Kavinda Munasinghe’s Blog Rotating Header Image

Google Chrome says: I know the internet.

Firefox says: I can take you where you want to go.

Firefox 3.1a1 Shiretoko Address Bar.png

Internet Explorer says: I can take you where you want to go. I’m not sure what I’m doing, would you like to navigate to ‘http://3639557480.com’ instead?

IE8 Beta 2 Address Bar.png

Google Chrome says: I can take you where you want to go. I know the internet.

Google Chrome Beta Address Bar.png

For those of you who aren’t familiar with IP addresses:
3639557480 = 216*2563 + 239*2562 + 61*2561 + 104*2560 = 216.239.61.104
So, http://3639557480 and http://216.239.61.104 are both the same.

I switched from Firefox and set my default browser to Google Chrome after using it for two days. Firefox was great, it still is, and I’ll still be using Firefox and IE occasionally. But my default browser is going to be Google Chrome; at least for now.

Only in Sri Lanka

I recently got a forwarded email titled “Longest initials’. Only in Sri Lanka would there be a guy who has 15 initials to his name. I know what each of those initials stand for too.

It’s just another email forward right? Wrong!

This email contained scanned copy of a National Identity Card and a
scanned pre-paid mobile connection application form of Dialog Telecom. Therefor I also know what he looks like, his date of birth, place of birth, address, mobile number along with his SIM number, and I also have a scanned copy of his NIC! That’s just disturbing on so many levels. I certainly would not like even the idea of my NIC or any other confidential document being scanned and sent out as email forwards.

It seems most likely that this happened at the place where this dude went to get his phone connection. If not, it’s certainly a good place to start looking for the place/person that had the bright idea of circulating these documents. Since the agent ID’s are also on the form they won’t be too difficult to find either

Now that this has happened, who should be responsible for this? What should happen next? What should be done to make this not happen again?

What’s likely to happen?

Browser Wars

Google homepage now also reads “”New! Download Chrome (BETA) – the new browser from Google”

We Built Google Chrome because closed source Internet Explorer, Safari, Opera Suck

The web browser with no chrome is Google’s fresh take on the browser. It does however have a chrome, but it doesn’t try to stand out and get in your way.

This browser has been built from scratch; the Google Chrome comic strip explains the concepts that lay behind it and how and why things were done. Its a is a quick and easy way to understand what is different about Google Chrome.

Although Chrome may not have set any world download records today, I’m sure it’s not going to be long before we start seeing this Google Chrome user agent making significant inroads into website stat logs.

It’s probably safe to say that the browser wars have becoming really intense with Google joining in. So I guess the next question is, for how long will Google continue its funding of Firefox?

China, the world superpower

China is becoming, if not already,
the world superpower. It has been boasting of many feats during the
recent past along with some impressive numbers.

* China is set to become the world’s largest producer of manufactured goods next year. Four years earlier than expected! – Financial Times
* China ousts US as top Japanese market – Financial Times
* China boasts highest number of internet users – CIA World Factbook

This time they’ve done it with sports. China became the leading nation in sports at the recently concluded 2008 Summer Olympics. So congratulations to China!

China’s raise to supremacy in the Olympic Games 

1996 Olympic Medal Count

Rank  Nation         Gold  Silver  Bronze   Total1     United States    44      32      25     1012     Russia           26      21      16      633     Germany          20      18      27      654     China            16      22      12      50

2000 Olympic Medal Count

Rank  Nation         Gold  Silver  Bronze   Total1     United States    36      24      31      912     Russia           32      28      28      883     China            28      16      15      594     Australia        16      25      17      58

2004 Olympic Medal Count

Rank  Nation         Gold  Silver  Bronze   Total1     United States    36      39      27     1022     China            32      17      14      633     Russia           27      27      38      924     Australia        17      16      16      49

2008 Olympic Medal Count

Rank  Nation         Gold  Silver  Bronze   Total1     China            51      21      28     1002     United States    36      38      36     1103     Russia           23      21      28      724     Great Britain    19      13      15      47

The
hosting country of the next summer Olympics (2012) Great Britain is
another country to keep an eye on. It has risen from the 36th place in
1996 to the 4th in 2008 by continuously improving on its medal count. This could mean that Russia’s standing in the top 3 nations may come to an end.

