Archive for September, 2007

Firestarter is an Open Source visual firewall program. The software aims to combine ease of use with powerful features, therefore serving both Linux desktop users and system administrators. This is a departure from your typical Linux firewall, which has traditionally required arcane implementation specific knowledge.
After downloading and installing Firestarter, you will find the Firestarter icon in your desktop’s programs menu. For example, in Fedora Core the Firestarter icon is located in the System tools menu. Alternatively you can run the program by simply executing “firestarter” from either a command line or from the Run Application… dialog (accessed by pressing Alt-F2).

Running Firestarter for the first time, a wizard is launched. Following the welcome screen, you will be asked to select your network device from a list of detected choices for your machine. In case you have multiple devices, select the one that provides your Internet connection, otherwise you can use the default supplied.In case your machine has multiple devices and can act as a gateway for your network, you will next have the option of sharing your Internet connection among all the computers on your local network. Again, simply select the local network connected device from the list of detected devices. If you wish for the clients to acquire their network settings automatically, simply check the option to Enable DHCP for local network.
Having completed the wizard, click the save button on page final page. The firewall is now ready and running, and your machine has an added layer of security. Firestarter now works in its default mode, which is a restrictive policy for incoming traffic and a permissive stance towards outgoing connections. This means you are fully protected against connection attempts from the outside, but are still able to browse the web, read your email, etc. as normal. There is no need to further configure Firestarter if you are satisfied with these defaults.

Let’s take a quick look at some of the features of the program itself. The application is divided into three pages, accessed through a tabbed notebook interface. These pages are Status, giving you an fast overview of state the firewall, Events, where blocked intrusion attempts and the firewall history is shown, and Policy, where you alter the behavior of the firewall by creating security policy.
From the Status page where you start out you can further access the preferences where you can change your network settings, as well as enable advanced options such as ICMP or ToS filtering. For now, let’s take a look at the Events page.
enabling the service could also have been accomplished from the Policy page. However, it is not just a gimmick, in reality you will want to create policy from events often for maximum security. By opening services to select machines only after the connection attempt, as shown above, you effectively minimize your exposure on the net. It’s also very convenient.
Traditional firewalls will have you scrambling for the settings and configuration files at this point. However, when you see a connection attempt that you want to authorize, you simply right-click the entry in Firestarter and select “Allow inbound service for everyone”. If you want to give access to the machine that is attempting the connection, but without even letting anyone else know that you’re running the service in question, select “Allow inbound service for source”. This is known as stealthing and can be a very powerful tool.
Users privacy exposed with Gmail cookie vulnerability
0 Comments Published September 28th, 2007 in SecurityEthical hacking group GNUCitizen has developed a proof-of-concept program to steal contacts and incoming e-mails from Google Gmail users. This flaw can be used to forward all your incoming e-mail as a proof of concept and demonstrate the potential to use this vulnerability for malicious purposes.
Attackers could compromise a Gmail account using a cross-site scripting vulnerability if the victim is logged in and clicks on a malicious link. The attacker can take over the session cookies for Gmail and subsequently forward all the account’s messages to a POP account. The problem is potentially compounded by Google’s policy of retaining cookies for two years. The obvious risk is to the home user, many organizations could be exposed, since they do not filter employee e-mails sent from work to personal accounts.
One work-around is to use Gmail through Firefox and disable JavaScript. While this limits user access to many components of popular Web sites, it will protect against the potential threat. Developers at many large enterprises are not aware of the power of cross-site scripting. It is advisable resources such as the Open Web Application Security Project, or OWASP, which offers free tools to help write secure code and allow testing for XSS vulnerabilities.

Innoue is finally gone. The buzz already started when everyone realize that innoue was no longer with them, esspecially ichigo. Captain Ukitake in his hypothesis suggesting that innoue was murdered or kipnapped by arrancar during her journey back to the real world.
Commander general feared that innoue has joined forces with arrancar instead of kidnapped or killed. Abarai Renji requested to go to hueco muendo to retrieved innoue, but denied, and it is clear that arrancar is making preparation for the final battle against shinigami. The remaining shinigami was order to return back to seireitei at once to fortify seireitei defense.
Ichigo in the other hand requesting to dive into hueco muendo by himself to save innoue. But also denied by the commander general.
Watch the episode of Bleach
Download here : Bleach 142(You’ll need bittorrent client to download)

Feel bored with your dull windows xp looks? Well try this cool software that will change your look at your windows xp operating system. XPize is a GUI enhancer for Windows XP and 2003. It replaces most of the non-XP icons, avis and bmps that Microsoft has always overlooked. The installer simply automates the process of replacing resources in system files, making your XP’s look better. Unlike other eye candy XPIZE works differently.
It does not need to stays in memory to load the skins to your windows. XPIZE introduce a whole new concepts, which it actually patch your system files and it becomes part of the system and it does not hog your system memory.

XPIZE also make it available to patch the system with integration method. XPIZE installed itself into windows installation setup files. So when you install new fresh windows xp into your computer, you’ll get XPIZE look the moment you’re done installing windows xp.
Recent Comments