E - Commerce

Smartphone Security - Best Practice

2011-01-10T21:01:00.000-08:00

Smarphons are becomming more popular as business tool. Soon it will overtake PC's as most common internet access device.

As mobile phones provide cutting-edge smartphone technology, employees will look to consumer-oriented vendors that cater to their own personal needs, rather than those of their employers.

A smartphone that can access the network via a wireless access point represents the same kind of threat as any other endpoint. The only difference is that a phone is less likely to be running the very latest (if any!) antimalware security software and so more exposed then any other device.

The proliferation of smartphones in corporate environments creates a new and wider potential for data loss and leakage, whether by theft, unauthorized access or unauthorized transmission. As with any mobile endpoint on the network, password and authorization security are paramount to securing network access at the gateway. In addition, a growing amount of sensitive and proprietary data is lost and leaked via smartphone email attachments and FTP uploads, unintentionally or maliciously.

Smartphone content is more vulnerable to loss or theft, as network access codes, usernames and passwords are often unsecured or set for automatic log-on. Consumers who "jailbreak" phones to customize carriers or features often leave themselves open to root password hacks.

Moreover, the same threats that traditionally plague computer operating systems can attack smartphones when they are being transmitted in emails, social media sites, games, screen savers, pictures, text messages, tweets, audio clips, slide shows or in some cases, by shady URL-shortening services.

Smartphones can magnify malware distributions that employ email spam, phishing, pharming and pretexting. Because smartphones represent a more intimate communications channel than computers, users are more likely to interact with files masquerading as personal communications.

Likewise, users cannot as easily detect cues that a website is a false front on a handset with a small screen. While the infection may not be apparent, even after the phone has been compromised, the malware file can still propagate into an IP network from the unsecured handset endpoint.

Further, the preponderance of interactive Web 2.0 and streaming media traffic over smartphones can potentially affect wireless network throughput. Some of these applications, such as streaming video applications, constantly evolve to avoid control. In addition, like any Web-facing endpoint device running applications over the network, smartphones present a potential channel for forced denial-of-service attacks.

In such scenario, organizations should consider implementing best practices mentioned below.

Treat all smartphones as uncontrolled endpoints - Smartphone users identities can be stolen, hacked or inappropriately shared. Smartphones can get lost, stolen or borrowed. Device identification technology uses serial number information to allow organizations to associate a specific smartphone to a specific user. This provides a watermark for the device, and allows IT to remotely disable it and erase all sensitive data.
Establish corporate smartphone policy - IT should define and communicate a corporate smartphone use policy, even if difficult to enforce on personal devices.
Establish SSL VPN - Secure Sockets Layer Virtual Private Networking access to corporate resourcescan provide a authenticated and encrypted Web-based access to network resources from multiple smartphone operating systems like Windows, Symbian, BlackBerry, iOS and Android
Comprehensively scan all smartphone traffic - To protect network resources adequately against sophisticated smartphone-transmitted attacks, IT should deploy a Next-Generation Firewall that conducts deep packet inspection of all smartphone traffic traversing the SSL VPN
Control encryption and decryption of smartphone traffic - IT should ensure encryption of smartphone traffic while in transit between the device and the network gateway using SSL VPN. In addition, IT must be able to decrypt smartphone traffic for comprehensive scanning using DPI SSL, and re-encrypt it for subsequent transmission
Maximize firewall throughput to eliminate latency - To minimize impact upon latency-sensitive applications, such as videoconferencing, voice over IP (VoIP), and real-time interactive Web 2.0 applications, the next-generation firewall platform must be able to comprehensively scan and prioritize smartphone traffic in real-time
Establish controls over smartphone application traffic - Smartphone users rely heavily upon Web 2.0 applications, and are especially prone to their inherent threats and vulnerabilities. Application intelligence and control technology can extend firewall functionality to identify, categorize, control and report upon application usage over the network
Establish smartphone wireless access security - Most consumer smartphones have WiFi functionality and are highly vulnerable to attacks while connected to unencrypted WiFi hotspots. Security for corporate wireless networks has to be at least on par with wired networks that run deep packet inspection, by running traffic through a comprehensive firewall. For employees connecting back to the network over public hotspots, IT should apply SSL VPN connectivity and deep packet inspection at the network gateway
Manage smartphone VoIP traffic - As VoIP is used more frequently as a corporate communications platform, it will play an increasing role in smartphone Web traffic. VoIP traffic is susceptible to quality-of-service issues such as latency, jitter, packet loss and echo. Application-intelligent bandwidth management can dedicate throughput to latency-sensitive smartphone applications such as VoIP, as well as limit bandwidth-consuming traffic, such as video players.
Manage smartphone traffic bandwidth - Organizations need to protect the converged voice-and-data communications that today's smartphones feature. At the same time, corporations need to continue to optimize quality of service and bandwidth.

Organization should implement said best practice utilizing latest techonologies.

Security Advisory 2286198

2010-08-02T21:28:00.000-07:00

Security Advisory 2286198 is not categorized as virus, worm, Trojan or backdoor. It is a security advisory regarding a vulnerability in the Windows Shell on Windows 2008/7/Vista/2003/XP computers, which allows arbitrary code to be remotely executed in the vulnerable computer.

The Windows Shell provides users with access to a wide variety of objects necessary for running applications and managing the operating system. However, there is a vulnerability that occurs because the Windows Shell does not correctly validate specific parameters of the shortcut when it attempts to load the icon of a shortcut.

A shortcut is a link to a file or program represented by an icon.

If exploited successfully, Security Advisory 2286198 allows hackers to gain remote control of the affected computer with the same privileges as the logged on user. If this user had administrator rights, the hacker could take complete control of the system: create, modify or delete files, install programs, create new user accounts, etc.

This vulnerability can be exploited through removable drives and can be distributed over network shares or remote WebDAV shares.

EC Framework - Part 8

2010-06-07T08:45:00.000-07:00

Secure Applications

In part - 7 we discussed about securing network, next step is securing applications. listed below are the possible category - threat attacks to EC application.

