Technology

How to get into DevOps?

2023-01-17T13:56:00.001+05:00

Getting into the field of DevOps can be challenging, but with the right skills, experience, and mindset, you can begin a successful career in this field. Here are a few steps you can take to start your journey in DevOps:

Learn the basics: Familiarize yourself with the basic concepts of DevOps, such as continuous integration, continuous delivery, and infrastructure as code. Read books, articles, and tutorials to get a good understanding of the principles and practices of DevOps.

Learn the tools: DevOps is all about automation, and to get started, you need to learn the tools that are commonly used in the field. Some popular tools include Git, Jenkins, Ansible, Puppet, and Docker.

Get hands-on experience: The best way to learn is by doing. Look for opportunities to apply the concepts and tools you've learned to real-world projects. This could be through an internship, a personal project, or by contributing to open-source projects.

Build a portfolio: Create a portfolio of your work that showcases your skills and experience. This will help you stand out when applying for jobs.

Network: Attend meetups and conferences, and connect with other professionals in the field. This will help you learn from others and make valuable connections that can help you find job opportunities.

Get certified: Certifications such as AWS Certified DevOps Engineer, or Azure DevOps Engineer Expert can validate your skills and demonstrate to potential employers that you have the knowledge and experience required to be a successful DevOps professional.

Keep learning: DevOps is a constantly evolving field, so it's important to stay up-to-date with the latest tools and best practices. Keep learning and experimenting with new technologies to stay relevant and marketable.

Remember that becoming a DevOps professional takes time and effort, but with dedication and persistence, you can achieve your goal.

Guide to a Cyber Secure Home

2023-01-17T13:46:00.003+05:00

As technology continues to advance and more and more devices become connected to the internet, it's important to take steps to ensure the security of your home. Here are a few tips to help you create a more cyber-secure home:

Use strong and unique passwords: Strong passwords are essential for keeping your devices and accounts secure. Use a mix of letters, numbers, and special characters, and avoid using easily guessed information like your name or birthdate.

Keep your software updated: Software updates often include security patches that address known vulnerabilities. So, make sure to keep all your devices and software updated to the latest version.
Use a firewall: A firewall is a piece of software that helps protect your computer from unwanted traffic. It can block malicious traffic and help keep your personal information safe.
Use a VPN: A VPN (Virtual Private Network) encrypts your internet connection and makes it more difficult for hackers to intercept your data.Secure your wireless network: Make sure to use a strong password for your wireless network and consider using WPA3 encryption, which is more secure than the older WPA2.
Be wary of suspicious emails and links: Be cautious when clicking on links in emails or text messages, especially if they're from an unknown sender. These links can contain malware that can infect your device.
Use anti-virus software: Anti-virus software helps to protect your computer from malware and other malicious software. It's essential to have anti-virus software installed and updated on all of your devices.
Backup important data: Regularly backup important data such as documents, photos, and videos, so you can easily recover them in case of a cyber attack.

By following these steps, you can help to create a more cyber-secure home and protect your personal information from cybercriminals. Remember to also educate your family members and friends about cyber security and safe internet practices.

Comptia Security+ Study Guide Study Guide 7th Edition

2019-10-22T21:56:00.001+05:00

Download Here

Troubleshooting ASA Firewalls

2019-10-22T21:53:00.001+05:00

Troubleshooting ASA Firewalls Book by Certified CCIE Techie Kevin Klous.

Download Here

CISA Review Question, Answers and Explanations 11th Edition

2019-02-14T17:19:00.000+05:00

The manual consists of 1000 MCQs, answers and explanations.

Download Here

CISA Review Manual 26th Edition

2019-02-14T16:50:00.000+05:00

ISACA is pleased to offer the 26'h edition of the CISA® Review Manual.111e purpose of this manual is to provide CISA candidates with updated technical information and references to assist in preparation and study for the Certified Information Systems Auditor exam.

The content in the manual has been substantially updated. Most of the changes made were to recognize and map to the new task and knowledge statements that resulted from the new CISA job practice analysis. Fmiher details regarding the new job practice can be found in the section titled NEW-CISA Job Practice and can be viewed at www.isaca.org/cisajobpractice and in the ISACA Exam Candidate Information Guide at www.isaca.org/examguide. The exam is based on the task and knowledge statements in the job practice. The development of the task and knowledge statements involved thousands of CISAs and other industry professionals worldwide who served as committee members, focus group participants, subject matter experts and survey respondents.

