Pages

Sunday, May 17, 2015

Microsoft, Adobe and Mozilla issue Critical Security Patch Updates - 


This week you have quite a long list of updates to follow from Microsoft, Adobe as well as Firefox.

Despite announcing plans to kill its monthly patch notification for Windows 10, the tech giant has issued its May 2015 Patch Tuesday, releasing 13 security bulletins that addresses a total of 48 security vulnerabilities in many of their products.

Separately, Adobe has also pushed a massive security update to fix a total of 52 vulnerabilities in its Flash Player, Reader, AIR and Acrobat software.

Moreover, Mozilla has fixed 13 security flaws in its latest stable release of Firefox web browser, Firefox 38, including five critical flaws.

First from the Microsoft’s side:

MICROSOFT PATCH TUESDAY


Three out of 13 security bulletins issued by the company are rated as 'critical', while the rest are 'important' in severity, with none of these vulnerabilities are actively exploited at this time.

The affected products include Internet Explorer (IE), current versions of Windows (and its components), Office, SharePoint Server, Silverlight and the .NET Framework as well.

The bulletin rated Critical bundles:

  • MS15-943 – A cumulative update for Internet Explorer that patches 22 separate flaws, including 14 memory corruption bugs and the most critical one that include remote code execution vulnerabilities.
  • MS15-944 – It patches two flaws in the OpenType and TrueType font rendering code that could be exploited in .NET Framework, Lync, Office, Windows, and Silverlight. The most critical of which includes remote code execution.
  • MS15-945 – It patches six flaws in Windows Journal program, which comes installed by default in all supported client versions of Windows. All the six flaws could allow remote code execution.


The bulletin rated Important bundles:


  • MS15-946 – Fixes a pair of vulnerabilities in Office allowing remote code execution.
  • MS15-947 – Patches one remote code execution vulnerability in SharePoint.
  • MS15-948 – Patches a pair of vulnerabilities in the .NET Framework allowing denial of service (DoS) and elevation of privilege.
  • MS15-949 – Fixes one elevation of privilege bug in Silverlight.
  • MS15-950 – Fixes one elevation of privilege flaw in Windows Service Control Manager.
  • MS15-951 –MS15-951 – Patches six vulnerabilities in Windows Kernel allowing information disclosure and elevation of privilege.
  • MS15-952 – Fixes one security bypass flaw in Windows Kernel.
  • MS15-953 – Patches a pair of security bypass vulnerabilities in VBScript.
  • MS15-954 – Fixes one denial of service (DoS) bug in the Microsoft Management Console.
  • MS15-955 – Patches one vulnerability in Schannel allowing for information disclosure.


The company advised users and administrators to test and install the updates as soon as possible. This May Patch Tuesday 2015 could be one of the last patch Tuesdays by Microsoft.

ADOBE PATCH UPDATES


On Wednesday, Adobe released its recent set of security updates for the Adobe Flash Player, Adobe Reader and Acrobat software, including patches for some critical vulnerabilities.

Adobe patches at least 18 security holes in its Flash Player and AIR software. The updates are available for Windows, Mac OS X and Linux versions of the software, addressing "vulnerabilities that could potentially allow an attacker to take control of the affected system," according to the company.

The Flash Player update addresses:


  • A number of remote code execution vulnerabilities
  • Four memory corruption vulnerabilities
  • One heap overflow vulnerability
  • One integer overflow bug
  • Three type confusion flaws
  • One use-after-free vulnerability
  • A time-of-check time-of-use (TOCTOU) race condition that bypasses Protected Mode in Internet Explorer
  • Validation bypass issues that could be exploited to write arbitrary data to the file system under user permissions
  • Memory leak vulnerabilities that could be used to bypass ASLR (Address Space Layout Randomization)
  • One security bypass vulnerability that could lead to information leaks


Affected Flash Player Versions:


  • Adobe Flash Player version 17.0.0.169 and earlier
  • Adobe Flash Player version 13.0.0.281 and earlier 13.x versions
  • Adobe Flash Player version 11.2.202.457 and earlier 11.x versions
  • AIR Desktop Runtime 17.0.0.144 and earlier versions
  • AIR SDK and SDK & Compiler 17.0.0.144 and earlier versions


Adobe Reader and Acrobat update addresses:


  • Critical remote code execution vulnerabilities
  • Five use-after-free vulnerabilities
  • Heap-based buffer overflow vulnerabilities
  • One buffer overflow vulnerability
  • Ten memory corruption vulnerabilities


Affected Adobe Reader and Acrobat Versions:


  • Adobe Reader XI (11.0.10) and earlier 11.x versions
  • Reader X (10.1.13) and earlier 10.x versions
  • Acrobat XI (11.0.10) and earlier 11.x versions
  • Acrobat X (10.1.13) and earlier 10.x versions


Adobe Acrobat Reader DC has not been affected in this security update.