A veteran and a novice show how it’s done

Jayasuriya with the bat and Mendis with the ball. The result? Defending champions Sri Lanka won the Asia Cup yesterday at Karachi. For the fourth time! Woohoo!! Way to go guys!! Congratulations!!

Where have all the shared stuff gone…

Update: Google is giving up on this and have decided to shut it down. “Google Shared Stuff” will no longer be available after 3/30/2009. I wont be missing it. Its not like it worked anyway!

My Google Shared Stuff page is missing all the stuff I had shared on it! What gives?

It’s true that I haven’t used the service for some time; mostly due to Google Reader Shared Items feature. I noticed this when I was looking for something that I remember sharing using Google Shared Items, but when I went to the page, it was blank, it said You have no shared stuff!

Lucky for me I also had added my Google Shared Stuff into my FriendFeed, so I found the page I was looking for. But, where is my happy ending, where have all the shared stuff gone

Combating SQL Injection: Free tools

Earlier this week Microsoft IIS team released its URLScan 3.0 (beta) to help fight SQL injection attacks at the Web Server, now Microsoft has put
out another tool, this time in the form of a Code Analyzer. Microsoft Source Code Analyzer for SQL Injection should help out to quickly analyze and secure any existing ASP
code.

Microsoft Source Code Analyzer for SQL Injection [Community Technology Preview (June 2008)]
Static code analysis tool for finding SQL Injection vulnerabilities in ASP code.

Microsoft Source Code Analyzer for SQL Injection

Also, there is this tool from HP that allows you to check your sites against these types of vulnerabilities.

Scrawlr (offered as-is and is not a supported product by HP)
Developed by the HP Web Security Research Group in coordination with
the MSRC will crawl a website while simultaneously analyzing the
parameters of each individual web page for SQL Injection
vulnerabilities.

Escaping SQL injection attacks

Those nasty SQL Injection attacks have not stopped. They’ve probably just started!

If you’re still in the process of going through your SQL code and making sure it’s not susceptible to SQL injection attacks that means your websites are still wide open to the attack.

However not to worry, the Microsoft IIS team has come to the rescue with the announcing of the shiny new Microsoft Urlscan Filter v3.0 Beta release. It includes a GoLive license, so you can deploy it on your production servers.

Here are some of the cool new features:

  • Support for query string scanning, including an option to scan an un-escaped version of the query string.
  • Change notification for configuration (no more restarts for most settings.)
  • UrlScan can be installed as a site filter.  Different sites can have their own copy, with their own configuration.
  • Escape sequences can be used in the configuration file to express CRLF, a semicolon (normally a comment delimiter) or unprintable characters in rules.
  • Custom rules can be created to scan the URL, query string, a particular header, all headers or combination of these.  The rules can be applied based on the type of file requested.

One thing important to remember is although this will protect websites against this latest form of SQL injection attack, any poorly written code still needs to be fixed. No escaping on that.

How to Speed-up Symantec Endpoint Protection Manager Console

From the number of hits I’ve been getting on the posts on How to move Symantec Endpoint Protection Manager to another server and on How to change Symantec Endpoint Protection Manager port its seems that a lot of you seem to be in need of information on this product. So I thought I’d share with you this as well.

If you’re got your Symantec Endpoint Protection Manager “Symantec Web Server” website on a Windows Server 2003 SP2 (IIS 6.0); Install the FastCGI extension for IIS and configure the “Symantec Web Server” website to use it. Doing that should speed up your SEPM console. Well not all of it but mainly the Home, Monitors, and Reports pages will show the improvement.

You can find the documentation on how to do it in the installation CD’s. Although I found this under the NoSupport directory Symantec_Endpoint_Protection_11_0_2000_MR2_AllWin_EN_CD2\TOOLS\NOSUPPORT\FASTCGI\FASTCGI_SETUP_README.PDF 

The instructions from Symantec state that “Symantec provides full support for the Symantec Endpoint Protection Manager with the successful installation of the FastCGI extension”.

So go ahead and give it a try.

It’s Firefox Download Day

 


Firefox Download Day 2008


 


Firefox Download Day is here. Download Firefox 3 today! Help set a World Record and make history!