Download Here

Differences between On-prem Infra and Different Clouds

2019-02-14T15:57:00.003+05:00

On premises infrastructure is something that most organizations believe is the best strategy but there are options that need to be considered given that what major cloud service providers are offering

Major players in CSP business are:

AWS
AZURE
GOOGLE
ORACLE
IBM
ALI BABA

Following picture will define what you need to know about cloud differences with on premises infrastructure.

Common Banking Frauds

2019-02-14T13:40:00.000+05:00

Hottest target for Fraud and stealing money for hackers and thieves is Banking Industry, that is also hot in news now a days too. A bank is available to get defrauded via multiple channels but most common channels are:

Electronic Banking

Bank Cards

Occupational Fraud

Settlement

Lending

Financial Instruments

Awareness is required as to how banks get defrauded.

CISSP for Dummies - ISC2 Approved

2019-02-14T13:24:00.000+05:00

The CISSP certification is widely held as the professional standard for information security professionals. It enables security professionals to distinguish themselves from others in the information security field by validating both their knowledge and experience. Likewise, it enables businesses and other organizations to identify qualified information security professionals and verify the knowledge and experience of candidates for critical information security roles in their respective organizations. Thus, the CISSP certification is more relevant and important than ever before.

Download Here

CIS Controls Cloud Companion Guide

2019-02-13T21:12:00.002+05:00

The CIS Controls™ are a prioritized set of actions that collectively form a defense-in-depth set of best practices that mitigate the most common attacks against systems and networks. The CIS Controls are developed by a community of IT experts who apply their first-hand experience as cyber defenders to create these globally accepted security best practices. The experts who develop the CIS Controls come from a wide range of sectors including, retail, manufacturing, healthcare, education, government, defense, and others.

A complete guide is available for download below:

Download Here

How 'the invisible network' poses a major security threat

2017-09-27T00:15:00.000+05:00

If a hacker managed to switch off a life-support machine, the results could be fatal

Imagine a hacker remotely turning off a life support machine in a hospital, or shutting down a power station. These are the nightmare scenarios we face because many organizations haven't a clue how many unsecured devices are connected to their networks, cyber-security experts warn.
It was an ordinary day at a busy hospital - doctors, nurses and surgeons rushed about attending to the health of their patients.
For Hussein Syed, chief information security officer for the largest health provider in New Jersey, it was the health of his IT network that was keeping him busy.

And today, he was in for a surprise.

He knew he presided over a complex web of connected medical devices, computers, and software applications spread across RWJBarnabas Health's 13 hospitals. This included about 30,000 computers, 300 apps, a data centre, as well as all the mobile phones hooking up to the hospitals' wi-fi networks. Company mergers had only added to the complexity of these sprawling IT systems.

Hussein Syed discovered that there were around 70,000 devices connected to his network

But when he used a specialist IoT cyber-security program to carry out a full audit, he discovered that there were in fact 70,000 internet-enabled devices accessing the health firm's network - far more than he'd expected.

"We found a lot of things we were not aware of," Mr Syed tells the BBC, "systems that weren't registered with IT and which didn't meet our security standards."

These included security cameras and seemingly innocuous gadgets such as uninterruptible power supplies (UPSs) - units that provide back-up battery power in the event of a power cut.

"These unidentified devices could definitely have been access points for hackers who could have then found high-value assets on our network," says Mr Syed.

Hack in to a UPS and you could potentially switch off life-critical machines, he explains. Or hackers could steal patient data, encrypt it, then demand a ransom for its safe return.

On the black market "health data is worth 50 times more than credit card data", says Mr Syed.

Hospitals like this RWJBarnabas Health one in New Jersey are also complex IT networks

The audit "helped us protect our network," he adds, preferring not to dwell on what might have been.

Mike DeCesare, chief executive of ForeScout, the software provider Mr Syed brought in, says: "Businesses typically underestimate by 30% to 40% how many devices are linked to their network. It's often a shock when they find out.

"With the proliferation of IoT [internet of things] devices the attack surface for hackers has increased massively.

"Traditional antivirus software was designed on the assumption that there were just a few operating systems. Now, because of IoT, there are thousands."