Input Validation - Buffer overflow, cross-site scripting, SQL injection, canonicalization
Authentication - Network eavesdropping, brute force attacks, dictionary attacks, cookie replay, credential theft
Authorization - Eavesdropping of privileges, disclosure of confidential data, data tampering, luring attacks.
configuration management - Unauthorized access to administration interface, unauthorized access to configuration stores, retrieval of clear configuration text data, lack of individual accountability, over privileged process and service accounts
Sensitive data - access sensitive data in storage, network eavesdropping, data tampering
Session management - session hijacking, session replay, man in middle
Cryptography - Poor key generation or key management, weak or custom encryption
Parameter manipulation - Query string manipulation, form field manipulation, cookie manipulation, HTTP header manipulation
Exception management - Information disclosure, denial or service
Auditing and logging - User denies performing an operation, attacker exploits an application without trace, attacker covers his or her tracks

Any of attack realized can create serious damage to EC system leading to financial looses and reputation losses. there are way and means that one can secure application, those are mentioned below.

Ways and Means to protect application

Audit through out software development life cycle (SDLC)
Vulnerability Scan

Penetration testing - carry out penetration testing through available tools to check if existing vulnerability can be exploited. Nikto is an example of such tolls.
source code analysis tool will help to identify but in source code. Ounce 6 is an example of such tool.

In next session we will go through EC benefits

EC Framework - Part 7

2010-04-29T20:47:00.000-07:00

Secure Network

In Part - 6 we understood how to secure communication channel. EC Communication is vital part for EC and EC Network is media which transverse EC Communication and so avialability of Network is very important for EC.

Avialability of EC Network can be secured by adequate technology selection based on network design concepts such as -

Layered security
Controlling access
Role-specific security
Monitoring
Keep systems patched
Response team

Below are the Ways and Means to secure Network.

§ Design and Configuration

Security at LAN & Perimeter level
VLAN, QoS, Access list, POLP, packet filtering

§ Selection of device

Firewall
IDS / IPS
Proxies

§ VPN Protocols

Ipsec, L2TP / PPTP, MPLS, SSL VPN

§ Vulnerability assessment

Scan the network for risk and mitigate to maximum possible extent.

Google Chrome Operating System

2009-12-30T20:11:00.000-08:00

Google's blog announces a natural extension of the Chrome project: An Operating System for Notebooks.

"Google Chrome OS" is an open source, lightweight operating system that will initially be targeted at netbooks. Later this year google will open-source its code, and netbooks running Google Chrome OS will be available for consumers in the second half of 2010.

Google Chrome OS will run on both x86 as well as ARM chips and google are working with multiple OEMs to bring a number of netbooks to market next year.

The software architecture is simple — Google Chrome running within a new windowing system on top of a Linux kernel.

Earning options in this hard time

2009-12-10T21:38:00.000-08:00

Palmbux is a PTC site. Earlier we discussed about PTC site and so skipping to main part here. Palmbux is PTC site and in this hard time, provides genuine option to earn online. I got my first payment from it instant. If you are looking for such opportunities i suggest to join Palmbux and start your earning.

Price war - Microsoft / Google Apps

2009-11-04T01:04:00.000-08:00

Microsoft has slashed the prices of its SaaS email offering and its online business productivity suite, making them more competitive with the low-cost premier edition of Google Apps.

Exchange Online as a standalone app is now available for US$5 per month instead of $10, while the Business Productivity Online Suite, which bundles online versions of Exchange, SharePoint, Office Communications and Office Live Meeting, is now $10 per user per month instead of $15, said Microsoft Business Division President Stephen Elop.

Microsoft also increased storage per use to 25 GBs from 5 GBs -- bringing it in line with what Google provides for Google Apps.

India to Tax US Outsourcing Firms

2009-09-24T22:09:00.000-07:00

As the Indian and U.S. economies become increasingly interdependent, changes in the business tax system of one country will increasingly impact businesses and consumers in the other country. This new Indian tax rule, which could be applied retroactively, appears to circumvent the Indian Finance Ministry's previous granting of income and sales tax exemptions for 10 years.

Read detailed news here

eBay acquires PayPal for $1.5 billion

2009-09-17T04:07:00.000-07:00

Like many of its customers, auction giant eBay has decided to use PayPal as its electronic payment system.

eBay sais it is acquiring online payments company PayPal in a deal valued at $1.5 billion.

eBay will also phase out its own competing service, eBay Payments by Billpoint.

PayPal introduces transaction charges

2009-09-17T03:59:00.000-07:00

PayPal free account is now no longer free!!. PayPal as now introduced trancation chage of "3.4% + $0.30 USD" on receiving payments and it applies to personal accounts also.

Received my payment

2009-08-17T07:09:00.000-07:00

Clicksia is an PTC site which offers earn through "paid to click" services. I am member of it and recently i got my payment.

Its genuine site and if you are serious online earner then must join.

to view payment proof - ClickMe

below is the banner - click to join.

Genuine online earning option

2009-07-10T23:39:00.000-07:00

EarnEasyCash

is an real opportunity for online earners. I have received payments from this site. IT is paypal verified site and pays instantly to all their members.

to view payment proof visit -

http://10dollars.110mb.com/index_files/Earn4Sure.htm

Happy earning in this hard time. Best of luck.

Rosemails

2009-06-25T04:09:00.000-07:00

Rosemail offers online earning option (PTC / PTR). It is genuine site and pays instant. if you are into online earning and interested in visit site by clicking title or banner below.

Payment proof is posted here -
http://10dollars.110mb.com/index_files/Rosemail.gif

Facebook Phishing

2009-05-02T21:00:00.000-07:00

Latest Message Scan -

Messages attempt to lure Facebook users into logging into bogus Facebook lookalike sites such as fbstarter.com

Users of social networking website Facebook have been receiving messages that are designed to trick them into providing their Facebook login details to Internet criminals. Those who click on the link in these messages will be taken to a bogus website designed to look like a genuine Facebook login page. The bogus sites have domain names such as "fbstarter.com" and "fbaction.net". If a user logs in to one of the fake pages, his or her Facebook account details can then be collected by scammers. Armed with this information, the scammers can then logon to their victim's real Facebook account, steal personal information and use the account for fraudulent purposes such as spamming or sending further scam messages. At the time of writing "fbstarter.com" and "fbaction.net" had been reported as phishing sites and were no longer active. However, other fake Facebook sites are likely to follow. Facebook users should be very careful that they only logon to the genuine Facebook website.

Visa on G1

2009-02-04T04:44:00.000-08:00

Visa announced the launch this week of new commercial mobile payment-related services on the G1, which runs on Google's Android operating system.

This application is right now only available to Chase bank customers. Application turns your G1 into a Visa card. It's a step toward contactless payment, which is becoming more viable as stores install systems to accept payments wirelessly.

