AVG WebTune Hijacking

AVG's Web Tune extension maliciously works to bypass the Chrome malware checks and leaves broken JavaScript APIs available. The attached exploit steals cookies from avg.com.

Download

Hack Gmail..!!

Account Takeover Using Password Reset Vulnerability

While researching and working on bug bounties I have found that by using Password Reset Functionality, Token & Link we can Takeover all the users account of a website if that site is vulnerable to this type of attack.

Using this vulnerability the attacker can modify the email md5 hash to any victims email md5 hash to change their password and in this way he can also reset all passwords of all the accounts and can successfully compromise the victims account as the password reset link sent to the user includes the email address md5 hash and also the password reset token can be used for other users. 

Steps to Execute the Attack:

There was a precondition that an attacker shall now the victims email id md5 hash value.

Attackers Email ID: attackeremailid@gmail.com and his password reset link:

http://testsite.com/reset-password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t2102fadb4bd021805624f06ea4c8e4d38

The 1st part in the password reset Url before '/' is password reset token and the second part is the md5 hash of the users email id in which the 1st 28 values (74q55426l4q5u5m5c4s5l5m5n5t2) are same for each users email ids and the remaining last values were different for each users email id as they were the users email id md5 hash value. So, the attacker can decrypt the email hash values easily using the online available md5 encrypters and decrypters like: http://md5decryption.com also sometimes some websites use base 64 encoding(or other encodings) which can also be easily decrypted using the online available base64 encoders and decoders like: http://ostermiller.org/calc/encode.html.

Attackers Email ID: attackeremailid@gmail.com md5 hash value:

102fadb4bd021805624f06ea4c8e4d38

Victims Email ID: victimemailid@gmail.com md5 hash value:

05ebb8fb6ec39f50d33e19cd5719084d

1st 28 values which is same for each users email id hash:

74q55426l4q5u5m5c4s5l5m5n5t2

Crafted Url to Reset the password of the Victims Email ID(i.e account)victimemailid@gmail.com:

http://testsite.com/reset-

password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t205ebb8fb6ec39f50d33e19cd5719084d

So in this way the attacker can Takeover on any users account.

                                        

Impact: 

The token generated for the activation link isn't re-checked and no validation is done for associated email ID field, allowing an attacker to change the value to a known email address md5 hash value and reset their password. This provides a trivial route for an attacker to gain access to accounts or cause a  denial of service to users on the Application.

Recommendation:  

Input from the user should be treated as untrusted and re-validated when sent to the server. The recommended approach is to generate a onetime token which is linked to the user account, this can be passed with the onetime random token instead of the email ID hash value and expired once the password has been reset. Additionally, ensure if the identifier is not passed that this won’t default to updating all accounts.

So in this way one can Takeover on the victims accounts using the Password Reset Functionality, Token & Link also this way can be used to find same type of vulnerabilities on different websites.

Suggestions and Feedback's are welcome.

Amol Bhure

5 Most Popular Ways Hackers HACK Your Website/Blog/Forums :P

What does Microsoft, Twitter, Facebook, NBC, Zen Desk, and Drupal all have in common?

They've all been recently hacked.
Yes, hacking is a growing threat for every business both large and small.
Whether it’s stealing private data, taking control of your computer, or shutting down your website, hackers can seriously impact any business, at any time.
Hackers can attack in so many ways, but here’s the ten most popular ways they can threaten the security of your site, and your business:

1. DDOS ATTACK – DISTRIBUTED DENIAL OF SERVICE ATTACK

DDoS, or Distributed Denial of Services, is where a server or a machine’s services are made unavailable to its users.
And when the system is offline, the hacker proceeds to either compromise the entire website or a specific function of a website to their own advantage.
It’s kind of like having your car stolen when you really need to get somewhere fast :P
The usual agenda of a DDoS campaign is to temporarily interrupt or completely take down a successfully running system.
The most common example of a DDoS attack could be sending tons of URL requests to a website or a webpage in a very small amount of time.
This causes bottle-necking at the server side because the CPU just ran out of resources.
Denial-of-service attacks are considered violations of the Internet Architecture Board’s Internet proper use policy,
and also violate the acceptable use policies of virtually all Internet service providers.

