Your Browser Is Sharing Your Secrets: Vulnerabilities Hiding In Plain Sight

Guido Vranken

Introduction

There are a number of factors that can affect or void the confidentiality of a web browsing session. Notable items include not using a secure channel (HTTPS) or using an ill-configured HTTPS endpoint, Cross-Site Scripting that can be used to intentionally transmit private information, session fixation, and crossbreed attacks such as CRIME (presupposes some session control as well as eavesdropping), and others.

Configuration of a website as well as penetration tests tend to focus on eliminating these risks so as to ensure confidentiality, while an old relic stemming from the HTTP protocol’s formative stage, – and one which has assumed omnipresence on the web –, remains largely ignored; from both my experience with bug bounties as well with the production of external websites I can attest that reliance on additional externally hosted JavaScript libraries tends to be preceded by less deliberation than some other, more infrastructural additions.

While the…

View original post 2,032 more words

The Neurochemistry of Positive Conversations

Two Evenings with Serendipity! – Man of the Heart, A Lalon Phokir Story @RangaShankara

Day 1:

My Office is in J.P Nagar, We go to Lunches with Colleagues and Friends around the place for Our Guests to Experience what Authentic food in Karnataka / Rajasthan Looks like, in that process came art, Chris and Chase wanted to get some art back home, based on Badri’s Recommendation we went to explore the place “Walking” After Lunch, Directions were clear and simple, Opposite “Ranga Shankara ” WoW !!

We were at work, need to go back soon, there are tons of things to complete before winding up, however, checked the schedule and regardless of the play wanted to be there because Theatre is simply irresistable, I wish I remembered the name since I visited this place for the first time. Nevermind!

We Got to this amazing place Frame Define , picked few beautiful frames,idols and paintings.

Next Day, after sendoffs and plesentaries and lot of Running literally and figuratively in the future, I Just started but in the Art front not the tech front which I am going to any ways.

Waved my Hand, Ranga Shankara, Damn, This Auto Guys … Insanely demanding or reluctant when you need them most, One turned off my route, he has got priorities, and most of the time more pressing than the demand. fortunately I made it when I explained its J.P Nagar Police Station Road, Ran and got the tickets.

Then I remembered my friend who wanted to pick another wonderful painting at the store, well … the painting guy was taking time, as you know about Bangalore traffic already. Knowing how much he wanted, I checked if he arrived, anxiously looking if every guy is carrying the painting, then comes a car, my friends and most important – They Are Guests of Honour. Athithi Devo Bhava, Never Turn Down the Guest. Went had really good time, There comes a Buzzing sound Starting the Play … 

No Regrets! First lesson before you start making your choices, My Friend Shyam told, years ago. Important one.

After seeing my friend happy with his precious possession, and sending off, I waited hoping the people to come out during interval , ofcourse I did not miss the detail there.

Rangashankara On First Day 

 

Hours passed while I was slowly eating finger chips in the cafeteria, cakes and More Tea  … I wish I had a time machine, apparently for the plays there is no fixed interval, and No one came out making me wait out side till the end of the play. good I had my laptop there to do some Pure tech at Pure Art place.

Finally People started coming out one by one and guards getting ready to do something I am not sure of … then asked how long is the interval ? They said looking at me like a fool, The Show is Over! I got furious, frustrated for waiting there , hoping to peek in during the interval. There Ends my first day of serendpity. Just Outside the walls of “RangaShankara” – Unpaid guard.

 

Day 2:

I went in the afternoon during the Lunch to check if enough tickers are there, there were but there was no change for 1000, and the person at the counter was good enough to confirm that there were many tickets available. Went back to office after lunch and got into work, when I looked out of the monitor it was 19:14 Damn, I thought I am going to miss it today aswell, jumped out of the office,took a cab and reached JIT, Not knowing what is in store …

Suman Mukhopadhyay enters the stage, explaining something about Music, and Unknown Fakir, Music is fine what this fakir life is going to be and did I waste my time ? were my thoughts … he departs and the same buzz, only difference, I am inside!

lights go off, with focused lights beaming on gentleman (Sudipto Chatterjee) dressed as “Lalon Phokir” and his team coming on stage singing and simple instruments to support themselves.