EC Framework - Part 6

2009-02-01T23:41:00.000-08:00

Secure EC Communication

In Earlier section “EC Framework - Part 5” we discussed about best practices bullet point 1 – security risk management. In this post let’s discuss about point 2 – Securing EC Communication.

Securing EC Communication leads to secure transaction.

Ways and Means

Access control
- Two factor authentication
  1. Passive tokens
  2. Active tokens
- Biometric systems
  1. Physiological biometrics
    
    e.g., fingerprint, iris, hand, facial characteristics
  2. Behavioral biometrics
    
    e.g., voice scans or keystroke monitoring
- Digital signatures/certificates
  1. Authorization &
  2. Encryption
Cryptography (Encryption)
- Definition
  
  The process of scrambling (encrypting) a message in such a way that it is difficult, expensive, or time-consuming for an unauthorized person to unscramble (decrypt) it.
- Methods
  1. Symmetric-key cryptography
  2. Public-key (asymmetric) cryptography
- Protocols
  
  PGP and its variants - ssh, SSL/TLS, all PKIs, digital signatures/certificate, etc.

In next section we will discuss about securint networks.

Google 10th Anniversary Awards Lottery Scam

2009-01-28T22:06:00.000-08:00

If you receive Email claims that the recipient has won five hundred thousand pounds in a 10th anniversary promotion organized by Internet giant, with the subject mentioned below, it is a advance fee scam and just download it.

Subject: Google 10th Anniversary Awards winnerGoogle 10th Anniversary Awards CentreLondon W1U 4RY, United Kingdom.

Tel: [Removed]

Fax: [Removed]

BSNL slashes GPRS usage charges

2009-01-28T21:37:00.000-08:00

BSNL has decided to revise GPRS usage charges (New = Rs. 0.05/10KB) under prepaid and postpaid mobile services with effect from 01.02.2009. Read more

Top 10 Viruses - 2009

2009-01-27T21:51:00.000-08:00

Below is the list of top 10 viruses of 2009 (till date).

Troj/Invo-Zip
W32/Netsky
Mal/EncPk-EI
Troj/Pushdo-Gen
Troj/Agent-HFU
Mal/Iframe-E
Troj/Mdrop-BTV
Troj/Mdrop-BUF
Troj/Agent-HFZ
Troj/Agent-HGT

Enjoy surfing

eCommerce Sales 2008

2009-01-23T20:46:00.000-08:00

News of a drop in holiday sales comes as no surprise this year. Overall holiday retail sales were down 5.5% in the month of November, and 8% in December up to the day before Christmas, compared to the same periods in 2007, according to MasterCard Advisors, a subsidiary of MasterCard Worldwide.

EasyHits4U Pays

2009-01-22T22:07:00.000-08:00

EasyHits4U is a traffic exchnage site. When you surf through the site you can earn credit and money. Credit earned can be echnaged to advertise your site in turn gets you referral.

The site pays $3 (minimum payout) through paypal withing 5 day of request raised. I got paid today.

New virus spreading quickly - seems to be dud

2009-01-18T22:44:00.000-08:00

A computer virus that may leave Microsoft Windows users vulnerable to digital hijacking is spreading through companies in the U.S., Europe and Asia, already infecting close to 9 million machines, according to a F-Secure, a private online security firm.

F-Secure says a virus it has been tracking for the past several weeks has surged more rapidly through corporate networks than anything they've seen in years. But the virus doesn't appear to be working as its designers intended.

The virus's coding suggests a type of bug that alerts computer users to bogus infections on their machines and offers to help by selling them antivirus software.

Instead, the virus is simply spreading to little effect, though it may still pose a threat to infected computers.

Microsoft has issued a security update to deal with the so-called "Downadup" or "Conficker" virus, which appears to be a new version of a bug that popped up in October.

Microsoft said the virus is spreading by gaining access to one computer and then guessing at passwords of other users in the same network: "If the password is weak, it may succeed."

91 Web Site closed down by China

2009-01-12T01:44:00.000-08:00

China has shut down 91 websites for pornographic and other "vulgar" content, as well as a political blog portal, since announcing its latest bid to ensure Internet morality, state media said on Monday.

Yahoo!'s Next Frontier: Internet TV

2009-01-12T01:42:00.000-08:00

The Web pioneer is working with Intel and television makers to inaugurate TV widgets that will add some Internet content to home viewing.

EC Framework - Part 5

2009-01-09T02:39:00.000-08:00

In EC Framework - Part 4 we discussed about "Managing EC Security" and gone into details on "Organization to know". Here in Part 5 lets discuss about Best practice (bullet point 2 of Part 4). Lets start with Security Risk Management.

Security Risk Management

Is a systematic process for determining the likelihood of various security attacks and for identifying the actions needed to prevent or mitigate those attacks.

Phases:
1. Asset identification
2. Risk assessment
3. Implementation
Various law and guidelines

ISMS (ISO 27001), BPC / DR, DPA, VISA CISP & AIS, HIPPA, & Many more

Process
1. Authentication
  
  The process by which one entity verifies that another entity is who he, she, or it claims to be
2. Authorization
  
  The process that ensures that a person has the right to access certain resources
3. Auditing
  
  The process of collecting information about attempts to access particular resources, use particular privileges, or perform other security actions
Common mistakes in managing security risks:
- Undervalued information
- Narrowly defined security boundaries
- Reactive security management
- Dated security management processes
- Lack of communication about security responsibilities

In EC Framework - Part 6 we will discuss about securing EC communication.

Third undersea Internet cable cut in Mideast

2009-01-09T01:45:00.000-08:00

An undersea cable carrying Internet traffic was cut off the Persian Gulf emirate of Dubai, officials said Friday, the third loss of a line carrying Internet and telephone traffic in three days. Read detailed news.

Cybersquatting

2008-12-31T21:41:00.000-08:00

Cybersquatting is the act of registering a popular Internet address--usually a company name--with the intent of selling it to its rightful owner.

Comparing cybersquatting to online extortion, Senator Spencer Abraham, a Michigan republican, has introduced to Congress the Anti-Cybersquatting Consumer Protection Act.

This bill, if enacted, would make cybersquatting illegal. Violators would be charged a fine of up to $300,000.

The World Intellectual Property Organization (WIPO) has also outlined anti-cybersquatting tactics, which have been endorsed by ICANN

Even though legislation has not been enacted, almost all cybersquatting court-case decisions are against cybersquatters.

