Thursday, June 11, 2015

What is Bug Bounty


Bug Bounty


Web Application Development companies, Online Software Development companies, big websites like facebook, Yahoo, Google, Microsoft etc pay some amount to hackers, cyber security people who help them in finding and/or fixing the cyber security vulnerabilities in their websites, applications etc.  Bug bounty programs are specially useful before launching the web application in the market.

Bug Bounty program was initiated by Jarrett Ridlinghafer and he coined the term "Big Bounty" while he was working at Netscape as technical support engineer.

Cyber Security researchers are hired by almost all big internet companies to find and fix the vulnerabilities. Companies run the Bug Bounty programs  to patch the flaws, security holes and cyber security people get rewards in the form of money or  gifts along with the good recognition. Companies publish the cyber security researcher name on their corporate website under "Hall of Fame" category and acknowledge their efforts openly. Bug Bounty programs are very helpful in making internet browsing, online shopping etc  more secure.

Nowadays companies are increasing the rewards to identify and patching the vulnerabilities. Cyber Security researchers may earn from $500 to $ 5000 and sometimes even more it all depends upon the complexity.

Beware - Finding the vulnerability does not mean that you publish the cyber security issues anywhere on any website or posting about security holes  on various internet forums to get publicity.  One must be responsible enough and should disclose such findings only to the company's Cyber Security Team.  

Friday, March 13, 2015

Child Safety Blog - Block Social Networking Websites like Facebook, Youtube etc

You or your child anyone can be addicted to social networking websites. For de-addiction follow these steps:-
 Windows: Go to "Run"


and Type:-     C:\WINDOWS\system32\drivers\etc



Copy “Hosts” file and paste it on the Desktop. Right Click on it, go to rename and rename it to “Hosts.txt” and open in the Notepad. It looks like -




Now copy the below given list (in blue color) just after the last line in the hosts file:
   
---------------------------------------------------------------------------
# Block Websites
   127.0.0.1         www.facebook.com
   127.0.0.1         facebook.com
   127.0.0.1         m.facebook.com
   127.0.0.1         static.ak.fbcdn.net
  127.0.0.1         www.static.ak.fbcdn.net
  127.0.0.1         login.facebook.com
  127.0.0.1         www.login.facebook.com
  127.0.0.1         www.youtube.com
  127.0.0.1         youtube.com

Save the file and remove the .txt extension by clicking on "rename " option 

In case you are unable to save the file then change the administrator permissions -Right click on the “hosts”file, choose Properties -> Security (Security is the second tab) and make sure all the boxes are checked in . Now save it.

Copy the modified “hosts” file to the  C:\WINDOWS\system32\drivers\etc 

If you are asked to replace then press “Yes”.

Go to Command Prompt and type :


ipconfig /flushdns
Press Enter

Again go to command prompt and type

ipconfig /registerdns 

Press Enter

Open the browser and check whether these websites are blocked? If not then re-boot the computer and re-check. It is done now.

Likewise you can block as many websites as you want.

Monday, February 23, 2015

Block Spam Emails

Reduce/Block Spam Emails-


Spam Emails -Spam emails meaning unsolicited, unwanted, email messages. Spam email does not necessarily contain viruses—sometime valid messages from legitimate sources may fall into spam category.


Steps to reduce the spam emails-

  • Check Privacy Policies of the website you visit - Before submitting your email address on any website or downloading any document or application , read that particular organization's privacy policy.
  • Beaware of "By default" Options - Sometimes on websites some options are selected by default. If you miss to de-select those options, you could begin to receive emails from those lists and sometime some unwanted software get installed into your system.
  • Use E-mail Filters - Using email filters you can  block certain email addresses or you can create a white list of your own contact list.
  • Report Spam - You can report a message as spam or junk to that specific website.
  • Unsubscribe Your Email Address:- You can unsubscribe your email id any time . For example you subscribed on any abc.com website for newsletters but now you no longer wish to get the newsletters. Visit abc.com and there you find a "Unsubscribe" button.
  • Never click on web links in spam messages - By clicking on a weblink within an email message or reply to a certain address, you confirm that your email address is valid.
  • Disable the automatic downloading of graphics in HTML mail
  • Use Privacy Settings on Social Networking Websites - Social networking sites  allow you to choose who has access to see your email addresses.

Let us understand it in detail by facebook example-



Screenshot1

Manage -who can contact you, can see your stuff
Privacy Settings -Social Networking Websites

Screen Shot2
Restrict/Block Users and Block App Invites
 
Block unawanted apps

Now lets understand Google+ Settings:-
Control who to interact and who can see you on google+
Block users on google+



Manage apps which you have linked with your google account
External Apps linked with google+



 Manage Google+ profile tabs visible to your profile visitors
Manage google+ circle
Manage Google+ profile tabs visible to your profile visitors
Manage google+ profile tabs visible to profile visitors








Email Security

Your organization security is at substantial risk if you have not implemented email security policy. Daily we all receive emails which con...