Posts Tagged ‘security’

Generate secure passwords using Password Chart

Posted By Harsh Singh on June 4th, 2009

http://magicalharsh.com/blog/generate-secure-passwords-using-password-chart/

Create secure passwords from a master phrase with web-based application Password Chart. Enter a phrase and Password Chart generates a table of values for the alphabet based off that phrase.

For example, starting with phrase “dark horizon provides you with everything“, It converted the password “thatsmypassword” into the much less crackable “L7S8FNHL7SL4bk7_9INHL4L4Qa98yrx#k4“. You can even print off the password chart to store or keep with you.

Why should you use this?

1. Picking and remembering strong passwords is a pain. It’s easier to convert an easy to remember one.
2. It works anywhere on any computer. It also works offline if you print out the chart.
3. Its free, easy and secure. Everything is done in your browser — no passwords are sent over the Internet.

Be Safe from greasemonkey Hack

Posted By Harsh Singh on June 9th, 2008

the latest hack in orkut is through greasemonkey script….

Read Here

so…..frm now on dont install blindly any script that comes urs way……

whenever you want to install any script…..see the script source by clicking on SHOW SCRIPT SOURCE……

search for code action=”"………….if ypu find these words in that script…..keep at a distance…….

BE CAREFUL WHILE USING CTRL+C n CTRL+V

Posted By Harsh Singh on June 7th, 2008

hi friends,

We all copy various data by using ctrl+c/Copy for pasting elsewhere.
This copied data is stored on clipboard and is accessible over the net by a combination of Javascripts and ASP.

Just try this:
1) Copy any text by ctrl+c
2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm
3) You will see the text you copied on the Screen which was
accessed by this web page.

Moral:
Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it.

To Avoid This
To avoid this, follow these steps:

1. Go to internet options->security

2. Press custom level

3. In the security settings, select disable under Allow paste operations via script.
Now the contents of your clipboard are safe.

Pass this information on to create an awareness of the same.

Safe Browsing,
Cheers.

Protect your password in cyber cafe and on public computers

Posted By Harsh Singh on June 7th, 2008

Some time or the other, you must have used cyber dafe or public computers to access internet or mail. Public computers are most prone to password hacking. Anyone can simply install a keylogger software to hack your password. Keylogging is one of the most insidious threats to a user’s personal information. Passwords, credit card numbers etc.

It is now very easy for the keylogger to harvest passwords. Each and every keystroke (whatever you type on the keyboard) gets recorded in the keylogger software and the person installing it can easily view what you have typd in.

For example, if you go to hotmail.com and check your mails. Say your ID is aaabbbccc @ hotmail . com and password is snoopy2. the keylogger software records your usename and password in its log file as

www.hotmail.comaaabbbccc @ hotmail . comsnoopy2

Risky isnt it???!!!

There’s solution to this problem and you can easily fool the hacker.
The keylogger software sees and records everything, but it doesn’t understand what it sees. It does not know what to do with keys that are typed anywhere other than the password or user name fields.

So, between successive keys of the password if you enter random keys, the keylogger software wont ever come to konw where you typed in what..

In the process of recording the keys, the string that the keylogger receives will contain the password, but embedded in so much random junk that discovering it is infeasible.

So…

1.Go to hotmail.com or yahoo.com or any of the site where you need to insert a password or PIN.
2.Type in your user ID.
3. Type in the first characterof the password.
4. Click on the address bar in the internet explorer or Firefox. Type in some 3/4 random charachters.
5. Again go to password field and type in the second character of the password.And probably third too.
6. Again go to the addressbar and type in a few mroe random character.
7. Back to the password field and the next characters of the password.

Keep on repeating the process till you type in the full password in the password field.

Instead of the password
snoopy2 the keylogger now gets:
hotmail.comspqmlainsdgsosdgfsodgfdpuouuyhdg2

Here a total of 26 random characters have been inserted among the 7 characters of the actual password!!!

No doubt it takes a little bit of more time than the usual process, but you’re safe and secure that way!!!