ForeScout's software monitors a company's network and indentifies every device trying to access it, "not just from its IP [internet protocol] address, but from 50 other attributes and fingerprints", says Mr DeCesare.

The reason for these other layers of security is that it is "relatively easy" for hackers to mask the identity of a particular device - known as MAC [media access control] spoofing.

So ForeScout's software takes a behavioural approach to monitoring.

ForeScout boss Mike DeCesare says his company can spot rogue devices on the network

"We look at the traffic from all those different devices and analyse whether they are behaving like they should," he says.

"Is that printer behaving like a printer? So why is it trying to access other devices on the network and break in to the system?

"If we spot aberrant behavior we can disconnect the device from the network automatically."

Services from network monitoring firms - ForeScout, Solar Winds, IBM, SecureWorks, Gigamon and others - are becoming increasingly necessary in a world where everything - from lamp-posts to lawn sensors - is becoming internet-enabled.

According to Verizon's latest State of the Market: Internet of Things report there are now 8.4 billion connected devices - a 31% increase on 2016 - and $2tn (£1.5tn) will have been spent on the technologies by the end of 2017.

But as Verizon points out, lack of industry-wide standards for IoT devices is giving businesses major security concerns.

"IoT security is one of the biggest challenges we're facing right now," says Darren Thomson, chief technology officer and vice president, technology services at cyber-security firm Symantec.

The difficulty is that IoT devices are generally simple, cheap and low-powered, without the capability of running the antivirus programs operated by traditional computers.

"The challenge with critical infrastructure is that it wasn't built with security in mind," says Tom Reilly, chief executive of Cloudera, the IoT and data analytics platform.

"Smart cities are a great playing field for hackers - changing traffic lights, turning elevators on and off - there are many security exposures.

"We need to get ahead of them."

This necessitates a different approach to security, a growing number of experts believe.

In April, telecoms giant Verizon launched what it calls its IoT "security credentialing" service, whereby only trusted, verified devices are allowed to access a company's network.

Meanwhile, Cloudera has formed a strategic partnership with chip maker Intel.

"Intel makes the chips that are being used in many IoT sensors," explains Mr Reilly, "and all that data being created needs to land in a database like ours residing in a data centre.

"We authenticate all the devices - we're creating an end-to-end platform for the IoT world."

Rival GE Digital, a subsidiary of the global engineering giant GE, has also developed its own IoT and data analytics platform called Predix which it is outsourcing to big clients such as British Airways and oil giant Exxon.

IoT sensors are fitted to big machines, from gas turbines to aero engines, and these transmit "petabytes of data in real time that helps us work out how to optimise their maintenance", says Bill Ruh, GE Digital chief executive.

"We get all that data back via virtual private networks mostly in a highly secure encrypted fashion."

But if you don't have the resources to commit to an entire IoT ecosystem operated by a major tech company, behavioural network monitoring may be your next best bet.

Just bear in mind that your organisation's defences are only as strong as the weakest part.

Beware the invisible network.

Article Courtesy: BBC

Web Server Penetration Testing Checklist

2017-09-24T22:33:00.001+05:00

Web server pen testing performing under 3 major category which is identity, Analyse, Report Vulnerabilities such as authentication weakness, configuration errors, protocol Relation vulnerabilities.

1. “Conduct a serial of methodical and Repeatable tests “ is the best way to test the web server along with this to work through all of the different application Vulnerabilities.
2. “Collecting as Much as Information” about an organization Ranging from operation environment is the main area to concentrate on the initial stage of web server Pen testing.

3. Performing web server Authentication Testing, use Social engineering techniques to collect the information about the Human Resources, contact Details and other Social Related information.

4. Gathering Information about the Target, use whois database query tools to get the Details such as Domain name, IP address, Administrative Details, autonomous system number, DNS etc.

5. Fingerprint web server to gather information such as server name, server type, operating systems, an application running on the server etc use fingerprint scanning tools such as, Netcraft, HTTPrecon , ID Serve.

6. Crawel Website to gather Specific information from web pages, such as email addresses

7. Enumerate web server Directories to extract important information about web functionalities, login forms etc.

8. Perform Directory traversal Attack to access Restricted Directories and execute the command from outside of the Web server root directories.

9. Performing vulnerability scanning to identify the weakness in the network use the vulnerability scanning tools such as HPwebinspect, Nessus . and determine if the system can be exploited.