Also, the latest Adobe update also resolves:


  • Various methods to bypass JavaScript API execution restrictions
  • A memory leak issue
  • A null-pointer dereference issue that could lead to a denial-of-service (DoS) attacks
  • An information disclosure bug in the handling of XML external entities that could lead to information disclosure


The company recommends its users to accept automatic updates for the Adobe Flash Player desktop runtime for Windows and Mac OS X when prompted or update manually via the Adobe Flash Player Download Center.

MOZILLA UPDATES


Mozilla addresses five critical flaws, five high-risk bugs and two moderately rated vulnerabilities in its Firefox 38.

One of the serious problems it fixes resides in Firefox 38 – An out-of-bounds read and write vulnerability in the JavaScript subset "asm.js" during the validation procedure, whose exploitation could lead an attacker to read parts of the memory that may contain users sensitive data.

Among the critical vulnerabilities is a buffer overflow in the way the browser parses compressed XML, which have been fixed in the latest Firefox 38 update.

The most important update in Firefox is that the new version of the browser includes a feature that enables the use of DRM-enabled (Digital Rights Management-enabled) video content in Firefox.

The latest Firefox browser update also includes an integration with the Adobe Content Decryption Module (CDM), allowing users to play DRM-wrapped content in HTML5 video tag.
"A year ago, we announced the start of efforts to implement support for a component in Firefox that would allow content wrapped in Digital Rights Management (DRM) to be played within the HTML5 video tag. This was a hard decision," the company states in the blog post.
"As we explained then, we are enabling DRM to provide our users with the features they require in a browser and allow them to continue accessing premium video content. We don’t believe DRM is a desirable market solution, but it’s currently the only way to watch a sought-after segment of content."
To reimburse, Mozilla has also designed a sandbox that encompasses the CDM, restricting interaction with sensitive parts of the system and the browser. In addition, the Mozilla developer is also offering a version of Firefox 38 that doesn’t include the CDM component from the browser. - See more at: http://thehackernews.com/2015/05/microsoft-adobe-mozilla-update.html#sthash.1RWlzN0W.dpuf
http://thehackernews.com/2015/05/microsoft-adobe-mozilla-update.html

Friday, November 7, 2014

Menu Design Using CSS and Html

HTML CODE:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
<link href="styles.css" type="text/css" rel="stylesheet"/>
</head>
<body>
       <div id="nav">
   
       <div id="nav_wrapper">
   
       <ul>
   
       <li><a href="#">Home</a></li> <li>
          <a href="#">About Us</a></li> <li>
          <a href="#">contact US</a></li>
        <li>  <a href="#">Social<img src="#"/></a>
             <ul>
           
             <li><a href="#">YouTube</a></li>
             <li><a href="#">Google</a></li>
             <li><a href="#">Google+</a></li>
             </ul>
          </li>
   
       </ul>
   
       </div>
   
       </div>

</body>

</html>

CSS CODE:
@charset "utf-8";
/* CSS Document */

body{
padding:0px;
margin:0px;
overflow-y:scroll;
font-family:Arial, Helvetica, sans-serif;
font-size:18px;

}
#nav
{
background-color:#09F;
}
#nav_wrapper
{
width:960px;
margin: 0 auto;
text-align: left;
}
#nav ul
{
list-style-type:none;
padding:0px;
margin:0px;
position:relative;
}

#nav ul li{
display:inline-block;
}
#nav ul li:hover{
background-color:#306;
}
#nav ul li img
{
vertical-align:middle;
padding-left:10px;
}
#nav ul li a,visited
{
color:#C06;
display:block;
padding:15px;
text-decoration:none;
}
#nav ul li a:hover
{
color:#FFF;
text-decoration:none;
}
#nav ul li:hover ul
{
display:block;
}

