Security Learner's Blog

What does Multi-Factor Authentication / Two-Factor Authentication

2019-09-10T18:51:00.001-07:00

Two-Factor Authentication

Two-factor authentication is a system that provides extra security to your account by forcing you to
prove you are who you say you are when you attempt to access an account.

The most common form of two-factor authentication is to via text message. The process works like this :

You log into a website to do some shopping.
The website asks you to prove who you are,
You receive a text message on your phone with a code
You type that code into the website and continue shopping

.
You can also verify via email, or even have a system call you on a land line with the passcode.

The point of two factor authentication is to make it harder for someone to illegally make purchases or
check your email or other nefarious tasks. If someone has stolen your username and password, they
still can't access your account until they enter a code sent to your email address or cell phone.

You can typically tell a website "This is a personal computer I use all the time" which keeps you from
having to verify all the time, but there are some caveats to this.

If it is a portable device, DO NOT DO THIS.
If it is NOT password protected, DO NOT DO THIS. If it is a device that is used by visitors (like small children), DO NOT DO THIS.

The point of two-factor authentication is to protect you. If you circumvent these protections, you are making yourself less secure.

What Precautions Should I Take on Social Networking Sites?

2016-09-10T16:51:00.000-07:00

What Precautions Should I Take on Social Networking Sites?

Below are some helpful tips regarding security and privacy while using social networking sites:

Ensure that any computer you use to connect to a social media site has proper security measures in place. Use and maintain anti-virus software, anti-spyware software, and a firewall and keep these applications and operating system patched and up-to-date.

Be cautious when clicking on links. If a link seems suspicious, or too good to be true, do not click on it...even if the link is on your most trusted friend's page. Your friend's account may have been hijacked or infected and now be spreading malware.

If you are going to request that your account be deleted, first remove all of the data. Request that the account be deleted, rather than deactivated.

Type the address of your social networking site directly into your browser or use your personal bookmarks. If you click a link to your site through email or another website, you might be entering your account name and password into a fake site where your personal information could be stolen

Be cautious about installing applications. Some social networking sites provide the ability to add or install third party applications, such as games. Keep in mind there is sometimes little or no quality control or review of these applications and they may have full access to your account and the data you share. Malicious applications can use this access to interact with your friends on your behalf and to steal and misuse personal data. Only install applications that come from trusted, well-known sites. If you are no longer using the app, remove it. Also, please note that installing some applications may modify your security and privacy settings.

Use strong and unique passwords. Using the same password on all accounts increases the vulnerability of these accounts if one becomes compromised. Use different passwords for different accounts, and do not use a password you use to access your organizations network on any personal sites you access.

Be careful whom you add as a “friend,” or what groups or pages you join. The more “friends” you have or groups/pages you join, the more people who have access to your information.

Do not assume privacy on a social networking site. For both business and personal use, confidential information should not be shared. You should only post information you are comfortable disclosing to a complete stranger.

Use discretion before posting information or comments. Once information is posted online, it can potentially be viewed by anyone and may not be able to be retracted afterwards. Keep in mind that content or communications on government-related social networking pages may be considered public records.

When posting pictures, delete the meta data, which includes the date and time of the picture.

Do not announce that you are on vacation or away for an extended period of time.

Configure privacy settings to allow only those people you trust to have access to the information you post, and your profile. Also, restrict the ability for others to post information to your page. The default settings for some sites may allow anyone to see your information or post information to your page.

Review a site’s privacy policy. Some sites may share information, such as email addresses or user preferences, with other parties. If a site’s privacy policy is vague or does not properly protect your information, do not use the site.

Windows 7 keyboard Shortcuts

2016-09-10T16:48:00.001-07:00

Top 20 shortcuts for taming your windows Becky Waring

Managing windows is probably one of the most fertile areas for keyboard shortcuts because otherwise, you manipulate them solely with the mouse. Here's my top-20 list of must-know shortcuts for taming your windows; you'll never have to move your hands from the keyboard. For completeness, I've included many keyboard shortcuts you might already be familiar with; skip down the list to see the ones you don't know.

Switch between open windows	Alt + Tab
Minimize/restore all but the active window	Windows key + Home
Minimize all windows	Windows key + M
Maximize window	Windows key + up-arrow
Minimize/restore window	Windows key + down-arrow
Make all windows transparent so you can see the desktop	Windows key + spacebar
Dock window to left or right half of screen	Windows key + left- or right-arrow
Zoom in/out (In the default view, you must zoom in before zooming out.)	Windows key + plus/minus sign
Lock screen	Windows key + L
Open Run dialog	Windows key + R
Open Search box	Windows key + F
Open Windows Explorer to computer	Windows key + E
Expand Folders view in Win Explorer to show where you are	Control + Shift + E
Go up a level in Windows Explorer	Alt + up-arrow
Choose display mode/switch monitors (Especially useful for presenters or dual-monitor users)	Windows key + P
Launch apps pinned to the Taskbar (1 is the left-most app; Windows Key+T cycles through all apps.)	Windows key + (number 1-9)
Cycle through Gadgets	Windows key + G
Rotate a picture clockwise (Or use comma for counterclockwise)	Control + period
Use Control-click to select the pictures in a folder you need to rotate, then rotate them all at once.
Turn Sticky Keys on and off	Press Shift five times
Although keyboard shortcuts can be real time-savers, sometimes it's hard to press multiple keys at once, (especially while you're eating a sandwich or holding your phone in one hand). The Windows Sticky Keys feature lets you press one key at a time as you enter a shortcut. You can turn on Sticky Keys permanently by using the Control Panel's Ease of Access Center options.
Turn Mouse Keys on and off	Left-Alt + Left-Shift + Num Lock
The Windows Mouse Keys feature is a really useful shortcut that lets you control the cursor with the arrow keys on your numeric keypad. Like Sticky Keys, it can be turned on permanently in the Control Panel's Ease of Access Center, but you can also invoke it at any time by pressing this key combination. This gesture turns you into a true keyboard jockey.

