Showing posts with label OpenSource. Show all posts
Showing posts with label OpenSource. Show all posts

28 February 2012

Earn While Hack




Overview:
The contest will take place at the CanSecWest conference in Vancouver, British Columbia during the 7th, 8th, and 9th of March.


There will be 4 targets this year, the most popular browsers on the market:




Official Site Here 




Microsoft Internet Explorer

Apple Safari


Google Chrome


Mozilla Firefox

The targets will be running on the latest, fully patched version of either Windows 7 or Lion.


The contest will be point-based and the winners will be the top three point-holders at the end of the final day*. Any contestant who demonstrates a working 0day exploit against the latest version of the browser will be awarded 32 points. When the contest begins we will be announcing 2 vulnerabilities per target that were patched in recent years. The first contestant (or team) who is able to write an exploit for the announced vulnerabilities will be awarded 10, 9, or 8 points depending on the day the exploit is demonstrated.


Unlike last year, the browsers will be eligible for all attacks (and subsequent points) throughout the contest.


*No team or individual can win without having demonstrated at least 1 0day vulnerability.




Prizes:




The first place winner will receive a payment from Hewlett-Packard in the amount of $60,000 USD. Second place will be awarded $30,000 and third place, $15,000 USD. Additionally, the laptops themselves will be awarded as prizes to the winners at the end of the contest.


With regard to Chrome, Google is offering the following cash prizes:


Full Chrome pwn: uses only bugs in Chrome itself to gain full unsandboxed code execution. $20,000 USD per fully disjoint bug set.


Partial Chrome pwn: uses bugs in Chrome and bugs in the operating system to gain full unsandboxed code execution. $10,000 USD per fully disjoint bug set.


"Non-Chrome pwn": uses only OS bugs for the pwn. e.g. Windows kernel font parsing vulns, driver vulns, $0 USD (not eligible).




Technical Details:




0day Vulnerabilities:


The browsers and corresponding operating systems will be fully updated on first day of the contest. Contestants can request to demonstrate a vulnerability at any time during the offical CanSecWest conference hours. A successful compromise of a fully-patched browser will be worth 32 points.


Public Vulnerabilities:


The browsers will be installed on Windows XP (for Firefox, IE, and Chrome) and Snow Leopard (for Safari). That way, the only exploit mitigation that must be overcome is DEP (no ASLR). Also, we will not require a sandbox or protected mode escape for any of the public vulnerability exploits.


To get the competitors started, we will be distributing virtual machine images with the software installed on the proper operating system as well as a proof of concept trigger that will cause the browser to fault.


On the first day (March 7th) a successful compromise using one of the public vulnerabilities will be worth 10 points. On the second day (March 8th) such an attack will be worth 9 points. On the third day, 8 points. This decaying point structure is intended to reduce the likelihood of a tie.


The specific browser versions will be announced on the first day of the contest.


All vulnerabilities demonstrated will be subject to confirmation by the Pwn2Own judges before being officially recognized. This is intended to ensure that duplicate vulnerabilities are not utilized by multiple teams, as well as more complicated situations such as a vulnerability being used against a browser that includes Webkit, but may not be synced with the Webkit nightly trunk (not eligible).


For any inquiries, please visit the contact page.

26 February 2012

Whats New in Gnome 2.28

Gnome basically a desktop environment for Linux,Gnome desktop is now available for your downloading and compiling leisure (although for most of us, it's easier to wait for the next round of distro upgrades).




GNOME 2.28 is the latest version of the GNOME Desktop: a popular, multi-platform desktop environment for your computer. GNOME's focus is ease of use, stability, and first-class internationalization and accessibility support. GNOME is Free and Open Source Software and provides all of the common tools computer users expect of a modern computing environment, such as email, groupware, web browsing, file management, multimedia, and games. Furthermore, GNOME provides a flexible and powerful platform for software developers, both on the desktop and in mobile applications.


Download It Here





Supported languages:


Arabic
Assamese
Basque
Bengali
Bengali (India)
Brazilian Portuguese
Bulgarian
Catalan
Catalan (Valencian)
Chinese (China)
Chinese (Hong Kong)
Chinese (Taiwan)
Czech
Danish
Dutch
English (US, British, Canadian)
Estonian
Finnish
French
Galician
German
Greek
Gujarati
Hebrew
Hindi
Hungarian
Italian
Japanese
Kannada
Korean
Lithuanian
Macedonian
Malayalam
Marathi
Norwegian Bokmål
Norwegian Nynorsk
Oriya
Polish
Portuguese
Punjabi
Romanian
Russian
Serbian
Slovenian
Spanish
Swedish
Tamil
Telugu
Thai
Turkish
Ukrainian
Vietnamese


Now the Amazing new New gnome 3 is Coming Have Look






13 February 2012

Resources For Google summer of code 2012

Hi , Every Body Google summer of code is a Basically a plate form or a summer internship  program for student developers that are keen to work with google  and want to earn for the same , Here is list of some resources that i Had collected for  help how to get selected in gsoc 2012 etc go through them .




What is Open Source All info Here



About Google Summer of Code

Google Summer of Code is a global program that offers student developers stipends to write code for various open source software projects. We have worked with several open source, free software, and technology-related groups to identify and fund several projects over a three month period. Since its inception in 2005, the program has brought together over 6000 successful student participants and over 3000 mentors from over 100 countries worldwide, all for the love of code. Through Google Summer of Code, accepted student applicants are paired with a mentor or mentors from the participating projects, thus gaining exposure to real-world software development scenarios and the opportunity for employment in areas related to their academic pursuits. In turn, the participating projects are



Here is List of Resources For GSOC 2012 , that i had collected go through them , If you have more post Here below as comment..




Link to Main Site : Here
 http://www.google-melange.com/gsoc/homepage/google/gsoc2012


Top 5 Ways to get selected in gsoc 2012 
Here
http://baghdadi.olympe-network.com/TXT_blog/5_advices_to_get_your_proposal_accepted.lyx.html

Other one Important Advice 

http://code.google.com/p/google-summer-of-code/wiki/AdviceforStudents


and Here is Most Amazing one...
http://www.vaidikkapoor.info/2011/12/gsoc-2012/

Here is another good one , and
DownLoad slide tut   Here