2. REMOTE CODE EXECUTION ATTACKS

A Remote Code Execution attack is a result of either server side or client side security weaknesses.
Vulnerable components may include libraries, remote directories on a server that haven’t been monitored, frameworks,
and other software modules that run on the basis of authenticated user access.
Applications that use these components are always under attack through things like scripts, malware, and small command lines that extract information.
The following vulnerable components were downloaded 22 million times in 2011:
Apache CXF Authentication Bypass (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3451)
By failing to provide an identity token, attackers could invoke any web service with full permission.

3.CROSS SITE REQUEST FORGERY ATTACKS

A Cross Site Request Forgery Attack happens when a user is logged into a session (or account) and a hacker uses this opportunity to send them a forged HTTP request to collect their cookie information.
In most cases, the cookie remains valid as long as the user or the attacker stays logged into the account.  This is why websites ask you to log out of your account when you’re finished – it will expire the session immediately.
In other cases, once the user’s browser session is compromised, the hacker can generate requests to the application that will not be able to differentiate between a valid user and a hacker.

A CROSS SITE ATTACK EXAMPLES
Here’s an example:
http://example.com/app/transferFunds?amount=1500&destinationAccount=4673243243
<img src=”<span style=”color: red;”>http://example.com/app/transferFunds?amount=1500&destinationAccount=attackersAcct#</span>” width=”0″ height=”0″ />

In this case the hacker creates a request that will transfer money from a user’s account, and then embeds this attack in an image request or iframe stored on various sites under the attacker’s control.

4. SYMLINKING – AN INSIDER ATTACK

A symlink is basically a special file that “points to” a hard link on a mounted file system.  A symlinking attack occurs when a hacker positions the symlink in such a way that the user or application that access the endpoint thinks they’re accessing the right file when they’re really not.
If the endpoint file is an output, the consequence of the symlink attack is that it could be modified instead of the file at the intended location. Modifications to the endpoint file could include appending, overwriting, corrupting, or even changing permissions.
In different variations of a symlinking attack a hacker may be able to control the changes to a file, grant themselves advanced access, insert false information, expose sensitive information or corrupt or destroy vital system or application files.

5. SOCIAL ENGINEERING ATTACKS

A social engineering attack is not technically a “hack”.
It happens when you divulge private information in good faith, such as a credit card number, through common online interactions such as email, chat, social media sites, or virtually any website.
The problem, of course, is that you’re not getting into what you think you’re getting into.
A classic example of a social engineering attack is the “Microsoft tech support” scam.
This is when someone from a call center pretends to be a MS tech support member who says that your computer is slow and/or infected, and can be easily fixed – at a cost, of course.

Other Attacks given below

DNS CACHE POISONING

CLICKJACKING ATTACKS

BROKEN AUTHENTICATION AND SESSION MANAGEMENT ATTACKS

CROSS SITE SCRIPTING ATTACKS

INJECTION ATTACKS (mass sql, code, email,)

                                                                Thank You :)

So you want to be a programmer, huh ?? Here are 27 ways to learn online

So with that sound advice in mind, let’s move to our in-no-particular-order list of learning resources (if you have more suggestions, PLEASE list them in the comments!).

                                                                                                                        

MIT Open Courseware 

Coursera 

UDACITY 

Google Code University 

Mozilla Developer Network 

HTML5 Rocks

The Code Player 

Codecademy 

Khan Academy 

General Assembly 

PeepCode 

Eloquent JavaScript 

Ruby Koans 

Learn Code The Hard Way 

Stack Overflow 

Coder Dojo 

O’Reilly 

Scratch 

Apple Developer 

Android Developer 

Mobiletuts+ 

Udemy 

Code School 

Bloc 

Treehouse 

Programr 

Processing 

Best Regards,

Amol S Bhure    

                                                                                                        

Creating an Apple ID without Credit Card in India !! :P

Apple has been a fascinating dream for Millions around the world and due to their quality standards, they've protocols which makes the users sit in a golden cage :D There has been no possibilities till date to create a new Apple ID without the help of Credit Card :)  But here you go, ;) ;) there is always a workaround for any problem :P The solution seems to be very simple if you follow the steps which i mention below. Make sure you don’t miss any step, if you've any queries post it down in the comments section with your mail ID and you’ll have it cleared write away.



