Top 10 New Year's Resolutions - My Way

While looking for something interesting to put up on the blog at this time of the year when new year eve is on the blocks i can only think about either the memories of the past year or about the upcoming new year, to be more specific The New Year Resolutions for 2009.

So i found out this Website which happens to list the Top 10 New year resolutions ( don't know from which part of the world ) and i thought of writing my own versions of these new year resolutions the way i am planning to follow them. So have a look...

1. Spend More time with Friends and Family : Spending time with my friends has been on Top of my wish-list any day of the year, but with family its always been hard, reason -  

a.) i live too far from them b.) Attitude ( not mine of course )

Lets hope things become better in 2009

2. Fit in Fitness : The last important thing i did in 2008 to maintain my body fitness was to join Swimming classes in the nearby swimming pool. First it was good to learn swimming at last and next its giving me much needed body workout which i was kind of missing like forever. So i m going to continue with this swimming thing in 2009 too.

3. Tame the Bulge : Weight 76 kg, Height 188Cm's that's the most perfect Body height - weight ratio i can ever achieve, but lately i can found a little bulging out of waistline since past some time. So i guess its the time to get going to Gym apart from regular swimming classes. Here i go for 2,4,6,8,10 packs. lol...

4. Quit Smoking : 'Quit' when did i even started, but yes i will try not to be a Passive smoker and try help ( or force ) the guys around me quit smoking.

5. Enjoy Life More : That's something i never try to do, Enjoying. Reason : Nothing Specific, earlier i used to think that i have had my part of fun from life ( i was wrong !) and its time to work seriously and hard and hence stopped doing crazy stuff i enjoy ( i m not going to tell about this) , but lately i realised that its kind of hard to live without enjoying and more importantly for me without doing my stuff. So 2009 here i come with some very crazy things on the floor to roll, and i am gonna enjoy the life more than anything else.

6. Quit Drinking : Quit Drinking , What ? Water, i guess not because since i am kind of away from other drinking stuff like tea , coffee , Alcohol , Cola since forever now. So giving up on water drinking will stop lubrication process in my body. So i am gonna drink as much as of water in 2009 and no Alcohol, are you sure !

7. Get out of Debt : That's Americana's way of living under Debt right from 18 to 81. My current account status is positive and i guess shall always be. Stipend from IIIT right now is the only source of income for me and i guess its more then enough for me. So 2009 is going to be Debt free year once again. May i ll be able to save some moolah for my wish list too.

8. Learn Something New : Kick Boxing , Playing Guitar , Swimming , Singing may be , perhaps ! most importantly Research in Computer science which is going to be the most crucial new thing to learn in 2009 for me. SOS !! 

9.Help Others : 24x7 , 366(5) days a year i am ready for this and guess what i enjoy this more than anything else in world. So in 2009 i will look forward to help as many as souls as possible. My Pleasure, Always !

10. Get Organized : Yes this is the one thing i definitely missed out during the later half of the 2008, BTW i have been a good kid since a long time but the life @ IIIT didn't left time for me to organize my self and left a lot of mess on my desk, So i gotta get up and clear the mess now and get organized. Because as i say Its Now or Never. 

So 2009 here i come with all the above resolutions to follow with time.

Happy New Year to everyone and anyone who reads and try to follow something similar to what i have written above.

Genius is one percent inspiration and 99 percent perspiration...Not Anymore...

Mr. Thomas Alva Edison once quoted the above statement saying "Genius is one percent inspiration and 99 percent perspiration ".

This saying or quote (or whatever) might have worked for people in Edison's time but today the balance has changed quite a bit, at-least what i have observed and believed.

Have a look below ( no offences to Mr. Edison ) 

( For the odd martian visit here )

Now that's what i call a real light bulb.

There's a lady... and Led Zeppelin's Stairway to Heaven...

In one of the earlier  blogs i posted the lyrics of Led Zeppelin's Stairway to Heaven, here is a little bit of analysis of the poetry based on the rhyming of the pair of words used in the song. Hats off to the Lady and the Band ( actually the guy who writes for Led Zeppelin's ) 

And she's buying a Stairway to Heaven...

 

Pickup Lines !!

Here are a few interesting (some of them probably lame) pickup lines … One or more may be archaic… Still.. For what its worth!!