Note that both Sticky Keys and Mouse Keys display a warning message when you turn them on and off. You can disable the warning boxes in the Control Panel's Ease of Access Center by choosing Set up Mouse Keys or Set up Sticky Keys. This list is just a sample of the dozens of shortcuts available.

How To Use Any Sim Card In Ptcl Evo Wingle-Best Trick

2016-09-10T16:38:00.000-07:00

How To Use Any Sim Card In Ptcl Evo Wingle-Best Trick

Hello every body how are you.Here i will tell you how this is possible you can use ptcl evo wingle with any sim card like zong,telenor,jazz,warid and ufone. Before telling you about this trick i want to tell you about my struggle to achieved this trick .Two month before my friend told me that he has a ptcl evo wingl 9.3 Mbps and there is sim slot in his ptcl evo wingle so he tell me what is the reason for that sim slot.then i research from the internet about this sim slot after visiting some websites i got it that this sim slot for 3g enable sim.when i tell my friend to about that he insert his telenor 3g enable sim in his ptcl evo wingle but in vain.there is no connectivity option so then again we search from internet to unlock ptcl evo wingle for any network sim.it is a time consume research but one day i got it idea from a web so i will share this trick with you .you can unlock ptcl evo wingle for any network sim card Click here and see all process

SMS for 2-Factor Authentication can be compromised

2016-09-09T15:16:00.003-07:00

Earlier this year in May 2016, the National Institute of Standards and Technology (NIST) published a guideline recommending the depreciation of SMS authentication as the second factor for strong authentication. NIST has recommended other forms of two-factor such as time-base one-time passwords generated by mobile apps — over text messaging.

In SMS-based two-factor authentication (2FA), a user must confirm the intended login or transaction by entering an OTP sent to their mobile phone — typically, a four- to eight-digit numerical code. This authentication method was once believed to protect against man-in-the-middle (MitM) attacks until security professionals realized that text messages can be intercepted by fraudsters easily.

If a mobile phone is compromised due to some malware, a fraudster can command the malware to monitor text messages, including OTPs, mobile SIM swaps, SIM clones, number porting attacks, fake caller ID and call forwarding scams which are operated by customer service representatives.

But 2FA has a major problem with also phones which have not been corrupted. Since encryption is not applied to short message transmission by default, messages could be intercepted and snooped during transmission, even if the receiving device wasn’t infected by malware. Moreover, SMS are stored in plaintext by short message service center (SMSC) before they are successfully delivered to the intended recipient. These messages can be seen by anyone in SMSC and there are spying programs too like FlexiSpy which enable intruders to automatically record all incoming and outgoing SMS messages and then upload the logs to a remote server for later viewing and analysis.

This method will fool a decent percentage of users who have enabled text messages as a form of two-factor authentication. Certainly, text messaging isn’t the strongest form of 2-factor authentication, but it is better than allowing a login with nothing more than a username and password, as this scam illustrates. For this reason, most companies haven’t urgently migrated to other authentication methods.

Other safer options like push-to-approve to biometrics, such as fingerprint scans, retina scans or even voice recognition will take time. Google recently went a step further by debuting a new “push” authentication system that generates a prompt on the user’s mobile device that users need to tap to approve login requests.

But presently, the need of the hour is that websites should make user-friendly password policies and put the burden on verifier. It’s important that the users are not asked every time to improve their security by changing the passwords frequently because they are not improving it.

5 Smart Phone Security Tips

2016-09-03T06:23:00.001-07:00

5 Smart Phone Security Tips

Because it’s not like a traditional hard drive where you store all your documents, many people forget about protecting their smartphones from hackers. Smartphone security is gaining traction and there are quite a few things you can do to help prevent your smartphone from being hacked. Many of the same measures you take to protect your computer can be used to protect your smartphone too.

1. Use Passcodes Everywhere

Whether you have an Android phone or an iPhone, you can prevent access to your device by adding a passcode or a lock pattern on Android. This simple security measure can prevent sensitive information from being viewed by others. This is especially important if you have apps installed where personal data is stored.

2. Protect Your iCloud & Google Account

Your Apple ID controls access to every single Apple service that currently exists from iTunes to iCloud to FaceTime to iMessage. If someone can access your Apple ID, they can wreak havoc on your Apple life including erasing your iPhone, iPad and computer remotely. It’s pretty much the same issue with Google. You should enable 2-step verification on both of these accounts.

3. Be Careful With the Apps You Install

This is especially important on Android devices. Google recently removed 50,000 apps that were suspected of being malware. There won’t be any shortage of apps that contain malware, viruses or other sneaky software to steal your data or damage your phone. The Apple app store also has this

problem, but to a much lesser extent. Apple vets each app before it gets listed in the store and routinely goes about removing apps from the store that are deemed to be violating store policies.

4. Use an App Instead of the Browser

If you’re doing banking on your phone or stock trading or anything else that passes sensitive information between your phone and the Internet, it’s best to use an official app for that site or company rather

than opening using the browser on your phone.

5. Keep Your Data Backed Up

It’s not only a good idea to keep your smartphone backed up in case you drop it in the toilet, but also if it gets stolen and you have to remotely wipe it clean. Apple users can install the Find My iPhone app, which will let you remotely lock a phone and remotely wipe it if you know it’s been stolen.

Zong Wingle unlock method

2016-08-25T05:36:00.000-07:00

Zong wingle unlock method

Today I will tell your how you can unlock Zong Wingle Usb.For unlock Zong Wingle Usb there is a complete process and after that process done you are able to run any SIM card on Zong Wingle Usb. In Pakistan Zong is selling this device with network locked, after spending more than 3 months and wasting a lot of time Now i am able to unlock this device .