This is what I wrote during the interval —

Amid Traffic Jams and High Octane Life …

There is a place witnessing power packer performance, a treat to ears,eyes soul and brain “RangaShankara” playing “Man of the Heart – A play about the life and times of Lalon  Phokir.” It is not 3D, nor Digital Dolby, Yes the professor used multi media but probably its not the reason why the people never left the auditorium.

5 “Simple” Subjects, You might ignore in the broad day light, Joins to tell a story of equally pedestrian fakir, For the souls longing to realise the secret of life in much simpler subtle ways one doesn’t expect. His Name is Lalon Phokir as they might call him, but name you can ignore, his songs, his philosophy are as contemporary as they were 2 centuries ago, they are lullabies to ears, hearts and souls , however they wake up another world awakening you to see the life inward and out.

I didn’t feel I was breating, only making subtle moves when the legs or hands paining due to prolonged immobility. It was not just one , its Music, its Philosopy, Its Religion and Its beyond.

I Strongly Recommend reading about this Phokir, (mendicant) 

Water of the Ganga is called Holy.
But it’s the same water filling
The puddle on the road we call dirty!
That is how the Saain shapes Himself…
in size with the vessel He fills! – Lalon Phokir

http://www.parabaas.com/translation/database/reviews/lalon_drama.html

He lived simple life against the British rule, social injustice and bringing Unity across regions around him.

Team:Rendered by Daminee Basu, the song is accompanied by Satyaki Banerjee (dotara), Nazrul Shah (ektara), Mriganabhi Chattopadhyay (water effects), Rashmi Bhatt (wind effects) and supported vocally by Sudipto Chatterjee. 

Yet Again, A World is Destroyed,Is not the Only One! #DelhiGangRape

Excerpt from Manusmriti 3.56  Reads:

Sanskrit: 

यत्र नार्यस्तु पूज्यन्ते रमन्ते तत्र देवता: ।
यत्रैतास्तु न पूज्यन्ते सर्वास्तत्राफला: क्रिया: ।।

अर्थ = जहां पर स्त्रियों की पूजा होती है, वहां देवता रमते हैं । जहाँ उनकी पूजा नहीं होती, वहाँ सब काम निष्फल होते हैं ।
 

English :-

Yatra Naryastu Pujyante Ramante Tatra Devata ।
Yatraitaastu Na Pujyante Sarvaastatrafalaah Kriyaah ।।

Meaning: “Where Women Are Honored , Divinity Blossoms There; And Where They Are Dishonored , All Action Remains Unfruitful.”

We are Born in India which believes in Manusmriti, and believe Ravana was destroyed because he abducted Sita – Wife of Rama 

And Kauravas destroyed because they insulted Draupadi – Wife of Pandavas

Its so unfortunate that the girls irrespective of their age,dressing or anything being insulted in various ways unspeakable by any human or animal and most disgusting of all, being made responsible for their actions.

I Blogged Here way back in 2005 Now after 7 years there is no difference NOTHING, things have gone from Bad to worse. 

Delhi remains insecure for both men and women and more so to the women.

When a Girl child is born, her parents will be dreaming of her eyes, she speaks her first words and all small naughty things she would have told, then the schooling … Dreams of her education, marriage, grand children and husband Dreams … Dream and Dreams …

Then comes a fucking moron, who thinks her like an object, satisfying his desires, satisfies his sadistic pleasures and leaves her on the road … For a bastard like that it doesn’t matter if he just destroyed a world, he is just concerned about pleasure he experiences (I am not sure if that is the case too) Or just for fun.

Then some report, some are too scared to face the “Society” that doesn’t console or support but despirate to castrate her as if it was done willingly or because of “HER” attitude.

There are kids as small as 2 , 3, 4, 5 being used as objects – Who are these so called moral police? Do they even know what humanity is about ? without blaming the victim ? 

Its Physical and Mental Torture for life for the victim, from the burns and bruises and the Society. 

While the news and headlines of Delhi News is still in the air there are more scrollings going about kids being targetted in 3 states of about 5 yrs age. 

This time we are not silent, we need action, we need involvement, We need support from all walks of life volunaring to protect our girl child.

We Need to be proactive, protective or what you see is a country full of barbarians – Justice is only reactive in a country full of corrupt policy makers busy protecting their asses in the cover of Z category security.

We Need people who dare to go there stand up and make decisions. Not Puppets.

