Saturday, April 25, 2009

Not Updating this blog any more

Hey all

I have shifted by blog on http://blog.dhavalparikh.co.in So for latest information that you dont find here.. Please visit my new blog where you will get much more information.

You may also visit my new website http://stockarchitect.com which is a Social Stock Market Investment Portal.

Thanks

Dhaval Parikh
Software Engineer
Ruby on Rails
http://www.dhavalparikh.co.in
Technorati Tags:

Saturday, October 11, 2008

Tough times ahead - ITs WORLD RECESSION

Every where people are just talking about recession in US economy . Where ever on what ever sites you go people are just posting negative comments about companies which used to be favorites just few months back

The buzz words are seeing a slow down. Some of the examples that I came across on some of the articles I read


1) iPod dying? It's already dead

2)11 troubled Web companies: The next Kozmos? where people are talking about twitter, skype and other big names which were used to be widely used all over are now getting some cause of worry

3)Open-source innovation in a recession

4) Week in review: Tech stocks tumble
tech stocks falling like a pack of cards every where there is a slow down no matter which country you see.

5) Chip forecasts head south

6) Micron to cut workforce by 15 percent, slash flash output

7) The tech downturn: How long and how bad?

While dollar appreciating was a bit of a support for some of the IT biggies, but on the other hand default payments is affecting the revenues. They are forced to reduce number of employees

companies are not getting big contracts like before. People have reduced spendings.

So everyone is just waiting and watching WHAT WILL HAPPEN NEXT ? No one knows actually.. Lets see wats the road ahead especially for IT companies
Technorati Tags:

Saturday, September 13, 2008

Improve your productivity using firefox extensions - Top 10 addons

Hi all

If you are into web development here are some of the tools you must make use of to improve the productivity.

  1. FireBug - Edit, debug, and monitor CSS, HTML, and JavaScript live in any web page.
  2. Web Developer Toolbar - Adds a menu and a toolbar with various web developer tools. I used this add-on for a long time prior to Firefox 2.0. I found its pixel measuring tool to be useful and back when I did table design I used its outlining/bordering tool to help me adjust that flow-based layouts. I’ll have to relearn how to use this sucker for the new methodologies I use for client-end design.
  3. Seoquake - Seoquake is one of the most powerful tools available for analyzing your website’s Search Engine Optimization results. It will help you determine what your Google PageRank score is, how many pages on your site are indexed, how many external sites link to yours, similar statistics for Yahoo and Live.com, your Alexa ranking, your del.icio.us vote count (for specific pages), and mountains of other data. I’m still finding out more and more about this tool, but I think this is by far and large one of the most powerful extensions available to web developers.
  4. ColorZilla - Have you ever seen a really interesting color on a website and try to find out what it is? ColorZilla gives you the ability to simple use a “color picker” to mouse over the desired color and capture it’s hex value. This extension has proved to a real time saver and I’ve used it longer than any of the other extensions or plug-ins on this list (since late 2004).
  5. Alexa Sparky - Another traffic analysis tool, brought to you by Alexa, Amazon.com’s traffic ranking service. I like this plugin simply because of the trend graph that it places in the bottom right corner of your browser window, but it also has some helpful features, such as determining what sites are similar to yours.
  6. Session Manager - I keep many tabs open on my Firefox sessions at all times, and if my computer has to restart or if something crashes I can lose potentially valuable information if I am unable to find those pages again. Session manager automatically saves your sessions and in the event of a crash or a reboot it can restore all of the tabs in the session for you.
  7. IE View Lite - There are a lot of developers out there who wish Internet Explorer would either accept the W3C standards or just go away, but unfortunately a large portion of Internet users are Internet Explorer users. IE View Lite allows you to right click on any given page and gives you the option to view this page in a new Internet Explorer window. IE View Lite is a powerful tool for cross-browser testing and validation. I prefer using IE View over IE Tab, which runs Internet Explorer within a tab in Firefox, simply because IE tab has some quirks (i.e. it reverts back to Firefox if you press Firefox’s reload button while focused on an IE Tab) and you don’t get full access to all of IE’s options with IE Tab.
  8. FireFTP - FireFTP is simply an FTP client built into the Firefox browser. It’s free, it’s simple, it’s reliable, and I can flip to FireFTP just like any other tab on the browser.
  9. Greasemonkey - Greasemonkey is arguably the most powerful Firefox extension. Greasemonkey allows you to apply custom JavaScripts to pages within your browser; for instance there are scripts to declutter your Facebook homepage, hide Gmail lables, and hide Netflix reviews. I use Greasemonkey to make it easier to navigate social network sites when promoting my blog. You can view the directory of Greasemonkey scripts at Userscripts.org.
  10. Download Status Bar - When I download Wordpress plug-ins for my blog, I usually do so in intervals of 3-5 plug-ins at a time. I use Download status bar to give me instant access to my completed downloads without having to hunt them down using Windows Explorer. I try to save time in every way possible.
  11. StumbleUpon - While I don’t believe in spamming social tagging sites in everyway possible, I always make sure I am the first to submit my own articles to StumbleUpon. Why? Because the first StumbleUpon review is crucial to getting the correct demographic to view your site, since the categorization of the “stumble” occurs during the first review instance. It’s better that you, the author of the site, write the first review and categorize it accordingly, rather than put it in the hands of someone who may be viewing your site for the first time. In addition StumbleUpon sends more users to your site on average than Digg does, according to ProBlogger.
  12. Extended Cookie Manager and Cache Status - I use the Extended Cookie Manager and the Extended Cache Manager to help me debug my site when I’m running into connectivity issues, such as the trouble I ran into with my MySQL connection bombing out in IIS.
Technorati Tags:

