If you drop a one rupee coin in a begging bowl in beggar in New Delhi, he will throw it back to you. He won't accept till you give ten rupees. This is the value of today's rupee. Nothing comes in a rupee in todays date except for Kisme toffee, or some local chocolate flavored sweets. But to me, i will never forget the value of a rupee. I have been extravagant throughout my life.. spending for good things of course and not looking into the wallet first or thinking of saving for the rest of the month. If i want something means i have to get it,no matter if i have to spend the rest of the month begging or stay hungry. But it was a day in my life that made me face the real world and make me realize the true value of a rupee.
I was staying with a junior cum brother in Pune at Chaturshringi one room flat during my year down in engineering days. We were also doing a course on ethical Hacking in a nearby place - Senapati Bapat road. We used to buy groceries, rice, books etc from the monthly money we got from home. It was this particular day that both of us ran out of money and practically we did not have even a single rupee to call someone to ask help from. The mobile balance was already gone and we were hoping for a miracle to happen and save us from hunger. We were already starving since morning and we got fed up of the hunger and went in search of some help. My junior went to ask help from his frens in a nearby college and they were in similar condition. All he could get was a one rupee coin. He had gone berserk thinking whom to call for money and asked me to try.
Can you imagine ...i thought so hard whom to call for help with that single one rupee coin!! Because if my fren whom i would be calling says that he doesn't have money we would be back to square one! So after thinking hard , ransacking my mind all over i called my best fren who stayed some 15 kms from my place for help. He said he has 500 rs but its not his and have to give to someone. I told him he was my last resort as it was the single very coin which we have invested in asking help and so i persuaded him that i will return him the money in 10 days time. He said ok and it was a huge relief.
I told him to wait at the gate as we dont have money for the auto and we hired an auto. He was waiting there, we took the money and returned in the same auto. We paid the auto driver and with the remaining money we bought rice, vegetables and other necessary items to quench our long awaited hunger. Till today, i remember of that incident and i realize how hard it must be on other people who hardly earns and yet have to support their family. I realized from that moment that i wont look down on people ( though i did not before also) and cherish what i have with me in life. I thanked God for giving me so much and making me realize the true value of a rupee.
6 Jan 2008
3 Jan 2008
A new dawn of 2008
The plot:
I have been quite away from Blogs for some time now. I did not feel like writing so kept postponing it. I had many plans for the New Year party bash. One among them was going to United Services Club (US Club ) in Mumbai with my friend whose dad is in Navy in high post (Comodore if i rem right!) . Well i screwed it up when i come to know that there is cover charge for civilians and scrapped the very idea. I did not have access to any bikes practically and so i knew it would be like a boring one at hostel until my friend came up with a plan of the whole class going to a private farmhouse in Mulshi Dam in Pune. It was also cheap (Rs 500 per head) with dinner, breakfast, snacks etc plus transportation to and fro (amazing isnt it?) and drinks were on our own. So me and my friend took it up and went with them on a bus.
The party:
The site was some 45Kms away from the hostel and we had so much fun playing antakshri on the bus. We lost the way while going as there were many "one pathways" diverging at each point. We finally crashed at the site with much trouble and pain in the neck... but it was worth it..We had so much fun there as it was a hillock beside a Dam site. There were no sight of human life for radius of Kms and we were at our own. It was indeed the best party we ever had in our lives. Music was playing on in the background, people were dancing and drinking... some cracking jokes...made some new friends etc.. there was camp fire going on to keep us warm..small tent house to lie down and make ourselves comfortable...even the path to the washroom seemed a stairway to heaven among the scenic background...so we had so much fun in the ecstatic new environment...We burned crackers and fireworks at midnight and wished each other a very happy new year.. i slept though lately and woke up early in the morning to catch up with other guys.