Complete instruction for Zong Wingle Unlock

1. First of All Get the Flash Code for your device from here – Huawei Flash Code which will be used in step #4.

2. Then get Huawei serial COM ports drivers pack – FcSerialDrv.rar, unpack it.

3. Now Download following firmware for downgrade – E8372_firmware_downgrade.7z(mirror), before you flash it with this version– check and remember your current firmware version. You may need it after complete process.

4. Now connect your Zong wingle with PC Flash P711s-WINGLE_Update_21.110.99.04.00 firmware which you download in step #3 and in same file there is a Wingle Update Wizard Application, open it and run for update, put Flash Code from step #1.

5. Connect your internet wingle to PC, check that you can access interface viahttp://192.168.8.1/, Here in my case i can’t get to web-interface, if same happens to you try step 6 and 7 or try by skipping step 6 and 7, i skipped step 6 and 7 and it works.

6. Use the following script E8372_switch_mode.7z to get device in COM ports mode.

7. Open Device Manager, in COM Ports section you must see several new COM ports, such as FC – Application Interface and FC – PC UI Interface. If you don’t see them – install the drivers from the step 2.

8. Get Huawei 2015 Code Reader software and launch it.

9. Then Press “1. Detect” button to get list of available COM-ports.

10. Choose FC – PC UI Interface from list and press “2. Connect” button.

11. If all appears correct you can see info about your device, and Hash 1 and Hash 2 fields in the top of window must be filled. This is important. Check Hash 1 and Hash 2, before you go to the next step – this values must be filled. If not – check your firmware version, it must be 21.110.99.04.00. If now – you should go to the step 4.

12. Press “3. Process” button and wait 4-5 min. After process complete – you will receive IMEI number and Encrypted Block in Log window:

IMEI: 866467xxxxxxxxx
— [ Begin Encrypted Block ] —
46001402676A1045226xxxxxxxxxxxxxxxxxxxxxxxxxxx
— [ End Encrypted Block ] —

After this now you need to buy unlock code which will definitely work.

13. Follow this link –Unlock modems and routers Huawei (2015) Code.
14. Check that you have IMEI and Encrypted Block from step 12 (!)
15. Check that with non-accepted SIM your E8372 prompts for enter unlock code in web-interface, i.e. you have retries.
16. If checks in steps 14 and 15 done – choose your payment from list Pay with … It can be, for example, PayPal/VISA and other options are available.
17. Press Buy now button and follow the instructions on display.
18. After your payment will complete (don’t forget to press “Back to the shop” or “Back to the seller button” if it appears) you will get a registration form, where you must fill your email, IMEI and Encrypted Block.
19. If you can’t see the registration form, check your email for the message from Plati.Com with a link to registration form to fill and open it.
20. After you fill all fields and press “Send” button NCK (Network Control Key) code for yourE8372 will instantly appear in the same window.
21. Enter received NCK into device (via web-interface) and enjoy.

Now your zong Wingle usb is unlock you can insert any sim card in this intertnet dongle usb

Sim network cell information terms

2016-08-16T02:00:00.000-07:00

Physical Security

2016-06-27T03:58:00.001-07:00

When thinking of physical security, most people think of security guards, cameras, and locked doors. Many fail to realize that they themselves also have a big role in keeping information safe from physical attackers, since the information is in electronic form. Instead of giving examples now, let’s jump right in and get started. I’m going to start each section with a question that I’d like you to think over before I explain.

Are you the only person with access to your office?

I highly doubt that you are the only one. Custodial and maintenance staff have keys that get them just about anywhere. I’m sure that you have had visitors or have held meetings in your office. You may ask, “Can’t we trust these people?” Sure we can, but it’s better to think of ways to secure what is in our office so any temptation a person may have is greatly reduced.

Do you have any documents with sensitive data in plain view?

I know that you need to be able to see the documents to work with them, so of course they are in plain view at some point. When someone comes in your office or when you are absent, though, these documents need to be stored away. Remember the old movies where the spy would take photographs of documents with their bow-tie camera? Well, it’s not that different today. With miniature cameras like those in cell phones widely and easily available, it is simple for anyone to take a photo without being noticed... even when you are standing right there!

When you print documents, do you pick them up immediately, or do they sit on an office printer for some time? This is another area where caution needs to be taken.

When you dispose of documents with sensitive information, a shredder must always be used. People may legally dig through trash (called “dumpster diving”), and take whatever they find. Many people even treat this as a hobby and do so regularly.

Do you have any removable media (floppy disks, CDs, Flash drives, etc) with sensitive information?

How often have you misplaced a CD or a floppy? I know that I have. Even if you haven't, if you place one on your desk before leaving work, would you notice that it is missing the next day or would it take some time?

Removable media is very compact, which is convenient for both you and any thieves. Store these away safely. If one is lost, any information on it must be considered compromised, even if you think it may have been thrown away.

If you wish to throw away removable media, please destroy it so it would be very hard for anyone to use. Just deleting the contents is not enough. Recovering deleted files is a time-consuming task, but is fairly easy to do with the assortment of tools that are widely available.

I advise against saving sensitive information on removable media, but if you must, please encrypt the data. It will still be compromised, make no mistake, but it may protect the information enough that a less-than-determined attacker will give up or the media will be found.

Do you use a laptop, PDA, etc?

The same safety measures for removable media apply to portable devices as well. Since these devices hold even more information, they are even more critical. Remember, encryption is very important!

Do you either lock your screen or log out of your computer every time you leave your office?

