bablashot

Kode JavaScript tertanam di halaman Web yang mencegah halaman dari yang digunakan di situs Web pihak ketiga yang menggunakan frame HTML. Kode ini mendefinisikan lokasi halaman sehingga tidak akan ditampilkan dengan benar dalam bingkai. Lihat frame . 

Sebuah framekiller (atau framebuster atau framebreaker) adalah teknik yang digunakan oleh  web applications untuk mencegah mereka  web pages dari yang ditampilkan dalam frame . Sebuah frame adalah pembagian jendela browser Web dan dapat bertindak seperti jendela kecil. Ini biasanya digunakan untuk mencegah frame dari sebuah situs web eksternal yang dimuat dari dalam frameset tanpa izin sering sebagai bagian dari clickjacking serangan.

 
Framekillers Pertama Secara historis, script framekiller pertama adalah sesederhana ini:
Logika di sini adalah untuk menampilkan halaman, tetapi memeriksa apakah lokasi atas adalah sama dengan halaman saat ini, dan mengganti puncak dengan saat ini jika tidak.
Ada banyak variasi script ini. Contoh ini adalah cross-browser yang kompatibel, menghindari benda-benda usang, dan menggunakan menggantikan yang mempertahankan back-button pengguna. Membandingkan referensi objek, restoran, diri dan lokasi langsung sedikit lebih efisien, dan ringkas.

Framekiller modern Pada tahun 2010 Gustav Rydstedt,  Elie Bursztein, Dan Boneh dan Collin Jackson menerbitkan sebuah makalah yang menyoroti keterbatasan teknik frame-penghilang saat ini dan yang diusulkan mengikuti versi perbaikan: ^[1]
Logika script ini adalah untuk menonaktifkan penyajian halaman secara default dan mengaktifkannya hanya di atas lokasi.

Pembunuh Framekiller Framekillers sederhana dapat dicegah dari bekerja dengan JavaScript berikut bersama dengan server yang merespon dengan HTTP/1.1 204 No Content , seperti yang ditemukan dalam blog ini . Hanya tempat kode berikut di frame atas. Ia bekerja karena dalam kebanyakan browser yang 204 respon HTTP akan melakukan apa-apa, berarti ia akan meninggalkan kita pada halaman saat ini. Namun upaya permintaan akan menggantikan frame penghilang sebelumnya upaya, render itu tidak berguna.

Alternatif solusi Sebuah pilihan alternatif adalah untuk memungkinkan pengguna untuk menentukan apakah akan membiarkan pekerjaan framekiller.
dan kode di bawah ini harus ditambahkan setelah tag frame:

Keterbatasan Framekiller Client-side JavaScript solusi bergantung pada browser pengguna akhir menegakkan keamanan mereka sendiri. Hal ini membuat alat yang bermanfaat, tetapi tidak dapat diandalkan, dari pelarangan halaman Anda untuk dimasukkan dalam halaman lain. Situasi berikut dapat membuat script di atas berguna:

• Agen pengguna tidak mendukung JavaScript.
• User agent mendukung JavaScript tetapi pengguna telah berubah dukungan off.
• Dukungan JavaScript pengguna agen cacat atau sebagian dilaksanakan.
• Perilaku pengguna agen dimodifikasi oleh virus atau plug-in (mungkin tanpa sepengetahuan pengguna) dengan cara yang merusak script framekiller.

Definisi: iFrame

 Definisi: XFrames

homecatalogcontacts
NoScript is Free Software: if you like it, you can support its progress :)


what is it?
what is it?featureschangelogscreenshotsforumfaqget it!

Install




NoScript is Free Software: if you like it, you can support its progress :)



Fight CLICKJACKING Now!

The NoScript Firefox extension provides extra protection for Firefox, Seamonkey and other mozilla-based browsers: this free, open source add-on allows JavaScript, Java, Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank).

NoScript also provides the most powerful anti-XSS and anti-Clickjacking protection ever available in a browser.

NoScript's unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality...

You can enable JavaScript, Java and plugin execution for sites you trust with a simple left-click on the NoScript status bar icon (look at the picture), or using the contextual menu, for easier operation in popup statusbar-less windows.
Watch the "Block scripts in Firefox" video by cnet.

Staying safe has never been so easy!
Experts will agree: Firefox is really safer with NoScript!



V. 2.6.8.6 - Friendly Security

If you find any bug or you'd like an enhancement, please report here or here. Many thanks!