#nav ul ul
{
display:none;
position:absolute;
background-color:#90C;
border:#C66 solid 2px;
border-top:0;
margin-left:-5px;
min-width:200px;
}
#nav ul ul li{
display:block;
}
#nav ul ul li a,visited
{
color:#FF6;

}
#nav ul ul li a:hover
{
color:#9C3;
}

Saturday, March 29, 2014

Facebook recently announced the release of Hack, a new programming language for the HipHop Virtual Machine (HHVM) aimed at solving some of the underlying issues in PHP. Hack combines dynamic and static typing to create a language that can be deployed fast while maintaining code integrity early on. Facebook has already converted a significant portion of its PHP codebase into Hack.
According to a blog post from Facebook's Julien Verlaguet, a software engineer, and Alok Menghrajani, a security engineer, "Traditionally, dynamically typed languages allow for rapid development but sacrifice the ability to catch errors early and introspect code quickly, particularly on larger codebases. Conversely, statically typed languages provide more of a safety net, but often at the cost of quick iteration. We believed there had to be a sweet spot."
HHVM is an open source virtual machine designed by Facebook to convert PHP into an intermediate code, C++, which is then converted to x64 machine code by a just-in-time (JIT) compiler. This all adds up for a much faster runtime than if the original code was executed on its own. However, PHP is also known to cause some issues when compiling code for the first time and as a language that is difficult to debug.
Hack's addition of static typing to the formula is probably the most important addition to the PHP foundation. Statically typed code can be integrated seamlessly with dynamic code; Facebook calls this a "gradually typed" code. The company also says the new static features are unobtrusive so there will be little difference visible between Hack and PHP you are used to.
Other features present in Hack include:
  • Lambda expressions which allow programmers to save time when working with variables from enclosing scopes.
  • A Collections API that provides high-level functions such as map() and filter().
  • Run-time enforcement of return types and parameter types for easier debugging and more trustworthy type annotation.
Hack was written in OCaml and has an open source version available on GitHub. For more information on Hack visit hacklang.org.

Wednesday, February 19, 2014

Android

                                                                 Android
Android is mobile operating system which is based on Linux Kernal using Java Languag.                                                                                                               

It was originally developed by startup of same name, Android Inc in 2005.

Google wanted Android to be open and free most of the Android code was released under the open-source Apache License, which means that
anyone who wants to use Android can do so by downloading the full Android Source code.

Features of Android
Easy to understand use
Messaging -support both SMS and MMS.
Conectivity (Bluetooth,Wifi,GPRS)
Fast and Flexible
Time consumption
Tethring(Hotspot) supporte sharing of internet connections as wired/wirless.
Architecture of Android 4th layer of Architecture in Android.
                                                           Interface
                                                  icon
   
 
                                FrameWork(set priorty of every layer)
Phone Manager ,Email,Message,Camera,Activity Manager,
 
 




 




                                             LIBRARIES
Sqlite                    OpenGL                                              Run time Environment
                                                                                        Core Lib(lib of java)
                                                                                   DVM(Dalvik virtual Machine)
SLL                           SSL




                                 Linux Kernal(provide drivers)
Phone Driver                   Camera Driver                            WiFi Driver
Audio Driver                    keypad Driver
 
 







ANDROID TOOLS
1.JDK
2.ECLIPSE IDE(INTEGRATE DEVELOPMENT ENVIRONMENT)      ADT
3.SDK(SOFTWARE DEVELOPMENT KIT)
        3.a. AVD(ANDROID VIRTUAL DEVICE)
                (Debuging,Compiling,Testing)


             
    


Monday, January 6, 2014

Why you should learn Java Programming Language

Why you should learn Java Programming Language

Why Java is best Programming language - why learn JavaHere is my list of 10 reason, which I tell anyone who ask my opinion about learning Java, and whether Java is best programming language in terms of opportunities, development and community support.

1) Java is Easy to learn
Many would be surprised to see this one of the top reason of learning Java, or considering it as best programming language, but it is. If you have steep learning curve, it would be difficult to get productive in short span of time, which is the case with most of professional project. Java has fluent English like syntax with minimum magic characters e.g. Generics angle brackets, which makes it easy to read Java program and learn quickly. Once a programmer is familiar with initial hurdles with installing JDK and setting up PATH and understand How Classpath works, it's pretty easy to write program in Java.