10. Perform we cache poisoning attack to force the web server’s cache to flush its actual cache content and send a specifically crafted request which will be stored in the cache.

11. Performing HTTP response splitting attack to pass malicious data to a vulnerable application that includes the data in an HTTP response header.

12. Bruteforce SSH,FTP, and other services login credentials to gain unauthorized access.

13. Perform session hijacking to capture valid session cookies and ID’s,use tools such as Burb suite , Firesheep ,jhijack to automated session hijacking.

14. Performing MITM attack to access the sensitive information by intercepting the altering the communications between the end users and web servers.

15. Use tools such as webalizer, AWStats to examine the web server logs .

CORE Impact pro

CORE Impact pro is the software solution for assessing and testing the vulnerabilities on the organization’s web servers, Network system’s , Endpoint systems, wireless networks, network devices ,Mobile devices ,IDS/IPS .

Important Checklist Suggested by Microsoft

Services

Unnecessary Windows services are disabled.
Services are running with least-privileged accounts.
FTP, SMTP, and NNTP services are disabled if they are not required.
Telnet service is disabled.

Protocols

WebDAV is disabled if not used by the application OR it is secured if it is required.
TCP/IP stack is hardened
NetBIOS and SMB are disabled (closes ports 137, 138, 139, and 445).

Accounts

Unused accounts are removed from the server.
Guest account is disabled.
IUSR_MACHINE account is disabled if it is not used by the application.
If your applications require anonymous access, a custom least-privileged anonymous account is created.
The anonymous account does not have write access to Web content directories and cannot execute command-line tools.
Strong account and password policies are enforced for the server.
Remote logons are restricted. (The “Access this computer from the network” user-right is removed from the Everyone group.)
Accounts are not shared among administrators.
Null sessions (anonymous logons) are disabled.
Approval is required for account delegation.
Users and administrators do not share accounts.
No more than two accounts exist in the Administrators group.
Administrators are required to log on locally OR the remote administration solution is secure.

Files and Directories
Files and directories are contained on NTFS volumes

Web site content is located on a non-system NTFS volume.
Log files are located on a non-system NTFS volume and not on the same volume where the Web site content resides.
The Everyone group is restricted (no access to \WINNT\system32 or Web directories).
Web site root directory has denied write ACE for anonymous Internet accounts.
Content directories have deny write ACE for anonymous Internet accounts.
Remote administration application is removed
Resource kit tools, utilities, and SDKs are removed.
Sample applications are removed

Shares

All unnecessary shares are removed (including default administration shares).
Access to required shares is restricted (the Everyone group does not have access).
Administrative shares (C$ and Admin$) are removed if they are not required (Microsoft Management Server (SMS) and Microsoft Operations Manager (MOM) require these shares).

Ports

Internet-facing interfaces are restricted to port 80 (and 443 if SSL is used)
Intranet traffic is encrypted (for example, with SSL) or restricted if you do not have a secure data center infrastructure.

Registry

Remote registry access is restricted.
SAM is secured (HKLM\System\CurrentControlSet\Control\LSA\NoLMHash).

Auditing and Logging

Failed logon attempts are audited.
IIS log files are relocated and secured.
Log files are configured with an appropriate size depending on the application security requirement.
Log files are regularly archived and analyzed.
Access to the Metabase.bin file is audited.
IIS is configured for W3C Extended log file format auditing.

Server Certificates

Ensure certificate date ranges are valid.
Only use certificates for their intended purpose (For example, the server certificate is not used for e-mail).
Ensure the certificate’s public key is valid, all the way to a trusted root authority.
Confirm that the certificate has not been revoked.

Active Directory - DNS and DHCP Security Checklists - Basic

2017-09-24T17:20:00.001+05:00

Active Directory

• Review the domain controller disk space reports.
• Backups of – AD, backup includes capturing system state, information related to AD database, logs, registry, boot files, SYSVOL and other system files.
• Evidence for AD replication is working correctly.
• Snapshot of event logs for persistent errors.
• Is defragmentation is done to increase performance as large directories running for long time can get large and fragmented.
• Proof of integrity of AD DS database files with respect to AD semantics using NTDSUTIL.
• Where password files are kept and who is responsible.
• Is there any formal method exists for adding new users?
• Is there any formal method of notifying the Administrator of staff changes exists, with access levels being amended without delay (particularly if staff are required to leave the organisation)?
• Any formal mechanism exists for changing users / access rights to the files.
• What is the User account/ID lockout due to invalid passwords attempts
• Are the IT Administrator users are also complying with these policies and IS there any generic IDs created in Active Directory?