Verizon Wins Cybersquatting Judgment

2008-12-31T21:34:00.000-08:00

Telecommunications giant Verizon has won a record $33.15 million judgment against Internet domain registrar OnlineNIC for cybersquatting.

This is the fourth cybersquatting case Verizon (largest ever in a cybersquatting case) has won in the past couple of years.

OnlineNIC had registered at least 663 domain names that were either identical to, or confusingly similar to, Verizon (NYSE: VZ) trademarks, and the court concluded that this had been designed to attract people trying to access Verizon's Web sites.

NeoBux - Genuine PTC Site

2008-12-29T22:09:00.000-08:00

I got my 1st payment from NeoBux and it was real instant. On payment request, it was processed online and next second I got payment receipt e-mail from paypal.

I must say NeoBux is a genuine site.

Google Checkout system popularity test

2008-12-29T03:02:00.000-08:00

Google is the world’s leading search engine, but can Google compete with PayPal and other established e-commerce providers?

Selkie Software is putting Google to the test to see if customers will select the Google system if it’s discounted, instead of paying the regular amount with PayPal. This test will run to January 31, 2009.

With an eye to save consumers money while testing Google, Selkie Software is offering consumers the chance to use Google Checkout when purchasing any Selkie Software title, while receiving a discount on the purchase price. To test the popularity of Google Checkout and to encourage its adoption, Selkie Software is offering all customers 25% off the purchase price just for using Google Checkout.

EC Framework - Part 4

2008-12-22T23:35:00.000-08:00

Managing EC Security

Organizations to know
Best practice
- Security Risk Management
- Secure EC communication
- Secure Network
- Securing Applications

Organization to Know

Computer Security Institute (CSI)

Nonprofit organization located in San Francisco, California, that is dedicated to serving and training information, computer, and network security professionals.
Computer Emergency Response Team (CERT)

Group of three teams at Carnegie Mellon University that monitor the incidence of cyber attacks, analyze vulnerabilities, and provide guidance on protectingagainst attacks.
The DHS (Department of Homeland Security)

Strategy includes five national priorities:
- A national cyberspace security response system
- A national cyberspace security threat and vulnerability reduction program
- A national cyberspace security awareness and training program
- Securing governments’ cyberspace
- National security and international security cooperation
Accomplishing these priorities requires concerted effort at five levels:
- Level 1—The Home User/Small Business
- Level 2—Large Enterprises
- Level 3—Critical Sectors/Infrastructure
- Level 4—National Issues and Vulnerabilities
- Level 5—Global

National Cyber Security Division (NCSD)

A division of the Department of Homeland Security charged with implementing U.S. cyberspace security strategy
Common (security) vulnerabilities and exposures (CVEs)

Publicly known computer security risks, which are collected, listed, and shared by a board of security-related organizations (cve.mitre.org)
National Infrastructure Protection Center (NIPC)

A joint partnership under the auspices of the FBI between governmental and private industry; designed to prevent and protect the nation’s infrastructure

In EC Framework - Part 5 we will discuss about Managing EC Security - Best Practices

EC Framework - Part 3

2008-12-20T02:41:00.000-08:00

In EC Framework - Part 2 we discussed about technical attack. Listed below are commonly know types of technical attack.

Virus
- A computer virus is a computer program that can copy itself and infect a computer without permission or knowledge of the user
- A virus can only spread from one computer to another when its host is taken to the uninfected computer
Worm

A software program that runs independently, consuming the resources of its host in order to maintain itself, that is capable of propagating a complete working version of itself onto another machine
Malware

Also known as Malicious Software, is software designed to infiltrate or damage a computer system without the owner's informed consent
Grayware (or greyware)

Is a general term sometimes used as a classification for applications that behave in a manner that is annoying or undesirable, and yet less serious or troublesome than malware.

Graware examples:
- Spyware
  
  Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent
- Adware
  
  Adware or advertising-supported software is any software package which automatically plays, displays, or downloads advertisements to a computer after the software is installed on it or while the application is being used. Some types of adware are also spyware and can be classified as privacy-invasive software.
- Dialers
  
  A dialer is a piece of software which changes your default internet connection to an expensive phone number even when you have a broadband connection you can be struck by the effects of a dialer
- keylogger
  
  Keystroke logging (often called keylogging) is a method of capturing and recording user keystrokes
- Joke programs
- Remote access tools
Phishing

Is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication
Spam
- Spamming is the abuse of electronic messaging systems to indiscriminately send unsolicited bulk messages.
- The term is also applied to similar abuses in other media: instant messaging spam, Usenet newsgroup spam, Web search engine spam, spam in blogs, wiki spam, mobile phone messaging spam, Internet forum spam and junk fax transmissions
Denial-of-service (DoS) attack

A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users. It generally prevents an Internet site or service from functioning efficiently or at all, temporarily or indefinitely

Methods:
- ICMP floods
- Teardrop attack
- Peer-to-peer attacks
- Permanent Denial-of-Service attacks
- Application level floods
- Nuke
- Distributed attack
- Reflected attack
- Unintentional attack
Use of Zombie

A zombie computer (often shortened as zombie) is a computer attached to the Internet that has been compromised by a hacker, a computer virus, or a Trojan horse.
- Why Zombie?
  - Avoid detection
  - Presumably reduces bandwidth costs

Attack Trends

Paramount factors that increased malicious codes penetration

Mixing data and executable instructions
Increasingly homogenous computing environments
Unprecedented connectivity
Larger clueless user base

Emerging trends

Automation and speed of attack tools
Increasing sophistication of attack tools
Faster discovery of vulnerability
Increasing permeability of firewall
Increasingly asymmetric threats
Increasing threat from infrastructure attack
E-commerce is the most frequently targeted industry
Attacks against Web application technologies are increasing
A large percent of Fortune 100 companies have been compromised by worms

In EC Framework - Part 4 we will discuss about Managing EC Security.

HTML 5

2008-12-19T01:56:00.000-08:00

HTML 5 is the upcoming major revision of the HyperText Markup Language (HTML), the main method of marking up content for sharing on the World Wide Web. HTML's development stopped at HTML 4.01 in 1999, and since then web content has evolved so much that current HTML specifications are inadequate for today's requirements.

HTML 5 aims to improve HTML's interoperability and address the growing demand for more diverse and complex web content. It also addresses HTML 4's lacking features for web applications.