An attacker only needs a minute or so to send themselves documents, send someone threats, etc. Your account is the one being used, so you would be investigated for it. Locking your screen only takes a second, and unlocking it only requires that you type your password. It’s a simple habit to learn that protects both you and the information.

To lock your screen in Windows, you press and hold the Windows key and press the L key. The Windows key is located in between the Ctrl and Alt keys on the lower left side of your keyboard.

Is your password written down anywhere? Is it a generic password? Is it a strong password?

If your password is written down, someone else probably knows it already. The most (in)famous hiding places are under your keyboard or in a desk drawer. If it is stuck to the front of your monitor, it isn't even hidden. If your password is a generic one (e.g. ‘password’), someone else probably knows it too. Also, I discussed strong passwords in February’s article. If your password isn’t strong (e.g. ‘password’, your ID #, etc), someone may know it or be able to guess it.

Preventing and Responding to Identity Theft

2016-05-04T11:54:00.000-07:00

Is identity theft just a problem for people who submit information online?

You can be a victim of identity theft even if you never use a computer. Malicious people may be able to obtain personal information (such as credit card numbers, phone numbers, account numbers, and addresses) by stealing your wallet, overhearing a phone conversation, rummaging through your trash (a practice known as dumpster diving), or picking up a receipt at a restaurant that has your account number on it. If a thief has enough information, he or she may be able to impersonate you to

purchase items, open new accounts, or apply for loans.

The internet has made it easier for thieves to obtain personal and financial data. Most companies and other institutions store information about their clients in databases; if a thief can access that database, he or she can obtain information about many people at once rather than focus on one person at a time. The internet has also made it easier for thieves to sell or trade the information, making it more difficult for law enforcement to identify and apprehend the criminals.

How are victims of online identity theft chosen?

Identity theft is usually a crime of opportunity, so you may be victimized simply because your information is available. Thieves may target customers of certain companies for a variety of reasons: a company database is easily accessible, the demographics of the customers are appealing, there is a market for specific information, etc. If your information is stored in a database that is compromised, you may become a victim of identity theft.

Are there ways to avoid being a victim?

Unfortunately, there is no way to guarantee that you will not be a victim of online identity theft. However, there are ways to minimize your risk:

§ Do business with reputable companies

- Before providing any personal or financial information, make sure that you are interacting with a reputable, established company. Some attackers may try to trick you by creating malicious web sites

that appear to be legitimate, so you should verify the legitimacy before supplying any information.

§ Take advantage of security features

- Passwords and other security features add layers of protection if used appropriately.

§ Check privacy policies

- Take precautions when providing information, and make sure to check published privacy policies to see how a company will use or distribute your information. Many companies allow customers to request that their information not be shared with other companies; you should be able to locate the details in your account literature or by contacting the company directly.

§ Be careful what information you publicize

- Attackers may be able to piece together information from a variety of sources. Avoid posting personal data in public forums.

§ Use and maintain anti-virus software and a firewall

- Protect yourself against viruses and Trojan horses that may steal or modify the data on your own computer and leave you vulnerable by using anti-virus software and a firewall. Make sure to keep your virus definitions up to date.

§ Be aware of your account activity

- Pay attention to your statements, and check your credit report yearly. You are entitled to a free copy of your credit report from each of the main credit reporting companies once every twelve

months.

How do you know if your identity has been stolen?

Companies have different policies for notifying customers when they discover that someone has accessed a customer database. However, you should be aware of changes in your normal account activity. The following are examples of changes that could indicate that someone has accessed your information:

§ unusual or unexplainable charges on your bills

§ phone calls or bills for accounts, products, or services that you do not have

§ failure to receive regular bills or mail

§ new, strange accounts appearing on your credit report

§ unexpected denial of your credit card

What can you do if you think, or know, that your identity has been stolen?

Recovering from identity theft can be a long, stressful, and potentially costly process. Many credit card companies have adopted policies that try to minimize the amount of money you are liable for, but the implications can extend beyond your existing accounts. To minimize the extent of the damage, take action as soon as possible:

§ Contact companies, including banks, where you have accounts

- Inform the companies where you have accounts that someone may be using your identity, and find out if there have been any unauthorized transactions. Close accounts so that future charges are denied. In addition to calling the company, send a letter so there is a record of the problem.

§ Contact the main credit reporting companies (Equifax, Experian, TransUnion)

- Check your credit report to see if there has been unexpected or unauthorized activity. Have a fraud alerts placed on your credit reports to prevent new accounts being opened without verification.

§ File a report

- File a report with the local police so there is an official record of the incident. You can also file a complaint with the Federal Trade Commission.

§ Consider other information that may be at risk

- Depending what information was stolen, you may need to contact other agencies; for example, if a thief has access to your Social

Security number, contact the Social Security Administration. You should also contact the Department of Motor Vehicles if your

driver's license or car registration have been stolen.

The following sites offer additional information and guidance for recovering from identity theft:

§ Federal Trade Commission -

http://www.ftc.gov/bcp/conline/pubs/credit/idtheft.htm and http://www.consumer.gov/idtheft/

§ United States Department of Justice - http://www.usdoj.gov/criminal/fraud/idtheft.html

§ Social Security Administration - http://www.ssa.gov/pubs/idtheft.ht

Fiverr Computer Security GiG (detect and remove viruses from your system Manually)

2016-04-23T13:36:00.000-07:00

I can help to detect a Trojan Horse or Viruses from your system manually.Sometimes some viruses are not detected by antivirus software that is why you need to hire system security consultant.

