How To Protect More Security From WordPress Websites

How To Protect More Security From WordPress Websites

Hi Friends.. website runs on a self-hosted WordPress installation or on Drupal, update your software now.Nir Goldshlager, a security researcher from Salesforce.com's product security team, has discovered an XML vulnerability that impacts the popular website platforms WordPress and Drupal.The vulnerability uses a well-known XML Quadratic Blowup Attack and when executed, it can take down an entire website or server almost instantly.

                                 
                               


big deal because WordPress and Drupal are used by millions of websites. The latest statistics from the World Wide Web Consortium (WC3) show WordPress alone powers nearly 23% of the web.The XML vulnerability Goldshlager discovered affects WordPress versions 3.5 to 3.9 (the current version) and works on the default installation. It affects Drupal versions 6.x to 7.x (the latest version) and also works on the default installation.The good news is that both WordPress and Drupal have released patches for their applications. Users and web hosts simply need to upgrade to the latest version to protect against the vulnerability.When the vulnerability is exploited, the results can basically render a website or web server unusable. The vulnerability can cause 100% CPU and RAM usage, cause the server to become unavailable and also create a Denial of Service attack on the MySQL database program.

                                 



HOW ATTACKS WORKS: 


vulnerability uses what is called an XML Quadratic Blowup Attack. This type of attack is similar to a Billion Laughs attack, which can allow a very small XML document to totally disrupt the services on machine in a matter of seconds .The Quadratic Blowup Attack is similar; however, instead of using nested entities inside an XML document, it just repeats one large entity with tens of thousands of characters over and over again.With this type of attack, an XML document that might be a few hundred kilobytes in size can end up requiring hundreds of megabytes or even gigabytes of memory. That will easily bring down an entire website or web server.

In Goldshlager's words:

"If an attacker defines the entity "&x;" as 55,000 characters long, and refers to that entity 55,000 times inside the "DoS" element, the parser ends up with an XML Quadratic Blowup attack payload slightly over 200 KB in size that expands to 2.5 GB when parsed. This expansion is enough to take down the parsing process.

                                 

Default memory allocation limit for PHP (the language that WordPress and Drupal are written in) is 128MB per process. In theory, this means that you can't exceed the 128MB limit with an XML bomb request. So far so good, right?Here's the problem: Apache, the world's most popular web server, has its "Max Clients" property set to 256 by default. Meanwhile, MySQL, the database that WordPress and Drupal use, has its default "Max Connections" value set to 151.If we multiply those connections against one another (128x151), we get 19328MB  which will consume all available memory.To successfully attack the server, the attacker needs to fingerprint the available memory limit on the victim's server. If the attack overwrites the PHP limit, the server will reject the overwrite, rendering the attack unsuccessful.

A successful attack, however, will return the injected payload as a result. This will bring down the system.WordPress and Drupal have both updated their software to protect against this vulnerability. The update procedure will vary based on your setup.WordPress 3.7 introduced automatic updates for minor releases for this very reason. This allows security patches, such as this one, to get rolled out to users automatically.Automatic updates can turned on or off at the discretion of your web host, so it's a good idea to check your settings and update manually if automatic updates are not enabled.

                               

 potential vector size of this vulnerability, Goldshlager made sure to responsibly disclose the vulnerability to the WordPress and Drupal teams before sharing the results with the public.

This allowed the teams time to patch their respective pieces of software before the vulnerability was exploited on a large scale.

Given the nature of this type of attack  and the relative ease in which it could have been exploited  the repercussions for plenty of website owners and web hosts could have been innumerable. WordPress alone is used by many of the biggest publishers on the web  not to mentions millions upon millions of regular users and small businesses Responsible disclosure was the best way to get the issue out in the open, and also fixed.

Notably, the WordPress and Drupal teams worked together on this solution and timed their security releases to coincide with one another.

Because the vulnerability targets WordPress's XML-RPC library file  a file that Drupal uses a derivative of  it made sense for the teams to work together on a patch and release.

Mashable worked with Goldshlager in preparing this post and writing up the disclosure, in the hopes that we can get the word out to as many people as possible. If you're running WordPress or Drupal, update now.

