work note
posted by Zhibin at
9:44 AM
0 Comments
posted by Zhibin at
12:03 PM
0 Comments
posted by Zhibin at
12:06 PM
0 Comments
posted by Zhibin at
4:35 PM
0 Comments
posted by Zhibin at
4:29 PM
0 Comments
NEW YORK (CNNMoney.com) - Attention tightwads.
Do you spend two hours to save five bucks on airline tickets? Still devote half the living room to a rack component stereo system, waiting for just the right time to buy that smaller, better sounding set-up?
Wait no more. From TV's to travel to a new Toyota, we've found the best time to get the best deal on just about everything.
For all the seeming complexity that goes into the price of airfare, the answer to when some of the cheapest tickets can be found is surprisingly simple: Wednesday.
That's when airlines release their available seats for the upcoming weekend and the weekend after, says Travelocity's Dominique Phillip.
Phillip, along with other travel agents, said it's still best to book a domestic flight at least two weeks in advance, and even further ahead for international travel. But if the two-week window isn't an option for you, she advised delaying the purchase even more, to a few days before you fly, as fares from 14 to 7 days ahead of departure tend to be the most expensive.
While the blowout sales on electronics tend to cluster around the holidays, even cheaper deals on TVs can be found in the spring beginning in April, according to Stephen Baker, who covers electronics for the marketing and research firm NPD.
That's because for most Japanese companies the fiscal year ends in March. Baker says they time new-model year releases with the new fiscal year and offer discounts of up to 20 percent to clear out old sets.
It's best to bundle up when looking for the best deal on a house, as reduced demand and lackluster appearance can lead to a better deal in winter.
Because no one wants to pull the kids out of school for a week or haul boxes when it's 40 below, most homes go on the market in the spring, with sales closing in the summer.
The average home price during these months is higher as well, according to Stephanie Singer of the National Association of Realtors.
Although Singer says the homes sold in the spring tend to be larger, that might not make up for the difference in price. She says homes sold in the winter lose some "curb appeal" because the landscape is dormant.
It's still true that good deals can be found in late summer/early fall, when carmakers release new models and dealers want to get rid of last year's leftovers.
But a good price may also be wrangled at the end of every month. That's because dealers are under pressure to book sales. If they exceed monthly sales targets set by the manufacturer, they are rewarded by getting more of the hotter, better selling vehicles the next month.
"There's a benefit to [dealers] making their quotas," said Jack Nerad, editorial director at Kelley Blue Book and author of the "Complete Idiots Guide to Buying or Leasing a Car."
You can fine-tune your timing even more, said Nerad. He recommends shopping when the dealerships aren't crowded, like early mornings, midweek or the winter, to avoid "getting short shrifted" from the sales staff.
For the best selection, the holiday season is the time to buy, if only because that's when gamemakers release the bulk of their lineup, according to CNNMoney.com's game guru Chris Morris. But to save a few bucks, Morris said to wait a month or three, as "The hysteria has typically died down by then."
Before and, especially, after the holidays is obviously a good time for toys. But August is another promising month, according to Sheliah Gilliland, a spokeswoman for eToys.com. Gilliland says summer toys, like swimming pools and playground equipment, take up a lot of space and retailers are willing to let some things go for up to 65 percent off to make way for the holiday rush.
posted by Zhibin at
1:35 PM
0 Comments
posted by Zhibin at
2:21 PM
0 Comments
posted by Zhibin at
2:05 PM
0 Comments
posted by Zhibin at
1:10 PM
0 Comments
Many people don't know it, but they are open to getting free highspeed internet. This is simply due to the fact that they have a neighbor that is using wireless networking and has not properly secured there connection. With a few simple tools you can tap into your neighbor's wireless connection and begin taking advantage of free high speed internet connection. Only one warning, it is not legal to hack into other people's computers and steal stuff, SheerBoredom.net does not condone the use of these tools for hacking. These tools are only here to better help secure your wireless network. Click Read more to learn more about free wi-fi access. Essential Items:1. Get a good browser, I prefer Firefox. Firefox is not only a good browser for surfing the web, but it is more secure and allows you to tweak your internet to go faster. 2. You will need a wireless network card. Any card should do fine, most networks are G, so a 802.11g card would be the best route to go, also probably the cheapest. Thats all the items you need to get started. The rest of the items are found below and links to them are found right above the picture of them. Finding Wireless NetworksLocating a wireless network is the first step in trying to exploit it. There are two tools that are commonly used in this regard: Network Stumbler a.k.a NetStumbler – This Windows based tool easily finds wireless signals being broadcast within range – A must have. It also has ability to determine Signal/Noise info that can be used for site surveys. I actually know of one highly known public wireless hotspot provider that uses this utility for their site surveys.
