Ezad Blog

How to remove Superfish and its certificate from your Lenovo® PC

<div class="wrapper section">
<div class=" background-none none full-top-wrapper">
<div class=" full-width-content-wrapper">
<div class="full-width-inner">
<div class="avgparsys wrapperParsys">
<h2 style="text-align: center;">
What is Superfish?</h2>
Superfish is a piece of software that <a href="http://news.lenovo.com/article_display.cfm?article_id=1929">Lenovo has admitted to pre-installing</a> on many of its laptops to "enhance the shopping experience" of its users. However, the <a href="https://www.us-cert.gov/ncas/alerts/TA15-051A">U.S. Computer Emergency Readiness Team</a> calls Superfish a "man-in-the-middle attack" because of how it "intercepts users' web traffic to provide targeted advertisements."</div>
<div class="clear">
</div>
</div>
<div class="clear">
</div>
</div>
</div>
</div>
<div class="separator2 section">
<div class="separator-wrapper basic-width bg-top-none separator-grey-line bg-bottom-none">
<div class="separator-bottom">
</div>
</div>
</div>
<br />
<div class="wrapper section">
<div class=" background-none none full-top-wrapper">
<div class=" full-width-content-wrapper">
<div class="clear">
</div>
<div class="full-width-inner">
<div class="clear">
</div>
<div class="avgparsys wrapperParsys">
<div class="textComponent section">
<div style="margin-bottom: 50px; margin-top: 40px;">
<h2 style="text-align: center;">
Why is Superfish so dangerous?</h2>
<div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihzWCLWEpkS41r8UW_a6xUlQPPJuQOctu59_FzCIvInKGPg_gjRYxcatsy-rw3TCs9zPFI6WM3T-VgDtazqaxtBW060oNY95aF77jSSV8AwiOMKBf6cDFg7OckwbtTSPlFfFRL_0mdcV0/s1600/superfish-220x169.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihzWCLWEpkS41r8UW_a6xUlQPPJuQOctu59_FzCIvInKGPg_gjRYxcatsy-rw3TCs9zPFI6WM3T-VgDtazqaxtBW060oNY95aF77jSSV8AwiOMKBf6cDFg7OckwbtTSPlFfFRL_0mdcV0/s1600/superfish-220x169.png" /></a></div>
<br /></div>
</div>
</div>
Superfish snoops in on your web browsing and secretly slips ads into webpages. But the really dangerous part is that it's pre-installed with root certificate authority, which allows it to impersonate any server's security certificate.<br /><br />If this certificate is compromised by hackers, you could be tricked into logging in to a fake website and giving hackers your password. Because of Superfish, any of your accounts including encrypted bank accounts could be easily compromised.<br />
<div class="textComponent section">
<div style="margin-top: 20px;">
<h2 style="text-align: center;">
Which computers are affected?</h2>
<div style="text-align: center;">
<span class="h2-subheading">According to Lenovo, Superfish may have been pre-installed<br /> on the following models:</span><br />
<span class="h2-subheading"><br /></span>
<span class="h2-subheading"><br /></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9jDQzAb4OZQnTEsT5QscRnDVSTxHOqr3-Aggxsy6H5-kxajHdo1hP5jCvSr9u6Q2oO-fPmoybXAP8p_hNMTiOaf2DjlTPHcWHk5bpmzaVI2E8R8txH4Eq_mQm4sQMIR501vMIh77jR-M/s1600/lenovo-laptop-317x211.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9jDQzAb4OZQnTEsT5QscRnDVSTxHOqr3-Aggxsy6H5-kxajHdo1hP5jCvSr9u6Q2oO-fPmoybXAP8p_hNMTiOaf2DjlTPHcWHk5bpmzaVI2E8R8txH4Eq_mQm4sQMIR501vMIh77jR-M/s1600/lenovo-laptop-317x211.png" width="320" /></a></div>
<div style="text-align: left;">
<br />
<table border="0" style="width: 100%px;">
  <tbody>
<tr>
    <td><strong>E Series: </strong></td>
    <td>E10-30</td>
  </tr>
<tr>
    <td><strong>G Series:</strong></td>
    <td>G410, G510, G710, G40-70, G50-70, G40-30, G50-30, G40-45, G50-45, G40-80</td>
  </tr>
<tr>
    <td><strong>S Series:</strong></td>