Saturday, August 16, 2008

Removal method for SAM / USB worm virus which bannes orkut

Hi friends

I am getting a lots of mails and msgs from my frnds that their pcs have been affected by so called SAM virus..which blocks orkut and other sites

Also this virus doesnt allow ctrl + alt + del function to work... and in short it creates a lot of problem..

So i researched through many sites and found the solution for it..

Follow these steps and the virus will be gone..

1) Download combofix from http://download.bleepingcomputer.com/sUBs/ComboFix.exe install it and run it

2) Download nod32 antivirus from http://www.eset.com/download/ scan your pc with it and you will find c:/config/system.exe and c:/config/sys.exe virus in your pc...

3) go to regedit and find system.exe and sys.exe and delete all such entries

4) go to msconfig c:/config/system.exe might be the startup program remove it from the list. you can also use tools such as system mechanic for managing the startup files

5) download http://slynux.org/downloads/Worm-fix.exe.zip and run it..

6) restart your pc and your virus will be gone

for more information you can mail me @ dhaval.parikh33@gmail.com or contact me through my site http://www.dhavalparikh.co.in

Labels: , ,

Technorati Tags:

Wednesday, July 30, 2008

Testing Web application security using Google's ratproxy

Well I was searching for web 2.0 testing tool..and I found a gr8 article on linux.com which i m posting it here.

To help developers audit Web application security, Google has released an open source tool called ratproxy. It is a non-disruptive tool designed for Web 2.0 and AJAX applications that produces an easy-to-read report of potential exploits.

Ratproxy is a local program designed to sit between your Web browser and the application you want to test. It logs outgoing requests and responses from the application, and can generate its own modified transactions to determine how an application responds to common attacks. The list of low-level tests it runs is extensive, and includes:

  • potentially unsafe JSON-like responses
  • bad caching headers on sensitive content
  • suspicious cross-domain trust relationships
  • queries with insufficient XSRF defenses
  • suspected or confirmed XSS and data injection vectors

Many more tests are performed, all enumerated in the messages.list file included in the package.

The ratproxy package consists of source code, documentation, and an optional component for testing Adobe Flash content called flare-dist. A standard Make file is included, but no configure script. To build the program, simply run make:


   $ make cc ratproxy.c -o ratproxy -Wall -O3 -Wno-pointer-sign -D_GNU_SOURCE http.c mime.c ssl.c -lcrypto -lssl
*** WARNING: flare-dist/flare bianry is not operational.
*** Please see flare-dist/README and update it for your OS.

I got the warning because I compiled on Mac OS X, while the Flash testing component in the package, flash-dist, is the Linux version. An OS X version of flash-dist is available, but I did not need it for my testing. The package compiles to a single binary named ratproxy.