Steps to Create a new Apple ID without Credit Card:-

Download iTunes from the Apple Website.
Install them with Administrator Privileges in your Windows based PC.
After the installation is over, open it up and switch to iTunes Store. Make sure that you aren't logged in with any existing accounts.
Scroll down to the bottom of the page and change the country to ‘United States’.
Now go to the App store and download any free app listed over there.
Now, iTunes will prompt you to create a new Apple Account and for this time, you’ll be seeing an option of  ‘none‘ for you to select. Click on it and complete the process. And now, you've your new Apple ID which has been created without a Credit Card.



Do share this article with your friends, let them too be benefited. Always remember, sharing is caring.

Subscribe me here @ facebook : https://www.facebook.com/codedevloper

Best Regards,
Amol Bhure.

Introducing Google Fiber

Google Launches Fiber

In a bit of tangential news, Google has now launched its internet service in a select few cities. The upshot? Free internet plans available and the paid plans go up to a full gigabit. Color me impressed!

How Fiber Optics Work

Google Fiber: How to Get It

While it’s not entirely clear how soon this will spread around, or if at all, it’s a welcome move away from the tyranny of our current ISPs. Oh, did I mention Fiber is going to be data uncapped? I’m truly envious of the people who are indeed going to get this service first.

Installing Aircrack-ng on Ubuntu 12.04

In the process of compiling aircrack-ng from source, I hit a lot of errors mostly to do with a variable called -Werror. This is what you need to do to compile aircrack-ng without the pesky errors.

sudo apt-get install build-essential
sudo apt-get install libssl-dev
wget http://download.aircrack-ng.org/aircrack-ng-1.1.tar.gz
tar -zxvf aircrack-ng-1.1.tar.gz
cd aircrack-ng-1.1

In the aircrack-ng-1.1 directory there is a file called common.mak, use your favorite editor to open the file and scroll down till you see the following line:

CFLAGS ?= -g -W -Wall -Werror -O3

Delete the -Werror variable, so that the line now looks like the following. Save and exit.

CFLAGS ?= -g -W -Wall -O3

Run make and make install to get aircrack-ng up and running.

try :

sudo make

and then :

sudo make install

Best Regards,
Amol Bhure

BACKTRACK COMPLETE GUIDE

Download your latest Backtrack Copy from this link here .


1. Install Bactrack to Hard Disk

BackTrack Clean Hard Drive Install

This method of installation is the simplest available.
The assumption is that the whole hard drive is going to be used for BackTrack.

--Boot BackTrack on the machine to be installed. Once booted, type in “startx” to get to the KDE graphical interface.
--Double click the “install.sh” script on the desktop, or run the command “ubiquity” in console.

--Select your geographical location and click “forward”.  Same for the Keyboard layout.

--The next screen allows you to configure the partitioning layout. 

The assumption is that we are deleting the whole drive and installing BackTrack on it.

--Accept the installation summary and client “Install”. Allow the installation to run and complete. Restart when done

--Log into BackTrack with the default username and password root / toor. Change root password.

--Fix the framebuffer splash by typing “fix-splash” ( or “fix-splash800? if you wish a 800×600 framebuffer), reboot.

BackTrack Dual Boot Installation (XP / Vista / Windows 7) :

2. BackTrack Dual Boot Install with Windows (Tested on Win 7)

This method of installation is the simplest available. The assumption is that the you have a Windows installation taking up all the space on your drive,
and you would like to resize and repartition your drive to allow a BackTrack install alongside your Windows.
BACK UP YOUR WINDOWS INSTALLATION FIRST.

