How to access the files when Windows is damage

 You Need

• An optical drive (CD,DVD or Blu-Ray) drive on the computer you wish to repair.
• An burning capable optical drive on your working computer.
• The Imgburn program (free).
• A blank CD,DVD or Blu-ray, to which we will burn data.
• A Ubuntu Linux ISO that you can download at: http://www.ubuntu.com/desktop/get-ubuntu/download

First step: setting up our Bootable media

Notice the last download: A huge *.iso file. Iso files contain CD-ROM data, that can be burned or mounted. This particular file has the Ubuntu Installer and the Ubuntu Live CD. We are interested with the live CD, because it will permit us to access our files through the Linux interface without needing to install anything. and risking damaging Windows even more.
What you will want to do is to burn this data to a CD-ROM using Imgburn. Open up the program, and select the *.iso file, then burn the disk. 

Second step: booting from the live CD

Now we have our CD. Insert it in the damaged computer's drive, and restart it. When the computer will open, you will have several options in the first seconds of the boot process. These will be like "press f2 for boot menu" or "delete=setup", stuff like that. The command we are interested in is the one that will let you access the boot menu, also called startup menu.
Once you got to the boot menu, tell the computer to boot from your disk.  

Final step: Retrieve your data

The disc will boot, usually in a few minutes. Then, you will be prompted to choose from a variety of options: choose "live cd".
Note: Some distributions will not ask you to boot from the Live CD but might automatically do so, and then give you the option to install it.
Give the software time to load, and you should now be able to navigate your files as if you had Linux installed. So plug in a removable drive, and start extracting your information!

Source : .informatics-tech

Social Engineering And Its Basic Techniques

 Social Engineering is the art of manipulating people into performing actions or divulging confidential information. While it is similar to a confidence trick or simple fraud, it is typically trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victims.

         Each Social Engineering attacks are different and unique but they do have some common pattern. That pattern has four phases (Information Gathering, Relationship Development, Exploitation and Execution). Social Engineering attack and/or may even incorporate the use of other more traditional attack techniques to achieve the desired end result.

Techniques of Social Engineering

Gathering and Using Information

When it comes right down to it the key to being a successful social engineer is information gathering. The more information you have about your mark the more likely you are to get what you want from him or her, obviously. Good places to gather this info:

1. Parking lot - Cars that are unlocked (or are easily unlocked) might have security badges, uniforms, paperwork, smart phones, wallets, all sorts of goodies you can use.

2. Online site like Linked In, Google, Facebook, MySpace, etc.

3. Things in their workspace area (posters, pictures, books, etc.)

4. Asking their friends and colleagues. Pretend to be a manager from another office or branch.

5. Tail them home or to their favorite watering hole. Try to figure out their patterns, interests, places they frequent. These are all good data points you can use to help make a personal connection to the mark.

6. Dumpster diving - Sure going through their trash is nasty but the gems that will be there are invaluable.

Pretexting

Pretexting is the act of creating and using an invented scenario (the pretext) to engage a targeted victim in a manner that increases the chance the victim will divulge information or perform actions that would be unlikely in ordinary circumstances.

This technique can be used to fool a business into disclosing customer information as well as by private investigators to obtain telephone records, utility records, banking records and other information directly from company service representatives. The information can then be used to establish even greater legitimacy under tougher questioning with a manager, e.g., to make account changes, get specific balances, etc.

Phishing

Phishing is a technique of fraudulently obtaining private information. Typically, the Phisher sends an e-mail that appears to come from a legitimate business—a bank, or credit card company—requesting "verification" of information and warning of some dire consequence if it is not provided. The e-mail usually contains a link to a fraudulent web page that seems legitimate—with company logos and content—and has a form requesting everything from a home address to an ATM card's PIN.

IVR or phone phishing

This technique uses a rogue interactive voice response (IVR) system to recreate a legitimate-sounding copy of a bank or other institution's IVR system. The victim is prompted (typically via a phishing e-mail) to call in to the "bank" via a (ideally toll free) number provided in order to "verify" information. A typical system will reject log-ins continually, ensuring the victim enters PINs or passwords multiple times, often disclosing several different passwords. More advanced systems transfer the victim to the attacker posing as a customer service agent for further questioning.

One could even record the typical commands ("Press one to change your password, press two to speak to customer service" ...) and play back the direction manually in real time, giving the appearance of being an IVR without the expense.

Phone phishing is also called vishing.

Quid pro quo

Quid pro quo means something for something. An attacker calls random numbers at a company claiming to be calling back from technical support. Eventually they will hit someone with a legitimate problem, grateful that someone is calling back to help them. The attacker will "help" solve the problem and in the process have the user type commands that give the attacker access or launch malware.

Command line hack for the local server

 To use the command line hacks, you might need to run them from another server if your local operating system doesn't include the commands. You will also need to make sure that you are logged onto that server with an administrative account. The easiest way to do that is just map a drive (you don’t have to use a drive letter unless you choose to)

net use /user:[username] \\servername\share

Here’s a command line hack that you can use to figure out what sessions are connected to the server. Note that you could substitute the IP address for the server name.

query session /server:servername

Sample output:

 

Now we know that the session ID of the offending session is 2. We can use that in the next step, which is using the reset command to log off that user.

reset session [ID] /server:servername

Sample output:

This command won’t display any output, but when we run the query command again, we should see that the session has now been disconnected:

Facebook is testing out a new button

  

It seems like Facebook is just testing out a whole bunch of new features, and it doesn’t look like it has any intention of stopping anytime soon. Today, it was discovered that Facebook is testing out a new button on the desktop version of its service. The new button appears on the top right of your Facebook page, right next to your profile link. The button pops up the “How are you feeling” post-a-status screen.
The button was first discovered by Mashable’s Alex Fitzpatrick. The button appears to be rolling out to a small test group, and it’s still up in the air about whether or not this button will be rolled out to the rest of Facebook’s users. It allows users to update their status no matter which page they’re on. So if you’re on your friend’s Facebook page, and you just thought of something you want to send to the entirety of your Facebook friends list, you can just click the button to update your status.

Many people are speculating that Facebook is borrowing its features from Twitter. The button looks awfully similar to Twitter’s “Compose a tweet” button, especially with the pop-up button over a faded background. Facebook also renamed its “subscribers” to “followers”, and is planning on implementing a hashtag feature in its service soon, a feature that was popularized by Twitter.

Alongside the upcoming addition of the “post-a-status” button, Facebook has also added an update to Facebook Events. Event planners, as well as event attendees, will now be able to see the weather conditions for their upcoming events. Facebook is also rolling out a new feature to Facebook Pages that organizes comments in more simple, threaded conversations. Facebook has been constantly testing out new features this month, so it’ll be interesting what else will pop out in the next few days.
[via Mashable]

Story Timeline

• Facebook implements conversation threads into Pages
• Facebook brings ads straight to your newsfeed
• Facebook game developers made $2.8B in 2012
• Facebook improves mobile app install ads for developers
• Facebook says paying gamers surge by 24%
• Facebook event to reveal 'real' Android app (not a phone)
• HTC 'Facebook phone' Android software integration tipped
• Facebook gets approval to build a low-key second campus

Facebook is testing out a new button is written by Brian Sin & originally posted on SlashGear.