How manually update ZAP proxy on Kali linux.


1) Download latest version https://github.com/zaproxy/zaproxy/wiki/Downloads   * in my case it is ZAP_2.4.3_Linux.tar.gz

2) Untar it tar -xzvf ZAP_2.4.3_Linux.tar.gz

3) cd ZAP_2.4.3/

4) Copy new version over old : cp -Ra * /usr/share/zaproxy/

Source: IT-Security

Advertisements

CertSimple | Why ‘site seals’ are even worse than you thought


Why ‘site seals’ are even worse than you thoughtUltimately benefit the vendor more than their customersBy Mike on 28th Jan 2016Site seals promote bad user behavior, have questionable impact on conversions, and make your site boost your CA’s SEO. Read on for more.Why site seals existCertificate Authorities (CAs) have a problem: they want to show consumers their branding but can’t. The only area of a browser users can actually trust – the address bar – doesn’t show the CA’s branding. A lock is shown, and extended validation certs show the company ID, but unless the user really likes HTTPS and starts to explore the certificate, that’s all. Validation level aside, a Symantec certificate looks like a Comodo Certificate looks like a GoDaddy Certificate. For CAs, that’s a problem.So traditional CAs created something called a ‘site seal’, ‘trust seal’, ‘secured seal’, ‘trust logo’, or ‘trust symbol’: these are all the same thing: an image showing the CA’s brand, and some JavaScript that sets up a click handler to open a report on the CA’s website (we’ll explain why the JavaScript exists later).Heads up: we sell certificates, and occasionally get explicit requests from customers for site seals, which we’ll happily fulfill. But we don’t use site seals, and our management tools don’t encourage site seals or mention them at all. Here’s why.Promoting misplaced trustThe report that appears when you click on a site seal mentions SSL, and may also cover additional services like malware scans, site scans, or insurance policies for misissued certificates. The report is presented from a secured site – again, the only part of a browser you can trust is the address bar – and the report’s contents are often useful.However the seal image itself has no security value – site seals are easily copied just like any other image on the internet, and anyone wanting to do something bad wouldn’t hesitate to do so. Which is the crux of the issue:The trust seal UI never encourages users to read the report: merely to trust the presence of the image.

Source: CertSimple | Why ‘site seals’ are even worse than you thought

To Uber or Careem ?


Uber and Careem have arrived in Pakistan and they are going head to head with each other and let’s face it. Even though people have their means of transportation, we are fed up of those old TAXIs, rickshaws, there sorry state of affairs, and high price rates, which fluctuates through each time of the day. Enter Uber and Careem, which if you plan ahead could provide you ease of travel, you can do many other things while waiting, and you know that the charge will be done depending on how long your ride is, where your car slows down and you know the base fares. Plus add the fact of promo codes. So let’s start it with some dos and donts.

First off, the fares.

Uber has offered Uber Auto (Rickshaws) and Uber GO / VIP in Pakistan. The rates of Uber will be compared head to head with Careem.

Careem has been offering many different rides ranging from Careem Go, Careem Economy, Careem Business and Careem Business WIFI. Here is the minimum fare compared head to head with Uber and Careem.

Careem Go Uber Auto Uber Go / VIP
Base Fair 150 PKR 35 PKR 100 PKR
Cancellation Charges 250 150 150
Moving 11 pkr / km 3 pkr/ km 9.38 pkr / km
Waiting 211 pkr / hour = 3.51 / min 1 pkr / min 2 pkr / min

Keep in mind, that these are base fairs, I have given and they are current as per screen shot provided below. I have just made them available in tabular form for better comparison. Here are the snap shots of careem and Uber fares.

Uber go rates

Uber Auto rates

Uber calculates your fare this way.

Base Fare + (Cost per minute * time in ride) + (Cost per mile * ride distance) + Booking Fee = Your Fare (reference : http://www.ridesharingdriver.com/how-much-does-uber-cost-uber-fare-estimator/) 

It really doesn’t take a rocket science to see who would you prefer if you ran out of Promo Codes. With promo codes, the max you get is 20 – 30 percent off your total bill in careem. If you happen to have some special contacts, then may be, you get to have 50% off your total bill, but that happens very rarely.

I have been riding with Uber and careem for quite some time, and given a choice to go from point a to point b, I would prefer different services. There are news that many new services like limofied is being launched as well.

Still, as the market of mobile taxi is growing, drivers are learning the ropes, they are trying to dogde the system, Uber and careem software team is also struggling to make better software, (yes there are location errors too, being reported from Uber and careem, ) and our customers are also learning the manners.  Many customers, do think that Uber / Careem drivers are not humans, they are merely slaves and should be treated as such.

Just like riders / customers are asked to rate the driver, the Uber and careem software, at drivers end, are also asking to rate the riders too. This will make a forum which is very similar to stack overflow, where an inquirer is rated on his question and a knowledgiable person is rated on his knowledge / answer.
This will in turn make the overall system better with time, and the parties who are trying to make propaganda and or adding salt to different ways this system is out dated, will be better.
I do follow some dos and don’ts whenever i ride in uber / careem. Here are they, hoping for my reader to be better informed and start using this awesome service.

And oh by the way, in case you are just thinking to install Uber / Careem app on your phone and register, do use my links to get free rides yourself and give me some free rides too. It works both ways. Share and Care. Here are my Uber and Careem Invites

Uber Invite

https://www.uber.com/invite/salmank9217ue

Careem Invite

http://careem.com/signup/GESNGL4JHT

For those of you who want to read mode on Uber and how to ride properly / humanly as a customer and how does Uber combine time and distance fares, do read the below links.

https://newsroom.uber.com/the-golden-rule/

https://www.quora.com/How-exactly-does-Uber-combine-the-time-and-distance-fares-to-obtain-the-total-fare-If-the-policy-differs-from-city-to-city-how-does-one-find-out-their-policy-for-a-particular-city

 

To Follow up or not to Follow up.


When you are given a task to follow up people, it’s a real pain to follow up and combine the task of following up with 4 to 5 people, it starts getting out of your hands. Afterwards, you start thinking, I wish there was a tool for that. Well for starters, we have a tool called Outlook. This is for those who have the luxury of having Outlook in their working environment. All they need to do is

  • choose the Email to which they need to follow up,
  • RIGHT CLICK and choose one option among the following
    • today
    • Tomorrow
    • This Week
    • Next Week
    • No Date
    • Custom
  • When choosing Custom, you need to provide dates.

Detailed post of reading outlook follow up could be read here.

Keep in mind, that if the email is kept in Outlook INBOX, then the additional pop up will pop in front of you when the time comes. If the email is in other folder, other than INBOX, then this feature does’nt works. So in other words, this feature will only work for PILERS not FILERS. Reminds me of the Self organization Piler versus Filer debate. I am, a FILER, and because of this, the Outlook Feature doesn’t work.

So this was a wrap for those who have the luxury of following up via Outlook. For those on the move, and they need to follow up using any email clients. They need to be used FollowupThen. FollowUpThen is online service to which you can give commands to remind you that follow up when the time comes.