    <td>S310, S410, S40-70, S415, S415Touch, S435, S20-30, S20-30Touch</td>
  </tr>
<tr>
    <td><strong>U Series:</strong></td>
    <td>U330P, U430P, U330Touch, U430Touch, U530Touch</td>
  </tr>
<tr>
    <td><strong>Y Series:</strong></td>
    <td>Y430P, Y40-70, Y50-70, Y40-80, Y70-70</td>
  </tr>
<tr>
    <td><strong>Z Series:</strong></td>
    <td>Z40-75, Z50-75, Z40-70, Z50-70, Z70-80</td>
  </tr>
<tr>
    <td><strong>Edge Series:</strong></td>
    <td>Edge 15</td>
  </tr>
<tr>
    <td><strong>Flex Series:</strong></td>
    <td>Flex2 14D, Flex2 15D, Flex2 14, Flex2 15, Flex2 Pro, Flex 10</td>
  </tr>
<tr>
    <td><strong>MIIX Series:</strong></td>
    <td>MIIX2-8, MIIX2-10, MIIX2-11, MIIX 3 1030</td>
  </tr>
<tr>
    <td><strong>YOGA Series:</strong></td>
    <td>YOGA2Pro-13, YOGA2-13, YOGA2-11, YOGA3 Pro</td>
  </tr>
<tr>
    <td align="right" colspan="2"><a href="http://news.lenovo.com/article_display.cfm?article_id=1929" target="_blank">Source: Lenovo</a></td>
  </tr>
</tbody></table>
</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDZOSEWt_dq_Aw8Xs1iKA5J4cCoO_6r3Pw990_xB33ypZMu5BB8lnles8GTG5O0JwihqZ4y5xB-TgyjeJYAcm8MCJIZC1MR54RgmUPOrVHQmCnCO-1aTsZCnftiTPapA4AcjR2WPLA6jE/s1600/feature-icon-with-arrows-in-circle-representing-restore-101x101.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDZOSEWt_dq_Aw8Xs1iKA5J4cCoO_6r3Pw990_xB33ypZMu5BB8lnles8GTG5O0JwihqZ4y5xB-TgyjeJYAcm8MCJIZC1MR54RgmUPOrVHQmCnCO-1aTsZCnftiTPapA4AcjR2WPLA6jE/s1600/feature-icon-with-arrows-in-circle-representing-restore-101x101.png" /></a></div>
<h2 style="text-align: center;">
Will restoring from a backup help?</h2>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Superfish has been pre-installed by Lenovo. Therefore, restoring your computer to factory condition from either a backup partition or a backup DVD will not solve the problem if Superfish is also part of your backup. Superfish would only be reinstalled, too.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
So if you ever use a backup to restore your system, you may need to again remove Superfish and its root security certificate from your system.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdjbK33_0Vm4z2o9n4kLuh9wtIeFXban2bXDBPzYl2DGERAzJXGIlqRsjaOYx0etjfDIBjdnpkpljJ_CoT2328B2lLDKEF5rVrOy4PV9Nk7t2GCWxiNf6ZKsEuas69dJ8f2Xgw6sESCLQ/s1600/feature-icon-with-trash-bin-representing-delete-76x108.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdjbK33_0Vm4z2o9n4kLuh9wtIeFXban2bXDBPzYl2DGERAzJXGIlqRsjaOYx0etjfDIBjdnpkpljJ_CoT2328B2lLDKEF5rVrOy4PV9Nk7t2GCWxiNf6ZKsEuas69dJ8f2Xgw6sESCLQ/s1600/feature-icon-with-trash-bin-representing-delete-76x108.png" /></a></div>
<div style="text-align: center;">
<br /></div>
<h2 style="text-align: center;">
Remove Superfish now </h2>
<div>
<br /></div>
<div>
To remove the Superfish program and its certificate from your computer,</div>
<div>
please use this free tool from Lenovo:</div>
<div>
<br /></div>
<a href="http://download.lenovo.com/pccbbs/thinkvantage_en/metroapps/SuperFishRemovalTool/1.0.2.0/Lenovo.SuperFishRemovalTool.exe" target="_blank"><span style="background-color: #666666; color: #eeeeee;">DOWNLOAD Superfish Removal Tool </span></a> <br />
<br />
This tool will also remove any Superfish certificates<br />
from Mozilla Firefox® and Thunderbird®.</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>

How to remove Superfish and its certificate from your Lenovo® PC

What is Superfish? Superfish is a piece of software that Lenovo has admitted to pre-installing on many of its laptops to "enhance the shopping experience" of its users. However, the U.S. Computer Eme…

28 Mar 2015

Windows or Linux hosting – which is best for you?