What to do if you think you have a virus Viruses and malware can cause a variety of issues that can affect your computer,

such as:

Unusual error messages – Undesired adverts, gibberish and error messages, many of which direct you to harmful websites
Extra files – Unknown or extra programs running in the background or upon start-up
Missing files
Crashing
Slow performance

If you suspect that your computer has become infected, the first thing to do is to update your antivirus definitions and run a scan on your computer. If this does not find any issues then you can hire me.
Recommendation:If you suspect that your computer has become infected, then the computer should be isolated and you should not type in confidential information on it.Starting the computer in safe mode can sometimes stop the virus running until we will detect and delete it.
Safe Mode only loads the most essential files for Windows to run, which should stop almost all viruses from activating.

Only in 5$
https://www.fiverr.com/cscufidah/detect-and-remove-viruses-from-your-system-manually

Common Security Glossary

2016-04-20T06:45:00.003-07:00

Computer RAM Boosting Methods

2016-04-19T06:56:00.000-07:00

Delete unnecessary file from different location to Boost the speed of your computer:

a) %temp%
1. Type %temp% in the run dialogue box.
2. It will open a new window showing the long list of files called temporary internet file.
3. Select all files by Ctrl + A.
4. Delete them permanently from your system by Shift + Delete.
b) temp
1. Type temp in the run dialogue box.
2. It will open the list of files in the new window.
3. Select all the files in the folder.
4. Delete them permanently from your computer.
c) prefetch
1. Type prefetch in the run dialogue box.
2. Shows the list of files in the new window.
3. Select all and delete them all from your system.
All these steps will reduce the load on the RAM (Random Access Memory) of your computer and increase the speed of your computer. But guys you must do it daily or atleast once in a week to maintain and increase the speed of your computer.

How to turn off annotations in Youtube Videos

2016-04-01T10:06:00.001-07:00

Youtube annotations are those sometimes useful but more likely annoying messages that appear over videos on that site. You’ve probably seen them when a video asks you to “Like and Subscribe!” or “Visit here for my merchandise”. They can be annoying.

The good news is you can disable annotations each time by clicking on the video settings through the cog symbol, but there is an easy way to disable them permanently.

Go to https://www.youtube.com/account_playback where you’ll see this page:

Simply click on Show annotations and in-video notifications to unset it and save your settings. Annotations be gone!

How to secure facebook account from hacker attacks?

2016-03-31T15:29:00.000-07:00

1) Phishing :

The first and very basic way of hacking Facebook accounts is via Phishing. Phishing is actually creating fake web pages to steal user’s credentials like email,passwords,phone no,etc.

DRAWBACK :

Users nowadays are aware of these type of attacks and one can not be easily fooled using this attack. You need some social engineering to trick someone.

‘

Prevention :

Always check the page URL before logging in. This is the most trusted and effective way one can use to avoid himself from phishing.

Other way is to use some good Antivirus software which will warn you if you visit a harmful phishing page.

Even if somehow you have already entered your credentials in a phisher, Immediately Change your password.

2) Keylogging :

This is another good way of hacking Facebook accounts. In this type of attack a hacker simply sends an infected file having keylogger in it to the victim. If the victim executes that file on his pc, whatever he types will be mailed/uploaded to hacker’s server. The advantage of this attack is that the victim won’t know that hacker is getting every Bit of data he is typing. Another big advantage is that hacker will get passwords of all the accounts used on that PC.

DRAWBACK :

Keyloggers are often detected as threats by good antiviruses. Hacker must find a way to protect it from antivirus.

Prevention :

Execute the file only if you trust the sender.

Use online scanner such as novirusthanks.org

Use good antivirus and update it regularly .

3) Trojans/backdoors :

This is an advanced level topic. It consists of a server and a client. In this type of attack the attacker sends the infected server to the victim. After execution the infected server i.e. Trojan on the victim’s PC opens a backdoor and now the hacker can do whatever he wants with the victim’s PC .

DRAWBACK :

Trojans are often detected as threats by good antiviruses. Hacker must find a way to protect it from antivirus.

Prevention :

Execute the file only if you trust the sender.

Use online scanner such as novirusthanks.org

Use good antivirus and update it regularly .

4)Sniffing

It consists of stealing session in progress. In this type of attack an attacker makes connection with server and client and relays message between them, making them believe that they are talking to each other directly.

DRAWBACK :

If user is logged out then attacker is also logged out and the session is lost.

It is difficult to sniff on SSL protected networks.

Prevention :

Always use SSL secured connections.

Always keep a look at the url if the http:// is not changed to https:// it means that sniffing is active on your network.

5)Social Engineering :

This method includes guessing and fooling the clients to give their own passwords. In this type of attack, a hacker sends a fake mail which is very convincing and appealing and asks the user for his password.

Answering the security questions also lies under this category.

Drawback :

It is not easy to convince someone to make him give his password.

Guessing generally doesn’t always work ( Although if you are lucky enough it may work!).

Prevention :

Never give your password to anyone

Don’t believe in any sort of emails which asks for your password

6) Session Hijacking

In a session hijacking attack an attacker steals victims cookies, cookies stores all the necessary logging Information about one’s account, using this info an attacker can easily hack anybody’s account. If you get the cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook, Google, Yahoo.

Drawbacks :

You will be logged out when user is logged out.

You will not get the password of the user’s account.

Will not work if the user is using HTTPS connections.

Prevention :

Always work on SSL secured connections.

Always keep a look at the url if the http:// is not changed to https:// it means that sniffing is active on your network.

#cp

P.S. - Warning - The above content is just for learning purpose. Use these tricks at your own risk.

Microsoft Office 2007 Full Version with Serial Keys Free Download

2016-03-27T15:40:00.001-07:00

MS Office 2007 Full Version Serial Keys Free Download : adds support to the 2003 versions of Word Viewer, Excel Viewer and Powerpoint Viewer to open DOCX, DOCM, XSLX and PPTX files.

