User:Vachhani Dhruvit

Vachhani Dhruvit  (born 15 july 1998) is an Indian computer and social engineering student. He was studying or experiment about on anti hacking securities for social media accounts.(like: Instagram, Facebook, Twitter, Snapchat, Youtube, Email id, icloud id & apple id, etc.).

EARLY LIFE
Vachhani Dhruvit was born on 15 July 1998 in a Gujarati Patidar family to Babubhai  and Kanchanben  Vachhani. In 2002 his parents moved to surat, to give their children a better education. Dhruvit studied from Class VI to Class VIII at Akshar Jyoti high school (Yogi pravruti vidhyalaya) surat, before moving to Sree swaminarayan Gurukul vidhyalaya Ved road surat, where he studied until Class XII.

After completing Class XII, Dhruvit started helping his father, Babubhai, to run a business of diamond in vacation time up to 2-3 months.

In 3rd,August 2015 vachhani Dhruvit joined Vidhyadeep institute of engineering and technology, Kim,surat and earned a Computer engineering (B.E.) degree.

WORKING ON
Vachhani Dhruvit was observing the social media security and he changed the little issues of the common security, privacy, problem and protection. Now they where learn about how Normal public use the social media. Common people are use the social media not daily they are uses the social media 3-4 days in a week (irregular). So they don’t properly about the social media and it’s privacy. An Instagram, facbook , etc. that types of social media can provide us to Two phase authentication for better and safe login system means two phase authentication security system inwhich the password is almost important but second phase is that you entered your number on you receive the OTP (one time password) is that important and you can’t loging without entering the OTP (one time password). So, the two phase authentication security system is very easy but it is safe better than other common securities.

SECURITY HACKER
Social media security term; someone who hacks security systems.. A security hacker is someone who seeks to breach defenses and exploit weaknesses in a security system or social media network. Hackers may be motivated by a multitude of reasons, such as profit, protest, information gathering,[1] challenge, recreation,[2] or to evaluate system weaknesses to assist in formulating defenses against potential hackers. The subculture that has evolved around hackers is often referred to as the social media or any multipedia underground.[3]

Not to be confused with Hacker culture. There is a longstanding controversy about the term's true meaning. In this controversy, the term hacker is reclaimed by computer programmers who argue that it refers simply to someone with an advanced understanding of social media and social media network,[4] and that cracker is the more appropriate term for those who break into computers, whether computer criminal (black hats) or computer security expert (white hats).[5][6] A 2014 article concluded that "... the black-hat meaning still prevails among the general public".[7][tone]

__STATICREDIRECT__

__DISAMBIG__

Types of social media’s hacker
 White hat: 

Main article: White hat A white hat hacker breaks security for non-malicious reasons, either to test their own security system, perform penetration tests or vulnerability assessments for a client - or while working for a security company which makes security software. The term is generally synonymous with ethical hacker, and the EC-Council,[1] among others, have developed certifications, courseware, classes, and online training covering the diverse arena of ethical hacking.[2]

 Black hat: 

Main article: Black hat A "black hat" hacker is a hacker who "violates computer security for little reason beyond maliciousness or for personal gain" (Moore, 2005).[3] The term was coined by Richard Stallman, to contrast the maliciousness of a criminal hacker versus the spirit of playfulness and exploration in hacker culture, or the ethos of the white hat hacker who performs hacking duties to identify places to repair or as a means of legitimate employment.[4] Black hat hackers form the stereotypical, illegal hacking groups often portrayed in popular culture, and are "the epitome of all that the public fears in a computer criminal".[5]

 Grey hat: 

Main article: Grey hat A grey hat hacker lies between a black hat and a white hat hacker. A grey hat hacker may surf the Internet and hack into a computer system for the sole purpose of notifying the administrator that their system has a security defect, for example. They may then offer to correct the defect for a fee.[6] Grey hat hackers sometimes find the defect of a system and publish the facts to the world instead of a group of people. Even though grey hat hackers may not necessarily perform hacking for their personal gain, unauthorized access to a system can be considered illegal and unethical.

 Elite hacker: 

A social status among hackers, elite is used to describe the most skilled. Newly discovered exploits circulate among these hackers. Elite groups such as Masters of Deception conferred a kind of credibility on their members.[7]

 Script kiddie: 

A script kiddie (also known as a skid or skiddie) is an unskilled hacker who breaks into computer systems by using automated tools written by others (usually by other black hat hackers), hence the term script (i.e. a prearranged plan or set of activities) kiddie (i.e. kid, child—an individual lacking knowledge and experience, immature),[8] usually with little understanding of the underlying concept.

 Neophyte:

A neophyte ("newbie", or "noob") is someone who is new to hacking or phreaking and has almost no knowledge or experience of the workings of technology and hacking.[9]

 Blue hat:

A blue hat hacker is someone outside computer security consulting firms who is used to bug-test a system prior to its launch, looking for exploits so they can be closed. Microsoft also uses the term BlueHat to represent a series of security briefing events.[10][11][12]

 Hacktivist: 

A hacktivist is a hacker who utilizes technology to publicize a social, ideological, religious or political message.

 Hacktivism can be divided into two main groups: 

 Cyberterrorism  — Activities involving website defacement or denial-of-service attacks; and,

 Freedom of information  — Making information that is not public, or is public in non-machine-readable formats, accessible to the public.