Windows or Linux hosting – which is best for you?

Linux (and its close relation Unix) and Windows 2003 (and its close cousin Windows NT) are types of software (known as operating systems) that web servers use to do the kind of things that web s…

07 Sep 2014

POP, IMAP, and SMTP server settings for Gmail

<em>Make sure to enable POP/IMAP access in your Gmail settings first.</em><br>

<h1>
POP</h1>
<b>Standard configuration instructions:<span id="more-311882093"></span></b><br>

<table border="1" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td><b>Incoming Mail (POP3) Server – requires SSL:</b></td>
<td>pop.gmail.com<br>
<b>Use SSL</b>: Yes<br>
<b>Port</b>: 995</td>
</tr>
<tr>
<td><b>Outgoing Mail (SMTP) Server – requires TLS or SSL:</b></td>
<td>smtp.gmail.com<br>
<b>Use Authentication</b>: Yes<br>
<b>Port for TLS/STARTTLS</b>: 587<br>
<b>Port for SSL</b>: 465</td>
</tr>
<tr>
<td><b>Server timeouts</b></td>
<td>Greater than 1 minute, we recommend 5</td>
</tr>
<tr>
<td><b>Full Name or Display Name:</b></td>
<td>[your name]</td>
</tr>
<tr>
<td><b>Account Name or User Name:</b></td>
<td>your full email address (including @gmail.com or @your_domain.com)</td>
</tr>
<tr>
<td><b>Email Address:</b></td>
<td>your email address (username@gmail.com or username@your_domain.com)</td>
</tr>
<tr>
<td><b>Password:</b></td>
<td>your Gmail password</td>
</tr>
</tbody>
</table>
<br>

POP, IMAP, and SMTP server settings for Gmail

Make sure to enable POP/IMAP access in your Gmail settings first. POP Standard configuration instructions: Incoming Mail (POP3) Server – requires SSL: pop.gmail.com Use SSL: Yes Port: 995 Outgoing Mai…

09 Jun 2014

Hotmail: IMAP, POP3, and SMTP settings

Hotmail: IMAP, POP3, and SMTP settings

Hotmail supports access via IMAP, POP3 and SMTP protocols. Below you can find the configuration settings for those protocols. All Hotmail servers (POP3 and SMTP) use implicit SSL (use ConnectSSL metho…

09 Jun 2014

Controlling DNS prefetching

Controlling DNS prefetching

As of version 3.5, Firefox supports DNS prefetching. This is a feature by which Firefox proactively performs domain name resolution on both links that the user may choose to follow as well as URLs fo…