The conceptual thinking for HTML 5 began in late 2003. The World Wide Web Consortium (W3C), the organization that oversees the web's standard protocols and guidelines, expressed interest in the HTML 5 draft originally developed by the Web Hypertext Application Technology
Working Group (WHATWG), a group formed in 2004 consisting of representatives of Apple, the Mozilla Foundation, and Opera Software. As a result, the W3C HTML Working Group was formed in 2007 to develop the specifications of HTML 5.

Development is underway, and HTML 5 is anticipated to reach W3C Candidate Recommendation status in 2012, though many modern browsers already have partial support for HTML 5 specifications.

Below are the 5 exciting new features of HTML 5

New HTML elements that improve our ability to describe content
Improved web forms handling
APIs for easier web application development
The <canvas> element allows image scripting on the fly
Users can edit and interact with sections of a web page

There are a lot of other exciting new features in HTML 5, for which details can be found here. To know more about difference between HTML 4 and HTML 5 visit w3.

IndiaMrat wins award

2008-12-16T22:27:00.000-08:00

IndiaMART, India’s largest online B2B marketplace, has won the coveted “Red Herring 100 Asia” award. This recognizes IndiaMART in the 100 most innovative private technology companies based in Asia.

Browser Security Issue discussed in Add-on-Con

2008-12-12T23:18:00.000-08:00

For the first time, on December 11th at the Computer History Museum in Mountain View, Google, Microsoft and Mozilla came together to discuss the future of the browser platform.

Three leading browser providers debated security and other Web-related issues at the closing session of the inaugural Add-on Con conference Thursday.

The browser rivals agree on a few things when it comes to browsers and security. During a panel discussion here about security, moderator Doug Crockford, a senior JavaScript architect at Yahoo (NASDAQ: YHOO), set up the discussion by noting how the Web and browsers are under attack by those looking to exploit any flaws they can find. Plug-ins or add-ons, are often a ripe target.

"Add-ons are attacked by software not under our control," he said, adding, "it's a significant risk to people basing their business on add-ons and to customers."

Joshua Allen, a senior technical evangelist for Internet Explorer at Microsoft, agreed security is a serious issue and noted that IE, with the biggest market share, is the biggest target of attacks.

Allen emphasized the need to support Web standards and, perhaps surprisingly, said competition is helping. "We're seeing much better tools for the Web and one of the factors driving this is the interoperability among multiple vendors," said Allen. "No one controls a big enough part of the market to have veto power.

Google product management director Brad Rakowski, said with its Chrome browser, Google wants to limit the potential security risks add-ons face. "It's very important to limit the capabilities add-ons might have, that's a little of our idea for an extension model," he said. Rakowski said Google wants to limit the resources add-ons can use, and have it be clear what those are, to protect the browser.

Mike Shaver, vice president of engineering at Mozilla, makers of the Firefox browser, agreed on the importance of standards, particularly in established areas where developments are well understood.

3G is here finally!

2008-12-12T21:25:00.000-08:00

Finally we have 3G in India! MTNL launched 3G in India under the brand "Jadoo". MTNL inaugurated 3G services in India with the first video call made to Prime Minister Dr. Manmohan Singh by Telecom Minister A. Raja at an event held in Pragati Maidan.

As a starter, the 3G service Jadoo is available only in certain parts of Delhi. This soft-launch will let users experience 3G services for free. It's said that this experience will be provided to other telecom circles as well before 3G goes country wide.

Mumbai and Chennai are expected to receive this experience by end of Jan '09 through MTNL and BSNL respectively. So if you have a 3G capable phone and are in prime parts of Delhi like Connaught Place, Sanchar Bhawan, Rajaji Marg, India Gate, Pragati Maidan, Delhi Gate and Minto Road; check your phone for the 3G connectivity signal and see for yourself what is on offer. Users will be able to experience 2Mbps speed (not proper 3G) over their mobile device. Mobile penetration is very high in India as well as people are pretty tech-savvy, so let's hope to see many embrace 3G services. Earlier, it was decided to have 10 operators assigned to each telecom circle, but now it's been dropped to just 5 including MTNL and BSNL giving space for just three private operators. Seems the idea is to keep a tab on the tariff plans until they can extend the space to more telecom operators. Competition is the way to make things cheap and make it available to the end consumer, so initial control by the government is quite right. All said and done it's both exciting as well as saddening because while some countries get ready to go 4G by mid 2009 we have just turned the page to 3G and that too not complete 3G.

There is still a long way to go as 3G is just connectivity and we are yet to see a lot of VAS (Value Added Services) that can help us harness the 3G connectivity.

EC Framework - Part 2

2008-12-12T03:08:00.000-08:00

EC Security

Basic security issue

Perspective
From the user’s perspective:
Is Web server is owned and operated by a legitimate company?
Does Web page and form contains some malicious or dangerous code or content?
Is privacy policy appropriate and adhered to ?
From the company’s perspective:
Genuine user or hacker?
How to over come hacking attacks?

From both parties’ perspectives:
Is network connection is free from eavesdropping?
Is information sent back-and-forth between the server and the user’s browser has been altered?
Significance of security compromised
Theft
Money stealing
Impersonation (identity theft)
Invasion of privacy
Deception (identity theft through phishing)
Fraud
Defamation (wrongly accused of act)
Extortion (lottery mail, warning mail, etc)
Abuse
Through hacking (changing web content)

Possible Threats (means)

Non technical attacks
An attack that uses chicanery to trick people into revealing sensitive
information or performing actions that compromise the security of a network
Social engineering
A type of non-technical attack that uses social pressures to trick computer users into compromising computer networks to which those individuals have access.

Remedy

A multi-prong approach should be used to combat social engineering
Education and training
Policies and procedures
Penetration testing
Technical attacks
An attack perpetrated using software and systems knowledge or expertise.

In EC Framework - Part 3 we will discuss about Technical attack and attack trends.

