), and everytime he receives one, this is put in the spool directory.
The second simply will allow your POP3 client (outlook, thunderbird) to read email in an account in your server.
Now press the button OK, continue installation
Press the button Install MercuryE. This is the module that will handle delivery of mail to outside servers (aka when you send email from your own mail server to someone in yahoo, google, etc…)
Now it should ask you for a domain name. This is your domain name in case you have one (or get one free at some of those free dns services around the net), or your own IP. This one can be either 127.0.0.1 -localhost, for testing purposes only- or your actual IP adress assigned by your ISP (e.g 200.197.167.92).
The other field, postmaster, is simply what could be considered as the username in your machine that will act as the postmaster for the server, or what it is the same; the user who will get problem reports. Just use anything for the time being
This is an example figure. We will use your ISP assigned IP, so that you can test this with an online connection, and in case you dont have a domain name. In the postmaster field, you can leave &amp;amp;amp;amp;amp;quot;Admin&amp;amp;amp;amp;amp;quot; which is the default, if you want to.
Now press the button OK, continue installation, and we are ready to move on
In this step, you will be asked about the relay controls. When you become familiar with relaying, you can chose the one that fits your needs. But for the moment, just press the button None
Now its time to choose the Queue directory. Again, it should by default C:\Program Files\Mercury\QUEUE, then leave it as-is, and press the button OK, continue installation
We are set. This is -at last - the final step. So go ahead and press that button Install Mercury/32 to stop the suffering
Now, as a the worthless note ever, press the Exit button to close the installer

Configuration
This is an easy step, compared with the installation process, believe me. So you can just relax, follow my instructions confortably, and you should have your server up and running in no time from this point.

So, run the server, which should have a submenu in the start menu, called Mercury for Win32; then pick up the item Mercury Loader
Now you should be presented with a window like this one, which is basically the control center of theapplication through the menus. You can see also 3 windows if you follow the instructions to the letter, each one represents respectively the Core Process that is the main module, and the POP3 and SMTP servers.

So, the next part if to create user accounts. Lets create one for this example. Go to Configuration-&amp;amp;amp;amp;amp;gt; Manage local users…, then press the button Add, and enter the detailsas required, like in the picture

Now press the button Ok and close the other window if you want to. And as you can see, now we have created the mail account billgates@200.197.167.92

There are two last things to do.
Go to Configuration-&amp;amp;amp;amp;amp;gt;MercuryP POP3 Server, and simply fill in the field IP interface to use, in the case you’re using an IP and not a DNS.
So in the sample case we’ve been following around, this field needs to be filled up

Now do the same for Configuration-&amp;amp;amp;amp;amp;gt;Mercury SMTP Server; i.e fill the field IP interface to use

Now all its left to do is to configure your mail client to be able to read/send mails using your newly created server and a user account.

Extra Configuration
What? There’s more?. Yep. In this section we will deal with two possible scenarios.

Scenario 1: Dynamic IP Address
Ok. What is a dynamic IP Address? Well, all dial-up users like myself, and some broadband ones, have what is known as a dynamic IP address asignation schema, which in plain english means you will have a different IP address every single time you connect to internet. This sucks. I know.
So, as you can see, we went through each of the installation/configuration steps pretending to have an example IP address, but everytime you connect to the internet, changes must be issued in order to update your mail server configuration.
Is there any solution for this? Yes. Check out the Help section at the end of this tutorial. For the time being, lets go over the wonders of Dynamic IP Addresses…
The first thing that needs to be done, is to update the corresponding values in the fields IP interface to use, revised in the last two images above.
So lets pretend your IP address is 200.197.167.92, but next time you connect to the internet your ISP assigns you a new one: 200.197.167.73

The next changes are located at Configuration-&amp;amp;amp;amp;amp;gt;Mercury core module….
First one is on the tab General. Just change the field Internet name for this system accordingly

Now go to the tab Local Domains, select the second item, press the button Change entry, and enter the new value

Thats it. This needs to be done every single time you connect to the internet. Painfull I know

Scenario 2: Domain Name
So, you are a lucky one, and own a domain name. Domain names are basically ways for us human beings to remember internet directions easily. If I told you go to 64.233.187.99 that wouldnt make much sense isnt it? So, go ahead and type that in your browser URL bar. What show up in the screen? Thats right, our beloved google. Which means that IP address is google address, and www.google.com is simply google’s domain name.
Again, if you dont own a domain name and would like to have one, read the help section at the end.

Ok, so you have your own domain name, do you have to make all the &amp;amp;amp;amp;amp;quot;difficult&amp;amp;amp;amp;amp;quot; configuration stuff in the last subsection? Of course not. You wont have to change anything at all once you have configured the basics of your mail server.
Since it easier to explain how to install the mail server when you have a domain name, instead of showing you the changes required to use a domain name rather than an IP, go ahead and delete the folder C:\Program Files\Mercury, in case you already installed mercury and followed the instructions for using an IP
No worries here, all aforementioned installation steps apply, with some minor differences. We will be using the example domain name www.billyboy.com

Step 8: Put your own domain name in the adecuate field
So the first two changes look like this

There is though one little thing to change when using a domain name. In order for the outside delivery to work, we need to add a valid dns lookup server (i.e so that you wont get an unresolved error for gmail.com, hotmail.com, etc…). So, we fill in the field Identify Myself As: in Configuration-&amp;amp;amp;amp;amp;gt;MercuryE SMTP Client

2.1 Outlook (Mail Client)
Since Outlook is very popular, and is bundled in M$ products, such as Office, Ill explain the configuration. Its really simple, so hopefully there’s no much to explain.

Thats it. Basically, your account properties should look like that, in the case you’re using a domain name, otherwise just fill in the IP

We’re done here. Now you should be able to send/receive emails (thanks to the POP3 module) through your own server in outlook.

What makes Gmail better than its competitors

2011-04-15T04:31:00.000-07:00

As someone who spends an inordinate amount of time wading through e-mails, finding the best e-mail service is paramount in my life.

Realizing that, I've done my fair share of shuffling from one e-mail program to the next--trying to find the best service that not only offers speed and stability, but also reliability and spam control. And although e-mail services are getting better, it's abundantly clear that few offer the kind of experience I'm really looking for in an e-mail client. But Google's Gmail app is different. It's better than its competition on a number of levels and provides the kind of e-mail experience that's simply unrivaled online.

Spam, Spam, Spam

I've used practically every e-mail service on the Web and I can say, without a doubt, that Gmail blocks the most spam. To those who open a new account, spam may not be a serious concern. Your spam folder will likely remain empty for a while until your new e-mail address makes its way into the wild. But for my e-mail address, which is widely available and easily attainable, spam is a constant headache.

On services like Yahoo Mail, Windows Live Hotmail, and AOL Mail, the spam blocker tried but failed on too many occasions. In fact, dealing with spam in my already bloated in-box was a daily occurrence that got worse as more messages piled up. But Gmail is different. Right now, I have thousands of messages sitting in my spam folder that never made their way to my in-box. Even better, I can say with all honesty that I only see about two or three spam messages per day in my in-box--not perfect, but much better than anything the competition is offering.

Google Apps

Maybe it's not fair to compare e-mail clients on the basis of additional apps, but I'll do it anyway. After all, Google is competing with the likes of Yahoo and AOL--two major Web companies--and I don't see why these two can't release apps that provide an even greater value proposition to users.

There's something so appealing about receiving an e-mail from someone who attached a Word document or Excel spreadsheet and being given the option to open that attachment in Google Docs. And being able to switch to Google Calendar and Reader from Gmail cuts down on time spent on managing my day. Maybe that functionality appeals to me because I prefer using apps like Google Calendar and Reader to keep me organized and "in the know", but I honestly can't see myself using another e-mail client knowing how invested I am in other Google apps. Suffice to say that my affinity for Gmail stretches beyond e-mail.

Filters

Gmail's filter feature is the best in the business. Period. Unlike its competitors, which try to provide a filter tool that simply re-routes incoming messages, Gmail delivers a power user's dream. In a matter of seconds, you can create a filter that searches through all incoming mail looking for specific people or keywords and once found, immediately categorizes it into a specific folder, forwards it on to someone else, or moves it to the trash, to name just a few functions.

With the help of Filters, using Gmail becomes an even more rewarding experience. Gone are the days of spending big chunks of your time attempting to find just one e-mail that's lost in a collection of thousands. Other e-mail services try desperately to provide the same kind of filter features, but they fall flat. In my experience, messages are either missed, the filter has performs the wrong function, or simply not ends up not working. In fact, Yahoo Mail's filter feature works only in its Classic e-mail app and according to the company, won't be available in the new interface until it's done "tweaking the Yahoo! Mail Filters option." Yikes.

Annoying ads

Anyone who has used Yahoo Mail, AOL Mail, or Windows Live Hotmail knows all too well that the annoying ads are in abundance. But when you load up Gmail, it's an entirely different story.

Sure, there are ads on Gmail, but unlike the other services, they're not intrusive in any way. I never notice them when I'm working with the program, but when I load up Yahoo Mail or try out Hotmail, I'm inundated with ugly display ads that reduce the service's screen real estate and generally take away from the experience. Granted, ads don't have any impact on the viability of an e-mail service, but doesn't it stand to reason that if you're not forced to look at blinking ads while working in your e-mail, you'll be a happier user?

I certainly think so.

Conversation Displays

I realize there are many people out there who enjoy the "classic" style of displaying e-mails based on their arrival, but I'm not one of them. I like that Gmail groups an entire e-mail conversation into one and forgoes the use of individual strands. The latter strikes me as outdated and useless today in a world of constant e-mail communication.