The easiest way to get started is to use the recommended start up parameters. The -d parameter tells ratproxy to run tests only on URLs at the specified domain, so it won't accidentally test a site your application links to for images or advertising. The -v parameter tells it where to write trace files, and -w indicates where log records should be written. The log file is used to generate the detailed report.


 $ ./ratproxy -v /tmp/ -w ratlog.txt -d mydomain.com -lfscm
ratproxy version 1.51-beta by
[*] Proxy configured successfully. Have fun, and please do not be evil.
[+] Accepting connections on port 8080/tcp (local only)...

These start up parameters don't include ratproxy's optional disruptive testing mode. If you see the "Accepting connections" message, ratproxy is running locally and listening for connections from a Web browser on the default port of 8080.

The next step is to fire up a Web browser and configure it to connect to ratproxy at 127.0.0.1:8080. Then browse to your application and interact with it normally. Try all the features and visit all of your pages. While you are interacting with the application, ratproxy will observe and run tests. When you are finished with the application, you can close the browser and end ratproxy with Ctrl-C.

Reviewing the report

To create the HTML-formatted security report, run the included shell script against the log file:


$ ./ratproxy-report.sh ratlog.txt > report.html

The report.html file contains a list of all issues found sorted by type and severity. The first application I tested was a Ruby on Rails application written for benefits enrollment. The main issue ratproxy found in my application was "POST query with no XSRF protection," which points to a possible cross-site request forgery when updating certain information in the application. After spending some time analyzing the threat, I determined that the issue was mitigated somewhat because information can only be updated using an HTTP POST. Also, updated information must later be confirmed and reviewed by a third party.

On pages that use AJAX forms, ratproxy reported a medium severity issue, "MIME type mismatch on renderable file". There were also a set of informational messages revealing things going on in the application that were not obvious.

Next to each issue in the security report is a link to a trace file with the raw data for that transaction. Trace files contain verbose information on each HTTP request and response in plain text. They include cookies, header information, parameters, payloads, and more. Trace files let you see exactly what is happening between the browser and server. It's nearly as comprehensive as a TCP dump but much more readable.

Gunning for Geeklog and Google

The second test I ran was on the PHP-based Geeklog content management system. I chose it because it has a good reputation for security and, since I use it to run my own site, I had a ready target. I logged into Geeklog on my site and performed several admin functions. The resulting report showed one high severity issue, "POST query with no XSRF protection," and a few medium severity issues, including "Suspicious parameter passing scheme." Interestingly, it also flagged links to Google ads as a low severity issue -- "References to external active content." None of the issues appeared particularly alarming.

As a final test, I pointed ratproxy at google.com, logged in, and added a few widgets to my iGoogle home page. I also changed the theme and moved a couple of things around. This was enough activity to generate 43 trace files and a hefty report. The screenshot shows a snippet of the report.



The security report from the iGoogle test produced three different kinds of high severity issues and a handful of medium severity issues. I didn't attempt to decode the report or verify that any of the issues were exploitable, but I was impressed with the thoroughness of it. Ratproxy pulls no punches and plays no favorites.

At this time, ratproxy is still in beta, and the README file warns that some issues may be false positives. Still, testing modern Web applications for security issues is a difficult task. Ratproxy requires a minimal time investment, and the documentation is quite good. It even provides links to several other Web audit tools to help you secure your applications. I found ratproxy to be a stable, highly valuable, and easy-to-use tool.




Technorati Tags:

Saturday, June 21, 2008

Inexpensive ways you can market your service or business on the Web

Well many times I face this question that just making a website isnt the only thing..For it to be successful it requires marketing just like for any other thing ...But the main thing is how to market ur website so that u can get max number of users to your website..

Below there r few ways of doing marketing for ur website - online..and they r very affordable methods which is another thing to be kept in mind for a new business..since they have less budget..


Every time I used to mention only few points since i couldnt remember all of them..And then i came across the article on powerhousebiz which made me write this blog today

So there are a number of inexpensive ways you can market your service or business on the Web, and here are eleven of them:

1. Network. Have you ever received an email from a friend asking you to send that email to 10 more of your friends? If you pass along emails to other people in your address list ­ whether it is a virus alert, crime alert, urban legends or even chain letters ­ you can use this strategy to promote your business. Tell your family, relatives and friends about your new online venture, then ask them to spread the word to their friends. In your email, describe to them your new site and how it will be of use to them. Hopefully, your email will be passed on to many more of your friends’ friends. This will help get the word out about your site. Don’t forget to ask for their comments and suggestions on how to improve your site.