08 Jun 2014

Buat bakal isteriku

Suami saya adalah serorang jurutera, saya mencintai sifatnya yang semulajadi dan saya menyukai perasaan hangat yang muncul di hati saya ketika bersandar di bahunya.Selama 3 tahun dalam masa perkenalan dan 2 tahun dalam masa pernikahan, saya harus akui bahawa saya mulai merasa letih, lelah, alasan-alasan saya mencintainya dulu telah berubah menjadi sesuatu yang menjemukan. Saya seorang wanita yang sentimental dan benar-benar sensitif serta berperasaan halus. Saya merindui saat-saat romantis seperti seorang anak kecil yang sentiasa mengharapkan belaian ayah dan ibunya. Tetapi, semua itu tidak pernah saya perolehi. Suami saya jauh berbeza dari yang saya harapkan. Rasa sensitifnya kurang. Dan ketidakmampuannya dalam menciptakan suasana yang romantis dalam perkahwinan kami telah mematahkan semua harapan saya terhadap cinta yang ideal.<br>
<br>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdkzxje23nzd_59pF49HvlYVSN2KqRp0kcPL3Uu2qgv6Cndww5yNNBb0zGhuqwQgcyrY5JhVaD5Nglj-j8MuSNXJN9RjeHRkYvu8MQlMBp8_mb95yaXuas3dPS7oKnbt6ll7WkGPyyjuw/s1600/pic1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdkzxje23nzd_59pF49HvlYVSN2KqRp0kcPL3Uu2qgv6Cndww5yNNBb0zGhuqwQgcyrY5JhVaD5Nglj-j8MuSNXJN9RjeHRkYvu8MQlMBp8_mb95yaXuas3dPS7oKnbt6ll7WkGPyyjuw/s1600/pic1.jpg" width="320"></a></div>
Suatu hari, saya beranikan diri untuk mengatakan keputusan saya kepadanya,bahawa saya inginkan penceraian. "Mengapa?"Dia bertanya dengan nada terkejut."Siti letih, Abang tidak pernah cuba memberikan cinta yang saya inginkan."Dia diam dan termenung sepanjang malam di depan komputernya, nampak seolah-olah sedang mengerjakan sesuatu, padahal tidak.<br>
<br>

