Firefox issues eight patches for Web browser

Mozilla has issued eight patches for its Firefox Web browser, three of which fix problems classified as critical.

The patches come after security experts have recommended using a browser other than Microsoft's Internet Explorer 7 and older versions of IE due to a dangerous vulnerability. Microsoft is due to release an emergency patch for that problem Wednesday.

HP Polyserve software for SQL Server: Download now

Two of the critical Firefox problems could allow an attacker execute a cross-site scripting attack, in which scripts or commands from one Web application that shouldn't run in another are successfully executed. The third problem relates to Firefox's browser engine, and could make it crash or possibly allow someone to remotely execute code on a PC, Mozilla said in its advisory.

Mozilla defines a critical vulnerability as one that could allow an attacker to run code on a machine in the course of normal Web browsing.



The patches are for Firefox version numbers 3.04 and 2.0.0.18. Mozilla has said this round of patches will be the last for Firefox 2, which it will now stop supporting. The update also removes the phishing filter in Firefox 2 because the browser uses an outdated version of a protocol used to import a blocklist of phishing sites supplied by Google. Firefox 2 users are being promoted to upgrade to Firefox 3.

Firefox's auto-update mechanism should automatically download these latest patches, and users will be prompted to restart the browser to complete the process.

Read More

How to Delete Files Permanently from the Computer

When you delete a file from your computer, it moves to the Windows Recycle Bin. You empty the Recycle Bin and so many might think that the file is permanently erased from the hard drive.



 but its worng! When you delete files or folders, the data is not initially removed from the hard disk. Instead, the space on the disk that was occupied by the deleted data is "deallocated." After it is deallocated, the space is available for use when new data is written to the disk. Until the space is overwritten, it is possible to recover the deleted data by using a data-recovery software.



To permanently erase files and prevent your confidential files from getting into wrong hands, Microsoft offers a free command line utility - SDelete (Secure Delete) - that overwrites all the free space to prevent data recovery.

You can use SDelete both to securely delete existing files , as well as to securely erase any file data that exists in the unallocated portions of a disk (including files that you have already deleted or encrypted)



Download SDelete  

Read More

Hoax Google Orkut message links to spread malicious Trojan

Google's social-networking Web site Orkut has been used to spread a malicious Trojan, says Websense.

Nucleus Report: Who's ready for SMB? - read this white paper.

According to an alert from the security firm, the hoax message, which has been received by a number of Orkut users and is written in Portuguese, looks like it comes from a lonely Orkut member looking for love and features a number of links that appear to point back to the social-networking site. 

However, Websense urges Orkut users not to click the links as they result in the Trojan imagem.exe being downloaded. This subsequently opens the Orkut login page while a password-stealing Trojan called msn.exe is downloaded in the background.

Read More

Useful Secrets for Social Networking Sites

Social networking websites like Orkut, Myspace, Yahoo and more are channels through which people communicate, find lost friends, tap resources, and even find work.

Online it is said to be the most vibrant and action packed space.

Online communities provide information, spur creativity, channel new designs in technology, and bring like-minded people closer to one another. From the PC or laptop a person can connect and communicate with the whole world. There are over 400 plus social networking sites online facilitating business and social networking. The online community can congregate each day 24/7 according to specific needs or interests; music, sports, gaming, trekking, every human interest or activity has spurred its own unique social networking website or channel. It is not city specific but global.

1. Join a social networking site that signifies you. Do an online search and go through the directories on social networking to identify what interests you the most.

2. Never sign up or join on an impulse take the time to read about the website and browse through many similar sites until you find one that suits your needs. Read and understand the rules and privacy statements.

3. Once you have found a social networking website that is “you” go ahead and register. When choosing a user name think of its use if you are registering for business purposes the name should trigger off recall. So curb the flights of fantasy and use a name that is practical and will showcase you to the world.

4. Choose the level of membership. Basic memberships are usually free but paid ones have more features. Begin with a free membership and then upgrade once you are comfortable.