DNS

• Snap short of DNS Records for obsolete static entries.
• Proof of Ensure DNS Scavenging is configured.
• Do we have clean up forwarders
• Have we remove stale zones
• Have we remove WINS dependencies (DNS is fully capable of providing all long and short name resolution services)
• Security Aspects
-Have we allowed only secure dynamic updates for all DNS zones.
-Is AD ACLs is used to secure access control of the DNS Server service.
-Snapshot of Audit Directory Service Access is enabled and what is the setting.
-Determine the parameters to prevent DNS flooding
-Determine the parameters to prevent Cache Poisoning Attacks, Man in the Middle Attacks
-Determine the Security log is maintained for DNS Update

DHCP

-Is there any network architecture diagram for appropriate details
-Do we have LAN port assignment are documented.
-Proof of whether legal IP addresses are being used and whether the organization is following a well-organized naming and IP-addressing and sub-networking scheme to prevent duplicate network and host IP addresses.
-Snap short of Audit Logging is enabled on DHCP Server.
-Confirm that the Full disk check enabled in DHCP Server when A set number of server events are logged and When the date changes on the server computer.
-Confirm NAC (Network Access Control) is in place and any unauthorized machine should be authenticated at machine level through NAC
-Snapshot of Static IPs should not be enabled to prevent DoS and spoofing attacks.
-Are we using any kind of MAC filtering
-Proof of DHCP Administrators monitor the configuration changes of the DHCP Servers.
-No Rogue Dynamic Host Configuration Protocol ( DHCP) servers are present on network. run Microsoft's DHCP Server Location
-Are logs for critical DHCP related events check. Is there any proactive monitoring solution for real-time data.
-Do we run offline maintenance against the dhcp.mdb file on a quarterly or half-yearly basis.
-What is the directory path in which the DHCP server stores audit log files.
-What is the maximum size restriction (in megabytes) for the total amount of disk space available for all audit log files created and stored by the DHCP service.
-What is the interval for disk-checking that is used to determine how many times the DHCP server writes audit log events to the log file before checking for available disk space on the server.
-What is the minimum size requirement (in megabytes) for server disk space that is used during disk-checking to determine whether sufficient space exists for the server to continue audit logging.

Certificates & Patches

1. ADFS Certificates for ‘Token Signing’ and ‘token decrypting’
2. Windows patch update report to show that all current, relevant patches, service packs and other updates to the operating system of Applications Servers have been applied.

Singapore leads the world in cyber attacks

2017-09-24T02:55:00.003+05:00

More cyber attacks are launched from Singapore than anywhere else in the world, according to a report from Israeli data security firm Check Point Software Technologies.

The small Southeast Asian country has overtaken Russia, China and the US as the top attacking nation.

Eying Wee, Check Point's Asia-Pacific spokeswoman, told Bloomberg that it was not unusual for Singapore to be featured among the top attacking countries as much of the internet traffic flowing through Singapore doesn't actually originate there.

Earlier in the year Singapore set up a new Defence Cyber Organisation (DCO) in order to monitor and defend the Singapore Armed Forces' (SAF) networks from cyber attacks around-the-clock.

The Cyber Security Agency of Singapore, a national agency overseeing cyber security strategy in Singapore, did not immediately respond to a request for comment.

Article Courtesy: FlipBoard

46,000 new phishing sites are created every day

2017-09-24T02:51:00.001+05:00

An average of 1.385 million new, unique phishing sites are created each month, with a high of 2.3 million sites created in May. The data collected by Webroot shows today’s phishing attacks are highly targeted, sophisticated, hard to detect, and difficult for users to avoid. The latest phishing sites employ realistic web pages that are hard to find using web crawlers, and they trick victims into providing personal and business information.

UNIQUE PHISING URLs PER MONTH

Phishing attacks have grown at an unprecedented rate in 2017

Phishing continues to be one of the most common, widespread security threats faced by both businesses and consumers. Phishing is the number 1 cause of breaches in the world, with an average of more than 46,000 new phishing sites created per day. The sheer volume of new sites makes phishing attacks difficult to defend against for businesses.