That said, I realize my opinion isn't the most popular. Yahoo and AOL Mail are more popular than Gmail and each employs the "old" display style, suggesting that users prefer that over Gmail's style. But I think that's more of a reaction to what users know than to what they would like. In fact, I'm willing to bet that if those people were forced to use Gmail for a week, the vast majority would dump Yahoo or AOL in favor of Google's client as soon as a flurry of e-mails between two parties broke out and they needed to go back to find a particular message. Finding that message couldn't be easier in Gmail.

Settling Differences

2011-03-29T23:57:00.000-07:00

Any Linux geek would tell you Linux thrashes Windows in more ways than one. But does it? And why? What makes a system better than another? At this stage, are they even different at all?

If there were no Windows vs. Linux battles, the geek life would have been notably duller. Technology forums would inevitably get boring, and life would generally never be the same. The most contentious issue, of course, is security—Windows is notorious for not having much in that department. However, Vista is loaded with a bunch of new security measures, and claims to be able to thwart malicious software better. What makes an operating system more secure? The way it’s built, of course. And that is the question we’re asking. But first, some myth-busting.

Popularity Contest

The favourite theory to explain the low number of viruses (or Trojans, or other such malicious code, for that matter) that exist for Linux is that it’s not popular enough—they say that if you turned the tables and made Linux the world’s most used OS, you’d find just as many malicious programs for it as you do for Windows now.

There is some logic to both the statements, but here’s what the Linux community usually comes back with: nearly half of the world’s Web sites run on Apache, either on Linux or a BSD. Since this is obviously the most popular platform, there’s plenty of incentive for hackers to spend their time taking it down—and yet, you don’t see Apache’s vulnerabilities in the news as much as you see those of Microsoft’s IIS. Not that the hackers aren’t trying to take down Apache servers— they’re just not having as much success with it as they are with IIS servers.

All this is very leading, but it really doesn’t say anything. IIS servers are often taken down by exploiting vulnerabilities in Windows (an unfortunate side-effect of Windows’ integration with its software; more on this later), and not necessarily in IIS itself. Secondly, while the Netcraft list of sites with the longest uptime is dominated by Apache servers, there’s no information on the actual availability of the servers—they could have been under a DDoS attack for half that uptime, but as long as they haven’t rebooted, they’re on the list.

Bottom line: there is no bottom line. For every (seemingly) logical statement, there exists an equally logical retort. We could write the arguments and counter-arguments for twenty pages if we felt like it, and you still won’t walk away with a definite conclusion. Let’s just move on.

Your OS And You

The biggest security breaches occur when malware is allowed to run with on your system with elevated privileges—which means that it has access to critical programs and data that only your system’s kernel should have. Once it’s reached that level, your PC becomes its humble servant, and can be brought down at the slightest whim. Who gives this malware its privileges? Well, you do.

With Windows XP, the person who installs the operating system becomes the Administrator, so if you’re the only one using your PC, you’ve got the privileges to wreak all sorts of havoc, should you choose to. Consequently, any application you install and run is also accorded the same royal treatment, no questions asked. Now add to that the fact that Windows’ system services run under a user account called SYSTEM (you can check this out in the Task Manager)— the most powerful account on your system, with access to everything critical—and that the first processes that malicious programs hijack are system services. You’ll be drawing pretty accurate conclusions by now...

Vista, thankfully, changes this. The user who installs Vista is still part of the Administrators group, but even this administrator runs with regular, limited privileges. When administrative tasks—including installing new programs—need performing, User Account Control (UAC) kicks in, telling you that you need to give the task a go-ahead before it, well, goes ahead. If you read the UAC prompt and don’t know the program it’s warning you about, you can prevent it from running. But what if you’ve blindly allowed the task to continue?

Unlike XP, malware has little or nothing to gain from hijacking a system service in Vista— instead of giving services unlimited rights like before, Vista runs them with low privileges, giving them access only to critical files and Registry entries that they need; each service is given a Security ID (SID), which it uses to request permission to these objects. Consider this scenario in XP: a virus has hijacked your system’s innocuous Plug-and-Play service and has acquired its privileges. One of the first things viruses do is disable the anti-virus so they can continue their reign of terror uninterrupted. Since the virus can now do anything to your system, it’ll be allowed to kill the anti-virus service, corrupt the virus definitions, modify its Registry entries and much more. In Vista, if this same virus manages to attack the service, all damage is restricted to the service and its domain—you won’t necessarily be happy, but you won’t be feeling silly, either.

Windows Vista basically accomplishes what Linux has been doing for a long time—ensure that regular users don’t have access to critical operating system files and services; they don’t even have access to files owned by each other! The all-powerful root account is never used, and in Ubuntu, it’s actually disabled: you’re expected to use the “sudo” command (or gksu for GNOME applications) and enter your password to execute commands that affect the system in general. Unless you deliberately use these commands to run a suspicious executable, the worst it can do is affect the files you have access to. Even if, for whatever inexplicable reason, you do decide to run a malicious script with sudo, your services are still safe...

Services in Linux run as separate users, with access only to files that they own; more often than not, they don’t even have the rights to use the terminal, so they can’t run commands or start other services. This is where the multi-user approach comes handy again— since users are isolated from each other, services can’t access the data used by other services. The Apache server, for instance, runs as a user called www-data, which only has access to the Web pages it serves. If a hacker exploits an Apache vulnerability to get into the www-data user account, he can’t really do much to the other services, because www-data doesn’t own those files. He can, however, mess with Web pages, so while this isn’t a doomsday scenario, it’s certainly not ideal.

You’ve probably noticed the parallels between the two operating systems by now—for your use at home, both systems are quite secure. Unfortunately, they both have one critical flaw: PEBKAC—Problem Exists Between Keyboard And Chair. No operating system can plan for human ignorance—Vista, unfortunately, allows you to disable UAC (and it’s annoying enough for you to want to), and even then, it can’t guard against people who click OK without realising what they’re doing. Linux developers do all they can to ensure that you never feel the need to use the root account, but there’s always the daredevil who can’t resist. If you keep your head on your shoulders and read what’s on your screen, your PC will be as secure as you want it to be.

True, there are more people working on Windows viruses than Linux, but popularity isn’t all that makes Windows popular with the hacker community...

Package Deal

Unfortunately, the thing we love about Windows is also its undoing. Windows is designed as a single unit, so a lot of features (or modules, depending on what you’re looking at) are integrated into the core of the system, even though they don’t need to—IE and Outlook Express immediately spring to mind. Remember the Windows 98 + IE4 combination, when you couldn’t tell where the OS ended and the browser began?

The upside to this approach is a smooth, hassle-free user experience—all these programs get a little extra love from the OS kernel, so they’ll inevitably perform better than thirdparty programs. The downside—which we see often enough—is that any vulnerability in these programs can potentially bring down the entire system. This is why you hear of vulnerabilities in IE and Office letting hackers gain control over Windows PCs. In fact, in Windows XP, even the graphics engine that draws windows on your screen runs in this privileged space, so if your graphics freeze, your only option is to reset your system.

Linux, on the other hand, is designed to be modular. Only the most essential components of the operating system are integrated into its core—the rest are loaded only when needed, and don’t have access to critical system files. A vulnerability in Apache, for example, stays in Apache. The Linux we’re talking about here is the core OS, and not the Desktop Environments, mind you. GNOME and KDE may not integrate with the Linux kernel, but within themselves, they are quite integrated. The disadvantage is the same as for Windows—if one component of GNOME fails, the Desktop Environment fails, taking all the applications running in it down. However, the OS kernel isn’t affected, so all you have to do is a simple [Ctrl] + [Alt] + [Backspace], which ends your GNOME / KDE session and lets you log in to your system again.

This is where Linux (and UNIX, and the BSDs) clearly take the lead in terms of security. It may not feel as nice as Windows while you’re using it, but it won’t let something silly like a flaw in a text editor take it down, either.

Endgame

So really, which is better? Let’s look at it step by step, starting with the potential for malicious software to enter your PC. Both systems are on equal footing here—malicious software getting into your PC is usually your fault (assuming you don’t have security software installed). Step two: malicious software does get into your PC; what is the scope of the damage it can do? Again, with both Linux and Vista, damage caused by malware is restricted to the service it exploits, and the files that the service can access. So far, so good. Finally, step three: what happens when the malware goes about its dirty deed? With Vista, if a critical service—like the Remote Procedure Call (RPC) service—is compromised, all manners of chaos may ensue. Every application under Windows needs to use RPC, so you’re sunk without it. With Linux, services aren’t as tightly integrated with the OS, so while your Linux PC can be crippled—some applications won’t run, you may not have network access and so on—the kernel is still safe, which means that with a little root wizardry, it can be brought back to life again.

Bottom line: for daily desktop use, both systems are equally secure—but if things do go wrong, they go more wrong with Windows.

Tips to stay safe online

2011-03-29T06:45:00.001-07:00

If you missed out on the list of security features to identify a trustworthy web site, have a look at this quick checklist.
1. Avoid following links when it comes to shopping online. Always key in your own URL. It is better not to follow search engines when it comes to transacting online.

2. Never share any personal or fi nancial information on a non-secure web site.

3. Always personally verify email pleas to donate or plans of earning a quick fortune (even if it be from a known person).

