Sleeping that night... That's the night I'll never forget for the rest of my life. It was 10:00 pm. She usually comes back around 8:00 pm from college. Not today. It was 11:30 now. Still not home. I left my house on an Activa along with my father, on a search for her. Mamma was home alone crying, bawling her brains out. We live in India, we don't tell people such problems and ask them for their help, cus "honor". Searched every place I could, asked people if they saw this girl anywhere, showing them her beautiful smile on dad's phone. No luck! Came back home at 1:30 without her. I couldn't see my mom cry anymore. I tried to shut my ears, couldn't. At 3:00, a friend of her texted saying she must have been at this resort 50 kms from home. Dad and I took the car, reached that place, but turns out you need a boat to get to the resort. And the boat service starts only at 5:00 in the morning. If you need to go there NOW, you have to take a detour and travel another 50 kms to get to the other side.Another 90 minutes, we reached that resort. It's a very remote place. The guard didn't let us in. They don't take guests after 9:00 pm, he said. No luck. Came back home, mommy was quiet. Mommy always scolded her daughter about things. But she always bought the costliest shit for her. I told them we need to inform the cops, mamma strictly said "NO!". That's the end of that discussion. Dad said, let's just go to sleep and fell on the bed. Mom was sitting on the edge. All of a sudden as I put the lights out, mamma started crying so loudly dad had to calm her down. She cried ALL night. It was 5:30 in the morning when we came home. Now it was 6:00. My mom was weeping slowly with her eyes against my dad's chest, while she laid her head on his shoulder. I could hear it ALL. That night I preferred to sleep right next to them. I had a lump in throat. I couldn't even recall the last time I had a lump this big. I realised that no matter how much we fight over stupid shit, I loved her WAY more than I thought I hated her. You'll never know what it feels like when you have no whereabouts of your sister. You'll never know how heavy your heart feels like until you know there's supposed to be another person in this house at this time of the day, but isn't. I tried to sleep with the lump still there. I don't know what happened next. I tried to think of every good thing in my life, but nothing popped up, nevertheless, between my mom's sobs and my dad's comforting words to her, I somehow managed to drift into sleep. At 7:00 dad's phone rang, I was in fact sleeping, but somewhere deep in my mind, something hit me like a hammer and compelled me to wake up and pick the damn phone!!! "Hello" "Hello!, Am I speaking to Mr..." "Yes! What is it?" "We have a patient here, she was unconscious, we couldn't find any contact until now, thankfully we got this number just a few minutes back. Do you know Sneha?" "YES!," "WHAT HAPPENED?" "Nothing. She happened to pass out near.... She's alright now, asleep." "WHICH HOSPITAL IS IT?" "....XYZ" Me and my dad hustled out of my house, while I grabbed the keys to the Activa. Got in the elevator, I cursed it for taking so long to reach down 23 floors. Dad rode it while I sat back. We were on our way to meet my sister. Only I know what thoughts were in my mind all that night. Every least possible thing seemed too probable to happen. And I mean EVERY possible thing. There was a moment when I wished to just want her back. Just Back ALIVE seemed satisfying. Am not good with emotions. My dad did shed a tear or a couple that night. Not me. But now when we were on our way to the hospital, feeling the cold wind passing through my hair lines, imagining what'd happen if we didn't hear anything from anybody about her even today, I broke down. I broke down but only before I made sure nobody was looking. Of course nobody was looking, it was 7:20, my dad was driving, I was behind him. I broke the lump in my throat and let a single tear roll down my left cheek. That's when I realised family is what keeps me ALIVE. :'( fin!

