Author Archive for vinodmishra

Page 3 of 13

Vulnerability in Gmail

I was recently attempting to mail some javascript code from my yahoo account to my gmail when I came across this vulnerability.

Apparently javascript will run if it is withing the preview of the message.

I only tested this sending from a yahoo account. Sending gmail to gmail appears to filter this out.

This is what the message has to compose of

* A short subject to increase the ammount of code to run

* A short bit of text in the body so that the code isn’t treated as quoted text

* And your code

My simple test was : Subject: a Body: asdfasdf<script>alert(“asdF”);</script>

Here is a screen: http://www.ipnow.org/vulnerability.png

This vulnerability could be used to gather email addresses. Or even possibly to compromise the account.

A 14 year old, Anthony discovered this vulnerability. Right now this has been fixed by Google but no statement has been issued by them regarding this.

Read Anothony’s Blog

Google Maps vs the Rest

Google Maps vs the Rest

Competition is great for consumers, especially in the world of emerging technology. With graphics processors and memory becoming cheaper and cheaper, more applications that utilize these technologies are being developed.

Last year we saw several new applications that brought 3D imagery of the world to our desktop and several more are in the development stages. The most marketed of these, however not the first, was Google Earth, followed closely by NASA’s open source solution, World Wind.

These applications allowed users to view already available imagery in a way that no other freely available application had done in a three-dimensional view.

Several years ago, Microsoft released a tool to browse satellite imagery. Terraserver, as it was called, made available imagery from a then recent declassification of the United States images by President Bill Clinton. Of course it was really Robert Gates, Director of Central Intelligence, who launched the CIA’s openness program, which led to the declassification.

Since then, digital mapping has become more mainstream in both commercial and consumer products allowing for applications that varied from complex analysis of urbanization to better driving directions.

Sites such as MapBlast, MapQuest, Yahoo!Maps, and Google Maps began offering driving directions to the consumer showing detailed maps of the area. Eventually these services offered local information in addition to the maps, giving you locations of restaurants or retail shops in the vicinity of your destination.

It was not until Google Maps released the satellite data along with their mapping services did the focus shift to more three dimensional mapping. Until this point, satellite imagery was only available to the digital mapping community, the commercialization of which put a whole new perspective on geography.

People began searching their neighborhoods and houses to get an aerial image of their homes rather than searching for a destination. Commercially available products offered more robust features than Google Maps and the newly redeveloped Yahoo!Maps, but many were still much too expensive for the average consumer.

With the open source revolution looming, software engineers were designing programs to enable three-dimensional imaging for the desktop and ultimately the average consumer. When NASA started releasing images from their Mars rover, more people downloaded the software to get an idea of what Mars looks like on their computers rather than on the nightly news.

Although the application was still designed for the more technologically savvy than the average user, that all changed when Google Labs unveiled Google Earth in June of 2005.

Google Earth impressed most users. The “blue marble” image of the Earth from space was enough to wow your senses, but typing a location and zooming to a specific location certainly amazed the masses. I remember the excitement in my office over imagery that had been available for several years, just not the way Google presented it.

Much of North America was available through EarthSat imagery even in high detail. But with Google Earth, a user can research an area and look for landmarks. Websites chronicling interesting locations started popping up, such as the Eiffel Tower, the Washington Monument, the Statue of Liberty, and locations around the globe were all displayed in high detail.

Certain cities also contain three dimensional representations of buildings, giving the user a bird’s eye view of their favorite city. The user can tilt and rotate the perspective allowing them to examine the landscape in an entirely different way.

Ultimately, people realized the full potential of Google Earth and many began developing applications based on the technology. Google Earth will not replace high tech programs like AutoCAD or ESRI’s ArcGIS, but they’re providing a free service to the general population, something never done before.

Developers then used Keyhole Markup Language (KML) to start placing their own points on the maps, identifying areas of interest for their projects. From potential customers to the various geographic locations of family members, personal projects started popping up all over the web.

KML is a derivation of eXtensible Markup Language (XML) and is described as “an XML grammar and file format for modeling and storing geographic features such as points, lines, images and polygons for display in the Google Earth Client.”

Not to be outshined by Google, NASA began marketing their product World Wind. Although NASA’s release of World Wind preceded Google’ by more than six months, the impressive marketing of Google made Earth’s release monumental, and NASA realized this fact.

World Wind contains much of the same functionality of Google Earth, including a smooth zoom and place finder. NASA’s 3D engine is very similar to Google’s although the usability of World Wind is not as simple as Earth’s.