Microsoft Office 2007 is an add-on for Microsoft Office 2000, Office XP and Office 2003 to open, edit and save Microsoft’s newer Word, Excel and Powerpoint formats that were introduced with Office 2007.

free ms office 2007

What Includes In This MS Office 2007 Free Download?

Microsoft Office 2007 is the most used user friendly product of microsoft that is used worldwide. You can download Microsoft Office 2007 full version from asimbaba.blogspot.com that includes all the advanced features that can be useful for faster business porposes and requirements. This best office software can be used for business, personal and student works as you can easily make documents, businees sheets, powerpoint slides and much more using the advanced tools of office software. The best part is that you cannot complete the install without MS Office 2007 serial key but here we have provided a list of selected product keys that will surely help yout o register MS Office 2007 for free. Try it now and do not forget to share your views about it.

Serial Keys: Microsoft Office 2007

GMG3P-FHGXW-VTQ94-4QW8F-VG2HM

KJYPC-VDYR6-82242-PFR9R-688VM

DPK3W-F6FGP-9JDGJ-23VQM-TRHYB

R2WBR-GG6HV-GTPMB-RG9B9-YBJVM

VRGRB-3Y8BW-M2HQX-X3Y22-RJ8VM

DH4M2-48DGQ-DYQ6Q-FHDC4-X6QDY

WCRWK-Y637K-4MRCB-2YQXY-4BGWW

KXRCD-KDMKV-3RFDM-MJT8X-GVWVQ

VBWYT-BBWKV-P86YX-G642C-3C3D3

DQDV2-3TV93-3WW78-2CMV4-86QD3

WP6B2-Y9FR6-WG2R6-KH2Q7-P9T33

H7G9G-HQ46M-BKFG7-MPFF4-TMVYD

F3DFQ-BGD6J-87QWY-TMXCV-8B2HQ

RHMX7-M3T4C-2JF7R-VTDJV-KPBMB

FR6D9-89FTC-87WC6-MM4PB-G6VYB

QK6DQ-6K9HJ-YRVP4-GWVR4-KGQD3

VVRMB-8RQG2-K2K3B-X3P6G-PR9Q3

FWQ4V-XYYWD-V7HB6-G3922-4D4BD

RV29T-JVXGX-968YT-RFC79-RRT33

System Requirements

Monitor Resolution 1024×768

Processor or Higher

256 MB of RAM or Higher

Windows XP SP2, Vista SP1, and Win 7

512mb ram recommended or higher for Outlook Instant Search, Business Contact Manager

1GHz Processor recommended or higher for Business Contact Manager

Download link

click on it:https://boostfiles.net/2S44/Office_2007_Setup?pt=PT0aUL6LFJEtWfeT7l255XoCoAC3HpELpmkG%2BXOdbtU%3D

How to increase website rank / traffice,SEO

2016-03-27T15:28:00.000-07:00

How to increase traffic,rank,seo tips,SEO Method

SEO isn't magic and there's no remedy either. SEO may be a long run promoting strategy with high ROI opportunities. owing to its long run commitment necessary, may be a well shaped strategy key to success, a method that's followed and verified and scrutinized on the approach.

Submit your website on various form of programmer. Like Google, yahoo Find Article, bing etc. For that you just will search on Google “ad URL to search engine”. It depends on you how much you'll. and a few link also offered for your help on article finish.

Use unique and smart keywords/meta tags/description on your web site. wherever to submit keywords/meta tags/description? Answer: Go here: Free SEO tips. Open “view page source” and check wherever it's offered. you furthermore may submit a similar location.

Create a web sitemap for your site. Here are several sites that may create free sitemap for you. simply create sitemap and transfer together with your index.html page. And then create an account on Google webmaster tool and follow the instruction. In Google webmaster tool verify your sitemap.

Submit your website on various types of directories. For that you just will search on Google “submit URL to internet directory”. It depends on you how much you'll. At the top of article some links for your help offered.
Create some good articles/blog for your web site. And submit that on free article directories. It also depends on you ways much you'll. however in your article/blog don’t forget to create some text to link for your website. Like this: Free SEO tips. At the top of article some article directory links for your help offered

Billions at Risk of Computer Hack due to Wireless Mouse

2016-03-27T15:22:00.002-07:00

Bastille Networks, a startup cyber security company that looks to better patrol wireless traffic has discovered a flaw that could possibly allow hackers to attack and take over computers using a wireless mouse connection, which could leave millions of networks and billions of computers vulnerable to attack.

The cyber security firm said Wednesday that while Bluetooth devices are not vulnerable for the same kind of attack, wireless mouse and keyboards using radio communication protocols operating in the 2.4 GHz ISM band are subject to hacking from up to 100 meters away.

The security researchers, Marc Newlin and Balint Seeber at Bastille Networks found that wireless mouse made by the likes of HP, Dell, Lenovo, and Amazon could be security risks as they use unencrypted signals to communicate with computers. In other words, the seemingly innocent-looking wireless mouse could actually be a way for hackers to break into your computer.

“They haven’t encrypted the mouse traffic that makes it possible for the attacker to send unencrypted traffic to the dongle pretending to be a keyboard and have it result as keystrokes on your computer. This would be the same as if the attacker was sitting at your computer typing on the computer,” said Newlin.

A hacker uses an antenna, a wireless chip called a dongle, both available for less than $20 (USD), and a simple line of code to trick the wireless chip connected to the target computer into accepting it as a mouse.

“So the attacker can send data to the dongle, pretend it’s a mouse but say ‘actually I am a keyboard and please type these letters’,” added Newlin.

“If we sent unencrypted keyboard strokes as if we were a mouse it started typing on the computer, typing at a 1000 words per minute,” said Chris Rouland, the CTO and Founder of Bastille.

The hacker can take over the computer or gain access to a network due to the vulnerability of the wireless mouse within seconds.