The thoughts:
The first thing that came to my mind early morning was- if it really was a new year ahead of me or another same old day!! To find that out i have to just linger on with my thoughts and play along the rhythm of life. The place was one factor that made me think of other near and dear ones whom i could not wish on the day because of no network coverage. It was something like marooned in a lonely island for time being..no contact with the outside world..and freaking out at our own disposal. The scenic beauty, the chilly breeze, the mesmerizing dawn..all seemed so perfect in everyones imperfect lives that it seemed like a dream which was once seen but forgotten of. Life seemed like a mirage before my own eyes... wavering along the waves of thoughts. As i lie down the low lying wall of the tent house i saw the moon among clear blue sky..waiting to fade away from the daylight.. and as i turned sideways i saw the nearby hills with a road that got lost among the bushes....hidden by the dried grasses was a hazy path leading to the lake down below.. we walked across the hazy path and tried not to get lost...there were many "the road not taken" paths leading different directions and we unlike Robert Frost, took the path that was already trodden and grasses shaven by foot walks.. the bamboo tress were conspiring against us...yet we walked along until we reached the foothills and found a small stream of river with amazing beauty..
The road less traveled by.....
Happy New Year to one and all...
I have been quite away from Blogs for some time now. I did not feel like writing so kept postponing it. I had many plans for the New Year party bash. One among them was going to United Services Club (US Club ) in Mumbai with my friend whose dad is in Navy in high post (Comodore if i rem right!) . Well i screwed it up when i come to know that there is cover charge for civilians and scrapped the very idea. I did not have access to any bikes practically and so i knew it would be like a boring one at hostel until my friend came up with a plan of the whole class going to a private farmhouse in Mulshi Dam in Pune. It was also cheap (Rs 500 per head) with dinner, breakfast, snacks etc plus transportation to and fro (amazing isnt it?) and drinks were on our own. So me and my friend took it up and went with them on a bus.
The party:
The site was some 45Kms away from the hostel and we had so much fun playing antakshri on the bus. We lost the way while going as there were many "one pathways" diverging at each point. We finally crashed at the site with much trouble and pain in the neck... but it was worth it..We had so much fun there as it was a hillock beside a Dam site. There were no sight of human life for radius of Kms and we were at our own. It was indeed the best party we ever had in our lives. Music was playing on in the background, people were dancing and drinking... some cracking jokes...made some new friends etc.. there was camp fire going on to keep us warm..small tent house to lie down and make ourselves comfortable...even the path to the washroom seemed a stairway to heaven among the scenic background...so we had so much fun in the ecstatic new environment...We burned crackers and fireworks at midnight and wished each other a very happy new year.. i slept though lately and woke up early in the morning to catch up with other guys.
The thoughts:
The first thing that came to my mind early morning was- if it really was a new year ahead of me or another same old day!! To find that out i have to just linger on with my thoughts and play along the rhythm of life. The place was one factor that made me think of other near and dear ones whom i could not wish on the day because of no network coverage. It was something like marooned in a lonely island for time being..no contact with the outside world..and freaking out at our own disposal. The scenic beauty, the chilly breeze, the mesmerizing dawn..all seemed so perfect in everyones imperfect lives that it seemed like a dream which was once seen but forgotten of. Life seemed like a mirage before my own eyes... wavering along the waves of thoughts. As i lie down the low lying wall of the tent house i saw the moon among clear blue sky..waiting to fade away from the daylight.. and as i turned sideways i saw the nearby hills with a road that got lost among the bushes....hidden by the dried grasses was a hazy path leading to the lake down below.. we walked across the hazy path and tried not to get lost...there were many "the road not taken" paths leading different directions and we unlike Robert Frost, took the path that was already trodden and grasses shaven by foot walks.. the bamboo tress were conspiring against us...yet we walked along until we reached the foothills and found a small stream of river with amazing beauty..
The road less traveled by.....
Happy New Year to one and all...
17 Dec 2007
Googbot- worm
Original issue date: 24th September 2007
It has been observed that a mass-mailing worm named Googbot is circulating in the wild. It propagates by exploiting software vulnerabilities. The worm is exploiting Trend Micro ServerProtect multiple stack-based buffer overflow vulnerability described in CIVN-2007-80 and Windows LSA (Local Security Authority) Service Stack-Based Buffer Overflow vulnerability described in CVE-2003-0533 . Further it opens a backdoor on the infected system on TCP port 7001 to connect to domain io.phatnet.biz and listen for malicious commands from the remote attacker.