Main good news
Fixed multiple ABE issues caused by the increased asynchronicity of Mozilla's platform networking (thanks barbaz and al_9x for reporting).
Fixed bugs in regexp-based embed blocking exceptions (thanks barbaz for reporting)
Improved Google AnalyticsScript Surrogates.
Fixed ClearClick incompatibility with latest Google+ based Youtube comments system.
Improved SQLXSSI detection (thanks Alex Inführ for reporting).
Fixed HTML 5 audio/video content types not blocked when loaded as top-level documents (thanks al_9x for reporting)
The anti-XSS filter now recognizes several experimental/unofficial markup items handled by Gecko (thanks .mario for reporting).
Protection against XSS filter evasion attacks exploiting Adobe Flash URL parsing and charset handling bugs (thanks Soroush Dalili for reporting)
ClearClick compatibility with latest browser built-in Click To Play implementation (Bug 889228).
Mimetype whitelisting through the noscript.allowedMimeRegExp preference now work with the WebGL pseudo type (thanks Thrawn for RFE)
Improved "fixable" JavaScript links detection (thanks "asdf" for RFE).
More usable embedding placeholders, e.g. for Youtube movies on Facebook.
Enhanced site compatibility of the anti-XSS filter.
Improved per-window private browsing support.
Improved out-of-the-box compatibility with Microsoft's email services (thanks Raùl Duràn of Microsoft for help).
Google Analytics web bugs are blocked automatically, unless google-analytics.com has been explicitly whitelisted (better than No Google Analytics, because NoScript blocks every cross-site request to GA, no matter the type or the file name).
Mark as untrusted button on the site info page (thanks SwissBIT for RFE)
Allow/Forbid/Mark as untrusted icons on the site info buttons.
Several XSS filter enhancements, thanks to Masato Kinugawa's research.
New "Security Downgrade Warning" suggests blacklist mode as a better option than uninstalling, in order to retain scripting-unrelated protections.
Improved Google Analytics Surrogate, makes more sites work correctly with google-analytics.com blocked.
Added navigator.doNotTrack property support.
Added new fake mimetype placeholder "FRAME" to match FRAMEs and IFRAMES with the noscript.allowedMimeRegExp preference for selecting blocking exceptions.
Holding the left mouse button down on an absolutely positioned page element and hitting the DEL key will remove it if scripts are disabled (useful to forcibly kill in-page popups). This feature can be disabled by setting the noscript.eraseFloatingElements about:config preference to false.
Right-clicking on NoScript menu items copy site domains to the clipboard (useful for reporting and investigating sites, thanks Tom T. for RFE)
Browserid.org has been added to the default whitelist.
"Click to play" protection against WebGL exploitation, now also on whitelisted sites (can be enabled in NoScript Options|Embeddings)
Security and Privacy Info page is shown whenever you middle-click on sites exposed by NoScript's UI, either in the menus or in the Whitelist options tab.
Middle clicking NoScript's toolbar button temporarily allows all on current page. More in the changelog...
Experts do agree...

08/06/2008, "I'd love to see it in there." (Window Snyder, "Chief Security Something-or-Other" at Mozilla Corp., interviewed by ZDNet about "adding NoScript functionality into the core browser").

03/18/2008, "Consider switching to the Firefox Web browser with the NoScript plug-in. NoScript selectively, and non-intrusively, blocks all scripts, plug-ins, and other code on Web pages that could be used to attack your system during visits" (Rich Mogull on TidBITS, Should Mac Users Run Antivirus Software?).

11/06/2007, Douglas Crockford, world-famous JavaScript advocate and developer of JSON (one of the building blocks of Web 2.0), recommends using NoScript.

03/16/2007, SANS Internet Storm Center, the authoritative source of computer security related wisdom, runs a front-page Ongoing interest in Javascript issues diary entry by William Stearns just to say "Please, use NoScript" :)
Actually, NoScript has been recommended several times by SANS, but it's nice to see it mentioned in a dedicated issue, rather than as a work-around for specific exploits in the wild. Many thanks, SANS!

05/31/2006, PC World's The 100 Best Products of the Year list features NoScript at #52!