EC Framework - Part 1

2008-12-04T22:44:00.000-08:00

EC Framework consist of -

Application
Support areas
Infrastructure

EC Applications are -
Content Management Systems
Documents, spreadsheets, database etc.
Accounting and finance systems
Online banking
Domestic and international payment systems
Conferencing
Marketing
Online publishing
E-mail and messaging
Online Advertisements
Newsgroup
Business
Orders and shipment information
Enterprise and client information reporting
On-line Shopping
Auctions
Search Jobs
E – Government
Travel & Tourism
EC Support areas are -
People
Public policy
Marketing and advertisement
Support services
Business partnerships
EC Infrastructure consist of -
Key infrastructure for EC is Networked computing and prime concern is security.
Network computing is the infrastructure for EC, and it is rapidly emerging as the standard computing environment for business, home, and government applications
Networked computing connects multiple computers and other electronic devices located in several different locations by telecommunications networks, including wireless ones
Allows users to access information stored in several different
physical locations and to communicate and collaborate with people separated by great geographic distances

Networked computing category
Internet
The Internet is a global system of interconnected computer networks that interchange data by packet switching using the
standardized Internet Protocol Suite (TCP/IP)
Intranet
An internal corporate or government network that uses
Internet tools, such as Web browsers, and Internet protocols
Extranet
A network that uses the Internet to link multiple intranets

In EC Framework - Part 2 we will discuss about EC Security

Chrome extension development plan revealed

2008-12-02T04:58:00.000-08:00

Google Chrome is built with open source code from Chromium. When Google launched Chrome three months ago, it promised a Chrome extensions framework. Extensions are a popular feature of Chrome's most likely rival, Mozilla's Firefox, and one very popular extension is AdBlock Plus.

AdBlock makes a specific appearance on the list of extension uses that Google said it would like to support eventually:

Bookmarking/navigation tools: Delicious Toolbar, StumbleUpon, Web-based history, new tab page clipboard accelerators.
Content enhancements: Skype extension (clickable phone numbers), RealPlayer extension (save video), Autolink (generic microformat data--addresses, phone numbers, etc.)
Content filtering: AdBlock, Flashblock, privacy control, parental control
Download helpers: video helpers, download accelerators, DownThemAll, FlashGot

Features: ForecastFox, FoxyTunes, Web Of Trust, GooglePreview, BugMeNot

The Chrome extensions plan document can be found here.

Avenues partnered with ABM Amro

2008-11-30T21:48:00.000-08:00

South-Asia’s largest integrated ecommerce company has partnered with ABN AMRO Bank, one of the top 10 banks in the world to bring its merchants, hoteliers and event holders the best in terms of payment options. Avenues clients can now sell goods and services and accept payments directly from all of ABN Amro account holders.

PTC Sites Vanished

2008-11-27T21:59:00.000-08:00

Three of well known PTC sites, mentioned below, are vanished. It means those sites no longer exists on web and affiliates / advertiser's has lost their efforts and hard earned money with it.

Improve Online Earnings

2008-11-26T05:12:00.000-08:00

Earlier in news, I said “It may be cold holiday session for EC” as seen by forecaster due to recent economic crisis.

Competition is at high rise and businesses are seen economic crisis, in such scenario the only hope is new technologies and new tools that have opened up worlds of opportunity that make it easier and cheaper than ever to promote or start an online business and immediately start profiting.

Let's take a look at some of new technologies, and the tremendous opportunities they generate.

Advertise Business

Get listed on search engines

The search-engine landscape has changed dramatically. I recommend getting listed on major search engines like Goggle, Yahoo, AltaVista, Excite, HotBot, InfoSeek, Lycos, Northern Light, WebCrawler, and MSN.

Goggle, Yahoo and MSN are leaders in search engine.

With this narrower field, top search-engine rankings are harder to come by. But paid search has exploded, becoming one of the fastest ways to drive qualified traffic to your site and if done properly, won't break the bank. With each passing year, it becomes more sophisticated, allowing you to zero in on your target market with greater precision.

Pay Per Click advertising

The paid search is also termed and “Pay Per Click (PPC)” advertising. PPC means an advertiser as to pay to polisher only when someone clicks on their ads. The top three search engines are also the top names in paid search:

Google AdWords:

With Google AdWords, you can have your ads show up in sponsored search
listings for certain keywords and you can also advertise on other sites that
match your audience.
Yahoo! Search Marketing:

Yahoo's sponsored search lets you advertise your site in the search results of the following search engines: MSN, Yahoo!, AltaVista, InfoSpace, AlltheWeb and NetZero.
MSN AdCenter:

MSN has recently entered the arena of paid search with MSN AdCenter.
With PPC, one can instantly boost traffic to their business site.

Paid To Click (PTC) programs

PTC is web site which offers affiliate a way to earn and publisher to promote their business in cheapest manner. Know more about PTC programs.

Make Sure Business E-Mail Gets Delivered

E-mail marketing is still highly profitable. Not only is it a great and inexpensive way to establish relationships with customers, marketing promotions and follow-up offers can be completely automated.

However, while you used to be able to send e-mail to absolutely everyone, one must be careful about spamming.

The consequences of spamming have grown far beyond a slap on the wrist from your internet service provider or a few nasty e-mails from angry recipients. The bottom line is that if one wants to take advantage of the profit-boosting power of e-mail marketing, he/she must make sure that all e-mails sent, comply with the CAN-SPAM Act. The CAN-SPAM rules can be referred at URL http://www.spamlaws.com/federal/can-spam.shtml.
One good way to promote business through e-mail is to use "Paid To Read (PTR)" programs. PTR programs are web site that send their affiliate a mail, which if affiliate read, earns money and advertiser get their business published.

Promote Business With New Internet Marketing Technology

Technology has been furiously advancing, paving the way for new and highly effective ways to promote online business. Let's look at some that have had the biggest impact:

Audio and Video:

The internet has come a long way since its text-only roots! Programming languages such as JavaScript and programs like Macromedia's Flash have allowed for web video, audio, slide presentations and other interactive elements.

When used right, audio and video as part of sales process can now have a dramatic impact. Use short audio and video clips about business and customers to personalize business site and reassure credibility to visitors.
Blogging:

Blogs are informal web forums that invite feedback and discussion. They're free to set up and use, and so simple that they can be created in minutes using sites such as Blogger.com. As a result, blogging has exploded in popularity over the last few years.

With a business blog one can reach a wider audience, generate better search engine rankings, boost revenue, and develop a rapport with customers. And because blogs are updated frequently, search engines love them.
Podcasting:

Podcasting (the delivery of audio files, typically MP3 files, through internet) is one of the hottest new technologies to hit the market. It allows to publish audio content that interested listeners can subscribe to via RSS "feeds" so they can automatically receive audio broadcasts without having to go to business website.
Direct-to-Desktop Technology:

Direct-to-desktop technology is a way to deliver information straight to subscribers' desktops without having to wrestle with e-mail filters, bouncebacks, or competition!

