[DOM Based Cross Site Scripting or XSS of the Third Kind] Web Security Articles - Web Application Security Consortium DOM Based Cross Site Scripting or XSS of the Third KindA look at an overlooked flavor of XSS By Amit Klein [TEXT] size: 22k (MD5 SUM: 2285b3e1e8c471ce4d966958213e47c2) [HTML] size: 42k (MD5 SUM: 237cae7486922ce7c7580ffee3fcca30) Summary We all know what Cross Site Scripting (XSS) is, right? Application developers and owners need to understand DOM Based XSS, as it represents a threat to the web application, which has different preconditions than standard XSS. Introduction The reader is assumed to possess basic knowledge of XSS ([1], [2], [3], [4], [8]). Example and Discussion Before describing the basic scenario, it is important to stress that the techniques outlined here were already demonstrated in public (e.g. [5], [6] and [7]). The prerequisite is for the vulnerable site to have an HTML page that uses data from the document.location or document.URL or document.referrer (or any various other objects which the attacker can influence) in an insecure manner. <HTML> <TITLE>Welcome! Notes:1. 2.
Review: USB mobile phone charge cables (and other daft things to do with USB sockets) Greetings, road warriors. Picture this. You've got a perfectly serviceable laptop with a not-yet-flat big fat battery pack, but that's no use to you, right? Enter these things. The computer doesn't notice when its USB ports are used this way, because there's nothing connected to the data contacts - only the power supply ones. Using a USB port as nothing but a five volt power supply is like using a rifle as a club, but hey, you've got 'em. One of the charge cords has a barrel plug that suits Nokia 8850, 8210 and 3210 phones - or various other things with the same 3.5mm centre-positive barrel socket that can run from five volts. The other charge cord's got the more complicated clip-on connector that suits the Motorola v3688. The cords cost $AU29.70 each, delivered in Australia, from Aus PC Market. There's not a lot more to be said about the cables. USB juice To make your own USB-powered gadget, you need at least a Type A plug. Crunching numbers
News - UCD library joins Second Life Posted: 27 June 2007 Second life is a 3D online digital world imagined, created and owned by its residents. It is currently inhabited by over seven million people from across the globe. Recognising that this online digital world offers a unique opportunity to extend the boundaries of traditional library services, the UCD James Joyce Library has established itself as the first Irish library in Second Life. UCD Library in Second Life At present, there are over 40 libraries in Second Life. “We’ve had instant messaging and blogs for quite some time now, so we thought that this virtual world might offer another useful compliment to the provision of traditional library services,” says Cathal McCauley from UCD Library Services. At the Second Life branch of the UCD Library you can search web resources using a virtual PC, consult several e-books, view library presentations, complete a visitor survey, leave comments and suggestions, and even watch Sky News. >> More News and Events << Back to Home
Design Multilingual Website: A Beginner’s Guide | Web 2.0 The ‘look and feel‘ of a website is the cornerstone of any successful online venture. But the very nature of the internet means that the instant you upload your carefully constructed pages onto the World Wide Web, you’re global. Image: via YukoTVXQ Indeed, regardless of whether you intend to make buckets of cash from your website or simply build a strong international following online, there are numerous aspects of your site’s design you should consider from the start, to ensure it’s flexible and adaptable to international requirements. 1. Image: via subgrafik For those more inclined towards the front-end design aspect of websites than the ‘behind the scenes’ system-related aspects, consider this technical truism: computers deal with numbers, not letters. Indeed, letters and other characters are displayed by having a number designated to each one through a system of encoding. Unicode provides a unique number for every character, regardless of platform, program or language. 2. 3. 4. 5.
WeaveZine: Summer 2008: Cover Top Ten 2.0 Tools – 2010 « John Steltz-Teacher/Author I am finishing my 14th year as an English-Language Arts teacher of students. I have grown more as an educator in this one academic year than in the lasGet Shortlinkt five years combined. I should really be more specific; I was on paternity leave for six weeks in November and December, so the new growth really didn’t begin until the New Year began. Through the assistance, encouragement, and on-going support of my colleague, Jessica (@jbrogley for Twitter followers), I have expanded my professional horizons to the vast frontier of technology. enough about her confidence building personality, her willingness to help, and her wide range of Web 2.0 knowledge. It began with Twitter. Writing is a passion of mine and I was searching for an efficient way of sharing my writing with more people. Jessica sent me a link, maybe even through Twitter, to a Wiki that listed a plethora of Web 2.0 tools to for students (I consider myself a student too) to use, CoolToolsforSchools. 1. 2. 3. 4. 5. 6. 7. 8.
419 BAITER - Links When I first started scambaiting, I was inspired by a handful of sites. Unfortunately, a few of these sites have since vanished. I have listed the ones that remain. The Adventures of Wendy Willcox - I managed to locate this great story and thought, "Yeah, I could do that". The 419 Game - Ebenezer Codpiece is back. What's the Bloody Point? After my first foray into this growing internet sport, I found many more sites devoted to scambaiting. 419 Eater - Claims to be the world's largest organized group of scambaiters. Scam-o-Rama - The operators of this site don't do any scambaiting themselves. Nigerian Money Scams - The Nigerian Letters - J. The Brad Christensen Exhibit - Hilarious scambaiting here, this guy even makes his scammers laugh, though not for long. theScamBaiter.com - Home of "Anus Laptops". www.scambuster419.co.uk - "Gilbert Murray" is one of the best waster of the scammers' time I've seen. Ebola Monkeyman - More hilarious scambaits as well as other related stuff. Vladdio...
Magic cast-on for toe-up socks You have cast one stitch on to needle #1. 5. Bring needle #2 over the yarn tail on your thumb, around and under the yarn and back up, making a loop around needle #2. Pull the loop snug around the needle. You have cast one stitch on to needle #2. There are now two stitches on needle #2 Ñ the stitch you just cast on plus the anchor loop. The top yarn strand always wraps around needle #1 (the bottom needle), and the bottom yarn strand always wraps around needle #2 (the top needle). 6. 7. 8. In this picture, a total of 20 stitches, or 10 stitches on each needle, have been cast on. Turn back to the right side to begin knitting. 9. Knit the row of stitches from needle #1. You will see a row of stitches appear between the two needles. 10. Be careful! You have completed one round and are back where you started. Note: Do the stitches between the needles appear too loose or "sloppy?" There are two rows of stitches between the needles now. Round 3: K all stitches on both needles (no decreases).