Many thanks to PC World, of course, for grokking NoScript so much, and to IceDogg who kindly reported these news...
In the press...
CNET News: "Giorgio Maone's NoScript script-blocking plug-in is the one-and-only Firefox add-on I consider mandatory." (March 9, 2009, Dennis O'Reilly, Get a new PC ready for everyday use)
Forbes: "The real key to defeating malware isn't antivirus but approaches like Firefox's NoScript plug-in, which blocks Web pages from running potentially malicious programs" (Dec 11, 2008, Andy Greenberg, Filter The Virus Filters).
PC World: Internet Explorer 7 Still Not Safe Enough because it doesn't act like "NoScript [...] an elegant solution to the problem of malicious scripting" (cite bite)
New York Times: "[...] NoScript, a plug-in utility, can limit the ability of remote programs to run potentially damaging programs on your PC", (Jan 7, 2007, John Markoff, Tips for Protecting the Home Computer).
PC World's Ten Steps Security features using NoScript as step #6. (cite bite)
The Washington Post security blog compares MSIE "advanced" security features (like so called "Zones") to Firefox ones and recommends NoScript adoption as the safest and most usable approach. (cite bite)
Giorgio Maone
what is it?featureschangelogscreenshotsforumfaqget it!privacy

Copyright © 2004-2013 InformAction - All rights reserved

A 6.3-magnitude earthquake struck early Sunday off Indonesia, according to the U.S. Geological Survey.

CleanPrint® is an economically and ecologically friendly print tool that saves you paper, ink, and money while making your output look great. CleanPrint is activated by clicking the CleanPrint Browser Tool instead of the print button next to an article on a website. Before printing or saving content you can add a note, eliminate images, increase or decrease font size, and eliminate text to save ink and paper.

** CleanPrint Browser Tool is available for IE7+ (IE7 must have Flash installed), Firefox 3.5+, Chrome 2+, Safari 4+, and iPad.
By installing CleanPrint you agree to the our terms of service.

Use CleanPrint everywhere on the web with the CleanPrint browser tool. Choose your web browser below:

Have a website or blog? Get the CleanPrint button for your website or blog here

A music-based training program that challenges both the body and the mind may improve brain function and mood among seniors, suggests a new study from Switzerland.

"The take-home message is that 6-months of music-based multitask training (i.e., Jaques-Dalcroze eurhythmics) - a specific training regimen which was previously shown to be effective in improving gait and reducing falls - has beneficial effects on cognition and mood in older adults," Dr. Mélany Hars, of Geneva University Hospitals, told Reuters Health in an email.

Jacques-Dalcroze eurhythmics was developed in the early part of the 20th century by the Swiss composer Emile Jaques-Dalcroze as a way to better understand music through movement. It is practiced worldwide, particularly in the fields of music, theater, dance and therapy, according to Hars.

A typical Jacques-Dalcroze session involves participants adapting their movements to the rhythmic changes of improvised piano music. In Hars' study, the participants were challenged to perform specific multitasking skills, such as walking to the rhythm of a piano while handling a percussion instrument and responding to changes in the piano's rhythm.

The study participants were also asked to perform quick reaction exercises, such as starting or stopping to walk or changing their walking speed on command, as well as matching their steps to the long or short music notes that were played.

The study included 134 men and women aged 75 years, on average, who were all at increased risk for falls but who did not live in a nursing home or other facility. These seniors were randomly divided into a study group that attended hour-long music-based multitasking sessions once a week for 25 weeks or a comparison group that just kept up their normal lifestyles and did not attend training sessions.

At the beginning of the study, both groups underwent a battery of tests for mental function and mood.

After six months, the 66 adults who participated in the music training sessions showed improved cognitive function, particularly on a test of their degree of sensitivity to interference, and decreased anxiety, compared to the group that had not done the training.

"This may have implications for everyday life function," since many situations require individuals to pay selective attention to one thing while blocking out something else, such as distracting surroundings, Hars and her coauthors write in the journal Age and Ageing.

How the training might be responsible for the improvements is unknown, Hars acknowledges.

However, she noted, "some studies suggest that music can mitigate effects of the aging brain… (and) some studies have revealed that specific physical exercise regimens may enhance (not only) cognitive performance but also brain function or brain structure of older adults."

Jacques-Dalcroze eurhythmics puts it all together in a program that combines gait, balance, movement coordination and flexibility training while also engaging attention and memory skills, Hars said.

This "is likely to engage multiple brain regions through a combination of music, rhythm, and exercise," Hars said.

Whether the training is also linked with fewer falls or improved walking ability in these seniors remains to be studied, the researchers point out in their report.