4. Always ensure your transactions occur with an encrypted connection.

5. Look out for a golden lock on the bottom of the screen, and https: in the address bar.

6. When online users equipped with current versions of Internet Explorer, Firefox, Safari, Google Chrome, Opera and other browsers visit a site protected by EV SSL Certifi cates, the top address bar turns green and displays the name of the company operating the web site. This green bar offers immediate reassurance that they’ve reached a site whose authenticity has been verifi ed by a certifi cate authority such as VeriSign, the world’s leading EV SSL certifi cate provider.

7. Never respond to emails of urgency. They’re usually phishing.

8. Block all spam emails you receive.

9. Regularly login to your online banking accounts to check for any suspicious activity.

10. Do not sync your financial passwords with your regular email passwords.

11. When using a public computer, restrict browsing to information-only web sites such as news sites. Avoid accessing any e-banking, e-brokerage, e-commerce web sites that require you to divulge personal information such as usernames or passwords.

12. Never store usernames and passwords in Internet Explorer

13. Use an up-to-date anti-virus program, and ask the cyber cafe attendant on a public computer to check the toolbar to ensure it is safe.

14. Always logout from transactional web sites to be sure your safety will not be compromised after you have left the system.

15. Finally, clear browsing history and cookies after your session.

Featuring Facebook

2011-03-20T05:13:00.000-07:00

Social networking web sites such as Facebook aren’t always about wasting your time. There’s a lot you can do with it. There are apps from games to professional utilities – all at one place...

A significant shift has occurred in social networking trends among the Indian youth over the last one year: almost everybody who ever had an Orkut account now has one on Facebook – and few have even opted out of Orkut altogether. Over the last four months, the number of active users of Facebook has more than doubled and July 2009 saw more than 3.2 million Indian users. Comscore, the internet marketing and research company, says 68.2 per cent of the time spent by Indians on social networking, was spent on Orkut. But just ask your friends and family about which hangout they prefer while on the net and you’ll probably find the Comscore results surprising. Let’s face it: for a growing number of Indians, Facebook is the new Orkut.

One reason for Facebook’s growing popularity is its aggressive marketing strategy. Facebook has ensured it stays visible in the media through tie-ups with various major companies such as Aircel for mobile internet services, Vodafone (and their ZooZoos) for free access to Facebook – with all its pokes, updates and egg sending – on your cell phone, and Viacom’s MTV (India) for ‘Celebrity Connect’ – finding out which celebs you resemble. Its failed attempt to buy Twitter, and the recent acquisition of FriendFeed – has also helped to keep it in the public eye.

The other reason is that it’s packed with dozens of unique features, an immensely interactive, instantly gratifying and deeply interesting range of applications (or ‘apps’), and surprising tweaks that let you have fun while being in constant touch with your friends and family. Let’s take a peek at a few of the things that you could do on (and with) Facebook to bring the ‘social’ back into your network and to make it more exciting, entertaining and cool.

Applications

Log in to Facebook.com and take a good look at the bottom left corner of the screen. You can’t miss that little button on the toolbar, which says f applications. On the f applications toolbar, click on the link that says ‘Browse More Applications’. This will open up a Pandora’s box of applications for you to choose from.

Games

We’ll start this quick tour of applications with a look at three of the most happening games on the Facebook site, in order of popularity.

Farmville:

While about 62 per cent of the Indian population is actually employed in the agricultural sector, all of a sudden, the population of virtual farmers has boomed, thanks to Farmville. This online game in which anyone can set up and cultivate his/ her own virtual farm has nearly 35 million users and is definitely the most popular game on Facebook. Developed by Zynga, San Francisco, it allows you to become an online farmer – plant, grow, harvest and sell crops, buy or breed livestock – to earn ‘coin income’. Each crop requires a few hours to grow (Tomatoes need eight hours, Raspberries need two, sunflowers need 23 and so on) and each give you an XP (short for experience).

The more crops and trees you plant, the more experience you earn. Farmers can invite other Facebook friends to become neighbours and send special gifts according to the level. Access to which crops you can grow depends on the number of points you’ve got – and therefore, which level you’ve reached in the game – pineapple seeds, for example, are only available to you once you reach level 15 (Professor of Agriculture) having gathered 4,500 points

Mafia Wars:

This is a multiplayer browser game that’s on MySpace and Tagged as well but has an incredible 23,367,984 monthly active users (and growing) on Facebook alone. This is another hit game by Zynga, but unlike the slow, domestic space of Farmville, it encourages you to loot, rob, kill and create an Al Capone like empire. Set in New York City, Little Italy or Cub, players must choose a character, do jobs to earn cash, build a gang by recruiting members and fight other mafia conglomerates – all with limited stamina, energy and health

As in Farmville, you can ‘level up’ by getting more points and gaining XP by doing more jobs. As you rise up in levels, you are rewarded with access to new features, new weapons and new jobs.

MindJolt Games:

More than 50 games clamour for your attention on the MindJolt Games application. Prevent balls from reaching the bottom, break up brick walls, play pool, destroy balls in combinations of three – there are innumerable options to choose from. If you get bored of getting shot up in Mafia Wars, turn to MindJolt for several hours of unlimited gaming pleasure. There are other funky hangout games like Yoville and Living Social, which let you interact with friends and contacts in entertaining ways. Don’t forget to check out Pet Society, another game application that contains plenty of games and decorations to play around with.

Utilities

Here’s a list of some useful application in Facebook:

NewsCloud:

This is a social news application which allows you to discuss socially relevant issues, aimed at gaining solidarity for particular endeavours and movements. You can vote, read, submit or comment on stories right from your Facebook account. Every story you post earns 10 points, a vote gets you 5 points and sharing a story or inviting a friend gets you 25 points each. Newsfeeds are a part of this application. You can also access videos from reliable news sources here.

App Builder:

About 5,00,000 people have used this one. This is the most interactive application on Facebook which gives every user a chance to feel like genius. If you’ve got a great idea and you think people will like it, just transform it into an application, sit back and watch how you can change the world using Facebook.

Files:

This is a storage service from Box.net that allows you to upload and store files directly from their profile. Although it’s just 1 GB and doesn’t even compare with remote storage facilities like MSN’s Skydrive, this is useful if you want to display these files on your profile. Friends can then download these files. This is really easy to use, but these files are visible to all your Facebook friends and you may not really want everyone to see them.

Pixlr Editor:

Pixlr is a free, Firefox-powered online photo editor. Whether you want to upload new photos or edit older ones, Pixlr is an excellent application to help you through the process. Anyone who’s accustomed to Photoshop or Paintshop will find the interface smooth sailing. Alternatively, you could use the Pixlr Express to crop, resize and juggle photos around with ease.

DandyID:

With accounts on services such as Twitter, Flickr and MySpace, and more or less the same set of friends on the list – and you’re getting bugged with the repeated logins and updates. DandyID has the answer to your woes. This is an application that will synch all your accounts and display them on your Facebook profile.

Positive Thoughts:

Send a positive thought to each of your friends every morning using the Positive Thoughts application and make their day. While not all of them are in English, they’re all deep, philosophical, bright and cheery. Try it out and get cheered up yourself when your Facebook friends write in to thank you.

Business

Social networking gives you access to all your contacts. Although not comprehensive, here’s a list of business applications on Facebook that can fire up your business and ensure better brand recall without the prohibitive expenses of an advertising campaign.

Promotions:

Facebook Fan Pages are full of potential customers who stay online for prolonged periods on the site discussing everything about their favourites. Any agency or company could cash in on this by putting their advertisements on the fan page.

Promotions for Fan Pages lets you do just that. You could use it to create and launch marketing campaigns in a few minutes using the simple, user-friendly interface of this application. These must be interactive and in the nature of lotteries, contests, coupons and discount tickets. Lately, Facebook has begun to scrutinise these – especially the promo-quizzer – and are set on shutting any agencies that appear to abuse this feature.

Tag Biz Pro Business Cards:

Use Tag Biz Pro to create a life-like business card form a whole range of features to set up a business network on Facebook. You can attach your business ‘card’ to all your Facebook messages and pick a keyword which is then displayed in a business keyword tag on your profile page. SlideShare: Now you can hook up your favourite presentation- swapping web site to Facebook in such a way that it automatically uploads to SlideShare, Facebook and LinkedIn at the same time. And it’s not just for your presentations. The site supports PPT, PPS, PPTX, ODP, PDF, DOC, DOCX, ODT, Keynote, iWork pages and even allows you to embed YouTube videos on your profile page. This could be of great help if you want to exhibit the unique selling points of your business enterprise or you want to showcase your own skills.

InSide Job:

This application helps you to find and communicate with Facebook users based on their old job, where they had their last interview, or who they are currently working with. You can then get the inside information about these companies and make an informed opinion about a prospective employer. You can also find the right employee, find a job or advertise a vacancy in your firm.

Memorable Web Addresses:

Here’s an application that’s so useful that one wonders why no one thought of it before. It’s a free application that allows you to create a direct link to your Facebook profile page, choosing a name of your choice. So you could create a link such as http://profile. to/YourName/ or even www. profile.to/YourName, thus making it easier for friends or contacts to search and finds your profile with just a few clicks. Only thing is that you’ll need to hurry because this has been catching on and already has more than a million users.

Wildfire:

This application allows companies to conduct marketing campaigns on Facebook for as less as $5 and as much as $250. It encourages users to visit your Facebook page, interact with it and then share the results with your friends, leading to even more publicity for your brand.

Entertainment

Anybody who’s using Facebook knows about the apps that are most entertaining like iLike and SuperPoke. We’ve listed some of the popular and some not so well-known entertaining applications that can make life with Facebook more colourful.

