• education

    OWASP AppSec Conf Delhi – Day 2; and more

    by  • September 4, 2008 • education, hackers, life, news, security, webappsec • 4 Comments

    The pictures of Day 2 are here. The second day consisted of 6 workshops – 3 before lunch and 3 after. I was confused on choosing between Sheeraj Shah and Mano Paul’s workshops during the first half; and Jason Li’s talk on “Web 2.0  Security” and “Secure Code Review” workshop (originally by Dinis Cruz, but [...]

    Read more →

    A Phish floating in Google Survey!

    by  • January 29, 2008 • demo, education, google, hackers, life, news, phishing, script, security, webappsec • 4 Comments

    Demo 1. Phizy-Phizy-Phizy I have always loved making this phizy-phizy-phizy sound purposelessly, which I once heard in a Rob Schneider movie (which, if I remember correctly, was a pathetic movie). Anyhoo! I, now, have a set of very strong reasons to move around repeating the same lines. First, we received a request to be involved [...]

    Read more →

    AdSense exploited by malware (Trojan.Qhost.WU)

    by  • December 22, 2007 • bug, education, google, irony, life, loophole, news, security, webappsec • 5 Comments

    1. Life & Code (The title of this section is taken from Johnny’s blog of the same name, Life and Code. Although my implementation of the phrase isn’t in terms with Johnny’s, yet I could resist using it. ) Life: Three days ago I found that there are some strange entries in my local Apache [...]

    Read more →

    Orkut Latest XSS Worm; and what it means for Indian Orkuteers

    by  • December 20, 2007 • cyberlaw, defacement, education, google, guide, irony, life, news, review, security, webappsec, xss • 16 Comments

    Update: Kishor reports a flaw in the implementation of “private” videos feature on Orkut. Although I am at office and I haven’t checked it yet myself, I believe I can trust him, based on his posts at Slackers. Nice one Kishor. 1. YAWN [Yet Another Worm, Nanny] Orkut (Google’s MySpace and Facebook for Indian, Pakistan [...]

    Read more →

    Drive-by Download: Where Network Security Meets WebAppSec

    by  • November 2, 2007 • demo, education, hack, loophole, security, webappsec • 5 Comments

    DEMO This post was due since the Bank of India hack incident, and was fueled by PDP’s Drive-by Java post, which is a very simple, yet a well thought of extension (sort of) to the Drive-by Download attack. This post is aimed to provide a clearer understanding of the Drive-by Download attack (via a demo). [...]

    Read more →

    Apache Headache: “no listening sockets available”

    by  • August 8, 2007 • apache, bug, education, guide, humour, life, microsoft, mysql, php • 5 Comments

    Update 1: I was unable to configure MySQL. Reason: It was installed in C:\(blah-blah) and , probably, do not have write rights in the directory. Installing it to D:\(bigBlah) solved the issue. Duh! Update 2: I see a fairly good traffic coming here searching for the same problem. So, in case you are in a hurry, [...]

    Read more →

    A 13 Year Old CEO!

    by  • May 21, 2007 • education, Java • 0 Comments

    Yes, you read it correctly. A 13 year old CEO and an 11 year old VP, Sales. My grandmother is no businesswoman, but I always cite two of her sayings pertaining to business: Doctors can earn even in a jungle, People will never stop learning/studying (formal education), at least not in India. I personally believe [...]

    Read more →

    Apache-MySQLPHP Installation & Configuration Tutorial for Beginners :)

    by  • February 25, 2006 • apache, education, guide, mysql, php • 0 Comments

    Hi, This article is a very “narrow” tutorial aimed for complete beginners and dummies, who want to start off coding with AMP (Apache-MySQL-PHP) but do not want to read manual for installing and configuring them. This write up is very specifically targeted and applies for Windows platform. Note: To get the real and complete understanding, [...]

    Read more →

    "COLUKABKI – AOL – MSN – YAHOO – RED CROSS"….. aaah Comm’n Gimme a break.

    by  • January 28, 2006 • education, guide, irony, loophole, phishing, review, Uncategorized • 12 Comments

    It’s really interesting that even enginieering students, who are supposed to have a very ANALYTIC are least bothered in verifying anything before believing it…… and that too when they have access to GOOGLE. This blog of mine is in response to the hundreds and thousands of mails that are forwarded so that somewhere, somebody’s LIFE [...]

    Read more →