Today’s phishing attacks continue to be short-lived

The first half of 2017 highlights the continuing trend of very short-lived phishing sites, with the majority being online and active for only 4 to 8 hours. These short-lived sites are designed to evade detection by traditional anti-phishing strategies, such as block lists. Even if the lists are updated hourly, they are generally 3–5 days out of date by the time they’re made available, by which time the sites in question may have already victimized users and disappeared.

Attacks are increasingly sophisticated and more adept at fooling the victim

In the past, phishing attacks randomly targeted as many people as possible, with the hope that a substantial amount would open an infected attachment or visit a malicious web page. Today’s phishing is more sophisticated. Hackers do their research and utilize social engineering to uncover relevant personal information for individualized attacks. Phishing sites also hide behind benign domains and obfuscate true URLs, carrying more malignant payloads, and fooling users with realistic impersonated websites.

Mix of companies impersonated continues to evolve

Zero-day websites used for phishing may number in the millions each month, yet they tend to impersonate a small number of companies. Webroot categorized URLs by the type of website being impersonated and found that financial institutions and technology companies are the most phished categories. The top 10 companies being impersonated throughout the first six months of 2017 are:

Google – 35%
Chase – 15%
Dropbox – 13%
PayPal – 10%
Facebook – 7%
Apple – 6%
Yahoo – 4%
Wells Fargo – 4%
Citi – 3%
Adobe – 3%

Article Courtesy: HelpNetSecurity

Finally Kaspersky Security Softwares Ban to Use all US Government Agencies

2017-09-24T02:47:00.002+05:00

Finally, US Government Decide to Bans all the Kaspersky Security Software Products that is using by United States federal agencies since a lot of Spying Activity Controversy against the Kaspersky Products.

Kaspersky is Moscow, Russia Based Leading Cybersecurity Firm who Provides Many Security Products such as Anti-Virus, Internet Security, Endpoint Security, Cloud Security which claims to have 400 million users worldwide.

Department of Homeland Security (DHS) Release Immediate Order to Federal Executive Branch departments and agencies to take actions related to the use or presence of information security products, solutions, and services supplied directly or indirectly by AO Kaspersky Lab or related entities.

According to DHS Ststement, The risk that the Russian government, whether acting on its own or in collaboration with Kaspersky, could capitalize on access provided by Kaspersky products to compromise federal information and information systems directly implicates U.S. national security.”

Kaspersky Software usually Communicate Directly into every file on the computers which Protect by them and it keeps communicate with Kaspersky Labs To receiving Updates which usual Anti-Virus Softwares Does.

US Federal officials Suspect that it can be open a Backdoor to access sensitive information on government networks.

Kaspersky has strongly denied This Allegation

Kaspersky Labs Founder and CEO Eugene Kaspersky Strongly Deny this Allegation against his company as completely False and there is no Public Evidence.

Kaspersky Said, “Kaspersky Lab has never helped, nor will help, any government in the world with its cyberespionage or offensive cyber efforts, and it’s disconcerting that a private company can be considered guilty until proven innocent, due to geopolitical issues,”

Main Suspect of this Allegation is, Kaspersky AntiVirus Product taking complete File Access Permission after installing the software which Leads to exploited by malicious cyber actors to compromise those information systems.

Department of Homeland Security is concerned about the ties between certain Kaspersky officials and Russian intelligence and other government agencies .

DHS is providing an opportunity for Kaspersky to submit a written response addressing the Department’s concerns or to mitigate those concerns. The Department wants to ensure that the company has a full opportunity to inform the Acting Secretary of any evidence, materials, or data that may be relevant . DHS said.

Article Courtesy: GBH

Bank Alfalah

2017-03-03T22:53:00.002+05:00

Bank Alfalah is back online!

Bank Alfalah Internet Banking is Down!

2017-03-03T20:55:00.000+05:00

Bank Alfalah's Internet banking is down since more than 2 hours now. No bank official is taking responsibility of the downtime. It is reported to State Bank by Lantech's team.

Trump’s website allegedly defaced by Iraqi hacker

2017-02-22T13:36:00.001+05:00

A secure web server of Donald Trump’s campaign website has been purportedly hijacked by a hacker from Iraq.