5. Fill the user profile with care and think of how your profile will be distinctive from others. In networking unless your profile stands out you will be one among an ocean of profiles. To draw benefits from the site you need to create a clear profile and maximize it by innovating on the layout.

6. Browse the World Wide Web for templates that are compatible with the social networking site you are registered on. Many templates are free while others are paid. Check before you select one.

7. Try and customize the layout. This will make your profile distinctive and unique. Add style, color, and panache by including clips, photos and more.

8. While customizing the layout think about the purpose of your profile. If its business then try and keep it dignified unless you are in a “hep” line of business like ornaments, cards, or music. Use fonts, colors, and graphics to add style.

9. Ensure that your profile has cohesiveness and actually represents you in every way. What drives traffic on social networking sites is a profile that grabs attention.

10. Network online successfully but pay attention to security and privacy too! Read up on how to protect yourself and ensure that social networking does not put you or your family in any dangers. While there are many positive aspects to social networking there are negatives too.

Read More

How To Backup Ps1/PS2 Games

Okay, these are some methods to backup PS2 titles and Xbox titles, in order to play a backup you need a modchip of some sort, I have also included a tutorial on boot methods. Follow any one of these instructions to fit your needs. You can tell what format the PS2 title is by looking at the written side of the disc, DVD's are Silver and CD's are Purple. The DVD backup methods here consist of reading the image to the hard drive then burning it to the media for an easier backup, this depends on your hardware and its setup. I say that because the proper setup would be to have the Reader and Writer on separate IDE cables. This allows no cross information when doing Disc to Disc/On the fly copying. But, since most people would not know how to check or fix this, I suggest reading the image to your Hard Drive and then burning from there. *A little useful trick*, If the DVD backup "image" is small enough in size you can fit it onto a CD-R (80 minute or larger if need be) instead of using a more expensive DVD-R. I have done this succesfully using Prassi and the first tutorial for it below. In addition a DVD Movie backup will play on a PS2/Xbox without a chip. As I get more info I will update.

PS1/PS2 CD backup tutorial

Using CloneCD (v4.x.xx) for PS1/PS2

• Start CloneCD


• Select "Copy CD"


• Select your Reader, press Next


• Select "Game CD", press Next


• Select/Deselect your options here (on the fly, cue or delete) then press Next


• Select your Writer, press Next


• Select your burn speed and "Game CD"


• Press "OK" to begin

Using Alcohol 120% for PS1/PS2

• Start Alcohol 120%


• Select Copy Wizard


• Select your Reader & Read Speed


• Select or Deselect Copy current disc on the fly


• For Datatype select which console PS1 or PS2, press Next


• Select your Image location and Name for it, press Next


• Select you Writer, Write Speed and anything else you feel you might need


• Make sure the Datatype selected is the same you chose above


• Press Start to begin

PS2 DVD backup tutorials (Using Prassi Primo )

• Start Primo


• Select "go to full application"


• Right Click the drive that has your original in it


• Select "build global image" and choose a path for the image (preferably on an NTFS opsys)


• After the image is extracted go to next step


• Choose the 3rd disc icon from the left *or* click file, new job, Global/Other Image


• Then just burn the .gi (global image) of the game

This next way has one less step which saves some time because once you press record it does everything by itself (if you have a DVD reader and DVD Writer)

• Start Primo


• Use the "PrimoDVD Starter" (it's easier, and less confusing)


• Choose "disc copy"


• Select your Reader and Also your Writer


• Select "make a temp image on HD..."


• Select your burn speed and then record to begin

Using Nero

• Start Nero, Use the Wizard (for easy use)


• Select "DVD" then select Next


• Select "Copy a DVD" then select Next


• Select your source drive


• Check OFF "copy on the fly" then select next


• Select your write speed


• Select either "Test", "Test and Burn" or "Burn"


• Press "Burn" to begin

This next way is without the Wizard

• Start Nero, and select "File" then "New..."