.jsp?docid=2007-091707-2115-99&tabid=1
It has been observed that a mass-mailing worm named Googbot is circulating in the wild. It propagates by exploiting software vulnerabilities. The worm is exploiting Trend Micro ServerProtect multiple stack-based buffer overflow vulnerability described in CIVN-2007-80 and Windows LSA (Local Security Authority) Service Stack-Based Buffer Overflow vulnerability described in CVE-2003-0533 . Further it opens a backdoor on the infected system on TCP port 7001 to connect to domain io.phatnet.biz and listen for malicious commands from the remote attacker.
The worm has its own SMTP engine to send mass e-mails. It harvests the e-mail addresses from the infected system and sends malicious e-mails to the collected addresses. The e-mail body contains a malicious link which entice the users to click upon using social engineering technique.
Aliases : WORM_AGENT.AAWD [Trend], W32 Duce.a@mm [McAfee], Backdoor.W32.GoogBot.A [Kaspersky]
The e-mail contains the following :
Subject : (any of the following)
- Someone has sent you a Private Message!
- You have just recieved a NEW message!
- You have (1) NEW messages!
Body : (any of the following)
- You have just recieved a new Google Message!
- You can view your message here: http://www.google.com/gmsgid=4289472
- Note: If you do not already have Google Message Viewer installed, you will be prompted to install it.
Upon execution, the worm :
- Copies itself to the following location:
%System%\sysboot32.exe - Creates the following registry entry to ensure its execution
at every system startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run\"System Boot Loader" = "%System%\sysboot32.exe" - Modifies the hosts file for effectively disabling the access to security related websites by adding the following lines like:
- 127.0.0.1 securityresponse.symantec.com
- 127.0.0.1 symantec.com
- 127.0.0.1 www.sophos.com
- 127.0.0.1 sophos.com
- 127.0.0.1 www.mcafee.com
- 127.0.0.1 mcafee.com
- 127.0.0.1 liveupdate.symanteclive
update.com - Obtains e-mail addresses from the Windows Address Book and also searches for email addresses in files which have the following extensions:
wab, .adb, .tbb, .dbx, .asp, .php, .sht,.htm,.txt - Opens a backdoor on the infected system on TCP port 7001 to connect to domain io.phatnet.biz
In view of rapid propagation of the Googbot worm, users are advised to implement the following countermeasures:
- Install and maintain a updated anti-virus software at gateway and desktop level.
- Keep up-to-date on patches and fixes on the operating system and above mentioned vulnerabilities.
- Monitor outgoing traffic to specified TCP port of the IRC command and control (C&C) server mentioned above.
- Enable advanced TCP/IP filtering on systems.
- Do not follow links embedded in unsolicited emails.
References:
http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-091707-2115-99&tabid=1
The information provided herein is on "as is" basis, without warranty of any kind.
Trojan Exploiting PDF Vulnerability
Original issue date:30 October 2007
It has been observed that a Malware Trojan named Pidief is circulating widely exploiting Remote code Execution vulnerability in Adobe Acrobat PDF File described in CIVN-2007-128 .
It has been observed that a Malware Trojan named Pidief is circulating widely exploiting Remote code Execution vulnerability in Adobe Acrobat PDF File described in CIVN-2007-128 .
The Trojan comes as a PDF attachment in spammed e-mails with subject lines enticing innocent users into opening the malicious file and executing the malware on their systems.
Aliases : : EXPL_PIDIEF.B [FrSirt], Trojan.Pidief.A [Symantec], EXPL_PIDIEF.B [Trend Micro], Exploit.Win32.AdobeReader.b [Kaspersky]
The e-mail contains the following :
Subject : (any of the following)
- Your credit report
- Your credit points
- Your balance report
- Personal Financial Statement
- Personal Credit Points
Attachments: (any of the following)
- report.pdf
- debt.2007.pdf
- overdraft.2007.10.26.pdf
Upon execution, the Trojan :
- disables Windows firewall by issuing the following command:
netsh firewall set opmode mode=DISABLE - downloads malicious files from different location.