2. Viral Marketing. Another form of effective word-of-mouth strategy on the Web is through viral marketing. Hotmail and Bluemountain.com became valuable properties on the Web as a result of clever use of this strategy. Emails from Hotmail and e-cards from BlueMountain always comes with a footer message that describes the company, resulting in multiplier effect in terms of brand awareness.

Another way of utilizing viral marketing for your site is through referrals. If you are offering content or service, you can put up a “Tell a Friend” button that lets customers recommend products or Web pages via email to friends. Recommend-It and BigNoseBird.com are some of the sites that offer these services for free. These services allow you to keep track of those who recommend your site and the people they recommend it to.

3. Start a newsletter to keep 'em coming back. Newsletters and e-zines have become valuable tools in building loyalty and repeat visitors to a site. You can choose to develop the content of your newsletter, or use articles provided by other authors. Build your mailing list as you go along, but never send unsolicited emails. Spam is simply not worth it. You may start with 10 subscribers in your 1st two months, but you can grow to a thousand in a year depending on your traffic levels and promotion efforts.

4. Print flyers for distribution in your neighborhood. While the Internet is global in its reach, you can start promoting your site locally. Prepare fliers about your site, making sure that its lay-out does not scream: "I am a cheapo!!" Go to your neighbors whom you think might be interested in what you have to offer. If going door-to-door is not your style, post your fliers in your neighborhood grocery stores, public libraries (if they allow you), fast-food eateries, and even your local churches. Some even go to the mall to distribute flyers, while others leave their flyers in the cars in the parking lot.

5. Send out Press Releases to as many newspapers, local or national media that you can think of. If worked properly, the media can provide you with the publicity boost that your business needs. Send out a press release about your site’s launching, highlighting the features that makes your site different from all the rest. If you have an interesting and unique business model, describe it in your release. Tie-up your launching with a local event, or sponsor a contest. There are many ways of using the media; you just have to know how to use it.

6. Print business cards, with your website URL on it. A well-designed card is the mirror of your site. Give one to everyone you know. You may also want to take a look at web cards, or postcards with your web site’s screenshot. Instead of sending traditional Easter or Christmas cards, try them out.

7. Talk about your website whenever you have the opportunity to meet new acquaintances. You are the best promoter of your business. Take every opportunity to network and participate in local organizations. Tell your friends in the Sunday choir that you have a web site. Ask your peers in your ToastMasters club to check out your site. If you are riding the subway and are seated beside a person reading a book on how to make money, give him or her your business card.

8. Submit your site to the search engines and directories. Be patient though; as most search engines take about 2-3 months to list a site. You don't have to use a submission service as you can pretty much do it yourself. Yahoo now charges $199, but it is definitely worth it. LookSmart also charges listing fee, but they provide smaller traffic compared to Yahoo. Evaluate pay-per-click sites like Overture, where you can bid for keywords and pay for every traffic that it brings your site.

9. Participate in discussion forums. A lot of websites provide message boards to attract traffic. You can post messages and invitation to your site in these message boards. Participate in the discussion, always ending your posts with your signature file. There are also business chat rooms where you can introduce your website to anyone in your product line. Carefully read the guidelines and don’t spam lest you be banned from participating in future discussions.

10. Write articles and establish yourself as an expert in your field. Make sure to provide a brief description about you and your site. Read the guidelines of the site before submitting your articles. If you have developed a wide body of content, and regularly produce new articles or write-ups, you can even earn from them through syndication.

11. Never forget opportunities to promote your site offline. These can range from simple things such as putting a car sticker with your URL on it (make sure it is big enough for other commuters to see) to writing a book or regular column in a newspaper.

All these will be enough to keep you busy 16 hours a day and may never end as long as you are on the Internet. You should always be looking for new areas where you can promote your site with minimal expenses.

Technorati Tags:

Sunday, June 15, 2008

SEO - What is Google PageRank and Why You Should Care About It

Well this specific post is some what different from the general topics that I cover on this blog. But the thing is that recently I have launched my website www.dhavalparikh.co.in and so the idea came after I hosted it...