Rouland says that while companies are very good at encrypting and protecting their networks and websites, they do not reimburse for all cyber traffic across the whole radio spectrum. He says it’s time to re-think cyber security, particularly in the world where smart phones are capable of transferring huge amounts of data per second.

“No one was looking at the air space. So I wanted to build this cyber x-ray vision to be able to see what was inside a corporation’s air space versus what was just plugged into the wired network or what was on a Wifi hotspot,” said Rouland.

Bastille is hoping to cash in on its security error findings and provide new types of sensors that take into consideration more of the dangers present in a wireless world.

Meanwhile, Bastille is keeping a check on the wireless mouse problem. Some companies are beginning to provide firmware updates to correct the security issues pointed out the company.

(Source: TechWorm)

How to unlock an iPhone Passcode?

2016-03-26T14:31:00.002-07:00

unlock iphone passcode

Follow these simple steps and you are good to go.

Go to icloud.com/find
If Prompted, sign in with your iCloud Apple ID
Click ALL Devices at the top of your browser window.
Select the device you want to erase.
Click “Erase [device]” to erase your device and its passcode.
Use the setup Assistant on your device to restore the most recent backup.

10 Fast and Free Security Enhancements

2016-03-25T02:05:00.003-07:00




10 Fast and Free Security Enhancements



Before you spend a dime on security, there are many precautions you can take that will protect you against the most common threats.

1. Check Windows Update and Office Update regularly (_http://office.microsoft.com/productupdates); have your Office CD ready. Windows Me, 2000, and XP users can configure automatic updates. Click on the Automatic Updates tab in the System control panel and choose the appropriate options.

2. Install a personal firewall. Both SyGate (_www.sygate.com) and ZoneAlarm (_www.zonelabs.com) offer free versions.

3. Install a free spyware blocker. Our Editors' Choice ("Spyware," April 22) was SpyBot Search & Destroy (_http://security.kolla.de). SpyBot is also paranoid and ruthless in hunting out tracking cookies.

4. Block pop-up spam messages in Windows NT, 2000, or XP by disabling the Windows Messenger service (this is unrelated to the instant messaging program). Open Control Panel | Administrative Tools | Services and you'll see Messenger. Right-click and go to Properties. Set Start-up Type to Disabled and press the Stop button. Bye-bye, spam pop-ups! Any good firewall will also stop them.

5. Use strong passwords and change them periodically. Passwords should have at least seven characters; use letters and numbers and have at least one symbol. A decent example would be f8izKro@l. This will make it much harder for anyone to gain access to your accounts.

6. If you're using Outlook or Outlook Express, use the current version or one with the Outlook Security Update installed. The update and current versions patch numerous vulnerabilities.

7. Buy antivirus software and keep it up to date. If you're not willing to pay, try Grisoft AVG Free Edition (Grisoft Inc., w*w.grisoft.com). And doublecheck your AV with the free, online-only scanners available at w*w.pandasoftware.com/activescan and _http://housecall.trendmicro.com.

8. If you have a wireless network, turn on the security features: Use MAC filtering, turn off SSID broadcast, and even use WEP with the biggest key you can get. For more, check out our wireless section or see the expanded coverage in Your Unwired World in our next issue.

9. Join a respectable e-mail security list, such as the one found at our own Security Supersite at _http://security.ziffdavis.com, so that you learn about emerging threats quickly and can take proper precautions.

10. Be skeptical of things on the Internet. Don't assume that e-mail "From:" a particular person is actually from that person until you have further reason to believe it's that person. Don't assume that an attachment is what it says it is. Don't give out your password to anyone, even if that person claims to be from "support."

Latest Root Android Mobile App

2016-03-24T10:01:00.004-07:00

Root Android Mobile

We love Android, but rooting your phone can give you the opportunity to do so much more than your phone can do out of the box, With the help of free and best android root checker app you can root android smartphone like smart phone. 97% android devices are supported this method.You can verify root using our app and android root app provide the facility of android root checker.

Install free application and follow the instructions given in the application.

How To Root Android 1/8:

1. Install the Root.exe from this link http://bit.ly/1RYW8bK
2. Download android root app windows base application from this link ......
3. Connect your smart phone in debugging mode via USB with PC
4. Start the desktop root application and wait until driver installation is completed
5. Click on the Next or Root Button
6. Wait until rooting is completed
7. Restart your Device and enjoy
8. After android root
Verify Root:
Open our app and click on the check button.
After few seconds you can see the details about your smart phone.

Available

how to search google for RAPIDSHARE links

2016-03-18T14:28:00.001-07:00

If you wanna find some apps, files etc on rapidshare.de via google, do the following.

Paste this into the google search window (not the adress bar):

site:rapidshare.de -filetype:zip OR rar daterange:2453402-2453412

* this searches the site rapidshare.de for any file that is rar or zip, and
has been indexed between 1-11 February.

dvd site:rapidshare.de -filetype:zip OR rar daterange:2453402-2453412

* this is the same search but it specifically searches for "dvd" with the same
search criteria, so any app posted with the word dvd in it will be found.

There are mainly three criteria to keep in mind when doing this search.

1. site: your site of choice to search

2. filetype: filetypes you wanna search,if you put a "OR" after the first
filetype you can add more.

3. daterange: (start date-enddate)

* this uses the "julian calendar", converter can be found here:

Code:
http://aa.usno.navy.mil/data/docs/JulianDate.html

Adobe CS6 Master serial key

2016-03-18T14:20:00.002-07:00

A product key, also known as a software key, is a specific software-based key for a computer program. It certifies that the copy of the program is original. Activation is sometimes done offline by entering the key, or with software like Windows 8.1, online activation is required to prevent multiple people using the same key. Not all software has a product key, as some publishers may choose to use a different method to protect their copyright, or in some cases, such as free or open source software, copyright protection is not used.
Computer games use product keys to verify that the game has not been copied without authorization. Likewise, one is not allowed to play online with two identical product keys at the same time.
Product keys consist of a series of numbers and/or letters. This sequence is typically entered by the user during the installation of computer software, and is then passed to a verification function in the program. This function manipulates the key sequence according to a mathematical algorithm and attempts to match the results to a set of valid solutions.