In Direct to Desktop publishing, the sender uses an application that formats and sends the information straight to a "reader" that's been installed on the recipient's desktop. Once customers sign up, they don't have to check their e-mail or visit your website to get your latest news or updates. A flashing desktop icon alerts them as soon as they receive message and all they have to do is click to read it.

So, even if the competition is growing, with the explosion of technological advances and resources, running an online business is now so accessible that literally anyone can get online very quickly
and immediately start profiting from their own internet business.

Payment Proof

2008-11-21T23:07:00.000-08:00

We discussed about scam sites earlier in "Get Paid To" section. Many new sites, offering online earning programs, are being launched daily and till they are established, it is difficult to comment whether the site is genuine or not and so it becomes equally important to know about proven sites.

The only way one can say site is genuine if he or she has got payment from the site. I am posting my proof of payment here and also request all of you to post your payment proof so other can get benefited out of it.

Payment Proof

Note:

If you get error 403 with payment proof links, then to open the link, copy and past the link to your browser.

Scam Sites

2008-11-21T22:39:00.000-08:00

Online earning is becoming popular among housewives, students and those who want to earn little extra and don't have much technical knowledge. Threat is always associated with every opportunity and here the treat is to get registered to any scam site and waste efforts put-up to earn money, lose personal information and money.

I have prepared an extensive list of such scam sites. Online earners can take advantage of it to avoid getting into scam sites.

If you have come through any such site, post your comment here to get the list updated and help other.

MatixMails Pays

2008-11-20T22:32:00.000-08:00

I got paid today from MatrixMails. MatrixMails is a "Paid To Read (PTR)" program and pays through PayPal. Minimum payout is $2.

It may be cold holiday session for EC

2008-11-18T22:22:00.000-08:00

With prices on the rise and confidence down, online retailers face a harsh economic climate as they head into the all-important holiday season.

Online Gambling Ban

2008-11-17T06:30:00.000-08:00

The Bush Administration pushed through new rules last week that seek to end Internet gambling. The new regulations, issued by the Treasury Department and the Federal Reserve system, require banks, credit card companies and wire transfer companies to establish a process to stop payments for settling online bets.

The rules are an outgrowth of a law passed a few years ago, the Unlawful Internet Gambling Act of 2006. However, they do not specifically define "unlawful Internet gambling." Instead, the regulations refer financial institutions to existing state and federal laws -- laws that differ on a state-by-state basis.

Critics of the new regulations say they're unworkable, because of the burden they will put on financial institutions to identify where an online gambling transaction originates and interpret state gambling laws.

OccupEx

2008-11-16T23:55:00.000-08:00

I got my first payment from OccupEx. OccupEx is "Paid To Clic (PTC) program.

PTC is program which pays affiliate to click ads and view it for few seconds. Know more about PTC.

IGF Conference

2008-11-15T06:40:00.000-08:00

Third conference of Internet Governance forum (IGF) will be held first time in Asia at Hyderabad, India from third to sixth December 2008.

Around 1400 representatives worldwide will participate in forum and the forum agenda is -

Encourage Cyber Security and Trust
Make available Internet Resources
Planning and Reach for next decades

Google's Site Search Gets On-Demand Indexing

2008-11-15T04:07:00.000-08:00

Google Site Search, or GSS, is the hosted, or cloud-based version, of the Internet giant's search engine. Its latest addition, which goes live on 14th Nove 2008, is an "Index Now" button that enables customers to get their search results re-indexed, so that searchers retrieve the freshest results.

"Index Now is like a turbo button or FastPass to their new pages," Google will continue to automatically re-index results at certain intervals, but the new feature is designed to give customers the ability add new site content and ensure that it appears to searchers in a more timely fashion.

EC Drivers

2008-11-14T07:49:00.000-08:00

Three major drivers of EC

Digital Evolution

The digital revolution accelerates EC by providing competitive advantage to
organizations and enabling innovations

Business Environment

Market (economic)
Societal
Technological

Economic, legal, societal, and technological factors have created a
highly competitive business environment in which customers are becoming
more powerful
The environment–response–support model
Companies must not only take
traditional actions such as lowering costs and closing unprofitable
facilities, but also introduce innovative actions such as customizing,
creating new products, or providing superb customer service

EC Roll

Organizational response strategies
Strategic systems
Agile systems
Continuous improvement efforts and business process restructuring
Customer relationship management
Business alliances
Electronic markets
Reductions in Cycle Time and Time-to-Market cycle time reduction
Shortening the time it takes for a business to complete a productive
activity from its beginning to end
Empowerment of Employees
EC allows the decentralization of decision making and authority via
empowerment and distributed systems, but simultaneously supports a
centralized control
Supply Chain Improvements
EC can help reduce supply chain delays, reduce inventories, and
eliminate other inefficiencies
Mass Customization: Make-to-Order in Large Quantities
Mass customization
Production of large quantities of customized items
Intra-Business: From Sales Force Automation to Inventory Control

knowledge Management (KM)
The process of creating or capturing
knowledge, storing and protecting it, updating and maintaining it, and
using it

EC organizations

2008-10-26T03:21:00.000-07:00

Three type of EC organizations are listed below.

1. Brick-and-mortar organizations
Old-economy organizations (corporations) that perform most of their business off-line, selling physical products by means of physical agents.

2. Virtual (pure-play) organizations
Organizations that conduct their business activities solely online.

3. Click-and-mortar (click-and-brick) organizations
Organizations that conduct some e-commerce activities, but do their primary business in the physical world.

EC Channels

2008-10-26T03:07:00.000-07:00

Electronic Commerce has three main channels has listed below

1. Electronic market (e-marketplace)
An online marketplace where buyers and sellers meet to exchange goods, services, money, or information

2. Inter-organizational information systems (IOSs)
Communications system that allows routine transaction processing and information flow between two or more organizations

3. Intra-organizational information systems
Communication systems that enable e-commerce activities to go on within individual organizations

VIPBux

2008-10-24T23:26:00.000-07:00

When I accessed VIPBux few week back, the webpage was loaded with message that administrator is going on holiday and he his still on holiday. It seems the site is dead now.

Got Payment from PaidMailz

2008-10-23T23:07:00.000-07:00

I got my 1st payment from the PaidMailz site today.

