Thursday, December 27, 2012

GoogleTalk Disconnect Issue (Notes)

GoogleTalk Disconnect - Workaround
URL: hxxp://talk.google.com

if your gtalk disconnects OFTEN

that's because your client / browser establishes a tunnel to localhost
127.x.x.x

if you can change that goddamn proxy to a proper setting or a port fwd

it doesn't disconnect at all
i got so pissed today to check out off all the days... i've been using talk...
netstat -t
netstat -n
netstat -ban
all those commands showed this idea of google-talk tunneling to my localhost

two things to note, this doesn't apply for mobile and browser based chat (chatenabled.google.com)
just for gtalk client, browser based chat connects through 5222 / 52xx mostly...

too bad google talk doesn't provide a "No proxy" option... It makes sense to add the feature ASAP...

Wednesday, December 05, 2012

Homeshop18 - Top 10 Indian Website?

Shouts to the websites that provide ranking for e-Commerce websites in India ;))

Additional shouts to people who tell me, how their "website security" budget is cramped, but they can do endless meetings, interviews and documentation work for compliance, year on year! :)

#############################################
# Website: www.homeshop18.com
# Date: 05.12.2012
# Bug: Cookie Manipulation / Bad authentication
############################################

Trust me when I say your website is the most visible and targetted asset in your whole infrastructure. It represents your brand image and everything your company stands for on the Internet. One mistake like this can cost a business - customers and sales...

Homeshop18 website suffers a few vulnerabilities namely path disclosure & user authentication cookies being insecure... If the cookies can be manipulated on the client side a user's data can be compromised which will lead to a security incident...

Kindly make amends and work on fixing the vulnerability within 48 hours, this information has been released with public awareness & safety in mind.

Cheers,
Kish