Music by iLike:

This one allows you to add a music tab to your profile, create and share playlists with your friends, receive concert updates, and participate in DJ contests. It’s already got about 10 million users so don’t hang back. Bumper Sticker: An incredible range of typical bumper sticker blurbs abound in the Bumper Sticker application which allows you to view, share and use stickers on your profile and those of others. These are virtual stickers that range from the comic to the bizarre. A must-have application.

Caricature:

Choose a picture of your friend, apply the kind of treatment you’d like to give it, and there, you’ve got a caricature. You could post it on his wall or share it around with friends. There are a couple of other applications, which do the same thing (like Get My Caricature), and you could try those too. The effects are pretty hilarious at times and you could add this application just for kicks. Just be careful what pictures you choose to make a caricature out of unless you don’t mind getting your kicks in the real world too.

Sketch Me:

For more sober representations, opt for Sketch Me. You can choose how dark you’d like your sketch to be and then publish it for your friends.

Flixster:

Flixster allows you to check out who likes the same kinds of movies among friends, post and read reviews of the latest movies, find new movies that you’d never have heard about otherwise and check your knowledge of movies.

Quizzes:

People just can’t stop taking quizzes on Facebook. These quizzes range from being sensible to funny. You can spend years answering all the different quizzes created by users. Add this application to find out which Sex and the City character you are, whether you resemble Maya Sarabhai or Sahil Sarabhai more, who you were in your past life, etc. – there are too many to cover here. If you’re really busy, skip this one. On the other hand, if you want to act busy at your computer, this is the one for you.

My Plans:

Organising a party or get together is usually dependent on innumerable calls to friends or family and often, by the time you end up making a concrete plan either your cell phone battery has run out or you’ve used up all your talk time. Try My Plans on Facebook that allows you to notify, share and discuss meeting plans with all your friends and family who are on Facebook, making the task a whole lot easier.
So that rounds up our list of six-pack applications for Facebook. Apart from applications, there are other cool tweaks that can enhance your interactions on Facebook

Recover Data From A Crashed Hard Drive

2011-03-19T15:00:00.000-07:00

Here’s a crash course on recovering data from a crashed hard drive!

Fact of life: when hard drives crash, they usually do so without warning. What results is a headache and, more importantly, heartache. But the data is usually not wiped clean from the crashed hard drive; rather, the file allocation table—which contains filenames and points to data on the drive—is what usually gets damaged. It is therefore technically possible to recover data in such situations; you only need to know the tools of the trade. The tool we’re talking about is PC Inspector File Recovery—a freeware that can be downloaded from www.pcinspector.de/ file_recovery/UK/welcome.htm.
   If you’ve lost data on a partition on a drive other than C, just install the program in Windows. If your entire hard drive has crashed and you’re unable to boot, install the program on another computer and attach your hard drive as a secondary drive on that computer.
STEP 1
Launch The Program

Launch PC Inspector File Recovery, choose English as your language, and click on the green tick button. Choose what kind of data you wish to recover by clicking on one of the three buttons to the left. If you choose Lost Data, go directly to Step 6; if you choose lost drive, go directly to Step 8. If it is deleted data that you wish to recover, click on the icon at the top left.

STEP 2
Select The Drive

The program will scan your hard drive for some time for available partitions, after which it will display them. You will most likely be able to select the drive from the Logical Drives tab. It may sometimes be listed twice; select the entry containing the drive’s letter. To verify the drive’s content, click the Preview button. Click on the tick button to continue to the next step.

STEP 3
Sniffing Out Deleted Files

The selected drive will now be scanned; this may take a few minutes. A Deleted folder will be displayed (with the Recycle Bin icon). You need to go through this folder to locate the files you wish to recover. You might find that the original filename has not been preserved. You can opt to search for the file in the following way: choose Object > Find, enter the file type, and click on the green tick to search.

STEP 4
Recovering The File

A list of matching files will appear after the search process ends. If the file you’re searching for does not appear, you can use the Size and Date Modified columns to help identify it (assuming you know these details). Click on the top of these columns to arrange them accordingly, to make it easier to locate the file. Select the possible candidates by keeping on clicking on them while keeping [Ctrl] pressed. Keeping [Ctrl] pressed, right-click on them and choose Save to. Choose a location.

STEP 5
Check And Rename

After they are restored, you should try to open the files to see if they are indeed the files you were looking for. After confirming this, you can rename them to what they were and copy them to the original location later. If the files are not the ones you were searching for, return to PC Inspector File Recovery and try to search for them again.

STEP 6
Find Your Lost Data

Sometimes data is lost due to a quick format or due to system or program crash. In such cases, you should choose the Lost Data button (the middle button on the left) in the main screen of PC Inspector File Recovery. In this case, data is retrieved in a way similar to deleted files. Select the drive from the Logical Drives list and click on the tick button when the Select Cluster Range dialog appears. The process of identification of files to be retrieved begins; this will take some time. Retrieve The Lost Data You will see that PC Inspector File Recovery has found hundreds of “lost” files—many will be fragments. It will take quite a bit of your time to go through them all, but it is worthwhile because you have a chance of getting back precious files. Repeat steps 3 to 5 to find your file and check its integrity. Find The Lost Drive If your partition table has been damaged, you may no longer be able to view any drive from the affected hard drive in the Logical Drives list. You’ll have to manually search for it. Click on the Physical drive tab from the Select Drive dialog, and select your hard drive—usually named fixed disk #1. Click on Find logical drives.

STEP 7
Retrieve The Lost Data

You will see that PC Inspector File Recovery has found hundreds of “lost” files—many will be fragments. It will take quite a bit of your time to go through them all, but it is worthwhile because you have a chance of getting back precious files. Repeat steps 3 to 5 to find your file and check its integrity.

STEP 8
Find The Lost Drive

If your partition table has been damaged, you may no longer be able to view any drive from the affected hard drive in the Logical Drives list. You’ll have to manually search for it. Click on the Physical drive tab from the Select Drive dialog, and select your hard drive—usually named fixed disk #1. Click on Find logical drives.

STEP 9
Search Within Clusters

You can choose to scan the entire drive for lost drives, or if you have some idea about where the partition was physically located on the disk, you can move the sliders to concentrate the search on that particular area. Now click on the tick button and wait for the search to complete, after which you can select the logical drive to recover your files and folders (as explained in the previous steps).

Google Search is filled with 38 bugs

2011-02-22T02:14:00.000-08:00

I was casually surfing Google for different topics and I came across a weird problem. I was trying to search for different terms and some of them were showing a Buggy results page. Let me tell you, sometimes it showed a proper results page but sometimes it looked really weird.

The bug appeared near the Google logo on the Left hand Top position. I am sure it was not a Google Doodle, as I checked Google’s behavior for different searchterms for a few days.

Now what exactly was I searching and how did the results page appear? Check the various Screenshots below.

Let me tell you, these bugs crop up occasionally and not always. Check the clean Bug-Free screenshot which I got 1 minute after the Buggy one.

Now what may be the reason for this weird things showing near the logo?
Frankly, I dont know! But, I did some checking with the W3C Validator and tried to validate the Google Homepage and show a Shocking 36 Errors and 2 Warnings (total 38 bugs). The CSS Validator also showed 2 Errors and 4 warnings.

Do u think this is the reason for the errors? Personally, I dont think so! Google wont leave such bugs unattended. Also, what else may be the reason for such bugs? Give your opinions..

How to hack Email Account Password using Bintext

2011-02-04T06:07:00.000-08:00

"How to hack a Hacker", "How to hack Email account password of the hacker"and so on. Well, its somewhat difficult to hack a hacker. But, there are always chances of getting password of hacker. One of the best methods used to hackEmail account password of hacker is using Bintext software. I have link forsoftware download... just read on.

How to Hack Email Account password:

Bintext is a powerful text extractor software that can extract text from almost any kind of file. It has the ability to find plain ASCII, unicode and resource strings from the file. The hacker's username and password, if not present in encrypted format, is easily seen in this Bintext interface.

Usually, whenever hacker has to create a keylogger server to hack email accountpassword, he has to enter his Email id and password where he wants to receive the hacked account information. If this entered Email id and password is not encrypted, Bintext exposes the entered Email id and password in plain text format and you can easily hack email account password of the hacker. Simply proceed further to know more on how to hack a hacker.

How to hack a Hacker???

1. Free download Bintext software to hack Email account password of hacker.
Password: techotoys.blogspot.com

2. Refer my article on Gmail Hacker and create one Gmail Hacker.exe file. Now, though Gmail Hacker is created by you, simply imagine that this is a Gmail hacker file sent to you by a hacker. And you want to hack his (actually yours in this case)Email account password.

3. Run Bintext software on your computer.

4. Hit on Browse and select the Gmail Hacker file created in Step 2. Hit on GO.

5. Now, Bintext will show you all the file information in text format. Move on to end part of the information. You will find Email id and password of the hacker as shown. You can also use Find box at bottom to simplify your search. Enter search terms related to Email domains like Gmail, Hotmail, Live, Rediffmail, Yahoo and so on.

Note: This method used to hack a hacker will not work if Email username and password are encrypted. But, I have checked out and found that many keyloggers and hacking softwares do not encrypt the login information, thus making them vulnerable to Bintext attack and we can easily hack Email account password of the hacker.

So friends, I hope now you will be able tohack Email account password of hackerusing this Bintext software. As I have mentioned earlier, it is quite difficult to hack a hacker. But, we have to keep on trying various methods used to hack Email account password.