What is the hardest thing you have ever done? Hand over my friend's Dead Body to his Mother This happened when I was coming back from my college in bus. I got down the bus along with two of my regular bus friends. They take the bus from the same stop as mine. One guy Vivek and a girl Ekta. When we were crossing the road, me and Ekta were talking about some subject and Vivek almost crossed the street, waiting at the other side of the road. Suddenly a guy on a bike came and started waving his bike looking at me and Ekta. He suddenly increased his speed and as he was looking at us, he didn't see that his bike going off the road. In full speed, he hit Vivek who was not even on the road He realized that something wrong has happened, thus he fled away from there. Me and Ekta were shocked to witness the accident. I ran towards Vivek and turned his face. He was shivering due to pain and was unconscious. Blood were coming out of his ear. Ekta started shouting for help and crying at the same time. I ran here and there but there was no one. It was a hot afternoon and there were hardly any vehicle. Then I saw a car and almost jumped in front of it. I asked the guy in the car for help. Without waiting for his reply, I opened his back door and started lifting Vivek to it. He was too heavy for me and Ekta. So, the man helped us and we got him inside the car. We reached the nearest hospital and got him into ICU, but the doctors said that they can't help us because it was an accident case and they referred us to a government hospital which was around 1 hour drive away. We got inside that hospital's ambulance covering Vivek's ear with huge cotton roll. It was drenched with his thick maroon blood and I didn't realize that my college uniform was covered with blood while tears were rolling down my cheeks. We couldn't connect to Vivek's family as his phone was broken and we didn't have any of his family's contact. Anyhow, we reached SMS hospital Jaipur and took him inside. To my surprise, there was no one hurrying to help us. No one was tensed that he might lose his life. We were shouting and running here and there. Finally a compounder asked us to take him to the Emergency. There they gave us more cotton and asked us to wait for the Doctor. However, no one coming. It was like eternity when a nurse came. She checked him and asked me to take him for scan on the 2nd floor. We, two college girls, were pulling the stretcher and holding the cotton. finding a path or a lift to reach the second floor. We were feeling powerless. As if we are no one and our lives cost nothing. No one cares. I was burning with anger but did nothing and waited for the scan to get over. My tears never stopped. I hugged Ekta and was consoling her when her parents came. We took Vivek to emergency again. Ekta's father called someone, who called a doctor, who was a relative. He came in around 20 minutes. Finally, after 3 hours of the accident, a Real Doctor attended my friend. We were asked to go outside the room and there I saw the gallery (hospital compound) full of patients lying on the floor itself. Some were sleeping, some where crying, some recently operated and some waiting for weeks to get treated. Suddenly my tears stopped and instead of blaming the doctors, I got numb. I was thinking too much yet I was thinking Nothing. I was Numb. After 3 more hours, at 9 pm, the doctor told us that Vivek is no more with us. The Dead Body was then taken after some registration. After some paper work, it was sent to Vivek's place. There we saw the widow, who was Vivek's mother. Vivek was the only son and he had a sister who was mentally challenged. His mother was shattered when she saw her only son, who recently made her proud by getting placed in one of the best companies that came to our campus, dead in front of her. I couldn't see anything anymore and went home. Next day all the people, friends and family came to his place. Ekta asked me to reach there but I couldn't. After some time, I walked to his place but stopped at a distance and saw people going in and out and heard mourning sound coming from his home. I sat on rock, hiding my tears and thinking too much too fast. This was the first time I showed some courage. Lifted a guy who was bleeding, saw him shivering out of pain... Blood on my hands and face. It was thick... I could remember a great friend, a great son... I wish I could save him... The hardest part was to realize that this is reality - Death... A woman lost her partner and then her young Son... This is the reality that I don't think that people know... That many people are dying here everyday... Because of hundreds of reasons... This is the reality that I couldn't save his life... The reality is that people have accepted everything... The reality is that even today everything is the same EXCEPT for the life of that mother... EDIT1: Hi everyone, thanks for understanding what I have actually been through. Some people asked me whether I am in touch with the family. Yes! I am in touch with them since that day. It was 2011, May. We have been meeting her mom time to time and my family is in constant touch with them. His sister has been getting timely treatments free of cost from one of our relative who is a well known doctor in Jaipur. There are a great signs of improvement in her. Vivek's mom has opened a creche for small kids, she feels like all of those children are hers, she loves them..... Thanks everyone once again, for understanding me, god bless you all!!

Video Downloader and Video Downloader Plus Chrome Extension Hijack Exploit - UXSS via CSP Bypass (~15.5 Million Affected)

Note: This post is going to be a bit different from the previous Chrome extension vulnerability writeups. I’m going to actually walk through the code along with you to show you how tracing through an extension generally works. For this reason the whole thing is a bit lengthy. While scanning various Chrome extensions with tarnish I found the popular Chrome extensions Video Downloader for Chrome version 5.0.0.12 (8.2 million users) and Video Downloader Plus (7.3 million users) suffers from a Cross-site Scripting (XSS) vulnerability in their browser action page. All that is required to exploit these extensions is for a victim to navigate to an attacker-controlled page. The cause of this vulnerability is due to the use of string concatenation to build HTML which is dynamically appended to the DOM via jQuery. An attacker can craft a specialized link which will cause arbitrary JavaScript execution in the context of the extension. Using this exploit, an attacker can abuse the following permissions which the extension has access to: "permissions": [ "alarms", "contextMenus", "privacy", "storage", "cookies", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking", "http://*/*", "https://*/*", "notifications" ], Using the above permissions an attacker is able to dump all browser cookies, intercept all browser requests and communicate as the authenticated user to all sites. It’s about as powerful of an extension as it gets. The Vulnerability The core of this vulnerability is the following piece of code: vd.createDownloadSection = function(videoData) { return '

\ \

' + videoData.fileName + '

\ Download - ' + Math.floor(videoData.size * 100 / 1024 / 1024) / 100 + ' MB\

\

'; }; This is a fairly textbook example of code vulnerable to Cross-site Scripting (XSS). The extension pulls these video links from our attacker-controlled page, so exploiting it should be straightforward. However, as is often the case with textbook examples, the real world situation is much more complicated. This post will walk through the speed bumps encountered along the way and demonstrate how they were bypassed. We’ll start with where our input is taken in, and follow it all the way to the final function. The Path to Victory The extension makes use of a Content Script to collect possible video URLs from both page links ( tags), and videos (