Kismet – One of the key functional elements missing from NetStumbler is the ability to display Wireless Networks that are not broadcasting their SSID. As a potential wireless security expert, you should realize that Access Points are routinely broadcasting this info; it just isn’t being read/deciphered. Kismet will detect and display SSIDs that are not being broadcast which is very critical in finding wireless networks.
Attaching to the Found Wireless NetworkOnce you’ve found a wireless network, the next step is to try to connect to it. If the network isn’t using any type of authentication or encryption security, you can simply connect to the SSID. If the SSID isn’t being broadcast, you can create a profile with the name of the SSID that is not being broadcast. Of course you found the non-broadcast SSID with Kismet, right? If the wireless network is using authentication and/or encryption, you may need one of the following tools. Airsnort – This is a very easy to use tool that can be used to sniff and crack WEP keys. While many people bash the use of WEP, it is certainly better than using nothing at all. Something you’ll find in using this tool is that it takes a lot of sniffed packets to crack the WEP key. There are additional tools and strategies that can be used to force the generation of traffic on the wireless network to shorten the amount of time needed to crack the key, but this feature is not included in Airsnort.
CowPatty – This tool is used as a brute force tool for cracking WPA-PSK, considered the “New WEP” for home Wireless Security. This program simply tries a bunch of different options from a dictionary file to see if one ends up matching what is defined as the Pre-Shared Key.
ASLeap – If a network is using LEAP, this tool can be used to gather the authentication data that is being passed across the network, and these sniffed credentials can be cracked. LEAP doesn’t protect the authentication like other “real” EAP types, which is the main reason why LEAP can be broken.
Sniffing Wireless DataWhether you are directly connected to a wireless network or not, if there is wireless network in range, there is data flying through the air at any given moment. You will need a tool to be able to see this data. Ethereal – While there has been much debate on the proper way to pronounce this utility, there is no question that it is an extremely valuable tool. Ethereal can scan wireless and Ethernet data and comes with some robust filtering capabilities. It can also be used to sniff-out 802.11 management beacons and probes and subsequently could be used as a tool to sniff-out non-broadcast SSIDs.
The aforementioned utilities, or similar ones, will be necessities in your own wireless security toolkit. The easiest way to become familiar with these tools is to simply use them in a controlled lab environment. And cost is no excuse as all of these tools are available freely on the Internet. Auditor Security CollectionThe Auditor is a copy of linux that boots from the cd with all the neccesary wi-fi hacking tools pre-installed. The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working environment, so that the build-up of know-how and remote support is made easier.
Protecting Against These ToolsJust as it’s important to know how to utilize the aforementioned tools, it is important to know best practices on how to secure your Wireless Network Against these tools. NetStumbler – Do not broadcast your SSID. Ensure your WLAN is protected by using advanced Authentication and Encryption. Kismet – There’s really nothing you can do to stop Kismet from finding your WLAN, so ensure your WLAN is protected by using advanced Authentication and Encryption Airsnort – Use a 128-bit, not a 40-bit WEP encryption key. This would take longer to crack. If your equipment supports it, use WPA or WPA2 instead of WEP (may require firmware or software update). Cowpatty – Use a long and complex WPA Pre-Shared Key. This type of key would have less of a chance of residing in a dictionary file that would be used to try and guess your key and/or would take longer. If in a corporate scenario, don’t use WPA with Pre-Shared Key, use a good EAP type to protect the authentication and limit the amount of incorrect guesses that would take place before the account is locked-out. If using certificate-like functionality, it could also validate the remote system trying to gain access to the WLAN and not allow a rogue system access. ASLeap – Use long and complex credentials, or better yet, switch to EAP-FAST or a different EAP type. Ethereal – Use encryption, so that anything sniffed would be difficult or nearly impossible to break. WPA2, which uses AES, is essentially unrealistic to break by a normal hacker. Even WEP will encrypt the data. When in a Public Wireless Hotspot (which generally do not offer encryption), use application layer encryption, like Simplite to encrypt your IM sessions, or use SSL. For corporate users, use IPSec VPN with split-tunneling disabled. This will force all traffic leaving the machine through an encrypted tunnel that would be encrypted with DES, 3DES or AES. |
posted by Zhibin at
9:38 AM
0 Comments
posted by Zhibin at
12:24 AM
0 Comments
posted by Zhibin at
11:42 AM
0 Comments
posted by Zhibin at
11:32 AM
0 Comments
You can:
posted by Zhibin at
11:24 AM
0 Comments
posted by Zhibin at
10:14 AM
0 Comments
posted by Zhibin at
10:25 AM
0 Comments
posted by Zhibin at
10:56 AM
0 Comments
posted by Zhibin at
10:07 AM
0 Comments
Subscribe to
Posts [Atom]
