Technology

This bug could have allowed malicious users to send requests with CSRF tokens to arbitrary endpoints on Facebook which could lead to takeover of victim’s accounts. In order for this attack to be effective, an attacker would have to trick the target into clicking on a link. Demonstration This is possible because of a vulnerable endpoint which takes another given Facebook endpoint selected by the attacker along with the parameters and make a POST request to that endpoint after adding the fb_dtsg parameter. Also this endpoint is located under the main domain  www.facebook.com  which makes it easier for the attacker to trick his victims to visit the URL. The vulnerable endpoint is: https://www.facebook.com/comet/dialog_DONOTUSE/?url=XXXX where XXXX is the endpoint with parameters where the POST request is going to be made (the CSRF token fb_dtsg is added automatically to the request body). This allowed me to make many actions if the victim visits this URLs. Some ...

Cyber resilience isn’t something you can buy. It’s not as simple as finding off-the-shelf tools to plug into your organisation. Rather, you must tailor your approach to your needs, assessing the way any one solution affects the whole. That may sound daunting, but when cyber resilience is done right, your cyber security and incident response strategy will seem straightforward. You’ll have a clear understanding of what each control does, how it fits into your organisation and why it’s worth the cost of investment. What is cyber resilience? Cyber resilience is the ability to prepare for, respond to and recover from cyber attacks. It helps organisations protect themselves from cyber risks, defend against and limit the severity of attacks, and ensure that business operations continue to function. Getting the most out of cyber resilience Most organisations have some set of processes that resembles cyber resilience, even if they don’t call it that. A cyber security strategy alo...

Intel has unveiled its latest range of processors at Computex 2017, the Core X range. The company said the new CPUs are its most scalable, accessible, and powerful desktop platform ever. “We’re also introducing the entirely new Intel Core i9 processor, representing the highest performance for advanced gaming, VR, and content creation,” said Intel. “At the top of the line-up is the new Intel Core i9 Extreme Edition processor – the first consumer desktop CPU with 18 cores and 36 threads.” Intel said the Core i9 Extreme is the most extreme desktop processor ever introduced. “Along with this family of processors, we’re introducing the new Intel x299 chipset, which adds even more I/O and overclocking capabilities. And, we are announcing updates to Intel Turbo Boost Max Technology 3.0.” Intel said it still plans to launch its Core 8th-gen series of processors in the future, and its latest testing shows up to 30% in performance improvements over the Core 7th-gen seri...

Throughout history, industrial revolutions hinge on the power of automating processes. While automation today offers many benefits, imagine if you could automate thousands — or even millions — of processes simultaneously across any layer of the enterprise IT network. This is the next potential wave of innovation, and it’s the organizations that are “geographically dispersed” or “automation heavy” that will benefit the most from fully connecting all end points — even those in the access layer. While long-range communications and connectivity have become increasingly easier to attain, businesses need to break down their isolated islands of automation to achieve comprehensive automation at scale. For example, there always has been a clear line dividing  o perations technology and information technology networks. The emergence of the internet of things blurs that line as industrial operations head in the direction of complete connectivity for all devices on a n...

Short Bytes: Defying all the trolls, Internet Explorer has retained its top spot as the most used browser in the world in the desktop market share. Leading the bunch with 50.86%, the Internet Explorer is far ahead from its competition, Chrome and Firefox. But for how long? In the wake of some of the archaic technologies, as some of the newbies were getting ready to pay obituaries to Microsoft’s Internet Explorer, the vintage browser had showed it still got a healthy heart. In spite of the increasing popularity of Firefox and Chrome browsers, the latest reports by Net Applications paint a different picture. The IE which recently celebrated its 20th birthday is still the number one and the most widely used web browser by the users. The real time web analytics show that the Internet Explorer has about 50.86% of the desktop browser market share with Chrome and Firefox not anywhere close with 31.12% and 11.28% popularity respectively. Internet Explorer 11 is at the top of the b...

There are some simple keyboard shortcuts which one can use while using Internet and it would help the user to avoid typing a lot and also at certain places the mouse can be completely avoided by these tricks. Entering a new website:  Normally users would have to type http: // or www before they want to enter a new website however now just type the name of the website and press <Ctrl><Enter> . By default this will add “ http://www .” in front and “.com” towards the end of the website. Users can also just type out the name of the website for eg: “ xyz.com ” and press <Enter> this will automatically give “ http://xyz.com ”. Now if the website has “.org” then user would need to use <Ctrl ><Shift><Enter> keys and for websites with “.net” they need to use <Shift><Enter> keys to get the full website name. Online applications clues: Toggling between Multiple columns: Suppose user is filling the online forms then usi...