Friday, November 29, 2013

Know your password in Web Browsers

We don't see our passwords as we type them in the password field in browser, because for security reasons, the password field in all browsers is masked with “asterisks” which won’t allow any third person to read the original typed password. There is actually technique for revealing the original passwords behind the asterisk symbol in password field.

Google Chrome:
Starting off with Google chrome, the easiest way to reveal the original passwords behind the asterisk is using inbuilt Inspect element feature in the browser.
  1. You just need to right click on the password field in the browser where you will get an option "Inspect Element". 
  2. After clicking on it, "Web Inspector" will open out and there you can see some code which is basically Html code and you just need to replace the "password" word with "text" word and it will reveal the words behind the asterisks.
You can use JavaScript which is quite quick and easy as compared to above method. Just open a site that allows users to login and after typing the password, just enter the following JavaScript code in the address bar.
Javascript: alert(document.getElementById('Passwd').value);
After entering the above code in the address bar, press enter and it will pop up a window with your password written on it.

Mozilla FireFox:
The google chrome browser technique is also applicable in Firefox.
  1. Open a site that asks for login right click on the password field in the browser where you will get an option "Inspect Element". 
  2. Click on it, "Web Inspector" will open out and there you can see some code which is basically Html code and you just need to replace the "password" word with "text" word and it will reveal the words behind the asterisks.

Thursday, November 21, 2013

How to access your user account without password

Lost your login Password? Or forgot your windows login Password? Problem in accessing your user account? Don’t worry here is the solution. Most of the times computer users don’t remember their passwords or some times they may lost the book or paper where they registered their passwords.
In this case do the steps:
1. Start the computer and press ‘F8’ function key before booting the operating system.
2. Select ‘Safe Mode’ from the booting options
3. Now it opens your computer in ‘Safe mode’, in this mode all users’ accounts and Administrator account also shown on the computer screen.
4. Click on ‘Administrator’ user account. (Note: most of the time ‘Administrator’ account password will be blank, which is created by windows operating system while installing operating system)
5. Open ‘Control Panel’ -> ‘User Accounts’
6. Click on your user account and click on ‘Remove Password’
7. Now restart your computer and now you can open your user account without any login password. (Note: Create a new password and keep it in secured place)

You can also change a user's password at the command prompt, log on as an administrator and type:
1. Start the computer and press ‘F8’ function key before booting the operating system.
2. Select ‘MS-Dos prompt” from the booting options
3. Type the below command at command prompt

C:/>net user user_name * /domain
When you are prompted to type a password for the user, type the new password, not the existing password. After you type the new password, the system prompts you to retype the password to confirm. The password is now changed.

Alternatively, you can type the following command:
C:/>net user user_name new_password

When you do so, the password changes without prompting you again. This command also enables you to change passwords in a batch file.

Note: Non-administrators receive a "System error 5 has occurred. Access is denied" error message when they attempt to change the password.

Wednesday, November 20, 2013

Beware of Holiday Season Phishing Scams and Malware Campaigns

It is a ALERT for internet users to stay aware of seasonal greetings scams and cyber campaigns, which may include:
  • electronic greeting cards that may contain malware
  • requests for charitable contributions that may be phishing scams and may originate from illegitimate sources claiming to be charities
  • screensavers or other forms of media that may contain malware
  • credit card applications that may be phishing scams or identity theft attempts
  • online shopping advertisements that may be phishing scams or identity theft attempts from bogus retailers
  • shipping notifications that may be phishing scams or may contain malware
Internet users and administrators to use caution when encountering these types of email messages and take the following preventative measures to protect themselves from phishing scams and malware campaigns:
  • Refer to the Shopping Safely Online Cyber Security.
  • Do not follow unsolicited web links in email messages.
  • Use caution when opening email attachments. 
  • Maintain up-to-date antivirus software.
  • Review the Federal Trade Commission's Charity Checklist.
  • Verify charity authenticity through a trusted contact number. 
  • Refer to the Recognizing and Avoiding Email Scams (pdf).
  • Refer to the Avoiding Social Engineering and Phishing Attacks Cyber Security.
  • Refer to the Holiday Traveling with Personal Internet-Enabled Devices Cyber Security.