MangalMan's Perspective.

Very interesting xss injection in search feature of our very own trusted website
ntc.net.np which if you are dumb enough this can make you divulge your hotmail address and password. This is a complete rip off from nepali security google group. I am in no way the author of this particular exploit.

Just reporting the issue.This particular example highlights the need of awareness about xss amongst internet users.

click to see the xss at work.

If you people want to play safe please download firefox browser to surf the
internet and then install a extension to your browser called "noscript".One can
never expect 100% safety in online world but this move will make you
considerably safer and you won't regret it i promise.

You can download this addon either from extensions page from mozillla
http://en-us.add-ons.mozilla.com/en-US/firefox/2.0.0.14/extensions/
or from http://noscript.net.Its a freeware and will stop the xss injected link if the authentic looking link tries to trick you.

here goes the link to see what you have entered.

After a lot of delays the much talked about adsl service from Nepal Telecom has finally been started from today. The price of internet in Nepal can only go down from this point onwards. Very good news for everyone who have been paying unreasonably high price for the service till date.

You can get and fill up the form here.They will charge you Rs 500 as activation charge.
Lets do a quick price analysis.They have initially rolled out 2 data schemes.The first one at 128kbps and another one 256kbps.128kbps would be charged at Rs900 per month in prepaid basis the the other one at RS1500 this is excluding taxes.Now lets tax them to know the actual price a customer has to pay.

Rs900+900*10%=Rs990 (10% TSC)
Rs990+990*13%=Rs 1118(13% VAT)

This is my initial guess. I might be wrong here.Can anyone confirm?

Noticed something funny? Yes Nepal Telecom taxes the tax.First they tax you 10% TSC add it up and then again Tax the sum with 13% VAT.
You work out the second ones price.
Besides this price every adsl customer has to do a initial investment on buying adsl modem(ATU-R) the customer premises equipment and the splitter. I have no idea about these equipments local market price.Any idea?

Some very related and relevant links you guys might want to explorer
http://back2mangalman.blogspot.com/2008/03/nepal-telecom-says-adsl-coming-soon.html
http://back2mangalman.blogspot.com/2008/03/adsl2-what-is-fuss-about.html
http://back2mangalman.blogspot.com/2008/03/general-knowledge-about-dsl-and-adsl-in.html

Use the following information wisely. The information i am about to share is related to sms bombing hapless and clueless Nepal Telecom SIM card holder. Don't over do it.This is not my original. Passed on to me by my friend this information has been in forum for quite a long time.
Ok the link goes like this
http://crbt.ntc.net.np/colorring/randompwd.action?usernumber=9841XXXXXX&colorringtype=0

All you people have to do is copy paste the link in your browser, replace the XXXXXX with the desired ntc number hit enter and hit F5. 1min of pressing would yeild about 200 sms to the victim. If your connection is broadband then victim will get more than 700 SMS. Not good is it.

I have always wanted to try linux for a change. I came to know about ubuntu from my friend Shital. He told me that ubuntu comes free. They even ship it free yes you heard me right totally free. I asked him to get me some and some he did. Back then Ubuntu used to come as 2 cds. First one was leveled live cd and second was installation cd. I did not have any idea about which way is up back then. So tentatively inserted the live cd on to my cd player and let it boot. Because it was the first time ever i was getting something other that XP run in my box i was completely at sea.Fiddled around with the menus and nothing more. After few months of inactivity i thought what the hell and i installed it. I duel booted both the ubuntu and XP. But i never got the hang of this thing called ubuntu. After few days I wiped the partition out using partition magic. And that was it then. I did not know nor did i wanted to know how to fix the grub thing though and ended up wiping the whole Hard disk and reinstalling XP again. To be fair this adventure ended due to my lack of interest to learn.

This time around I have a Hard disk that is disintegrating by the day and I got hold of a new Ubuntu 7.10 cd in my hand.A perfect recipe i guess but there was a little problem. With the time my box has grown a few years old lost its youth days. I wondered if i could get this new one linux distro to mate my old pal box. Some Viagra yeah that was the answer to my problem a dose of viagra but can u buy one with empty pocket? Viagra in this case would be increment of memory in the slot. I have a 256Mb of ram but the cd says

"To use the live Cd, you must have a PC with at least 384MB of RAM. To install Ubuntu, you should have at least 4 GB of disk space."

I put the cd in and booted but this led to nowhere blank screen for 10 minutes and i got impatient and pressed the reset button. Tried it again and again after few more trials a finally got into the ubuntu desktop.Tried to install but everything was so slow.I then turned to google for the help(had to switch back to my XP installed hard disk).Typed in "installing ubuntu in a low ram machine" and hit the jackpot. The first article talked about how creating a swap partition in the pen drive would solve this porblem. Well i will try to explain what i did to get the ubuntu running.

First of all I booted from the CD and then inserted my pendrive into the usb port. Soon my pendrive was shown in the desktop.

Then i pressed Ctrl+Alt+F1 to get to the command line environment.

After that i become root by typing "sudo su -" without quote and with space.

You can type "free" without quote to view your memory and "mount" to view which drives are mounted.

Then I create a 200MB file on the USB stick:(Here MangalMan is the name of my drive change it to your drives name)

cd /media/MangalMan

dd if=/dev/zero of=swap bs=1M count=200

After that I turn this file into swap by typing

mkswap swap

And finally activate it by typing

swapon swap

here if you type "free" again you will notice addition of swap space.

I pressed Ctrl+Alt+F7 to get back to the Desktop and then double clicked the install icon the installation went without a hitch this time.Now I am using Ubuntu as operating system these days. There are limitations because of my low ram. I can't change the visual effect to aesthetically pleasing one that is perfectly all right for me though. Next in my priority is to get my existing modem to work with Ubuntu system. I have made it work with my netodragon (smlink chipset) but the connection gets disrupted way too often. I don't think this is because of the drivers rather it might be because my ISP does not like ubuntu to be connected to their server.