Windows Network Socket

In computing, the Windows Sockets API (WSA), which was later shortened to Winsock, is a technical specification that defines how Windows network software should access network services, especially TCP/IP. It defines a standard interface between a Windows TCP/IP client application (such as an FTP client or a web browser) and the underlying TCP/IP protocol stack. The nomenclature is based on the Berkeley sockets API model used in BSD for communications between programs. Initially, all the participating developers resisted the shortening of the name to Winsock for a long time, since there was much confusion among users between the API and the DLL library file (winsock.dll) which only exposed the common WSA interfaces to applications above it. Users would commonly believe that only making sure the DLL file was present on a system would provide full TCP/IP protocol support.

Read More

Risks Of Keylogers

By George Waller

Keyloggers are on the rise and they are no match for even the most security-conscious organizations. Just look at some of the names done in by a tiny chunk of code in the last 12 months: RSA, Lockheed Martin, Epsilon, Oakridge Nuclear Weapons Lab, Sony, Iranian Nuclear Program and Linked-In to name just a few. Keyloggers have been around for a long time, but today they may be the most dangerous threat an enterprise faces.

What is a Keylogger?

A keylogger is a piece of malicious software, usually called "spyware" or "malware," that records every keystroke you make on a keyboard. Keyloggers can be installed without your knowledge or consent when you visit a Web site or read an e-mail, install a program, or perform other activities. Once installed, the keylogger records all your keystrokes, and then e-mails the information and other data to the computer hacker.

How Keyloggers are Constructed The main idea behind keyloggers is to get in between any two links in the chain of events between when a key is pressed and when information about that keystroke is displayed on the monitor. This can be achieved using video surveillance: a hardware bug in the keyboard, wiring or the computer itself; intercepting input/output; substituting the keyboard driver; using a filter driver in the keyboard stack; intercepting kernel functions by any means possible (substituting addresses in system tables, splicing function code, etc.); intercepting DLL functions in user mode, and requesting information from the keyboard using standard documented methods.

Keyloggers can be divided into two categories: keylogging devices and keylogging software. Keyloggers that fall into the first category are usually small devices that can be fixed to the keyboard or placed within a cable or the computer itself. The keylogging software category is made up of dedicated programs designed to track and log keystrokes.

The most common methods used to construct keylogging software are:

·         A system hook that intercepts notification that a key has been pressed (installed using WinAPI SetWindowsHook for messages sent by the window procedure). This hook is most often written in C.

·         A cyclical information keyboard request from the keyboard (using WinAPI Get(Async)KeyState or GetKeyboardState. This software is most often written in Visual Basic, sometimes in Borland Delphi.

·         Using a filter driver. This requires specialized knowledge and is typically written in C.

Recently, keyloggers that disguise their files to keep them from being found manually or by an antivirus program have become more numerous. These stealth techniques are called rootkit technologies. There are two main rootkit technologies used by keyloggers: masking in user mode and masking in kernel mode.

 How Keyloggers Spread

Keyloggers spread in much the same way that other malicious programs do. Keyloggers are often hidden inside what appears to be legitimate applications, graphics, music files, or downloaded pictures. Identity thieves and hackers get you to unwittingly download their malicious software through an e-mail or instant message that "makes sense." The world–renowned Australian Computer Emergency Response Team (ausCert), has published a report showing that 80 percent of all keyloggers are not detectable by anti-virus software, anti-spyware software, or firewalls.

Identity thieves have also been known to portray themselves as kids on popular teen sites and share infected files. Listed below are just some of the creative ways in which Identity thieves have been known to distribute their keyloggers:

• MP3 music files
• E-mail attachments
• Clicking on deceptive pop–ups
• P2P networks
• AVI files (i.e., "YouTube" or other videos)
• A legitimate Web site link, picture, or story that was malfaced
• Downloaded games or any other PC tools or programs
• Faked malicious Web sites that impersonate popular sites (sites such as Google, eBay, Amazon, Yahoo, banks) or anti-virus programs

Why Your Anti-Virus Program Doesn't Stop Keyloggers

Anti-virus programs are reactive programs. They can only stop and detect against "known" and already "catalogued" viruses; they cannot protect you against a brand new virus that has just been written. Most anti-virus software requires a frequently updated database of threats. As new virus programs are released, anti-virus developers discover and evaluate them, making "signatures" or "definitions" that allow their software to detect and remove the virus.

This update process can take anywhere from several months up to a full year for your anti-virus manufacturer to build a "fix" for a single virus. It is estimated that there are currently millions of new viruses introduced on the Internet every month. It is an impossible task to immediately identify a new virus and protect against it. Many recent lab tests have shown that anti-virus is only about 25 percent effective in stopping keyloggers.