Got problems with Bintext to hack Email account password of the hacker??? Share them in comments. I am always there to help you.

Enjoy Bintext software to hack Email account password of hacker...

Bypass/Hack Adf.ly - Url shortener service

2011-02-04T06:06:00.000-08:00

As we all know, there are tons of ways for making money online. It may beSharecash, self-hosted blog or any other url shortener like Adf.ly. Adf.ly pays bucks for each advertisement seen using your shortened link. The link viewer has to wait for 5 seconds until the advertisement loads and only after 5 seconds, he can view the actual intended page. So, I have today come up with aAdf.ly hackwhich helps you to bypass Adf.ly advertisement. By using this Adf.ly hack, you don't need to wait for counter to go to zero. You can simplybypass Adf.ly advertisements.I have provided the link for software download... just read on.

Try out this link: http://adf.ly/DuLN
You got a 5 seconds timer right??? Don't worry, henceforth, you will bypass this Adf.ly wait time.

Bypass/Hack Adf.ly Url shortener advertisements:

To bypass/hack Adf.ly, you need to have Firefox browser with Greasemonkey installed. You can install Greasemonkey firefox addon, if you haven't installed yet.

1. Go to Adf.ly Hacker script page to bypass/hack Adf.ly advertisements.

2. Hit on Install and confirm the script installation in your Greasemonkey.

3. Now, whenever you'll click on any Adf.ly shortened link(eg:http://adf.ly/DuLN) , you won't see any timer or counter of 5 seconds. The actual intended page will appear.

That's it friends. This was a small hack by which you canbypass/hack Adf.ly url shortener advertisements and wait times.This hack to bypass Adf.ly has worked perfectly for me, hope it will help you all.

Found this hack working for you??? Share your reactions in comments.

Enjoy hack to bypass Adf.ly advertisements...

Hotmail Hacker: How to hack Hotmail password | Hotmail Cracker

2011-01-04T06:49:00.000-08:00

Are you searching on Google forHow to hack Hotmail password, Hotmail cracker or Hotmail hacker software???If yes, then you are at the right place. I was just wandering on web, when I encountered a Hotmail hacker software. I tried it to see whether one can hack Hotmail password with this software and found this Hotmail hacker working perfect. So, I am sharing this Hotmail hacker software with you guys. I have provided link for software download... read on.

Hotmail Hacker - Hack Hotmail password:

Hotmail hacker is one of the most popularly used hotmail hacking softwares. To hack hotmail password, you have to simply send the Hotmail hacker.exe file to your victim and convince him that this software is used to hack anyone's Hotmail password. Tell him that he needs to enter his correct information (which includes his login id and password) in Hotmail hacker file. Once he enters his login information and hits on "Hack", you will be able to get his Hotmail password in your mail inbox. Sounds interesting right??? How to do it?? Proceed to the next section.

How to use Hotmail Hacker:

1. Free Download Hotmail Hacker software to hack hotmail password of your friend.
Password: techotoys.blogspot.com

2. Open Hotmail Hacker Builder.exe file to see:

3. Fill in your Email id and password where you wanna receive victim's Hotmail password. Put anything in Subject and hit on "Build".

Note: It is recommended to use Gmail id for best results.

4. Hotmail Hacker.exe file will be created in current directory. Now, send this Hotmail hacker file to your victim and make him believe that this Hotmail hacker hacks anyone's password and that you have tried it.

5. As soon as the victim enters his Hotmail account information in Hotmail hacker and hits on "Login and Start", he will get an error message like this:

6. And you will get an email in your mail id (you entered in Step 3) stating victim's Hotmail login information as shown in below image:

Thus, you are able to hack Hotmail password of the victim using this Hotmail hacker software.

This was all abouthow to hack Hotmail password using Hotmail hacker software.There are many other such Hotmail hacker softwares on web claiming to hack Hotmail password. But, most of them are fake. I have tried to put this best Hotmail hacker before you. If you have any problem in using this Hotmail hackersoftware to hack Hotmail password, please mention it in comments.

Enjoy Hotmail hacker to hack Hotmail password...

USB Thief: Free Password Hacking software

2010-12-31T09:52:00.000-08:00

Wouldn't it be nice if you just plug in your USB drive on victim computer and all victim's stored passwords are automatically saved in text format in your USB drive without victim knowledge??? Yes, this is what our free password hacking software - USB Thief does. Whenever you connect USB drive to any computer, all the stored passwords, history, license keys and other confidential data is hacked, thanks to this password hacking software. I have provided link for USB Thief software download... just read on.

USB Thief- Password Hacking software:

USB Thief is a type of portable stealer software used to hack all locally stored passwords on victim computer. A password is locally stored if the victim hits "Remember Me" while logging in to his account. USB Thief steals following information:

- Visited Links List
- Internet Explorer Cache List
- Internet Explorer Passwords List
- Instant Messengers Accounts List
- Installed Windows Updates List
- Mozilla Cache List
- Cookies List
- Mozilla History List
- Instant Messengers Accounts List
- Search Queries List
- Adapters Report
- Network Passwords List
- TCP/UDP Ports List
- Product Key List
- Protected Storage Passwords List
- PST Passwords List
- Startup Programs List
- Video Cache List

How to use USB Thief as password hacking software:

1. Free Download USB Thief to hack victim passwords.
Password: techotoys.blogspot.com

2. Unzip the file. Connect USB drive to your computer. Format it.

3. In downloaded file, go to: "USB Thief Modified" folder -> "Copy" folder and copy all the files in "Copy" folder. Paste all the files in USB drive.

Note: Don't copy the folder, copy files in the folder (I hope you've got the point).

4. Now, in USB drive, hit on "hideh.bat" file which makes all the files in USB drive hidden. Delete "hideh.bat" file.

5. Move on to victim computer and plug in the USB. Open the USB drive on victim computer and wait for 8-10 seconds. Safely remove the USB from victim computer. All the victim passwords are thus, now captured in our USB drive.

6. Now, to see these passwords, copy "showh.bat" file from the downloaded files. Paste this file in your USB drive and run it in USB. Now refresh. You will be able to see all the hidden files.

7. Open "IMNeoWorld" folder which will contain all hacked passwords and license keys.

Note: I have tried this USB Thief, but sometimes, it does not appear to steal any passwords. This USB Thief is stealing all other data.

Try out this USB Thief to hack victim stored passwords. This password hacking software is really useful if you have physical access to victim computer. If you have any problem in using this USB Thief as password hacking software, please mention it in comments.

Enjoy USB Thief as password hacking software...

How to hack Myspace account password using Myspace Hacking software

2010-12-28T10:16:00.000-08:00

Note: The security article is meant for educational purpose only and intended to make you aware about how Myspace is hacked using Phishing. I am not responsible for any harm done to anyone.

The above site is not official myspace.com, but a Myspace phisher ready to steal your myspace password and thus hack myspace account.

How to hack Myspace account password:

In Myspace Phishing, we have to create a fake login page (popularly called Phisher) which is just similar to myspace.com official website. The only difference is whenever the victim tries to login to his/her myspace account using our phisher, his Email and password are saved in a text file and we can easily hack myspace account using this obtained password.

1. Free Download Phisher Creator software to hack myspace account password.
Password: techotoys.blogspot.com

2. Run AutoPhish on your computer (tested on Windows XP and windows Vista) to see:

3. Now, enter http://www.myspace.com in URL field. Hit on Browse and select the path where you want to save your Myspace Phisher.

4. Once you've completed step 3, hit on "Create Phisher" and Myspace Phisher will be saved at desired location. Thus, half of the work is done.

5. Now, simply upload this Myspace Phisher files to any free webhost like http://0009.ws and send the uploaded "index.htm" link to your victim.

6. You can use any Anonymous Mailer to send the index.htm link and ask the victim to login to his account using your sent phisher link. Once, the victim logs in to his account using your Myspace phisher, a file named "passes.txt" will be created in your file manager of 0009.ws. Refresh the page if file doesn't appear.

7. The file passes.txt will contain hacked myspace password as:

Now you have got the victim myspace account password and can easily hackmyspace account of the victim.

Note: Phisher Creator software requires internet connection for creating fake login page.

So friends, I hope now you are well approached withhow to hack myspace account passwordusing Myspace hacking software. I have tried to keep this tutorial as simple as possible. If you find any problem in this Myspace Phishing tutorial to hackmyspace account password, please mention it in comments.

Enjoy n hack myspace account password...

Gmail Hacker:How to hack Gmail account password

2010-12-27T08:54:00.000-08:00

In my previous article How to Hack Gmail account, I mentioned about use of Keylogger software to hack Gmail account password.
Gmail Hacker is another hacking software used to hack Gmail account password. The article below illustrates the procedure of usingGmail Hacker software.I have even provided link for Gmail Hacker software download... just read on.

Gmail Hacker to hack Gmail account:

While using Gmail Hacker, you have to create Gmail Hacker.exe file and then send this file to your victim. Tell your victim that this sent Gmail Hacker file is used to hack Gmail account password and that he only needs to fill all the details in Gmail Hacker file. Once, he enters all the details (which includes his Gmail id and password) and hits on "Hack Them", his entered Gmail account information is mailed to you and you can now hack his Gmail account easily.

Follow the procedure below:

1. Free Download Gmail Hacker file to hack Gmail account password.
Password: techotoys.blogspot.com

2. Run Gmail Hacker Builder.exe file to see:

3. Now, enter your Gmail id and password. Here, use the Gmail id where you wanna receive the hacked password of the victim. Gmail Hacker will send hacked Gmail password to this mail id. Hit on Build.

