Activecitizenship.co.uk is useful new tool for voluntary organisations

Grok Headline matches for Activecitizenship.co.uk is useful new tool for voluntary organisations

Organisations Should Protect
Computerized Systems

Organisations Should Protect
Computerized Systems 12/09/2003 06:08 AM
Angola Press Dec 9 2003 5:35AM ET

Disability organisations failing in
their own web site's accessibility

Disability organisations failing in
their own web site's accessibility 04/21/2004 03:39 AM
PublicTechnology.net Apr 21 2004 7:37AM GMT

Mozilla Used in 4.4 Percent of Dutch
Government Organisations

Mozilla Used in 4.4 Percent of Dutch
Government Organisations 01/07/2004 03:07 PM

Security Alert: Voluntary XSS

Security Alert: Voluntary XSS 04/09/2004 05:30 PM

This is a personal security alert against a dangerous yet increasingly popular practice which I call Voluntary XSS.  Voluntary XSS involves a website voluntarily embedding script fragments hosted by another, typically very popular, website.  Here is an example:

Voluntary XSS is dangerous because the practice builds a hub-and-spoke (or star) vulnerability network which exposes all the spoke websites to  weaknesses in the hub website.  Since active contents of 'bar.js' from the hub website in the example above is typically injected into every page served by spoke websites, penetration at the hub website allows hackers to change contents of all pages served by spoke websites instantly by replacing the content of 'bar.js' with their own script.

As to how wide spread the use of Voluntary XSS is, Google uses Voluntary XSS to display ads at Google AdSense sites and Technorati uses Voluntary XSS for blog claiming blogs.  I haven't checked Amazon and Yahoo yet, but I intend to soon.

Since this is a personal security alert, allow me to be more blunt than formal security alerts: This is serious shit folks.  By inserting those HTML fragments into your webpages, you are betting that websites hosting those HTML fragments are and will remain impenetrable.Voluntary XSS makes those key websites very attractive to hackers and I seriously doubt any website can withstand constant onslaughts by smart hackers.

My other posts on this topic:

Cross-Site Scripting Network

APWG Threat Advisory Alert on Visual Spoofing

Majority of UK organisations collaborate
but basic shortfalls could cost

Majority of UK organisations collaborate
but basic shortfalls could cost 01/05/2005 06:46 AM
Computer Weekly Jan 5 2005 11:20AM GMT

WCIT launches IT Management Programme
for arts organisations

WCIT launches IT Management Programme
for arts organisations 09/09/2004 03:06 AM
PublicTechnology.net Sep 9 2004 7:49AM GMT

The Slippery Slope of Voluntary
Environmentalism

The Slippery Slope of Voluntary
Environmentalism 09/08/2004 01:14 AM
Technology Review Sep 8 2004 5:58AM GMT

Linux gives voluntary sector a boost

Linux gives voluntary sector a boost 09/15/2004 11:09 AM
ZDNet UK Sep 15 2004 3:58PM GMT

NHS Direct Wales satisfies users, but
must work closer with other
organisations

NHS Direct Wales satisfies users, but
must work closer with other
organisations 12/12/2003 04:35 AM
PublicTechnology.net Dec 12 2003 3:14AM ET

Voluntary Porn Labeling As A Solution To
The Obscenity Question?

Voluntary Porn Labeling As A Solution To
The Obscenity Question? 09/24/2004 03:57 PM
Ed Felten is suggesting that a way to deal with the question of protecting children from seeing porn, a standardized, voluntary method of tagging content as "adult only" should be adopted. It's a simple idea. Basically add an <adultsonly> tag to HTML. It could block whole pages, or just sections of content. Browsers that don't recognize it would ignore it, but most browsers would probably add a simple filtering method. The incentive, Felten believes, is that adding that single tag would exempt sites from being charged with violating any laws related to letting children access porn. In some ways, this is similar, but much simpler, than the plan to set up a voluntary .xxx domain for porn. Legitimate porn sites would like it because it also would help people who are legitimately looking for porn find them. The adultsonly tag, beyond just being used to filter, could also be used as metadata for search engines trying to specifically find porn -- which would be a benefit for porn site operators.