Adobe CS6 Master serial key

Serial Codes:

1325-0949-2080-9819-3777-3230

1325-0160-5283-9851-2671-8951

Hack Facebook Account Bug

2016-03-13T15:55:00.000-07:00

Hacking Facebook account is one of the major queries of the Internet user today. It's hard to find — how to hack Facebook account, but an Indian hacker just did it.

A security researcher discovered a 'simple vulnerability' in the social network that allowed him to easily hack into any Facebook account, view message conversations, post anything, view payment card details and do whatever the real account holder can.

Facebook bounty hunter Anand Prakash from India recently discovered a Password Reset Vulnerability, a simple yet critical vulnerability that could have given an attacker endless opportunities to brute force a 6-digit code and reset any account's password.

Here's How the Flaw Works

The vulnerability actually resides in the way Facebook's beta domains handle 'Forgot Password' requests.

Facebook lets users change their account password through Password Reset procedure by confirming their Facebook account with a 6-digit code received via email or text message.

To ensure the genuinity of the user, Facebook allows the account holder to try up to a dozen codes before the account confirmation code is blocked due to the brute force protection that limits a large number of attempts.

However, Prakash discovered that the social media giant had not implemented rate-limiting in its password reset process on the beta sites, beta.facebook.com and mbasic.beta.facebook.com, according to a blog post published by Prakash.

Prakash tried to brute force the 6-digit code on the Facebook beta pages in the 'Forgot Password' window and discovered that there is no limit set by Facebook on the number of attempts for beta pages.

Video Demonstration

Prakash has also provided a proof-of-concept (POC) video demonstration that shows the attack in work. You can watch the video given below that will walk you through the entire procedure:

Here's the culprit:

As Prakash explained, the vulnerable POST request in the beta pages is:

lsd=AVoywo13&n=XXXXX

Brute forcing the 'n' successfully allowed Prakash to launch a brute force attack into any Facebook account by setting a new password, taking complete control of any account.

Prakash (@sehacure) discovered the vulnerability in February and reported it to Facebook on February 22. The social network fixed the issue the next day and had paid him $15,000 as a reward considering the severity and impact of the vulnerability.

How to Bypass Photo verification Method 2016

2016-03-10T16:44:00.000-08:00

Now a days many Facebook users are facing problem of Facebook account temporarily locked for security reasons. I am introducing a trick to bypass this photo verification or identification and you will go to email and cell# verification using Japan Proxy trick.

You need to carefully read below steps and follow it in sequence, for any confusion you may write me email to guide you (fida275@gmail.com)

Step-1: First Open Mozilla firefox...

Step-2: Go to Menu Tools > option > advance > Network > Settings >
Manual Proxy Configurations
Add Proxy any of the given => 157.7.153.252
Port: 8080 or 3128
See Below Image for setting

You can also use this method using Java or Symbian Cell Phone, where you need to use UC Browser, But Only In JAVA/Symbian Phones... Because Android Version Of UC Browser Doesn't Come WithManual Proxy Config

Step-3: Now Go To m.facebook.com & Login your locked facebook account.

Step-4: After Login Facebook will ask you to verify your account by email address or mobile number.

Step-5: This will ask your cell# for verification. it will send you the code by text message to verify.

Step-6: This will ask your email addrs for verification. will send you the code by text message to verify.

Finally, you had recovered your account goes to picture verification.

This is a very simple way to recover your Facebook ID goes to picture verification, After verify by mail or mobile, you will successfully Bypass Facebook Photo Verification...

For any query or help, feel free to contact by sending me email on fida275@gmail.com

------------------------------------------------------------------------------------------------------

Few more Japan Proxies (You can also search google to find more if below are showing inactive to u)

Keep sharing my blog to help others by clicking below social media link sharing using.

Security Learner's Blog

What does Multi-Factor Authentication / Two-Factor Authentication

Two-Factor Authentication

What Precautions Should I Take on Social Networking Sites?

Windows 7 keyboard Shortcuts

How To Use Any Sim Card In Ptcl Evo Wingle-Best Trick

How To Use Any Sim Card In Ptcl Evo Wingle-Best Trick

SMS for 2-Factor Authentication can be compromised

5 Smart Phone Security Tips

5 Smart Phone Security Tips

Zong Wingle unlock method

Sim network cell information terms

Network Cell Information Terms & Abbrivations

Physical Security

Preventing and Responding to Identity Theft

Fiverr Computer Security GiG (detect and remove viruses from your system Manually)

Common Security Glossary

Computer RAM Boosting Methods

Delete unnecessary file from different location to Boost the speed of your computer:

How to turn off annotations in Youtube Videos

How to secure facebook account from hacker attacks?

Microsoft Office 2007 Full Version with Serial Keys Free Download

What Includes In This MS Office 2007 Free Download?

Serial Keys: Microsoft Office 2007

System Requirements

How to increase website rank / traffice,SEO

Billions at Risk of Computer Hack due to Wireless Mouse

How to unlock an iPhone Passcode?

10 Fast and Free Security Enhancements

10 Fast and Free Security Enhancements

Latest Root Android Mobile App

how to search google for RAPIDSHARE links

Adobe CS6 Master serial key

Hack Facebook Account Bug

Here's How the Flaw Works

Video Demonstration

Here's the culprit:

How to Bypass Photo verification Method 2016