--Boot BackTrack on the machine to be installed. Once booted, type in “startx” to get to the KDE graphical interface.
--Double click the “install.sh” script on the desktop, or run the command “ubiquity” in console.

--Select your geographical location and click “forward”. Same for the Keyboard layout.

--The next screen allows you to configure the partitioning layout. The assumption is that we are resizing the Windows 7 partition and installing BackTrack on the newly made space.

--Accept the installation summary and client “Install”. Allow the installation to run and complete. Restart when done.

--Grub should allow you to boot both into BackTrack and Windows.
--Log into BackTrack with the default username and password root / toor. Change root password.
--Fix the framebuffer splash by typing “fix-splash” ( or “fix-splash800? if you wish a 800×600 framebuffer), reboot.


3.Install BackTrack Live to USB (Unetbootin):


USB Live

Backtrack Live USB Install

This method of getting a live install to a USB drive is the simplest available using Unetbootin.
Note that we will format the USB drive and erase its contents.

--Plug in your USB Drive (Minimum USB Drive capacity 2 GB)
--Format the USB drive to FAT32
--Download Unetbootin from http://unetbootin.sourceforge.net/
--Start Unetbootin and select diskimage (use the backtrack-final ISO)
--Select your USB drive and click “OK” for creating a bootable BackTrack USB drive
--Log into BackTrack with the default username and password root / toor.

4. Bactrack 4 VM Install

Install Backtrack in VMware:

--Follow the basic install instructions here ( 1st step ) to get BackTrack installed in a VMware machine.

--Log into BackTrack. To install the VMWare drivers, the kernel source and headers need to be in place. 

By default in the BackTrack 4 final release, the kernel (denoted by {version} ) is configured and ready. 

However in some cases, you might need to make sure you have the latest kernel sources by typing in:

apt-get update apt-get install linux-source cd /usr/src tar jxpf linux-source-{version}.tar.bz2 ln -s linux-source-{version} linux cd linux zcat /proc/config.gz &gt; .

config make scripts make prepare

--Now that your kernel sources and headers are in place, run the “Install VMWare tools” for the specific guest VM.

--Mount the VMWare tools virtual cd, copy over the VMWare tools package and run the installer:

mount /dev/cdrom3 /mnt/cdrom cp /mnt/cdrom/VMwareTools-{version}.tar.gz /tmp/ cd /tmp/ tar zxpf VMwareTools-{version}.tar.gz cd vmware-tools-distrib ./vmware-install.pl

--Complete the VMWare tools installation as required. Run “fix-splash” to reintroduce the green framebuffer console. Reboot.

5. Installing nVidia Video Cards:

Those of us using Nvidia Chipsets... After finishing the HDD install:

Start Networking and connect to the internet.

/etc/init.d/networking start

wicd && wicd-client &

Find your card:

lspci|grep nVidia

My lspci output

Now go to nVidia Driver Downloads. Select the card that you have (as highlighted on my lspci in the above linked image), and download the driver for 32-Bit Linux TO YOUR /root DIRECTORY.

Once it's downloaded, press <Ctrl>+<Alt>+<Backspace> to kill your X session.

Now type the following on the command line (Press the TAB key at <tab> for tab completion):

cd

sh NV<tab>

And hit the <Enter> key. Run through the installer.

Now run:

apt-get install nvidia-settings

startx

Now, when you're back in the BT GUI, click the KDE Menu (little dragon, bottom left-hand side of the screen) and you will find Nvidia X Server Settings under the System menu. @amol

You're done, and X is configured to like your card! :)

6. How to Start Networking in Backtrack:


This is always a huge topic and it seems simple to many of us but the fact of the matter is we have a lot of "new" people so we need to be clear about this sort of thing. (Note all commands should be run as root or with sudo)

1. To start networking in Backtrack 4 final issue the following command.

/etc/init.d/networking start

This will attempt to start all the interfaces in the /etc/network/interfaces file.

root@bt:~# cat /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp

auto eth1
iface eth1 inet dhcp

auto eth2
iface eth2 inet dhcp

auto ath0
iface ath0 inet dhcp

auto wlan0
iface wlan0 inet dhcp

If you don't have or don't want some of these interfaces then simply remove the from this file and they will not start.