First of all whenever a site is launched the main thing is that it should be known to the public...U dont want to restrict just to ur group but u want that ur website should be seen by more and more people. So wats the way out..Well ofcourse the first thing that comes to mind is SEO.

For any site to actually succeed you require to do SEO for that site ... and the first step for that it getting it listed on major search engines...And thats wat I did and I was lucky to get my site listed on the search engines with good ranks.. On yahoo is u search for Dhaval Parikh as a keyword u will get my site listed first.. and on google if you see with the same keyword it comes 4th so its good for me @ the initial level...I did that by trying some of the basics in SEO such as Sitemaps, Meta tags and so on..

After that comes page rank..Google Page rank is now a days becoming popular bcoz it decided the value of the site. I wanted to get a better google page rank and I m still finding out methods to get better page rank for my site...

While doing research for it I found this little article which will actually help u to know what is google page rank and how its useful and also its importance

If you have a new website and you want people to visit it, then you are probably going to be interested in learning about PageRank. So what is Google PageRank, and why does it matter? Well pretty much, PageRank is what the search site Google uses to determine the quality and popularity of a webpage. Thus, it really is choosing if the site will appear at the top of the search engines results. So if you want your site to come up in search results, then you should care about what PageRank things about your site!

When PageRank first came out, it usually ranked the sites with the highest keyword density at first.
During that period someone with basic seo skills was able to get a website in the top 10 results without to much hassle. People were using that weakness to rank their sites higher. Now that time is over and in order to get in the top 10 results on google you have to work harder and build a lot of back links to keep your head out of the water and generate some google organic traffic from google.

So how does Google PageRank rank your website now? Well, in theory, Google thinks that if a page has a lot of links leading to it, then it must be a pretty important site. Thus, if you have a lot of links out there on other sites leading back to your website, it is going to do wonders for your search engine ranking. In fact, you can think of a link on another site kind of like a vote for your site. So, say website A has a link to website B; then it would be like website A was voting for website B! Of course, it does not just stop there. Sites that have a higher ranking have more weight when voting. Thus, if you are linked to a lot of small, low ranked sites and then another site is just linked to one high ranked site, they could be ranked above you.

Of course, with any system there are flaws. People tend to post their links anywhere to try and get their ranking up. In fact, if you have ever come across a web page that has nothing except a ton of links on it, then you just uncovered a link farm. This is a site that is made to not be found by people. The only things that usually find this page are the Google Crawlers. Thus, they find the links and count it as a vote for another site. However getting your link on a link farm does not count as a positive vote for your web site. Keep in mind that all links are not created equal! Link farms are considered spamming by Google so try to stay away from link farms. In fact, getting your links to several link farms websites may get you banned from some search engines and especially Google.


Hope you njoied the article..You can post comments below and let others know about this article also.

Dhaval Parikh
Software Engineer
Ruby on Rails
www.dhavalparikh.co.in
Technorati Tags:

Saturday, June 14, 2008

Apple launches Web 2.0 infrastructure: MobileMe

At the WWDC on Monday, Apple announced the next evolution of its .Mac service, MobileMe. A cloud storage solution that handles e-mail, calendar items, contacts, photos, and other documents, it will arguably compete with Microsoft's Live Mesh, as well as several other data synchronization start-ups like SugarSync (download).

MobileMe will replace Apple's consumer Web site service, .Mac, and adds to that service additional storage (.Mac's 10GB gos to MobileMe's 20GB), plus support for the new iPhone and for Windows PCs.

The big pitch for the new service is its synchronization capabilities. E-mail to your MobileMe account will be pushed to your phone. Photos you take on your phone can be automatically uploaded to your Web-based MobileMe account and shared with your friends.

The concept is that the iPhone becomes just one way to view your data and your community. If you're in front of a full-screen Web browser or sitting at your Mac or Windows desktop, you might prefer to use one of those larger interfaces instead, but with MobileMe, everything you do will be updated to your iPhone immediately.

The service is being pitched as "Exchange for the rest of us," referencing Microsoft's corporate e-mail solution that offers excellent shared calendar features and e-mail and contact sync across devices and the Web. These are features everyone deserves, and Microsoft has been late, to say the least, at offering this kind of service to consumers.