4. Gmail Hacker.exe file will be created in current directory.

5. Send this file to your victim and make him believe that this Gmail Hacker is used to retrieve/hack anyone's Gmail password and that he needs to fill all the fields (which includes his Gmail id and password) to get password.

Once he fills all the information in Gmail Hacker.exe file and hits on Hack Them, his entered Gmail id and password will be mailed to you at the email you've used in Step 3. The mail will look like this:

Thus, you have now successfully got victim's Gmail password and can hack Gmail account easily.

So friends, this was all about the method of usingGmail Hacker software to hack Gmail account passwordof the victim. You can also use Gmail Keylogging as an alternate way of hacking Gmail. If you have any problem in this tutorial on how to hack Gmail accountusing Gmail hacker software, please mention it in comments.

Enjoy Gmail Hacker to hack Gmail account password...

Firefox hack: How to hack Email accounts using Firefox

2010-12-22T10:05:00.000-08:00

Firefox is one of the most popular browsers of the world. We all are Firefox lovers. Firefox has grown so popular thanks to its various addons and extensions which make Firefox really easily customizable to suit our needs. So, we will now discusshow to hack email accounts using Firefox browser.This Firefox hack is very easy and you can easily hack email accounts after reading this tutorial.

Hack Email accounts using Firefox:

Things which are necessary for this hack to be successfull:
1. Physical access to victim machine (if you don't have, use Cybergate RAT).
2. Victim's passwords saved in victim's Firefox.

Usually, whenever passwords are stored in Firefox, they can be easily seen by going to Tools -> Options ->Security and hitting on Saved Passwords.

But, if the victim if shrewd enough to use Master Password, on hitting Saved Passwords, you are prompted to enter Master Password. Master Password thus protects victim's password from being seen by any stranger and you are unable to hack his Email passwords which are stored in Firefox browser.

This article shows you how to bypass Master Password of victim Firefox. So, follow the steps below to hack his Email account password, even if Master Password is in role.

Steps to hack Email Account:

Let us assume that victim uses Vista Operating system and you(hacker) are using Windows XP.

1. On victim computer, go to:
For Windows Vista:
C:\Users\RAJ\AppData\Roaming\Mozilla\Firefox\Profiles\iosjcyzp.default
For Windows XP:
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\tez96yyu.default

Replace RAJ and Administrator with your victim's computer username.
and copy "signons.sqlite" file to your pen drive or any removable drive.

Note: If you are unable to find "signons.sqlite", simply go to C drive and search for "signons.sqlite". You will get it for sure.

2. Now, come back to your computer and paste this "signons.sqlite" in your Firefox by using the path in Step 1.

3. After you've pasted "signons.sqlite" file in your firefox, open Firefox browser.

4. Go to Tools -> Options -> Security tab. Hit on "Show password" and this time, you will be able to see victim mail accounts in popup box. Hit on "Show password" again and you will be able to see his hacked email account passwords. Now, you don't have to enter any Master password.

What is Logic behind this Firefox hack???

Firefox stores all the remembered passwords in two files:
1. Signons.sqlite and
2. Key3

Signons.sqlite is used to store all online username and passwords in encrypted form while Key3 file stores information about Master Password. So, in this hack, we are stealing victim's Signons.sqlite file (and not Key3) and opening it in our Firefox. Naturally, our Firefox shows victim's password and thus, we are able to hack email acccount passwords.

Really, this is one of the most vulnerable aspects of Firefox. Infact, Firefox stealers use this same logic for stealing Firefox saved passwords and thus tohack email accounts of victim.I have tried my best to keep this tutorial simple. If you have any problem in thisFirefox hack to hack Email accounts of the victim, please mention it in comments.

Enjoy n hack Email accounts using Firefox...

How to set fake “Idle” status on Gtalk?

2010-12-22T10:01:00.000-08:00

Hello Guys, Google Talk tops the list of messengers in terms of honesty & simplicity! It doesn’t allow you to be invisible or be idle without being idle!
Recently, I noticed one of my friends chatting with the idle status. I was amused, I asked him how he did that and he told me that there’s a software which allows you to set your status as idle, without actually being idle…
That software is called “G Always Idle,” it adds options like “Normal Idle” and “Always Idle” to the Google Talk icon in the Taskbar Tray. you can download it from – Here. Install it and run it, then you will see all the Idle options by right-clicking on your Google Talk icon in the system tray!

How to set up a personal home web server

2010-12-11T11:15:00.001-08:00

A web server is software that continuously runs on a computer and allows other computers to download documents from it. This text that you're reading right travelled over a network connection from Technojunkie web server to your browser. Web servers are usually loud, scary, headless machines in cold windowless rooms, but you can run one under your desk at home.

Why would you want to run a home web server? Maybe you want to download files on your home computer from anywhere. Like, say, your digital music collection. In this how-to, we'll set up a home web server that lets anyone (with the right password!) connect to your computer and download your MP3's from it, for a nice way to share your music collection with friends, or play a song from your home machine at the office for co-workers.

Please note: Running a server on your home computer is a risky undertaking, and before you start, make sure your computer has all the latest patches and security updates, and that you've done a thorough spyware and virus scan. This tutorial is for advanced users who feel comfortable editing textual configuration files and exposing port 80 on their home computer to the internet. As always, a strong firewall with explicit user-set rules is recommended. Still game? Carry on.

Let's get started.

What you'll need:

A Windows PC [1]
An always-on broadband (DSL or cable) internet connection

Step 1. Install Apache HTTP server. [2]

First and foremost, disable and stop any other firewall or server software you may have running, including Windows Firewall, Skype, Trillian or any other instant messaging applications. This is extremely important, and if it's not done, can cause the server installation and startup to fail miserably. These programs and services can be started and used again as usual once we're done setting up the web server.

Download Apache HTTP Server from here, using the link next to "Win32 Binary (MSI Installer)." Start the installation wizard. Accept the license agreement and use the default location for the Apache files, inC:\Program Files\Apache Software Foundation\Apache2.2\. When you reach the screen prompting for server information, enter your own email address and homeip.net [3]as the domain information, like so:

Complete the installation wizard using the "Typical installation" setting.

When it's done, open your web browser and go to http://localhost/. If the page you see reads, "If you can see this, it means that the installation of the Apache web server software on this system was successful," you're golden. [4]

Step 2. Configure Apache to share documents from the right folder.

Say you want to make your music collection downloadable using your new web server [5], and all your music files are located inC:\Gina\My Music. Using a plain text editor like Notepad, open theC:\Program Files\Apache Group\Apache2\conf\httpd.conf file. This is Apache's configuration file, which looks long and scary, but most of the defaults will work just fine for us. We just have to change a few things.

In this httpd.conf file, comment out the line that starts with DocumentRoot and add another with your directory, like this:

#DocumentRoot "C:/Program Files/Apache Group/Apache2/htdocs"
DocumentRoot "C:/Gina/My Music"

Then, comment out the line that starts with

#<Directory "C:/Program Files/Apache Group/Apache2/htdocs">
<Directory "C:/Gina/My Music">

Last, about 20 lines below that

AllowOverride None

Change it to:

AllowOverride All

When you're done, save httpd.conf. Then, click on the Apache icon in your taskbar and choose "Restart." If Apache restarts successfully [6], you edited your the file correctly. Visit http://localhost/ in your web browser. This time you should see a listing of your music files. Woo-hoo!

Step 3. Password your web site documents.

But we don't want just anyone to be able to download your music. Your bandwidth is precious, and we want to secure things a bit. Let's create a password prompt.

First, open a command prompt (go to the Start menu, choose Run, then type cmd.) Change to the Apache bin directory by typing:

cd "C:\Program Files\Apache Software Foundation\Apache2.2\bin"

Then create a password file by typing:

htpasswd -c "C:\Documents and Settings\Gina\my_password_file.txt" gina

Replace the path with the path of your new password file (which should in any folder EXCEPT the web server's document root.) Replace gina with the username you want to use. When prompted, enter the password you want to set up. Once you've done that, a password file will be created.

Now we want to apply that login to your music directory. Open up a new file in a plain text editor like Notepad. Copy and paste the following into it:

AuthType Basic
AuthName "This is a private area, please log in" 

AuthUserFile "c:\Documents and Settings\Gina\my_password_file.txt"
AuthGroupFile /dev/null 

<Limit GET POST PUT>
require valid-user
</Limit>

Make sure you replace "C:\Documents and Settings\Gina\my_password_file.txt"in the text with your own password file created above. Save this new file IN YOUR WEB SERVER DOCUMENT ROOT (in this case, C:\Gina\My Music) and name it .htaccess. Don't forget the dot in the beginning, before .htaccess. So, in this case, we're saving the file as C:\Gina\My Music\ .htaccess.

Note: If you're using Notepad to create your .htaccess file, when you save the file, put quotes around the filename - ".htaccess" - so that Notepad doesn't automatically put a .txt extension on the file. If there's a .txt file extension, your password won't work!

Now, using your web browser, go to http://localhost/. You should be prompted to log in. Enter your username and password you set up in your password file. Rock!

Step 4. Congratulate yourself. You've got a home webserver running.

If you are NOT behind a firewall, you can access your web server from other computers by typing your computer's IP address into a web browser's address bar. If you're not sure what your IP is, visit What Is My IP to find out. If your IP is 12.34.567.890, then type http://12.34.567.890 into a browser's address bar. [7]

Firesheep: How to hack wireless network users using HTTP Session Hijacking

2010-12-11T04:52:00.000-08:00

The release of Firesheep firefox addon really showed how most of the popular websites today are vulnerable to hacking. Eric Butler introduced his Firefox addon Firesheep which is really a masterpiece hacking tool used to hack wireless network users using HTTP session hijacking. I was asked by many visitors to post on how to wireless network. So, in the article below, I have illustrated the method to hack wireless network users using Firesheep firefox addon. I have provided link for software download... just check out.

