feed on feeds - 2013/08/07 - items 0 to 15

USA har förnyat ett importförbud på ädelstenar från Burma i hopp om att strypa en inkomstkälla för den mäktiga militären, sedan mer omfattande sanktioner hävts.

Lena Hennel: ”Moderaternas dominans är redan massiv”.

Zothecula writes "A team at the Harvard School of Engineering and Applied Sciences (SEAS) has come up with a promising new way to create 3D images from a stationary camera or microscope with a single lens. Rather than expensive hardware, the technique uses a mathematical model to generate images with depth and could find use in a wide range of applications, from creating more compelling microscopy imaging to a more immersive experience in movie theaters."

Read more of this story at Slashdot.

One of the security relevant features that arrived in the latest version of Firefox was the blocking of mixed active content. In the past, you may have seen popups warnings in your browser alerting you of "mixed content". This refers to pages that mix and match SSL and non SSL content. While this is not a good idea even for passive content like images, the real problem is active content like script. For example, a page may download javascript via HTTP but include it in an HTTPS page. The javascript could now be manipulated by someone playing man in the middle. The modified javascript can then in turn alter the HTML page that loaded it. After all we are using the HTML to load the javascript, so we will not have any "origin" issues.

Firefox 23 refined how it deals with "mixed ACTIVE content". If an HTML page that was loaded via HTTPS includes active content, like javascript, via HTTP, then Firefox will block the execution of the active content.

I setup a quick test page to allow you to compare browsers. The first page https://isc.sans.edu/mixed.html just includes two images. One is loaded via https and one via http. The second page, https://isc.sans.edu/mixed2.html does include some javascript as well. If the javascript executes, then you should see the string "The javascript executed" under the respective lock image.

For more details, see Google's page about this feature:

https://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Twitter

(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

45 kilo tung pytonorm hade ihjäl barnen medan de sov.

ananyo writes "Francis Collins, director of the National Institutes of Health, has brokered a deal with the family of Henrietta Lacks to release the genetic sequence of the HeLa cell line to researchers. The HeLa cell line was established in 1951 from a biopsy of a cervical tumour taken from Henrietta Lacks, a working-class African-American woman living near Baltimore. The cells were taken without the knowledge or permission of her or her family, and they became the first human cells to grow well in a lab. They contributed to the development of a polio vaccine, the discovery of human telomerase and countless other advances. Controversy erupted earlier this year after researchers published the sequence without the permission of the Lacks family. In a Q&A with the journal Nature, Collins explains how the deal was reached."