1. How you doin’?
2. What would you like for breakfast?
3. I have never had a dream come true until the day that I met you.
4. I’m invisible.[Really?] Can you see me? [Yes] How about tomorrow night?
5. If you are a pirate would you want your pet to be on your this side or that side (use this to hold her shoulders standing next to her)
6. Life without you would be like a broken pencil…pointless.
7. If i could rearrange the alphabets, I would put U and I together
8. Would you happen to have a band aid? [No] That’s too bad ’cause i just scraped my knees falling for you
9. Did the sun come up or did you just smile at me?
10. Can I have your picture? [Why?] So I can show Santa what I want for Christmas!
11. That’s a nice dog/cat/pet. Does it have a phone number?
12. Do you mind if we share this cab to my house?
13. Do you believe in love at first sight or do I have to walk by again?
14. Can I have directions? ["To where?"] To your heart.
15. Are you a parking ticket? ‘Cause you got FINE written all over you.
16. Can I borrow your library card? [Why?] ‘Cause I’m checking you out.
17. Your feet must be tired, because you’ve been running through my mind all day long.
18. Are you from Tennessee? [No, why?] Because you’re the only 10 I see!
19. Got any raisins? [No.] Then how about a date?
20. I lost my phone number, can I have yours
21. Kiss me if I’m wrong, but isn’t your name Guadalupe?
22. You know what your remind me of? [What?] Lucky Charms, You want to know why? [Why?] Because you’re magically delicious!
23. I can read palms. {write your # on their hand} Oh it says you’re going to call me soon!
24. Do you have a quarter? [Why?] I told my boyfriend/girlfriend that I would call him/her when I found someone better.
25. Whenever I see you my heart races. I hope to win first place.
26. Fat penguin. [What?] I just wanted to say something to break the ice.
27. You spend so much time in my dreams I should charge rent!
28. How much does a polar bear weigh? [I don't know, how much?] Just enough to break the ice. Hi my name is ____.
29. You see my friend over there? [Point to friend who sheepishly waves from afar] He wants to know if YOU think I’M cute.
30. Did it hurt? [Hurt?] Yeah.. When you fell from heaven?
31. When god made you, he was showing off

Vulnerability in Google Authentication Service

There is a vulnerability in the way Google authentication service works. Whenever you login to any of the Google's online services like GMail, Orkut, Groups, Docs, Youtube, Calendar etc., you are redirected to an authentication server which authenticates against the entered username and password and redirect back to the required service (GMail, Youtube etc.) setting the session variables.

Now, if you are able to grab the url used to set the session variables, you can login as the user to whom that url belongs from any machine on the Internet (need not be the machine belonging to the same subnet) without entering the username and password of the user.

The proxy servers in the organizations can be used to exploit this vulnerability. Squid is the most popular proxy server used. In the default configuration, squid strips the query terms of a url before logging. So, this vulnerability can't be exploited. But if you turn off the stripping mechanism by adding the line shown below, then squid will log the complete url.

strip_query_terms off

So, after turning stripping mechanism off, the log will contain urls which will look like this

http://www.google.co.in/accounts/SetSID?ssdc=1&sidt=Q5UrfB0BAAA%3D.oHVGErODzffQ%2Bms%2FOKfk53g5naReDKehRNHOBsmJlBu3VTNXjF03SbgX%2FVEEhmImhR4mlu5IAAjM%2BdbuXvMMSIb0oU8IGCYpnLcSNkbCIrG%2BQnm81YmX5%2Brcrq7U6Qx65%2F1yaQ2NzgmKD94jg0Iw13iXDen3qD5qn6L%2FhmmYWwTrcOeuTzGbO%2BAehpjEU3mrWapRafaq3b4kxyigJ68s8QrGQqZTINNE%2Bs%2BoIkZWmGt5kNzoT8fkVAsWJeu3CKFkxj4oVMngeDvpwb1nyFpsJCltOzmAr46fTxVJSpvQdx0%3D.BMLtjUdIDCcuszktZSvYzA%3D%3D&continue=http%3A%2F%2Fwww.orkut.com%2FRedirLogin.aspx%3Fmsg%3D0%26ts%3D1226148773097%3A1226148773386%3A1226148774868%26auth%3DDQAAAIcAAAC1pPE1QT4chKgrU4B3oyKZrQRkEVPtYlclpESQoXV_d9x9gdoe75Z0hfJ_22Pn5tVMR7j-uV5YCps3NB48L0bFlDeX-4PGHVT6Loztp_ru3tAy_gxDa9_YAEbz4d9CO4wD2VTKtzax9zvpGgrnJVZQfoWPkkIomUmxDtVGoH7g3fA3UjS0vdBJ2PJtgFMElso

Replace .co.in with your tld specific to your country. If you paste this url in any browser, it'll directly log you in and you can do whatever you want to that account. Remember that all such urls remains valid only for two minutes. So, if you use that url after two minutes, it'll lead nowhere.

At the time of writing this post Orkut, Google Docs, Google Calendar, Google Books and Youtube are vulnerable.

So, make sure your squid has stripping mechanism turned on and your squid server is properly firewalled.

You can watch the Video proof for Orkut on Blip.tv, Youtube.