ALSO READ :   CLICK HERE

MORE WORDPRESS TIPS : CLICK HERE

Samsung Upcoming Mobile's And features This Month

Samsung Upcoming Mobile's And features This Month

Hello Friends! Samsung Galaxy smartphone appeared on Chinese social media site Weibo. The photos show a decidedly grooved metal design  an iPhone trademark on generations 5 and later — not shared by past Galaxy models. leaked images are unverified, and Samsung has so far been silent on the existence of a new Galaxy. A metallic exterior would be a departure from previous Galaxy phones, which have typically brandished plastic backsides, sometimes textured to give the feel of leather or metal.

 

chamfered edge would also be new for Samsung, although the accusation of stealing it from Apple would not be. those who are eager to get their hands on the phone, British retailer MobileFun is offering pre-orders of the so-called Galaxy Alpha for $939 without a SIM card. The website touts the Alpha's fingerprint scanner and a 12-megapixel camera, putting it in the same league as the Galaxy S5.

                                        

Samsung rumor website SamMobile released images two weeks ago that reportedly showed early Alpha prototypes. However, while those photos showed only a black version, while the new photos display a white body, suggesting that Samsung may offer both colors for the Galaxy Alpha, as they have with previous Galaxy phones.So far no pics of a gold Galaxy Alpha have turned up.

Galaxy Alpha is expected to run Android 4.4 "KitKat" and start at 32GB of storage. The same Weibo page that leaked the photos claims that Alpha will come in both 4.7- and 6.7-inch sizes.

While Samsung itself has not confirmed a release date, SamMobile originally reported that the phone would be announced on Aug. 4. However, the site is now saying the date to watch is Aug. 13.

UPCOMING ANDROID MOBILE"S : CLICK HERE

Top And Best 5 Android Tablet App's

Top And Best 5 Android Tablet App's

Hi Friends! starting to give Android some love, with many excellent choices available if you are looking to do some stylus-powered note-taking, drawing, or other creative tasks.Grab your stylus and head to the Play Store for some of the following choices, which offer the best usability for typing-free productivity and creativity.

                                                

HERE YOU ARE KNOW FOR BEST APP'S ANDROID TABLET: 

SKITCH: 

Skitch is an excellent multi-purpose tool, as it can can be used for marking up web pages, PDFs, images, maps, and just general blank pages. found Skitch to be extremely useful for adding details to maps before sending it to friends for an event. Sometimes Google Maps leaves out a few details, and other times you just need more explicit instructions to avoid getting lost.Skitch is an Evernote app, so any Skitch notes can be synced back to your main Evernote account for viewing or further editing on other platforms.

                                             

NOTEPAD+

Notepad+ finally made its way over to Android after gaining lots of praise from iOS users. It has a good set of writing and drawing tools, including multiple pen types, highlighters and erasers. The interface puts the key tools at the top with good spacing so it’s easy to quickly tap the right target.I was also impressed with the ability to cut, copy, and paste ink anywhere on the page. It is nice to be able to make such an adjustment instead of only having to erase any ink.

                                                 

ONENOTE BETA:

Microsoft has ramped up its OneNote app. It owes its existence to the Windows XP Tablet Edition era when Microsoft was pushing stylus-powered tablet PCs as the future of computing. They were a little ahead of the game with that one, perhaps.OneNote is now making the transition to the touch and cloud era with many updates to the Android app and continual features rolling out to the OS X and Windows desktop versions. The beta version of OneNote, which is targeted toward early adopters who want to try out the app’s new features, now supports inking.Getting the app takes a few extra steps: you must join the OneNote Beta Google+ community and then download (or re-download) the OneNote Android app. You will then have the beta and can start marking away with your stylus.

                                                             

NOTE ANYTIME:

interface for NoteAnytime seems to be designed a with stylus in mind, as the buttons are rather tiny and may not be finger-friendly for everyone.Yet it makes for a powerful app, with strong digital whiteboard and sketchbook features. It has a large color palette and calligraphy pens, along with regular writing tools, markers, and highlighters.If you are not sure about springing for the full-version of the app ($2) there is a pretty well-featured lite version that provides enough features to help you decide if the pro version is worthwhile.

                                                   

AUTODESK SKETCH BOOK

AutoDesk has a healthy family of apps in the Play Store designed for drawing, design, and architecture. The company is rather dominant in this field with its SketchBook and AutoCAD apps. SketchBook may be a good choice for its diversity of illustration tools. You can create a full-fledged piece of art or use your Android tablet for a digital doodling pad. If you are using a Galaxy Note or other tablet and want a form factor more designed for a phone, then go with SketchBook Mobile.The SketchBook apps also offer a free version, with the pro option costing $5 to further empower your stylus.