2) Java is an Object Oriented Programming Language
Another reason, which made Java popular is that it's an Object Oriented Programming language. Developing OOPS application is much easier, and it also helps to keep system modular, flexible and extensible. Once you have knowledge of key OOPS concept like Abstraction, Encapsulation, Polymorphism and Inheritance, you can use all those with Java. Java itself embodies many best practices and design pattern in it's library. Java is one of the few close to 100% OOPS programming language. Java also promotes use of SOLID and Object oriented design principles in form of open source projects like Spring, which make sure your object dependency is managed well by using dependency Injection principle.

3) Java has Rich API
One more reason of Java programming language's huge success is it's Rich API and most importantly it's highly visible, because come with Java installation. When I first started Java programming, I used to code Applets and those days Applets provides great animation capability, which amazes new programmer like us, who are used to code in Turbo C++ editor. Java provides API for I/O, networking, utilities, xml parsing, database connection, and almost everything. Whatever left is covered by open source libraries like Apache Commons, Google Guava and others.

4) Powerful development tools e.g. Eclipse , Netbeans
Believe it or not, Eclipse and Netbeans has played huge role to make Java one of the best programming language. Coding in IDE is pleasure, especially if you have coded in DOS Editor or Notepad. They not only helps in code completion but also provides powerful debugging capability, which is essential for real world development. Integrated Development Environment (IDE) made Java development much easier, faster and fluent. It's easy to search, refactor and read code using IDEs. Apart from IDE, Java platform also has several other tools e.g.. Maven and ANT for building Java applications, decompilers, JConsole, Visual VM for monitoring Heap usage etc.

5) Great collection of Open Source libraries
Open source libraries ensures that Java should be used everywhere. Apache, Google, and other organization has contributed lot of great libraries, which makes Java development easy, faster and cost effective. There are framework like Spring, Struts, Maven, which ensures that Java development follows best practices of software craftsmanship, promotes use of design patterns and assisted Java developers to get there job done. I always recommend to search for a functionality in Google, before writing your own code. There is good chance that, it's already coded, tested and available for ready to use.

6) Wonderful community support
Community is the biggest strength of Java programming language and platform. No matter, How good a language is, it wouldn't survive, if there is no community to support, help and share there knowledge. Java has been very lucky, it has lots of active forums, Stackoverflow, open source organizations and several Java user group to help everything. There is community to help beginners, advanced and even expert Java programmers. Java actually promotes taking and giving back to community habit. Lots of programmers, who use open source, contribute as commiter, tester etc. Expert programmer provides advice FREE at various Java forums and stackoverflow. This is simply amazing and gives lot of confidence to a newbie in Java.

7) Java is FREE
People like FREE things, Don't you? So if a programmer want to learn a programming language, or a organization wants to use a technology, COST is an important factor. Since Java is free from start, i.e. you don't need to pay anything to create Java application. This FREE thing also helped Java to become popular among individual programmers, and among large organizations. Availability of Java programmers is another big think, which makes organization to choose Java for there strategic development.

8) Excellent documentation support - Javadocs
When I first saw Javadoc, I was amazed. It's great piece of documentation, which tells lot of things about Java API. I think without Javadoc documentation, Java wouldn't be as popular, and it's one of the main reason, Why I think Java is best programming language. Not every one has time and intention to look at code to learn what a method do or how to use a class. Javadoc made learning easy, and provide an excellent reference while coding in Java. With advent of IDE, you don't even need to look Javadoc explicitly in browser, but you can get all information in your IDE window itself.

9) Java is Platform Independent
In 1990s, this was the main reason of Java's popularity. Idea of platform independence is great, and Java's tag line "write once run anywhere" was enticing enough to attract lots of new development in Java. This is still one of the reason of Java being best programming language, most of Java applications are developed in Windows environment and run in UNIX platform.

10) Java is Everywhere
Yes, Java is everywhere, it's on desktop, it's on mobile, it's on card, almost everywhere and so is Java programmers. I think Java programmer out number any other programming language professional. Though I don't have any data to back this up, but it's based on experience. This huge availability of Java programmers, is another reason, why organization prefer to choose Java for new development than any other programming language.

Having said that, programming is very big field and if you look at C and UNIX, which is still surviving and even stronger enough to live another 20 years, Java also falls in same league. Though there are lot of talk about functional programming, Scala and other JVM languages, but they need to go a long way to match community, resources and popularity of Java. Also OOPS is one of the best programming paradigm, and as long as it will be there Java will remain solid.


Read more: http://javarevisited.blogspot.com