Medanese IT Geek, movie lover and (mostly) law-abiding citizen. Dreaming of cheap and easy access to ICT, healthcare and education in Indonesia.



Gmail experience, now with integrated theme

Category: IT in General,Tips and Tricks,Web — kamaruddin @ 11:46 am

Checking your e-mail on Gmail and notice strange atmosphere lately? Yes, Gmail now has an integrated theme inside (19/11/2008). So go pimp your Gmail. No scriptfu is required now.

Previously you can customize some parts of your Gmail with Greasemonkey and thousands of its user-generated scripts made available at Greasemonkey Repository. With Greasemonkey you can have Gmail on top of your Google Reader at the same page (which i really adore). Note that all these third party scripts and hacks are not officially supported.

Now, want to know how it feels writing an e-mail in the late 1970s while the green nasty monochrome monitor and cabinet-high system unit were still widely used? :D

• • •


Njouba: New Search Engine Unleashed

Category: Web — kamaruddin @ 4:28 pm

Njouba is a new search engine which aims for “Making the Web Easy for Everyone”. I quickly tested it out, well… not bad for a new search engine. You choose what type of files you’re searching by selecting tabs. Really an easy way than remembering “filetype:pdf your-search-term-here”. I downloaded some ebooks/tutorials in PDF this way.

Njouba: Find and Download Everything

The downside is, we can’t insert quote to make an exact search term. Njouba is escaping it away by backslash. It’s also not accurate in refining keyword. You can see the result below.

After all, it’s fun to know searching is not only Google, Yahoo or 100 Useful Niche Search Engines that you might never heard of. Find and Download Evrything? Go to Njouba!

• • •


Downloading Video Without Installing Any Software

Category: Tips and Tricks,Web — kamaruddin @ 9:30 am

I teach you how to download video without the help of software video downloader. Now you don’t have to worry messing around your computer by installing (with trial-and-error, duh!) your perfect video downloader software (shareware/freeware). Downloading video is now as easy as 1,2,3… Screenshot

Step 1:
Hit LeechVideo website

Step 2:
Enter the Video URL you wish to download

Step 3:
Grab the Video URL and paste it to your download manager of choice or better yet, DownThemAll!

Easy and clean way of downloading video, doesn’t it? You may also want to check out KeepVid.

• • •


June’s Good News

Category: Opensource,Security,Web — kamaruddin @ 3:53 pm

Lots of things happened while I was in complete solitude. Most interesting and fun stuffs in cyberspace within the time:

1. Firefox 3 is out!
Firefox 3Yes, the awaited and widely acclaimed web browser is back! After more than 8 million downloads in 24 hours finally the fox reached more than its targeted 5 milion downloads, putting Mozilla’s server to the test by going through 14,000 downloads/minute. The achievement is to be recorded in Guiness Book of World Records. Not sure when it’s going official, but I’m really happy for it. Here’s Mozilla’s download counter. Anyway, Indonesia initiated ~47,000 downloads.

However, not all is good news. It’s reported that 5 hours after the launch a security vulnerability was found by Zero Day Initiative. Some people are speculating that the vulnerability was intentionally made public on that particular day for the benefit of ZDI. Robert Accettura’s post has something for us to ponder.

2. YMail
If you don’t own a proper address with, now it’s time for you to grab a new or from Yahoo!

Come on, grab it while it last!

3. IPhone 3G
IPhone 3G is now packed with HSDPA, Exchange support, maps and GPS! For those who own IPhone prior to this could upgrade via IPhone 2.0 software update.

IPhone 3G, available in July 2008

The $199 price seems to good to be true. Yes, I know the phone is to be purchased with a minimum 2 years contract with provider. Is it really that cheap? Bah, an initial unlocked IPhone in Indonesia (Medan) is still draining your wallet for ~$600. Gizmodo helps us calculating the real price.

• • •


Cross Site Request Forgery (CSRF)

Category: Indonesian,Security,Web — kamaruddin @ 1:35 pm

Contoh kelemahan CSRF di Google Screenshot: “PoC (Proof of Concept) kelemahan CSRF di Gmail awal 2007. Dengan multi-tab browsing Gmail dan situs “berbahaya” (yang mendemonstasikan PoC ini) daftar kontak e-mail saya terlihat semuanya di situs tersebut.”

Jangan remehkan serangan CSRF! Serangan ini lebih berbahaya dari XSS dan sulit untuk membuktikan siapa yang bermasalah, pengguna atau situs web.

CSRF (baca: sea surf) adalah serangan/exploitasi terhadap situs web dengan memanfaatkan pengguna yang sudah terautentikasi. CSRF mengexploitasi tingkat kepercayaan situs web terhadap pengguna dan menganggap setiap perintah adalah sah untuk dijalankan. Karena sifat inilah sangat sulit untuk menentukan sebuah aksi adalah murni dari pengguna atau karena kelemahan CSRF di situs.


• • •
Older Post »
Using modified "Sitepoint-like" Theme. kamaruddin [-at-] gmail *dot* com