Buat bakal isteriku

10 May 2014

Heartbleed bug: What you need to know

<div class="separator" style="clear: both; text-align: center;">
<a href="http://upload.wikimedia.org/wikipedia/commons/thumb/d/dc/Heartbleed.svg/411px-Heartbleed.svg.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><span style="font-family: Arial, Helvetica, sans-serif;"><img border="0" height="320" src="http://upload.wikimedia.org/wikipedia/commons/thumb/d/dc/Heartbleed.svg/411px-Heartbleed.svg.png" width="255" /></span></a></div>
<span style="font-family: Arial, Helvetica, sans-serif;">The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure it.</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">You are likely affected if you configured and run an SSL-enabled website, meaning that you can access it using the https:// prefix instead of http://. You will need to patch the libraries in your system and replace the certificates and keys that may have been compromised. Please notice that remote access using ssh is NOT affected.</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">OpenSSL versions from 1.0.1 through 1.0.1f (inclusive) are vulnerable and make it possible to steal information, including everything from the encrypted content and to the secret key used for the encryption. The attack is also indetectable.</span><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<span style="font-family: Arial, Helvetica, sans-serif;">This security issue has been described in detail on the following page:</span><br />
<a href="http://heartbleed.com/" target="_blank"><span style="font-family: Arial, Helvetica, sans-serif;">http://heartbleed.com/</span></a><br />
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<br />
<h2>
<span style="font-family: Arial, Helvetica, sans-serif; font-size: large;">How about operating systems?</span></h2>
<div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Some operating system distributions that have shipped with potentially vulnerable OpenSSL version:</span></div>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">Ubuntu 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">CentOS 6.5, OpenSSL 1.0.1e-15</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">Fedora 18, OpenSSL 1.0.1e-4</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012)</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">FreeBSD 10.0 - OpenSSL 1.0.1e 11 Feb 2013</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">NetBSD 5.0.2 (OpenSSL 1.0.1e)</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">OpenSUSE 12.2 (OpenSSL 1.0.1c)</span></li>
</ul>
<span style="font-family: Arial, Helvetica, sans-serif;">Operating system distribution with versions that are not vulnerable:</span><br />
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">Debian Squeeze (oldstable), OpenSSL 0.9.8o-4squeeze14</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">SUSE Linux Enterprise Server</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">FreeBSD 8.4 - OpenSSL 0.9.8y 5 Feb 2013</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">FreeBSD 9.2 - OpenSSL 0.9.8y 5 Feb 2013</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">FreeBSD 10.0p1 - OpenSSL 1.0.1g (At 8 Apr 18:27:46 2014 UTC)</span></li>
</ul>
<ul style="background-color: white; box-sizing: border-box; color: #222222; line-height: 28.571430206298828px; margin-bottom: 10px; margin-top: 0px;">
<li style="box-sizing: border-box;"><span style="font-family: Arial, Helvetica, sans-serif;">FreeBSD Ports - OpenSSL 1.0.1g (At 7 Apr 21:46:40 2014 UTC)</span></li>
</ul>
</div>
<h2>
<span style="font-family: Arial, Helvetica, sans-serif; font-size: large;">
Detect if your machine is vulnerable.</span></h2>
<div>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<div class="separator" style="clear: both; text-align: center;">
<a href="http://upload.wikimedia.org/wikipedia/commons/thumb/c/cb/Heartbleed_bug_explained.svg/554px-Heartbleed_bug_explained.svg.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="180" src="http://upload.wikimedia.org/wikipedia/commons/thumb/c/cb/Heartbleed_bug_explained.svg/554px-Heartbleed_bug_explained.svg.png" width="320" /></a></div>
<span style="font-family: Arial, Helvetica, sans-serif;">If you are running a web server with SSL enabled, you can test whether it is vulnerable with this tool:</span></div>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<a href="https://filippo.io/Heartbleed/#ezadblog.my" rel="nofollow" target="_blank"><span style="font-family: Arial, Helvetica, sans-serif;">http://filippo.io/Heartbleed/</span></a></div>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Alternatively, to detect if your machine is vulnerable to this bug, please log into your servers and check the OpenSSL version by executing the  below command:</span></div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">openssl version -a</span></pre>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">If the version in the output is greater or <span style="color: red;"><strong>equal to "1.0.1" and lower or equal to "1.0.1f "</strong></span>, you may be affected. An example of an affected version would be:</span></div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">$> openssl version -a
OpenSSL <span style="color: red;"><strong>1.0.1</strong></span> 14 Mar 2012
built on: Wed Jan  8 20:45:51 UTC 2014
platform: debian-amd64
</span></pre>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Please note the version mentioned: "1.0.1", which is in the range of affected versions. Another detail to check is the "built on" information:</span></div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">$> openssl version -a
...
built on: <span style="color: red;"><strong>Wed Jan  8 20:45:51 UTC 2014</strong></span>
...</span></pre>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div style="background-color: white; line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Some Linux distributions have provided security patches that fix the vulnerability without upgrading OpenSSL. The "built on:" date should be <span style="color: green;"><strong>newer or equal to April 2014</strong> </span>to consider it updated. An example of patched OpenSSL version would be:</span></div>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">/usr/bin/openssl version -a
OpenSSL <strong>1.0.1</strong> 14 Mar 2012
built on: <span style="color: green;"><strong>Mon Apr  7 20:33:29 UTC 2014</strong></span>
platform: debian-amd64
</span></pre>