How to Keep Confidential Information Safe from Keyloggers

There are few ways that enterprises can protect themselves. One way is to prevent employees from installing downloaded software. Obviously, this isn't always practical. Regardless, some level of employee training is always helpful. Teaching employees about malware and keyloggers may prevent some level of identity theft, espionage, or data breach, but it's hardly foolproof. There's a clicker in every crowd.

Filtering and detection is pointless because hackers will always find ways to avoid detection, so the focus should be on how to keep your data from getting to the cybercriminals. You can set egress filters to prevent the data from being "sent back" to hackers, but these techniques have also been easily avoided by the bad guys.

Encryption has always been considered as the most secure way to protect data, which is true here. The most successful way to protect your keystrokes is by installing "anti-keylogging keystroke encryption software" in addition to your existing anti-virus software. Keystroke encryption secures everything you type, in real time, at the point of origin (when you type on the keyboard), making your keystrokes invisible to any undetected keyloggers that are hiding on your computer

Read More

Windows vs Linux

Linux vs Windows

Linux vs Windows  has been a subject of debate since the inception of computers.

This article highlights the pros and cons of both the operating systems, given a set of requirements, it also attempts to show you which OS would be best suited for you. I have made an attempt to write this article without much tech-laden jargon, so for those of you are not very computer savvy, it will help you make informed decisions.

For this article, I will be comparing Windows 7 and Ubuntu 12.04 – The most popular Linux distribution.
We will be comparing the operating systems from an average user’s perspective and not that of a  systems administrator.

Let me begin with an introduction of the Linux operating system as I imagine many of you must be pretty new to this. In fact, a common misconception is that Linux is ‘ridiculously complicated’. While I admit getting used to Linux may take a while for an average windows user, it is definitely easy to use.
Linux comes in various flavours, also known as ‘distributions’. The most popular Linux distribution is ‘Ubuntu’, pronounced as ‘oo-boon-tu‘.
You may notice that there are more screenshots of Ubuntu than  Windows 7, since I presume that everyone reading this would already be familiar with Windows 7

So lets being the comparison:

1) Look and feel -

Here is the home screen of  windows 7 and Ubuntu 12.04

Since the ‘look and feel’ is a personal choice, I leave it up to you to decide which is better.
Personally, I try not to pay attention to the looks of the operating system so much as the functionality and the features.

2) Bundled software -
Windows 7 by default has very minimal software set, the basic features that we need – word processor, spread sheet and a presentation software are not present. You’ll have to purchase and install the MS Office suite separately, this is something that should be bundled with the operating system. The question I ask is “What good is an operating system, if it doesn’t provide the basic features?”

On the other hand  Ubuntu 12.04 comes with the LibreOffice suite (a Microsoft Office Equivalent) preinstalled. It also has F-spot, an image editing program that and an Instant messaging client called Empathy – that has chat provisioning for Facebook, G-Talk, Yahoo,MSN and VOIP capabilities all under a single application.

Drivers – One of the biggest advantages of Linux is its built-in driver set, or rather the ability of automatically downloading and installing them. This includes the drivers for your webcam, Wi-Fi, Ethernet Card, even your printer or scanner! We all know drivers is a big pain that comes when completing a fresh install of Windows 7. With Linux, there is rarely any need to download the drivers manually. Linux also has the ability to download proprietary drivers (The ones from Nvidia and ATI), unlike windows where we have to manually download and install a driver for everything.

3) Media -
Windows comes with Windows media player, which is pretty much useless without codecs, as majority of the videos/movies that we watch require codecs like Xvid. So there is a need to download a codec pack before Windows media player becomes fully functional.

Ubuntu is bundled with Movie Player, and also requires downloading codecs.
However, in both the operating systems, it is very easy to watch videos by simply installing VLC media player.

4) Installing third party software – When it comes to installing third party software, the steps required to install a software in Ubuntu is considerably less. An illustration is shown here of installing software in Ubuntu.

Ubuntu has a utility called Ubuntu software centre. This is one of the most loved features by Ubuntu users. It is as simple as installing an app in your phone from iTunes store or Android Market (now rebranded to Google Play). Just select the software that you need, hit install, and the software is ready to use.

It is clear from the screen shots, that installing software in Ubuntu is a lot simpler than it is in windows. Moreover, Ubuntu will check for any dependencies that the software needs and it will be installed automatically.

However, an argument can be made for computers that don’t have internet access, ease of installing software in Windows outmatches as that of Ubuntu, as it is viewed a very complicated process that includes the terminal (command line interface). Although, it is very unlikely that someone will be without internet access these days.

