IT Masala

A Tech Curry with a Pinch of Indian Spice

3rd March 2007

WordPress 2.1.1 dangerous, Upgrade to 2.1.2

If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include awordpress_212.jpg security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.

From WordPress.org :

It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.

 

Although not all downloads of 2.1.1 were affected, WordPress declaring the entire version dangerous,  have released a new version 2.1.2 that includes minor updates and entirely verified files

WordPress has also setup an exclusive email address for this , as its very critical. You can email them at  21securityfaq@wordpress.org and ask you questions

Suggestion to all WordPress users :

If your blog is running 2.1.1, please upgrade immediately and do a full overwrite of your old files, especially those in wp-includes. Check out your friends blogs and if any of them are running 2.1.1 drop them a note and, if you can, pitch in and help them with the upgrade.

For all detailed information click here : WordPress Official Site

3rd March 2007

Download Yahoo Hacks ebook

Yahoo! Hacks: shows you how to use, expand, personalize, and tweak Yahoo! in ways you neveryahoo_hacks.jpg dreamed possible. You’ll learn how to:
* Fine-tune search queries with keyword shortcuts and advanced syntax
* Manage and customize Yahoo! Mail, using it as your universal email client to access all your other accounts
* Explore your social networks with Yahoo! 360, blogging your life, keeping up with friends, and making new contacts
* Store, sort, blog, feed, track, and otherwise share photos with Flickr and RSS
* Make My Yahoo! your Yahoo!, and personalize Yahoo!’s many properties
* Roll your own Yahoo! applications with Yahoo! new Web Services API and Perl, PHP, Java, Python, Ruby, or the programming language of your choice
* Visualize search results and topics, mash up images from around the Web, and remix other web content
* List (or hide) your site with Yahoo!, and integrate Yahoo! Groups, Messenger, contextual search (Y!Q), or other Yahoo! features

Download : Yahoo Hacks ( rar file) 

3rd March 2007

Unlimited Free Calls to USA, Canada, UK, China and Singapore

MediaRing was one of the pioneer first to offer free VoIP PC-to-PC calls and instant messaging withmedia_ring.jpg its flagship service “MediaRing Talk 99? which was first launched in 1998.

However, it’s soon overtaken by competitor products such as Skype which is immensely popular. Still popular especially in Asia, MediaRing Talk is an effort to regain past glory by integrating features of presence and Instant Messaging, VoIP phones calls between PC-to-PC as well as PC-to-Phone, with bundle of free value-added services such as voice and text conferencing. And now MediaRing Talk has launched Lunar New Year promotion where you can have unlimited free calls to United States of America (US), Canada, China, Singapore and United Kingdom.

Offer Time : 

The free unlimited fixed line and mobile calls offer is a limited time promotion where it will end on March 31, 2007 GMT 23:59 midnight.

Please Note

- No purchase is necessary, but the promotion is only applicable to new MediaRing Talk users.

- Beside, each call is limited to 10 minutes.

- However, there are no restrictions on calling the same destination multiple times.

- Unlimited Free calls are applicable to calls made to US, Canada, China, Singapore on fixed line or mobile (cellphone) phone, and United Kingdom on fixed line phone only.

To call for free to international phone, sign up for MediaRing Talk. via [ MediaRing ]

3rd March 2007

Use FairUse4WM to Crack, Remove and Disable Windows Media Player DRM License

FairUse4WM DRM stripper is a hacker utility that has the ability to crack and strip DRM (Digital fairuse4wm.jpgRights Management) copy protection from music and songs files offered by PlaysForSure-commpatible online music stores, music download sites, music subscription sites and record labels that are using Windows Media Player 10 and Windows Media Player 11 encoding protected by Windows Media DRM (WMDRM) version 10 and WMDRM 11. Current, online music stores that using PlaysForSure DRM license protection include NapsterToGo, MSNMusic, Amazon Unbox, Urge, Wal-Mart, Liquid Audio and AOLMusicNow.

When you try to play protected DRM files : When you download and play the Windows Media Audio (WMA) and Windows Media Video (WMV) protected with WMDRM, you’re told a license is required to play the selected content and Windows Media Player will launch WMP Digital Rights Management License Acquisition process to acquire valid license for the media from the DRM store servers. If no license can be found, you won’t be able to listen to the music song or the video.

What is FairUse4WM ?

FairUse4WM (Fair Use for Windows Media) uses a GUI version of drmdbg that supports individualization blackbox component (IBX) version .3930 and some WM11 versions and able to strips DRM headers from secure WMA files. FairUse4WM intends to enable fair-use rights to purchased media so that owners can freely copy to any devices or media. So import of KID/SID pairs is not allowed and, license expiration and rental detection is not supported. You won’t be able to unDRM any without them being licensed to you or without at least a file with active valid license.

Steps :

- To use FairUse4WM, download FairUse4WM from doom9.

- Just launch the FairUse4WM hack program to extract personally identifiable information (decryption keys) from the Media Player while playing the DRM protected media.

- Some WM installations have multiple ECC key-pairs where users need to do “Extract Keys” using multiple licensed files.

- Users may also need to individualize the system. With individualization the licenses information is stored in IndivBox.key.

- To individualize the system, download any demo drm video from ezdrm.com. Or go here to automatically individualization your system.

3rd March 2007

Download Yahoo Messenger - direct link

yahoo_messenger_link.jpgYahoo messenger is a great tool to chat(as i am already stuck with the id.) ..i love Gtalk more than yahoo messenger.. No doubt Yahoo messenger has more facilities than Gtalk .. but still Gtalk voice chat ( voice clarity is amazing…)..

All that apart..

Many people get irritated by downloading Yahoo Messenger everytime from their server , we cannot save the exe at all.It does saves the exe file in a temporary file and it deletes as soon as the messenger is installed.We can copy it before it gets deleted..but thats quite a job..

So here's an alternative..This is a direct link to download Yahoo messenger to your PC.

Download : 9.9Mb file –> Yahoo! Messenger with Voice v8.1.0.239

3rd March 2007

Elevate the power of Windows Vista with Logitech

Get the most out of your PC with some of the best products like Quick Cam Ultra Vision and Cordless Desktop MX 3200 Laser from Logitech..logitech_vista.jpg

Quick Cam Ultra Vision Enjoy true to life videos in Windows Vista

- Experience amazing image clarity and high quality audio

- Add video effects with Logitech Video effects and Logitech gadgets tooo..

Cordless Desktop MX 3200 Laser Get easy one touch access to Windows Vista features

- Shortcut to dynamic search and zoom:touch sensitive for fast scrolling and zooming to find anything - dedicated 3-d flip button:access the angled , 3-d view of all open programs ( who the hell needs all this ??? strange features ) But you should not miss this …

Simply superb flash presentation : Have a look here… via [ Logitech ]