• On upper left side of the window from the drop down menu select "DVD"


• Select "DVD Copy" Icon


• Select "Copy options" tab


• Check OFF "copy on the fly"


• Select source drive and read speed


• If needed Select "Image" tab to choose image directory and select/deselect "delete image..."


• Select "Burn" tab and choose your settings


• Press "Copy" to begin

Using Alcohol 120%

• Start Alcohol 120%


• Select Copy Wizard


• Select your Reader


• For Separate Image file every:choose Never Separate


• Select or Deselect Copy current disc on the fly, press Next


• Select your Image location and Name for it, press Next


• Select you Writer, Write Speed and anything else you feel you might need


• Select or Deselect Delete image file after recording


• Press Start to begin

XBOX backup tutorials

Xbox original games are burned from the outside in. The only way to backup a title is to have a modchip like X-exuter (best), Enigma, or Xodus/Matrix. You also have to flash the bios and have a CD program inserted or installed into the X-Box named EVO-X (this allows you to assign the X-Box an IP address). The game has to be stored on the X-Box's HD, this allows you to file transfer the title to your PC using an ftp program like FlaxhFXP (best) or similar. From there you use a burning application to make the backup. Some applications allows you to "drag & drop" right from the Xbox or you can build an ISO of the image then burn to CD-R/W or DVD-R/W backup. (I will update this to show steps as soon as I have a minute)

Modded PS2 with or without Action Replay/GameShark CD & DVD backup booting methods.

PS2 with NeoKey/Sbox & AR/GS, PS1 CD backup booting

• Turn on PS2 and NeoKey/Sbox


• Press Eject


• Insert PS1 CD backup


• Press reset


• PS2 tray will close


• PS1 CD backup will now boot

PS2 with NeoKey/Sbox & AR/GS, PS2 CD backup booting

• Have AR/GS dongle in a memory card slot


• Power on your PS2


• Insert AR/GS disc


• At the AR/GS menu, select Start Game, With/Without codes


• Eject and swap to your PS2 CD backup and press X.


• Screen will change and game will now boot

Note - Neokey will not play DVD-R!

Note - Old versions of AR2/GS2 you might need to press R1+O instead of X to boot games

PS2 with Neo 2.2, PS1 CD backup booting

• Turn on PS2


• Press Eject


• Insert PS1 CD backup


• Press reset


• PS2 tray will close


• PS1 CD backup will now boot

PS2 with Neo 2.2 & AR/GS, PS2 CD backup booting

• Have AR/GS dongle in a memory card slot


• Power on your PS2


• Insert AR/GS disc


• At the AR/GS menu, select Start Game, With/Without codes


• Eject and swap to your PS2 CD backup and press X.


• Screen will change and game will now boot

PS2 with Neo 2.2 & AR/GS, PS2 DVD backup booting

• 1. Have AR/GS dongle in a memory card slot


• 2. Power on your PS2


• 3. Insert AR/GS disc, close tray


• 4. Power off your PS2, wait a few seconds


• 5. Press and Hold Reset button to load AR/GS


• 6. At the AR2/GS2 menu, press EJECT while still holding Reset


• 7. Swap AR/GS disc for an Original-TOC-DVD* and wait 10 seconds


• 8. Select "AR/GS Codes"


• 9. Highlight "Add new code" and press X to get to the next screen


• 10. Press X three times. You will see "Updating code list please wait" each time)


• 11. Press "Start" on controller


• 12. Select "Without codes", press X


• 13. Then Press X again, and immediately release the Reset button, you will see "Updating code list please wait"


• 14. The PS2 tray will eject allowing you to swap Original-TOC-DVD* for DVD backup and then close on it?s own


• 15. Screen will change and game will now boot

Note - "Original-TOC-DVD" is an original DVD that is a larger file size than the backup

PS2 with Messiah

• PSX Backups will boot directly.


• PS2 CD-R Backups will boot directly.


• PS2 Unpatched EA backups will boot directly.


• PS2 DVD-R Backups will boot directly.

PS2 with Magic 2, 3 or 3.5

• PSX Backups will boot directly.