5) Minimum Requirements -
Windows 7 requires a minimum of 1000 Mhz processor with 1GB of RAM, while Ubuntu requires a minimum of 700 Mhz processor with 384MB RAM. While these are the official requirements, in practice, the requirements are considerably higher. From my experience, If you install both the operating systems on identical hardware, Ubuntu’s performance is significantly higher than that of Windows 7.
In fact, if you were to pull out a 7 year old computer from a junkyard, Ubuntu will work flawlessly.
Moreover, the boot time of Ubuntu is considerably less than its Windows 7 counterpart.

Ever wondered why the world’s fastest computer runs Linux and not Windows? that’s right , its performance! check the specs here

6) Security -
I have been using Windows since windows the days of Windows 95, and I can tell you that Windows 7 has some pretty good security features that, if implemented properly, can give you quite a secure system to work with. Its firewall has advanced features that you can configure. However, there are many who believe that Windows still remains a weak operating system from a security standpoint.

Linux on the other hand , has always been a secure operating system since the early days. It has often been the subject of debate that an open source operating system cannot be as secure as a proprietary one, but Linux has proved  that belief to be untrue. Overall, I believe that Linux offers much more security by default.

Access Privileges -   Linux by default does not run as a root (the Windows ‘administrator’ equivalent)
This ensures that any automated program or script cannot make changes to the system without explicit
privileges from the user. Although Windows has implemented a similar mechanism called ‘User Account Control or UAC’, Which does provide good protection although not as robust as Linux does.

Viruses - Viruses and other malware continue to be a constant headache for windows users. Combating viruses is not only time consuming, but also expensive when we talk about using Windows in a large scale production environment. Moreover, there is always a need to purchase expensive antivirus software with yearly subscriptions, punching additional holes in your pocket.

Linux on the other hand has significantly less number of viruses, so you are considerable less likely to get infected.
In fact, I am yet to hear this from a friend or a fellow systems administrator, that they are using Linux, and that it has been infected! am sure most administrators or users  must have had a similar experience.

Overall Security - Overall,  I believe that Linux will always be much more secure than Windows operating system given the fact that its open-source.
It would interest you to know that there is something called as the ‘Linus Law’ – named after the creator of the Linux kernel Linus Torvalds , which states :

given enough eyeballs, all bugs are shallow

In simple terms it means given a large number of developers and beta testers, every problem will be identified quickly and that the solution of that problem will be obvious to someone.  I completely agree with this.

7) Availability of Software -
Since Ubuntu/Linux has a relatively less market share, availability of popular software for Ubuntu is a major concern. Some users are forced to stay with windows since their favourite software is not available on the Linux platform.Though this has recently changed and many commonly used  programs have now been ported to Ubuntu.
However, some advanced commercial software like the Adobe suite (Dreamweaver,Photoshop etc.) is not available on Linux, due to which, thousands of web developers and designers choose Windows over Linux.

8) Gaming -
Gaming support is another aspect of an operating system. While Linux does have many games, it certainly cannot match Windows 7 in this area. Most of the high-end games have been built for the Windows platform, that make extensive use of Microsoft DirectX.
So its not hard to say that Windows 7 should be definitely your choice if you are a gamer.

9) Ease of use -
This is the part that worries most users who are used to the Windows 7 User interface.
In case you are not pleased with the Ubuntu user interface, there is another distribution of Ubuntu called Kubuntu, which has a marvellous user interface,its very easy to use and is similar to the look and feel of Windows 7 in many aspects.

10) Cost  -
Windows 7 ranges from $100 to $300 (Rs. 5000 to Rs.15000) depending on the version you are buying.
On the other hand, Ubuntu/Kubuntu is free of cost. You can download it from the official website.

Summary -

In conclusion, we saw the pros and cons of both the operating systems.
If you would ask for my recommendation, I  would tell you this:

If you are an average user, who uses the computer for some email, little bit of presentations or spread-sheets, movies and web browsing, Ubuntu/Linux is Definitely the operating system you should use. It enables you to accomplish everything that you normally do using Windows 7, its much more secure, has little or no maintenance, and its free of cost.

For advanced users, say web designers, gamers,programmers who develop software for the Microsoft platform, or have certain applications that only run on Windows, you should stick to Windows 7.
It may interest you to know that, Desktops and laptops that are shipped without a Windows license have a lower cost. (For obvious reasons that it does not include the cost of a Microsoft license)

So your next question would be, which OS do you (the author) use?
Well, I use both of them. I use Windows 7 for certain mission-critical applications and software that work only on Windows 7. Moreover, as a Microsoft Certified System’s administrator, I work with Windows almost everyday, as it is a part of every small to large sized businesses.

For most of my multimedia needs, emails, web browsing, weekly backups, NAS(network attached storage)  and more importantly some casual scripting, I use Ubuntu.  Moreover, my software development server, firewall, proxy server and VoIP server run on a Ubuntu sever machine.