If you need to set a static IP just set the variables in the /etc/network/interfaces file

auto eth0
iface eth0 inet static
address 192.168.0.100
netmask 255.255.255.0
network 192.168.0.0
broadcast 192.168.0.255
gateway 192.168.0.1

You will also need to make sure you set a nameserver in /etc/resolv.conf

root@bt:~# cat /etc/resolv.conf
nameserver 192.168.0.1

So for example if all you have is eth0 and wlan0 on your system and you want them both to get a adress via DHCP then remove every thing else for the file with the exception of the lo interface. Here is a example.

root@bt:~# cat /etc/network/interfaces
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp

auto wlan0
iface wlan0 inet dhcp


Now if are lazy and want all this to start at boot you can simply issue this command as root

update-rc.d networking defaults

This will create all the proper sym-links

What about ssh?

So while I am on the subject I may as well go over ssh. In order to use ssh on backtrack 4 final you need to generate the keys first.

sshd-generate

after that you can start ssh like this:

/etc/init.d/ssh start

or you can add it to the boot sequence like this:

update-rc.d ssh defaults

Well thats enough to get up and running. I hope this was somewhat helpful to any one just getting started with backtrack.


for connections and GUI tools you could start "wicd Network Manager"
# /etc/init.d/wicd start
then use wicd-client to configure your wireless interface(s) look under the [Internet] menu.


7. Getting Broadcom Wireless card to work in BackTrack :



So you are new to BackTrack and your wireless doesn't work out of the box?

No problem!

There are several ways to solve this problem and I'll show you two ways!

All this ways requires that you have a ethernet connection ( a wired connection ).

BEFORE YOU TRY THESE, MAKE SURE YOU'VE RAN APT-GET INSTALL UPGRADE & APT-GET INSTALL UPDATE BEFORE IF YOU ARE RUNNING BACKTRACK 4 FINAL - IT'S ALWAYS GOOD TO UPGRADE.

Using jockey-gtk
This is the most simple one.

Log into BackTrack as root and run these commands:


CODE:
/etc/init.d/networking start
apt-get install jockey-gtk
jockey-gtk


Then follow the instructions on the program that starts.

Downloading drivers manually
Go to: Broadcom.com - 802.11 Linux STA driver
And download the tarball for your system (32 or 64).

Run the following in the terminal:

CODE:
/etc/init.d/networking start
tar xzf nameoffile.tar.gz
cd thefolderyouget
make clean
make

Now let's check if you have any conflicting drivers (you shouldn't, they doesn't come with BT.)

CODE:
lsmod  | grep "b43\|ssb\|wl"
If any of these are installed, remove them:
rmmod b43
rmmod ssb
rmmod wl

Then let's insmod the driver:

CODE:

modprobe lib80211
insmod wl.ko

Congratulations! You are up and running! :P @amol


Note: You maybe have to start network through the KDE "start menu" before you get the WICD manager up, then you should see networks.

If you can't connect to a wireless network, try changing WPA supplicant driver.

Don't forget to give us your feedback. 


Best regards,
Amol

New Smiley Code for Facebook 2012

Many people still dont know how to use Facebook Smiley when they are chatting on facebook.

Facebook has actually upgraded their chat modul several times so we can add more smileys than the old ones.
This new chat code we are talking about is really a new ones released in the year of 2012. This list of smileys is not animated though,
we will discuss it on another post for Animated Smiley Code on Facebook
What we have to do to insert the new smileys is simply type or paste the code on your message or chat box at facebook. Here are the chat codes :

That’s all for now. The above list of smiley will probably be updated later depends on their update. Happy chatting on facebook

Add Profile Box Using Facebook Application

Most of my friends who are eager on developing facebook application ask me about how to create add profile box to their profile.
Here, i’m gonna show you how to make it. Lets assume that you already understand the basic steps to create facebook application using php platform.
Profile.
setFBML – That’s what we’re gonna use to add the profile box, you can read more about it on Facebook Developer Wiki
Sets the FBML for a user’s profile or Facebook Page, including:

The content for the profile box on the Wall tab
The profile box for the Boxes tab, both narrow and wide
The FBML for a mobile device
There are several steps to add content to a User’s profile with profile.setFBML:
@amol
interact with the user to gather compelling content
call profile.setFBML
induce the user to click on an Add to Profile button
(optional) induce the user click on an Offline Access button or otherwise grant this permission
Interacting with the user to gather compelling content is highly dependent on your application.
You may achieve this in one session, or it might require several interactions with the user.

