Dipesh's Blog

My favorite quotes!

Dipesh — Fri, 21 Oct 2011 14:17:20 +0000

‘If you win, you need not have to explain…If you lose, you should not be there to explain!’ – Adolf Hitler

Update to the latest timthumb.php file on your wordpress site

Dipesh — Sat, 27 Aug 2011 02:18:51 +0000

I came across a latest security vulnerability while working on my client’s wordpress website yesterday. Its the timthumb.php file, a script commonly used in WordPress’s (and other software’s) themes and plugins to resize images. The exploit allows an attacker to arbitrarily upload and create files and/or folders on your account, which can then be used for a number of malicious tasks, including but not limited to defacement, browser high-jacking and infection, data harvesting and more. After a site has been exploited, it may lead to becoming labeled a “Malicious Website” by Google or other security authorities.

Any timthumb.php file below version 1.35, but above version 1.09 is considered vulnerable, unless patched. To prevent being compromised, its advisable to update all instances of timthumb.php to version 2.0, or patch the existing vulnerable files. Note that patching the files requires more in-depth knowledge of the PHP scripting language.

The updated version of timthumb.php can be found here:

http://timthumb.googlecode.com/svn/trunk/timthumb.php

You can find additional information regarding the compromise can be found at the following two websites,

http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/
http://redleg-redleg.blogspot.com/2011/08/malware-hosted-newportalsecom.html

Happy Blogging

Type of customers whom you never gonna like working with

Dipesh — Fri, 01 Jul 2011 12:53:30 +0000

Everyday we deal with a lot of different type of clients and customers. Many of them give us praise, encourage and gives a sense of a positive feeling about the project or the person. I am writing today about the other set of customers who makes my life hell at office.

Read the article

6 Worst types of Customer and best ways to handle them

With Google+ taking on Facebook, what holds for Google’s own Orkut Platform?

Dipesh — Wed, 29 Jun 2011 02:39:48 +0000

Larry Page has made social networking a top priority since he took over as chief executive in April. With Google+, Google integrates its services into one common social platform. Much like facebook, Google+ will let you share photos, messages comments. There is also an option to organize contacts within groups.

When i logged in for the first time(you need to be invited as on June, 28. 2011), it felt like that Google has reproduced much of the features of Facebook like profile pictures and newsfeeds forming a central core while adding a Gtalk video chat functionality in addition.

Clearly this move is aimed towards bringing more visitors to Google who now spend more time on sites like Facebook and Twitter. Google has been behind many small game development companies across the world to integrate online games right into its social platform.

Google+ Features:

Circles – Allows users to share different forms of content with targeted group of friends
Hangouts – Live multi-user video group conferencing
Huddle – Group IM
Sparks – Connects individuals on the network to others with common interests.

The equation is simple: Social web + page views + engagement = Advertising dollars

and Google know this!

So what happens to Google’s acquired Social Networking Platform – Orkut?

Google bought Orkut in 2007, and it was partly successful in Asian countries to some extent. But Facebook is way ahead of Orkut in terms of Usability and User experience. Only time will tell what Google does with Orkut after launching the new social platform Google+.

Personally, i like competition when its healthy. But the question is People already have their social circles on sites like Facebook – thus creating another social circle becomes increasingly challenging when you now most of friends are on facebook!

People in Chennai still buy drinking water cans while Gov lure poor voters with TV and mixer grinders!

Dipesh — Thu, 14 Apr 2011 04:02:11 +0000

Before the elections, both local political parties in Tamilnadu are luring poor voters(the majority) with freebies like Television and mixer grinders!

The state has no proper sanitation and safe clean drinking water facility which is yet to be provided by the Government for many decades. Rather than luring voters with TVs, the political parties can do the bare minimum like safe drinking water for all and proper metro drainage facility.

These measures will go a long way and build back the trust in the government amid the scams and controversies.

Thinking of a self sustained IT office / campus

Dipesh — Fri, 24 Apr 2009 10:17:29 +0000

I have been dreaming to build a self sustained office in near future for my company. The whole idea is to have an energy efficient and self sustaining building which can take care of the electricity, water and all other amenities without taxing the nature and the environment. How do we build an office with minimum or no carbon footprint?

So, what’s do i need?

Area Needed: Minimum 2 acres
Location: It has to a place where ave temperature is low to moderate within India with good Air, Train, surface transport and medical facilities.
Its better if the area has engineering colleges or at least a vast talent pool within 100 kms.

Some of my thoughts:

Imagine the windows panes having solar panels for absorbing sunlight which is stored in batteries.
The location has to be in a hilly area, where the temperature is low to moderate to save on Air conditioning.
Our in-house data center will run on wind energy.
Rain water harvesting and water recycling is a must.
The building architecture needs to bring as much natural light as possible so that we can save power during day time.
May be, a part of the campus can also be used for cultivating essential veggies for supporting the canteen.

I welcome any other thoughts or ideas, please comment.