</div>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Where the OpenSSL is in the vulnerable range but it was patched on April 2014:</span></div>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Another non-vulnerable version (this one, easier to identify) will look like:</span></div>
<div style="background-color: white; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">openssl version -a
OpenSSL <strong><span style="color: green;">1.0.1g</span></strong> 7 Apr 2014
built on: Tue Apr  8 09:07:07 CEST 2014
platform: linux-x86_64
</span></pre>
</div>
<div style="background-color: white; margin: 0px; padding: 0px;">
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="margin: 0px; padding: 0px;">
<div style="line-height: 19.200000762939453px;">
<span style="font-family: Arial, Helvetica, sans-serif;">Where the version is greater than "1.0.1f", so it is safe. It also shows it was updated in April 2014. This is the output you will get if you use our patch installer to update your SSL version</span></div>
<div style="line-height: 19.200000762939453px;">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<h2>
<span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"><span style="line-height: 19.200000762939453px;">Update the system OpenSSL version</span></span></h2>
<div>
<div style="margin: 0px; padding: 0px;">
<div id="section_7" style="margin: 0px; padding: 0px;">
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">The procedure to update the system OpenSSL package will depend on you Linux distribution:</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<strong><span style="font-family: Arial, Helvetica, sans-serif;"> apt-based systems: Ubuntu, Debian...</span></strong></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">sudo apt-get update
sudo apt-get install -y libssl1.0.0 openssl</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">And then check that the version was updated (or patched, with a recent "built on" date):</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">/usr/bin/openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: <span style="color: green;"><strong>Mon Apr  7 20:33:29 UTC 2014</strong></span>
...</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">You will also need to restart any service using libssl. To check the list of those services, you could use the below command:</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">sudo lsof -n | grep ssl | grep DEL
vsftpd     479   root  DEL  REG     202,1         394910 /lib/x86_64-linux-gnu/libssl.so.1.0.0
monit     1254   root  DEL  REG     202,1         394910 /lib/x86_64-linux-gnu/libssl.so.1.0.0</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">And then restart the services (depending on your specific system):</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">sudo /etc/init.d/monit restart
sudo /etc/init.d/vsftpd restart</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<div style="margin-top: 0.75em; padding: 0px;">
</div>
<div style="margin: 0px; padding: 0px;">
</div>
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<strong><span style="font-family: Arial, Helvetica, sans-serif;">yum-base systems: RedHat, CentOS, Fedora...</span></strong></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">sudo yum -y update openssl</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">And then check that the version was updated (or patched, with a recent "built on" date):</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">/usr/bin/openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: <span style="color: green;"><strong>Mon Apr  7 20:33:29 UTC 2014</strong></span>
...</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">You will also need to restart any service using libssl. To check the list of those services, you could use the below command:</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">sudo lsof -n | grep ssl | grep DEL
vsftpd     479   root  DEL  REG     202,1         394910 /lib/x86_64-linux-gnu/libssl.so.1.0.0
monit     1254   root  DEL  REG     202,1         394910 /lib/x86_64-linux-gnu/libssl.so.1.0.0</span></pre>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif;">And then restart the services (depending on your specific system):</span></div>
<div style="line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
<pre style="background-color: #fefefe; border-left-color: rgb(170, 170, 170); border-left-style: solid; border-left-width: 4px; color: #777777; line-height: 19.200000762939453px; margin-left: 1em; margin-top: 0.75em; overflow: auto; padding: 0px 0px 0px 1em;"><span style="font-family: Arial, Helvetica, sans-serif;">sudo /etc/init.d/monit restart
sudo /etc/init.d/vsftpd restart
</span></pre>
<div style="line-height: 19.200000762939453px;">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<h2>
<span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"><span style="line-height: 19.200000762939453px;">Next Steps</span></span></h2>
<div>
<div style="line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<strong><span style="font-family: Arial, Helvetica, sans-serif;">First, after apllying the patches above, double-check whether your web site is ok now using this tool:</span></strong></div>
<div style="line-height: 19.200000762939453px; margin-top: 0.75em; padding: 0px;">
<a href="https://filippo.io/Heartbleed/#ezadblog.my" rel="nofollow" target="_blank"><span style="font-family: Arial, Helvetica, sans-serif;">http://filippo.io/Heartbleed</span></a></div>
<div style="margin-top: 0.75em; padding: 0px;">
<span style="line-height: 19.200000762939453px;"><span style="font-family: Arial, Helvetica, sans-serif;">The vulnerability allows an attacker to steal you private keys, which would allow it to decrypt any information, as well as impersonating your server so it is advised to revoke the compromised keys and reissuing and redistributing new ones.</span></span></div>
<div style="margin-top: 0.75em; padding: 0px;">
<br /></div>
<div style="margin-top: 0.75em; padding: 0px;">
<span style="line-height: 19.200000762939453px;"><span style="font-family: Arial, Helvetica, sans-serif;">This is only necessary if you already configured HTTPS with your own certificate. In this case regenerate new certificates and configure them again in your server.</span></span></div>
</div>
</div>
</div>
<div style="font-family: 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 12px; line-height: 19.200000762939453px; margin: 0px; padding: 0px;">
</div>
</div>
</div>
</div>
</div>