UK ID card plan - intro voluntary, morph
to compulsory

UK ID card plan - intro voluntary, morph
to compulsory 11/06/2003 11:14 AM
Two most obvious first targets compulsory-voluntary?

HP Begins Voluntary Replacement Plan for
Notebooks (Reuters)

HP Begins Voluntary Replacement Plan for
Notebooks (Reuters) 06/25/2004 12:12 PM
Reuters - Hewlett-Packard Co. (HPQ.N) said on Friday it discovered certain Compaq and HP notebook personal computers had potentially faulty memory modules manufactured by a third party, which HP did not name.

Management of intellectual property in
publicly-funded research organisations:
Towards European Guidelines

Management of intellectual property in
publicly-funded research organisations:
Towards European Guidelines 09/27/2004 07:29 AM
Eur-OP Sep 27 2004 12:11PM GMT

Microsoft Adds Voluntary Advertising to
Msn's Instant Messaging

Microsoft Adds Voluntary Advertising to
Msn's Instant Messaging 04/10/2005 03:29 AM
CRM Assist Apr 10 2005 6:27AM GMT

Good practice guidance on procurement of
services from voluntary sector

Good practice guidance on procurement of
services from voluntary sector 06/10/2004 03:06 AM
PublicTechnology.net Jun 10 2004 7:36AM GMT

Blunkett to announce voluntary ID card
scheme to Commons, 12.30 today

Blunkett to announce voluntary ID card
scheme to Commons, 12.30 today 11/11/2003 05:49 AM
PublicTechnology.net Nov 11 2003 4:36AM ET

Dell low-cost SAN makes it easy and
affordable for small organisations,
workgroups to network storage

Dell low-cost SAN makes it easy and
affordable for small organisations,
workgroups to network storage 06/16/2004 03:42 AM
AME Info Jun 16 2004 7:44AM GMT

Voluntary sector information resource
website launched by Home Office

Voluntary sector information resource
website launched by Home Office 02/13/2004 03:23 AM
PublicTechnology.net Feb 13 2004 8:11AM GMT

Internet Gift Economies: Voluntary
Payment Schemes as Tangible Reciprocity

Internet Gift Economies: Voluntary
Payment Schemes as Tangible Reciprocity 12/02/2003 11:05 AM
Internet Gift Economies: Voluntary Payment Schemes as Tangible Reciprocity by Kylie J. Veale
http://firstmond ay.org/issues/issue8_12/veale/

Abstract:

Internet Gift Economies: Voluntary Payment Schemes as Tangible Reciprocity by Kylie J. Veale

The Internet today is a mix of the ‘free and the fee’, though it still remains in part a gift economy. Personal and organisational sharing of free information, products and software continues to flourish as a circle of gifts for returned intangible reward. Though a perceived lack of these rewards, due in part to an inability to quantify them, has resulted in givers seeking more for their efforts. What are their revised motivations? What now are their rewards?

Confronted with this development, I suggest their rewards are voluntary payments as forms of tangible reciprocity. This paper therefore outlines the Internet as a gift economy. It suggests a conceptual path through gift economy principles to reveal voluntary payments as tangible reciprocity. It also documents an analysis of voluntary payment schemes as evidence of operationalising tangible reciprocity. I also introduce monetary, content and purpose gifting mechanisms as tangible reciprocity.

CPSC, Segway LLC Announce Voluntary
Recall to Upgrade Software on Segway™
Human Transporters

CPSC, Segway LLC Announce Voluntary
Recall to Upgrade Software on Segway™
Human Transporters 10/28/2003 11:08 PM
CPSC, Segway LLC Announce Voluntary Recall to Upgrade Software on Segway™ Human Transporters (gizmodo.net) -- "Under certain operating conditions, particularly...

