Sign In
New User? Sign Up
svenskfilmhistoria · Swedish Film
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
You can set the sort order of messages? Just click on the link in the date column. Your preferences will be remembered, so you don't have to do it again when you return.

Messages

  Messages Help
Advanced
Fwd: 20 Newsletters: 26 new articles   Message List  
Reply | Forward Message #9 of 27 |


Note: forwarded message attached.


Never miss a thing. Make Yahoo your homepage.

Tue Jan 22, 2008 9:59 pm

lord02141
Offline Offline
Send Email Send Email

 

Your email updates, powered by FeedBlitz

 
Here are the latest updates for lord02141@...

Updates from:


"del.icio.us/scottlord" - 1 new article

  1. scottlord Swedish and Silent Film
  2. More Recent Articles
  3. Search del.icio.us/scottlord

scottlord Swedish and Silent Film


x2022; Email to a friend x2022; Article Search x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "del.icio.us/scottlord" or change subscription settings

Scott Lord

"Scott Lord" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search Scott Lord

Silent 4

Get the x3C;a href=x22;http://www.widgetbox.com/widget/youtube-playlist-flashx22;x3E;YouTube Playlistx3C;/ax3E; widget and many other great free widgets at x3C;a href=x22;http://www.widgetbox.comx22;x3E;Widgetboxx3C;/ax3E;!x3C;img style=x22;visibility:hidden;width:0px;height:0px;x22; border=x22;0x22; width=x22;0x22; height=x22;0x22; src=x22;http://runtime.widgetbox.com/syndication/track/a814bde8-1a2f-4ca5-b1f5-275afb13e1b2.gifx22; /x3E;

x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "Scott Lord" or change subscription settings

"del.icio.us/network/scottlord" - 1 new article

  1. [from scottlord] scottlord Swedish and Silent Film
  2. More Recent Articles
  3. Search del.icio.us/network/scottlord

[from scottlord] scottlord Swedish and Silent Film


x2022; Email to a friend x2022; Article Search x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "del.icio.us/network/scottlord" or change subscription settings

Google Base - scottlord

"Google Base - scottlord" - 5 new articles

  1. scottlord Bloglines - Co-op Engineer
  2. scottlord blogspot - Co-op Engineer
  3. scottlord subscriptions - Co-op Engineer
  4. Stockholm, Sweden - Co-op Engineer
  5. scottlord blogspot search - Co-op Engineer
  6. More Recent Articles
  7. Search Google Base - scottlord

scottlord Bloglines - Co-op Engineer


scottlord Bloglines
Search engine terms: scottlord, swedish, film,...    Language: english    Non-Profit selected: No   
scottlord Bloglines.
http://www.google.com - posted on Jan 18 by Co-op Engineer

x2022; Email to a friend x2022; Related x2022; x2022;


scottlord blogspot - Co-op Engineer


scottlord blogspot
Language: english    Non-Profit selected: No    Allows volunteers: Yes   
Swedish film blog.
http://www.google.com - posted on Jan 18 by Co-op Engineer

x2022; Email to a friend x2022; Related x2022; x2022;


scottlord subscriptions - Co-op Engineer


scottlord subscriptions
Language: english    Non-Profit selected: No    Allows volunteers: Yes   
updated Swedish and Silent Film RSS.
http://www.google.com - posted on Jan 18 by Co-op Engineer

x2022; Email to a friend x2022; Related x2022; x2022;


Stockholm, Sweden - Co-op Engineer


Stockholm, Sweden
Search engine terms: swelance, stockholm,...    Language: english    Non-Profit selected: No   
Search Sweden.
http://www.google.com - posted on Jan 18 by Co-op Engineer

x2022; Email to a friend x2022; Related x2022; x2022;


scottlord blogspot search - Co-op Engineer


scottlord blogspot search
Language: english    Non-Profit selected: No    Allows volunteers: Yes   
Swedish Film blog.
http://www.google.com - posted on Jan 18 by Co-op Engineer

x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "Google Base - scottlord" or change subscription settings

"IEBlog" - 1 new article

  1. Using Frames More Securely
  2. More Recent Articles
  3. Search IEBlog

Using Frames More Securely

HTML frames (FRAMESETs and IFRAMEs) are a feature of all modern web browsers that enable content from multiple pages to be displayed within a single view. Historically, frames were primarily used to enable partial page updates, where page navigation was contained in one frame, and page content was contained in another. Over time, use of frames expanded to include advertising, mashup, and AJAX scenarios. Today, the majority of popular websites use IFRAMEs for myriad reasons.

From a security point of view, frames can help increase the security of web applications by creating isolation between content delivered from different sources. For instance, a Web mail account (http://mail.example.com) might choose to render HTML email within an IFRAME (http://untrusted.example.com/getmsg?msgid=1234) to ensure that any script in the HTML mail cannot execute in the context of the Web mail application delivered from mail.example.com. Instead, any script would execute in the context of the “untrusted.example.com” domain. This isolation prevents tampering with the Web mail UI, leaking user credentials and cookies, snooping on other messages, etc. 