Heartbleed bug: What you need to know

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS e…

14 Apr 2014

3 way to crack facebook password

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUTR5xjY2svMYt725mGzTS7eNXmoW6smuyxnCYK8P6OzZbWe5ceBR2cjgAFvnTNdwoRU1v1wcaGX-dCtsKQJ8-5YJ0A80S_bQWN6JcotagDwKJUVR0wqT39e_LxDlWFfKRs0Ge8Z7RGNc/s1600/facebook1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUTR5xjY2svMYt725mGzTS7eNXmoW6smuyxnCYK8P6OzZbWe5ceBR2cjgAFvnTNdwoRU1v1wcaGX-dCtsKQJ8-5YJ0A80S_bQWN6JcotagDwKJUVR0wqT39e_LxDlWFfKRs0Ge8Z7RGNc/s1600/facebook1.jpg" width="320"></a></div>
<br>
<br>
<h2>
Method 1: Reset the Password</h2>
The easiest way to “hack” into someone’s Facebook is through 
resetting the password. This could be easier done by people who are 
friends with the person they’re trying to hack.<br>
<ul>
<li>The first step would be to get your friend’s Facebook email login. 
If you don’t already know it, try looking on their Facebook page in the 
Contact Info section.</li>
<li>Next, click on <strong>Forgotten your password?</strong> and type in the victim’s email. Their account should come up. Click <strong>This is my account</strong>.</li>
<li>It will ask if you would like to reset the password via the victim’s emails. This doesn’t help, so press <strong>No longer have access to these?</strong></li>
<li>It will now ask <strong>How can we reach you?</strong> Type in an email that you have that also isn’t linked to any other Facebook account.</li>
<li>It will now ask you a question. If you’re close friends with the 
victim, that’s great. If you don’t know too much about them, make an 
educated guess. If you figure it out, you can change the password. Now 
you have to wait 24 hours to login to their account.</li>
<li>If you don’t figure out the question, you can click on <strong>Recover your account with help from friends</strong>. This allows you to choose between three and five friends.</li></ul>

3 way to crack facebook password

Method 1: Reset the Password The easiest way to “hack” into someone’s Facebook is through resetting the password. This could be easier done by people who are friends with the person they’re trying …

17 Feb 2014

ADOLF HITLER : Sudut Kisah Yang Disembunyikan.

Dalam pencarian di internet aku terjumpa ayat ini <br>
<blockquote class="tr_bq">
Teringat kata-kata Hitler;<br>
<i><b>” Aku boleh bunuh semua Yahudi kalau aku mahu, tetapi aku tinggalkan sedikit supaya kamu kenal siapa mereka! “</b></i></blockquote>
<br>
Aku tertanya-tanya kenapa dia boleh berkata seperti ini.
____________________________________________________________________________<br>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://upload.wikimedia.org/wikipedia/commons/6/66/Adolf_Hitler-1933.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="http://upload.wikimedia.org/wikipedia/commons/6/66/Adolf_Hitler-1933.jpg" width="221"></a></div>
Penghormatanku kepada lelaki agung, <b>Adolf Hitler</b>, semoga ada sepertinya di zaman ini…<br>
<br>
Aku berbual dengan seorang kawan yang sedang menamatkan tesis
 PhD beliau dan aku amat terperanjat apabila beliau nyatakan tesis 
beliau berkaitan Adolf Hitler, pemimpin <b>Nazi</b>. Maka aku katakan “<i>Takkan dah habis semua tokoh Islam di dunia ini sampai kamu memilih si bodoh ini dijadikan tajuk</i>?”<br>
Beliau ketawa lalu bertanya apa yang aku ketahui tentang Hitler.<br>
Aku lalu menjawab bahawa Hitler seorang pembunuh yang membunuh secara
 berleluasa dan meletakkan German mengatasi segala-galanya…lalu dia 
bertanya dari mana sumber aku. Aku menjawab <b>sumberku dari TV</b> pastinya.<br>
Lalu dia berkata : ” <i>Baiklah, pihak <b>British</b> telah melakukan lebih dahsyat dari itu…pihak <b>Jepun</b>
 semasa zaman Emperor mereka juga sama…tapi kenapa dunia hanya menghukum
 Hitler dan meletakkan kesalahan malahan memburukkan nama Nazi 
seolah-olah Nazi masih wujud hari ini sedangkan mereka melupakan 
kesalahan pihak British kepada Scotland, pihak Jepun kepada dunia dan 
pihak <b>Afrika Selatan</b> kepada kaum kulit hitam mereka?</i>“<br>

ADOLF HITLER : Sudut Kisah Yang Disembunyikan.

Dalam pencarian di internet aku terjumpa ayat ini Teringat kata-kata Hitler; ” Aku boleh bunuh semua Yahudi kalau aku mahu, tetapi aku tinggalkan sedikit supaya kamu kenal siapa mereka! “ Aku tertany…

14 Dec 2013

Load more posts

Recent Comments