Office 2003 Tool: Local Installation
Source Tool

Office 2003 Tool: Local Installation
Source Tool 05/28/2004 01:48 AM
The Local Installation Source Tool is a wizard to help manage your Local Installation Source (LIS) on computers running Microsoft Office 2003. The LIS Tool allows you to enable or disable LIS, and to move the MsoCache folder to a new volume. This download is intended for use by customers and network administrators with LIS issues who contact Microsoft Product Support Services. Local Installation Source is a Setup feature. When a user installs Microsoft Office 2003 from a CD or a compressed CD image on the network, Setup copies any required installation files to a hidden folder on the local computer. Microsoft Windows Installer uses this local installation source to install Office, and the local source remains available for repairing, reinstalling or updating Office later on. Users can install features on demand or run Setup in maintenance mode to add new features without their original media.

Action on Internet Safety Children's
Organisations Unite On Internet Safety

Action on Internet Safety Children's
Organisations Unite On Internet Safety 04/17/2005 09:50 PM
Scoop Apr 18 2005 1:57AM GMT

How are you using the tool?

How are you using the tool? 05/18/2004 04:31 AM
I have a challenge for those who have taken the time to send a TrackBack to our previous posts about...

Six Log: How are you using the tool?

Six Log: How are you using the tool? 05/18/2004 02:45 PM
SixApart is requesting feedback .. How are you using the tool? .. Mena's Corner .. that

sixapart.com/log/2004/05/how_are_you_usi.shtml
track this site | 6 links

DMG Tool 3.0

DMG Tool 3.0 12/03/2002 11:58 PM
I decided to completely rewrite DMG Tool for a version 3.0 release. The code is so ugly it's easier to rewrite than re-work it.

The PEP tool

The PEP tool 10/31/2003 12:50 PM
New release 2.0beta1

XRF-Tool

XRF-Tool 06/26/2004 06:14 AM
Progress Developers Wanted

[tool] p0f 2.0.4 is out

[tool] p0f 2.0.4 is out 07/10/2004 05:42 PM
Michal Zalewski (Jul 10 2004)

The little tool that could (or just
might be able to)

The little tool that could (or just
might be able to) 06/17/2005 04:38 PM

Lazy Tool

Lazy Tool 01/04/2005 01:44 PM
New screenshot..

EMC revamps SAN tool

EMC revamps SAN tool 04/11/2005 05:06 PM
Kevin Violette had enough things to worry about when the University of North Carolina Wilmington recently moved a data center. The last thing he wanted to mess around on was the school's storage-area network upgrade.

OSX Ramdisk Tool 0.01

OSX Ramdisk Tool 0.01 06/24/2004 09:17 PM
A tool that creates a ramdisk.

MP3 Repair Tool v1.0

MP3 Repair Tool v1.0 08/17/2004 01:15 PM
MP3RepairTool enables you to quick and easy rescue most of your broken MP3 files. Deletes broken ID3v2 header and makes lot of files playable again. [Freeware 522 KB]

Is PPC an Essential Tool?

Is PPC an Essential Tool? 09/22/2004 01:53 PM
Source: Search Engine Guide - Is PPC now an essential marketing tool or can honest SEO techniques still win the day alone?...

MIME-tool 1.1

MIME-tool 1.1 07/23/2004 01:28 AM
A tool to construct email messages with attachments.

New Cleaning Tool Available

New Cleaning Tool Available 02/11/2004 04:21 PM
After years of suffering from the dust that slips behind my monitor's bezel, I finally discovered a way to clean the other side of my screen. WARNING: this internal scrubber is not work safe. If you'd like to give the thing a whirl, I will not be held responsible for any subsequent damage. Janet Jackson has already pre-apologized for having nothing to do with it....

NvFlash Tool 5.12

NvFlash Tool 5.12 12/29/2004 06:31 PM

The Ox Documentation Tool

The Ox Documentation Tool 02/10/2004 02:49 AM
Ox is a simple documentation tool for people who regularly work at the shell or command-prompt level: a Java program that accepts a keyword or term as input and then returns documentation for that term.

getAbsPath 1.4 (Tool)

getAbsPath 1.4 (Tool) 09/07/2004 10:08 AM
Either a C header file or a tool to convert relative paths.
Grok Description matches for Activecitizenship.co.uk is useful new tool for voluntary organisations
GrokA matches for Activecitizenship.co.uk is useful new tool for voluntary organisations

Activecitizenship.co.uk is useful new tool for voluntary organisations

The following phrases have been identified by the grok system as matching this entry: