Is your Account safe-Gmail 2 step verification

Source: Official blog of Google(googleonlinesecurity)

Even if your Password Hacked they cant do anything with your hacked account,Google provided Advanced 2 step verification ,activate and ** the script kiddies.......

Most of us are used to entrusting our information to a password, but we know that some of you are looking for something stronger,They developed an advanced opt-in security feature called 2-step verification that makes your Google Account significantly more secure by helping to verify that you're the real owner of your account. Now it's time to offer the same advanced protection to all of our users.

2-step verification requires two independent factors for authentication, much like you might see on your banking website: your password, plus a code obtained using your phone. Over the next few days, you'll see a new link on your Account Settings page that looks like this:

Take your time to carefully set up 2-step verification—expect it may take up to 15 minutes to enroll. A user-friendly set-up wizard will guide you through the process, including setting up a backup phone and creating backup codes in case you lose access to your primary phone. Once you enable 2-step verification, you'll see an extra page that prompts you for a code when you sign in to your account. After entering your password, Google will call you with the code, send you an SMS message or give you the choice to generate the code for yourself using a mobile application on your Android, BlackBerry or iPhone device. The choice is up to you. When you enter this code after correctly submitting your password we'll have a pretty good idea that the person signing in is actually you.

It's an extra step, but it's one that significantly improves the security of your Google Account because it requires the powerful combination of both something you know—your username and password—and something that only you should have—your phone. A hacker would need access to both of these factors to gain access to your account. If you like, you can always choose a "Remember verification for this computer for 30 days" option, and you won't need to re-enter a code for another 30 days. You can also set up one-time application-specific passwords to sign in to your account from non-browser based applications that are designed to only ask for a password, and cannot prompt for the code.

Read More

Read More

Gmail secret, *(An amazing trick)*

You can create multiple user accounts (IDs) on 90% websites with a single gmail id .

Atleast Every website dont allow you to create more then one account associate with same email id and you know it better.. 

But if you have gmail account then you can create many accounts on a websites.Its possible because gmail account don't count dot(.) in email addresses.thats meansanyname@gmail. comand any.name@gmail. comboth are same email address . Yeah if you send email to anyna.me@gmail .com then it wil go to anyname@gmail .com

that means if you already have ur account on a website with yourname@gmail .com you can create you.rname@gmail .com

but facebook is listed in the 10% websites. it dont allow this even u use dot.But 90% websites includin twitter will allow you to signup so enjoy and keep share...

-------------------------------------------------------------------------------------------------------KNOXD3CrypT0r

Read More

Social Engineering Techniques & Attack Examples

Yesterday I received an Email from one of our reader regarding, "How I can perform social engineering attack?"

While reading books on Social Engineering, I have found few very nice attack methods which I would like to share with you guys. PLS USE AT YOUR OWN RISK.

During a penetration test on the physical security of an organization, if social engineering is used,

the penetration tester directly interacts with the employees. These interactions are usually based on deception and if not done properly can upset the employees, violate their privacy or damage their trust towards the organization, leading to law suits and loss of productivity of the organization.

METHOD-1: Below is step by step method.

This method consists of four different characters

Security officer - an employee responsible for the security of the organization. The security officer orchestrates the penetration test.

Custodian - an employee who owns the assets, sets up and monitors the penetration test.

Penetration tester - This is the person who will perform SOCIAL ENGINEERING ATTACK.

Employee - person in the organization who has none of the roles above.

Below Tricks you can use If you are really hungry.

METHOD-2: You can go into a self-service cafeteria and finish the meal of someone who left a lot on the plate. Self-service restaurants are usually good places to cop things like mustard, ketchup, salt, sugar, toilet paper, silverware and cups for home use. Bring an empty school bag and load up after you've cased the joint. Also, if you can stomach the food, you can use slugs at the automat. Finishing leftovers can be worked in even the fanciest of restaurants. When you are seated at a place where the dishes still remain, chow-down real quick. Then after the waitress hands you the menu, say you have to meet someone outside first, and leave.