What is HTTP Session Hijacking???

As we all know, whenever we login to any website, the webserver of the website replies back with a "cookie" which is used by client browser for further requests. Thus, cookie is used by webserver to identify the logged user and thus, maintain session of this user. Now, if we get this cookie of the victim, we can do all things same as the logged user (victim) himself. Since, we are now having the cookie of victim, webserver grants all session rights of victim to us. This way of hijacking cookies is called session hijacking. We can easily hack wireless network users by this Session Hijacking.

In wireless networks, exchange of cookies takes place through air, due to which one can easily intercept them and this session hijacking can be implemented easily.

Firesheep - How to hack wireless network users:

1. Free Download Firesheep firefox addon to hack wireless network users.

2. Install this addon in your Firefox (working pefect on Windows XP and Windows Vista). Restart Firefox. Connect to any public wireless network.

3. Now, in the sidebar, hit on "Start Capturing" and Firesheep searches for and captures cookies in wireless network.

4. As soon as anyone on the wireless network visits any insecure website known to Firesheep, their name and photo will be displayed in the sidebar. Now, simply double click on someone and you're into his/her account. Thus, you are able to hack wireless network user.

Sounds interesting right??? Yeah, this one's definitely a revolution in hacking technology. It has become so simple to hack any wireless network.

Websites that are vulnerable to Firesheep:

As is reported, the two social network giants Facebook and Twitter are vulnerable and hence attacked largely by Firesheep. Also, other websites vulnerable are: Foursquare, Gowalla, Amazon.com, Basecamp, bit.ly, Cisco, CNET, Dropbox, Enom, Evernote, Flickr, Github, Google, HackerNews, Harvest, Windows Live, NY Times, Pivotal Tracker, Slicehost, tumblr, WordPress, Yahoo and Yelp.

Solution to Firesheep attack:

Personal Protection:

Firesheep hack can be implemented only if the website does not use secure HTTPS connections. So, we can lay down Firesheep hack, if we inform Firefox to always use secure connections. This can be implemented by using Firefox addon Force-TLS.

Securing whole Wireless network:

Also, it is necessary to secure other users of wireless network. So, FireShephard - the anti-Firesheep tool has been released which shuts down Firesheep running on any computer in the wireless network. FireShephard basically floods the nearby wireless network with packets which are designed to turn off Firesheep. This surely secures all users of the wireless network.

So friends, this was all about how to hack a wireless network using HTTP Session hijacking. Remember to install Force-TLS addon, if you're logging to your insecure web account in a wireless network. If you have any problem in this tutorial on how to hack wireless network using Firesheep, please mention it in comments.

Koobface Virus in Facebook: Beware

2010-12-05T06:52:00.000-08:00

Facebook’s 120 million users are being targeted by a virus dubbed “Koobface” that uses the social network’s messaging system to infect PCs, then tries to gather sensitive information such as credit card numbers.

According to McAfee:

Koobface spreads by sending notes to friends of someone whose PC has been infected. The messages, with subject headers like, “You look just awesome in this new movie,” direct recipients to a website where they are asked to download what it claims is an update of Adobe Systems Inc’s Flash player. If they download the software, users end up with an infected computer, which then takes users to contaminated sites when they try to use search engines from Google, Yahoo, MSN and Live.com

According to an Article:

The Koobface e-mails have a subject like “You look so amazing funny on our new video,” and contain a link to a YouTube-like video site that appears to contain a movie clip (see image). The video, however, doesn’t play, and the website then asks the user to update his or her video software by downloading a file. It’s that file that contains the malicious code.

Richard Larmer, chief executive of RLM Public Relations in New York, said he threw out his PC after it became infected by Koobface, which downloaded malicious software onto his PC. It was really bad. It destroyed my computer,” he said.
Facebook has posted limited instructions about how to remove the virus on its security page: In essence, users should install one of several available anti-virus programs, and be sure to change your Facebook password here.

Facebook Scam: 'See Who Has Viewed Your Profile'

2010-12-02T09:23:00.000-08:00

Curious to see who views your Facebook profile page?
You're out of luck. Status updates, Facebook groups, and pages claiming to let users see who has viewed their Facebook profile pages are scams, often linking users to ad-filled sites.
In recent days, for instance, you may have seen your Facebook friends speaking in bizarrely adolescent chatroom vernacular:
"OMG OMG OMG... I cant believe this actually works! Now you really can see who viewed your profile! on [LINK]."
"If you're tempted to click on the link, you're taken to a webpage that encourages you to go a little deeper and permit an application to have access to your Facebook profile," wrote Graham Cluley, a senior technology consultant at Sophos, in a blog post.
According to Sophos, over 60,000 people clicked into the claim in a few hours.
But as Facebook noted in July, there is no way anyone can see who has viewed their profile, and no way others can create such a function.
"We're working hard to block and remove websites, Pages, and applications that claim to do this. If you see one, don't be fooled, and report it to us immediately," the company wrote on its security page.
Clicking into these links usually directs people to ad-filled pages. Others might promise to exchange a profile-viewing feature if a user can generate enough likes and linkshares.
"If you've been hit by a scam like this, remove references to it from your newsfeed, and revoke the right of rogue applications to access your profile via Account/ Privacy Settings/ Applications and Websites," Cluley suggests.

Check In How much time your Password can be Hacked

2010-12-01T10:32:00.000-08:00

To keep secure our web accounts we always do talk about Putting Strong Passwords, But how you would know that your password is strong or not??

What are Strong Passwords
Normally we say strong password to those passwords which satisfy the following points:-

Contains Letters(upper and lower case both), Numbers and Symbols.
Also your password should not be a common Password. like 123456, password, iloveyou etc
According to Microsoft an ideal strong password must contain at least 14 characters. But there are many words in dictionary also which contains no. of letters greater than 14. you should not keep those words as ur password.

But Question Arises:
What is the need of a strong password, How a weak password can be hacked easily??
Though there are many ways to hack passwords but hacking 'weak' passwords is done usually by Brute Force Method. In hacking Terms this Method is called Dictionary Attack. In Dictionary Attack using Brute Force Algorithm, A software checks all the existing words of dictionary to find the correct password.

Check how much time your password will take to hack using Brute Force
On web i found a site, where it check that how secure is your password. It does some simple mathematical calculations to find out time to generate any particular password using brute force.
If you have a strong password, then the time will be probably in Years but for weak password it will be only some seconds, hours or some days!!!

So check your password now :)
http://howsecureismypassword.net/

Contol Games with ANYTHING by Giving vision to ur PC to recognize gesture

2010-12-01T10:19:00.000-08:00

Forget your mouse, keyboard and joystick- with CamSpace(Cam-Trax) you can play your favourite games with your webcam! With CamSpace it's possible to transform any opaque object into a videogame command.

Confused??? Watch this video First:

What is "CamSpace"?
CamSpace is a program that allows the user to control his favorite games and applications
with any webcam. Use your body and arbitrary objects to replace the mouse, keyboard and joystick!

What can you do with "CamSpace"?

With CamSpace, You can do amazing things! You can use a paper plate as a racing wheel, you can control FPS games by moving your fingers, you can control music applications by moving in free space ... the possibilities are endless! Just select the game you want, and play it!

Download and install CamSpace
Download it from here http://www.camspace.com/
Install this software. Also make sure you’ve properly installed your webcam.

How do I lock on to an object?

1. Find a bright object with a strong, specific color that is NOT the color of your shirt
or wall behind you. Hide it from the camera.
2. Click on the "LOCK" button, or hit SHIFT+~.
3. When the target appears, put the object in the middle.
4. For further information go to our Right and Wrong page.

Which games can I play with "CamSpace"?

See the list of CamSpace Game Controllers and stand-alone CamGames! With CamSpace you can play any Windows game you want!
If someone has already created a CamSpace Game Controller for the game you wish to play, the CamSpace Agent should detect it, and offer to use the CamSpace Game Controller when you run your game.
You can create your own CamSpace Game Controllers or CamGames, and upload them to the CamSpace Developers site! That way, other people can download and rate your CamSpace work. To learn more, take a look at the CamSpace Tutorials.

Creating a Self-Signed Certificate using OpenSSL for use with Microsoft Internet Information Services (IIS) 5

2010-11-28T10:43:00.000-08:00

Overview

This document describes how to sign your own SSL certificate requests using the OpenSSL toolkit and use these self-signed certificates to allow HTTPS connections to Microsoft's IIS 5 web server (as supplied with Windows 2000).
If you know what a self-signed certificate is and understand the concept of a certificate authority, great. If not, this should still work but you'll have no idea what you've acheived when it does :)

Ingredients

Windows 2000 running Internet Information Services (IIS)
The OpenSSL tools for Windows from Shining Light Productions. This is a Windows port of the popular OpenSSL toolkit.