Read More

Software Review: The Best Of 2013

Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget dolor. Aenean massa. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Donec quam felis, ultricies nec, pellentesque eu, pretium quis, sem. Nulla consequat massa quis enim. Donec pede justo, fringilla vel, aliquet nec, vulputate eget, arcu. In enim justo, rhoncus ut, imperdiet a, venenatis vitae, justo. Nullam dictum felis eu pede mollis pretium. Integer tincidunt. Cras dapibus. Vivamus elementum semper nisi. Aenean vulputate eleifend tellus. Aenean leo ligula, porttitor eu, consequat vitae, eleifend ac, enim. Aliquam lorem ante, dapibus in, viverra quis, feugiat a, tellus. Phasellus viverra nulla ut metus varius laoreet. Quisque rutrum. Aenean imperdiet. Etiam ultricies nisi vel augue. Curabitur ullamcorper ultricies nisi. Nam eget dui. Etiam rhoncus. Maecenas tempus, tellus eget condimentum rhoncus, sem quam semper libero, sit amet adipiscing sem neque sed ipsum. Nam quam nunc, blandit vel, luctus pulvinar, hendrerit id, lorem. Maecenas nec odio et ante tincidunt tempus. Donec vitae sapien ut libero venenatis faucibus. Nullam quis ante. Etiam sit amet orci eget eros faucibus tincidunt. Duis leo. Sed fringilla mauris sit amet nibh. Donec sodales sagittis magna. Sed consequat, leo eget bibendum sodales, augue velit cursus nunc,

Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget dolor. Aenean massa. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Donec quam felis, ultricies nec, pellentesque eu, pretium quis, sem. Nulla consequat massa quis enim. Donec pede justo, fringilla vel, aliquet nec, vulputate eget, arcu. In enim justo, rhoncus ut, imperdiet a, venenatis vitae, justo. Nullam dictum felis eu pede mollis pretium. Integer tincidunt. Cras dapibus. Vivamus elementum semper nisi. Aenean vulputate eleifend tellus. Aenean leo ligula, porttitor eu, consequat vitae, eleifend ac, enim. Aliquam lorem ante, dapibus in, viverra quis, feugiat a, tellus. Phasellus viverra nulla ut metus varius laoreet. Quisque rutrum. Aenean imperdiet. Etiam ultricies nisi vel augue. Curabitur ullamcorper ultricies nisi. Nam eget dui. Etiam rhoncus. Maecenas tempus, tellus eget condimentum rhoncus, sem quam semper libero, sit amet adipiscing sem neque sed ipsum. Nam quam nunc, blandit vel, luctus pulvinar, hendrerit id, lorem. Maecenas nec odio et ante tincidunt tempus. Donec vitae sapien ut libero venenatis faucibus. Nullam quis ante. Etiam sit amet orci eget eros faucibus tincidunt. Duis leo. Sed fringilla mauris sit amet nibh. Donec sodales sagittis magna. Sed consequat, leo eget bibendum sodales, augue velit cursus nunc,

Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget dolor. Aenean massa. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Donec quam felis, ultricies nec, pellentesque eu, pretium quis, sem. Nulla consequat massa quis enim. Donec pede justo, fringilla vel, aliquet nec, vulputate eget, arcu. In enim justo, rhoncus ut, imperdiet a, venenatis vitae, justo. Nullam dictum felis eu pede mollis pretium. Integer tincidunt. Cras dapibus. Vivamus elementum semper nisi. Aenean vulputate eleifend tellus. Aenean leo ligula, porttitor eu, consequat vitae, eleifend ac, enim. Aliquam lorem ante, dapibus in, viverra quis, feugiat a, tellus. Phasellus viverra nulla ut metus varius laoreet. Quisque rutrum. Aenean imperdiet. Etiam ultricies nisi vel augue. Curabitur ullamcorper ultricies nisi. Nam eget dui. Etiam rhoncus. Maecenas tempus, tellus eget condimentum rhoncus, sem quam semper libero, sit amet adipiscing sem neque sed ipsum. Nam quam nunc, blandit vel, luctus pulvinar, hendrerit id, lorem. Maecenas nec odio et ante tincidunt tempus. 

Donec vitae sapien ut libero venenatis faucibus. Nullam quis ante. Etiam sit amet orci eget eros faucibus tincidunt. Duis leo. Sed fringilla mauris sit amet nibh. Donec sodales sagittis magna. Sed consequat, leo eget bibendum sodales, augue velit cursus nunc,

Read More

The Infinity Of life

The adventure of life is to learn. The purpose of life is to grow. The nature of life is to change. The challenge of life is to overcome. The essence of life is to care. The opportunity of life is to serve. The secret of life is to dare. The spice of life is to befriend. The beauty of life is to give. The joy of life is to love.

William Arthur Ward

Read More