This is default featured slide 1 title

Go to Blogger edit html and find these sentences.Now replace these sentences with your own descriptions.

This is default featured slide 2 title

Go to Blogger edit html and find these sentences.Now replace these sentences with your own descriptions.

This is default featured slide 3 title

Go to Blogger edit html and find these sentences.Now replace these sentences with your own descriptions.

This is default featured slide 4 title

Go to Blogger edit html and find these sentences.Now replace these sentences with your own descriptions.

This is default featured slide 5 title

Go to Blogger edit html and find these sentences.Now replace these sentences with your own descriptions.

Friday, March 11, 2016

Android N 6 Cool Features

Android N Developer Preview, an early beta of Google’s new mobile operating system launch right now. So, you can test out Android N Developer Preview on your smartphone and tablet right now from developer.android.com/preview.

Android N Developer Preview for the Nexus 6P, Nexus 5X, Nexus 6, Pixel C Nexus 9, the Nexus Player and the General Mobile 4G, an Android One device has been made available as an over-the-air update by Google on Wednesday.

The good news is that the Google Android team has brought meaningful features to your smartphone and tablet in just five months.
What's new about the new Android Developer Preview so far.


1. Multi-Window API
google-android-n-download-1
Multi-window support is the feature users have long asked for – especially on tablets. The feature allows users to perform multiple tasks simultaneously.
So now you can type out a message while viewing a map, check the weather while watching videos, and so on. The screen can be split horizontally or vertically as you prefer.


2. Reply to Messages Directly Without Leaving an App
google-android-n-direct-reply
Among the new changes in Android N are improved notifications. Notifications support "direct reply" feature for app developers who can now allow their users to reply to incoming notifications of WhatsApp, Twitter or SMS messages straight from the notification panel without having to launch the app in question.
Developers can also choose to bundle notification alerts from the same app together, enabling users to see them as a bundle and expand individually if necessary.


3. Better Battery Life
This is the biggest relief for all Android users. With Android Marshmallow, Google introduced a new battery-saving feature called Doze that places an Android device into a deep power-savings mode when it is stationary for a while.
In Android N, Google is taking this feature a step further by allowing Doze to work whenever the screen is OFF, not just when the device is stationary. So your smartphone's battery will now last even longer when it's in standby mode.

4. Data Saver
google-android-n-data-saver
Moreover, Google continues to work on making its Android OS less memory-hungry and making apps running in the background work more efficiently.
When turned ON, the Data Saver feature restricts the apps from using data connection as well as prevent pulling in embedded videos and images on web pages. You can also pick selected apps that may be allowed to use the data connection even when the feature is ON.
However, the Data Saver feature in Android N will be particularly helpful for those who are on prepaid or pay-on-the-go connections for data.


5. Picture-in-Picture Mode
google-android-n-picture-in-picture
Now you can view a YouTube video while reading through a report in Word on your Android device, thanks to Picture-in-picture feature in Android N.


"Picture-in-picture (PIP) mode lets apps run a video activity in the pinned window while another activity continues in the background. The PIP window lets users multitask while using your app, which helps users be more productive." Google describes.

The feature will be more useful for those with tablets or larger phones.


6. No Need to Flash Your Device (Direct Boot)
Yes, the most brilliant part is that you do not need to flash or tether your device to a PC in order to download and install the new Android N Developer Preview, as it can be downloaded straight to your device.
These are the things that are now known to us about the all new Android N Developer Preview, but one thing we definitely don’t know yet that what the ‘N’ will stand for.


You might Also Like : Android N Revealed


Wednesday, March 09, 2016

Facebook paid $15,000 bounty for recently discovered Password Reset Vulnerability

A security researcher discovered a 'simple vulnerability' in the social network that allowed him to easily hack into any Facebook account, view message conversations, post anything, view payment card details and do whatever the real account holder can.

Facebook bounty hunter Anand Prakash from India recently discovered a Password Reset Vulnerability, a simple yet critical vulnerability that could have given an attacker endless opportunities to brute force a 6-digit code and reset any account's password.



How the Flaw Works

The vulnerability actually resides in the way Facebook's beta domains handle 'Forgot Password' requests.

Facebook lets users change their account password through Password Reset procedure by confirming their Facebook account with a 6-digit code received via email or text message.

Prakash discovered that the social media giant had not implemented rate-limiting in its password reset process on the beta sites, beta.facebook.com and mbasic.beta.facebook.com, according to a blog post published by Prakash.

Prakash tried to brute force the 6-digit code on the Facebook beta pages in the 'Forgot Password' window and discovered that there is no limit set by Facebook on the number of attempts for beta pages.

-To ensure the genuinity of the user, Facebook allows the account holder to try up to a dozen codes before the account confirmation code is blocked due to the brute force protection that limits a large number of attempts.


As Prakash explained, the vulnerable POST request in the beta pages is:

lsd=AVoywo13&n=XXXXX

Brute forcing the 'n' successfully allowed Prakash to launch a brute force attack into any Facebook account by setting a new password, taking complete control of any account.

0.5 seconds per HTTP request you still require 5.7 days(max) to brute force 6 digits for a single account and assume the code did not expires (+ no complaint when people look at their phone/email). 

Video Demonstration

Prakash has also provided a proof-of-concept (POC) video demonstration (The Software he use is Burp Suite ) that shows the attack in work. You can watch the video given below that will walk you through the entire procedure:



Prakash  discovered the vulnerability in February and reported it to Facebook on February 22. The social network fixed the issue the next day and had paid him $15,000 as a reward considering the severity and impact of the vulnerability.




Monday, March 07, 2016

Ray Tomlinson, Inventor of email and savior of the @ sign, is dead at 74

A computing legend has died. The inventor of email, Ray Tomlinson, suffered an apparent heart attack on Saturday, according to reports. He was 74 years old.

Tomlinson sent the very first email back in 1971; at the time, he was working in Boston at Bolt, Beranek, and Newman (BBN), a company that was instrumental in the development of a very early version of the internet, called ARPANET. As an employee, he was "looking for problems [ARPANET] could solve,"

Others had thought about sending messages to other users before, and there were some early versions that let you share notes to users on the same computer, but Tomlinson came up with the SNDMSG command. Unlike what came before it, SNDMSG actually sent mail files to the recipient's computers. It was the first networked messaging program.



Unfortunately for us, the very first email has been lost to time. As he said in an NPR interview from 2009, they were just random strings of text. "The first e-mail is completely forgettable ... and, therefore, forgotten." Thanks to his invention, Tomlinson won't be.


He also decided to use the @ symbol to designate a user from its host. The decision lifted the humble symbol from obscurity to international icon — it even entered MOMA's collection in 2010. The fact it was little-used at the time made it appealing to Tomlinson, as it reduced ambiguity. Also, as he liked to say, "It's the only preposition on the keyboard."