Recent news shows that up to 80 million websites can be compromised because of security flaw in Adobe’s ColdFusion. This security flaw was discovered by testing company ProCheckUp and according to them users are at risk of losing control over their applications and websites. Through directory traversal and file retrieval flaw in ColdFusion administrator, attacker can access every file as well as usernames and passwords. According to the ProCheckUp, standard browser is used to perform this kind of attack without knowing the administrator password. If the attack is successful attacker would be able to steal all the files from the server as well as to modify content or shut down the website or application entirely. Since 80 million websites are using ColdFusion it is critical that Adobe fixes this flaw as soon as possible. Luckily, Adobe was enough and it has released a patch for this issue on August 10.

Author highly recommends SelfTestEngine for All IT Certification Preparation such as Audio Exams and CCDP Certification. Visit us to download SelfTest Engine Free Now!

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

As we mentioned earlier, each version of iOS introduced all sorts of new and interesting features. With the iOS 4, we got FaceTime that provides us video calls via WiFi. FaceTime is quite useful because you don’t need to setup any special accounts and such. All that you need to do is to find the contact from your contact list and to tap the FaceTime button to start a video call. As you can see, FaceTime is an amazing feature that offers something new and refreshing to all iPhone users out there, but from the recent news we find out that Apple is going to improve it in next update of iOS. iOS 4.1 Beta 3 shows us that you’ll be able to video call contacts from your contact list not only via phone but also via email. With this new feature added to FaceTime you can call all sorts of upcoming iOS devices such as new generation of iPad and iPod Touch that will have face cameras. Now for the first time all users of iOS devices will be able to keep in touch with FaceTime no matter of their location.

Author highly recommends SelfTestEngine for All IT Certification Preparation such as Cisco CCNP Certification and Cisco CCSP. Certification. Visit us to download SelfTest Engine Free Now!

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

So how does this PDF exploit works? Well as we mentioned before, all that you need to do is to visit a website using Safari, and the site will automatically open a small PDF file that holds the font that hides a special program. As your device tries to preview the PDF file that font causes stack overflow that allows the secret program to be executed and to take complete control over your iOS device. Therefore, without your knowledge the hacker could easily take control over your iPhone, iPad or iPod Touch and do anything that he wants.

Interesting thing is that we’ve already seen such exploit before when the first iPhones showed up. The problem included TIFF files that caused similar security breach, but Apple managed to fix that. If you wonder how to avoid this exploit simplest way is to avoid opening PDF files directly or opening PDF files from unreliable sources. Another way to deal with this exploit is to jailbreak your iPhone and to install an app that will warn you that you’re trying to open the PDF file that might compromise your safety. That way problem isn’t entirely removed but you’ll still know that it’s there. Anyhow we’re hoping for official solution for this exploit from Apple soon enough.

Author highly recommends SelfTestEngine for All IT Certification Preparation such as CCDP Certification and CCIP Certification . Visit us to download SelfTest Engine Free Now!

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

If you remember, this security breach is caused by malicious PDF file that has a special font that hides the secret code that is used to harm your iOS device. While your device tries to display PDFfile this special fonts starts the secret code that gives the hacker the full control over your iPhone, iPod Touch or iPad. Latest news show that Apple has been working hard on a security fix and that fix is already completed. Although the security fix is completed question remains when will this security patch be available for iOS users. Maybe Apple plans to release this security fix with the latest iOS update but we can only wait and see what will happen. This security breach has been around for some time and it made decent amount of damage to iOS devices, but since Apple has found a solution for it iOS users can hope to see this patch available in near future.

About Author:

Author highly recommends SelfTestEngine for All IT Certification Preparation such as Apple Certification and Apple Exams. Visit us to download SelfTest Engine Free Now!

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

You all know that Apple’s Safari is using AutoFill feature that stores your information such as you name, address and similar and automatically fills the forms when needed. This feature is mostly used when you’re registering at a certain site and by using the AutoFill feature you’ll save a lot of time. You won’t even have to enter your name, address or email because most of those information are stored in Safari. But are they safe enough from the hackers? According to the security experts, your personal information isn’t safe because hackers can easily abuse the AutoFill feature and steal your personal data. So how can malicious websites steal your personal information even if it is stored in Safari? Simple enough, you just need to enter the malicious website and site will create invisible text fields that will require some of your personal data. AutoFill feature will fill those fields automatically like if it was any other non-malicious website. Although you aren’t sending any data to the malicious site manually, malicious site will track and simulate your keystrokes using the JavaScript and therefore your personal data will be delivered to the hackers automatically without your knowledge. The main reason why AutoFill feature is so dangerous is because it’s connected to your system’s address book. Until Apple fixes this only way to keep your personal data safe from hackers is to turn the AutoFill option off in Safari. We’re still waiting for Apple’s solution to this problem and we’re hoping that we’ll see it soon enough.

