Introduction

Cross Site Request Forgery (CSRF) is an attack where the attacker use the victim to execute his planned attack using the legitimate URL and the hosted website which looks same as the original site. This attack is done by tricking the user to perform unauthorized POST/GET arbitrary HTTP requests on behalf of the user who is currently authenticated to a particular website.This attack is also known as “Session Riding” or “One Click Attack”.

Prevention from this attack is possible. There are two main security pattern we can implement to prevent CSRF attack. Before looking into prevention let me explain CSRF with an example.

Example

Although there are many ways to trick the victim into loading information from web application or to submit information, the first step to execute this attack is to understand the selected web application and to generate a valid malicious request to execute.

Scenario: Alex transfer money to Greta using a web application which is vulnerable to CSRF. Chloe wants to trick Alex and transfer the money to her account.

Here, we need to understand what requests is used to transfer the parameters and execute the actions (GET or POST).

GET Method :

http://hamana.com/transfer.do?acct=Greta&amount=250 HTTP/1.1

the above request is similar to a money transfer request. Here what Chloe does is take the original command URL and transfer the amount to her account by changing the beneficiary name as follow.

http://hamana.com/transfer.do?acct=Chloe&amount=3000

The above mentioned exploit URL can be attached as link which makes the victim click it or as a fake image.

Post Method:

If the bank uses POST request then the above request cannot be executed instead it can be delivered using a FORM tag. This form will need the user to click on the submit button by executing Javascript “onload” function.

I hope it is clear to you on “How CSRF attack works”. Let’s see the prevention methods of CSRF in the upcoming blog post.

Being a college student I know how hectic a lecture could be, Our intension of being in the lecture is to grab all the important points the lecturer say.

The most easiest way is recording, we record the lecture via a smart phone or using a recorder else, we transcribe everything we hear using a laptop or smart phone in digital notebooks. Isn’t it amazing? The way technology is helping us.

What about you? Are you using the same technique I have mentioned above? Just because you use your smartphone to take down notes it doesn’t mean you are working smarter. You are making your learning process harder.

Electronic devices such as laptops, smartphones are common in lecture hall world widely. These devices has high tendency to distract the students during the lecture — students tend to click on messages, notifications from social media during a boring lecture to make their dull sessions interesting.

Students tend to take digital notes and end up taking verbatim notes in their devices. Taking down notes using pen and paper is considered as old-fashioned way, but it turns out to give more advantages than typing your notes faster.

Studies show how effectively a student can remember what they have learnt in their lectures when they write down their notes instead of typing them.Responses of students who type their notes is less than the student who take down notes by writing when a question is asked regarding their study material.

Those who take down notes digitally, put extra effort to remember what they have studied where they could have used that time to study on furthermore deeply about the module.

Sometimes being old-fashioned helps us better than the technological devices.

I asked my sister “What is being beautiful?”, First thing she said was ‘Slim figure, perfect bust and butt shape for women and six packs, muscular body, visible jawline for men.’ , ‘Big eyes, small and cute nose, pink lips, clean, acne free face.’

I travel a lot, I have quite a big friends circle but many aren’t like the way she mentioned, but they are trying to be like the definition she gave. If you think the same, Welcome to the world of madness. The definition what you think of being beautiful is completely wrong.

Every individual tend to reduce weight by quiting meals in the name of ‘dieting’ , apply day and night cream in the name of ‘becoming beautiful’ . We forget, that each and everyone of us are beautiful in our own way.

What are we trying to hide? If a person couldn’t love you for the way who you are right now, how could you expect it to be true love? Beautiful isn’t something about outer appearance, it’s all about inner beauty.

If you are with acne free face, long blonde hair, perfect body and your heart isn’t kind enough to show love to others, don’t even consider yourself close to being beautiful. That’s not what being beautiful is all about.

Elegance and simplicity combined with kind-heart is the real beautifulness every man and woman seek for. Try to build your inner beauty than your physical appearance.

Think and Change :

Which suits you better, inner beauty or physical appearance?

We live in the world where everything has been changed due to modern culture and technological evolution. We often tend to change ourselves and adapt the changes. The question here is, “Have we evolved from everything and adapt the changes?”

Do you have any idea what citizens of various country do everyday without hesitation? Some would say “eating”and many would say “sleeping”. take a break and think twice.

The only thing we do without any hesitation is to complain. Most of the time even without us being aware of it. This habit has been with us since childhood, I know quite few people won’t accept this statement but this is the truth. Let me cherish one of your moment in your life when you were young.

Your sibling would have eaten your favourite dessert which your mother had kept for you. Did you forgive your sibling when you got to know this? Be honest, None of us would have forgiven our sibling instead we would have gone to our mom and complained about this act of our sibling.

Habits don’t fade away easily, people try to change their habits but only some changes it.

Is it even necessary to complain when you are indignant, low-spirited, frustrated? I’m not notifying “Never Complain”. Complain only in instances where you believe it will effect real and positive change.

Think and Change.

My last blog was about how people tend to hack us to get benefitted from us. How can we be on the safe side?

1. Think before your share – Most of us share our private life publicly when we are happy, sad, or angry Even sometimes,when we feel alone. During this we forget that, we give information to people we are familiar with and also, to unknown people. Remember, Information is valuable.
2. Log out from your social media accounts – This is the mistake all of us have neglected over past years. There is always a third person who would love to poke their nose in to our life and we give them a chance to look how fragile we are.
3. Don’t let a small attack break you easily – Build your system strong, Give tough game for the attacker to hack you, Out in the world, many systems (humans) break down for small attacks (problems).

Summing it up with the quote which always makes me stronger enough to conquer the day

“Your Ignorance is their Power”