Regardless of the features of each browser, the data is the most important aspect of the application. While Google uses primarily one source for their imagery, World Wind has numerous governmental sources, including Land Sat 7, Moderate Resolution Imaging Spectroradiometer, or MODIS, a tool that catalogs fires and floods among other data, and Shuttle Radar Topography Mission, SRTM, which gives the user a eye level view of the Earth, as well as several other tools.

As with Earth, World Wind is adding a set of tools to aid in development of web services for greater flexibility and analysis. World Wind will be integrating XML in upcoming releases to give the developers the necessary tools.

Other products currently in development are Microsoft’s Virtual Earth, which is showing great promise, Motherplanet, Inc’s Earth Explorer, and Earth Systems Research Institute’s ArcGIS Explorer, although the latter is a consumer product from the commercial leader in geographic information systems (GIS) products.

ArcGIS Explorer will not be available publicly until the second quarter of this year, but it is already showing some promise. Developed essentially for the GIS community, the developer tools associated with it are more advanced than the tools available for Google Maps or Google Earth.

Appearing late in the game, Microsoft’s Virtual Earth, still in Beta, has some interesting features that may compete with Google Earth and World Wind. Utilizing NAVTEQ technology and USGS images, users can view road maps, aerial maps, and a bird’s eye view of available locations.

What may give an edge to Virtual Earth users is that there is no need for an external application, allowing for viewing within the user’s web browser. Lately the load time of Google Earth has plagued many users, and Virtual Earth may prove to be a viable alternative.

Virtual Earth has many of the same features as the other software, adding pushpins, directions and various viewpoints, although it lacks the scrolling that many Google Earth users drool over. Virtual Earth is still in Beta so these features could be included in future releases.

With the cost of storage decreasing and more powerful graphics cards being integrated into consumer computers, many companies interested in mapping solutions will be adding three-dimensional mapping to their products.

It is, however, unlikely that companies will be able to move in on the market that Google Earth already owns. The addition of advertisements to Earth, however, may be the only thing that can damage earth right now. Google, being the advertising giant that they are, has indicated that the free version could include targeted ads, giving the open source World Wind the opportunity it needs to take over the market.

Regardless of the provider, satellite imagery of our planet is a service that many consumers desire. Whether for directions, business, or general interest, looking at the Earth from a bird’s eye view is a technology that will continue to shape the way we access geographical information for years to come.

Source : ShortFlip.com

MySpace Backlash

Last December, a mischievous student used a home computer to create an account on the social networking site MySpace bearing the name and likeness of his school principal, Eric Trosch.

The profile the Hermitage, Pennsylvania, Hickory High School student bestowed on his principal was not kind. For “birthday” he listed “too drunk to remember.” And for vital stats like eye and hair color he wrote, simply, “big” — a poke at the educator’s girth that he managed to weave into most of the 60-odd survey questions in Trosch’s fictional profile: Do you smoke? “Big cigs.” Do you swear? “Big words.” Thoughts first waking up? “Too … damn … big.”

The teen told some friends at school about the gag. Big mistake.

As a judge would later put it, “word of the parody … soon reached most, if not all, of the student body of Hickory High School,” and the fake MySpace profile, along with several less nuanced commentaries crafted by other students, became a monster hit at the school. The administration banned student PC use for six days, canceling some classes, while they traced the profile to 17-year-old senior Justin Layshock, who promptly confessed and apologized.

“We grounded him and didn’t allow him on the computer for two weeks,” says Layshock’s mother, Cherie Layshock. But the school had stronger medicine in mind. Layshock was suspended for 10 days, then transferred into an alternative education program for students incapable of functioning in a regular classroom.

A gifted learner who had been enrolled in advanced-placement classes and tutored other kids in French, Layshock spent the next month in a scaled-down three-hour-a-day program where a typical assignment saw students building a tower out of paper clips as a lesson in teamwork. The punishment led to an ACLU lawsuit that is ongoing, and garnered the school district a slew of critical stories in the local papers.

And that’s how the thin-skinned educators of Hermitage joined the great MySpace crackdown of ’06.

Read More on Wired News

Google Video Charging Admission For TV Ads

To heap on one more thing to screw with your head this Friday, Google is selling vintage commercials through its Google Video search. You heard right, if you want to view the commercial, you’ll have to pay a dollar. Anybody else hear Gabriel’s trumpet?

Just a few weeks ago advertisers paid $2.5 million for a 30-second ad on the Super Bowl. Looks like some are trying to make that money back. Granted the commercials for sale through Google Video are vintage-commercials we knew and loved as kids-but some of these companies are still around.