 Nation state:  Intelligence agencies and cyberwarfare operatives of nation states.[13]

 Organized criminal gangs:  Groups of hackers that carry out organized criminal activities for profit.[14]

Security exploits
 Security exploits: 

Main article: Exploit (computer security) A security exploit is a prepared application that takes advantage of a known weakness.[29] Common examples of security exploits are SQL injection, cross-site scripting and cross-site request forgery which abuse security holes that may result from substandard programming practice. Other exploits would be able to be used through File Transfer Protocol (FTP), Hypertext Transfer Protocol (HTTP), PHP, SSH, Telnet and some Web pages. These are very common in Web site and Web domain hacking.

Techniques
 Vulnerability scanner:  A vulnerability scanner is a tool used to quickly check computers on a network for known weaknesses. Hackers also commonly use port scanners. These check to see which ports on a specified computer are "open" or available to access the computer, and sometimes will detect what program or service is listening on that port, and its version number. (Firewalls defend computers from intruders by limiting access to ports and machines, but they can still be circumvented.)

 Finding vulnerabilities:  Hackers may also attempt to find vulnerabilities manually. A common approach is to search for possible vulnerabilities in the code of the computer system then test them, sometimes reverse engineering the software if the code is not provided.

 Brute-force attack:  Password guessing. This method is very fast when used to check all short passwords, but for longer passwords other methods such as the dictionary attack are used, because of the time a brute-force search takes.

 Password cracking:  Password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system. Common approaches include repeatedly trying guesses for the password, trying the most common passwords by hand, and repeatedly trying passwords from a "dictionary", or a text file with many passwords.

 Packet analyzer:  A packet analyzer ("packet sniffer") is an application that captures data packets, which can be used to capture passwords and other data in transit over the network.

 Spoofing attack (phishing):  A spoofing attack involves one program, system or website that successfully masquerades as another by falsifying data and is thereby treated as a trusted system by a user or another program — usually to fool programs, systems or users into revealing confidential information, such as user names and passwords.

 Rootkit:  A rootkit is a program that uses low-level, hard-to-detect methods to subvert control of an operating system from its legitimate operators. Rootkits usually obscure their installation and attempt to prevent their removal through a subversion of standard system security. They may include replacements for system binaries, making it virtually impossible for them to be detected by checking process tables.

 Social engineering:  In the second stage of the targeting process, hackers often use Social engineering tactics to get enough information to access the network. They may contact the system administrator and pose as a user who cannot get access to his or her system. This technique is portrayed in the 1995 film Hackers, when protagonist Dade "Zero Cool" Murphy calls a somewhat clueless employee in charge of security at a television network. Posing as an accountant working for the same company, Dade tricks the employee into giving him the phone number of a modem so he can gain access to the company's computer system. Hackers who use this technique must have cool personalities, and be familiar with their target's security practices, in order to trick the system administrator into giving them information. In some cases, a help-desk employee with limited security experience will answer the phone and be relatively easy to trick. Another approach is for the hacker to pose as an angry supervisor, and when his/her authority is questioned, threaten to fire the help-desk worker. Social engineering is very effective, because users are the most vulnerable part of an organization. No security devices or programs can keep an organization safe if an employee reveals a password to an unauthorized person. Social engineering can be broken down into four sub-groups: Intimidation As in the "angry supervisor" technique above, the hacker convinces the person who answers the phone that their job is in danger unless they help them. At this point, many people accept that the hacker is a supervisor and give them the information they seek. Helpfulness The opposite of intimidation, helpfulness exploits many people's natural instinct to help others solve problems. Rather than acting angry, the hacker acts distressed and concerned. The help desk is the most vulnerable to this type of social engineering, as (a.) its general purpose is to help people; and (b.) it usually has the authority to change or reset passwords, which is exactly what the hacker wants. Name-dropping The hacker uses names of authorized users to convince the person who answers the phone that the hacker is a legitimate user him or herself. Some of these names, such as those of webpage owners or company officers, can easily be obtained online. Hackers have also been known to obtain names by examining discarded documents (so-called "dumpster diving"). Technical Using technology is also a way to get information. A hacker can send a fax or email to a legitimate user, seeking a response that contains vital information. The hacker may claim that he or she is involved in law enforcement and needs certain data for an investigation, or for record-keeping purposes. Trojan horses A Trojan horse is a program that seems to be doing one thing but is actually doing another. It can be used to set up a back door in a computer system, enabling the intruder to gain access later. (The name refers to the horse from the Trojan War, with the conceptually similar function of deceiving defenders into bringing an intruder into a protected area.)

 Computer virus:  A virus is a self-replicating program that spreads by inserting copies of itself into other executable code or documents. By doing this, it behaves similarly to a biological virus, which spreads by inserting itself into living cells. While some viruses are harmless or mere hoaxes, most are considered malicious.

 Computer worm:  Like a virus, a worm is also a self-replicating program. It differs from a virus in that (a.) it propagates through computer networks without user intervention; and (b.) does not need to attach itself to an existing program. Nonetheless, many people use the terms "virus" and "worm" interchangeably to describe any self-propagating program.

 Keystroke logging:  A keylogger is a tool designed to record ("log") every keystroke on an affected machine for later retrieval, usually to allow the user of this tool to gain access to confidential information typed on the affected machine. Some keyloggers use virus-, trojan-, and rootkit-like methods to conceal themselves. However, some of them are used for legitimate purposes, even to enhance computer security. For example, a business may maintain a keylogger on a computer used at a point of sale to detect evidence of employee fraud.

 Attack patterns:  Attack patterns are defined as series of repeatable steps that can be applied to simulate an attack against the security of a system. They can be used for testing purposes or locating potential vulnerabilities. They also provide, either physically or in reference, a common solution pattern for preventing a given attack.

 Tools and Procedures: 

A thorough examination of hacker tools and procedures may be found in Cengage Learning's E|CSA certification workbook.