Secure your facebook Account Using Advanced Feature

HTTPS security is being made available to Facebook users slowly, so though it might not be available to you now, it should appear soon. The option will exist as part of the advanced security features on Facebook.

Facebook announced that it is now offering users the ability to use encryption to protect their accounts from being compromised when they are interacting with the site, something security experts have been seeking for a while.  The site currently uses HTTPS (Hypertext Transfer Protocol Secure) when users log in with their passwords, but now everything a user does on the site will be encrypted if he turns the feature on, the company said in a blog post.

Enabling full-session HTTPS eliminates the ability for attackers to use tools like the Firefox plug-in called Firesheep to snoop on communications between a person's computer and the site's server over Wi-Fi.  "Starting today we'll provide you with the ability to experience Facebook entirely over HTTPS. You should consider enabling this option if you frequently use Facebook from public Internet access points found at coffee shops, airports, libraries, or schools," the post says. "The option will exist as part of our advanced security features, which you can find in the Account Security section of the Account Settings page." 

Using HTTPS may mean that some pages will take a little bit longer to load, and some third-party applications aren't currently supported, the company said. The option is rolling out over the next few weeks. "We hope to offer HTTPS as a default whenever you are using Facebook sometime in the future," the post says.
"Every user's Facebook page is unique and it's been complex pulling together all the different parts," said Facebook Chief Security Officer Joe Sullivan when asked what the time frame is to making HTTPS the default setting. "It's an interesting technical challenge for the company."

Here's how you can secure your Facebook account.
Log in to Facebook and click Account in the top right corner of the page.
• Select Account Settings and scroll down to Account Security.
• Click Change and check the box next to Secure Browsing.
• You can also view all account activity, so check back regularly to see if someone is accessing your account without your permission.


Source : - CNET

Android 2.3 Carries Security Bug , Google is trying to Fix

Android 2.3 has got another security hole with a bug which can get access to content in your microSD card. Earlier, we read about the SMS issues which encountered while using Gingerbread. These sms issues are still there as till now, no update is available which can fix the issues. Android Gingerbread is proving to be vulnerable to threats like the recently reported bug.

Xuxian Jiang, a researcher of University of North Carolina, states that the Gingerbread firmware has showed a bug which can possibly allow malicious websites and hackers to acquire access to your microSD card on the Android 2.3 device. The bug carries potential threats like allowing access to microSD can cause massive loss in various shapes like data theft. Jiang also added that vital content in microSD cards like banking information can not only be stolen but can also be forwarded to mysterious email accounts and websites using the very own internet services of your device. Jiang claimed that his finding can be verified with simply applying a JavaScript code and a little knowledge of Android would be helpful.

However, it is already pointed out that a similar threat (or bug) was once resolved in the earlier versions of Android. According to the researcher, the first fix that would come with the update from Google can be bypassed without difficulty. A major update would be handy in order to fix this for good. Nevertheless few precautions can still take you away from trouble including which is to avoid malicious links and software.
Google is quick in giving response and here we are! Google already has developed a fix for this issue and will be releasing the update (called the Android 2.3 maintenance update) very soon, said the spokesperson from Google. However the possible date of update release is not disclosed. So if you are among Android 2.3 users, be attentive to threats and stay away from malicious sites when surfing the web.