Hang on. Let’s talk about the cool changes to Google Video and then get back to this. Google has added category tags-very YouTube-esque. This must have been what Larry Page was yelling about. Searchers who just want to browse videos can do so with the help of tags marked “Popular,” “Animation,” and “Educational,” among others. Sweet.

Read More..

A 1.2 Petabyte Hard Drive?

Rather than spend millions of dollars for an array of hard drives when you can have all that storage on just one drive? A story at P2P.net US inventor Michael Thomas, owner of Colossal Storage, says he’s the first person to solve non-contact optical spintronics which will in turn ultimately result in the creation of 3.5-inch discs with a million times the capacity of any hard drive – 1.2 petabytes of storage, to be exact. According to the article, In the past, data storage has only been able to orient the direction a field of electrons as they move around a molecule, Thomas said. “But now there’s a way to rotate or spin the individual electrons that make up, or surround, the molecule,” he says. He expects a finished product to be on the market in about four to five years, adding the cost would probably be in the range of $750 each.

Source

Google Release Free Website Service

Google Pages

Google have launched Google Page Creator, a free website creation tool.

Perhaps best described as Geocities for the 21st century, Page Creator takes the Google AJAX magic and applies it to website design. The process is simple, albeit, at this time, a little buggy.

In a fashion remarkably similar to Powerpoint, users can pick from a number of themes (or change them on the go) and text layouts. It makes use of a rather clever What You See Is What You Get (WYSIWYG) editor, so users don’t have to face the prospect of editing HTML (but the option exists). Best of all, in true ground breaking fashion, Google lets you have 100MB of space for free, and it doesn’t even put ads on your homepage.

It’s all very easy; of course, that’s the idea. Google have identified an area of the web which has garnered little interest in the last few years. “Free” providers traditionally have provided a lack lustre offering designed to try and persuade people to go up to pay-for options. No longer. Google Pages sees the company delve into a natural but new field, and will no doubt be popular.

Sign-up for the service

Source:Neowin.net

Windows Vista Enterprise Feb CTP Released

Brad Goldberg, General Manager of Windows Client Product Management has announced the availability of the enterprise CTP today.
Vista will include new deployment and imaging technologies driving deployment costs down and patching reboots down. Vista is now officially feature complete and we will see a combination of Beta 2 with a CTP in 2Q 2006. General availability targetted for 2nd Half 2006 – exact date depends on quality.
Main points of Vista for the Enterprise:

*
Deployment Costs Go down
*
Secure and compliant desktop
*
Connecting people to information
*
Increasing mobile and remote productivity

5308 is now available from connect as:
FebCTP_5308_64bit_Main_Staged_DVD.iso, 3,675.94MB
FebCTP_5308_32bit_Main_Staged_DVD.iso, 2,780.79MB

Source: Neowin.net

Google Admits Desktop Security Risk

Businesses have been warned by research company Gartner that the latest Google Desktop Beta has an “unacceptable security risk,” and Google agrees.

On Feb. 9, Google unveiled Google Desktop 3, a free, downloadable program that includes an option to let users search across multiple computers for files. To do that, the application automatically stores copies of files, for up to a month, on Google servers. From there, copies are transferred to the user’s other computers for archiving. The data is encrypted in transmission and while stored on Google servers.

Source: Neowin.net

Google descends on Israel

The internet search giant has promised that all of its services will be translated to Hebrew and moved into Israel within 18 months as the company’s grip on the web tightens.

Google appears to have put a lot of work into the Israeli operation, as the new Hebrew branch comes loaded with a CEO and trained staff.

Meir Brand, CEO of Google Israel revealed: “We discovered that the Israeli surfer has unique characteristics that the American surfer does not have.

“Israelis are chronic searchers. The search is the main use they make of the internet, while for Americans, the main use of the internet is email,” he added.

It seems, however, that Google’s main focus is on advertising. In Israel 15% of all online adverts appear on search engines, whereas in the US this figure is as high as 40%. Google have seen the gap and are closing in before their rivals do.

Source: Neowin.net

EFF warns of Google hacker threat

The Electronic Frontier Foundation is warning people not to use Google’s newest desktop search product, saying it provides a “convenient one-stop-shop for hackers” who’ve gotten a user’s Google password.

The new search tool allows consumers who regularly use multiple PCs to search all of those systems simultaneously, even when they are not connected to the Internet. But EFF says that feature makes personal data “more vulnerable to subpoenas from the government and possibly private litigants.”

Google has included some privacy protection measure to the feature, allowing users to screen out specific files or folders and promising to delete any copies of the files from its servers within 30 days and encrypt the data.

Read More on CNet