For frames rendered in Internet Explorer 6 and later, security can be further increased by setting the frame’s SECURITY attribute to the value “restricted”.  Doing so causes Internet Explorer to treat the contents of the frame, regardless of their source, as content that should be rendered in the Restricted Sites Security Zone.  Frames running in the Restricted Sites zone cannot run script, invoke ActiveX controls, redirect to other sites, and so on. This technique is particularly useful in cases where the frame’s content cannot be assumed to be trustworthy (as in the case of web mail scenario above).

However, it is important to understand that HTML frames are not a security panacea. In order to remain secure, a website which chooses to include content from another website in a frame must generally trust that other website to be non-malicious. Otherwise, a number of security threats are exposed.

For instance, consider a web mail application containing two IFRAMEs: one that is used to display an advertisement, and one that is used to display the contents of an HTML email.

<iframe src="http://ad.example.com/rand/1234.aspx" security="restricted"></iframe>
<iframe src=" http://untrusted.example.com/getmsg?msgid=1234" security="restricted"></iframe>

In the best case, both frames are tagged with the SECURITY=”restricted” attribute to ensure that the HTML email or the advertisement cannot contain any script which might be used to navigate the user away from the web mail page to a malicious site (e.g. <SCRIPT>window.location="http://evil.example.net/malice.htm"</SCRIPT>).

The user will likely recognize that the email frame contains content of questionable trustworthiness. While the email may contain a phishing attack or other malicious content, it is unlikely that the user will mistake such content as a part of the web mail application itself. In contrast, in the advertising case, unless there is an indication around the IFRAME indicating that the contents are an advertisement, the user could be fooled into taking an unsafe action. For instance, an ad banner could be crafted to match the web mail user-interface, containing text that suggests that there’s a system outage and the user should email their name and password to a given address. The user may mistake the content as a trusted message from the web mail application, and undertake an unsafe action.

Therefore, Web developer best practices for using frames can be summarized as:

  • If possible, do not include frames containing content from unknown/untrusted sites.
  • If possible, use the SECURITY=”restricted” attribute to reduce the privileges of content in the IFRAME.
  • If it is not already obvious to users, clearly mark any frames containing untrusted content.

Eric Lawrence
Program Manager


x2022; Email to a friend x2022; Article Search x2022; Related x2022; View comments x2022; Track comments x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "IEBlog" or change subscription settings

"scottlord- Swedish Film and the Svenska Filminstit" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search scottlord- Swedish Film and the Svenska Filminstit

Silent 4


x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "scottlord- Swedish Film and the Svenska Filminstit" or change subscription settings

"scottlord- Swedish Film and the Svenska Filminstit" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search scottlord- Swedish Film and the Svenska Filminstit

Silent 4


x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "scottlord- Swedish Film and the Svenska Filminstit" or change subscription settings

"del.icio.us/subscriptions/scottlord" - 1 new article

  1. scottlord Swedish and Silent Film
  2. More Recent Articles
  3. Search del.icio.us/subscriptions/scottlord

scottlord Swedish and Silent Film


x2022; Email to a friend x2022; Article Search x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "del.icio.us/subscriptions/scottlord" or change subscription settings

"del.icio.us/network/scottlord" - 1 new article

  1. [from scottlord] scottlord Swedish and Silent Film
  2. More Recent Articles
  3. Search del.icio.us/network/scottlord

[from scottlord] scottlord Swedish and Silent Film


x2022; Email to a friend x2022; Article Search x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "del.icio.us/network/scottlord" or change subscription settings

"del.icio.us/scottlord/svenskafilminstitutet" - 1 new article

  1. scottlord Swedish and Silent Film
  2. More Recent Articles
  3. Search del.icio.us/scottlord/svenskafilminstitutet

scottlord Swedish and Silent Film


x2022; Email to a friend x2022; Article Search x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "del.icio.us/scottlord/svenskafilminstitutet" or change subscription settings

"IEBlog" - 1 new article

  1. Using Frames More Securely
  2. More Recent Articles
  3. Search IEBlog

Using Frames More Securely

HTML frames (FRAMESETs and IFRAMEs) are a feature of all modern web browsers that enable content from multiple pages to be displayed within a single view. Historically, frames were primarily used to enable partial page updates, where page navigation was contained in one frame, and page content was contained in another. Over time, use of frames expanded to include advertising, mashup, and AJAX scenarios. Today, the majority of popular websites use IFRAMEs for myriad reasons.

From a security point of view, frames can help increase the security of web applications by creating isolation between content delivered from different sources. For instance, a Web mail account (http://mail.example.com) might choose to render HTML email within an IFRAME (http://untrusted.example.com/getmsg?msgid=1234) to ensure that any script in the HTML mail cannot execute in the context of the Web mail application delivered from mail.example.com. Instead, any script would execute in the context of the “untrusted.example.com” domain. This isolation prevents tampering with the Web mail UI, leaking user credentials and cookies, snooping on other messages, etc. 