Watson Computers : Next Generation of Computer

Watson is an artificial intelligence computer system capable of answering questions posed in natural language.
Developed by IBM.
What is Watson : Follow the story of the development of Watson from a modest DeepQA machine to a formidable Jeopardy! contestant. Watch the videos below to see how Watson represents a leap forward in data analytics and how this technology will impact business and industry.

The Science Behind an Answer....
The challenge in building a computer system like Watson lies in developing its ability to understand the language of a clue,
register the intent of a question,
scour millions of lines of human language, and return a single, precise answer - in less than three seconds.
Find out what is going on inside the Watson mainframe to accomplish this feat.
“We all want to know the right answers to questions. And it isn't the same thing as searching for possibilities or options, which we do everyday."

Why Jeopardy!?...
The game of Jeopardy! makes great demands on its players – from the range of topical knowledge covered to the nuances in language employed in the clues.
Can the analytical power of a computer system – normally accustomed to executing precise requests – overcome these obstacles?
Can the troves of knowledge written in human terms become easily searchable by a machine in order to deliver a single, precise answer?
Can a quiz show help advance science?
“IBM is not in the entertainment business. But we are in the business of technology and pushing frontiers.”



A System Designed for Answers....
Operating on a single CPU, it could take Watson two hours to answer a single question.
A typical Jeopardy! contestant can accomplish this feat in less than three seconds.
For Watson to rival the speed of its human competitors in delivering a single,
precise answer to a question requires custom algorithms,
terabytes of storage and thousands of POWER7 computing cores working in a massively parallel system.
Watch to find out how building smarter systems like Watson involves optimizing hardware and software into a solution greater than the sum of its parts.
“The POWER7 system is tuned for very rapid deep analytics of massively parallel problems.”

The Next Grand Challenge...
Over the last century, IBM has reached numerous scientific breakthroughs through its commitment to research and its tradition of Grand Challenges.
These Grand Challenges work to push science in ways that weren’t thought possible before.
Jeopardy! The IBM Challenge poses a specific question with very real business implications:
Can a system be designed that applies advanced data management and analytics to natural language in order to uncover a single,
reliable insight — in a fraction of a second?
“We look at areas where there's an enormous gap in current capability and use that as a challenge. We call them Grand Challenges.”

The Face of Watson....

Preparing Watson for the Jeopardy! stage posed a unique challenge to the team: 

how to represent a system of 90 servers and hundreds of custom algorithms for the viewing public.

The result? A dynamic visual avatar based on the smarter planet icon. A speaking voice that clearly pronounces a vast vocabulary. 

And an answer panel that reveals the system’s top responses and confidence levels. Watch the video to find out more about each of these elements

“There's a pattern here. It’s random, chaotic but it’s all based on data generated by Watson as it plays the game.”

Watson after Jeopardy!....

Watson was optimized to tackle a specific challenge: competing against the world’s best Jeopardy! contestants. 

Beyond Jeopardy!, the IBM team is working to deploy this technology across industries such as healthcare, finance and customer service.

“This really is a transforming technology, and when we leverage the capabilities of Watson is when we will see real innovation.”

Final Jeopardy! and the Future of Watson....

After competing against the two greatest Jeopardy! champions of all time, 

the technology behind Watson will now be applied to some of the world’s most enticing challenges.

Watch the video for a breakdown of the match from the IBM team members as they look toward the future. 

Ken Jennings and Brad Rutter also weigh in about the accomplishment.

