Wednesday, October 27, 2010

Hacking/hijacking anyone's F@ceb00k/Twitter/youtube/etc sessions on your network?

email post

Firesheep Download

DOWNLOAD:

Windows Users: Install Winpcap first!

When logging into a website you usually start by submitting your username and password. The server then checks to see if an account matching this information exists and if so, replies back to you with a 'cookie' which is used by your browser for all subsequent requests. It's extremely common for websites to protect your password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called 'sidejacking') is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy. This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new 'privacy' features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room. Today at Toorcon 12 I announced the release of Firesheep, a Firefox extension designed to demonstrate just how serious this problem is. After installing the extension you'll see a new sidebar. Connect to any busy open wifi network and click the big 'Start Capturing' button. Then wait.
Click to view large Download this gallery (ZIP, undefined KB) Download full size (47 KB) As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed: Click to view large Download this gallery (ZIP, undefined KB) Download full size (65 KB) Double-click on someone, and you're instantly logged in as them. Click to view large Download this gallery (ZIP, undefined KB) Download full size (110 KB) That's it. Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way. Websites have a responsibility to protect the people who depend on their services. They've been ignoring this responsibility for too long, and it's time for everyone to demand a more secure web. My hope is that Firesheep will help the users win.

Monday, October 25, 2010

Create PDF Files Free — Download PrimoPDF

email post
Create PDF Files Free — Download PrimoPDF

highlights :

* Drag-and-drop PDF creation (NEW). PrimoPDF is the only free PDF converter to support one-click, drag-and-drop PDF creation -- saving you time whenever you need to create a PDF file.
* Downloaded 15,000,000+ times. PrimoPDF is the world’s most popular free PDF creator.
* 100% industry-standard PDF files. Easily create PDF files that can be opened in any PDF viewer, including Adobe Acrobat, Adobe Reader, and Nitro PDF Professional.
* Convert 300+ file types to PDF. Convert any file that prints to PDF, including Microsoft Word (DOC, DOCX), Excel (XLS, XLSX), PowerPoint (PPT, PPTX), Visio (VSD), Publisher (PUB), WordPerfect (WPD), OpenOffice, HTML, TXT, BMP, TIFF, JPEG, GIF, PNG, and many more.
* Consistent PDF creation. Use PrimoPDF’s creation profiles to produce the same kind of PDF file every time. Profiles include Screen, eBook, Print, Prepress, and Custom.
* Append PDF files. Combine each newly created PDF file into the one PDF.
* Secure PDF. Protect and encrypt your information with strong password-based PDF security.
* PDF metadata. Set the document properties information fields, -- including author, title, subject, and keywords -- to index your PDF files and make them easier to search.
* PDF versions. Create different version PDF files: 1.2, 1.3, 1.4, and 1.5

Download