                                      

HERE CLICK FOR KNOW LATEST APP"S FOR ANDROID: CLICK HERE

How to remove or Troubleshoot Mac WiFi Problems

How to remove or Troubleshoot Mac WiFi Problems

Hi Friends! Wi-Fi has become our preferred way to connect our Macs to other networked devices and the Internet. However, most of us also have times when those connections slow down or fail altogether. When that happens, however, there are several things you can do to diagnose and (ideally) fix the problem.

                                                   

Remember about Wi-Fi is that it’s a form of radio: Signals are passed to and from your Mac and your router (and any other networked devices) by transmitters and receivers at both ends tuned to the same frequency. While the information being sent might be digital in nature, the medium it rides on is analog. As such, the ability to transmit and receive data via Wi-Fi is dependent on two things: the strength of the signal between those transmitters and receivers; and the volume of interference unusable “noise” from other devices using that same frequency.

The analogy is to listening to the radio in your car: Sometimes, the signal gets weaker as you drive farther away from the station’s transmitter. Other times, even if the signal is crisp and strong, you might hear two different stations one you want to listen to, one you don’t—on the same channel; that’s noise.

                                              

Mac’s ability to maintain a good Wi-Fi connection is a function of both of these signal types: If the signal from your router to your computer is too weak or if there’s too much noise from competing signals, then—as with your car radio—your Mac will lose its ability to make sense of what it’s “hearing.”

        

You can see all this activity in real-time using OS X’s built-in Wireless Diagnostics utility (/System/Library/CoreServices/Applications/). Open this utility and choose Utilities from the Window menu. In the panel that then appears, open the Performance tab. You should see two graphs: One showing the signal and noise levels, another showing the ratio of the two (a common way to determine relative strength). (The levels measured in that first graph are negative because they’re based on the logarithms of values between 0 and 1, and such logarithms are negative.)

In general, for the signal measurement you want to see values of -10 to -70 dBm (decibel-milliwatts); for noise, -80 to -100 dBm. As the levels of the signal and of the noise get closer to one another, your wireless connection will begin dropping data packets and requiring that they be resent. This will slow down data transmission, and potentially cause your Mac to drop its connection altogether.

          

Upgrade OS X to the latest version if you have not already done so.
Run Apple’s hardware tests; if any errors crop up (especially anything pertaining to networking and Wi-Fi), you can then investigate them further.
Try a new network location by going to the Network system preferences and then choosing Edit Locations from the Location menu, followed by clicking the plus button to create and name a new location. This will populate the new connections list with all of the current networking hardware ports, and give them new configurations to work with.
Clear your Mac’s network configuration by going to the /Macintosh HD/Library/Preferences/SystemConfiguration/ folder and removing the following configuration files: NetworkInterfaces.plist; com.apple.airport.preferences.plist; com.apple.network.identification.plist. After doing this, restart and then set up your Wi-Fi connections again. Note that this will remove most of your network settings, so any specific customizations you have made will need to be re-established.

             

ALSO READ : CLICK HERE

MAC LATEST TIPS : CLICK HERE

Top And Latest Apple iOS 8 Features And Tips

Top And Latest Apple iOS 8 Features And Tips

Hi Friends!  Cupertino-based company rolled out the iOS 8 beta 4, which includes a new built-in app called Tips, to developers Monday.In addition to the new Tips app, the latest version of the iOS 8 comes with a redesigned control center and new menus in Settings, including separate panels for wallpaper and display and brightness, according to iDownloadBlog.



While the control center and settings tweaks aren't major changes, the Tips app is a brand new addition. The app is apparently designed to give users tips and tricks for using iOS 8's features, according to iDownloadBlog. The app will be updated weekly with new tips from Apple, such as navigation shortcuts or tutorials on dictating text messages or how to get the most out of Siri.

   

Apple is pushing out the update through its over-the-air updating system. It's also available in the iOS Developer Center. Right now, however, only registered developers are able to check out the new iOS 8 beta. The full version of iOS 8 is expected to roll out to consumers this fall when Apple releases the next iPhone.