BTW The 23 year old girl who is undergoing emergency surgeries and in ICU was on her way to become a doctor to save lives. Its the pathetic state of the State.

Legal system in India gives right to defend and protect yourself or protect some one, so any Ideas about how to treat a rapist before handing over – Comments are welcome to make India a better place again.  

Secret Block – That was never mentioned.

 

 

Thank You My Son, I thought for a moment, It took almost a week to figure out how I can use,present and make it usable,reusable and adaptable.

Now Let me tell you the story.

Me and My 2 year old son were playing with the Lego Bricks, Tracks and Trains as usual, while I was trying to build something, he was (In my opinion) disturbing the structure continuously, I looked at him and presented what I thought is my point of view. He obviously did not agree and he has got his own Ideas of construction or what ever he may wish to call the process.

Like a typical seller for the product Idea, I pushed, requested, begged and tried to act as if I am angry (which I am obviously not) nothing worked. I continued to play for a while and had to take a break to attend a call from colleague.

I returned after a while, observing if my son learnt to construct or if messed up the half built structure I created before leaving, He doesn’t seem to change much but still enjoying what ever he has been doing but only with different tactics this time and different blocks.

Then I asked myself, why ?

This Manual for the Blocks come in 8 pages, explaining beautiful three dimensional images with handsome / beautiful kids as if they are being constructed by them, Here I have a guy busy not seeming to build or let us build any of the structures or shown in those pretty manuals, still happy and may be more happier than the ones in the manual ?

I think, this is the problem of growing old/ growing big and expecting everything as predicted/designed/assumed with expectation of getting the results that we perceive as natural outcomes of the actions we do. That happens only in dreams.

Before I loose track of the story, My Mistake was assuming the happiness is in constructing a building, while it is in experience, exploration, learning and doing mistakes and doing more mistakes in the process to learn. I forgot to enjoy the process while expecting the out come which My son was doing.

It took me long time, and a small break to come out, observe and analyse to understand it.

This holds true for everything. When you are in the middle of something people expect you to talk, your clients expect you to provide solutions and may be family expect you to guide. But It will always be better to come out physically and mentally for moment,observe then provide solution or try to understand the problem from different perspectives, it not only gives you better understanding but also better outcomes.

In Scrabble you have a Blank Tile this is that tile in life, which is never mentioned in management – Take a Break , Sit back , Relax. This gives you both perspectives as an Insider and out.

Good Luck

p.s There is nothing wrong to dismantle everything and start over with Fresh Ideas!

Photo Credit : http://www.onesmileymonkey.com

Google Maps for iOS6 *Not ready* for iPads. #iOS #GoogleMaps #Apple

I am sure many are mislead by the articles that are pouring in about the iOS Maps App, but that is built for small screens like iPod,iPhones iPod Touch Etc.,Don’t get mislead by the compatibility … It does show the maps on your giant ipad screens but you won’t like to if You have already done that mistake.

Compatible with iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod touch (3rd generation), iPod touch (4th generation), iPod touch (5th generation) and iPad. Requires iOS 5.1 or later. This app is optimized for iPhone 5. 

Need of Edutainment for Children and @Cbeebies Leaving India

There is no match for the quality of entertainment and education provided by BBC Cbeebies in India and I won’t be exaggerating if I say that it stands true around the world.

I have a 2 year old kid, He learnt Numbers, Alphabets, Manners, Story Telling and Behaving and Cleanliness to name few things he learnt through it.

I Won’t say parents and grand parents are equally responsible but the medium BBC used is more attractive and sticks in the children’s minds.

I was looking other so called children’s channels, They either had promotional shit, Tearing down papers, fights and dangerous activities that never appeared on cbeebies in past one year of our viewing.

In One of the channel I saw a mother character (I think its POGO a NO GO for me.) asks their kids, if you don’t go out you have to read books as if it is something wrong or punishment to read books.

Other Channel is busy promoting to spit the food and throw stuff at others or fight.

 

I Have no hope for these channels and wonder how such shitty channels like Cartoon Network or POGO are able to survive while BBC Ceebiebies backing off due to the competition from paid channels.

They should consider coming back and start innovating to give experience in profitable way.

Need of Edutainment for Indian Children #BBCIndia pulls plug for @Cbeebiesfun Leaving India

There is no match for the quality of entertainment and education provided by BBC Cbeebies in India and I won’t be exaggerating if I say that it stands true around the world.