METHOD-3: In fancy sit-down restaurants, you can order a large meal and halfway through the main course, take a little dead cockroach or a piece of glass out of your pocket and place it deftly on the plate. Jump up astonished and summon the headwaiter. "Never have I been so insulted. I could have been poisoned" you scream slapping down the napkin. You can refuse to pay and leave, or let the waiter talk you into having a brand new meal on the house for this terrible inconvenience.

NOTE: In all these methods, you should leave a good tip for the waiter or waitress, especially with the roach-in-the-plate gambit. You should try to avoid getting the employees in trouble or screwing them out of a tip.

METHOD-4: One fantastic method of not only getting free food but getting the best available is the following technique that can be used in metropolitan areas. Look in a large magazine shop for gourmet digests and tourist manuals. Swipe one or two and copy down a good name from the masthead inside the cover. Making up a name can also work. Next invest 50/- RS to print business cards with the name of the magazine and the new "associate editor." Call or simply drop into a fancy restaurant, show a copy of the magazine and present the manager with your card. They will insist that the meal be on the house.

In the same manner, you can also perform your attacks.

Read More

What is Social Engineering? Art of Manipulation: What are the Common Types of Social Engineering & How to Attacks Online | What is Dumpster Diving ??

• What is Social Engineering?
• Common Types of Attacks
• Social Engineering by Phone
• Dumpster Diving
• Online Social Engineering
• Reverse Social Engineering
• Policies and Procedures
• Employee Education

For Full Article VISIT HERE

Social Engineering can be broken into two types: human based and computer based:

• Human-based Social Engineering refers to person to person interaction to retrieve the desired information.
• Computer based Social Engineering refers to having computer software that attempts to retrieve the desired information

For Full Article VISIT HERE

Social Engineering Techniques: Dumpster Diving

Information that companies consider sensitive is thrown out daily in the normal garbage cans. Attackers can successfully retrieve this data by literally climbing into the company dumpsters and pilfering through the garbage. Information such as names, Social Security numbers,

addresses, phone numbers, account numbers, balances, and so forth is thrown out every day somewhere.

For Full Article VISIT HERE

We don't need no stinking exploits: Hacking human gullibility with social penetration

Security penetration testers Mike Bailey and Mike Murray rely plenty on attacks that exploit weaknesses in websites and servers, but their approach is better summed up by the famous phrase "There's a sucker born every minute."

For Full Article VISIT HERE

Too lazy to say Thanks or comment here? Why not too lazy to read my post?? If you like this post and want us to post similar articles, Pls give us a feedback and leave a comment here.

Read More

Delhi RedFort True Story & True History: Social Engineering Attack Example

What is social engineering...to manipulate others mind. Here is the one example of social engineering attack.

Attackers are always looking for new ways to access information. They will ensure that they know the perimeter and the people on the perimeter - security guards, receptionists and help desk workers - to exploit human oversight. People have been conditioned not to be overtly suspicious that, they associate certain behavior and appearance to known entities. For instance, on seeing a man dressed in brown and stacking a whole bunch of boxes in a cart, people will hold the door open because they think it is the delivery man. Here in this example you can easily see that how few guys has manipulated the entire history.

After reading this, you are open to make your own decision. I have posted the facts available.

READ FULL POST HERE

Read More

History of Taj Mahal: The True Story | Best Social Engineering Attack Example

Friends, few days back I have posted an interesting post on my VENTUROUS BIKERS blog. Suddenly I realized that if all the facts photographs are real, which I received from one of my resource, it could become the BEST EVER & BIGGEST SOCIAL ENGINEERING EXAMPLE IN HISTORY.

I like to share that post with you also. After reading this, you are open to make your own decision. I have posted the facts available.

Except Prof. Oak. no one has ever challenged the statement that ........

"Taj Mahal was built by Shah Jahan"

BBC Says ...........

Taj ...........

A hidden truth ..........

Never say that .........

It's a Tomb ..........

READ FULL STORY HERE

Read More