• PS2 CD-R Backups will boot directly.


• PS2 Unpatched EA backups will boot directly.


• PS2 DVD-R Backups will boot directly.

Ps2 with Apple Mod

• PSX Backups will boot directly.


• PS2 CD-R Backups will boot directly.


• PS2 Unpatched EA backups will boot directly.


• PS2 DVD-R Backups will boot directly.

Downloads / Software you need

• Alcohol 120%


• Nero


• Prassi

Get the hardware from the nearest radioshack :)

Read More

Microsoft Warns of Serious MS-SQL 2000 & 2005 Vulnerability

Another big flaw has been discovered in Microsoft software just a few days after they broke their patch cycle to issue a patch for the IE bug that allowed remote code execution.

This time however it doesn’t really effect home users or the general consumer, it’s a more specific server side vulnerability affecting Microsoft SQL Server 2000 and 2005 versions. It seems pretty serious though as it also appears that this vulnerability if exploited properly could lead to remote code execution.

Just days after patching a critical flaw in its Internet Explorer browser, Microsoft is now warning users of a serious bug in its SQL Server database software. Microsoft issued a security advisory late Monday, saying that the bug could be exploited to run unauthorized software on systems running versions of Microsoft SQL Server 2000 and SQL Server 2005.

Attack code that exploits the bug has been published, but Microsoft said that it has not yet seen this code used in online attacks. Database servers could be attacked using this flaw if the criminals somehow found a way to log onto the system, and Web applications that suffered from relatively common SQL injection bugs could be used as stepping stones to attack the back-end database, Microsoft said.

Desktop users running the Microsoft SQL Server 2000 Desktop Engine or SQL Server 2005 Express could be at risk in some circumstances, Microsoft said.

Again I wonder how far behind the curve Microsoft is with this? Usually these kind of bugs have been discovered by the more malicious parties way before Microsoft has any idea that their software is vulnerable.

It claims that the code hasn’t been used in online attacks, but honestly if it was used well by a smart party who would even know? SQL injection could lead to this attack being executed and the code is published online so I find it unlikely that it hasn’t been used.

The bug lies in a stored procedure called “sp_replwritetovarbin,” which is used by Microsoft’s software when it replicates database transactions. It was publicly disclosed on December 9 by SEC Consult Vulnerability Lab, which said it had notified Microsoft of the issue in April.

“Systems with Microsoft SQL Server 7.0 Service Pack 4, Microsoft SQL Server 2005 Service Pack 3, and Microsoft SQL Server 2008 are not affected by this issue,” Microsoft said in its advisory.

This is the third serious bug in Microsoft’s software to be disclosed in the past month, but it is unlikely to be used in widespread attacks, according to Marc Maiffret, director of professional services, with The DigiTrust Group, a security consulting firm. “It is rather low risk given other vulnerabilities that exist,” he said via instant message. “There are a lot of better ways to currently compromise windows systems.”

The bug was discovered by someone in April this year, so that’s at least 7 months someone has known about it..but only know when the vendor discloses it then Microsoft chooses to say something about it.

It is a fairly low risk vulnerability due to the requirements needed to execute it effectively, but still it’s another chink in the Microsoft armour to add to the (long long) list.

Source: Network World

Read More

Disable Block Invisible Status Checker

If you ask me what should you do if you want you never got check it by invisible checker, then I will answer in 1 years ago there no way you can avoid being checked it by invisible checker. But now, I believe, I found a new ways to protect our self from being checked it by such invisible status detector. Yes, We can block invisible status checker by using Yahoo Messenger Alias ID.



We knew that Alias ID (not main ID) can be set to active and inactive. When Alias ID inactive it would like Dead ID and the invisible checker would mark it as offline ID. So just use Alias ID as your main chat ID, and then feel free to inactive or activate it.



Instead of invisible using invisible status, inactive ID would make better protection for us. Including for boot attack and invisible checker.



How to use Alias aka Secondary Public ID as your main Chat ID and protect block Invisible Status Detector you can read it here.

Read More