I have a 2 year old kid, He learnt Numbers, Alphabets, Manners, Story Telling and Behaving and Cleanliness to name few things he learnt through it.

I Won’t say parents and grand parents are equally responsible but the medium BBC used is more attractive and sticks in the children’s minds.

I was looking other so called children’s channels, They either had promotional shit, Tearing down papers, fights and dangerous activities that never appeared on cbeebies in past one year of our viewing.

In One of the channel I saw a mother character (I think its POGO a NO GO for me.) asks their kids, if you don’t go out you have to read books as if it is something wrong or punishment to read books.

Other Channel is busy promoting to spit the food and throw stuff at others or fight.

I Have no hope for these channels and wonder how such shitty channels like Cartoon Network or POGO are able to survive while BBC Ceebiebies backing off due to the competition from paid channels.

We watched and never felt offended or felt need to regulate the channel while Cbeebies was there and we used to have no problem in feeding our son, who otherwise will avoid eating.

They should consider coming back and start innovating to give experience in profitable way.

Spread the word!

Stolen Ideas: #Apple Didn’t Build That & Why I still choose Apple!

This is my response/introspection after reading http://mashable.com/2012/10/27/apple-stolen-ideas/If you think apple is a company innovating software and hardware … You might start seeing it as a thief, may not appreciate much.Now see it as an innovative integrator, providing the best experience by combining the features people never knew were cool profitable and rewarding.Let me draft … Rest tomorrow

@samsungmobile Challenge: How 2 keep the Customer?

I would like you to click on Android Phone Menu(s) [opens in new window.]

All look alike, work alike, have similar hardware configurations, applications and functionality. Good for the customer ? May be and May be not!

I own laptops of various makes, but stuck to thinkpad over the years for one reason, I got addicted to the layout. though the underlying operating system either windows/linux/mac is going to be the same experience matters a lot too. with computers you have more freedom and possibility to differentiate the product substantially to make the switch little more difficult, you can play with fn keys, number pad, combination / convenience keys touch pad,trackpad,trackball you name it.

In the recent past, I upgraded to new ubuntu, which was way different in look and feel compared to the earlier versions, some liked it and majority hated it for lack of usability, it looked more like a fancy toy than operating system to us, so like many other I tried to find a way to get back to the look and feel I wanted it to have, changed the configurations to suite my tastes. this is laptop/desktop story.

With mobiles you are constrained to do any of that unless you really customise to great extent without making it useless in terms of upgrades etc., Mobile OS != Desktop OS.

With Android as underlying operating system google apps/play as the appstore you pretty much get the same menu,same apps, same look,feel and functionality.

There are only two possibilities if the user gets bored of the looks which can be possible after seeing same thing everywhere … because we like to see the change and obvious choices are either iphone or blackberry or a windows phone.

Ok lets assume users are not bored of it, but want to upgrade their phone for some reason, How difficult it would be to a samsung customer to choose a motorola or lg or some other and function exactly the same way he used to ? Not difficult at all … he has got same apps, same looks and same features but may be they load faster because of underlying processor.

One thing Amazon’s kindle (New) guys realised is how it is killing their ecosystem and started moving away from the appstore. No matter how hard a user is going to cry, they don’t give a bit of attention and they won’t move or let the google play accessible on their kindle. they will promote their machine and experience they may call it to hold the customer.

Windows doing similar thing, their operating system weather it is good/bad or ugly have got something to differentiate and hold the customer.

Should Samsung sell Android phones ? May be they should because there aren’t many options left, but they should really work hard on giving better experience to the user, differentiate, customise and create an ecosystem to support such efforts. My Suggestion would be probably to promote and customise the application preloads to match business user/teenager/older user and bundle the phones in those lines to attract the customers.

They Need to focus on being in touch continuesly without hurting the privacy of the users. They need innovation more than any one else because Motorola+Google is going to suck the blood out of the other manufacterers weather they reveal or not.

Now its time to think original, think wise differentiate significantly. Samsung ads can’t and should not look like apple’s any more.

Weather its Samsung or #HTC or any other … With Android you are in no position to dominate, its Android that is going to matter weather you take it or leave it.

Not convinced ? Try it yourself with following

Link:https://ddg.gg/?q=Porters+Five+Forces+!w