Donald Trump, 45th President of the United States of America, won the Elections last year and held the office last month. Many of his decisions are criticized worldwide such as immigration ban on Muslims from 7 countries including Iraq.

A hacker from Iraq, who identified himself as “Pro_Mast3r”, defaced a server of a website linked to Trump’s presidential fundraising campaign, donaldjtrump.com, on Sunday. The hijacked web page displayed a picture of a man in fedora and a message that read,

“Hacked By Pro_Mast3r ~
Attacker Gov
Nothing Is Impossible
Peace From Iraq”

According to Arstechnica, the server, secure2.donaldjtrump.com, is apparently an actual Trump campaign server because its certificate is legitimate. It further stated that the hosting of this website is provided by US-based internet security company, Cloudflare. When a reference link to an image on another site was clicked, Chrome and Firefox prompted that the connection is not secure, Arstechnica reported.

The source code contains a link to JavaScript on a Google Code account, masterendi, which has been previously associated with the hack of about three websites. The account does not exist anymore.

The server of Trump’s website is now offline. There are no comments from Trump Pence Campaign and Cloudflare yet.

Source:TechJuice

50 GB of Free and encrypted Cloud Storage Mega.nz

2017-02-21T23:35:00.000+05:00

If you want free Cloud Storage, safe, secure and want to keep your files encrypted over the cloud and make sure that no one access them without your permission. Mega.nz is your answer.

You can even share your files with MD5 key and with separate MD5 key so you can share it separately with anyone you are sharing your files with.

Youtube Down

2017-02-21T23:25:00.001+05:00

Youtube Down

21st Day of Feburary 2017 got down at 11:21 PM PST(+5).
And is still down.

Banks Deny to Issue Credit Cards to Freelancers, Bloggers and Entrepreneurs

2014-11-24T01:27:00.000+05:00

Just yesterday we told you that Pakistan ranks in top five nations with freelancers. To be more precise, Pakistan stands 4th on Elance.com and fifth on oDesk for all the freelance work that is done on these websites.

Pakistanis’ presence isn’t limited to these two platforms only, in fact they manage to out-shine at all sorts of online markets. We recently reported about a Pakistani who managed to make over a million dollar out of just one theme that he sells on Themeforest, a marketplace for WordPress themes. And that’s one tiny example out of countless other un-told stories about the freelancers in Pakistan.

Then there are bloggers, social media experts, and countless other professionals who choose to conveniently work from their homes.

Freelancers, bloggers and entrepreneurs — who work from home — are denied by Pakistani banks the provision of credit cards because they don’t have offices.

All these freelancers, bloggers and entrepreneurs, that help the national economy by bringing millions of dollars of foreign currency into Pakistan each month, are denied by Pakistani banks the provision of credit cards.

Not to mention, we bloggers, freelancers badly need these credit cards for buying things (hosting/services) online that help us doing our businesses. Or let me put this in other words, freelancers and bloggers can’t do their businesses without these services that they buy online with credit cards.

Banks argue that one must have an office address and a home address to be able to comply with credit card issuance policy. They tell us that State Bank of Pakistan asks them to do so.

If government wants the freelancers to get them the top dollar without payment gateway, without credit cards then its a pity.

Who ever the responsible is or who ever is just overlooking this very serious issue, ultimately its the freelancers and bloggers who suffer. Not to mention, not every freelancer is resourceful (especially in the start) to have payment solutions in place without having the credit cards. I have personally shared my credit card with countless fellow bloggers to get them hosting accounts or domain renewals.

Now if Pakistan — I am talking about the government — wants us to help the economy then we should be provided with the tools that help us achieve our targets. If they want the freelancers to get them the top dollar without payment gateway, without credit cards then its a pity, its a shame for the government, or the banks or our financial system.

I just don’t know who will end this current policy, but it has to end and there should be a revision in policy for issuing credit cards.

Please note: Yes we know that Standard Chartered debit cards work online, but they fail to get the reimbursed funds, in case of refund. Moreover, there are certain services that accept just credit cards and not the debit cards just because of this very problem.

First-ever Data Management Summit Set to Launch in Karachi

2014-11-24T01:22:00.001+05:00

Systems Limited, a provider of technology solutions and services in Pakistan, in collaboration with Informatica Corporation, a leading independent provider of data integration software, is hosting the region’s first-ever Data Management Summit in Karachi, Pakistan.