Work From Home

2008-10-21T22:40:00.000-07:00

Want to Earn few bucks extra?

Visit the site hyperlinked with title and start earning by doing simple data entry (copy and past) jobs. Each job is 10-15 cents. It takes hardly one minute to complete the job.

Joining the site is free and pays instantly. Got my first payment (20$)

Amistafund isn't safe anymore

2008-09-22T03:45:00.000-07:00

Think before joining Amistafund. Admin has stopped paying three days ago. Amistafund was started on August 23rd and offers three types of plans which are 110% after 5 days, 125% after 10 days, and 150% after 15 days.

This one is quite hot hyip site as the admin has spent lots of money for aggressive promotions and marketing including purchasing of big top banners on major hyip related public forums. The banners are still there so you should not make a mistake by assuming that this hyip is still working fine because it is not.

This hyip managed to make pay outs for almost a month only so we guess those who have had deposited in 5 days and 10 days hyip offer plans had made profits by playing in this hyip. On the rating page, a few monitors has already shown not paying, scam and problem status.

Ref: Ecommerce Journal

Amazon launches new content delivery service

2008-09-22T03:22:00.000-07:00

Amazon announced that it is branching out into B2B (Business-To-Business) services, while providing new technology platforms that can attract developers to the company stable. The new B2B service ties into its existing S3 storage platform and Web Services suite of applications. Customers will be charged on a PFWYU (pay-for-what-you-use) basis.

Amazon Chief Technology Officer Werner Vogels said the new service "will give eCommerce developers and businesses the ability to serve data to their customers worldwide, using low-latency and high data transfer rates."

Werner added "using a global network of edge locations this new service can deliver popular data stored in Amazon S3 to customers around the globe through local access."

Amazon's new service is expected to be officially unveiled by the end of 2008. It is now being tested by private beta customers.

Amazon won't initially provide any competition for the top names in the content delivery space, Akamai and Limelight, according to Dan Rayburn, principal analyst for Frost and Sullivan. "Instead, it will offer HTTP delivery only," Rayburn said. "It's not going to support streaming live broadcasting, not going to have transcoding, it won't be able to do proxy streaming. It will be very limited in terms of functionality."

The new service will still be able to target small-to-medium sized businesses, along with a few large companies, that have basic distribution needs. "The margins are very small on content delivery networks. The way they'll do it is based on scale and volume, and who better to be able to scale and offer very cheap rock-solid service than Amazon? That's what they do already with Amazon Web Services."

However, the regional service providers who operate on a second tier under Akamai and Limelight should be worried about the new Amazon offering. "They're going to be eaten alive because they're not going to be able to compete at the same price point. They'll have to sell customers on professional services, customer service."

Rayburn, who started one of the first streaming media companies in 1996 and writes several blogs about the content delivery network business, released a Frost and Sullivan report in August that projected global video revenues of US $400 million for this year alone.
That number is projected to grow to more than $1.4 billion worldwide by 2012, so Rayburn believes Amazon is positioning itself in the right business segment.

However, Amazon's new storage service suffered technical issues during the summer. "We've seen outages on the S3 service," Rayburn said. "If you're going to do this, it's even more important to have no downtime. The last time you heard about Akamai having a network outage was over three years ago."

Vogels' testimonial promises robust worldwide service in an easily-delivered manner. "You store the data you want to distribute in an Amazon S3 bucket and you use this API (Application Programing Interface) call to register this bucket with the content distribution service," Vogels writes.

He added "the registration will provide you with a new domain name that you can use in url's to access the data through this service with HTTP. When your customer accesses your content through your new url the data it refers to will be delivered through a network of Linux servers."

Get Paid To Read

2008-09-20T03:43:00.000-07:00

"Paid To Read" or PTR are the programs which lets one earn to read their E-Mails.

Many advertisers are willing to pay for reading their ads, viewing or sign up to their websites and trying their products! They publish their ads through PTR service providers (PTR websites), and those PTR sites passes earnings to their members for reading ads, viewing websites, signing up to websites and trying products.

Upon sign-up PTR site sends E-mail ads or/and you will be able to click on ads (also called as Paid To Click or PTC) at their website.

Either way you must click on links, in order to get paid. Usually those links lead you to pages that have timers of 10-30 seconds. Your account is credited once the timer expires.

A few sites are as listed below.

Site 1:

Site 2:

Site 3:

Site 4:

Site 5:

Dimensions of EC

2008-09-20T03:10:00.000-07:00

Pure Versus Partial EC

EC takes several forms depending on the degree of digitization (the transformation from physical to digital)

The product (service) sold,
The process,
The delivery agent (or intermediary)

Get Paid To Search

2008-09-17T21:43:00.001-07:00

Search Engine enables buyer and seller (E-Commerce) to find quickly the information they need.

Search engine is a

A computer program that can access a database of Internet resources, search for specific information or keywords, and report the results.

"Google" is one of such well known search engine.

Below is the example of a search engine which pays for each search made.

E - Commerce

2008-09-17T21:43:00.000-07:00

What is E-Commerce (EC) ?

E stands for “Electronic”
The process of buying, selling, or exchanging products, services, or information via computer networks

Foxcash

2008-09-04T22:16:00.000-07:00

Foxcash is down again

Foxcash

2008-08-29T21:36:00.001-07:00

Foxcash is up again and fortunately i didn't loose my account this time. I am awaiting my payments from Foxcash. It almost one and half month back I raised the request, so expecting that payment will happen now.

Foxcash

2008-08-25T05:54:00.001-07:00

Hi,

Foxcash is down again. In last three months Foxcash was brought down twice and many subscribers lost their hard earned money as the database was corrupted and their user name password and other information swiped out.

Is this happened really due to hackers attack ? as Foxcash claims or that Foxcash is turning out to be a scam site ?

Keep posting your views here.

Slashmysearch

2008-08-14T23:49:00.000-07:00

I was using slashmysearch.com as my search engine and suddenly it stopped. i lost around $20 on it as it turned out to be scam site and the site is banned.

2008-07-30T23:02:00.000-07:00

Hi All,

I am developing this blog site to share know how about Electronic Commerce. Blog is open for all to discuss and share their thoughts on EC and the experience earning money online.

EC has created many opportunities for freelancers and other to make some extra income without spending a dime.

Along with opportunities, there are scam sites also which doesn't pays for the effort made by individual to do their work.

This blog will explore and share all this benefits and limitations.

Please fill free to comment.

Regards,