Thursday, December 15, 2011

Aakash tablet goes on sale for Rs 2500 online

Aakash tablet goes on sale for Rs 2500 online
Datawind has put up for sale about 30,000 tablets online at a price of Rs 2500 each, with a delivery period of seven days.
NEW DELHI: Datawind, the maker of the world's cheapest tablet has put up for sale about 30,000 tablets online at a price of Rs 2500 each, with a delivery period of seven days.

The seven inch tablet with Android 2.2 is now available through its portal aakashtablet.com. "We have put up on sale about 30,000 tablets online, which will have a cash on delivery of 7 days. We have achieved pre-sale orders of about 400,000 tablets from individuals and corporates. But current supplies will only be limited for individual buyers," Datawind CEO and founder Suneet Singh Tuli told ET.

Saturday, December 3, 2011

XSS vulnerability in Babylon search



Recently I installed a software which changed my default search of firefox to Babylon search. It is a popular search engine and ranks high in alexa. The search engine can be reached at http://search.babylon.com/home

The search engine is vulnerable to a perticular type of XSS attack. Since no one has ever reported about a vulnerability in this search engine so I can take the credit

The search engine can be XSSed by first adding a normal string at the beginning and then add the script. Since the search engine has implemented XSS filtering so it can be bypassed by crafting a different vector.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZFicSMvqeLQxFj4h9npSUMrGh2-P1QtNkgzWqAONITQCcdKi7M7nQsKBc2VOKofOvVjqxnrCUmfuxJ4fr-AVd4909bOUkLE3keKOMyzyzolTTdcI87xTNJQW985sVj3-Lu04urT-M08E/s400/xss.PNG


Notice the search term that I have used here. On executing the script, an alert box will be displayed notifying the successful execution of script.
Here is the complete vulnerable url :

http://search.babylon.com/?q=helloworld%3Cscript%3Ealert%28%27hackingalert%27%29%3B%3C%2Fscript%3Ehelloworld&babsrc=home&s=web&as=0&t=0

Nokia’s Asha phone to hit India this month

Nokia’s Asha phone to hit India this month
The phones, Asha 300 and Asha 200, run on Symbian S40 operating software.
NEW DELHI: Unveiled with much fanfare at its global even in London in October, Nokia's Asha phones were announced in India. The phones, Asha 300 and Asha 200, run on Symbian S40 operating software. They are a crucial part of Nokia's strategy in India and African countries. While Asha 200 will be available from mid-December, Asha 300 will hit Indian market in early January.

The Finnish company hopes that with Asha phones it will be able to woo younger and price-conscious consumers even as it targets the smartphone segment with devices running on Windows Phone 7.

"At Nokia, we strive to offer our consumers the best technology suited to them through affordable and relevant innovations. Nokia Asha 200 and Asha 300 will set new benchmarks in the mobile internet and music space," said D Shivakumar, managing director at Nokia India. Both phones will be compatible with Nokia's 'unlimited music service'.

Thursday, December 1, 2011

Intel working on augmented reality chipsets

Intel working on augmented reality chipsets
Total Immersion is working with Intel to bring AR features.
SANTA CLARA: Total Immersion, a pioneer in emerging field of augmented reality (AR), is working with Intel to bring AR features, like gesture recognition, into Intel's chipsets, an executive of the privately held firm said.

Speaking at the Reuters Global Media Summit, Total Immersion's marketing chief Antoine Brachet said consumer acceptance will decide when products would reach the market, but he thinks this could happen in 2-3 years.