The summit is set to bring together the Data Community’s brightest minds to push the boundaries of current thinking and discuss how data is fueling the next generation of technological innovation. Attendees will be able to learn about the latest trends, strategies and best practices on how to harness this potential by transforming fragmented, unpredictable, raw data into consolidated, high-quality, actionable information from any source, any technology, at any latency – and drive more business in 2015 and beyond.

This exclusive invitation only event will feature addresses by members of the executive leadership team from Systems Limited and Informatica. Additionally, customer cases will also be presented to enable attendees have first-hand knowledge on industry-specific approaches to deliver information businesses demand while reducing the complexity and cost of data integration and management.

“Today, with cloud applications, mobile devices, and globally dispersed teams — data is everywhere, and it touches all aspects of our lives. It is important, more than ever, to exploit this unstructured data and to translate it into useful insights to better understand the various aspects of business”, said Asif Peer, Managing Director and CEO – Systems Limited. He added, “This summit is a great opportunity for business and IT leaders to help them align their business strategies and objectives for the coming years with the best practices for data management and integration”

Ashruf Hassaballa, Regional Director – Informatica said, “In today’s global information economy, it is imperative for businesses to keep track of business-critical data and drive insights that can be used to offer more targeted products and services to the right customers at the right time. Over the years, Informatica has enabled over 5000 businesses to gain a competitive advantage by empowering them with timely, relevant and trustworthy data that can be used to design the right business strategies”,

Huawei Mobile Broadband Forum 2014 concludes in Islamabad

2014-11-24T00:58:00.001+05:00

Huawei Technologies held an insightful summit, titled; “Huawei Mobile Broadband Forum” from 8th to 12th September, 2014, in Islamabad.

The forum was designed to share Huawei’s global experience and new ideas in development of 3G and LTE Technologies, with operators, after the recent auction and issuance of of next-gen licenses. The forum themed; “Awing MBB” was held in response to the mobile broadband network deployment and operations – a vital topic in the industry, as the macro-economy and telecommunication technologies evolve rapidly.

Participants at the forum included; Technical, Marketing, Roll-out and higher management from five main stream operators; Mobilink, PTCL, Ufone, Telenor & CMPak.

Representatives of Huawei Group’s senior management included Ms. Yuxiangping – Huawei Middle East Regional Group and Senior Manager – Mr. Panen. While the senior executives from Huawei Pakistan (Pvt) Ltd included; Mr. Simon Geng (CEO), Mr. Ahmed Bilal (Dep. CEO) along with several experts from China.

Experts held their presentations on various strategies, practices and solutions for global mobile broadband, all of which have been customized for operators in Pakistan, through sharing of vision and discussions on Mobile Broadband Network technologies, aimed to develop strategies based on the Pakistan Market.

Operators appreciated Huawei Solutions and their contributions worldwide. They expressed their belief that the new innovations and technologies will benefit more and more telecom operators, while they enjoy everlasting benefits from this long-term partnership with Huawei.

How you can enjoy Warid’s 4G Trials

2014-11-24T00:52:00.002+05:00

The news that we all were waiting for is finally here: Warid is all set to launch its public trials for its 4G LTE services, we have confirmed with sources.

In the first phase, starting next week, postpaid customers of Warid will be offered free 4G LTE service as a trial. And yes, 4G services during trials will be FREE.

Almost all postpaid customers who are living in covered areas plus if they have 4G enabled handsets will be eligible to experience Warid’s 4G LTE services.

So here is how you can enjoy Warid’s 4G Trials:

    You need to be a postpaid customer
    You need to have Warid’s 4G SIM (instead of usual old SIM)
    You need to be with-in Warid’s 4G coverage areas

We are told that Warid has started delivering 4G compatible SIMs to those customers who have 4G enabled handsets and if they live in 4G coverage areas. Our sources tell that this process of upgrading customers’ SIMs will get completed before the start of trials.

So if you are a postpaid customer and yet you have not received a Warid 4G SIM then you are probably not in coverage area.

According to the details we have received, Warid will offer 4G LTE trials in six cities of Pakistan including: Islamabad, Lahore, Karachi, Faisalabad, Gujranwala and Rawalpindi (mainly the Bahria Town). I can tell you – from the coverage maps I have seen — that Warid’s 4G coverage is good and they are planning to expand their 4G LTE footprint in other cities.