“We’re just so excited about all the things we can do with this.”

http://amol-hackinglibrary.blogspot.com/

All Important Things About Google+

This isn’t every single thing there is to know about Google+. That could probably be a book rather than an article, and the Google+ Project has only just begun. If Google has its way, it will live on for years. Or it could go the Google Wave route. It’s just too early to tell.
amol-hackinglibrary.blogspot.com
Do you think Google+ will succeed? .
While we’ll no doubt learn plenty more about Google+ as time goes on, here are some quick nuggets to get you a little more acquainted with it.

1. Google+ is currently available on an invitation-only basis.
2. Google does not consider it a Facebook competitor (at least publicly).
3. Google+ is currently available for download as an app in the Android Market.
4. When you download that app, it splits off the “Huddle” feature as a separate app.
5. Users can post status updates, and these appear on the Google Profile under a tab called “Posts”. The +1’s and Buzz tabs remain separate. I have to wonder if we’ll see Buzz and Posts merge eventually.
6. What is available now is “just the beginning” according to Google. These are just the first features or presumably many more to come.
7. Circles is one current feature. It lets you share things with different people (kind of like Facebook Groups) but with a very different user interface.. Watch above 1st video:
8. Another feature is Sparks. This looks for 2nd videos and articles it thinks you’ll like, so “when you’re free, there’s always something to watch, read, and share..
9. Hangouts is another feature. It’s basically group video chat. Google describes it as “the unplanned meet-up.”
10. Instant uploads is a mobile-specific feature. Photos upload themselves as you take them, and are stored in a private area on the cloud.
11. Huddle is another group-conversation feature for mobile. Essentially, it’s group chat.
The Stream
12. The stream is basically the equivalent of the Facebook news feed.
13. When you share something with Google+ it’s added to your stream and the stream of everyone you shared with.
14. The stream shows you what all of your Circles have shared with you.
15. If you mention a user, using the “+” or “@” symbols, the person may receive a notification that you mentioned them.
16. You can see who specific posts were shared with in the stream – whether they were shared publicly, to extended circles, or a limited group.
17. You can filter the stream by specific Circles.
18. You can chat directly in the stream
19. You can report inappropriate content.
20. You can search for people from the search box at the top of the stream.
21. Soon, Google says you’ll be able to search the stream itself from the search box.
22. If you leave comments on a post, you can edit or delete them.
23. The same goes for posts, but you can’t edit a post’s sharing settings after the post has been shared. However, you can delete the post and share again to different circles.
24. You can “reshare” posts made by others (like retweeting).
25. You can “mute” a post. This will let you stop receiving updates from a post, like if the comments get out of control for example.
The Google Social Network

26. You can use the “Google+ Bar” that appears at the top of various Google products as your connection to the social network.
27. When you’re signed in you’ll see your full name or email address displayed with a photo or avatar next to it, to help you identify which account you’re currently signed in to.
28. If you’ve enabled multi sign-in you can sign in to two different Google accounts and switch between them using the Google+ bar.
29. When you sign up for Google+, you’re also signing up for Picasa Web Albums, so all photos and videos uploaded to Google+ (including from your phone via Instant Upload) will also be available in Picasa Web Albums.
30. You can use the Google +1 button from the stream.
31. You can have a ton of friends on Google+. Robert Scoble quickly added over 1,000.
32. The central user interface is very Facebook-esque.
33. Google+ quickly became the butt of a lot of jokes (and even cartoons), but has also received a great deal of praise thus far... above image
34. With Google+ Google adds a “You” link to the recently redesigned (painted black) navigation bar across Google properties
35. You can view public Google+ content without actually being invited (Danny Sullivan has a guide on how to view it )
36. China is already blocking Google+. That didn’t take long.
37. Invitations have been listed on eBay.
38. There are already privacy concerns about Google+ but the Privacy Guide can be found here.
39. According to the Financial Times article, you can share something within a closed “Circle,” but somone from that circle can then reshare it with anyone, and even make it public.
40. Is Google+ destined to bring real competition to Facebook or will the hype fade? Share your thoughts here in the comment box.
41. thank u :)

HI friends after a long break me comeback ...