Apple also released a new developer preview version of the upcoming OS X Yosemite. Apple is expected to release a public beta version of Yosemite prior to the full launch later this month.

ALSO LATEST TIPS FROM APPLE: CLICK HERE

How To Trace Mobile number in india , With Owner Name And Adress

How To Trace Mobile number in india , With Owner Name And Adress

Hello My Dear Friends! now i am telling about mobile number trace, now todays we are all using many more people are phone users in india Now a days we need to get awareness about the mobile number we are receiving. So using this article you will learn how to trace owner name,location,operator of a mobile number inside India. In fact, there are several resources that may be employed to find out. But there are several websites restrict the users to view the owner of the mobile number a good website that shows even the name of the mobile number along with the map location.


                                   




PROCESS:

We are providing the detailed method to trace a mobile phone’s owner name.TRUECALLER is a site that offer you to find mobile number and owner details.Follow the steps listed below.


go to TRUECALLER website.

Then Select the country name as india and enter the phone number you need to trace.
Sigin in with any of the provided social network site.




 



select country as INDIA and enter the phone number you want to trace.
I likely found my friend number with his name,location.See the below image.

When someone downloads their application and install it on their mobile phone,this website truecaller scans all of their contacts It uses the phone directory of users.If you feel it’s unsafe to have your name on their directory then you can simply remove your number from their website by following the below procedure.



Go to TruecallerUnlist wedsite.

Then Select your country,type in your number.
Enter the captcha and click enter.

As you can see i have unlisted my name from true caller and when i searched for it again it said “No Match Found

             


How to Trace a Location and Operator of a Mobile Number/landline numberMETHOD:-2

Even though we found the owner’s name using truecaller website, it had a limitation that is it doesn’t always shows the proper location of the mobile number.So to identify the mobile phone’s location and operator i provided a better website from which you could collect your desired results.Steps to trace a Location and Operator of a Mobile Number

Go to IndiaOnAPage website.

Enter the mobile number and hit trace,you are done. 

I hope you  article had made you to trace the owner’s name,operator,location of a particular mobile phone number and if you find this article useful kindly share it.

ALSO KNOW CLICK HERE: 

Microsoft OneNote Latest Version Released

Microsoft OneNote Latest Version Released

Hello My Dear Friends! Microsoft's OneNote productivity apps just got more competitive with challengers like Evernote.The company updated OneNote for Mac and iOS with new features meant to appeal to the app's professional and student users. latest version of the apps includes improved integration between the OneNote and OneDrive, the ability to add files into notebook pages and organizational improvements like the ability to view password-protected sections.

                                   

Although tablet pc users will probably get more use out of OneNote's extra features, like the ability to incorporate hand-written notes, it would be a mistake to assume that OneNote holds no benefits for desktop or laptop users.In fact, I will be so bold as to venture that it is best suited for use on laptop computers: One can harness the portability factor (I'm guessing most people will want to take notes while they're in the "field," whether that's on the job, at the library, or hanging out at a coffee shop) and bypass the temptation to rely on the handwriting and opt for the keyboard instead.After all, the purpose of the program is to help one organize notes one intends to incorporate into a lengthier document -- we have PDA's to handle our to-do lists and other notes to ourselves that never need to make it into print.

                                                   

Use OneNote on the Mac and iOS can now view and edit notebooks that are stored on the Office 365-backed OneDrive for Business. Changes made in OneNote documents will automatically be synced with OneDrive for Business and users now have the ability to sign into OneNote using their OneDrive or OneDrive for Business accounts.Microsoft also added the ability to insert files, including images and PDFs, into notebook pages. On the Mac side, files can be added by dragging them directly into the notebook, while in iOS photos and documents will have an "Open in OneNote" option.OneNote users can also now access password-protected sections of their notebooks created in the Windows version of OneNote. Other organizational improvements include the ability to organize notebooks from within the apps, easier copy-and-paste functionality and improvements to how notes are sent over email notes can be sent as PDF attachments or in-line in the body of emails.

  

updated Mac, iPhone and iPad apps are available now and Microsoft is asking for feedbackabout improvements users want to see in future updates. There still isn't an official version of OneNote for Android, but Android users can sign up to be part of the beta release, which Microsoft says is "coming soon."

LATEST UPDATES: CLICK HERE