Walkthrough

Install and configure the OpenSSL toolkit

Get OpenSSL from the address above, and run the installer, accepting the defaults. These instructions assume OpenSSL is installed in C:\OpenSSL.
Add C:\OpenSSL\bin to your system path (Control Panel, System, Advanced, Environment Variables, System Variables) - this isn't strictly necessary but it makes things a lot easier.
Create a working directory - here, we'll use c:\ssl as our working folder.
Download this copy of openssl.conf to your working folder. (Note: I have no idea what most of the options in this file mean. I just hacked it around until it worked...)
Set up the directory structure and files required by OpenSSL:
```
C:\ssl>md keys

C:\ssl>md requests

C:\ssl>md certs
```
Create the file database.txt - an empty (zero-byte) text file. This can be done using the 'touch' command if you have it (it's a Unix tool not available on Windows by default, but you might have one lying around), or by creating an empty file manually:
```
c:\ssl>copy con database.txt
^Z

C:\ssl>
```
MS-DOS veterans will recognise this particular invocation. We're copying from CON (the console) to a file called database.txt, and that's a Control-Z end-of-file character on the first line. This should produce a zero-byte file called c:\ssl\database.txt
Create the serial number file serial.txt. This is a plain ASCII file containing the string "01" on the first line, followed by a newline. Again, we can use a little bit of ancient DOS magic:
```
C:\ssl>copy con serial.txt
01
^Z

C:\ssl>
```
to achieve the desired effect. (That's keystrokes zero, one, return, control-Z, return)

Set up a Certificate Authority (CA)

First, we create a 1024-bit private key to use when creating our CA.:

C:\ssl>openssl genrsa -des3 -out keys/ca.key 1024
Loading 'screen' into random state - done
warning, not much extra random data, consider using the -rand option
Generating RSA private key, 1024 bit long modulus
...........++++++
..................++++++
e is 65537 (0x10001)
Enter PEM pass phrase:  - choose a memorable pass phrase to use for this key
Verifying password - Enter PEM pass phrase:  - type your pass phrase again for verification

The pass phrase will be requested whenever you use this certificate for anything, so make sure you remember it. This will create a file called c:\ssl\keys\ca.key, containing our certificate authority private key.

Next, we create a master certificate based on this key, to use when signing other certificates:

C:\ssl>openssl req -config openssl.conf -new -x509 -days 1001 -key keys/ca.key -out certs/ca.cer
Using configuration from openssl.conf
Enter PEM pass phrase:  - type your passphrase here.
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) []:GB
State or Province Name (full name) []:Hampshire
Locality Name (eg, city) []:Southampton
Organization Name (eg, company) []:dylanbeattie.net
Organizational Unit Name (eg, section) []:
Common Name (eg, your websites domain name) []:ssl.dylanbeattie.net
Email Address []:ssl@dylanbeattie.net

C:\ssl>

This will create our CA certificate and store it as c:\ssl\certs\ca.cer

(optional) Finally, we export our CA certificate in PKCS12 format - this will allow Windows users to import the PKCS12 certificate into their Trusted Root Store, so they don't get warning messages every time they use one of our certificates. From the OpenSSL FAQ:
12. How do I install a CA certificate into a browser?
The usual way is to send the DER encoded certificate to the browser as MIME type application/x-x509-ca-cert, for example by clicking on an appropriate link. On MSIE certain extensions such as .der or .cacert may also work, or you can import the certificate using the certificate import wizard.
You can convert a certificate to DER form using the command:
```
openssl x509 -in ca.pem -outform DER -out ca.der
```
Occasionally someone^* suggests using a command such as:
```
openssl pkcs12 -export -out cacert.p12 -in cacert.pem -inkey cakey.pem
```
DO NOT DO THIS! This command will give away your CAs private key and reduces its security to zero: allowing anyone to forge certificates in whatever name they choose.
* Guilty as charged - sorry! This guide originally recommended the insecure method warned about above. Thanks to Baahl for pointing out the error and Marco Fagiolini for the correct method.

Create an IIS Certificate Request

This is described in detail elsewhere on the web - see Microsoft Knowledge Base Article Q228821. You should end up with a file called certreq.txt.

Sign the Certificate Request

Copy the certreq.txt file into c:\ssl\requests
Sign the request
```
C:\ssl>openssl ca -policy policy_anything -config openssl.conf -cert certs/ca.cer -in requests/certreq.txt -keyfile keys/ca.key -days 360 -out certs/iis.cer
Using configuration from openssl.conf
Loading 'screen' into random state - done
Enter PEM pass phrase:
Check that the request matches the signature
Signature ok
The Subjects Distinguished Name is as follows
commonName            :PRINTABLE:'myCommonName'
organizationalUnitName:PRINTABLE:'myOrganisationalUnit'
organizationName      :PRINTABLE:'myOrganisation'
localityName          :PRINTABLE:'myLocality'
stateOrProvinceName   :PRINTABLE:'myProvince'
countryName           :PRINTABLE:'GB'
Certificate is to be certified until Feb  2 01:13:14 2004 GMT (360 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated

C:\ssl>
```
Let's just take a look at those command-line options in a bit more detail:
- -policy policy_anything - specifies that we're using the 'policy_anything' policy from our openssl.conf file. This is a relaxed policy in which the name, country, etc. in the certificate don't need to match those used by the certification authority. Use -policy policy_match for a more restrictive CA.
- -config openssl.conf - specifies we're reading our configuration from openssl.conf in the current directory.
- -cert certs/ca.cer - specifies we're using our CA master certificate to sign the request.
- -in requests/certreq.txt - the certificate request we're signing.
- -keyfile keys/ca.key - the private key for our CA master certificate, which proves we're allowed to use it.
- -days 360 - the time until the certficate will expire
- -out certs/iis.cer - the file in which to place our newly-signed certificate
Convert the signed certificate into x509 format for use with IIS:
```
C:\ssl>openssl x509 -in certs/iis.cer -out certs/iisx509.cer

C:\ssl>
```
This will leave the new certificate in c:\ssl\certs\iisx509.cer - signed, sealed and ready to install

Install the new certificate under IIS

Again, this is described elsewhere on the web - remember that the iisx509.cer file is our certificate response file, and the instructions in Knowledge Base article 228836 should make everything clear.

How to create your own self-signed SSL certificate

2010-11-28T10:40:00.000-08:00

lToday there are many big companies which provide SSl certificate by paying them money like Thawte,verisign etc.....
Like these certificates you can create your own certificate and add it to your own site
just follow these steps
You will need Openssl software
download it here

Step 1: Generate a Private Key
The first step is to create your RSA Private Key. This key is a 1024 bit RSA key which is encrypted using Triple-DES and stored in a PEM format so that it is readable as ASCII text.

openssl genrsa -des3 -out server
.key 1024

Step 2: Generate a CSR (Certificate Signing Request)
Once the private key is generated a Certificate Signing Request can be generated. The CSR is then used in one of two ways. Ideally, the CSR will be sent to a Certificate Authority, such as Thawte or Verisign who will verify the identity of the requestor and issue a signed certificate. The second option is to self-sign the CSR, which will be demonstrated in the next section.

During the generation of the CSR, you will be prompted for several pieces of information. These are the X.509 attributes of the certificate. One of the prompts will be for “Common Name (e.g., YOUR name)”. It is important that this field be filled in with the fully qualified domain name of the server to be protected by SSL. If the website to be protected will be https://www.yatblog.com, then enter www.yatblog.com at this prompt. If you want to create a so called “wildcard” certificate, which means the same certificate can be used on an unlimited number of subdomains, just enter an asterisk as the hostname, in our example that would be *.yatblog.com. The command to generate the CSR is as follows:

openssl req -new -key server.key -out server.csr

Step 3: Remove Passphrase from Key
One unfortunate side-effect of the pass-phrased private key is that Apache will ask for the pass-phrase each time the web server is started. Obviously this is not necessarily convenient as someone will not always be around to type in the pass-phrase, such as after a reboot or crash. mod_ssl includes the ability to use an external program in place of the built-in pass-phrase dialog, however, this is not necessarily the most secure option either. It is possible to remove the Triple-DES encryption from the key, thereby no longer needing to type in a pass-phrase. If the private key is no longer encrypted, it is critical that this file only be readable by the root user! If your system is ever compromised and a third party obtains your unencrypted private key, the corresponding certificate will need to be revoked. With that being said, use the following command to remove the pass-phrase from the key:

cp server.key server.key.org
openssl rsa -in server.key.org -out server.key

The newly created server.key file has no passphrase in it anymore.

-rw-r–r– 1 root root 745 Jun 29 12:19 server.csr
-rw-r–r– 1 root root 891 Jun 29 13:22 server.key
-rw-r–r– 1 root root 963 Jun 29 13:22 server.key.org

Step 4: Generating a Self-Signed Certificate
At this point you will need to generate a self-signed certificate because you either don’t plan on having your certificate signed by a CA, or you wish to test your new SSL implementation while the CA is signing your certificate. This temporary certificate will generate an error in the client browser to the effect that the signing certificate authority is unknown and not trusted.
To generate a temporary certificate which is good for 365 days, issue the following command:

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Step 5: Installing the Private Key and Certificate
When Apache with mod_ssl is installed, it creates several directories in the Apache config directory. The location of this directory will differ depending on how Apache was compiled.

cp server.crt /usr/local/apache/conf/ssl.crt
cp server.key /usr/local/apache/conf/ssl.key

Step 6: Configuring SSL Enabled Virtual Hosts

SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
SetEnvIf User-Agent “.*MSIE.*” nokeepalive ssl-unclean-shutdown

If you want to redirect connections to the standard, unencrypted port 80, simply use the following lines:

RedirectPermanent / https://www.yourdomain.com

Step 7: Restart Apache and Test

/etc/init.d/apache2 restart

Hope this helped out out..If you have any problems,feel free to ask them under comment section!