I got few message from  known and unknown peoples.  Regarading G+. So i'm going to post few important things about GOOGLE PLUS (G+).. enjoy :)

Run Linux In Web Browser Using JavaScript

Ever wanted to try out UNIX commands without actually installing the Linux operating system? Well, say thanks to the Javascript Guru Fabrice Bellard who’s solved the problem for you. Now you can emulate the entire Linux based PC right in your browser without needing to install the operating system. The solution is perfect for those who are curious to learn UNIX commands and have a better understanding of how the command line interface works but do not have direct access to a Linux system.

Fabrice claims that he created the PC emulator just for fun. He wanted to try his hand at something ‘a little more challenging. He says that the most modern versions of Javascript are fast enough and capable of doing complicated tasks. His emulator can be used to benchmark Javascript engines or use it for client side processing using x86 library. A more advanced version of emulator can be used to run the DOS based PC software and play old DOS games....@amol

Custom Tag on Facebook Comment

A couple months a go, facebook added a new function that enables their users to tag their friends on their comment system. By default you can do that simply by typing @ and type any letter then list of your friends with that particular letter will show up. But how about create a custom tag for your friends name? for example, You have a friend named John, you can tag John with another name, for example Amol. Interesting, right? You can play more with this trick, for example make your comment fully clickable to your own fan page, etc. Just be more creative.

With this trick, you can even tag people who are not friends with you, as long as you have their facebook ID. Ok, let’s start to show you how to do this. Simply put your comment with this format:


@@[0:[facebook id:0:tag name]]

Facebook ID is the unique id identifying every facebook profile, you can read and find out how to get the facebook id on this post :How To Find Facebook ID

Tag Name would be your custom text, this way you can link to your friends’ facebook profile but with whatever text you want

example:

@@[[0:[100001884789734:0:dont no who is he]] Your commeent is here

With this code, you can tag my profile (Amol Bhure) but with (dont no who is he) as the anchor text. Preview :

Cool isn’t it? Please note that if it doesnt show as it should be, the tag is not clickable or not on the blue colored format, you need to refresh the page, it will show you what you want to see.

That’s all, happy connecting with Facebook :)

If you are an admin of a facebook fan page or a facebook application page you can find the Suggest to Friends link on the left bottom part of the page for application page, while for a fan page, you can find it on the top right of your page. You can easily click the link to suggest your page to your friends. But the problem is, when you are not an admin of a certain page, you cant now find the link on that page. It was not like this before, Suggest to Friends was actually an Invite Friends link on the old version of a fan page/application page. Anyone could invite their friends at that time even when they’re not the admin.(amol)

Now it’s a little bit hard to suggest a facebook page to our friends when your not the admin. Many people ask, How to show Facebook Suggest to Friends Dialog ?. Well, we can use javascript address bar hack to show the dialog. using this simple code, the dialog will show whenever you click on any part of the page. @mol The link will show transparently overlayed in front of the page. Here is the script :

javascript:(function(){x=$('content').innerHTML;y=x.indexOf('_id');y=x.substring(y+4,y+27);x=y.substring(0,y.indexOf('"'));y=document.createElement('div');y.style.cssText='position:fixed;z-index:9;height:100%;';y.innerHTML='<a rel="dialog-post" href="http://amol-hackinglibrary.blogspot.com/" ajaxify="/ajax/social_graph/invite_dialog.php?class=FanManager&node_id='+x+'" class="UIImageBlock_Content" style="color:transparent;height:10000px">ultral33t amol</a>';z=document.getElementsByTagName('div')[0];z.parentNode.insertBefore(y,z);alert('Now click anywhere on this page, suggest page dialog will show – ultral33t amol');})()

1. Copy the code above
2. Go to the page you want to suggest, for example : Facebook GIF Animated Application
3. Paste the code on the address bar
4. Then press enter
5. An alert will show, just click OK or press enter
6. Click anywhere on that page, the Facebook Suggest to Friends Dialog will show