There's no indication that MobileMe will be open to developers, although we assume not. It was launched at Apple's developers' conference and if it were open we would have heard it there.

Apple's current .Mac accounts will upgraded to MobileMe automatically when the service becomes available in July. A 60-day free trial will be available. The service will cost $99 a year after that from Apple. It looks like you can sign up for .Mac on Amazon.com right now for $69, though, and get the auto-upgrade in a month. Might be worth a shot if you want to save $30.

Update: Apple has posted a Guided Tour of MobileMe.
Technorati Tags:

Apple launches Web 2.0 infrastructure: MobileMe

At the WWDC on Monday, Apple announced the next evolution of its .Mac service, MobileMe. A cloud storage solution that handles e-mail, calendar items, contacts, photos, and other documents, it will arguably compete with Microsoft's Live Mesh, as well as several other data synchronization start-ups like SugarSync (download).

MobileMe will replace Apple's consumer Web site service, .Mac, and adds to that service additional storage (.Mac's 10GB gos to MobileMe's 20GB), plus support for the new iPhone and for Windows PCs.

The big pitch for the new service is its synchronization capabilities. E-mail to your MobileMe account will be pushed to your phone. Photos you take on your phone can be automatically uploaded to your Web-based MobileMe account and shared with your friends.

The concept is that the iPhone becomes just one way to view your data and your community. If you're in front of a full-screen Web browser or sitting at your Mac or Windows desktop, you might prefer to use one of those larger interfaces instead, but with MobileMe, everything you do will be updated to your iPhone immediately.

The service is being pitched as "Exchange for the rest of us," referencing Microsoft's corporate e-mail solution that offers excellent shared calendar features and e-mail and contact sync across devices and the Web. These are features everyone deserves, and Microsoft has been late, to say the least, at offering this kind of service to consumers.

There's no indication that MobileMe will be open to developers, although we assume not. It was launched at Apple's developers' conference and if it were open we would have heard it there.

Apple's current .Mac accounts will upgraded to MobileMe automatically when the service becomes available in July. A 60-day free trial will be available. The service will cost $99 a year after that from Apple. It looks like you can sign up for .Mac on Amazon.com right now for $69, though, and get the auto-upgrade in a month. Might be worth a shot if you want to save $30.

Update: Apple has posted a Guided Tour of MobileMe.
Technorati Tags:

Saturday, May 31, 2008

Yahoo gets more social with new Messenger 9 beta

You can't take it with you, at least when it comes to your social graph.

But with a new beta version of Yahoo Messenger 9 software released Thursday, users have new options for reconstructing networks of friends and contacts they've built elsewhere.

The new beta of Yahoo Messenger 9 can help user invite contacts on AOL, Google's Gmail and Orkut, Microsoft's Hotmail, MySpace, and other online services to connect through the Yahoo service. Version 9 also includes a special group of all people in your Yahoo address book, helping to connect with contacts users may have stored elsewhere within Yahoo itself.

Also tying more deeply into the rest of Yahoo, the new beta can be used to reflect some other activities within the network--for example, when somebody spotlights a Web site of interest using Yahoo Buzz.

"We'll add more types of updates in the future," said product manager Sarah Bacon in a blog posting about the new beta.

Yahoo Messenger 9 is intended for use on Windows XP, in contrast to the more obviously named Yahoo Messenger for Vista. The final version of the Yahoo Messenger 9 is due in the third quarter, Yahoo said. The Mac equivalent is scheduled to be released by the end of the year.


Also new in the beta is a better interface for setting status messages--even if you're away from your IM software, Yahoo said. And links to games present in Yahoo Messenger 8 has made its way to version 9, so users can play pool, checkers, and others. However, only those with version 8.1 or later can play games with those using the version 9 beta, Yahoo said.

Yahoo Messenger's icon, a frighteningly happy face, reflects the fact that people have a whole section of their brains just for processing facial information. Yahoo is tapping into that visual cortex a little more directly with the new beta, which uses larger emoticons.

For further information, check Yahoo's blog about the new beta or a Messenger 9 beta demo video.

Originally posted at News Blog


Technorati Tags:
account login for free hit counter html code