Counter-eCrime Operations Summit (CeCOS V)

I’ll be presenting “Don’t Phish Me : Browser based phishing detection” in the “The Technology of eCrime and eCrime Response” section.

See you there 😉

More info : http://www.antiphishing.org/events/2011_opSummit.html

Why Improper Naming Convention Sux

Hi,

😀 First of all, i would like to say sorry to those who have read my previous entry (that has been removed; but thanks to Google people can still read it :P)

It was my fault; and here is the story 😛

I’ve been working on something and I simply create a file named aaaaaa.html on my tmp folder. Suddenly I found the FD challenge and decided to play around. I’ve copied the JS into aaaaaaa.html (with an extra ‘a’) and shamelessly tough that I’ve analyze the right file. Without further verification, i straightaway blog about it. LOL!

P/S: the same method used on the correct FD’s JS and again I’m able to decode it without getting my hand dirty. I’ll only share it publicly once I stop working on my JS-obfuscation-related-project.

Thanks

[img source: http://toddecreason.blogspot.com/2011/01/what-are-you-ashamed-to-be-seen-here.html]

Quick Fix for MacFuse 2.1.7 on 64-bit Snow Leopard

You can get from this unofficial update : https://caurea.org/2009/09/15/unofficial-macfuse-release-for-64bit-kernels/

JPJ, Senarai Hitam, Trafik, Meloya

Jika seseorang rakyat telah dinafikan hak mereka menggunakan harta (kenderaan) mereka tanpa alasan yang berlandaskan peraturan dan undang-undang maka Perkara 13 (b) menyatakan bahawa pampasan hendaklah diberikan. Ini bermaksud jika JPJ menghalang seseorang memperbaharui cukai jalan yang menyebabkan kenderaan tidak boleh digunakan, maka JPJ hendaklah membayar pampasan kepada pemilik kenderaan tersebut.

Read the rest of this entry »

In Response to Sunbelt’s Saving Login Details in Firefox Without Notification

Morning.. 🙂

If you have come across Sunbelt’s blog post today on “Saving login details in Firefox without notification“, where password can be force to be saved to the Firefox (password manager) without any notification to the user. Yeah, its bad. But whats the autocomplete=”off” on the form? 🙂

Here is my solution for that (sorry if I made things worse)

1) Open up nsLoginManager.js in the following directory (depending on your operating system)

• Mac OS : /Applications/Firefox.app/Contents/MacOS/components/
• Linux (in my case, Ubuntu) : /usr/lib/firefox-3.6.14/components/nsLoginManager.js  # <= where 3.6.14 is your Firefox version
• Windows : C:\Program Files\Mozilla Firefox\components\

2) Look for this function : “_isAutocompleteDisabled : function (element)” and comment out the function body from the following code

  _isAutocompleteDisabled : function (element) {
    if (element && element.hasAttribute("autocomplete") &&
        element.getAttribute("autocomplete").toLowerCase() == "off")
        return true;
    return false;
  },

into something like this:

  _isAutocompleteDisabled : function (element) {
    // if (element && element.hasAttribute("autocomplete") &&
    //     element.getAttribute("autocomplete").toLowerCase() == "off")
    //     return true;
    return false;
  },

3) Restart your Firefox and wallaaa! 🙂

P/S: you can simply uncomment the lines to revert but remember that if you want to clear the saved password, you can do it from the Password Manager (Preferences > Security > Saved Passwords > Remove All)