New Member in my family - Acer Aspiron 9300-5317

Personal, Tech Stuff December 27th, 2006

Acer Aspire

Just got this baby today and feel like this is what I was looking for. You can see the config below.

I love everything about this machine except for that it has only 1 GB RAM (I need more as I am Photoshop freak) also I didnt like the Nvdia GeForce Go 6100. You can read the review on CompUSA site about this machine. Read the rest of this entry »

the totally ridiculous FIVE DOLLAR web hosting deal

Tech Stuff October 27th, 2006

the totally ridiculous FIVE DOLLAR web hosting deal

This is completely insane deal…I have seen many deals on internet relating to web hosting but this one is ultimate so far…Site5.com is offering this insane deal with lots of features just for $5 a month…pinch yourself and click the mouse to findout about this deal. Why are you wasting your time reading this…go and get yourself a new kick start in just $5 pm.
Click here or visit site5.com to know the details !

Religious websites getting Hacked — some solution

Tech Stuff August 21st, 2006

Recently there has been major hack terror attact by some Muslim militant outfits attacking a lot of Religious as well as social websites in United States. Our New Vrindaban community website got hacked hence my service provider provided me with some of the vital steps to prevent that. This mornign I saw that iskconnews.net - an unofficial ISKCON news provider, also got hacked and thus I called Mr. Madhva Ghosh to let him know whats happening and he suggested to me that I should blog this solution on my site. I hope it may help you all too.

Most account compromises are initiated by using a remote command inclusion vulnerability within an existing web application. This issue was likely the result of poor or lack of security on the part of one or more user accounts, including shared or weak passwords, insecure permissions on important configuration files ( allowing full read access globally ), and other factors. Please be sure that the following steps are taken to assist in preventing further intrusions:

-Perform a complete audit of your account and applications. Ensure that all content available was made available only by yourself and that any information, including applications login credentials that don’t match up are removed.

- Any PHP scripts should be chmod 600 at the very least. Any PHP scripts that contain important information, such as MySQL database connection information should be chmod 400. By default these files are likely permissioned to 644 which will allow global read access to the file by any user on the system.

- Any applications that are connecting to MySQL database should be doing so with their own individual MySQL database login credentials. Never should a set of credentials be recycled or used elsewhere. You should also avoid using your system username and password as an authorization point for these applications.

- Passwords should be 16+ characters in length and contain a mixed case of letters and numbers and should be modified on a regular basis ( twice monthly at the very least ). A password should never be used for more than one service or provider, ever!

- Any 3rd party or custom PHP, Perl and other web applications should be kept up to date at all times. Subscribe to the software vendors security or update notifications mailing list. If an application is no longer required or in use, remove it completely. Disabling the application is not always a sure fire means of disallowing intrusion attempts.

If you have trouble keeping track of your passwords, you may want to look into using a solution such as the following, which I personally find to be quite useful in both generating passwords and securely saving these details: http://keepass.sourceforge.net/

Wordpress owners: Please update your word press to the latest security fix version. The latest stable release of WordPress (Version 2.0.4) is available here for download.