- the above said downloaded threat is saved to the following locations
%CurrentFolder%\
In view of rapid propagation of the PDF Malware, users are advised to implement the following countermeasures:
- Disable the "mailto:" option in Acrobat, Acrobat 3D 8 and Adobe Reader in the Windows registry
- Apply appropriate patches on vulnerable Adobe Systems as mentioned in Cert-In Vulnerability Note CIVN-2007-128.
- Delete emails with the above mentioned Subject lines and attachments.
- Avoid opening of PDF files through the web browser. Instead save the file to disk before opening.
- Install and maintain a updated anti-virus software at gateway and desktop level.
- Keep up-to-date on patches and fixes on the operating system and above mentioned vulnerabilities.
References
http://www.symantec.com/business/security_response/writeup.jsp
?docid=2007-102310-3513-99&tabid=1
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k
=139103
http://www.f-secure.com/weblog/archives/00001303.html
The information provided herein is on "as is" basis, without warranty of any kind.
Googbot- worm
Original issue date: 24th September 2007
It has been observed that a mass-mailing worm named Googbot is circulating in the wild. It propagates by exploiting software vulnerabilities. The worm is exploiting Trend Micro ServerProtect multiple stack-based buffer overflow vulnerability described in CIVN-2007-80 and Windows LSA (Local Security Authority) Service Stack-Based Buffer Overflow vulnerability described in CVE-2003-0533 . Further it opens a backdoor on the infected system on TCP port 7001 to connect to domain io.phatnet.biz and listen for malicious commands from the remote attacker.
.jsp?docid=2007-091707-2115-99&tabid=1
It has been observed that a mass-mailing worm named Googbot is circulating in the wild. It propagates by exploiting software vulnerabilities. The worm is exploiting Trend Micro ServerProtect multiple stack-based buffer overflow vulnerability described in CIVN-2007-80 and Windows LSA (Local Security Authority) Service Stack-Based Buffer Overflow vulnerability described in CVE-2003-0533 . Further it opens a backdoor on the infected system on TCP port 7001 to connect to domain io.phatnet.biz and listen for malicious commands from the remote attacker.
The worm has its own SMTP engine to send mass e-mails. It harvests the e-mail addresses from the infected system and sends malicious e-mails to the collected addresses. The e-mail body contains a malicious link which entice the users to click upon using social engineering technique.
Aliases : WORM_AGENT.AAWD [Trend], W32 Duce.a@mm [McAfee], Backdoor.W32.GoogBot.A [Kaspersky]
The e-mail contains the following :
Subject : (any of the following)
- Someone has sent you a Private Message!
- You have just recieved a NEW message!
- You have (1) NEW messages!
Body : (any of the following)
- You have just recieved a new Google Message!
- You can view your message here: http://www.google.com/gmsgid=4289472
- Note: If you do not already have Google Message Viewer installed, you will be prompted to install it.
Upon execution, the worm :
- Copies itself to the following location:
%System%\sysboot32.exe - Creates the following registry entry to ensure its execution
at every system startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run\"System Boot Loader" = "%System%\sysboot32.exe" - Modifies the hosts file for effectively disabling the access to security related websites by adding the following lines like:
- 127.0.0.1 securityresponse.symantec.com
- 127.0.0.1 symantec.com
- 127.0.0.1 www.sophos.com
- 127.0.0.1 sophos.com
- 127.0.0.1 www.mcafee.com
- 127.0.0.1 mcafee.com
- 127.0.0.1 liveupdate.symanteclive
update.com - Obtains e-mail addresses from the Windows Address Book and also searches for email addresses in files which have the following extensions:
wab, .adb, .tbb, .dbx, .asp, .php, .sht,.htm,.txt - Opens a backdoor on the infected system on TCP port 7001 to connect to domain io.phatnet.biz
In view of rapid propagation of the Googbot worm, users are advised to implement the following countermeasures:
- Install and maintain a updated anti-virus software at gateway and desktop level.