About the Author:

David is from SelfTest Engine which is Online Exam Preparation Tool for mcpd exams and mcsa certification .

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

As you surely know, iTunes has experienced security breach recently and many accounts were hacked. Single developer managed to hack great number of iTunes accounts and to use those accounts to purchase his own apps. That way he got more that thousands of dollars by fraud but Apple soon realized that there was a security breach and it has immediately deleted this user’s account. In order to improve the security of its iTunes service Apple has added several changes to it. Now if any user gets his account hacked he won’t have to worry that his account will be abused because Apple has added another layer of security. Now if you’re using your iTunes account on a new device you’ll have to enter your credit card security key before you can make a purchase. This will prevent hackers and other users from making purchases from your account if it is stolen. This is a great way for Apple to protect its iTunes users but it remains to be seen how this new system will work in the future.

About the Author:

David is from SelfTest Engine which is Online Exam Preparation Tool for Apple Certifications and Apple Exams.

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

Since PDF is so popular it’s no wonder that it has seen so many security threats over the years. In order to put an end to these security threats and risks Adobe has decided to consult different companies such as Microsoft and Google in order to come up with the solution. In order to protect its users all future versions of Adobe Reader will display PDF documents in sandbox mode. Sandbox mode is a specific mode that runs in restricted environment that allows only certain functions to be executed within the sandbox mode. If Adobe Reader tries to execute any function that isn’t allowed in sandbox mode, it will be allowed or blocked depending of the policy rules. That way Adobe should block all write commands that might change your file system and registry and install malware applications that way. As for the sandbox mode, we should see how it works in the latest version of Adobe Reader that will be released in near future.

About the Author:

David is from SelfTest Engine which is Online Exam Preparation Tool for Adobe Certifications and Adobe Exams.

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

This new tool is called Google App Inventor and it will help all non-developers to create their own applications. Google App Inventor is a simple tool that allows almost anyone to create Android applications for his phone. Tool itself is easy to handle because it is using block system and if you want to make your application you just have to drag and drop elements into your app. According to the developers, Google App Inventor requires no programming knowledge and all that you have to do in order to create your apps is to connect the blocks. In a way, it’s like a puzzle and you have to add parts in order to create your app. With this tool you’ll be able to create all sorts of games and quizzes but that’s not the main purpose of this tool. According to the developers, you’ll be able to create all sorts of powerful apps with it as well.

Interesting thing is how Google App Inventor is simple to use. Students from several schools have been testing this tool for almost a year and that only proves the simplicity of it. Anyhow, we’re hoping that App Inventor will be useful and helpful tool for creating apps that will actually help the developers and not just a plaything for other users.

About the Author:

David is from SelfTest Engine which is Online Exam Preparation Tool for Cisco Certifications exams such as 640-802 and 642-436 .

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

The various certifications that allow a person to become a professional personal trainer are as follows. The most famous institute for obtaining certification for this profession is the American college of sports and medicine the cost involved for this study is roughly around 300$ which is very affordable and the eligibility condition is a high school diploma and it is not a very difficult to get in to it. Then there is the American council on exercise which offers even distance learning and that to at a low cost.

This is a viable option for people who wish t o study while working. The next institute is the aerobics and fitness association of America and this is basically a workshop that is conducted for a period of 3 days and this includes certification too. This is a high intense course and is ideal for people who have good knowledge in the field but want to enhance their knowledge in the field. This also provides opportunity for trainers to met other trainers and to also to get good contacts. There are also other institutes like the American fitness professionals and associates, IFPA etc who also provide good coaching for this profession. The most important thing for getting into this profession is the passion that a person must exhibit towards health and exercise

David Recommends SelfTestEngine for Exams Preparation such as and Cisco 640-802.

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.

MX-FX is the first series of USB 3.0 flash drives that comes from Mach Xtreme Technology. Most important thing about USB flash drives is their capacity and as for capacity these models come with 32 GB and 64 GB capacity that will be enough for average users. Both these models come with MLC NAND Flash memory chips but the selling point of these flash drives is their USB 3.0 compatibility. Thanks to USB 3.0 compatibility these drives can perform amazing transfer speed and they are able to write files at 80MB/s and read them at 125MB/s. In case that you don’t have USB 3.0 on your PC, don’t worry because these models are fully compatible with USB 2.0. In addition, these models are quite durable and they are shock and vibration resistant.

These are quite interesting flash drives and we’re hoping that we’ll see more devices from this company soon. Price of MX-FX is still unknown but release date is near so you’ll be able to get this model from June 14 in stores.

This is post was written by David Graham who recommends SelfTest Engine as exam preparation tool for Hardware Certifications like CCNA, CCNP, A+ Certification and Security+ Certifications.

© 2010, David Graham. All rights reserved. On republishing this post you must provide link to original post.