For frames rendered in Internet Explorer 6 and later, security can be further increased by setting the frame’s SECURITY attribute to the value “restricted”.  Doing so causes Internet Explorer to treat the contents of the frame, regardless of their source, as content that should be rendered in the Restricted Sites Security Zone.  Frames running in the Restricted Sites zone cannot run script, invoke ActiveX controls, redirect to other sites, and so on. This technique is particularly useful in cases where the frame’s content cannot be assumed to be trustworthy (as in the case of web mail scenario above).

However, it is important to understand that HTML frames are not a security panacea. In order to remain secure, a website which chooses to include content from another website in a frame must generally trust that other website to be non-malicious. Otherwise, a number of security threats are exposed.

For instance, consider a web mail application containing two IFRAMEs: one that is used to display an advertisement, and one that is used to display the contents of an HTML email.

<iframe src="http://ad.example.com/rand/1234.aspx" security="restricted"></iframe>
<iframe src=" http://untrusted.example.com/getmsg?msgid=1234" security="restricted"></iframe>

In the best case, both frames are tagged with the SECURITY=”restricted” attribute to ensure that the HTML email or the advertisement cannot contain any script which might be used to navigate the user away from the web mail page to a malicious site (e.g. <SCRIPT>window.location="http://evil.example.net/malice.htm"</SCRIPT>).

The user will likely recognize that the email frame contains content of questionable trustworthiness. While the email may contain a phishing attack or other malicious content, it is unlikely that the user will mistake such content as a part of the web mail application itself. In contrast, in the advertising case, unless there is an indication around the IFRAME indicating that the contents are an advertisement, the user could be fooled into taking an unsafe action. For instance, an ad banner could be crafted to match the web mail user-interface, containing text that suggests that there’s a system outage and the user should email their name and password to a given address. The user may mistake the content as a trusted message from the web mail application, and undertake an unsafe action.

Therefore, Web developer best practices for using frames can be summarized as:

  • If possible, do not include frames containing content from unknown/untrusted sites.
  • If possible, use the SECURITY=”restricted” attribute to reduce the privileges of content in the IFRAME.
  • If it is not already obvious to users, clearly mark any frames containing untrusted content.

Eric Lawrence
Program Manager


x2022; Email to a friend x2022; Article Search x2022; Related x2022; View comments x2022; Track comments x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "IEBlog" or change subscription settings

"scottlord" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search scottlord

Silent 4


x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "scottlord" or change subscription settings

"Support Forums : Thread List - Silent Films" - 2 new articles

  1. Happy birthday Ed!
  2. Noted Film Archivist is the January Guest Star at the Silver Screen Oasis
  3. More Recent Articles
  4. Search Support Forums : Thread List - Silent Films

Happy birthday Ed!

Happy birthday!
...

x2022; Email to a friend x2022; Related x2022; x2022;


Noted Film Archivist is the January Guest Star at the Silver Screen Oasis

We are pleased to announce that film preservationist David Shepard will be joining us at Silver Screen Oasis from January 14th-18th, 2008.
...

x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "Support Forums : Thread List - Silent Films" or change subscription settings

"scottlord- Swedish Film and the Svenska Filminstit" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search scottlord- Swedish Film and the Svenska Filminstit

Silent 4


x2022; Email to a friend x2022; Related x2022;


More Recent Articles



Click here to safely unsubscribe now from "scottlord- Swedish Film and the Svenska Filminstit" or change subscription settings

"Bloglines Search: "scottlord lang:any"" - 1 new article

  1. scottlord Swedish and Silent Film
  2. More Recent Articles
  3. Search Bloglines Search: "scottlord lang:any"

scottlord Swedish and Silent Film

 bookmark this on del.icio.us - posted by scottlord to SvenskaFilminstitutet SwedishFilm SvenskaFilminstitutet+scottlord+Swedish...

x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "Bloglines Search: "scottlord lang:any"" or change subscription settings

"Google Blog Search: scottlord" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search Google Blog Search: scottlord

Silent 4

Get the YouTube Playlist widget and many other great free widgets at Widgetbox!

x2022; Email to a friend x2022; Related x2022; x2022;


More Recent Articles



Click here to safely unsubscribe now from "Google Blog Search: scottlord" or change subscription settings

"scottlord" - 1 new article

  1. Silent 4
  2. More Recent Articles
  3. Search scottlord

Silent 4


x2022; Email to a friend x2022; Related x2022; x2022;



(Message over 64k, truncated.)
Sat Jan 19, 2008 9:49 am

feedblitz@...
Send Email Send Email
Forward
Message #9 of 27 |
Expand Messages Author Sort by Date

Note: forwarded message attached. http://scottlord-swedish-silent-film-swicki.eurekster.com...
scott lord
lord02141
Offline Send Email
Jan 22, 2008
9:59 pm
Advanced

Copyright © 2009 Yahoo! UK. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help