- Keep up-to-date on patches and fixes on the operating system and above mentioned vulnerabilities.
- Monitor outgoing traffic to specified TCP port of the IRC command and control (C&C) server mentioned above.
- Enable advanced TCP/IP filtering on systems.
- Do not follow links embedded in unsolicited emails.
References:
http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-091707-2115-99&tabid=1
The information provided herein is on "as is" basis, without warranty of any kind.
Trojan Exploiting PDF Vulnerability
Original issue date:30 October 2007
It has been observed that a Malware Trojan named Pidief is circulating widely exploiting Remote code Execution vulnerability in Adobe Acrobat PDF File described in CIVN-2007-128 .
It has been observed that a Malware Trojan named Pidief is circulating widely exploiting Remote code Execution vulnerability in Adobe Acrobat PDF File described in CIVN-2007-128 .
The Trojan comes as a PDF attachment in spammed e-mails with subject lines enticing innocent users into opening the malicious file and executing the malware on their systems.
Aliases : : EXPL_PIDIEF.B [FrSirt], Trojan.Pidief.A [Symantec], EXPL_PIDIEF.B [Trend Micro], Exploit.Win32.AdobeReader.b [Kaspersky]
The e-mail contains the following :
Subject : (any of the following)
- Your credit report
- Your credit points
- Your balance report
- Personal Financial Statement
- Personal Credit Points
Attachments: (any of the following)
- report.pdf
- debt.2007.pdf
- overdraft.2007.10.26.pdf
Upon execution, the Trojan :
- disables Windows firewall by issuing the following command:
netsh firewall set opmode mode=DISABLE - downloads malicious files from different location.
- the above said downloaded threat is saved to the following locations
%CurrentFolder%\
In view of rapid propagation of the PDF Malware, users are advised to implement the following countermeasures:
- Disable the "mailto:" option in Acrobat, Acrobat 3D 8 and Adobe Reader in the Windows registry
- Apply appropriate patches on vulnerable Adobe Systems as mentioned in Cert-In Vulnerability Note CIVN-2007-128.
- Delete emails with the above mentioned Subject lines and attachments.
- Avoid opening of PDF files through the web browser. Instead save the file to disk before opening.
- Install and maintain a updated anti-virus software at gateway and desktop level.
- Keep up-to-date on patches and fixes on the operating system and above mentioned vulnerabilities.
References
http://www.symantec.com/business/security_response/writeup.jsp
?docid=2007-102310-3513-99&tabid=1
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k
=139103
http://www.f-secure.com/weblog/archives/00001303.html
The information provided herein is on "as is" basis, without warranty of any kind.
16 Dec 2007
Beware of Santa Worm this christmas
A Santa Claus worm might trick you this Christmas my dear readers . It makes MSN and Yahoo instant-messaging users click on a file that delivers unwanted software to a victim's computer.
The worm is IM.GiftCom.All. The worm attempts to dupe IM users making them think that an acquaintance has sent them a link to a harmless Santa Claus file . Once you click on the file , you will see an image of Santa, but what you don't notice is that a rootkit being installed on their system. A rootkit is a tool designed to hide processes and files from the security software used to lock down control of a computer after an initial hack. The malicious attacker can then distribute messages to the user's IM contacts, using a similar technique to lure the unsuspecting acquaintance to click on the link and the worm keeps spreading .
Not only this , there are other worms on IM networks that spread rapidly. They appear as a message from a buddy with a link that looks innocent, but in fact points to malicious code somewhere on the Internet. Once the user clicks on the link, malicious code is installed and runs on the computer. The worm then spreads itself by sending messages to all names on the victim's contact list.These can be treated as medium level security threatsThe worm is IM.GiftCom.All. The worm attempts to dupe IM users making them think that an acquaintance has sent them a link to a harmless Santa Claus file . Once you click on the file , you will see an image of Santa, but what you don't notice is that a rootkit being installed on their system. A rootkit is a tool designed to hide processes and files from the security software used to lock down control of a computer after an initial hack. The malicious attacker can then distribute messages to the user's IM contacts, using a similar technique to lure the unsuspecting acquaintance to click on the link and the worm keeps spreading .
Click here for Santa worm removal
Courtesy: Subhash
Heroes are created
Heroes are created by people to look upon them for help.
People may fight for their country. But they die for their friends..those who have been with them.
......Flag of our Fathers (movie)
People may fight for their country. But they die for their friends..those who have been with them.
......Flag of our Fathers (movie)
Beware of Santa Worm this christmas
A Santa Claus worm might trick you this Christmas my dear readers . It makes MSN and Yahoo instant-messaging users click on a file that delivers unwanted software to a victim's computer.
The worm is IM.GiftCom.All. The worm attempts to dupe IM users making them think that an acquaintance has sent them a link to a harmless Santa Claus file . Once you click on the file , you will see an image of Santa, but what you don't notice is that a rootkit being installed on their system. A rootkit is a tool designed to hide processes and files from the security software used to lock down control of a computer after an initial hack. The malicious attacker can then distribute messages to the user's IM contacts, using a similar technique to lure the unsuspecting acquaintance to click on the link and the worm keeps spreading .
Not only this , there are other worms on IM networks that spread rapidly. They appear as a message from a buddy with a link that looks innocent, but in fact points to malicious code somewhere on the Internet. Once the user clicks on the link, malicious code is installed and runs on the computer. The worm then spreads itself by sending messages to all names on the victim's contact list.These can be treated as medium level security threatsThe worm is IM.GiftCom.All. The worm attempts to dupe IM users making them think that an acquaintance has sent them a link to a harmless Santa Claus file . Once you click on the file , you will see an image of Santa, but what you don't notice is that a rootkit being installed on their system. A rootkit is a tool designed to hide processes and files from the security software used to lock down control of a computer after an initial hack. The malicious attacker can then distribute messages to the user's IM contacts, using a similar technique to lure the unsuspecting acquaintance to click on the link and the worm keeps spreading .
Click here for Santa worm removal
Courtesy: Subhash
Truths of life
If i ask you if you know anything about art, you may tell me about Michelangelo- his life,his work. But you can never tell me what it smells like in the sixteenth chapel. You never actually stood there and looked up at the beautiful ceiling.
If i ask you about women, you may gimme a list of your personal favorites. You may have been laid a few times,but you can't tell me what it feels like to wake up next to a woman if you are truly happy.
If i ask you about war,you probably would throw Shakespeare at me telling whats the big difference.But you have never been in one.You never held your best friend in your lap, watch him gasp his last breadth looking to you for help.
If i ask you about love, you may probably quote me a sonnet; but have never looked into a woman who have been totally lovable.Being at the same level of your eyes; feeling like God put an angel to earth just for you,rescue you from the depths of hell. And you wish to be like her angel-to have the love for her and be there forever...for anything..through anything.
You dont know a real loss because its only caused when you have lost something you have loved more than yourself. Now i don't dare to live up to anybody that much
If i ask you about women, you may gimme a list of your personal favorites. You may have been laid a few times,but you can't tell me what it feels like to wake up next to a woman if you are truly happy.
If i ask you about war,you probably would throw Shakespeare at me telling whats the big difference.But you have never been in one.You never held your best friend in your lap, watch him gasp his last breadth looking to you for help.
If i ask you about love, you may probably quote me a sonnet; but have never looked into a woman who have been totally lovable.Being at the same level of your eyes; feeling like God put an angel to earth just for you,rescue you from the depths of hell. And you wish to be like her angel-to have the love for her and be there forever...for anything..through anything.
You dont know a real loss because its only caused when you have lost something you have loved more than yourself. Now i don't dare to live up to anybody that much
Subscribe to:
Posts (Atom)
